Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-07-2022
Ran by Marcelka a Pavlíček (administrator) on DESKTOP-79A5PSH (LENOVO 20089) (30-07-2022 16:02:55)
Running from C:\Users\Marcelka a Pavlíček\Downloads
Loaded Profiles: Marcelka a Pavlíček &
Platform: Microsoft Windows 10 Home Version 21H2 19044.1865 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe
(explorer.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(explorer.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(explorer.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <21>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Java\jre1.8.0_341\bin\javaw.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3951280 2016-01-07] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [105280 2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [711328 2022-06-16] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-3884071663-162100166-419435186-1001\...\Run: [MicrosoftEdgeAutoLaunch_222A9AE2984CFCFA5B082B86D62FA74E] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3601832 2022-07-22] (Microsoft Corporation -> Microsoft Corporation)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {409A1C71-65B3-48D7-97E8-D2EC7BE46E0C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {47EC0CAF-91C8-4E7D-9C2C-FDD0F5969676} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5AA50D10-E1FF-4236-B5B2-E56C41D9E26E} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {60D53788-3C3F-46B2-9ECC-74A433186D35} - System32\Tasks\Microsoft\Windows\Management\Autopilot\DetectHardwareChange => {62B2DD2C-F129-42EE-BF59-55D3FD21C215} C:\WINDOWS\System32\Autopilot.dll [192000 2022-07-29] (Microsoft Windows -> Microsoft Corporation)
Task: {7821585C-E85E-4FA8-8BC9-3FB052E3D68E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {7FC4ACE5-0D7B-4BD8-8A2D-D53F95A4D188} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A38A6600-500E-4CA5-AFC5-82E37685690F} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {C8349C6B-3993-4A70-AD1E-3B0E209C7436} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F17FADD1-CB30-4FC6-B159-FD5B96D8FED9} - System32\Tasks\Microsoft\Windows\Management\Autopilot\RemediateHardwareChange => {62B2DD2C-F129-42EE-BF59-55D3FD21C215} C:\WINDOWS\System32\Autopilot.dll [192000 2022-07-29] (Microsoft Windows -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{6c242e33-4261-4d0b-a821-86a78574e0a0}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9ea2f77b-4681-4f2a-a8b5-723fe2cfe311}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{a4d78430-550a-4fd0-b1c6-9da366229c8b}: [DhcpNameServer] 192.168.0.1
Edge:
=======
DownloadDir: C:\Users\Marcelka a Pavlíček\Downloads
Edge HomeButtonPage: HKU\S-1-5-21-3884071663-162100166-419435186-1001 -> hxxp://www.seznam.cz/
Edge Notifications: HKU\S-1-5-21-3884071663-162100166-419435186-1001 -> hxxps://www.tipsport.cz
Edge Extension: (uBlock Origin) -> EdgeExtension_37833NikRollsuBlockOrigin_f8jsg5mm64m62 => C:\Program Files\WindowsApps\37833NikRolls.uBlockOrigin_1.15.24.0_neutral__f8jsg5mm64m62 [2020-04-11]
Edge Extension: (Translator pro Microsoft Edge) -> MicrosoftTranslate_MicrosoftTranslatorforMicrosoftEdge_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.TranslatorforMicrosoftEdge_0.91.51.0_neutral__8wekyb3d8bbwe [2020-04-11]
Edge DefaultProfile: Profile 1
Edge Profile: C:\Users\Marcelka a Pavlíček\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2022-07-09]
Edge Profile: C:\Users\Marcelka a Pavlíček\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2022-07-30]
Edge Notifications: Profile 1 -> hxxps://fastshare.cz
FireFox:
========
FF DefaultProfile: 75qnsple.default
FF ProfilePath: C:\Users\Marcelka a Pavlíček\AppData\Roaming\Mozilla\Firefox\Profiles\75qnsple.default [2021-09-19]
FF ProfilePath: C:\Users\Marcelka a Pavlíček\AppData\Roaming\Mozilla\Firefox\Profiles\l82wqagt.default-release [2022-07-30]
FF Homepage: Mozilla\Firefox\Profiles\l82wqagt.default-release -> www.seznam.cz
FF Session Restore: Mozilla\Firefox\Profiles\l82wqagt.default-release -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\l82wqagt.default-release -> hxxps://www.aliexpress.com
FF Extension: (LeechBlock NG) - C:\Users\Marcelka a Pavlíček\AppData\Roaming\Mozilla\Firefox\Profiles\l82wqagt.default-release\Extensions\leechblockng@proginosko.com.xpi [2022-05-03]
FF Extension: (uBlock Origin) - C:\Users\Marcelka a Pavlíček\AppData\Roaming\Mozilla\Firefox\Profiles\l82wqagt.default-release\Extensions\uBlock0@raymondhill.net.xpi [2022-06-15]
FF Extension: (ImTranslator: Překladač, Slovník, Hlas) - C:\Users\Marcelka a Pavlíček\AppData\Roaming\Mozilla\Firefox\Profiles\l82wqagt.default-release\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2022-05-23]
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-07-05] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.341.2 -> C:\Program Files (x86)\Java\jre1.8.0_341\bin\dtplugin\npDeployJava1.dll [2022-07-23] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.341.2 -> C:\Program Files (x86)\Java\jre1.8.0_341\bin\plugin2\npjp2.dll [2022-07-23] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.14 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [14621592 2022-07-13] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [42616 2017-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
S3 nmwcd; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [19968 2012-01-09] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 nmwcdc; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [27136 2012-01-09] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys [9216 2012-01-09] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltjx64.sys [9216 2012-01-09] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R3 VClone; C:\WINDOWS\System32\drivers\VClone.sys [44544 2020-02-22] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
S3 semav6msr64; \??\C:\WINDOWS\system32\drivers\semav6msr64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-07-30 16:02 - 2022-07-30 16:04 - 000014804 _____ C:\Users\Marcelka a Pavlíček\Downloads\FRST.txt
2022-07-30 15:53 - 2022-07-30 16:07 - 272076446 _____ C:\Users\Marcelka a Pavlíček\Downloads\(2014)Všechny cesty vedou do hrobu-Cz dabing.avi.7823969739471812302.part
2022-07-29 08:26 - 2022-07-29 08:26 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2022-07-29 08:26 - 2022-07-29 08:26 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2022-07-29 08:25 - 2022-07-29 08:25 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-07-29 08:25 - 2022-07-29 08:25 - 000162304 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-07-29 08:25 - 2022-07-29 08:25 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2022-07-29 08:25 - 2022-07-29 08:25 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2022-07-29 08:25 - 2022-07-29 08:25 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2022-07-29 08:25 - 2022-07-29 08:25 - 000011797 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-07-28 23:02 - 2022-07-28 23:02 - 000000000 ___HD C:\$WinREAgent
2022-07-26 18:20 - 2022-07-29 23:36 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-07-14 15:35 - 2022-07-14 15:35 - 000530944 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-07-14 15:35 - 2022-07-14 15:35 - 000470528 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
2022-07-01 20:54 - 2022-07-01 20:54 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com
2022-07-01 20:54 - 2022-07-01 20:54 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com
2022-07-01 20:54 - 2022-07-01 20:54 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com
2022-07-01 20:53 - 2022-07-01 20:53 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-07-01 20:53 - 2022-07-01 20:53 - 000693248 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2022-07-01 20:53 - 2022-07-01 20:53 - 000270848 _____ C:\WINDOWS\system32\EsclScan.dll
2022-07-01 20:53 - 2022-07-01 20:53 - 000152064 _____ C:\WINDOWS\system32\EsclProtocol.dll
2022-07-01 20:53 - 2022-07-01 20:53 - 000061952 _____ C:\WINDOWS\system32\printticketvalidation.dll
2022-07-01 20:53 - 2022-07-01 20:53 - 000057344 _____ C:\WINDOWS\system32\APMonUI.dll
2022-07-01 20:53 - 2022-07-01 20:53 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mode.com
2022-07-01 20:53 - 2022-07-01 20:53 - 000024576 _____ C:\WINDOWS\system32\WsdProviderUtil.dll
2022-07-01 20:53 - 2022-07-01 20:53 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tree.com
2022-07-01 20:53 - 2022-07-01 20:53 - 000018944 _____ C:\WINDOWS\SysWOW64\WsdProviderUtil.dll
2022-07-01 20:53 - 2022-07-01 20:53 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\chcp.com
2022-07-01 20:52 - 2022-07-01 20:52 - 000640512 _____ C:\WINDOWS\system32\SettingSyncDownloadHelper.dll
2022-06-30 11:23 - 2022-06-30 11:23 - 000000000 ____D C:\Users\Marcelka a Pavlíček\.ms-ad
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-07-30 16:03 - 2021-09-17 10:45 - 000000000 ____D C:\FRST
2022-07-30 16:02 - 2021-09-17 10:44 - 002369536 _____ (Farbar) C:\Users\Marcelka a Pavlíček\Downloads\FRST64.exe
2022-07-30 16:00 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-07-30 15:57 - 2020-11-17 00:29 - 000000000 ____D C:\Users\Marcelka a Pavlíček\AppData\Roaming\vlc
2022-07-30 15:55 - 2019-08-28 22:45 - 000000000 ____D C:\Users\Marcelka a Pavlíček\AppData\LocalLow\Mozilla
2022-07-30 15:52 - 2020-06-08 22:53 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-07-30 12:13 - 2020-11-03 22:33 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2022-07-30 08:03 - 2020-06-08 23:01 - 001696380 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-07-30 08:03 - 2019-12-07 16:41 - 000719042 _____ C:\WINDOWS\system32\perfh005.dat
2022-07-30 08:03 - 2019-12-07 16:41 - 000145638 _____ C:\WINDOWS\system32\perfc005.dat
2022-07-30 08:03 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-07-30 08:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-07-30 07:55 - 2020-06-08 23:00 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-07-30 07:54 - 2020-06-08 22:53 - 000008192 ___SH C:\DumpStack.log.tmp
2022-07-29 23:40 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-07-29 23:36 - 2020-06-08 22:53 - 000545776 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-07-29 23:36 - 2019-08-28 22:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-07-29 23:35 - 2019-12-07 16:44 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2022-07-29 23:35 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-07-29 23:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2022-07-29 23:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-07-29 23:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-07-29 23:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2022-07-29 23:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-07-29 23:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-07-29 23:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-07-29 23:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-07-29 08:31 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-07-29 08:25 - 2020-06-08 22:59 - 003010560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-07-28 17:18 - 2021-12-13 17:50 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3884071663-162100166-419435186-1001
2022-07-28 17:18 - 2020-06-08 23:00 - 000003404 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3884071663-162100166-419435186-1001
2022-07-28 17:18 - 2020-06-08 22:33 - 000002419 _____ C:\Users\Marcelka a Pavlíček\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-07-28 17:01 - 2020-02-21 11:46 - 000000000 ____D C:\Users\Marcelka a Pavlíček\Documents\Inkaso a další platby
2022-07-28 14:53 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-07-26 18:22 - 2021-10-06 16:16 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-07-26 18:22 - 2019-08-28 22:45 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-07-25 14:21 - 2020-06-08 08:29 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-07-23 15:14 - 2019-09-22 15:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2022-07-23 15:14 - 2019-09-22 15:57 - 000000000 ____D C:\Program Files (x86)\Java
2022-07-23 15:13 - 2019-09-22 15:57 - 000168144 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2022-07-22 12:44 - 2021-03-01 20:10 - 000002426 _____ C:\Users\Marcelka a Pavlíček\Desktop\Microsoft Teams.lnk
2022-07-14 19:53 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2022-07-14 15:19 - 2019-08-28 23:03 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-07-14 15:14 - 2019-08-28 23:03 - 146546848 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-07-14 15:11 - 2020-06-08 23:00 - 000003640 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-07-14 15:11 - 2020-06-08 23:00 - 000003516 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-07-12 17:42 - 2020-06-08 23:00 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-07-12 17:41 - 2021-12-13 18:57 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2022-07-04 12:22 - 2021-10-31 14:50 - 000000000 ____D C:\Users\NeroMediaHomeUser.4
2022-07-01 21:15 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2022-07-01 21:15 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-07-01 21:15 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-07-01 21:15 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2022-07-01 12:54 - 2019-09-13 15:51 - 000001435 _____ C:\Users\Marcelka a Pavlíček\Desktop\Roblox Player.lnk
2022-07-01 12:54 - 2019-09-13 15:45 - 000000000 ____D C:\Users\Marcelka a Pavlíček\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2022-06-30 11:23 - 2020-06-08 22:33 - 000000000 ____D C:\Users\Marcelka a Pavlíček
==================== Files in the root of some directories ========
2021-10-22 23:07 - 2021-10-22 23:07 - 000000209 _____ () C:\Users\Marcelka a Pavlíček\AppData\Roaming\DESKTOP-79A5PSH.MTBF.txt
2021-02-02 20:55 - 2021-02-02 21:00 - 000000128 _____ () C:\Users\Marcelka a Pavlíček\AppData\Roaming\winscp.rnd
2019-10-01 21:04 - 2022-04-24 20:11 - 000028289 _____ () C:\Users\Marcelka a Pavlíček\AppData\Local\FSDownloader.err
2019-09-22 15:24 - 2022-04-24 20:11 - 000001128 _____ () C:\Users\Marcelka a Pavlíček\AppData\Local\FSDownloader.nast
2021-08-27 20:44 - 2021-08-27 20:44 - 000000017 _____ () C:\Users\Marcelka a Pavlíček\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-07-2022
Ran by Marcelka a Pavlíček (30-07-2022 16:07:58)
Running from C:\Users\Marcelka a Pavlíček\Downloads
Microsoft Windows 10 Home Version 21H2 19044.1865 (X64) (2020-06-08 21:00:31)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-3884071663-162100166-419435186-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3884071663-162100166-419435186-503 - Limited - Disabled)
Guest (S-1-5-21-3884071663-162100166-419435186-501 - Limited - Disabled)
Marcelka a Pavlíček (S-1-5-21-3884071663-162100166-419435186-1001 - Administrator - Enabled) => C:\Users\Marcelka a Pavlíček
WDAGUtilityAccount (S-1-5-21-3884071663-162100166-419435186-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 21.07 (x64) (HKLM\...\7-Zip) (Version: 21.07 - Igor Pavlov)
Adobe Acrobat DC (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 22.001.20169 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-001824458876}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AMD Accelerated Video Transcoding (HKLM\...\{26BD909B-6DBC-ED20-1F32-57C8C45BC891}) (Version: 12.5.100.20815 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (HKLM\...\{503F672D-6C84-448A-8F8F-4BC35AC83441}) (Version: 10.0.1016.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{E2078C11-E9EC-BD96-037C-A3423082F2BF}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Audacity 3.1.3 (HKLM\...\Audacity_is1) (Version: 3.1.3 - Audacity Team)
Avidemux VC++ 64bits (HKU\S-1-5-21-3884071663-162100166-419435186-1001\...\{6f2741ee-cfa1-4818-9d91-3317ddf5802d}) (Version: 2.8.0 - Mean)
Balíček ovladače systému Windows - Nokia Modem (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia)
Balíček ovladače systému Windows - Nokia Modem (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia)
Balíček ovladače systému Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
Catalyst Control Center - Branding (HKLM-x32\...\{11087D24-567D-7D88-69C6-D7A08B5F4C47}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Diablo II CZ verze 1.13c (HKLM-x32\...\{F380060E-D8AC-4823-91B8-71B9054C8DD2}_is1) (Version: 1.13c - )
Doom 3 verze 1.3.1 (HKLM-x32\...\{412432A1-677C-438F-A7D3-BB17DE4AF32D}_is1) (Version: 1.3.1 - )
FastShare.cz verze 2.4.0 (HKLM-x32\...\FastShare.cz_is1) (Version: 2.4.0 - )
FFmpeg v2.2.2 for Audacity - 64bit (HKLM\...\FFmpeg for Audacity_is1) (Version: - )
Intel(R) Display Audio Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 6.14.00.3097 - Intel Corporation)
Java 8 Update 341 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180341F0}) (Version: 8.0.3410.10 - Oracle Corporation)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
LEGO® Batman™ (HKLM-x32\...\InstallShield_{0FFC48C5-C74B-498E-B908-74CB44D30E32}) (Version: 1.00.0000 - Warner Bros. Interactive Entertainment)
LibreOffice 7.3.2.2 (HKLM\...\{001D6695-F9B8-4CBD-AA92-FE8A58638060}) (Version: 7.3.2.2 - The Document Foundation)
Microsoft .NET Host - 5.0.12 (x64) (HKLM\...\{B39AF887-9BA7-44B8-995F-0F21560E3F21}) (Version: 40.48.30622 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 5.0.12 (x64) (HKLM\...\{2A7F448F-0716-4DCF-93D1-7BEE91DAC0B6}) (Version: 40.48.30622 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.12 (x64) (HKLM\...\{84BBB763-AD8F-4033-8429-3DFC7C9FF3E2}) (Version: 40.48.30622 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.12 (x64) (HKLM-x32\...\{5bd6ae15-bcab-4509-86af-c5dfc54b60d7}) (Version: 5.0.12.30622 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 103.0.1264.71 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3884071663-162100166-419435186-1001\...\OneDriveSetup.exe) (Version: 22.141.0703.0002 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-3884071663-162100166-419435186-1001\...\Teams) (Version: 1.5.00.14473 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (HKLM\...\{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (HKLM\...\{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (HKLM-x32\...\{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (HKLM-x32\...\{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 x64 Additional Runtime - 14.0.24210 (HKLM\...\{95265B86-188E-3F62-9CDB-60FCE59EC721}) (Version: 14.0.24210 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x64 Minimum Runtime - 14.0.24210 (HKLM\...\{C0B2C673-ECAA-372D-94E5-E89440D087AD}) (Version: 14.0.24210 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.30.30704 (HKLM-x32\...\{4d8dcf8c-a72a-43e1-9833-c12724db736e}) (Version: 14.30.30704.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.30.30704 (HKLM-x32\...\{BF08E976-B92E-4336-B56F-2171179476C4}) (Version: 14.30.30704 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.30.30704 (HKLM-x32\...\{F6080405-9FA8-4CAA-9982-14E95D1A3DAC}) (Version: 14.30.30704 - Microsoft Corporation) Hidden
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 103.0 (x64 cs)) (Version: 103.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 68.0.2 - Mozilla)
MSVC90_x64 (HKLM\...\{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}) (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (HKLM-x32\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
Nokia Connectivity Cable Driver (HKLM-x32\...\{A57025CC-5F2E-4D01-B387-06DB10500D43}) (Version: 7.1.78.0 - Nokia)
Nokia PC Suite (HKLM-x32\...\{866C4563-ED53-43F3-A29D-8BEE2BD1BA3C}) (Version: 7.1.180.94 - Nokia) Hidden
Nokia PC Suite (HKLM-x32\...\Nokia PC Suite) (Version: 7.1.180.94 - Nokia)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
PC Connectivity Solution (HKLM-x32\...\{644F4910-E812-49AD-93EC-86828CB81A0D}) (Version: 12.0.27.0 - Nokia)
Roblox Player for Marcelka a Pavlíček (HKU\S-1-5-21-3884071663-162100166-419435186-1001\...\roblox-player) (Version: - Roblox Corporation)
Roblox Studio for Marcelka a Pavlíček (HKU\S-1-5-21-3884071663-162100166-419435186-1001\...\roblox-studio) (Version: - Roblox Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.1 - Synaptics Incorporated)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.32.3 - TeamViewer)
The Elder Scrolls V Skyrim LE (HKLM-x32\...\The Elder Scrolls V Skyrim LE_is1) (Version: - )
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 10.00 - Ghisler Software GmbH)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.5.2.0 - Elaborate Bytes)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.16 - VideoLAN)
WinSCP 5.17.10 (HKLM-x32\...\winscp3_is1) (Version: 5.17.10 - Martin Prikryl)
Packages:
=========
Artinii Cinema Player -> C:\Program Files\WindowsApps\Artinii.ArtiniiCinemaPlayer_1.1.776.0_x64__3p48kjqbq46a6 [2022-07-09] (Artinii)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-03-04] (Microsoft Corporation)
Doplněk pro Fotky -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-03-12] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-08-30] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-08-30] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.13.7180.0_x64__8wekyb3d8bbwe [2022-07-28] (Microsoft Studios) [MS Ad]
uBlock Origin -> C:\Program Files\WindowsApps\37833NikRolls.uBlockOrigin_1.15.24.0_neutral__f8jsg5mm64m62 [2020-04-11] (Nik Rolls)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3884071663-162100166-419435186-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Marcelka a Pavlíček\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.22117.3\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
ContextMenuHandlers2: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2017-03-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [File not signed]
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [msacm.l3acm] => C:\Windows\SysWOW64\l3codecp.acm [189440 2019-12-07] (Microsoft Windows -> Fraunhofer Institut Integrierte Schaltungen IIS)
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2022-06-16 14:44 - 2022-06-16 14:44 - 000031232 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\A4.Foundation\c5269687443b8d130862fde90ff0871c\A4.Foundation.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000022528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Actions5dc83b46#\e3398d899a5f8dad2f8b0ca8b2b14c61\AEM.Actions.CCAA.Shared.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.0a1309f7#\0a825fc66c95e1767511b6413581ae6c\AEM.Plugin.EEU.Shared.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.2b6a6775#\29bb852465e915e05041abf96273c608\AEM.Plugin.Hotkeys.Shared.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000016384 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.54d8abe3#\a7aa014b174bacde99ad22c18b9ef5e1\AEM.Plugin.DPPE.Shared.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000281600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.5d945b6b#\7135e8e15287a2531ddfa43f0ce9c3fd\AEM.Plugin.Source.Kit.Server.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000014848 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.674d2b8a#\c00e3f9b88ebc3948a211e051df20912\AEM.Plugin.WinMessages.Shared.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.88aba5d2#\483a0d101a62d4f3e37e26528e728eaa\AEM.Plugin.REG.Shared.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000011776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.GD.Shared\c7aba31a8af9cbcb3c146d077d2dd8cf\AEM.Plugin.GD.Shared.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server.Shared\72ecad8c78a194c04567a266d9302fd9\AEM.Server.Shared.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000267776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server\690690748c445c8fe421ec66415fc8bd\AEM.Server.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000055808 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Foundation\9843cf9d35fb83b037c48d7c3da00f08\APM.Foundation.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000122880 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ATICCCom\2f1335f6b2ae5b085a0dab82e3bffbef\ATICCCom.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000204288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CCC.Implementation\579bffc6df89c20dfab96e5e85351869\CCC.Implementation.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000154112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.21d2ac78#\e4c92c5fd0167581f6ef18b3592997be\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000128000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3399d0ec#\7f9c062c7fd701f18b3ceaab7b94dadf\CLI.Aspect.CustomFormats.Graphics.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000026112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.37d3d968#\6902e4e6206145cd32826229a1422ba1\CLI.Aspect.AMDHome.Graphics.Shared.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000045568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.382a3def#\d48e28c445e9d5d733ccfaed8ed0d54f\CLI.Aspect.AMDOverDrive.Platform.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000107008 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3a6f1658#\0be2494127cd26df60a7544bec488578\CLI.Aspect.TransCode.Graphics.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000132608 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.46819220#\a005c9eb04db368906f8f28240764b78\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000074752 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4bbb0755#\2aa725e59d158cdb8736421f80ef6b60\CLI.Aspect.TransCode.Graphics.Dashboard.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000037888 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.52c6dbaa#\8fa6bc89c476bd632bc0bda3d4bfa0de\CLI.Aspect.FPS.Graphics.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000074752 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.59a12d95#\cc1b90aff72fdffc2dd54a4cf65cbd43\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000263168 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.73911eb5#\6c5ff472bbee7b761f2c6df3f80f7d8d\CLI.Aspect.WirelessDisplay.Graphics.Shared.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000365056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.7ec2db45#\dd2f39f3c55d8978a15d692ffc1dcc46\CLI.Aspect.DeviceDFP.Graphics.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000064000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8350f5c6#\03bcf8618213b19e7594b0db1882f031\CLI.Aspect.UpdateNotification.Graphics.Runtime.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000678912 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.846fa813#\b68894c6b73f418c1496f2d86d1ad26c\CLI.Aspect.MMVideo.Graphics.Dashboard.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000745472 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8d333b6b#\77d40f2cf61618f29b97a9b5aa97c33c\CLI.Aspect.Radeon3D.Graphics.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000449536 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8e996306#\1baade1b495324d35824de9d644cf762\CLI.Aspect.CrossDisplay.Graphics.Dashboard.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000089088 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9cd1e9e7#\5d4add68292df78a50853eb155fdf661\CLI.Aspect.FPS.Graphics.Dashboard.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000057856 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a6cd7fff#\78b97ebc1fb401878ff3dea64c16dfb3\CLI.Aspect.FPS.Graphics.Runtime.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000082944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a765109e#\fcfb29fe14b7e3a9ad9f2cd2a542ff25\CLI.Aspect.UpdateNotification.Graphics.Dashboard.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000462336 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.acb9d930#\0a4f20951a2dad1e9064d1653f89a95b\CLI.Aspect.DeviceProperty.Graphics.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000067072 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b0a7c1fb#\a1122c0ca34dc06c844800c3ce029177\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000340992 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c7aaa0f8#\cc03c19197fd8a1add9067a4f81320a5\CLI.Aspect.OverDrive5.Graphics.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000017920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c854b457#\739bfe4ab5924222597f90a24b1d641c\CLI.Aspect.HotkeysHandling.Graphics.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000096256 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.d4f2f79c#\1e866429b1fc521d666ed6fdb429bb40\CLI.Aspect.CrossFireX.Graphics.Dashboard.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000276480 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e8635fc7#\b9060505f04e50354174c21e712e41d0\CLI.Aspect.InfoCentre.Graphics.Dashboard.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 003312640 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e9fd7406#\b74e7088474ab5cc54e0a498eb8e681d\CLI.Aspect.Radeon3D.Graphics.Dashboard.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000240640 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.eda8935e#\c62cf37deb511b1c4bc52ef0bc6476c0\CLI.Aspect.MMVideo.Graphics.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000047616 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ef3eaa4d#\965cd9d70caa7ca5002b4b986e355e6a\CLI.Aspect.TransCode.Graphics.Runtime.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000050688 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.f480a2f3#\d8be42870eea01c8901804aa4b0aca96\CLI.Aspect.UpdateNotification.Graphics.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000051200 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Runtime\cebe7cfa0de3cb97ea690c7e79af7a7c\CLI.Caste.A4.Runtime.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Shared\60dcbd70e6afc1591596889d296d58da\CLI.Caste.A4.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000027136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Af820fedc#\db17f822e4f2a4d3b3a4147b875772d0\CLI.Caste.A4.Dashboard.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F24de14fe#\07798d6e22d71d046c7443b02e26fc79\CLI.Caste.Fuel.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000311296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F36b07a2b#\d1377e4cf1d5eec58b8d92bb1374e476\CLI.Caste.Fuel.Runtime.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000027136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Ff3085433#\1f1afc3360991b582435375ac9148ee6\CLI.Caste.Fuel.Dashboard.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000037376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60338cc0#\d2b307e59ceff35a6fe0b50b2c68e2c6\CLI.Caste.Graphics.Runtime.Shared.Private.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 001555456 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gd9d9b43b#\e57ecd2044b97f69f98c6574ae3e203c\CLI.Caste.Graphics.Dashboard.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000587776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gee7d2dbc#\aa567df25cd1601a164ab004f1634ec0\CLI.Caste.Graphics.Dashboard.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000045056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H18c99613#\ed29feef0b679c6ca9b1f6539cb95b44\CLI.Caste.HydraVision.Runtime.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H92ba4e46#\94667e814039e604f490d3a7fa932355\CLI.Caste.HydraVision.Shared.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Hbb906c0b#\8ad3f4db823643299238fb8eb567b7e5\CLI.Caste.HydraVision.Dashboard.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pac40511b#\6362f3b450232a76b84295a54f79c762\CLI.Caste.Platform.Shared.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000044032 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pdb36d56e#\59192ac706e9860d5f34001411fdb42a\CLI.Caste.Platform.Runtime.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000024064 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pfeefa2b6#\a3f86123c3f2cc2ba186479c260fd045\CLI.Caste.Platform.Dashboard.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone1b4a8c97#\63e4630be8b758da9094d72ea07b8aa8\CLI.Component.Runtime.Shared.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000901632 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone26c9c557#\b1e59500efc7cec0aa5b81d4b7309463\CLI.Component.Systemtray.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000173568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone29e547cc#\aead0d018c9b0748721fed62d282e558\CLI.Component.Dashboard.ProfileManager2.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000151040 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone59f353b4#\7a893e854a52422bfe1ed4c624d82687\CLI.Component.Runtime.Shared.Private.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componeb4d0485c#\027e64e73c329a16766cee46d84db38e\CLI.Component.Runtime.Extension.EEU.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 001609728 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componec89c3bec#\1d08f04ecdd008161c835461292bc504\CLI.Component.Dashboard.Shared.Private.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000018432 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef1fd67b2#\f24dfd1636c76ccb3cd9ac7e05713b1d\CLI.Component.Client.Shared.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000085504 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef4cf054f#\655eb717a1f0f7171fc669eb86c4a407\CLI.Component.Dashboard.Shared.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000495104 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Component.Eeu\1ffbed3ca88c0f97d89da77dc8166e93\CLI.Component.Eeu.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000089600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat3d5d3945#\eb677cf87d359cc567ce19db3795e30b\CLI.Foundation.Private.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000061440 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat60cdf5df#\01e4dedf4cfeaac9e8c250229eacb7f4\CLI.Foundation.XManifest.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000091136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat619559bd#\8ff4806e5cca69894d553f8befb8dc66\CLI.Foundation.CoreAudioAPI.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 001079808 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundatd3771151#\08feb756f8afb1aae42d9128ce74ffc6\CLI.Foundation.Client.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000301568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundation\73cedde1c14ba5a889726983c2d4d2f1\CLI.Foundation.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Foundation\8cb6fc56a001c65f709af6fdaf603bac\DEM.Foundation.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000115200 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0601\a3c0143b23065cda75c54473596b4fd8\DEM.Graphics.I0601.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000015360 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics\d6a1a93f297da5304ef1eb216702ac65\DEM.Graphics.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000037376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Fuel.Foundation\2ff1acd43729410956f17886d626de4e\Fuel.Foundation.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000296960 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat03490438#\0bb08700713d16a1438da4f6a2319933\LOG.Foundation.Implementation.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000150016 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat5023f8e7#\9ec5ea467d17440c1f5831ddcd36ed6d\LOG.Foundation.Private.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000087552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundatcaafa75b#\882e057d60f7f4235e13714940a4a42e\LOG.Foundation.Implementation.Private.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000132608 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundation\2c269eed754411f7ad903abb4347498a\LOG.Foundation.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Foundation\8d96824ead8d65124ce26daa099a2e4a\MOM.Foundation.ni.dll
2022-06-16 14:54 - 2022-06-16 14:54 - 000402944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Implementation\4f6b85d864bbb2ecbf615e242cb83c04\MOM.Implementation.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000055296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\NEWAEM.Foundation\6790cd1c9ed36153850ad2d995ccb019\NEWAEM.Foundation.ni.dll
2015-11-04 17:40 - 2015-11-04 17:40 - 000005120 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiamcsy.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000897024 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ADL.Foundation\71d66045028bc07fee0d28e6f49573cd\ADL.Foundation.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 000256000 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Server\d20c6f133ed48304caba1fc603a499f5\APM.Server.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000783872 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.79734f7a#\3608c70e0f3bffb7ac4ea5adb1367d66\CLI.Aspect.PowerXpress.Graphics.Runtime.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000357888 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b3da5a8f#\318f2e8795228c8b5a26bfc4f12674dc\CLI.Aspect.PowerXpress.Graphics.Shared.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000595456 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.d4846ba2#\80876dbfa8123d550a73c0a16b5a73f6\CLI.Aspect.PowerXpress.Graphics.Dashboard.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 008027648 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Combine0616f305#\f623761c8f6ec678367066d73dd45285\CLI.Combined.Graphics.Aspects1.Dashboard.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000136704 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone168638d1#\a7508487d542de00d751efbe8b745017\CLI.Component.Client.Shared.Private.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000234496 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6692ca50#\6bc5c48398379179e8f824abaca14257\CLI.Component.Runtime.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000929280 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6bf88b08#\ab0108735cfecb6f9d63be56baf5c068\CLI.Component.Dashboard.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000011264 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0702\d3d27159122bc0c3afb2592641472c37\DEM.Graphics.I0702.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000084480 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0709\0e81dbc0f820dae174a1fa3fbbbf453c\DEM.Graphics.I0709.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000009728 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0710\8eeec5d9771ec6fb562c29ddfa86262b\DEM.Graphics.I0710.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000012288 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0712\6d2b6ef60020fd0f81fae442a9d4ab01\DEM.Graphics.I0712.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000018432 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0804\74f5fc3369cd79cd66681526bac10717\DEM.Graphics.I0804.ni.dll
2022-06-16 14:46 - 2022-06-16 14:46 - 000009728 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0901\dd8777c55d61e174aab0376884334bb6\DEM.Graphics.I0901.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000013312 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0906\2d29d077c0675a126153f5bcd14af326\DEM.Graphics.I0906.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 000035840 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I1010\da52a944341599c1d7b06b911fb170c0\DEM.Graphics.I1010.ni.dll
2022-06-16 14:44 - 2022-06-16 14:44 - 001139200 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Localizatio01dbc1c0#\66201be98652121ddb73497449a02ae3\Localization.Foundation.Private.ni.dll
2022-06-16 14:54 - 2022-06-16 14:54 - 000244736 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceMan446ca0e5#\748ed2bd597f7b0b01d768f4a336c443\ResourceManagement.Foundation.Implementation.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000023552 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceManf163905a#\02fa10f0372582192a41a96a87efd950\ResourceManagement.Foundation.Private.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000091648 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ec8786e5#\d52284bc48c28e4eccdaa291902b53db\CLI.Aspect.AMDHome.Graphics.Dashboard.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 002845696 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60a7b4d1#\de40a5847f9910b66bf8d79abc9a62b8\CLI.Caste.Graphics.Shared.ni.dll
2022-06-16 14:47 - 2022-06-16 14:47 - 003268096 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G962aa464#\822b86e8a55dfa55b30a13f1e0f5a406\CLI.Caste.Graphics.Runtime.ni.dll
2022-02-02 23:41 - 2021-12-26 16:00 - 000093696 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2014-05-18 21:32 - 2019-09-22 15:54 - 000441220 _____ (Java(TM) Native Access (JNA)) [File not signed] C:\Users\Marcelka a Pavlíček\Documents\FreeRapid-0.9u4\lib\jnidispatch32.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 000335360 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.W8090224c#\7b81a58fa357e393818f368f2df372b3\Microsoft.WindowsAPICodePack.ni.dll
2022-06-16 14:45 - 2022-06-16 14:45 - 002546688 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.Wfbf9373c#\9b641318850300701df3d89b1b7caeec\Microsoft.WindowsAPICodePack.Shell.ni.dll
2012-06-26 14:08 - 2012-06-26 14:08 - 000026624 _____ (Nokia) [File not signed] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
2012-06-26 12:58 - 2012-06-26 12:58 - 001262592 _____ (Nokia) [File not signed] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\NGSCM64.DLL
2012-06-26 14:08 - 2012-06-26 14:08 - 000572928 _____ (Nokia) [File not signed] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_341\bin\ssv.dll [2022-07-23] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_341\bin\jp2ssv.dll [2022-07-23] (Oracle America, Inc. -> Oracle Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
2020-12-08 17:41 - 2021-12-07 20:40 - 000000445 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\AMD APP\bin\x86_64;C:\Program Files (x86)\AMD APP\bin\x86;C:\Program Files (x86)\PC Connectivity Solution\;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\dotnet\;C:\Program Files (x86)\AMD\ATI.ACE\Core-Static
HKU\S-1-5-21-3884071663-162100166-419435186-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Marcelka a Pavlíček\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\IMG_20220719_110026.jpg
HKU\S-1-5-21-3884071663-162100166-419435186-1007\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run32: => "VirtualCloneDrive"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [UDP Query User{38F8A0BA-CDB0-4D19-B4F7-4C7F6039A585}C:\users\marcelka a pavlíček\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe
FirewallRules: [TCP Query User{1DDCC2AA-E680-4B66-BE7D-4330682FD8B8}C:\users\marcelka a pavlíček\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe
FirewallRules: [{53643E65-E92D-421E-BA91-54BC289C98EF}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{EFFF745D-6577-4BD1-A3C9-507BF4B7374F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{8F35D91C-6D9A-4C23-B4FB-796822209522}C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{1F98D6DB-5E6B-46E1-A1D6-AB9D438511A5}C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{BB5D7EFD-720C-4777-AD23-31C4C4191B48}C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe] => (Block) C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{D8FB6E9E-E524-4B0B-BA30-3B8DF8F9E87A}C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe] => (Block) C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{F0C3F816-CDFD-456E-A4F1-C66F022888CC}C:\windows\syswow64\dplaysvr.exe] => (Block) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [UDP Query User{BBE7992A-5D10-461D-B837-0A5B4595D7E4}C:\windows\syswow64\dplaysvr.exe] => (Block) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{59BC1102-E02E-4CCC-8786-D98089F1C3FA}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\RM.exe => No File
FirewallRules: [{1A7C740F-F171-447E-AF6F-6E2078A19B5C}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\RM.exe => No File
FirewallRules: [{E477F6A0-A0DE-408A-ACE2-A43060DF7FCE}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\NGStudio.exe => No File
FirewallRules: [{654B1228-32DE-485E-B7B5-FEA57AB71112}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\NGStudio.exe => No File
FirewallRules: [{F1295005-EFDC-4A5E-97D6-4834E5E61CC4}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\UMI.exe => No File
FirewallRules: [{0AE36D2A-4B48-451A-B13E-36B3A22B9161}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\UMI.exe => No File
FirewallRules: [TCP Query User{9B3B40A3-BB3C-4C79-9D45-10DFEDA5D567}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [UDP Query User{E4F2D633-10F6-4EFA-B09B-F27C92746EF7}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [TCP Query User{D9E83077-B0C1-4493-B873-4C7F1B760208}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [UDP Query User{5E8F353E-792D-4503-9673-3043A94113AD}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [TCP Query User{865274DC-BDF7-4947-A800-5B1FEF891070}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [UDP Query User{AB97152A-104E-4788-8735-4C1583311779}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [TCP Query User{F1EA6876-9288-4F73-A2FC-CF166C95636A}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
FirewallRules: [UDP Query User{60648BA0-43F9-4D91-8E92-A1A93FDFA69E}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
FirewallRules: [TCP Query User{08609A56-DCB5-41CB-85AE-B3F6633B2E59}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
FirewallRules: [UDP Query User{822C61A1-99FF-4387-AE79-EF7000F700EB}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
FirewallRules: [{D4ED2DAB-B3A8-4D0D-961E-E267C1D9515D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A3367D78-508C-47E9-B5D0-658A15825FD4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{0D4383BF-23E0-4F14-9466-FEB6928F035A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E0B05586-E37F-4BFA-AA5C-63F1EAE1DA74}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{0E157073-296A-4655-B7D2-E885538B7A76}C:\program files (x86)\java\jre1.8.0_341\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_341\bin\javaw.exe
FirewallRules: [UDP Query User{8C930E31-4C7F-441C-8ED7-82EBA4734287}C:\program files (x86)\java\jre1.8.0_341\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_341\bin\javaw.exe
FirewallRules: [{08DAEC2B-6C40-4C12-A90C-A8C4F5AB0C14}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{3DAE47FA-3CC2-40FD-8767-0B2A04405AE8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{76BAFF29-1D6C-4647-8FB6-173256606E9E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{F26CED5D-C924-4E3A-A838-D8B4550CBAD2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
==================== Restore Points =========================
ATTENTION: System Restore is disabled (Total:110.64 GB) (Free:14.7 GB) (13%)
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (07/25/2022 08:52:27 PM) (Source: EventSystem) (EventID: 4622) (User: )
Description: Systém událostí modelu COM+ nemohl sdružit odběratele pro odběr {8D119751-65C0-4775-BF7F-BC10F47D177E}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}. Výsledek HRESULT byl 8007071a.
Error: (07/23/2022 10:58:44 AM) (Source: Firefox Default Browser Agent) (EventID: 12007) (User: )
Description: Event-ID 12007
Error: (07/23/2022 10:58:44 AM) (Source: Firefox Default Browser Agent) (EventID: 0) (User: )
Description: Event-ID 0
Error: (07/21/2022 08:52:03 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 12) (User: DESKTOP-79A5PSH)
Description: Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy-2147023878
Error: (07/08/2022 11:26:21 PM) (Source: EventSystem) (EventID: 4622) (User: )
Description: Systém událostí modelu COM+ nemohl sdružit odběratele pro odběr {1E14B909-9C63-4722-B728-68EE46CDEB0E}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}. Výsledek HRESULT byl 8007071a.
Error: (07/01/2022 09:14:32 PM) (Source: ATIeRecord) (EventID: 16391) (User: )
Description: ATI EEU maximum number of session has been surpassed
Error: (07/01/2022 07:01:45 PM) (Source: ATIeRecord) (EventID: 16391) (User: )
Description: ATI EEU maximum number of session has been surpassed
Error: (07/01/2022 03:15:05 PM) (Source: ATIeRecord) (EventID: 16391) (User: )
Description: ATI EEU maximum number of session has been surpassed
System errors:
=============
Error: (07/13/2022 09:45:40 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-79A5PSH)
Description: Server {5F7F3F7B-1177-4D4B-B1DB-BC6F671B8F25} se v daném časovém limitu neregistroval u služby DCOM.
Error: (07/10/2022 03:20:23 PM) (Source: Microsoft-Windows-Ntfs) (EventID: 98) (User: NT AUTHORITY)
Description: H:\Device\HarddiskVolume103
Error: (07/09/2022 09:26:04 PM) (Source: Microsoft-Windows-Ntfs) (EventID: 98) (User: NT AUTHORITY)
Description: H:\Device\HarddiskVolume83
Error: (07/05/2022 03:51:20 PM) (Source: Microsoft-Windows-Ntfs) (EventID: 98) (User: NT AUTHORITY)
Description: H:\Device\HarddiskVolume63
Error: (07/01/2022 01:39:53 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Mozilla Maintenance Service byla ukončena s následující chybou:
Nesprávná funkce.
Error: (06/23/2022 09:01:09 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-79A5PSH)
Description: Server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/23/2022 09:01:09 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-79A5PSH)
Description: Server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/23/2022 09:01:09 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-79A5PSH)
Description: Server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} se v daném časovém limitu neregistroval u služby DCOM.
Windows Defender:
================
Date: 2022-07-29 16:03:51
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {17E2186D-C9D9-44DD-8A0E-E563D0D1C870}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2022-07-28 15:11:13
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {C0E99178-3D93-4F94-836E-FF5CFD1054D6}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2022-07-27 15:45:37
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {9B82FD1C-C205-464F-B7C7-B6ED63176F6A}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2022-07-25 15:14:05
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {0E61E9CE-2E97-4630-AF2D-B3A0D8F74F43}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2022-07-24 17:14:07
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {11799C6F-51AD-431D-A48A-159433E17D49}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
CodeIntegrity:
===============
Date: 2021-10-17 13:30:57
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
BIOS: LENOVO 40CN08WW(V3.07) 09/19/2011
Motherboard: LENOVO Base Board Product Name
Processor: Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz
Percentage of memory in use: 89%
Total physical RAM: 4039.86 MB
Available physical RAM: 404.48 MB
Total Virtual: 7239.86 MB
Available Virtual: 2229.59 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:110.64 GB) (Free:14.69 GB) (Model: Patriot Burst) NTFS
Drive f: () (Fixed) (Total:80.52 GB) (Free:16.34 GB) (Model: Apacer Technology Inc. USB Device) FAT32
Drive h: () (Fixed) (Total:217.55 GB) (Free:78.88 GB) (Model: Apacer Technology Inc. USB Device) NTFS
\\?\Volume{f70accae-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.57 GB) (Free:0.53 GB) NTFS
\\?\Volume{f70accae-0000-0000-0000-70cd1b000000}\ () (Fixed) (Total:0.58 GB) (Free:0.08 GB) NTFS
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: F70ACCAE)
Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=110.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=592 MB) - (Type=27)
==========================================================
Disk: 1 (Size: 298.1 GB) (Disk ID: DEA6F72A)
Partition 1: (Not Active) - (Size=80.5 GB) - (Type=0B)
Partition 2: (Not Active) - (Size=217.5 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o preventivní kontrolu děkuji.
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
- Rudy
- Site Admin
- Příspěvky: 118715
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o preventivní kontrolu děkuji.
Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:
Otevřte poznámkový blok a zkopírujte do něj:
Uložte do C:\Users\Marcelka a Pavlíček\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
C:\DumpStack.log.tmp
FirewallRules: [{59BC1102-E02E-4CCC-8786-D98089F1C3FA}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\RM.exe => No File
FirewallRules: [{1A7C740F-F171-447E-AF6F-6E2078A19B5C}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\RM.exe => No File
FirewallRules: [{E477F6A0-A0DE-408A-ACE2-A43060DF7FCE}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\NGStudio.exe => No File
FirewallRules: [{654B1228-32DE-485E-B7B5-FEA57AB71112}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\NGStudio.exe => No File
FirewallRules: [{F1295005-EFDC-4A5E-97D6-4834E5E61CC4}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\UMI.exe => No File
FirewallRules: [{0AE36D2A-4B48-451A-B13E-36B3A22B9161}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\UMI.exe => No File
FirewallRules: [TCP Query User{9B3B40A3-BB3C-4C79-9D45-10DFEDA5D567}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [UDP Query User{E4F2D633-10F6-4EFA-B09B-F27C92746EF7}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [TCP Query User{D9E83077-B0C1-4493-B873-4C7F1B760208}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [UDP Query User{5E8F353E-792D-4503-9673-3043A94113AD}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [TCP Query User{865274DC-BDF7-4947-A800-5B1FEF891070}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [UDP Query User{AB97152A-104E-4788-8735-4C1583311779}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [TCP Query User{F1EA6876-9288-4F73-A2FC-CF166C95636A}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
FirewallRules: [UDP Query User{60648BA0-43F9-4D91-8E92-A1A93FDFA69E}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
FirewallRules: [TCP Query User{08609A56-DCB5-41CB-85AE-B3F6633B2E59}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
FirewallRules: [UDP Query User{822C61A1-99FF-4387-AE79-EF7000F700EB}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o preventivní kontrolu děkuji.
Fix result of Farbar Recovery Scan Tool (x64) Version: 31-07-2022
Ran by Marcelka a Pavlíček (31-07-2022 20:51:08) Run:3
Running from C:\Users\Marcelka a Pavlíček\Downloads
Loaded Profiles: Marcelka a Pavlíček
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
C:\DumpStack.log.tmp
FirewallRules: [{59BC1102-E02E-4CCC-8786-D98089F1C3FA}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\RM.exe => No File
FirewallRules: [{1A7C740F-F171-447E-AF6F-6E2078A19B5C}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\RM.exe => No File
FirewallRules: [{E477F6A0-A0DE-408A-ACE2-A43060DF7FCE}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\NGStudio.exe => No File
FirewallRules: [{654B1228-32DE-485E-B7B5-FEA57AB71112}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\NGStudio.exe => No File
FirewallRules: [{F1295005-EFDC-4A5E-97D6-4834E5E61CC4}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\UMI.exe => No File
FirewallRules: [{0AE36D2A-4B48-451A-B13E-36B3A22B9161}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\UMI.exe => No File
FirewallRules: [TCP Query User{9B3B40A3-BB3C-4C79-9D45-10DFEDA5D567}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [UDP Query User{E4F2D633-10F6-4EFA-B09B-F27C92746EF7}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [TCP Query User{D9E83077-B0C1-4493-B873-4C7F1B760208}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [UDP Query User{5E8F353E-792D-4503-9673-3043A94113AD}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [TCP Query User{865274DC-BDF7-4947-A800-5B1FEF891070}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [UDP Query User{AB97152A-104E-4788-8735-4C1583311779}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [TCP Query User{F1EA6876-9288-4F73-A2FC-CF166C95636A}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
FirewallRules: [UDP Query User{60648BA0-43F9-4D91-8E92-A1A93FDFA69E}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
FirewallRules: [TCP Query User{08609A56-DCB5-41CB-85AE-B3F6633B2E59}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
FirewallRules: [UDP Query User{822C61A1-99FF-4387-AE79-EF7000F700EB}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{59BC1102-E02E-4CCC-8786-D98089F1C3FA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1A7C740F-F171-447E-AF6F-6E2078A19B5C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E477F6A0-A0DE-408A-ACE2-A43060DF7FCE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{654B1228-32DE-485E-B7B5-FEA57AB71112}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F1295005-EFDC-4A5E-97D6-4834E5E61CC4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0AE36D2A-4B48-451A-B13E-36B3A22B9161}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{9B3B40A3-BB3C-4C79-9D45-10DFEDA5D567}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E4F2D633-10F6-4EFA-B09B-F27C92746EF7}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D9E83077-B0C1-4493-B873-4C7F1B760208}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{5E8F353E-792D-4503-9673-3043A94113AD}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{865274DC-BDF7-4947-A800-5B1FEF891070}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{AB97152A-104E-4788-8735-4C1583311779}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F1EA6876-9288-4F73-A2FC-CF166C95636A}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{60648BA0-43F9-4D91-8E92-A1A93FDFA69E}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{08609A56-DCB5-41CB-85AE-B3F6633B2E59}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{822C61A1-99FF-4387-AE79-EF7000F700EB}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 317217211 B
Java, Discord, Steam htmlcache => 0 B
Windows/system/drivers => 4890643 B
Edge => 0 B
Firefox => 1138449989 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 254916 B
Marcelka a Pavlíček => 1177472515 B
NeroMediaHomeUser.4 => 1177472515 B
RecycleBin => 4369463 B
EmptyTemp: => 3.6 GB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 31-07-2022 20:58:30)
C:\DumpStack.log.tmp => Could not move
==== End of Fixlog 20:58:30 ====
Ran by Marcelka a Pavlíček (31-07-2022 20:51:08) Run:3
Running from C:\Users\Marcelka a Pavlíček\Downloads
Loaded Profiles: Marcelka a Pavlíček
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
C:\DumpStack.log.tmp
FirewallRules: [{59BC1102-E02E-4CCC-8786-D98089F1C3FA}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\RM.exe => No File
FirewallRules: [{1A7C740F-F171-447E-AF6F-6E2078A19B5C}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\RM.exe => No File
FirewallRules: [{E477F6A0-A0DE-408A-ACE2-A43060DF7FCE}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\NGStudio.exe => No File
FirewallRules: [{654B1228-32DE-485E-B7B5-FEA57AB71112}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\NGStudio.exe => No File
FirewallRules: [{F1295005-EFDC-4A5E-97D6-4834E5E61CC4}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\UMI.exe => No File
FirewallRules: [{0AE36D2A-4B48-451A-B13E-36B3A22B9161}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\UMI.exe => No File
FirewallRules: [TCP Query User{9B3B40A3-BB3C-4C79-9D45-10DFEDA5D567}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [UDP Query User{E4F2D633-10F6-4EFA-B09B-F27C92746EF7}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [TCP Query User{D9E83077-B0C1-4493-B873-4C7F1B760208}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [UDP Query User{5E8F353E-792D-4503-9673-3043A94113AD}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [TCP Query User{865274DC-BDF7-4947-A800-5B1FEF891070}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [UDP Query User{AB97152A-104E-4788-8735-4C1583311779}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe => No File
FirewallRules: [TCP Query User{F1EA6876-9288-4F73-A2FC-CF166C95636A}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
FirewallRules: [UDP Query User{60648BA0-43F9-4D91-8E92-A1A93FDFA69E}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
FirewallRules: [TCP Query User{08609A56-DCB5-41CB-85AE-B3F6633B2E59}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
FirewallRules: [UDP Query User{822C61A1-99FF-4387-AE79-EF7000F700EB}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{59BC1102-E02E-4CCC-8786-D98089F1C3FA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1A7C740F-F171-447E-AF6F-6E2078A19B5C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E477F6A0-A0DE-408A-ACE2-A43060DF7FCE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{654B1228-32DE-485E-B7B5-FEA57AB71112}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F1295005-EFDC-4A5E-97D6-4834E5E61CC4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0AE36D2A-4B48-451A-B13E-36B3A22B9161}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{9B3B40A3-BB3C-4C79-9D45-10DFEDA5D567}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E4F2D633-10F6-4EFA-B09B-F27C92746EF7}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D9E83077-B0C1-4493-B873-4C7F1B760208}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{5E8F353E-792D-4503-9673-3043A94113AD}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{865274DC-BDF7-4947-A800-5B1FEF891070}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{AB97152A-104E-4788-8735-4C1583311779}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F1EA6876-9288-4F73-A2FC-CF166C95636A}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{60648BA0-43F9-4D91-8E92-A1A93FDFA69E}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{08609A56-DCB5-41CB-85AE-B3F6633B2E59}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{822C61A1-99FF-4387-AE79-EF7000F700EB}C:\program files (x86)\java\jre1.8.0_331\bin\javaw.exe" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 317217211 B
Java, Discord, Steam htmlcache => 0 B
Windows/system/drivers => 4890643 B
Edge => 0 B
Firefox => 1138449989 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 254916 B
Marcelka a Pavlíček => 1177472515 B
NeroMediaHomeUser.4 => 1177472515 B
RecycleBin => 4369463 B
EmptyTemp: => 3.6 GB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 31-07-2022 20:58:30)
C:\DumpStack.log.tmp => Could not move
==== End of Fixlog 20:58:30 ====
- Rudy
- Site Admin
- Příspěvky: 118715
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o preventivní kontrolu děkuji.
Smazáno, log by již měl být OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o preventivní kontrolu děkuji.
Ok díky. Jern zbytečnosti tam byli, Díky za odpoved.
- Rudy
- Site Admin
- Příspěvky: 118715
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o preventivní kontrolu děkuji.
Ano, jen zbytečnosti.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.