Ahoj, prosím o kontrolu mojí mašinky.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-05-2022
Ran by Jiri (administrator) on DESKTOP-SKINTD9 (13-05-2022 12:45:17)
Running from C:\Users\Jiri\Downloads
Loaded Profiles: Jiri
Platform: Microsoft Windows 10 Home Version 21H2 19044.1706 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\AvastBrowserCrashHandler.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\AvastBrowserCrashHandler64.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <4>
(C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\FPSRunner32.exe
(C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\PMRunner32.exe
(C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\x64\FPSRunner64.exe
(C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\x64\PMRunner64.exe
(C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe ->) (Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Cortex\Cef\CefSharp.BrowserSubprocess.exe
(C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe ->) (Razer USA Ltd. -> Razer) C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe ->) (Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe <2>
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
(C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe ->) (Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
(C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe ->) (Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\CefSharp.BrowserSubprocess.exe <2>
(C:\Program Files\AVAST Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Discord Inc. -> Discord Inc.) C:\Users\Jiri\AppData\Local\Discord\app-1.0.9004\Discord.exe <6>
(E:\Plarium\Plarium\PlariumPlay\7.0.0-0.0.0\PlariumPlay.exe ->) (Plarium Global Ltd -> ) E:\Plarium\Plarium\PlariumPlay\7.0.0-0.0.0\PlariumPlayInfo.exe
(explorer.exe ->) () [File not signed] C:\Users\Jiri\AppData\Local\PoeLurker\app-1.17.4\PoeLurker.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <10>
(explorer.exe ->) (Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\APO0520Drv\Drivers\x64\THXHelper0520.exe
(explorer.exe ->) (Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\THXVAD\Drivers\x64\THXHelper22AD.exe
(explorer.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation - Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel(R) Driver & Support Assistant -> Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSATray.exe
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Plarium Global Ltd -> Plarium) E:\Plarium\Plarium\PlariumPlay\7.0.0-0.0.0\PlariumPlay.exe <6>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel(R) Driver & Support Assistant -> Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel(R) Small Business Advantage -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage Next\SbaService.exe
(services.exe ->) (Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
(services.exe ->) (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_c0e159863e7afdde\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Plarium Global Ltd -> ) E:\Plarium\Plarium\PlariumPlay\7.0.0-0.0.0\PlariumPlayClientService\PlariumPlayClientService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
(services.exe ->) (Razer USA Ltd. -> THX) C:\Program Files (x86)\Razer\THXService\Drivers\x64\THXService.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Ravaga) C:\Program Files\WindowsApps\13746Ravaga.CryptoChart_1.5.104.0_x64__bt3jc00cvcvtp\CryptoCoins.UWP.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-07-27] (Intel Corporation - Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [208152 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [17652344 2017-06-27] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [THX22adHelper] => C:\Program Files (x86)\Razer\THXVAD\Drivers\x64\THXHelper22ad.exe [386008 2019-09-18] (Razer USA Ltd. -> )
HKLM\...\Run: [THX0520Helper] => C:\Program Files (x86)\Razer\APO0520Drv\Drivers\x64\THXHelper0520.exe [386008 2019-09-18] (Razer USA Ltd. -> )
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [19572536 2022-04-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58584 2017-05-30] (Raptr, Inc -> Raptr, Inc)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [DSATray] => C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [135928 2018-05-03] (Intel(R) Driver & Support Assistant -> Intel)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3315280 2019-09-10] (Open Source Developer, Dominik Reichl -> Dominik Reichl)
HKLM-x32\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncher.exe [267072 2021-11-25] (Razer USA Ltd. -> Razer Inc.)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <==== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <==== ATTENTION
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [Innkeeper] => C:\Users\Jiri\AppData\Local\Innkeeper\Update.exe [1888136 2017-01-23] (Curse, Inc. -> Innkeeper)
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [53540200 2019-02-08] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4279208 2022-03-14] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [AvastBrowserAutoLaunch_F9F95ADBEA5E6682F460EFBEE18CE692] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2719816 2022-04-28] (Avast Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [Plays] => C:\Users\Jiri\AppData\Local\Plays\update.exe [1945736 2019-11-29] (Plays.tv, Inc -> )
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3532928 2022-05-07] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [Spotify] => C:\Users\Jiri\AppData\Roaming\Spotify\Spotify.exe [19687400 2022-05-13] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [AMDDVR] => "C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe" (No File)
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [PlariumPlay] => E:\Plarium\Plarium\PlariumPlay\PlariumPlay --args -run-with-os (No File)
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [Discord] => C:\Users\Jiri\AppData\Local\Discord\Update.exe [1512616 2022-02-17] (Discord Inc. -> GitHub)
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [Gaijin.Net Updater] => C:\Users\Jiri\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [2374376 2020-12-03] (Gaijin Network LTD -> Gaijin)
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-18\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3532928 2022-05-07] (Razer USA Ltd. -> Razer Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\92.2.11577.159\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\101.0.4951.64\Installer\chrmstp.exe [2022-05-12] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\101.0.16113.42\Installer\chrmstp.exe [2022-05-10] (Avast Software s.r.o. -> AVAST Software)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\88.0.7980.150\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PoeLurker.lnk [2022-02-10]
ShortcutTarget: PoeLurker.lnk -> C:\Users\Jiri\AppData\Local\PoeLurker\app-1.17.4\PoeLurker.exe () [File not signed]
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {07A9A057-982C-4C1C-AD1B-5630FBC1C59D} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {1C811882-AA93-4A9E-A5D5-220D4ADAFBFD} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [1552544 2015-05-18] (ASUSTeK Computer Inc. -> ) [File not signed]
Task: {1E8C6701-33E8-4568-B755-89163A1C2774} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342080 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {1F71BCD0-AEC5-4968-9FF7-7C57BD4B16D1} - System32\Tasks\CCleanerSkipUAC - Jiri => C:\Users\Jiri\Downloads\ccsetup592\x86\CCleaner.exe [30836464 2022-04-17] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {213018A5-3FD9-49D5-991F-31FB71A398E5} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-03-01] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {24BE7D76-8B79-4B6A-ACAB-292ECF5355FF} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {27723929-D15C-42F7-97C1-7D79CE18CC0F} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {2A2D7F9C-BD0D-4B98-97A4-32D20A9E5A5F} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {4352E6BC-5DD4-4CB5-AA5A-65E2A812596D} - System32\Tasks\GPU Tweak II => C:\Program Files (x86)\ASUS\GPU TweakII\GPUTweakII.exe [6523344 2016-07-22] (ASUSTeK Computer Inc. -> TODO: <Company name>)
Task: {459CA9B0-3DDA-4F32-A0FA-61857CE34E63} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {4F624132-BA16-46D2-9D1B-89DD596A4972} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs (No File)
Task: {518ADAF5-8FB0-4DE8-9B95-8980AB956A88} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2296088 2022-03-07] (Avast Software s.r.o. -> Avast Software)
Task: {6383BF0E-063D-41A7-B585-59E85A9C92A3} - System32\Tasks\AURA => C:\Program Files (x86)\ASUS\AURA(GRAPHICS CARD)\ledcontrolservice.exe [2107904 2016-07-12] (TODO: <Company name>) [File not signed]
Task: {67FE8EEB-4855-4233-8793-158F8F795567} - System32\Tasks\{60901F75-B71E-423A-A04A-481044AB65B7} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://ui.skype.com/ui/0/7.31.0.104/cs/abandoninstall?source=lightinstaller&page=tsInstall
Task: {6CA2DACD-4C62-4A65-A08D-33254220E244} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2719816 2022-04-28] (Avast Software s.r.o. -> AVAST Software)
Task: {7926DE54-4171-42A3-9B11-3ED47CE8D52E} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
Task: {9250634F-F853-4AA6-BA83-F9A1E1601522} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {99F66722-5BFE-4176-956E-9696B4A31846} - System32\Tasks\Sstt2-TaskPlan => C:\Program Files\Gaming\YMS 3017\YMS 3017.EXE (No File)
Task: {9B13EE5E-0C84-4145-AA7A-F60B9CA9F5DB} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646344 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {9E4738BF-D9DC-4717-BE55-5AB4261BEDC3} - System32\Tasks\AsrAPPShop => C:\Program Files (x86)\ASRock Utility\APP Shop\AsrAPPShop.exe [6084360 2015-08-18] (ASROCK Incorporation -> )
Task: {B0CADCB8-47E7-49C3-B5F7-9C76AC74CE0F} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-26] (Avast Software s.r.o. -> AVAST Software)
Task: {B7950090-25BA-4531-934F-BF6E94583428} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-01-06] (Google Inc -> Google Inc.)
Task: {BA00DE9E-4526-47A5-9048-5E3ACA274AC6} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {BFFA26BF-7185-49CF-B1B2-E68AD517A6C9} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {C692B60F-D057-4760-AD87-197A2EBEB18B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {D36201BD-14E9-49CF-9038-FC4F13D83D9D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-01-06] (Google Inc -> Google Inc.)
Task: {D37DFA37-8976-4F5C-84D9-7125D06F0C8B} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4992792 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
Task: {DC6B3024-DD1D-4E37-9951-BF3A8EEC9341} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {DC70D755-B681-45BD-AC00-126A57E8DFE8} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)
Task: {E5397EBB-B811-44D9-9C1B-A7D6CDADC43C} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {E67D26FF-E9EB-43EE-9BD3-865409E1DFE3} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-26] (Avast Software s.r.o. -> AVAST Software)
Task: {F0E26B82-E6B1-4E4B-B5B7-7C0EC3682D59} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2719816 2022-04-28] (Avast Software s.r.o. -> AVAST Software)
Task: {F896C11E-1F7D-49FF-9ED9-D7853F99AB8A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 62.129.50.20 85.135.32.100
Tcpip\..\Interfaces\{51175eae-3059-4241-878a-544285686bac}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{51175eae-3059-4241-878a-544285686bac}: [DhcpNameServer] 62.129.50.20 85.135.32.100
Tcpip\..\Interfaces\{a0bbd77f-8d98-404f-835a-076304caaf0d}: [DhcpNameServer] 8.8.8.8
Edge:
=======
DownloadDir: C:\Users\Jiri\Downloads
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (AdBlock — best ad blocker) -> EdgeExtension_BetaFishAdBlock_c1wakc4j0nefm => C:\Program Files\WindowsApps\BetaFish.AdBlock_2.13.0.0_neutral__c1wakc4j0nefm [2020-01-10]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Jiri\AppData\Local\Microsoft\Edge\User Data\Default [2022-05-12]
Edge DownloadDir: Default -> C:\Users\Jiri\Downloads
Edge DefaultSearchURL: Default -> hxxps://www.google.cz/search?q={searchTerms}&ie ... utEncoding?}
Edge Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\Jiri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2022-04-25]
FireFox:
========
FF DefaultProfile: wub3vlrj.default
FF ProfilePath: C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\wub3vlrj.default [2022-04-17]
FF Extension: (Hola Free VPN Proxy Unblocker) - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\wub3vlrj.default\Extensions\jid1-4P0kohSJxU1qGg@jetpack.xpi [2019-02-20]
FF Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\wub3vlrj.default\Extensions\sp@avast.com.xpi [2019-02-20]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [2020-10-26] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [2020-10-26] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2022-04-07] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default [2022-05-13]
CHR Notifications: Default -> hxxps://poe.trade; hxxps://www.pathofexile.com
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR Extension: (BetterTTV) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2022-04-03]
CHR Extension: (uBlock Origin) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2022-04-08]
CHR Extension: (ARC Welder) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\emfinbmielocnlhgmfkkmkngdoccbadn [2018-02-07]
CHR Extension: (Dokumenty Google offline) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-04-19]
CHR Extension: (Hola Free VPN Proxy Unblocker - Best VPN) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2021-07-21]
CHR Extension: (App Runtime for Chrome (Beta)) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfaihdlpglflfgpfjcifdjdjcckigekc [2018-11-28]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [8507016 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-26] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [563024 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [563024 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-26] (Avast Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\101.0.16113.42\elevation_service.exe [1982752 2022-04-28] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56912 2021-05-31] (Avast Software s.r.o. -> AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8894752 2021-02-21] (BattlEye Innovations e.K. -> )
S3 CCleanerPerformanceOptimizerService; C:\Users\Jiri\Downloads\ccsetup592\x86\CCleanerPerformanceOptimizerService.exe [623344 2022-04-17] (Piriform Software Ltd -> )
R2 DSAService; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [22776 2018-05-03] (Intel(R) Driver & Support Assistant -> Intel)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [812520 2022-03-24] (EasyAntiCheat Oy -> Epic Games, Inc)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [288360 2021-05-10] (HP Inc. -> HP Inc.)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-06-27] (Logitech Inc -> Logitech Inc.)
R2 Plarium Play Client Service; E:\Plarium\Plarium\PlariumPlay\7.0.0-0.0.0\PlariumPlayClientService\PlariumPlayClientService.exe [99960 2022-04-21] (Plarium Global Ltd -> )
R2 Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [2029544 2022-03-31] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [464928 2022-03-31] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Chroma Stream Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe [1349688 2022-02-03] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [254224 2021-11-16] (Razer USA Ltd. -> Razer Inc)
R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [299136 2022-05-06] (Razer USA Ltd. -> Razer Inc.)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [533824 2022-02-18] (Razer USA Ltd. -> Razer Inc.)
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [291320 2021-11-25] (Razer USA Ltd. -> Razer Inc.)
R2 SbaService; C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage Next\SbaService.exe [26296 2015-08-28] (Intel(R) Small Business Advantage -> Intel Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13172752 2020-01-22] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 THXService; C:\Program Files (x86)\Razer\THXService\Drivers\x64\THXService.exe [356312 2019-09-18] (Razer USA Ltd. -> THX)
S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\Uncheater\ucldr_battlegrounds_gl.exe [6993136 2021-03-17] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [7290000 2021-04-05] (PUBG CORPORATION -> PUBG Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_c0e159863e7afdde\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_c0e159863e7afdde\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [33216 2021-12-02] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [65168 2021-08-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R1 AsrAppCharger; C:\WINDOWS\system32\DRIVERS\AsrAppCharger.sys [17192 2011-11-07] (ASROCK Incorporation -> Windows (R) Win 7 DDK provider)
S3 AsrDrv101; C:\Windows\SysWOW64\Drivers\AsrDrv101.sys [22280 2017-01-10] (ASROCK Incorporation -> ASRock Incorporation)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [36768 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [228912 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [378944 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [252984 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [100408 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [21936 2021-09-29] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42400 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [269448 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [546296 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [108888 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83968 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [855320 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [556088 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
S2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [215936 2022-04-17] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [320904 2022-04-20] (Avast Software s.r.o. -> AVAST Software)
S3 avgTap; C:\WINDOWS\System32\drivers\avgTap.sys [54888 2018-09-05] (AVG Technologies CZ, s.r.o. -> The OpenVPN Project)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-09-30] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-09-30] (Disc Soft Ltd -> Disc Soft Ltd)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-08-25] (Martin Malik - REALiX -> REALiX(tm))
S3 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [24824 2014-10-24] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R3 iriuna0; C:\WINDOWS\system32\drivers\iriuna0.sys [46976 2021-04-06] (Iriun Oy -> Windows (R) Win 7 DDK provider)
R3 iriunvid; C:\WINDOWS\System32\DriverStore\FileRepository\iriunvid.inf_amd64_e78ff291e21a1251\iriunvid.sys [162928 2021-11-27] (Iriun Oy -> Windows (R) Win 7 DDK provider)
S3 iVCam; C:\WINDOWS\system32\DRIVERS\iVCam.sys [1089440 2017-12-21] (Shanghai Yitu Information Technology Co.,Ltd. -> e2eSoft)
S3 KINONI_Wave; C:\WINDOWS\system32\drivers\kinonivad.sys [32360 2016-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-06-27] (Logitech Inc -> Logitech Inc.)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48552 2022-03-17] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
R3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [54632 2021-03-30] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_0306; C:\WINDOWS\System32\drivers\RzDev_0306.sys [54168 2020-08-24] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_0520; C:\WINDOWS\System32\drivers\RzDev_0520.sys [54088 2021-03-22] (Razer USA Ltd. -> Razer Inc)
R3 sTHXVAD; C:\WINDOWS\System32\drivers\THXVAD.sys [162184 2019-09-17] (Razer USA Ltd. -> Windows (R) Win 7 DDK provider)
R3 taphss6; C:\WINDOWS\System32\drivers\taphss6.sys [42064 2017-05-16] (AnchorFree Inc -> Anchorfree Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [2748928 2021-04-05] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-05-13 12:45 - 2022-05-13 12:45 - 000038337 _____ C:\Users\Jiri\Downloads\FRST.txt
2022-05-13 12:36 - 2022-05-13 12:36 - 002366976 _____ (Farbar) C:\Users\Jiri\Downloads\FRST64.exe
2022-05-13 12:27 - 2022-05-13 12:27 - 000000000 ____D C:\Users\Jiri\AppData\Local\mbam
2022-05-13 12:26 - 2022-05-13 12:26 - 000000000 ____D C:\Program Files\Malwarebytes
2022-05-13 12:25 - 2022-05-13 12:25 - 002443448 _____ (Malwarebytes) C:\Users\Jiri\Downloads\MBSetup-17877.17877-consumer.exe
2022-05-13 10:02 - 2022-05-13 10:02 - 000514335 _____ C:\Users\Jiri\Downloads\2919327288 (2).pdf
2022-05-13 10:01 - 2022-05-13 10:01 - 000514327 _____ C:\Users\Jiri\Downloads\2919327288 (1).pdf
2022-05-12 11:28 - 2022-05-12 11:28 - 000093696 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2022-05-12 11:28 - 2022-05-12 11:28 - 000011799 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-05-12 11:27 - 2022-05-12 11:27 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-05-12 11:22 - 2022-05-12 11:22 - 000000000 ___HD C:\$WinREAgent
2022-05-11 17:49 - 2022-05-11 17:49 - 000000223 _____ C:\Users\Jiri\Desktop\Elasto Mania.url
2022-05-11 17:49 - 2022-05-11 17:49 - 000000000 ____D C:\Users\Jiri\AppData\Local\GameAnalytics
2022-05-05 23:47 - 2022-05-05 23:47 - 000000000 ____D C:\ProgramData\WarThunder
2022-05-05 23:19 - 2022-05-05 23:19 - 000000732 _____ C:\Users\Jiri\Desktop\WarThunder.lnk
2022-05-05 23:19 - 2022-05-05 23:19 - 000000000 ____D C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder
2022-05-05 23:18 - 2022-05-05 23:18 - 011055088 _____ (Gaijin Network ) C:\Users\Jiri\Downloads\wt_launcher_1.0.3.319-nc0f2qy0a.exe
2022-05-04 20:10 - 2022-05-04 20:10 - 000000222 _____ C:\Users\Jiri\Desktop\Business Tour - Online Multiplayer Board Game.url
2022-05-04 20:10 - 2022-05-04 20:10 - 000000000 ____D C:\Users\Jiri\AppData\LocalLow\8floor
2022-04-28 11:10 - 2022-04-28 11:10 - 000001146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2022-04-28 11:10 - 2022-04-28 11:10 - 000000000 ____D C:\Program Files\PCHealthCheck
2022-04-24 14:28 - 2022-05-13 12:19 - 000000000 ____D C:\Users\Jiri\AppData\Local\Discord
2022-04-24 14:26 - 2022-04-24 14:28 - 000002269 _____ C:\Users\Jiri\Desktop\Discord.lnk
2022-04-24 14:26 - 2022-04-24 14:26 - 082992808 _____ (Discord Inc.) C:\Users\Jiri\Downloads\DiscordSetup.exe
2022-04-23 13:13 - 2022-04-23 13:13 - 000337530 _____ C:\Users\Jiri\Downloads\r.u.r..pdf
2022-04-23 01:21 - 2022-04-23 01:21 - 000000219 _____ C:\Users\Jiri\Desktop\Counter-Strike Global Offensive.url
2022-04-21 19:45 - 2022-04-21 19:45 - 000001053 _____ C:\Users\Jiri\Desktop\Raid Shadow Legends.lnk
2022-04-21 19:44 - 2022-04-21 19:44 - 000000861 _____ C:\Users\Jiri\Desktop\Plarium Play.lnk
2022-04-21 19:44 - 2022-04-21 19:44 - 000000861 _____ C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Plarium Play.lnk
2022-04-21 19:43 - 2022-04-21 19:43 - 001974104 _____ (Plarium) C:\Users\Jiri\Downloads\RaidSetup (2).exe
2022-04-21 19:36 - 2022-04-21 19:37 - 000000000 ____D C:\Users\Jiri\Desktop\gg
2022-04-21 19:33 - 2022-04-21 19:33 - 000053632 _____ (ELAN Microelectronic Corp.) C:\WINDOWS\system32\Drivers\ETDSMBus.sys
2022-04-21 19:32 - 2022-04-21 19:32 - 001151992 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2022-04-21 19:32 - 2022-04-21 19:32 - 000000000 _____ C:\WINDOWS\system32\fpfftResultsFile.txt
2022-04-21 19:31 - 2022-04-21 19:31 - 072520632 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2022-04-21 19:31 - 2022-04-21 19:31 - 047944006 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2022-04-21 19:31 - 2022-04-21 19:31 - 007178360 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 007101648 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 006270096 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 005346904 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 003676960 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2022-04-21 19:31 - 2022-04-21 19:31 - 003601384 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 003445648 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 003375928 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 003334136 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 003168296 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 003159664 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 002930072 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 002444592 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001971272 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001965064 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001787864 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001610864 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyAPOv251gm.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001598304 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001596096 _____ (Harman International Industries, Incorporated.) C:\WINDOWS\system32\HarmanAPO64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001544160 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOProp.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001516176 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001435048 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001414992 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDHF64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001382144 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001372296 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOv251.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001337544 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaeapo64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001327944 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001287504 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyAPOvlldpgm.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001259632 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOvlldp.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001195872 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001159088 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001110080 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 001094848 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorAC.sys
2022-04-21 19:31 - 2022-04-21 19:31 - 001078592 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SEHDHF32.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000964928 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000873368 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000852040 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tosasfapo64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000751208 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000734680 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000715552 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000692072 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000604704 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaemaxapo64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000541024 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000511552 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000487360 _____ (Harman International Industries, Incorporated.) C:\WINDOWS\system32\HarmanAPOUI64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000467064 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000453184 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000452640 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000448512 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000447088 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\toseaeapo64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000416424 _____ (Harman) C:\WINDOWS\system32\HMUI.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000406360 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2APIPCLL.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000392776 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000381312 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000378304 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000367520 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000366024 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\HMAPO.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000360248 _____ (Harman) C:\WINDOWS\system32\HMClariFi.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000343616 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000341056 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000341056 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000332920 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000327176 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000327176 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000315880 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000278176 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000266472 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000261144 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000261104 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000260120 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000231824 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000230608 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000220296 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000218176 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000203744 _____ (Harman) C:\WINDOWS\system32\HMHVS.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000190840 _____ (Harman) C:\WINDOWS\system32\HMEQ_Voice.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000190840 _____ (Harman) C:\WINDOWS\system32\HMEQ.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000179504 _____ (Harman) C:\WINDOWS\system32\HMLimiter.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000174848 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000158600 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000157248 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000154256 _____ (Harman) C:\WINDOWS\system32\HarmanAudioInterface.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000139664 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000122216 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000118496 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000116448 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000105208 _____ C:\WINDOWS\system32\audioLibVc.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000093808 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000090824 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000090080 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000088224 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000083528 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2022-04-21 19:31 - 2022-04-21 19:31 - 000075448 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2022-04-21 07:46 - 2022-04-21 07:46 - 000000000 ____D C:\Users\Jiri\AppData\Roaming\NVIDIA
2022-04-20 22:22 - 2022-05-13 02:00 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-04-20 22:22 - 2022-05-13 02:00 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-04-20 22:22 - 2022-05-13 02:00 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-04-20 22:22 - 2022-05-13 02:00 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-04-20 22:22 - 2022-05-13 02:00 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-04-20 22:22 - 2022-05-13 02:00 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-04-20 22:22 - 2022-05-13 02:00 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-04-20 22:22 - 2022-04-21 19:15 - 000001443 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2022-04-20 22:22 - 2022-04-20 22:22 - 000000000 ____D C:\Users\Jiri\AppData\Local\NVIDIA
2022-04-20 22:22 - 2022-04-20 22:22 - 000000000 ____D C:\Users\Jiri\ansel
2022-04-20 22:22 - 2022-04-20 22:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2022-04-20 22:22 - 2022-03-30 19:55 - 002200272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2022-04-20 22:22 - 2022-03-30 19:54 - 002859264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2022-04-20 22:22 - 2022-03-30 19:54 - 001295104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvRtmpStreamer64.dll
2022-04-20 22:22 - 2022-03-21 13:16 - 000082552 _____ C:\WINDOWS\system32\FvSDK_x64.dll
2022-04-20 22:22 - 2022-03-21 13:16 - 000071288 _____ C:\WINDOWS\SysWOW64\FvSDK_x86.dll
2022-04-20 22:22 - 2022-03-01 18:39 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2022-04-20 22:21 - 2022-05-13 12:25 - 000000000 ____D C:\ProgramData\NVIDIA
2022-04-20 22:21 - 2022-05-13 02:00 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-04-20 22:21 - 2022-05-13 02:00 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-04-20 22:21 - 2022-04-21 19:15 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2022-04-20 22:21 - 2022-04-21 19:15 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2022-04-20 22:21 - 2022-04-20 22:21 - 000000000 ____D C:\WINDOWS\system32\lxss
2022-04-20 22:21 - 2022-04-20 22:21 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2022-04-20 22:21 - 2022-03-22 00:56 - 000168656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2022-04-20 22:21 - 2022-03-22 00:56 - 000144592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2022-04-20 22:20 - 2022-03-17 18:33 - 000134832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2022-04-20 22:20 - 2022-03-17 18:33 - 000067464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
2022-04-20 22:20 - 2022-03-17 18:33 - 000048552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2022-04-20 22:20 - 2022-03-17 18:33 - 000047792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2022-04-20 22:20 - 2022-03-17 18:33 - 000043408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\NvModuleTracker.sys
2022-04-20 22:19 - 2022-04-21 19:15 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2022-04-20 22:19 - 2022-03-18 05:10 - 001905912 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2022-04-20 22:19 - 2022-03-18 05:10 - 001905912 _____ C:\WINDOWS\system32\vulkaninfo.exe
2022-04-20 22:19 - 2022-03-18 05:10 - 001478392 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2022-04-20 22:19 - 2022-03-18 05:10 - 001478392 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2022-04-20 22:19 - 2022-03-18 05:10 - 001467864 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2022-04-20 22:19 - 2022-03-18 05:10 - 001432328 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2022-04-20 22:19 - 2022-03-18 05:10 - 001432328 _____ C:\WINDOWS\system32\vulkan-1.dll
2022-04-20 22:19 - 2022-03-18 05:10 - 001209432 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2022-04-20 22:19 - 2022-03-18 05:10 - 001145616 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2022-04-20 22:19 - 2022-03-18 05:10 - 001145616 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2022-04-20 22:19 - 2022-03-18 05:07 - 000795728 _____ C:\WINDOWS\system32\nvofapi64.dll
2022-04-20 22:19 - 2022-03-18 05:07 - 000715920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2022-04-20 22:19 - 2022-03-18 05:07 - 000636504 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2022-04-20 22:19 - 2022-03-18 05:06 - 002121664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2022-04-20 22:19 - 2022-03-18 05:06 - 001600680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2022-04-20 22:19 - 2022-03-18 05:06 - 001529920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2022-04-20 22:19 - 2022-03-18 05:06 - 001175696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2022-04-20 22:19 - 2022-03-18 05:06 - 000981672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2022-04-20 22:19 - 2022-03-18 05:06 - 000712640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2022-04-20 22:19 - 2022-03-18 05:05 - 008610472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2022-04-20 22:19 - 2022-03-18 05:05 - 007713856 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2022-04-20 22:19 - 2022-03-18 05:05 - 005101536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2022-04-20 22:19 - 2022-03-18 05:05 - 002931880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2022-04-20 22:19 - 2022-03-18 05:05 - 000792232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2022-04-20 22:19 - 2022-03-18 05:05 - 000456848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2022-04-20 22:19 - 2022-03-18 05:04 - 005729728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2022-04-20 22:19 - 2022-03-18 05:03 - 000850064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2022-04-20 22:19 - 2022-03-18 05:02 - 007611808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2022-04-20 22:19 - 2022-03-18 05:02 - 006458864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2022-04-20 22:19 - 2022-03-17 18:33 - 000089337 _____ C:\WINDOWS\system32\nvinfo.pb
2022-04-20 22:17 - 2022-04-20 22:18 - 825175568 _____ (NVIDIA Corporation) C:\Users\Jiri\Downloads\512.15-desktop-win10-win11-64bit-international-dch-whql.exe
2022-04-20 17:05 - 2022-04-20 17:05 - 000000000 ____D C:\Users\Jiri\AppData\Roaming\RslHelper
2022-04-19 12:45 - 2022-04-19 12:45 - 000613127 _____ C:\Users\Jiri\Downloads\2919327288.pdf
2022-04-19 00:42 - 2022-04-19 00:42 - 000509594 _____ C:\Users\Jiri\Downloads\2182315933.pdf
2022-04-19 00:42 - 2022-04-19 00:42 - 000507149 _____ C:\Users\Jiri\Downloads\2142760208.pdf
2022-04-19 00:41 - 2022-04-19 00:41 - 000434738 _____ C:\Users\Jiri\Downloads\314278710.pdf
2022-04-19 00:40 - 2022-04-19 00:40 - 000510721 _____ C:\Users\Jiri\Downloads\2142717761 (1).pdf
2022-04-17 22:35 - 2022-04-17 22:35 - 000000000 ____D C:\Program Files\Realtek
2022-04-17 22:34 - 2022-04-21 19:31 - 006573360 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2022-04-17 22:34 - 2022-04-21 19:31 - 003843944 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2022-04-17 22:34 - 2022-04-21 19:31 - 000192888 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2022-04-17 22:34 - 2022-04-21 19:31 - 000023608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 014057256 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 013120760 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO3064.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 012986520 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO4064.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 009997848 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTAPO.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 005804772 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat
2022-04-17 22:34 - 2022-04-17 22:32 - 005774632 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 005289944 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 003299824 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 003278408 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 003153686 _____ C:\WINDOWS\system32\Drivers\rtkSSTsetting.dat
2022-04-17 22:34 - 2022-04-17 22:32 - 002826832 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 002823280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO7064.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 002190992 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 002110592 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 002050184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 001601944 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 001395760 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO6064.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 001334384 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 001211832 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 001186160 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSstCApoPropPage.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 001164336 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 001003864 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000998032 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000931624 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000923744 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000716104 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000678184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000677672 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000618184 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000589072 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.DLL
2022-04-17 22:34 - 2022-04-17 22:32 - 000574760 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000514528 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000500560 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000428232 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000340648 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000330568 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2022-04-17 22:34 - 2022-04-17 22:32 - 000118600 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2022-04-17 22:32 - 2022-04-17 22:32 - 000000000 ____D C:\Users\Jiri\Downloads\Realtek_Audio(v7647)
2022-04-17 22:31 - 2022-04-17 22:32 - 243680174 _____ C:\Users\Jiri\Downloads\Realtek_Audio(v7647).zip
2022-04-17 22:23 - 2022-04-17 22:23 - 001047216 _____ C:\Users\Jiri\Downloads\USBAudiocontroller_FirmwareUpdater_v90_r3.exe
2022-04-17 13:41 - 2022-04-17 13:41 - 000340760 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2022-04-17 13:41 - 2022-04-17 13:41 - 000215936 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2022-04-17 02:31 - 2022-04-17 02:31 - 000000000 ____D C:\ProgramData\Piriform
2022-04-17 02:28 - 2022-05-13 02:00 - 000002276 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Jiri
2022-04-17 02:28 - 2022-04-17 02:28 - 046357408 _____ C:\Users\Jiri\Downloads\ccsetup592.zip
2022-04-17 02:28 - 2022-04-17 02:28 - 000000000 ____D C:\Users\Jiri\Downloads\ccsetup592
2022-04-17 01:19 - 2022-04-17 01:19 - 032146343 _____ C:\Users\Jiri\Downloads\My Raid Recap 2022.mp4
2022-04-15 10:55 - 2022-04-15 10:55 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2022-04-15 10:55 - 2022-04-15 10:55 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2022-04-15 10:54 - 2022-04-15 10:54 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-05-13 12:45 - 2017-07-05 20:10 - 000000000 ____D C:\Users\Jiri\AppData\Roaming\discord
2022-05-13 12:45 - 2017-05-11 21:17 - 000000000 ____D C:\FRST
2022-05-13 12:35 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-05-13 12:26 - 2020-07-12 13:36 - 000007597 _____ C:\Users\Jiri\AppData\Local\resmon.resmoncfg
2022-05-13 12:06 - 2017-01-06 09:19 - 000000000 ____D C:\Program Files (x86)\Google
2022-05-13 09:58 - 2021-01-09 15:03 - 000000000 ____D C:\Users\Jiri\AppData\Roaming\Spotify
2022-05-13 09:58 - 2021-01-09 15:03 - 000000000 ____D C:\Users\Jiri\AppData\Local\Spotify
2022-05-13 02:00 - 2021-12-16 08:31 - 000003062 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3266792333-1024760777-594004968-1002
2022-05-13 02:00 - 2020-08-13 07:39 - 000003568 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-05-13 02:00 - 2020-08-13 07:39 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-05-13 02:00 - 2020-08-13 07:39 - 000003402 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-05-13 02:00 - 2020-08-13 07:39 - 000003344 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-05-13 02:00 - 2020-08-13 07:39 - 000003178 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-05-13 02:00 - 2020-08-13 07:39 - 000003042 _____ C:\WINDOWS\system32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2022-05-13 02:00 - 2020-08-13 07:39 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3266792333-1024760777-594004968-1002
2022-05-13 02:00 - 2020-08-13 07:39 - 000002482 _____ C:\WINDOWS\system32\Tasks\GPU Tweak II
2022-05-13 02:00 - 2020-08-13 07:39 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2022-05-13 02:00 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-05-13 02:00 - 2019-04-02 19:01 - 000000000 ____D C:\Program Files (x86)\Steam
2022-05-12 18:38 - 2020-08-13 07:42 - 001693410 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-05-12 18:38 - 2019-12-07 16:41 - 000716764 _____ C:\WINDOWS\system32\perfh005.dat
2022-05-12 18:38 - 2019-12-07 16:41 - 000144942 _____ C:\WINDOWS\system32\perfc005.dat
2022-05-12 18:38 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-05-12 18:34 - 2020-08-13 07:33 - 000002419 _____ C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-05-12 18:33 - 2020-08-13 07:39 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2022-05-12 18:33 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-05-12 18:33 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-05-12 18:31 - 2020-08-13 07:39 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-05-12 18:31 - 2020-08-13 07:33 - 000008192 ___SH C:\DumpStack.log.tmp
2022-05-12 18:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-05-12 18:31 - 2017-10-06 00:14 - 000000000 ____D C:\Intel
2022-05-12 18:31 - 2017-05-11 15:13 - 000000000 ____D C:\ProgramData\AVAST Software
2022-05-12 18:31 - 2017-04-12 19:13 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2022-05-12 13:42 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-05-12 13:41 - 2020-08-13 07:33 - 000443136 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-05-12 13:40 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-05-12 13:40 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-05-12 13:40 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-05-12 13:40 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-05-12 13:40 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-05-12 13:40 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-05-12 11:30 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-05-12 11:22 - 2017-01-11 13:50 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-05-12 11:20 - 2022-01-29 21:02 - 000000000 ____D C:\Program Files (x86)\dotnet
2022-05-12 11:20 - 2017-08-25 09:54 - 000000000 ____D C:\ProgramData\Package Cache
2022-05-12 11:20 - 2017-01-11 13:50 - 145501456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-05-12 08:45 - 2020-08-13 07:33 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-05-11 21:22 - 2017-01-10 18:21 - 000000000 ____D C:\Users\Jiri\AppData\Local\Battle.net
2022-05-11 15:22 - 2018-05-16 16:41 - 000000000 ____D C:\Users\Jiri\AppData\Local\D3DSCache
2022-05-11 15:21 - 2022-04-10 23:14 - 000000000 ____D C:\Users\Jiri\AppData\Roaming\Vampire_Survivors
2022-05-11 15:20 - 2022-04-10 23:14 - 000000223 _____ C:\Users\Jiri\Desktop\Vampire Survivors.url
2022-05-11 10:25 - 2020-09-06 12:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2022-05-10 10:19 - 2017-05-11 15:23 - 000000000 ____D C:\Users\Jiri\AppData\Local\AVAST Software
2022-05-09 19:54 - 2018-08-18 13:34 - 000000000 ____D C:\Users\Jiri\AppData\Local\CrashDumps
2022-05-09 09:48 - 2017-01-14 01:08 - 000000000 ____D C:\ProgramData\Riot Games
2022-05-05 23:47 - 2020-07-17 22:01 - 000000000 ____D C:\Users\Jiri\AppData\Local\WarThunder
2022-05-02 11:42 - 2021-09-23 07:56 - 000000000 ____D C:\Program Files (x86)\Diablo II Resurrected
2022-04-30 14:02 - 2017-01-10 18:20 - 000000000 ____D C:\Program Files (x86)\Battle.net
2022-04-30 12:37 - 2020-09-06 12:23 - 000000000 ____D C:\Program Files (x86)\Razer Chroma SDK
2022-04-30 03:11 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2022-04-26 20:01 - 2018-02-03 23:01 - 000000000 ____D C:\Users\Jiri\AppData\Local\NVIDIA Corporation
2022-04-24 14:28 - 2017-08-09 09:05 - 000000000 ____D C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2022-04-24 14:28 - 2017-03-11 18:47 - 000000000 ____D C:\Users\Jiri\AppData\Local\SquirrelTemp
2022-04-24 14:25 - 2017-08-25 10:07 - 000000000 ____D C:\ProgramData\ProductData
2022-04-22 15:38 - 2021-12-05 14:17 - 000000000 ____D C:\Program Files\RSL_Helper_X64
2022-04-21 19:38 - 2017-09-30 13:25 - 000000000 ____D C:\Users\Jiri\AppData\Roaming\uTorrent
2022-04-21 19:32 - 2017-08-25 10:19 - 000000000 ____D C:\WINDOWS\system32\DAX3
2022-04-21 19:32 - 2017-08-25 09:54 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2022-04-21 19:32 - 2017-08-25 09:54 - 000000000 ____D C:\WINDOWS\system32\DAX2
2022-04-21 19:30 - 2017-08-25 10:07 - 000000000 ____D C:\ProgramData\IObit
2022-04-21 19:28 - 2021-04-07 09:47 - 000000000 ____D C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HearthSim
2022-04-21 19:28 - 2021-04-07 09:47 - 000000000 ____D C:\Users\Jiri\AppData\Local\HearthstoneDeckTracker
2022-04-21 19:26 - 2017-03-11 18:47 - 000000000 ____D C:\Users\Jiri\AppData\Local\Innkeeper
2022-04-21 19:24 - 2017-08-25 09:54 - 000000000 ____D C:\Program Files\AMD
2022-04-21 19:19 - 2017-01-06 09:19 - 000000000 ____D C:\Program Files\Google
2022-04-21 00:03 - 2018-05-16 16:36 - 000000000 ____D C:\Users\Jiri\AppData\Local\AMD
2022-04-20 23:28 - 2022-02-14 17:43 - 000000223 _____ C:\Users\Jiri\Desktop\Lost Ark.url
2022-04-20 22:22 - 2020-08-13 07:33 - 000000000 ____D C:\Users\Jiri
2022-04-20 22:21 - 2018-07-11 17:47 - 000000000 ____D C:\ProgramData\Packages
2022-04-20 22:21 - 2017-10-31 22:08 - 000000000 ____D C:\Users\Jiri\AppData\Local\Packages
2022-04-20 13:41 - 2017-05-11 15:14 - 000320904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2022-04-18 20:24 - 2022-01-28 19:16 - 000000000 ____D C:\Users\Jiri\AppData\Local\AMD_Common
2022-04-17 22:35 - 2017-08-25 09:54 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2022-04-17 22:35 - 2017-01-06 09:00 - 000000000 ___HD C:\Program Files (x86)\Temp
2022-04-17 22:33 - 2017-08-25 10:19 - 000000000 ____D C:\ProgramData\Audyssey Labs
2022-04-17 13:41 - 2020-10-19 11:18 - 000269448 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2022-04-17 13:41 - 2020-04-17 06:39 - 000546296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2022-04-17 13:41 - 2019-01-14 18:38 - 000378944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2022-04-17 13:41 - 2019-01-07 20:26 - 000252984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2022-04-17 13:41 - 2019-01-07 20:26 - 000100408 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2022-04-17 13:41 - 2019-01-07 20:26 - 000036768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2022-04-17 13:41 - 2018-10-24 17:15 - 000042400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2022-04-17 13:41 - 2017-11-13 19:55 - 000228912 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2022-04-17 13:41 - 2017-05-11 15:14 - 000855320 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2022-04-17 13:41 - 2017-05-11 15:14 - 000556088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2022-04-17 13:41 - 2017-05-11 15:14 - 000108888 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2022-04-17 13:41 - 2017-05-11 15:14 - 000083968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2022-04-17 02:32 - 2020-09-06 12:24 - 000000000 ____D C:\temp
2022-04-17 02:30 - 2020-07-31 12:19 - 000000000 ___DC C:\WINDOWS\Panther
2022-04-17 02:30 - 2017-09-30 13:35 - 000000000 ____D C:\Users\Jiri\AppData\Roaming\DAEMON Tools Lite
2022-04-17 02:30 - 2017-04-12 19:13 - 000000000 ____D C:\Users\Jiri\AppData\Roaming\TeamViewer
2022-04-17 02:30 - 2017-01-10 18:24 - 000000000 ____D C:\Users\Jiri\AppData\Roaming\TS3Client
2022-04-16 02:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-04-16 02:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-04-16 02:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-04-16 02:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-04-16 02:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2022-04-16 02:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
==================== Files in the root of some directories ========
2017-11-06 19:47 - 2017-11-06 19:47 - 000000098 _____ () C:\Users\Jiri\AppData\Roaming\nuvotonISP.lua
2018-12-01 02:25 - 2018-12-01 02:25 - 000000000 _____ () C:\Users\Jiri\AppData\Local\D224C2.tmp
2018-01-31 18:49 - 2018-01-31 18:49 - 000000000 _____ () C:\Users\Jiri\AppData\Local\D23B4B.tmp
2018-04-06 18:53 - 2018-04-06 18:53 - 000000000 _____ () C:\Users\Jiri\AppData\Local\D2574.tmp
2018-08-25 18:02 - 2018-08-25 18:02 - 000000000 _____ () C:\Users\Jiri\AppData\Local\D2985D.tmp
2018-12-01 02:25 - 2018-12-01 02:25 - 000000000 _____ () C:\Users\Jiri\AppData\Local\D2B743.tmp
2018-01-31 19:00 - 2018-01-31 19:00 - 000000000 _____ () C:\Users\Jiri\AppData\Local\D2FD19.tmp
2021-09-12 00:14 - 2022-04-21 19:44 - 000049055 _____ () C:\Users\Jiri\AppData\Local\PlariumPlay.log
2017-12-05 22:26 - 2017-12-05 22:26 - 000000186 _____ () C:\Users\Jiri\AppData\Local\RAExpertHistory.xml
2020-07-12 13:36 - 2022-05-13 12:26 - 000007597 _____ () C:\Users\Jiri\AppData\Local\resmon.resmoncfg
2018-05-17 17:12 - 2018-05-17 17:16 - 000000000 _____ () C:\Users\Jiri\AppData\Local\{6D2F139D-F6B5-48DD-8967-6A79E2155D09}
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-05-2022
Ran by Jiri (13-05-2022 12:46:18)
Running from C:\Users\Jiri\Downloads
Microsoft Windows 10 Home Version 21H2 19044.1706 (X64) (2020-08-13 05:39:40)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-3266792333-1024760777-594004968-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3266792333-1024760777-594004968-503 - Limited - Disabled)
Guest (S-1-5-21-3266792333-1024760777-594004968-501 - Limited - Disabled)
Jiri (S-1-5-21-3266792333-1024760777-594004968-1002 - Administrator - Enabled) => C:\Users\Jiri
WDAGUtilityAccount (S-1-5-21-3266792333-1024760777-594004968-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
. . (HKLM\...\{E5B0E5D9-9D25-4B2B-A7D9-8CA0F9E0DD89}) (Version: 7.1 - Intel) Hidden
. . . (HKLM-x32\...\{CE33BF2E-5D59-44DF-8610-59BB289396C6}) (Version: 3.3.1.3 - Intel) Hidden
7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 22.001.20117 - Adobe Systems Incorporated)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
APP Shop v1.0.21 (HKLM-x32\...\{90242E9B-BC60-46E3-8EE7-8E953F702280}_is1) (Version: 1.0.21 - ASRock Inc.)
ASRock App Charger v1.0.6 (HKLM\...\ASRock App Charger_is1) (Version: 1.0.6 - ASRock Inc.)
ASRock Restart to UEFI v1.0.5 (HKLM-x32\...\ASRock Restart to UEFI_is1) (Version: 1.0.5 - )
ASUS GPU TweakII (HKLM-x32\...\InstallShield_{0075AAC2-EA9F-490E-83F7-5D5F81EB2A43}) (Version: 1.3.3.2 - ASUSTek COMPUTER INC.)
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.031 - ASUSTek Computer Inc.)
AURA(GRAPHICS CARD) (HKLM-x32\...\{1F15563A-96C1-4770-BF23-57F41A0DCA7B}) (Version: 0.0.4.1 - )
AutoHotkey 1.1.26.01 (HKLM\...\AutoHotkey) (Version: 1.1.26.01 - Lexikos)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 22.3.6008 - Avast Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 101.0.16113.42 - Autoři prohlížeče Avast Secure Browser)
Awakened PoE Trade 2.12.0 (HKLM\...\2ea281da-028b-5d55-b26e-53163c89344a) (Version: 2.12.0 - Alexander Drozdov)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.74.1085 - AB Team, d.o.o.)
Diablo II Resurrected (HKLM-x32\...\Diablo II Resurrected) (Version: - Blizzard Entertainment)
Discord (HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Discord) (Version: 1.0.9004 - Discord Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 101.0.4951.64 - Google LLC)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.24.15 - Google Inc.) Hidden
Intel(R) Computing Improvement Program (HKLM\...\{58FBAE3A-E602-47E6-9F32-AE25D48B378A}) (Version: 2.4.04140 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1167 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.6.0.1029 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{7224B7CE-196C-4E2A-A1AE-1D7BF259FD36}) (Version: 3.4.1942 - Intel Corporation)
Intel® Driver & Support Assistant (HKLM-x32\...\{4ef0c07c-1ede-4d1c-a593-83184455832b}) (Version: 3.3.1.3 - Intel)
Intel® Chipset Device Software (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Intel® Small Business Advantage (HKLM-x32\...\{EDCD64EF-99F4-4EEA-8CF9-5ED66BDAB6B2}) (Version: 4.0.40 - Intel Corporation)
Iriun Webcam version 2.7 (HKLM-x32\...\IriunWebcam_is1) (Version: 2.7 - Iriun)
KeePass Password Safe 2.43 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.43 - Dominik Reichl)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
Logitech Gaming Software 8.94 (HKLM\...\Logitech Gaming Software) (Version: 8.94.104 - Logitech Inc.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 101.0.1210.39 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\OneDriveSetup.exe) (Version: 22.077.0410.0007 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29913 (HKLM-x32\...\{855e31d2-9031-46e1-b06d-c9d7777deefb}) (Version: 14.28.29913.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29914 (HKLM-x32\...\{1b5476d9-ab8e-4b0d-b004-059a1bd5568b}) (Version: 14.28.29914.0 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 3.1.25 (x86) (HKLM-x32\...\{5eab548c-ff2f-45f1-8f0d-0a28e7b2d9b1}) (Version: 3.1.25.31218 - Microsoft Corporation)
Mozilla Firefox 65.0.1 (x64 cs) (HKLM\...\Mozilla Firefox 65.0.1 (x64 cs)) (Version: 65.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 65.0.1 - Mozilla)
NVIDIA FrameView SDK 1.2.7521.31103277 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.7521.31103277 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.25.1.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.25.1.27 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.39.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.39.3 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 512.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 512.15 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
Path of Building Community (HKLM-x32\...\Path of Building Community) (Version: 1.4.169.3 - Path of Building Community)
Plarium Play (HKLM-x32\...\{1165C29E-6794-419B-AFAF-8C615C2D590F}) (Version: 7.0.0 - Plarium) Hidden
Plarium Play (HKLM-x32\...\{8a0fd362-c4f7-431a-b9f9-424a3d88abf7}) (Version: 7.0.0 - Plarium)
Plays (HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Plays) (Version: 3.0.0 - Plays.tv, Inc)
Poe Lurker (HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\PoeLurker) (Version: 1.17.4 - C1rdec)
poe-overlay 0.7.13 (HKLM\...\{4029a1cf-61b4-539a-827c-d229b542fc0f}) (Version: 0.7.13 - PoE-Overlay-Community)
Raptr (HKLM-x32\...\Raptr) (Version: 5.2.10-r123135-release - Raptr, Inc)
Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 9.18.7.1508 - Razer Inc.)
Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.7.0429.050715 - Razer Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.2.703.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9205.1 - Realtek Semiconductor Corp.)
RSL_Helper version 3.00 (HKLM\...\RSL_Helper_is1) (Version: 3.00 - )
RSL_Helper version 3.1 (32-bit) (HKLM-x32\...\RSL_Helper_is1) (Version: 3.1 - )
Skype verze 8.39 (HKLM-x32\...\Skype_is1) (Version: 8.39 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Spotify) (Version: 1.1.85.895.g2a71e1b8 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Streamlabs OBS 0.12.3 (HKLM\...\029c4619-0385-5543-9426-46f9987161d9) (Version: 0.12.3 - General Workings, Inc.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.2.2756 - TeamViewer)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation)
VCE Exam Simulator Demo (HKLM-x32\...\VCE Exam Simulator Demo_is1) (Version: - Avanset)
Vulkan Run Time Libraries 1.0.17.0 (HKLM\...\VulkanRT1.0.17.0) (Version: 1.0.17.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - Intel Corporation Inc.)
Vulkan Run Time Libraries 1.0.65.0 (HKLM\...\VulkanRT1.0.65.0) (Version: 1.0.65.0 - LunarG, Inc.) Hidden
War Thunder Launcher 1.0.3.319 (HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Network)
Packages:
=========
AdBlock -> C:\Program Files\WindowsApps\BetaFish.AdBlock_2.13.0.0_neutral__c1wakc4j0nefm [2020-01-10] (BetaFish)
Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.217.400.0_x64__kgqvnymyfvs32 [2022-05-06] (king.com)
Crypto Chart -> C:\Program Files\WindowsApps\13746Ravaga.CryptoChart_1.5.104.0_x64__bt3jc00cvcvtp [2021-03-07] (Ravaga)
Facebook -> C:\Program Files\WindowsApps\FACEBOOK.FACEBOOK_2021.927.1.0_neutral__8xx8rvfyw5nnt [2021-09-30] (Facebook Inc)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_136.1.269.0_x64__v10z8vjag6ke6 [2022-04-30] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa [2022-03-10] (Apple Inc.) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.3171.0_x64__8wekyb3d8bbwe [2022-03-26] (Microsoft Studios) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-04-20] (NVIDIA Corp.)
Ovládací centrum grafiky Intel® -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3408.0_x64__8j3eq9eme6ctt [2022-04-20] (INTEL CORP) [Startup Task]
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [2021-06-12] (Twitter Inc.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2217832 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2022-04-17] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2022-04-17] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2022-04-17] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2022-04-17] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_c0e159863e7afdde\nvshext.dll [2022-03-18] (Nvidia Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2022-04-17] (Avast Software s.r.o. -> AVAST Software)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\ARC Welder.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=emfinbmielocnlhgmfkkmkngdoccbadn
==================== Loaded Modules (Whitelisted) =============
2021-03-07 01:31 - 2021-03-07 01:31 - 000953344 _____ () [File not signed] C:\Program Files\WindowsApps\13746Ravaga.CryptoChart_1.5.104.0_x64__bt3jc00cvcvtp\e_sqlite3.dll
2017-04-19 16:59 - 2016-10-04 16:51 - 000076800 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2021-03-07 01:31 - 2021-03-07 01:31 - 044046336 _____ (LineupHub) [File not signed] C:\Program Files\WindowsApps\13746Ravaga.CryptoChart_1.5.104.0_x64__bt3jc00cvcvtp\CryptoCoins.UWP.dll
2021-11-16 06:01 - 2019-03-02 21:56 - 001327616 _____ (Robert Simpson, et al.) [File not signed] C:\Program Files (x86)\Razer\Razer Services\GMS\x86\SQLite.Interop.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Jiri\Data aplikací:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\Jiri\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
SearchScopes: HKU\S-1-5-21-3266792333-1024760777-594004968-1002 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-3266792333-1024760777-594004968-1002 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\hola.org -> hxxp://hola.org
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2015-10-30 09:24 - 2019-01-05 18:23 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Program Files (x86)\Razer\ChromaBroadcast\bin;C:\Program Files\Razer\ChromaBroadcast\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\Program Files (x86)\dotnet\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Jiri\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{4de67e3e-f31f-492e-8f3c-a4d1077052e9}.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\StartupFolder: => "AVG Secure VPN.lnk"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "Launch LCore"
HKLM\...\StartupApproved\Run32: => "PlaysTV"
HKLM\...\StartupApproved\Run32: => "Raptr"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "Gaijin.Net Agent"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "Innkeeper"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_A458B43CEBC874CB3364B2EF9796C8CA"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "iVCam"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_F9F95ADBEA5E6682F460EFBEE18CE692"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "Plays"
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\StartupApproved\Run: => "Gaijin.Net Updater"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [UDP Query User{B63073E7-DC4C-41B8-B829-2F6E3048A76B}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{A7058179-6C55-40FF-A63C-F12B9A543D69}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{932EF46D-C54D-4086-8C6E-610F93F87A46}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe (Plays.tv, Inc -> Copyright (c) 2018 Plays.tv, LLC)
FirewallRules: [{C1E141CF-02A6-4DC6-84EC-FB151039F4D9}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe (Plays.tv, Inc -> Copyright (c) 2018 Plays.tv, LLC)
FirewallRules: [{71267C04-C7F7-43A2-B019-F8E763DFDD75}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe (Raptr, Inc -> Raptr, Inc)
FirewallRules: [{3C77DA6F-7D1A-4B43-90E4-70515EC4F8DC}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe (Raptr, Inc -> Raptr, Inc)
FirewallRules: [{FC58B6C1-FD37-47E4-802D-E204C2C174B8}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe (Raptr, Inc -> Raptr, Inc)
FirewallRules: [{D92A5ED0-6326-4288-B5EF-D709A30B54C9}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe (Raptr, Inc -> Raptr, Inc)
FirewallRules: [UDP Query User{5C4C4E2B-DB3A-49F4-8170-9DBED8D43B7F}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [TCP Query User{C4FEDA8B-6883-455A-ABED-5B254B7AA75F}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [UDP Query User{F548565F-2E27-40A8-B6E9-DC43238151A2}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [TCP Query User{D12F50AC-359B-4F3D-99F9-424CAD6AE3FA}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [{823BEEF9-59D8-4C7B-8FD6-EAEE45439B48}] => (Allow) C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage Next\Sba.exe (Intel(R) Small Business Advantage -> Intel Corporation)
FirewallRules: [{4D173879-E171-4615-9F64-B01FC8F17CD5}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe (Raptr, Inc -> Raptr, Inc)
FirewallRules: [{FCD77FE3-492F-4737-8FBF-92C36E10F46B}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe (Raptr, Inc -> Raptr, Inc)
FirewallRules: [{E154A956-A2AA-4238-8007-F37E34BDAFC4}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe (Raptr, Inc -> Raptr, Inc)
FirewallRules: [{131678A8-5EB9-4430-981F-154F8C3109B6}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe (Raptr, Inc -> Raptr, Inc)
FirewallRules: [{D907F34E-35D7-4C9A-880B-85E8962F78F2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{8AD9E878-BD26-4BA5-B637-6121348601F6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D6900A04-7216-4340-90E7-2EDE6B9AFF59}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe (Plays.tv, Inc -> Copyright (c) 2018 Plays.tv, LLC)
FirewallRules: [{2E4832B4-C0D2-4B97-8927-976C3D45F974}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe (Plays.tv, Inc -> Copyright (c) 2018 Plays.tv, LLC)
FirewallRules: [TCP Query User{C5204495-FA07-43AF-89A6-8021BC2BD543}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [UDP Query User{56DD0CB6-4873-4F29-BADB-17F2D0DBE4B0}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [{5F9B4D72-D8EF-4AB3-8D76-6689D4D3237C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{EF05F815-C4C0-4922-8142-9B30DCEE7825}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{D9479F7F-E8C7-45E1-A918-87ED36C5FC12}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{D09C4DDA-D1F0-4919-8DA2-C474B4F3CAFE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{819C6BD8-94CA-4CFA-95C3-4CBD45159A8D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E1D24F0F-80C2-4561-9C26-4AE192B7E560}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3FC8A316-1654-4B66-B068-C081CE8560DF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{FBBD7889-CA45-4105-92D8-EB92E794127B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{6E1BD708-F02D-47B1-9BC9-13E4879BCCA3}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [UDP Query User{9BBB06CE-3139-467C-A15B-2BFD74EDA08D}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [{FD644DA5-58C8-4D28-AD12-692D580226EA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{03D1C4F0-4460-400F-A4C6-B8B07EB497BE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{3F10D295-A9C3-4513-8DA2-09425DB9F1B6}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> )
FirewallRules: [{A52C48BA-A955-480F-A582-932523CC118F}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> )
FirewallRules: [{C68377AD-CD72-44D3-BA5F-B5A72578773D}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> )
FirewallRules: [{F1107AC1-1F08-4DC6-8B7F-9E71EB6B39FD}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> )
FirewallRules: [{B08F8137-EC22-4666-BFFD-CAF86484BFB7}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C244527E-5ECF-4011-BC1D-88EDDF117D24}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{07476CD4-1A6D-48BD-8624-15E46356C848}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D50B85AB-A836-45D3-9113-5E582EA0FC15}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{CF61A50E-4B3F-49E4-9E23-FCD3A8744947}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{FDC50369-D5F5-4F5A-A4DC-12CEE1CFE3A1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{9CF603DC-5CDF-4E88-8736-C87315AD7365}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{8006EDB8-7AB4-4DCC-9710-5A4FFD31A076}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{7844CB0C-1524-45DF-8968-2DDAA7904F9B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe => No File
FirewallRules: [{0D236A1C-5BED-4BAF-8A66-B12A96914A23}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe => No File
FirewallRules: [{9E710C13-0B73-42CE-9468-1F861CAB09E4}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{2CF471C9-A316-4F9C-BD1D-CCE9448272FE}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{02055389-BA79-433E-9CF6-EDE17922F185}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{3D81762D-3693-4310-8B0A-92E147070E0A}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{AD258F52-3F40-44DE-B392-ED956A0D0551}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{67281043-3A70-45B4-AD15-32EBED0A0387}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{5DFE549E-75F9-48C5-B46E-41197948F064}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{FBDB5E64-9790-41FE-A316-CDCFD6E36456}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{F64D1D47-A45D-4046-9280-8D3FCE9F35B1}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{B25738EF-034A-4B11-960F-470B90BCF98A}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{7F0E2A7D-FF3B-4A5F-86A1-9652750E683A}] => (Allow) C:\Program Files (x86)\Iriun Webcam\IriunWebcam.exe (IriunWebcam) [File not signed]
FirewallRules: [{1FBD9760-8313-405C-9404-A65583251869}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Ark\Binaries\Win64\Launch_Game.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [{1C5941C0-1656-4206-A7E3-81688C08797C}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Ark\Binaries\Win64\Launch_Game.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [{BD8E2E62-EFD4-4DA1-B8C6-05483AB1E323}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{01ED062D-32DA-4D00-B98B-E13FC489902A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{32D63C38-32C3-4522-A5DD-0FA5C4B2CA7D}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{9793DD2B-AED3-4F3F-A08F-E026C10E5A9A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1CED19F6-E1FA-4FCF-B135-7226DD486B57}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F23921D0-371A-4399-96F0-6AABB9C0C004}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E7444211-35EC-462C-96E2-13E20E02D152}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2B0E0AA5-FFBE-4F61-B8F2-FC492619D470}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F71BFC8D-16BB-4CB3-9309-EB926F50461B}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{15CCF4B1-CF53-4C58-8BD8-FE8E6C2A17A4}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{730B66BF-B017-4B1B-AADC-B57D43087D4F}] => (Allow) E:\SteamLibrary\steamapps\common\Vampire Survivors\VampireSurvivors.exe (Luca Galante) [File not signed]
FirewallRules: [{BD5822C5-680E-4DF6-BA55-5821451A31A6}] => (Allow) E:\SteamLibrary\steamapps\common\Vampire Survivors\VampireSurvivors.exe (Luca Galante) [File not signed]
FirewallRules: [{CCCE2BBE-013E-465C-8AA6-6C715EF2676F}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{C9716D32-5EC1-42F8-98AE-9DBB76AA4297}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{EE254BD2-D197-4AED-8E24-640879D37346}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{D2EFFE38-2752-457D-A27B-768ED36FF8BA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{0A25DD99-CEA4-4FB2-AC20-A33420FC5C2F}] => (Allow) E:\SteamLibrary\steamapps\common\Path of Exile\PathOfExileSteam.exe (Grinding Gear Games Limited -> )
FirewallRules: [{1D61808B-C037-4BA5-A205-675A7CD045A9}] => (Allow) E:\SteamLibrary\steamapps\common\Path of Exile\PathOfExileSteam.exe (Grinding Gear Games Limited -> )
FirewallRules: [{37FF99CA-9404-42C7-8945-3279F41D5FE1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{8A0926F0-7CB5-4BE9-B42B-1E541A6E4477}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{A8F3889C-5A7B-4F31-8E9B-BD4B222F5055}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{21E16A31-0ACE-42C2-AB30-DE1BD754DE79}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{BFC72FE5-1031-4624-9978-7B1AF93D609C}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corp. -> )
FirewallRules: [{0B658191-3D1D-42C9-9CC2-6C00DF3852AD}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corp. -> )
FirewallRules: [{12C9C541-50E0-46C0-A584-A8BC6BDC219C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A2D1941C-543D-4A45-86B5-894232AEA0B0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{06DD14AA-A3B5-4979-9F53-977DAFD1BEE7}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{51C2F80F-DA89-4061-83E9-3F3BFC15F6DF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3236EA35-09E5-4AC5-8EAB-647194B661FE}] => (Allow) E:\SteamLibrary\steamapps\common\Business Tour\BusinessTour.exe () [File not signed]
FirewallRules: [{2E868C6E-E091-41B8-8F0E-60A2BABA6511}] => (Allow) E:\SteamLibrary\steamapps\common\Business Tour\BusinessTour.exe () [File not signed]
FirewallRules: [{F8E82F68-F031-47BD-ABD9-23E9E0A948D5}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{9379CBF0-EB72-4D30-9E83-4C133BF898DC}] => (Allow) E:\SteamLibrary\steamapps\common\elma\ElmaLauncher\ElmaLauncher.exe (Elasto Mania Team) [File not signed]
FirewallRules: [{A9EC1FAF-F495-45E4-8DC7-8147F80DB3EE}] => (Allow) E:\SteamLibrary\steamapps\common\elma\ElmaLauncher\ElmaLauncher.exe (Elasto Mania Team) [File not signed]
FirewallRules: [TCP Query User{278F5B22-05D9-4C8B-92D1-3F8EB1B62B13}C:\users\jiri\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\jiri\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{DE7A3F0E-9AD7-4598-8A67-601A9BB42E90}C:\users\jiri\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\jiri\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{736D6109-1549-4E45-9EA9-C6B2AE50CEF2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Restore Points =========================
12-05-2022 11:22:11 Instalační služba modulů systému Windows
12-05-2022 11:22:36 Instalační služba modulů systému Windows
12-05-2022 11:23:03 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (05/13/2022 12:35:28 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Centru zabezpečení se nepodařilo ověřit volajícího s chybou %1.
Error: (05/13/2022 12:28:25 AM) (Source: Microsoft-Windows-Spell-Checking) (EventID: 31) (User: DESKTOP-SKINTD9)
Description: Aktualizace vlastního uživatelského seznamu slov 2 se nezdařila: -2147024864. Kontrola pravopisu zůstane dostupná, ale tento uživatelský seznam slov nebude aktualizován.
Error: (05/12/2022 06:33:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: IAStorDataMgrSvc.exe, verze: 14.6.0.1029, časové razítko: 0x55b5f9d3
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x07a0f355
ID chybujícího procesu: 0x440c
Čas spuštění chybující aplikace: 0x01d8661e0af76331
Cesta k chybující aplikaci: C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: c11e99a5-5397-4cb9-9435-6d504645d31d
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (05/12/2022 06:33:46 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: IAStorDataMgrSvc.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.NullReferenceException
na IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
na IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
na IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
na System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
na System.Threading.ThreadPoolWorkQueue.Dispatch()
na System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
Error: (05/12/2022 06:33:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: THXService.exe, verze: 1.0.0.1, časové razítko: 0x5d81b8c9
Název chybujícího modulu: ntdll.dll, verze: 10.0.19041.1682, časové razítko: 0x7b5414ec
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000000ff249
ID chybujícího procesu: 0x10a4
Čas spuštění chybující aplikace: 0x01d8661dbac0f4d4
Cesta k chybující aplikaci: C:\Program Files (x86)\Razer\THXService\Drivers\x64\THXService.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID zprávy: b024754a-edf2-4dc6-aefe-e51993e629ff
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (05/12/2022 06:32:35 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe, identifikátor PID: 3764, identifikátor PID ProfSvc: 1672.
Error: (05/11/2022 03:26:30 PM) (Source: Microsoft-Windows-Spell-Checking) (EventID: 31) (User: DESKTOP-SKINTD9)
Description: Aktualizace vlastního uživatelského seznamu slov 3 se nezdařila: -2147024864. Kontrola pravopisu zůstane dostupná, ale tento uživatelský seznam slov nebude aktualizován.
Error: (05/11/2022 03:26:30 PM) (Source: Microsoft-Windows-Spell-Checking) (EventID: 31) (User: DESKTOP-SKINTD9)
Description: Aktualizace vlastního uživatelského seznamu slov 3 se nezdařila: -2147024864. Kontrola pravopisu zůstane dostupná, ale tento uživatelský seznam slov nebude aktualizován.
System errors:
=============
Error: (05/12/2022 06:33:50 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Rapid Storage Technology byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (05/12/2022 06:33:42 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Energy Server Service queencreek byla ukončena s následující chybou:
Ladicí program obdržel řídicí znak C.
Error: (05/12/2022 06:33:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba THXService byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (05/12/2022 06:31:25 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba cplspcon byla ukončena s následující chybou:
Nespecifikovaná chyba
Error: (05/12/2022 06:31:20 PM) (Source: Application Popup) (EventID: 56) (User: )
Description: ACPI1
Error: (05/12/2022 01:41:13 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba cplspcon byla ukončena s následující chybou:
Nespecifikovaná chyba
Error: (05/12/2022 01:40:54 PM) (Source: Application Popup) (EventID: 56) (User: )
Description: ACPI1
Error: (05/09/2022 12:50:57 PM) (Source: DCOM) (EventID: 10029) (User: NT AUTHORITY)
Description: U aktivace identifikátoru CLSID {DDCFD26B-FEED-44CD-B71D-79487D2E5E5A} vypršel časový limit během čekání na zastavení služby dps.
CodeIntegrity:
===============
Date: 2022-05-13 12:35:28
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume6\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.
Date: 2022-05-13 12:32:06
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume6\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. P7.60 02/26/2018
Motherboard: ASRock H110M-HDV
Processor: Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz
Percentage of memory in use: 36%
Total physical RAM: 16346.37 MB
Available physical RAM: 10383.5 MB
Total Virtual: 27610.37 MB
Available Virtual: 18540.65 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:222.19 GB) (Free:53.48 GB) NTFS
Drive e: (disk 2) (Fixed) (Total:931.5 GB) (Free:769.27 GB) NTFS
\\?\Volume{a3b79652-94f7-41eb-be4d-73ae662c2a70}\ (Obnovení) (Fixed) (Total:0.44 GB) (Free:0.42 GB) NTFS
\\?\Volume{18b7ed45-71e3-4e6a-88fe-261aae224676}\ () (Fixed) (Total:0.83 GB) (Free:0.4 GB) NTFS
\\?\Volume{e5afd825-b3d3-46c0-bacc-fa41bcb6c472}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 223.6 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Kontrola po dlouhé době
Moderátor: Moderátoři
Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
-
Rudy
- Site Admin
- Příspěvky: 118715
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola po dlouhé době
Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:
Otevřte poznámkový blok a zkopírujte do něj:
Uložte do C:\Users\Jiri\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <==== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <==== ATTENTION
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [AMDDVR] => "C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe" (No File)
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [PlariumPlay] => E:\Plarium\Plarium\PlariumPlay\PlariumPlay --args -run-with-os (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTIONTask: {4F624132-BA16-46D2-9D1B-89DD596A4972} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs (No File)
Task: {99F66722-5BFE-4176-956E-9696B4A31846} - System32\Tasks\Sstt2-TaskPlan => C:\Program Files\Gaming\YMS 3017\YMS 3017.EXE (No File)
Task: {BA00DE9E-4526-47A5-9048-5E3ACA274AC6} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
C:\temp
C:\Users\Jiri\AppData\Local\D224C2.tmp
C:\Users\Jiri\AppData\Local\D23B4B.tmp
C:\Users\Jiri\AppData\Local\D2574.tmp
C:\Users\Jiri\AppData\Local\D2985D.tmp
C:\Users\Jiri\AppData\Local\D2B743.tmp
C:\Users\Jiri\AppData\Local\D2FD19.tmp
C:\Users\Jiri\AppData\Local\{6D2F139D-F6B5-48DD-8967-6A79E2155D09}
AlternateDataStreams: C:\Users\Jiri\Data aplikací:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\Jiri\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
SearchScopes: HKU\S-1-5-21-3266792333-1024760777-594004968-1002 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-3266792333-1024760777-594004968-1002 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
FirewallRules: [UDP Query User{F548565F-2E27-40A8-B6E9-DC43238151A2}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [TCP Query User{D12F50AC-359B-4F3D-99F9-424CAD6AE3FA}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [TCP Query User{C5204495-FA07-43AF-89A6-8021BC2BD543}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [UDP Query User{56DD0CB6-4873-4F29-BADB-17F2D0DBE4B0}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [{7844CB0C-1524-45DF-8968-2DDAA7904F9B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe => No File
FirewallRules: [{0D236A1C-5BED-4BAF-8A66-B12A96914A23}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe => No File
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola po dlouhé době
Fix result of Farbar Recovery Scan Tool (x64) Version: 11-05-2022
Ran by Jiri (13-05-2022 18:09:31) Run:1
Running from C:\Users\Jiri\Downloads
Loaded Profiles: Jiri
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <==== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <==== ATTENTION
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [AMDDVR] => "C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe" (No File)
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [PlariumPlay] => E:\Plarium\Plarium\PlariumPlay\PlariumPlay --args -run-with-os (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTIONTask: {4F624132-BA16-46D2-9D1B-89DD596A4972} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs (No File)
Task: {99F66722-5BFE-4176-956E-9696B4A31846} - System32\Tasks\Sstt2-TaskPlan => C:\Program Files\Gaming\YMS 3017\YMS 3017.EXE (No File)
Task: {BA00DE9E-4526-47A5-9048-5E3ACA274AC6} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
C:\temp
C:\Users\Jiri\AppData\Local\D224C2.tmp
C:\Users\Jiri\AppData\Local\D23B4B.tmp
C:\Users\Jiri\AppData\Local\D2574.tmp
C:\Users\Jiri\AppData\Local\D2985D.tmp
C:\Users\Jiri\AppData\Local\D2B743.tmp
C:\Users\Jiri\AppData\Local\D2FD19.tmp
C:\Users\Jiri\AppData\Local\{6D2F139D-F6B5-48DD-8967-6A79E2155D09}
AlternateDataStreams: C:\Users\Jiri\Data aplikací:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\Jiri\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
SearchScopes: HKU\S-1-5-21-3266792333-1024760777-594004968-1002 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-3266792333-1024760777-594004968-1002 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
FirewallRules: [UDP Query User{F548565F-2E27-40A8-B6E9-DC43238151A2}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [TCP Query User{D12F50AC-359B-4F3D-99F9-424CAD6AE3FA}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [TCP Query User{C5204495-FA07-43AF-89A6-8021BC2BD543}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [UDP Query User{56DD0CB6-4873-4F29-BADB-17F2D0DBE4B0}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [{7844CB0C-1524-45DF-8968-2DDAA7904F9B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe => No File
FirewallRules: [{0D236A1C-5BED-4BAF-8A66-B12A96914A23}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <==== ATTENTION => restored successfully
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <==== ATTENTION => restored successfully
"HKU\S-1-5-21-3266792333-1024760777-594004968-1002\Software\Microsoft\Windows\CurrentVersion\Run\\AMDDVR" => removed successfully
"HKU\S-1-5-21-3266792333-1024760777-594004968-1002\Software\Microsoft\Windows\CurrentVersion\Run\\PlariumPlay" => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION{4F624132-BA16-46D2-9D1B-89DD596A4972}" => not found
"C:\WINDOWS\HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTIONSystem32\Tasks\AVAST Software\Avast settings backup" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\TreeHKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION\AVAST Software\Avast settings backup" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{99F66722-5BFE-4176-956E-9696B4A31846}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{99F66722-5BFE-4176-956E-9696B4A31846}" => removed successfully
C:\WINDOWS\System32\Tasks\Sstt2-TaskPlan => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sstt2-TaskPlan" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BA00DE9E-4526-47A5-9048-5E3ACA274AC6}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BA00DE9E-4526-47A5-9048-5E3ACA274AC6}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\BookReader_B171F20233094AC88D05A8EF7B9763E8 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => removed successfully
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\temp => moved successfully
C:\Users\Jiri\AppData\Local\D224C2.tmp => moved successfully
C:\Users\Jiri\AppData\Local\D23B4B.tmp => moved successfully
C:\Users\Jiri\AppData\Local\D2574.tmp => moved successfully
C:\Users\Jiri\AppData\Local\D2985D.tmp => moved successfully
C:\Users\Jiri\AppData\Local\D2B743.tmp => moved successfully
C:\Users\Jiri\AppData\Local\D2FD19.tmp => moved successfully
C:\Users\Jiri\AppData\Local\{6D2F139D-F6B5-48DD-8967-6A79E2155D09} => moved successfully
C:\Users\Jiri\Data aplikací => ":00e481b5e22dbe1f649fcddd505d3eb7" ADS removed successfully
"C:\Users\Jiri\AppData\Roaming" => ":00e481b5e22dbe1f649fcddd505d3eb7" ADS not found.
"HKU\S-1-5-21-3266792333-1024760777-594004968-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F548565F-2E27-40A8-B6E9-DC43238151A2}C:\program files (x86)\hearthstone\hearthstone.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D12F50AC-359B-4F3D-99F9-424CAD6AE3FA}C:\program files (x86)\hearthstone\hearthstone.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C5204495-FA07-43AF-89A6-8021BC2BD543}C:\program files (x86)\hearthstone\hearthstone.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{56DD0CB6-4873-4F29-BADB-17F2D0DBE4B0}C:\program files (x86)\hearthstone\hearthstone.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7844CB0C-1524-45DF-8968-2DDAA7904F9B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0D236A1C-5BED-4BAF-8A66-B12A96914A23}" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 29726774 B
Java, Flash, Steam htmlcache => 493533335 B
Windows/system/drivers => 32129536 B
Edge => 18501 B
Chrome => 564822496 B
Firefox => 6718954 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 6656 B
ProgramData => 6656 B
Public => 6656 B
systemprofile => 6656 B
systemprofile32 => 6656 B
LocalService => 53668 B
NetworkService => 53668 B
Jiri => 83588197 B
RecycleBin => 3847756114 B
EmptyTemp: => 4.7 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 18:09:51 ====
Ran by Jiri (13-05-2022 18:09:31) Run:1
Running from C:\Users\Jiri\Downloads
Loaded Profiles: Jiri
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <==== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <==== ATTENTION
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [AMDDVR] => "C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe" (No File)
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\...\Run: [PlariumPlay] => E:\Plarium\Plarium\PlariumPlay\PlariumPlay --args -run-with-os (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTIONTask: {4F624132-BA16-46D2-9D1B-89DD596A4972} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs (No File)
Task: {99F66722-5BFE-4176-956E-9696B4A31846} - System32\Tasks\Sstt2-TaskPlan => C:\Program Files\Gaming\YMS 3017\YMS 3017.EXE (No File)
Task: {BA00DE9E-4526-47A5-9048-5E3ACA274AC6} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
C:\temp
C:\Users\Jiri\AppData\Local\D224C2.tmp
C:\Users\Jiri\AppData\Local\D23B4B.tmp
C:\Users\Jiri\AppData\Local\D2574.tmp
C:\Users\Jiri\AppData\Local\D2985D.tmp
C:\Users\Jiri\AppData\Local\D2B743.tmp
C:\Users\Jiri\AppData\Local\D2FD19.tmp
C:\Users\Jiri\AppData\Local\{6D2F139D-F6B5-48DD-8967-6A79E2155D09}
AlternateDataStreams: C:\Users\Jiri\Data aplikací:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\Jiri\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
SearchScopes: HKU\S-1-5-21-3266792333-1024760777-594004968-1002 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-3266792333-1024760777-594004968-1002 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
FirewallRules: [UDP Query User{F548565F-2E27-40A8-B6E9-DC43238151A2}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [TCP Query User{D12F50AC-359B-4F3D-99F9-424CAD6AE3FA}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [TCP Query User{C5204495-FA07-43AF-89A6-8021BC2BD543}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [UDP Query User{56DD0CB6-4873-4F29-BADB-17F2D0DBE4B0}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe => No File
FirewallRules: [{7844CB0C-1524-45DF-8968-2DDAA7904F9B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe => No File
FirewallRules: [{0D236A1C-5BED-4BAF-8A66-B12A96914A23}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <==== ATTENTION => restored successfully
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <==== ATTENTION => restored successfully
"HKU\S-1-5-21-3266792333-1024760777-594004968-1002\Software\Microsoft\Windows\CurrentVersion\Run\\AMDDVR" => removed successfully
"HKU\S-1-5-21-3266792333-1024760777-594004968-1002\Software\Microsoft\Windows\CurrentVersion\Run\\PlariumPlay" => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION{4F624132-BA16-46D2-9D1B-89DD596A4972}" => not found
"C:\WINDOWS\HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTIONSystem32\Tasks\AVAST Software\Avast settings backup" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\TreeHKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION\AVAST Software\Avast settings backup" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{99F66722-5BFE-4176-956E-9696B4A31846}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{99F66722-5BFE-4176-956E-9696B4A31846}" => removed successfully
C:\WINDOWS\System32\Tasks\Sstt2-TaskPlan => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sstt2-TaskPlan" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BA00DE9E-4526-47A5-9048-5E3ACA274AC6}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BA00DE9E-4526-47A5-9048-5E3ACA274AC6}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\BookReader_B171F20233094AC88D05A8EF7B9763E8 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => removed successfully
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\temp => moved successfully
C:\Users\Jiri\AppData\Local\D224C2.tmp => moved successfully
C:\Users\Jiri\AppData\Local\D23B4B.tmp => moved successfully
C:\Users\Jiri\AppData\Local\D2574.tmp => moved successfully
C:\Users\Jiri\AppData\Local\D2985D.tmp => moved successfully
C:\Users\Jiri\AppData\Local\D2B743.tmp => moved successfully
C:\Users\Jiri\AppData\Local\D2FD19.tmp => moved successfully
C:\Users\Jiri\AppData\Local\{6D2F139D-F6B5-48DD-8967-6A79E2155D09} => moved successfully
C:\Users\Jiri\Data aplikací => ":00e481b5e22dbe1f649fcddd505d3eb7" ADS removed successfully
"C:\Users\Jiri\AppData\Roaming" => ":00e481b5e22dbe1f649fcddd505d3eb7" ADS not found.
"HKU\S-1-5-21-3266792333-1024760777-594004968-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-3266792333-1024760777-594004968-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F548565F-2E27-40A8-B6E9-DC43238151A2}C:\program files (x86)\hearthstone\hearthstone.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D12F50AC-359B-4F3D-99F9-424CAD6AE3FA}C:\program files (x86)\hearthstone\hearthstone.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C5204495-FA07-43AF-89A6-8021BC2BD543}C:\program files (x86)\hearthstone\hearthstone.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{56DD0CB6-4873-4F29-BADB-17F2D0DBE4B0}C:\program files (x86)\hearthstone\hearthstone.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7844CB0C-1524-45DF-8968-2DDAA7904F9B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0D236A1C-5BED-4BAF-8A66-B12A96914A23}" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 29726774 B
Java, Flash, Steam htmlcache => 493533335 B
Windows/system/drivers => 32129536 B
Edge => 18501 B
Chrome => 564822496 B
Firefox => 6718954 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 6656 B
ProgramData => 6656 B
Public => 6656 B
systemprofile => 6656 B
systemprofile32 => 6656 B
LocalService => 53668 B
NetworkService => 53668 B
Jiri => 83588197 B
RecycleBin => 3847756114 B
EmptyTemp: => 4.7 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 18:09:51 ====
-
Rudy
- Site Admin
- Příspěvky: 118715
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola po dlouhé době
Smazáno, log by již měl být OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola po dlouhé době
Díky moc 
Měl bych ještě dotaz k CryptoCoins.UWP.exe (CryptoCharts )docela mě to vyděsilo v procesech. Nemám nic společné s žádnou kryptoměnou tak jsem stáhl malwarebytes a zkusil to projet, ale nic to nenašlo tak jsem zavítal tady. Na internetu jsem četl, že by se mohlo jednat o vir.
Měl bych ještě dotaz k CryptoCoins.UWP.exe (CryptoCharts )docela mě to vyděsilo v procesech. Nemám nic společné s žádnou kryptoměnou tak jsem stáhl malwarebytes a zkusil to projet, ale nic to nenašlo tak jsem zavítal tady. Na internetu jsem četl, že by se mohlo jednat o vir.
-
Rudy
- Site Admin
- Příspěvky: 118715
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola po dlouhé době
Mohlo by ae opravdu jednat o virus. Zkuste ještě sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 . Utilitu stáhněte, spusťte, nechte pracovat a po skončení akce smažte vše, co případně najde. Popis v odkazu se týká starší verze utility.. Tyto typy virů většinou PC zpomalují.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola po dlouhé době
Tak AVPTool taly nic nenašel. Dá se to nějak vymazat ?
-
Rudy
- Site Admin
- Příspěvky: 118715
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola po dlouhé době
Pokud AVP nic nenašel, je PC bez malware. AVPTool smažete běžným přesunutím do koše.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola po dlouhé době
Dobře díky moc za pomoc 
-
Rudy
- Site Admin
- Příspěvky: 118715
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola po dlouhé době
Rádo se stalo!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?