Prosím o kontrolu logu - pomalý chrome

PECHY15 · Příspěvekod **PECHY15** » 25 úno 2021 17:19

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:15:04, on 25.2.2021
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.19203)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\Xtreme.exe
C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\IObit\Driver Booster\5.2.0\Pub\PubMonitor.exe
C:\Users\PECHY\Desktop\hijackthis.exe
C:\Windows\SysWOW64\DllHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O1 - Hosts: TCP/IP
O1 - Hosts: noms d'hôtes.
O1 - Hosts: doit etre placée
O1 - Hosts: correspondant. L'adresse
O1 - Hosts: espace.
O1 - Hosts: insérés sur des
O1 - Hosts: par le
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Plex Media Server] "C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe"
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Steam] "G:\Steam\steam.exe" -silent
O4 - HKUS\S-1-5-18\..\Run: [Plex Media Server] "C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Plex Media Server] "C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe" (User 'Default user')
O4 - Startup: GIGABYTE XTREME GAMING ENGINE.lnk = C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\autorun.exe
O4 - Startup: Sledování výstrah kazety - HP DJ 2600 series.lnk = ?
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - (no file)
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - (no file)
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Inc. - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Služba %1!s! Update (avast) (avast) - AVAST Software - C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Tools (avast! Tools) - AVAST Software - C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
O23 - Service: Služba %1!s! Update (avastm) (avastm) - AVAST Software - C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
O23 - Service: Avast Secure Browser Elevation Service (AvastSecureBrowserElevationService) (AvastSecureBrowserElevationService) - AVAST Software - C:\Program Files (x86)\AVAST Software\Browser\Application\88.1.8016.150\elevation_service.exe
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google LLC - C:\Program Files (x86)\Google\Chrome\Application\88.0.4324.182\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Killer Service V2 - Rivet Networks - C:\Program Files\Killer Networking\Network Manager\KillerService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Plex Update Service (PlexUpdateService) - Plex, Inc. - C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

Reklama

Příspěvekod **jaro3** » 25 úno 2021 19:13

Stáhni si ATF Cleaner
https://www.majorgeeks.com/mg/getmirror ... ner,2.html
Poklepej na ATF Cleaner.exe, klikni na select all, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

Stáhni si TFC
http://www.geekstogo.com/forum/files/fi ... -oldtimer/
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/
http://www.adlice.com/downloadprogress/
pro majitele win7 stáhni zde:
https://filehippo.com/download_adwcleaner/ ( nedávej aktualizaci!)

Ulož si ho na svojí plochu . Klikni na „Souhlasím“ k povrzení podmínek.
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Skenování“
Po skenu se objeví log , který se otevře. ( jinak je uložen systémovem disku jako C:\AdwCleaner [C?].txt ), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
https://www.malwarebytes.com/mwb-download/thankyou/

na plochu , nainstaluj a spusť ho
-Pokud není program aktuální , klikni na možnost „Aktualizovat nyní“ či „Opravit nyní“.
- bude nalezena aktualizace a nainstaluje se.
- poté klikni na Spustit skenování
- po proběhnutí skenu se ti objeví hláška vpravo dole, tak klikni na Zobrazit zprávu a vyber Export a vyber Kopírovat do schránky a vlož sem celý log. Nebo klikni na „Textový soubor ( .txt)“ a log si ulož.
-jinak se log nachází v programu po kliknutí na „Zprávy“ , nebo je uložen zde: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs

- po té klikni na tlačítko Dokončit, a program zavři křížkem vpravo nahoře.
(zatím nic nemaž!).
Pokud budou problémy , spusť v nouz. režimu.

PECHY15 · Příspěvekod **PECHY15** » 27 úno 2021 16:26

# -------------------------------
# Malwarebytes AdwCleaner 8.1.0.0
# -------------------------------
# Build: 02-15-2021
# Database: 2021-01-26.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 02-27-2021
# Duration: 00:00:09
# OS: Windows 7 Ultimate
# Scanned: 4999
# Detected: 4

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.AdvancedSystemCare C:\Users\PECHY\AppData\Roaming\IObit\Advanced SystemCare

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

PUP.Optional.Legacy C:\Windows\System32\Tasks\DRIVER BOOSTER SCHEDULER

***** [ Registry ] *****

PUP.Optional.Legacy HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{143B4508-966B-4D8C-BD0F-93C694FB20E2}
PUP.Optional.Legacy HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Scheduler

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.

AdwCleaner[S00].txt - [2090 octets] - [04/12/2020 18:18:52]
AdwCleaner[C00].txt - [2141 octets] - [04/12/2020 18:19:29]
AdwCleaner[S01].txt - [1889 octets] - [27/02/2021 16:15:17]

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 27.02.21
Čas skenování: 16:20
Logovací soubor: 59e9df76-790f-11eb-ba90-448a5b837fe2.json

-Informace o softwaru-
Verze: 4.3.0.98
Verze komponentů: 1.0.1173
Aktualizovat verzi balíku komponent: 1.0.37559
Licence: Zkušební

-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x64
Systém souborů: NTFS
Uživatel: PECHY-PC\PECHY

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 251868
Zjištěné hrozby: 3
Hrozby umístěné do karantény: 0
Uplynulý čas: 2 min, 14 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 1
PUP.Optional.StartPage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WarThunder0, Žádná uživatelská akce, 571, 186209, 1.0.37559, , ame, , ,

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 2
PUP.Optional.BundleInstaller, C:\USERS\PECHY\DOWNLOADS\ATUBE_CATCHER.EXE, Žádná uživatelská akce, 150, 826880, 1.0.37559, , ame, , 99049E8A9E318732B401E1842C08D712, B7D27F777483A389292BBFF6BDEB894D7401FB0957695A121B35989FF0B71F2B
Generic.Malware/Suspicious, C:\USERS\PECHY\DESKTOP\ČIšTěNí PC\ZOEK.EXE, Žádná uživatelská akce, 0, 392686, 1.0.37559, , shuriken, , 294DBD73A55AF616B18771026B499B53, CDF21E47A065A699769D6CEB95474249270B4700547AB86369A311BB69A93DEC

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)

WMI: 0
(Nebyly zjištěny žádné škodlivé položky)

Příspěvekod **jaro3** » 27 úno 2021 20:59

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Skenování“ , po prohledání klikni na „ do karantény“

Program provede opravu, po automatickém restartu klikni na „Log soubor“ a pak poklepej na odpovídají log, (C:\AdwCleaner [C?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu
http://www.bleepingcomputer.com/downloa ... oval-tool/
https://downloads.malwarebytes.com/file/JRT-EOL
na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. spusť znovu Malwarebytes' Anti-Malware a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Sophos Virus Removal Tool je praktický softwarový nástroj, který by mohl odstranit infekce, které antivirový program nedetekuje .
Stáhněte si ho zde z některého odkazu:
http://www.majorgeeks.com/files/details ... _tool.html
http://www.majorgeeks.com/mg/get/sophos ... ool,1.html
http://www.majorgeeks.com/mg/getmirror/ ... ool,1.html
http://www.majorgeeks.com/mg/getmirror/ ... ool,2.html

Viry mohou zpomalit počítač, nebo se snaží ukrást vaše data, a ani nevíte , že je máte. Co potřebujete, je rychlý a snadný způsob, jak je najít a zbavit se jich, pokud již máte antivirový program v počítači nainstalován , můžete nainstalovat i nástroj Sophos Virus Removal , který identifikuje a vyčistí zbylé infekce, které mohl Váš antivirový program přehlédnout.
K použití Sophos Virus Removal Tool na něj poklepejte a stiskněte tlačítko „Start scanning“ . Pak bude Sophos Virus Removal Tool vyhledávat a odstraňovat viry, které najde. Může být vyžadován restart.
Pokud byly nalezeny viry , tak po skenu klikni na „Details…“ a potom na „View log file“. Zkopíruj celý log a vlož ho sem. Potom zavři „threat detail“ a klikni na „Start cleanup“.
Jinak se log nachází zde:
C:\ProgramData\Sophos\Sophos Virus Removal Tool\Logs

Stáhni si RogueKiller by Adlice Software
http://www.adlice.com/download/roguekiller/
http://www.bleepingcomputer.com/download/roguekiller/
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7,8,10 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- klikni na „Start Scan“. V novém okně nic neměň a klikni dole na „Start Scan“
- Program skenuje procesy PC. Po proskenování klikni na „Open Report “ , v okně pak na „Open TXT“ a celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.
-pokud bude mít log více než 60.000 znaků , rozděl ho a vlož do více příspěvků

PECHY15 · Příspěvekod **PECHY15** » 28 úno 2021 11:29

# -------------------------------
# Malwarebytes AdwCleaner 8.1.0.0
# -------------------------------
# Build: 02-15-2021
# Database: 2021-01-26.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 02-28-2021
# Duration: 00:00:08
# OS: Windows 7 Ultimate
# Scanned: 4935
# Detected: 4

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.AdvancedSystemCare C:\Users\PECHY\AppData\Roaming\IObit\Advanced SystemCare

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

PUP.Optional.Legacy C:\Windows\System32\Tasks\DRIVER BOOSTER SCHEDULER

***** [ Registry ] *****

PUP.Optional.Legacy HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{143B4508-966B-4D8C-BD0F-93C694FB20E2}
PUP.Optional.Legacy HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Scheduler

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.

AdwCleaner[S00].txt - [2090 octets] - [04/12/2020 18:18:52]
AdwCleaner[C00].txt - [2141 octets] - [04/12/2020 18:19:29]
AdwCleaner[S01].txt - [1889 octets] - [27/02/2021 16:15:17]
AdwCleaner[S02].txt - [1950 octets] - [27/02/2021 16:16:07]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 7 Ultimate x64
Ran by PECHY (Administrator) on ne 28.02.2021 at 10:22:35,57
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 33

Successfully deleted: C:\ProgramData\productdata (Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\pdfforge (Folder)
Successfully deleted: C:\Windows\system32\Tasks\Driver Booster SkipUAC (PECHY) (Task)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0DYW0KPC (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4N1LIZWH (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ILUW3LJ (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B17WA5SS (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C9XYP28R (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D6J7K1PK (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ES63S4JF (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F151FEBC (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FSAX2PY5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KJNFM0LI (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KR1SV9BS (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R1DA05MB (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SYTBOIVQ (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W3N2B3H3 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YVH0T06U (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0DYW0KPC (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4N1LIZWH (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ILUW3LJ (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B17WA5SS (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C9XYP28R (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D6J7K1PK (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ES63S4JF (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F151FEBC (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FSAX2PY5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KJNFM0LI (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KR1SV9BS (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R1DA05MB (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SYTBOIVQ (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W3N2B3H3 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YVH0T06U (Temporary Internet Files Folder)

Registry: 0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 28.02.2021 at 10:24:35,20
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 28.02.21
Čas skenování: 10:29
Logovací soubor: 715ddf03-79a7-11eb-88c6-448a5b837fe2.json

-Informace o softwaru-
Verze: 4.3.0.98
Verze komponentů: 1.0.1173
Aktualizovat verzi balíku komponent: 1.0.37585
Licence: Zkušební

-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x64
Systém souborů: NTFS
Uživatel: PECHY-PC\PECHY

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 253060
Zjištěné hrozby: 3
Hrozby umístěné do karantény: 3
Uplynulý čas: 2 min, 18 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 1
PUP.Optional.StartPage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WarThunder0, V karanténě, 571, 186209, 1.0.37585, , ame, , ,

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 2
PUP.Optional.BundleInstaller, C:\USERS\PECHY\DOWNLOADS\ATUBE_CATCHER.EXE, V karanténě, 150, 826880, 1.0.37585, , ame, , 99049E8A9E318732B401E1842C08D712, B7D27F777483A389292BBFF6BDEB894D7401FB0957695A121B35989FF0B71F2B
Malware.AI.4286963617, C:\USERS\PECHY\DESKTOP\ČIšTěNí PC\ZOEK.EXE, V karanténě, 1000000, 0, 1.0.37585, 470F6D22920A88C5FF85DFA1, dds, 01136429, 294DBD73A55AF616B18771026B499B53, CDF21E47A065A699769D6CEB95474249270B4700547AB86369A311BB69A93DEC

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)

WMI: 0
(Nebyly zjištěny žádné škodlivé položky)

2021-02-28 09:40:49.888 Sophos Virus Removal Tool version 2.7.0
2021-02-28 09:40:49.888 Copyright (c) 2009-2018 Sophos Limited. All rights reserved.

2021-02-28 09:40:49.888 This tool will scan your computer for viruses and other threats. If it finds any, it will give you the option to remove them.

2021-02-28 09:40:49.888 Windows version 6.1 SP 1.0 Service Pack 1 build 7601 SM=0x100 PT=0x1 WOW64
2021-02-28 09:40:49.888 Checking for updates...
2021-02-28 09:40:50.114 Update progress: proxy server not available
2021-02-28 09:40:57.579 Option all = no
2021-02-28 09:40:57.579 Option recurse = yes
2021-02-28 09:40:57.579 Option archive = no
2021-02-28 09:40:57.579 Option service = yes
2021-02-28 09:40:57.579 Option confirm = yes
2021-02-28 09:40:57.579 Option sxl = yes
2021-02-28 09:40:57.580 Option max-data-age = 35
2021-02-28 09:40:57.580 Option vdl-logging = yes
2021-02-28 09:40:57.585 Customer ID: 094260ca9b3af99f9d4a3909fc47a743
2021-02-28 09:40:57.585 Machine ID: 732dce96142c4051a24bb9adcb87c465
2021-02-28 09:40:57.586 Component SVRTcli.exe version 2.7.0
2021-02-28 09:40:57.586 Component control.dll version 2.7.0
2021-02-28 09:40:57.586 Component SVRTservice.exe version 2.7.0
2021-02-28 09:40:57.586 Component engine\osdp.dll version 1.44.1.2420
2021-02-28 09:40:57.586 Component engine\veex.dll version 3.73.0.2420
2021-02-28 09:40:57.586 Component engine\savi.dll version 9.0.11.2420
2021-02-28 09:40:57.586 Component rkdisk.dll version 1.5.33.1
2021-02-28 09:40:57.586 Version info: Product version 2.7.0
2021-02-28 09:40:57.587 Version info: Detection engine 3.73.0
2021-02-28 09:40:57.587 Version info: Detection data 5.55
2021-02-28 09:40:57.587 Version info: Build date 18.9.2018
2021-02-28 09:40:57.587 Version info: Data files added 173
2021-02-28 09:40:57.587 Version info: Last successful update (not yet updated)
2021-02-28 09:41:15.371 Downloading updates...

Updaty jsem dal pryč, ať se to vejde.

2021-02-28 09:43:35.579 Installing updates...
2021-02-28 09:43:36.180 Error level 1
2021-02-28 09:43:43.155 Update successful
2021-02-28 09:43:51.890 Option all = no
2021-02-28 09:43:51.890 Option recurse = yes
2021-02-28 09:43:51.890 Option archive = no
2021-02-28 09:43:51.890 Option service = yes
2021-02-28 09:43:51.890 Option confirm = yes
2021-02-28 09:43:51.890 Option sxl = yes
2021-02-28 09:43:51.892 Option max-data-age = 35
2021-02-28 09:43:51.892 Option vdl-logging = yes
2021-02-28 09:43:51.894 Customer ID: 094260ca9b3af99f9d4a3909fc47a743
2021-02-28 09:43:51.894 Machine ID: 732dce96142c4051a24bb9adcb87c465
2021-02-28 09:43:51.895 Component SVRTcli.exe version 2.7.0
2021-02-28 09:43:51.895 Component control.dll version 2.7.0
2021-02-28 09:43:51.895 Component SVRTservice.exe version 2.7.0
2021-02-28 09:43:51.895 Component engine\osdp.dll version 1.44.1.2490
2021-02-28 09:43:51.895 Component engine\veex.dll version 3.79.0.2490
2021-02-28 09:43:51.895 Component engine\savi.dll version 9.0.20.2490
2021-02-28 09:43:51.895 Component rkdisk.dll version 1.5.33.1
2021-02-28 09:43:51.895 Version info: Product version 2.7.0
2021-02-28 09:43:51.896 Version info: Detection engine 3.79.0
2021-02-28 09:43:51.896 Version info: Detection data 5.78
2021-02-28 09:43:51.896 Version info: Build date 8.9.2020
2021-02-28 09:43:51.896 Version info: Data files added 614
2021-02-28 09:43:51.896 Version info: Last successful update 28.2.2021 10:43:43

2021-02-28 09:46:42.704 Could not open C:\pagefile.sys
2021-02-28 09:53:50.182 Could not open C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}
2021-02-28 09:53:50.184 Could not open C:\System Volume Information\{b68a07e6-79a6-11eb-93c6-448a5b837fe2}{3808876b-c176-4e48-b7ae-04046e6cc752}
2021-02-28 09:58:09.874 Error level 0

2021-02-28 10:12:30.495 Scan completed.
2021-02-28 10:12:30.506

------------------------------------------------------------

2021-02-28 10:12:36.371 Sophos Virus Removal Tool version 2.7.0
2021-02-28 10:12:36.377 Copyright (c) 2009-2018 Sophos Limited. All rights reserved.

2021-02-28 10:12:36.388 This tool will scan your computer for viruses and other threats. If it finds any, it will give you the option to remove them.

2021-02-28 10:12:36.399 Windows version 6.1 SP 1.0 Service Pack 1 build 7601 SM=0x100 PT=0x1 WOW64
2021-02-28 10:12:36.410 Checking for updates...
2021-02-28 10:12:36.613 Update progress: proxy server not available
2021-02-28 10:12:46.696 Option all = no
2021-02-28 10:12:47.041 Option recurse = yes
2021-02-28 10:12:47.053 Option archive = no
2021-02-28 10:12:47.082 Option service = yes
2021-02-28 10:12:47.114 Option confirm = yes
2021-02-28 10:12:47.195 Option sxl = yes
2021-02-28 10:12:47.225 Option max-data-age = 35
2021-02-28 10:12:47.248 Option vdl-logging = yes
2021-02-28 10:12:47.267 Customer ID: 094260ca9b3af99f9d4a3909fc47a743
2021-02-28 10:12:47.277 Machine ID: 732dce96142c4051a24bb9adcb87c465
2021-02-28 10:12:47.289 Component SVRTcli.exe version 2.7.0
2021-02-28 10:12:47.307 Component control.dll version 2.7.0
2021-02-28 10:12:47.330 Component SVRTservice.exe version 2.7.0
2021-02-28 10:12:47.349 Component engine\osdp.dll version 1.44.1.2490
2021-02-28 10:12:47.358 Component engine\veex.dll version 3.79.0.2490
2021-02-28 10:12:47.370 Component engine\savi.dll version 9.0.20.2490
2021-02-28 10:12:47.389 Component rkdisk.dll version 1.5.33.1
2021-02-28 10:12:47.399 Version info: Product version 2.7.0
2021-02-28 10:12:47.421 Version info: Detection engine 3.79.0
2021-02-28 10:12:47.430 Version info: Detection data 5.78
2021-02-28 10:12:47.440 Version info: Build date 8.9.2020
2021-02-28 10:12:47.452 Version info: Data files added 614
2021-02-28 10:12:47.471 Version info: Last successful update 28.2.2021 10:43:43
2021-02-28 10:12:50.047 Downloading updates...
2021-02-28 10:12:50.059 Update progress: [I96736] sdds.svrt_v1.20: adding primary package C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED baseVersion=1
2021-02-28 10:12:50.068 Update progress: [I95020] sdds.svrt_v1.20: looking for packages included from product C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED path=
2021-02-28 10:12:50.078 Update progress: [I22529] sdds.svrt_v1.20: looking for supplements included from product C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED path=
2021-02-28 10:12:50.093 Update progress: [V81533] SU::createCachedPackageSource creating cached package source for http://d2.sophosupd.com/update-B: url=SOPHOS
2021-02-28 10:12:50.102 Update progress: [V81533] SU::createCachedPackageSource creating http_source_specific_data to download customer file
2021-02-28 10:12:50.112 Update progress: [V81533] SU::createCachedPackageSource creating package source to download customer file
2021-02-28 10:12:50.119 Update progress: [V81533] SU::createCachedPackageSource creating cached package source
2021-02-28 10:12:50.131 Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.data0910.xml
2021-02-28 10:12:50.142 Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.data0910.xml: 78 ms
2021-02-28 10:12:50.150 Update progress: [I49502] sdds.data0910.xml: found supplement IDE579 LATEST path= baseVersion= [included from product C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED path=]
2021-02-28 10:12:50.160 Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE579 LATEST path=
2021-02-28 10:12:50.172 Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE579 LATEST path=
2021-02-28 10:12:50.182 Update progress: [I49502] sdds.data0910.xml: found supplement IDE580 LATEST path= baseVersion= [included from product IDE579 LATEST path=]
2021-02-28 10:12:50.191 Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE580 LATEST path=
2021-02-28 10:12:50.201 Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE580 LATEST path=
2021-02-28 10:12:50.212 Update progress: [I49502] sdds.data0910.xml: found supplement IDE581 LATEST path= baseVersion= [included from product IDE580 LATEST path=]
2021-02-28 10:12:50.222 Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE581 LATEST path=
2021-02-28 10:12:50.231 Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE581 LATEST path=
2021-02-28 10:12:50.242 Update progress: [I49502] sdds.data0910.xml: found supplement IDE582 LATEST path= baseVersion= [included from product IDE581 LATEST path=]
2021-02-28 10:12:50.254 Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE582 LATEST path=
2021-02-28 10:12:50.263 Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE582 LATEST path=
2021-02-28 10:12:50.272 Update progress: [I49502] sdds.data0910.xml: found supplement IDE583 LATEST path= baseVersion= [included from product IDE582 LATEST path=]
2021-02-28 10:12:50.282 Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE583 LATEST path=
2021-02-28 10:12:50.294 Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE583 LATEST path=
2021-02-28 10:12:50.305 Update progress: [I49502] sdds.data0910.xml: found supplement IDE584 LATEST path= baseVersion= [included from product IDE583 LATEST path=]
2021-02-28 10:12:50.313 Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE584 LATEST path=
2021-02-28 10:12:50.323 Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE584 LATEST path=
2021-02-28 10:12:50.335 Update progress: [I19463] Syncing product C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED path=
2021-02-28 10:12:50.377 Update progress: [I19463] Syncing product IDE579 LATEST path=
2021-02-28 10:12:50.417 Update progress: [I19463] Syncing product IDE580 LATEST path=
2021-02-28 10:12:50.446 Update progress: [I19463] Syncing product IDE581 LATEST path=
2021-02-28 10:12:50.482 Update progress: [I19463] Syncing product IDE582 LATEST path=
2021-02-28 10:12:50.514 Update progress: [I19463] Syncing product IDE583 LATEST path=
2021-02-28 10:12:50.520 Update progress: [I19463] Syncing product IDE584 LATEST path=
2021-02-28 10:13:00.585 Error level 1

RogueKiller Anti-Malware V14.8.5.0 (x64) [Feb 12 2021] (Free) by Adlice Software
mail : https://adlice.com/contact/
Website : https://adlice.com/download/roguekiller/
Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits
Started in : Normal mode
User : PECHY [Administrator]
Started from : C:\Program Files\RogueKiller\RogueKiller64.exe
Signatures : 20210226_123752, Driver : Loaded
Mode : Standard Scan, Scan -- Date : 2021/02/28 11:16:34 (Duration : 00:08:51)
Switches : -minimize

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Process Modules ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Tasks ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
>>>>>> XX - System Policies
[PUM.Policies (Potentially Malicious)] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin -- 0 -> Found

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ WMI ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Hosts File ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Files ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Web browsers ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Příspěvekod **jaro3** » 28 úno 2021 17:24

špatně ještě jednou adwcleaner:
Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Skenování“ , po prohledání klikni na „ do karantény“

Program provede opravu, po automatickém restartu klikni na „Log soubor“ a pak poklepej na odpovídají log, (C:\AdwCleaner [C?].txt) , jeho obsah sem celý vlož.

+
Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- klikni na „Start Scan“. V novém okně nic neměň a klikni dole na „Start Scan“,
po jeho skončení - vše zatrhni (dej zatržítka vlevo od nálezů , do bílých políček)
- pak klikni na "Remove Selected"
- Počkej, dokud Status box nezobrazí " Removal finished, please review result "
- Klikni na "Open report " a pak na " Open TXT“ a zkopíruj ten log a vlož obsah té zprávy prosím sem. Log je možno nalézt v C:\ProgramData\RogueKiller\Logs - Zavři RogueKiller.

Vypni antivir i firewall, RogueKiller, Malwarebytes Antimalware
Stáhni Zoek.exe
http://download.bleepingcomputer.com/smeenk/zoek.exe
https://uloz.to/file/nFH1LwSrGioP/zoek1-rar

Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
-pozor , náběh programu může trvat déle.
Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .
Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log Zkopíruj sem celý obsah toho logu.
Pokud budou problémy , spusť zoek v nouz. režimu.

Stáhni si Zemana AntiMalware Free z tohoto odkazu:
https://www.zemana.com/Download/AntiMal ... .Setup.exe
a ulož si ho na plochu.
Poklepej na tento soubor na ploše a postupuj podle pokynů k instalaci programu.
Přijmi licenci k používání programu EULA , pokud se nabídne.
Pokud je k dispozici aktualizace programu , klepni na tlačítko „Update now“ ( aktualizovat nyní).
Můžeš si zatrhnout i vytvoření bodu obnovy:
Klikni na ozubené kolečko , poté na „Skenování“ a zatrhni „vytvářet body obnovy“.
Vrať se zpět ( klikni na domeček).
Zavři všechny otevřené soubory, složky a prohlížeče
Neměň žádné nastavení. Klikni na „Skenovat“.
Po skenu lze vidět , zda jsou nějaké nákazy. Klikni na „Další“. Nákazy budou přemístěny do karantény.
Když je skenování dokončeno, objeví se tisková zpráva , zkopíruj sem celý obsah té zprávy.
Jinak můžeš zprávy vidět , když klikneš vpravo nahoře na „ zprávy“.

Vlož nový log z HJT + informuj o problémech

PECHY15 · Příspěvekod **PECHY15** » 28 úno 2021 20:21

# -------------------------------
# Malwarebytes AdwCleaner 8.1.0.0
# -------------------------------
# Build: 02-15-2021
# Database: 2021-01-11.1 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 02-28-2021
# Duration: 00:00:00
# OS: Windows 7 Ultimate
# Cleaned: 0
# Failed: 0

***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.

*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [2090 octets] - [04/12/2020 18:18:52]
AdwCleaner[C00].txt - [2141 octets] - [04/12/2020 18:19:29]
AdwCleaner[S01].txt - [1889 octets] - [27/02/2021 16:15:17]
AdwCleaner[S02].txt - [1950 octets] - [27/02/2021 16:16:07]
AdwCleaner[S03].txt - [2011 octets] - [28/02/2021 10:15:41]
AdwCleaner[C03].txt - [2124 octets] - [28/02/2021 10:15:47]
AdwCleaner[S04].txt - [1774 octets] - [28/02/2021 19:35:35]

RogueKiller Anti-Malware V14.8.5.0 (x64) [Feb 12 2021] (Free) by Adlice Software
mail : https://adlice.com/contact/
Website : https://adlice.com/download/roguekiller/
Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits
Started in : Normal mode
User : PECHY [Administrator]
Started from : C:\Program Files\RogueKiller\RogueKiller64.exe
Signatures : 20210226_123752, Driver : Loaded
Mode : Standard Scan, Delete -- Date : 2021/02/28 19:49:14 (Duration : 00:08:36)

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Delete ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
[PUM.Policies (Potentially Malicious)] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin -- -> Replaced (2)

Zoek.exe v5.0.0.2 Updated 03-May-2018(Online Version)
Tool run by PECHY on ne 28.02.2021 at 19:53:31,93.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: G:\Dokumenty\Čištění PC\zoek1\zoek (1).exe [Scan all users] [Script inserted]

==== System Restore Info ======================

28.2.2021 19:54:13 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Nokia deleted successfully
C:\Program Files\Rockstar Games deleted successfully
C:\Users\PECHY\AppData\Local\VirtualStore deleted successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\CrashDumps deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-50467274-3595313862-2648565765-1000\Software\Microsoft\Internet Explorer\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Nokia not found
C:\Users\PECHY\AppData\Roaming\HandBrake deleted
C:\PROGRA~2\Yahoo! deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\PECHY\AppData\Local\cache deleted
C:\windows\SysNative\Tasks\Avast Secure Browser Heartbeat Task (Hourly) deleted
C:\windows\SysNative\Tasks\Avast Secure Browser Heartbeat Task (Logon) deleted
C:\windows\SysNative\Tasks\AvastUpdateTaskMachineCore deleted
C:\windows\SysNative\Tasks\AvastUpdateTaskMachineUA deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\GPT.INI deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted

==== Orphaned Tasks deleted from Registry ======================

Avast Secure Browser Heartbeat Task (Hourly) deleted
Avast Secure Browser Heartbeat Task (Logon) deleted
AvastUpdateTaskMachineCore deleted
AvastUpdateTaskMachineUA deleted
NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} deleted

==== Chromium Look ======================

Google Chrome Version: 88.0.4324.190

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
efaidnbmnnnibpcajpcglclefindmkaj - No path found[]
eofcbnmajmjmplflapaojjnihcjkigck - No path found[]

Chrome Media Router - PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.yahoo.com"
"Start Page"="http://www.yahoo.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.yahoo.com"
"Start Page"="http://www.yahoo.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"=""
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - No_Url_Value
HKLM\Wow6432Node\SearchScopes "DefaultScope"=""
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE10
HKCU\SearchScopes\{39E4C3D4-3EB9-4E1D-BC54-E7AA82A71BD0} - http://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_40139

==== Reset Google Chrome ======================

C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\System Profile\Preferences was reset successfully
C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\System Profile\Secure Preferences was reset successfully
C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Web Data will be reset at reboot
C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal will be reset at reboot
C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\System Profile\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\PECHY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Cache will be emptied at reboot
C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\System Profile\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=47 folders=26 96505592 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\PECHY\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\PECHY\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Web Data" not found
"C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal" not found
"C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0" deleted
"C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1" deleted
"C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2" deleted
"C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3" deleted
"C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Cache\index" deleted

==== EOF on ne 28.02.2021 at 20:08:37,10 ======================

Název produktu : Zemana AntiMalware
Stav kontroly : Dokončena
Datum kontroly : 28.2.2021 20:13:06
Typ kontroly : Inteligentní kontrola
Čas trvání : 00:00:18
Zkontrolované objekty : 1908
Zjištěné objekty : 0
Vyloučené objekty : 0
Automatické odesílání : Ano
Operační systém : Windows 7 x64
Procesor : 8X Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz
Režim systému BIOS : Legacy
Informace o doméně : WORKGROUP,False,NetSetupWorkgroupName
CUID : 122F62B226FF0CEABC8BD1

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:19:18, on 28.2.2021
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.19203)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\Xtreme.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe
C:\Users\PECHY\Desktop\hijackthis.exe
C:\Windows\SysWOW64\DllHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O1 - Hosts: ::1 localhost
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Plex Media Server] "C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe"
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Steam] "G:\Steam\steam.exe" -silent
O4 - HKUS\S-1-5-18\..\Run: [Plex Media Server] "C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Plex Media Server] "C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe" (User 'Default user')
O4 - Startup: GIGABYTE XTREME GAMING ENGINE.lnk = C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\autorun.exe
O4 - Startup: Sledování výstrah kazety - HP DJ 2600 series.lnk = ?
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - (no file)
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - (no file)
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Inc. - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Služba %1!s! Update (avast) (avast) - AVAST Software - C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Tools (avast! Tools) - AVAST Software - C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
O23 - Service: Služba %1!s! Update (avastm) (avastm) - AVAST Software - C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
O23 - Service: Avast Secure Browser Elevation Service (AvastSecureBrowserElevationService) (AvastSecureBrowserElevationService) - AVAST Software - C:\Program Files (x86)\AVAST Software\Browser\Application\88.1.8016.150\elevation_service.exe
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google LLC - C:\Program Files (x86)\Google\Chrome\Application\88.0.4324.190\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Killer Service V2 - Rivet Networks - C:\Program Files\Killer Networking\Network Manager\KillerService.exe
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Plex Update Service (PlexUpdateService) - Plex, Inc. - C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: RogueKiller RTP (rkrtservice) - Unknown owner - C:\Program Files\RogueKiller\RogueKillerSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10106 bytes

Pořád je to dost podobné, pokud pustím heartstone, je chrome úplně KO a načítá totálně pomalu, když ho pustím v anonymním režimu, běží o poznání lépe.

Příspěvekod **jaro3** » 28 úno 2021 22:32

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

PECHY15 · Příspěvekod **PECHY15** » 01 bře 2021 07:52

Nepodařilo se mi pustit ani v nouzovém režimu, platnost již vypršela, soubor pak z plochy zmizí

Edit 10:07 - zkusil jsem změnit datum, combofix po spuštění zmizel z plochy

Příspěvekod **jaro3** » 01 bře 2021 18:15

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - (no file)
O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - (no file)

Vypni antivir i firewall.
Prosím stáhni příslušnou verzi programu pro Tvůj systém 32-bit/64-bit FarbarRecovery Scan Tool (FrSt)
32bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/81/
64bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/82/
další odkaz:
http://www.bleepingcomputer.com/downloa ... scan-tool/
a ulož jej na plochu. ,pak spusť FrSt.
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.

PECHY15 · Příspěvekod **PECHY15** » 01 bře 2021 18:44

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-02-2021
Ran by PECHY (administrator) on PECHY-PC (MSI MS-7816) (01-03-2021 18:40:23)
Running from C:\Users\PECHY\Desktop
Loaded Profiles: PECHY
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Čeština (Česká republika)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\AvastBrowserCrashHandler.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\AvastBrowserCrashHandler64.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <3>
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGABYTE Technology Co.,Ltd.) C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\Xtreme.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <5>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Plex, Inc. -> ) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe
(Plex, Inc. -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
(Plex, Inc. -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe
(Plex, Inc. -> Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Rivet Networks) [File not signed] C:\Program Files\Killer Networking\Network Manager\KillerService.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [116960 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9277520 2020-05-12] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-50467274-3595313862-2648565765-1000\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [20904440 2020-10-28] (Plex, Inc. -> Plex, Inc.)
HKU\S-1-5-21-50467274-3595313862-2648565765-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32721976 2021-02-16] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-50467274-3595313862-2648565765-1000\...\Run: [Steam] => G:\Steam\steam.exe [3412696 2021-02-13] (Valve -> Valve Corporation)
HKU\S-1-5-21-50467274-3595313862-2648565765-1000\Software\Policies\...\system: [disablecmd] 0
HKU\S-1-5-18\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [20904440 2020-10-28] (Plex, Inc. -> Plex, Inc.)
HKLM\...\Windows x64\Print Processors\hpzppwn7: C:\Windows\System32\spool\prtprocs\x64\hpzppwn7.dll [101376 2009-07-14] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP 0053 Status Monitor: C:\Windows\system32\hpinksts0053LM.dll [485048 2016-10-14] (Hewlett Packard -> HP Inc.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP DeskJet 2600 series): C:\Windows\system32\HPDiscoPM0053.dll [983176 2018-04-17] (Hewlett Packard -> HP Inc.)
HKLM\...\Print\Monitors\LIDIL hpzllwn7: C:\Windows\system32\hpzllwn7.dll [51712 2009-07-14] (Microsoft Windows -> Hewlett-Packard Company)
HKLM\...\Print\Monitors\pdfcmon: C:\Windows\system32\pdfcmon.dll [116736 2021-01-02] (pdfforge GmbH) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\88.1.8016.150\Installer\chrmstp.exe [2021-02-22] (Avast Software s.r.o. -> AVAST Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\88.0.4324.190\Installer\chrmstp.exe [2021-02-26] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\88.0.7980.150\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\Users\PECHY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE XTREME GAMING ENGINE.lnk [2021-02-26]
ShortcutTarget: GIGABYTE XTREME GAMING ENGINE.lnk -> C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\autorun.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
Startup: C:\Users\PECHY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sledování výstrah kazety - HP DJ 2600 series.lnk [2020-05-12]
ShortcutAndArgument: Sledování výstrah kazety - HP DJ 2600 series.lnk -> C:\Windows\system32\RunDll32.exe => "C:\Program Files\HP\HP DeskJet 2600 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN81S4B5TF06PS;CONNECTION=USB;MONITOR=1;
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {05B15815-F675-454D-AEC8-F5D620FB1E4C} - System32\Tasks\Launcher GIGABYTE XTREME GAMING ENGINE => C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\Xtreme.exe [77692048 2017-01-25] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGABYTE Technology Co.,Ltd.)
Task: {0EEE3630-B49D-425D-9A58-304ED2358ECE} - System32\Tasks\{7063169A-FDB7-4312-8CD8-07BAFB0DA6AB} => G:\Seven Kingdoms 2 HD v2.10\7K2.exe
Task: {15A00C09-37AC-402E-AA59-B3B30D48EE81} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [887792 2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {20D7FB60-C2EC-47E4-A65F-44EE07807D91} - System32\Tasks\{F1715ECB-3696-44AB-81B2-729A17CBA316} => G:\Seven Kingdoms 2 HD v2.10\7K2.exe
Task: {26689204-479C-471B-A8FC-D372A43EA01B} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [887792 2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {26E59CF7-E7EB-4732-B5C0-7309F996D800} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {30336689-21BF-4C86-A580-2DB930E338DC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [27165752 2021-02-16] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {41313CE2-7D63-42BB-8D7D-83B849B24F92} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {45740BBF-3F97-4231-A8F2-2CCF6C2F6402} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [887792 2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {459E6BBB-F4CC-4E35-90AA-DF69102A224D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-11-30] (Adobe Inc. -> Adobe)
Task: {4F6FF43C-E0F8-43AD-90E4-30BCDABC42F4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2018-12-22] (Google Inc -> Google Inc.)
Task: {5841F2C4-3D41-4F93-8354-9C33F4F01DEF} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [887792 2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5B5C9FEF-1FB7-4B73-8283-9ECBBC95E0F7} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [563184 2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6A5A7C0C-B8B6-4DD1-BD18-3127CFA7E055} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [787440 2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {74A5C1A7-37E6-4207-80F4-F1146B9820DE} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1791712 2021-02-23] (Avast Software s.r.o. -> Avast Software)
Task: {82C5384A-0578-4DD4-A53A-BB0E6B4D6F6D} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {8E0F5128-0DFE-4B24-883C-5FB275CD3F37} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2018-12-22] (Google Inc -> Google Inc.)
Task: {AD589DD7-4A82-4231-A478-0462451A84DF} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {B0384801-F41A-47AD-9DF8-FCD55C502E7E} - System32\Tasks\AMHelper => C:\Program Files (x86)\Zemana\AntiMalware\AntiMalware.exe [658808 2020-07-29] (Zemana D.O.O. Sarajevo -> Zemana Ltd.)
Task: {B60730C5-D54D-43DA-A260-39CD4E30F35D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {BBC44B79-F6CE-491A-BC39-2B3F688C943A} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [856048 2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C8E0F661-FB84-4276-9DC6-FC2A25F0936D} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4682976 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
Task: {CDD52D44-8F4D-429E-8226-8C64212D1F01} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3560944 2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CE45D511-8558-4AAB-AE12-53BE66AA9B4E} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [787440 2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {E1F7FDB0-6FE9-43B0-A577-23330DEFF8A6} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-02-16] (Piriform Software Ltd -> Piriform)
Task: {F0167FD5-35C8-4F85-BECB-89B51061A7A4} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [856048 2018-12-06] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F638B726-89BE-4016-B0B1-351814E5FE87} - System32\Tasks\{961A92DC-CE7F-47A5-B001-7A73677DBBCF} => G:\Seven Kingdoms 2 HD v2.10\7K2.exe
Task: {FFD1CF5B-559D-42E5-90A6-02962A0955A8} - System32\Tasks\{799C64D7-EF61-4730-817B-9AE18BA1A0E8} => G:\Seven Kingdoms 2 HD v2.10\7K2.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [134528 2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [134528 2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
Winsock: Catalog5-x64 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [168304 2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [168304 2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{A9B31972-30BA-4553-ABA8-2ED8A122E61A}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.281.2 -> C:\Program Files\Java\jre1.8.0_281\bin\dtplugin\npDeployJava1.dll [2021-02-01] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.281.2 -> C:\Program Files\Java\jre1.8.0_281\bin\plugin2\npjp2.dll [2021-02-01] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [2020-10-26] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [2020-10-26] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> G:\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> G:\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-02-25] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 -> C:\Program Files (x86)\Yahoo!\Common\npyaxmpb.dll [No File]
FF Plugin HKU\S-1-5-21-50467274-3595313862-2648565765-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [No File]

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default [2021-03-01]
CHR DownloadDir: G:\Dokumenty\Downloads
CHR Notifications: Default -> hxxps://answear.cz; hxxps://best.aliexpress.com; hxxps://eshop.tescoma.cz; hxxps://panel.marketagent.com; hxxps://prokliky.cz; hxxps://www.aioboot.com; hxxps://www.aliexpress.com; hxxps://www.beler.cz; hxxps://www.bezvasport.cz; hxxps://www.facebook.com; hxxps://www.milujeme-slevy.cz; hxxps://www.podnikatel.cz; hxxps://www.tipli.cz
CHR Extension: (Prezentace) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-01-02]
CHR Extension: (Dokumenty) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-01-02]
CHR Extension: (Disk Google) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-19]
CHR Extension: (YouTube) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-01-02]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-01-28]
CHR Extension: (Adobe Acrobat) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-12-15]
CHR Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-11-09]
CHR Extension: (Tabulky) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-01-02]
CHR Extension: (Úpravy souborů Office) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbkeegbaiigmenfmjfclcdgdpimamgkj [2020-11-11]
CHR Extension: (Dokumenty Google offline) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-02-25]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-02-27]
CHR Extension: (Excel Online) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2019-01-02]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gimp online - image editor and paint tool) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\omebobahbkampglebglkoagddjnjbhle [2021-01-02]
CHR Extension: (Gmail) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\PECHY\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-01-28]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-11-30] (Adobe Inc. -> Adobe)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [7878680 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-26] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [621608 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [352480 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-26] (Avast Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\88.1.8016.150\elevation_service.exe [1456376 2021-02-09] (Avast Software s.r.o. -> AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [5745672 2018-05-26] (BattlEye Innovations e.K. -> )
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4452456 2019-06-26] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [386560 2015-02-05] (Rivet Networks) [File not signed]
R2 PlexUpdateService; C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [1425904 2020-10-28] (Plex, Inc. -> Plex, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2291568 2009-08-18] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 amsdk; C:\Windows\system32\drivers\amsdk.sys [232792 2021-02-28] (Zemana D.O.O. Sarajevo -> Copyright 2018.)
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [35648 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [208024 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [357320 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [249304 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [98760 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [41272 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [175248 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [521336 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [38152 2020-04-15] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [107784 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [83360 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [850112 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [465656 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
S2 aswStm; C:\Windows\System32\drivers\aswStm.sys [215328 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [326976 2021-02-22] (Avast Software s.r.o. -> AVAST Software)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [100400 2015-01-29] (Rivet Networks LLC -> Rivet Networks, LLC.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [42256 2019-06-26] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [59360 2019-06-26] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-05-10] (Martin Malik - REALiX -> REALiX(tm))
S3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [125488 2015-11-10] (Rivet Networks LLC -> Qualcomm Atheros, Inc.)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S1 ZAM; \??\C:\Windows\System32\drivers\zam64.sys [X]
S1 ZAM_Guard; \??\C:\Windows\System32\drivers\zamguard64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-03-01 18:40 - 2021-03-01 18:40 - 000026541 _____ C:\Users\PECHY\Desktop\FRST.txt
2021-03-01 18:40 - 2021-03-01 18:40 - 000000000 ____D C:\FRST
2021-03-01 18:39 - 2021-03-01 18:38 - 002301440 _____ (Farbar) C:\Users\PECHY\Desktop\FRST64.exe
2021-03-01 18:38 - 2021-03-01 18:38 - 000000000 ____D C:\Users\PECHY\AppData\Local\ElevatedDiagnostics
2021-03-01 07:33 - 2021-03-01 07:35 - 000199590 _____ C:\Windows\ntbtlog.txt
2021-02-28 20:11 - 2021-03-01 15:30 - 000003474 _____ C:\Windows\system32\Tasks\AMHelper
2021-02-28 20:11 - 2021-02-28 20:11 - 000232792 _____ (Copyright 2018.) C:\Windows\system32\Drivers\amsdk.sys
2021-02-28 20:11 - 2021-02-28 20:11 - 000001256 _____ C:\ProgramData\Desktop\Zemana AntiMalware.lnk
2021-02-28 20:11 - 2021-02-28 20:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2021-02-28 20:11 - 2021-02-28 20:11 - 000000000 ____D C:\Program Files (x86)\Zemana
2021-02-28 20:10 - 2021-02-28 20:13 - 000000000 ____D C:\Users\PECHY\AppData\Local\AMSDK
2021-02-28 20:06 - 2014-02-13 23:59 - 000024064 _____ C:\Windows\zoek-delete.exe
2021-02-28 19:52 - 2021-02-28 20:03 - 000000000 ____D C:\zoek_backup
2021-02-28 10:54 - 2021-02-28 10:54 - 000000000 ____D C:\Users\PECHY\AppData\Local\Blizzard
2021-02-28 10:48 - 2021-03-01 14:54 - 000000000 ____D C:\Users\PECHY\AppData\Local\Battle.net
2021-02-28 10:48 - 2021-02-28 10:48 - 000000000 ____D C:\Users\PECHY\AppData\Local\Blizzard Entertainment
2021-02-27 16:23 - 2021-03-01 07:09 - 000000000 ____D C:\Users\PECHY\AppData\Local\Adobe
2021-02-27 16:12 - 2021-02-27 16:12 - 000000000 ____D C:\Users\PECHY\AppData\Local\CEF
2021-02-23 13:36 - 2021-02-23 15:59 - 000002519 _____ C:\Users\PECHY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2021-02-22 21:56 - 2021-02-22 21:56 - 000339680 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2021-02-22 21:56 - 2021-02-22 21:56 - 000215328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2021-02-14 18:38 - 2008-08-18 18:18 - 000077824 _____ (Fox Magic Software) C:\Windows\SysWOW64\fmcodec.DLL

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-03-01 18:40 - 2017-05-10 13:42 - 000211060 _____ C:\Windows\ZAM.krnl.trace
2021-03-01 18:38 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2021-03-01 16:05 - 2015-05-09 21:34 - 000000000 ____D C:\Program Files\CCleaner
2021-03-01 15:36 - 2009-07-14 05:45 - 000026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2021-03-01 15:36 - 2009-07-14 05:45 - 000026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2021-03-01 15:30 - 2020-12-04 13:24 - 000003322 _____ C:\Windows\system32\Tasks\Launcher GIGABYTE XTREME GAMING ENGINE
2021-03-01 15:30 - 2020-05-12 20:15 - 000002938 _____ C:\Windows\system32\Tasks\{799C64D7-EF61-4730-817B-9AE18BA1A0E8}
2021-03-01 15:30 - 2020-05-12 20:15 - 000002938 _____ C:\Windows\system32\Tasks\{7063169A-FDB7-4312-8CD8-07BAFB0DA6AB}
2021-03-01 15:30 - 2020-05-12 20:14 - 000002938 _____ C:\Windows\system32\Tasks\{961A92DC-CE7F-47A5-B001-7A73677DBBCF}
2021-03-01 15:30 - 2020-05-12 20:13 - 000002938 _____ C:\Windows\system32\Tasks\{F1715ECB-3696-44AB-81B2-729A17CBA316}
2021-03-01 15:30 - 2018-12-22 13:48 - 000003386 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2021-03-01 15:30 - 2018-12-22 13:48 - 000003258 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2021-03-01 15:30 - 2018-05-27 12:44 - 000003792 _____ C:\Windows\system32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-03-01 15:30 - 2017-10-30 13:09 - 000003870 _____ C:\Windows\system32\Tasks\CCleaner Update
2021-03-01 15:30 - 2017-03-10 13:42 - 000003738 _____ C:\Windows\system32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-03-01 15:30 - 2015-12-03 19:03 - 000000000 ____D C:\Windows\system32\Tasks\AVAST Software
2021-03-01 15:30 - 2015-05-10 13:32 - 000004476 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2021-03-01 15:30 - 2015-05-10 12:57 - 000003296 _____ C:\Windows\system32\Tasks\SidebarExecute
2021-03-01 15:30 - 2015-05-09 21:34 - 000002790 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2021-03-01 10:30 - 2015-05-09 18:06 - 000000000 ____D C:\ProgramData\AVAST Software
2021-03-01 10:22 - 2010-11-21 10:27 - 000672122 _____ C:\Windows\system32\perfh005.dat
2021-03-01 10:22 - 2010-11-21 10:27 - 000142810 _____ C:\Windows\system32\perfc005.dat
2021-03-01 10:22 - 2009-07-14 06:13 - 001593322 _____ C:\Windows\system32\PerfStringBackup.INI
2021-03-01 10:22 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2021-03-01 10:16 - 2020-04-06 09:21 - 000000000 ____D C:\Users\PECHY\Documents\temp
2021-03-01 10:16 - 2018-02-25 20:32 - 000000000 ____D C:\Users\PECHY\AppData\Local\Plex Media Server
2021-03-01 10:16 - 2015-05-09 19:40 - 000000000 ____D C:\ProgramData\NVIDIA
2021-03-01 10:16 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-03-01 10:13 - 2016-11-21 09:29 - 000000994 _____ C:\ProgramData\Desktop\Revo Uninstaller.lnk
2021-03-01 10:13 - 2016-11-21 09:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2021-03-01 10:01 - 2021-01-22 18:32 - 000000000 ____D C:\Users\PECHY\Desktop\PČR
2021-03-01 07:20 - 2019-01-02 23:27 - 000000000 ____D C:\Qoobox
2021-02-28 20:11 - 2017-05-10 13:42 - 000000000 ____D C:\Users\PECHY\AppData\Local\Zemana
2021-02-28 20:08 - 2019-06-30 15:02 - 000000008 __RSH C:\ProgramData\ntuser.pol
2021-02-28 20:04 - 2009-07-14 04:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2021-02-28 20:04 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2021-02-28 10:15 - 2015-05-10 13:12 - 000000000 ____D C:\Users\PECHY\AppData\Roaming\IObit
2021-02-27 11:14 - 2020-12-04 13:59 - 000000000 ____D C:\Program Files (x86)\Battle.net
2021-02-27 10:40 - 2015-05-10 13:32 - 000002059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-02-26 17:46 - 2019-09-27 18:24 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-02-26 17:46 - 2019-09-27 18:24 - 000002183 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2021-02-25 18:28 - 2015-05-10 13:11 - 000000000 ____D C:\Users\PECHY\AppData\Roaming\vlc
2021-02-25 17:01 - 2015-05-10 12:57 - 000000000 ____D C:\Users\PECHY\AppData\Roaming\DAEMON Tools Lite
2021-02-22 21:56 - 2020-10-15 08:31 - 000175248 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2021-02-22 21:56 - 2020-04-15 16:08 - 000521336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetHub.sys
2021-02-22 21:56 - 2019-01-06 12:15 - 000249304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2021-02-22 21:56 - 2019-01-06 12:15 - 000098760 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2021-02-22 21:56 - 2018-10-21 10:41 - 000041272 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2021-02-22 21:56 - 2017-03-07 02:54 - 000003910 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2021-02-22 21:56 - 2015-05-09 18:08 - 000465656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2021-02-22 21:56 - 2015-05-09 18:08 - 000326976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2021-02-22 21:56 - 2015-05-09 18:08 - 000107784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2021-02-22 21:56 - 2015-05-09 18:08 - 000083360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2021-02-22 21:55 - 2019-01-15 10:39 - 000357320 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2021-02-22 21:55 - 2019-01-06 12:15 - 000035648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
2021-02-22 21:55 - 2017-11-16 11:55 - 000208024 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2021-02-22 21:55 - 2015-05-09 18:08 - 000850112 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2021-02-19 21:09 - 2019-04-29 19:18 - 000002291 _____ C:\ProgramData\Desktop\HP Print and Scan Doctor.lnk
2021-02-19 21:05 - 2018-04-12 19:42 - 000000000 ____D C:\ProgramData\HP
2021-02-14 18:38 - 2019-11-15 19:04 - 000000574 _____ C:\ProgramData\Desktop\aTube Catcher.lnk
2021-02-14 18:38 - 2019-11-15 19:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2021-02-14 18:32 - 2020-03-24 16:28 - 000034304 ___SH C:\Users\PECHY\Thumbs.db
2021-02-14 18:32 - 2015-05-09 17:18 - 000000000 ____D C:\Users\PECHY
2021-02-01 09:27 - 2018-12-18 12:03 - 000192168 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2021-02-01 09:27 - 2018-12-18 12:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2021-02-01 09:27 - 2018-12-18 12:03 - 000000000 ____D C:\Program Files\Java

==================== Files in the root of some directories ========

2017-07-10 09:23 - 2017-07-10 09:23 - 000000048 ____H () C:\Program Files (x86)\ew3oagrrdg.dat
2018-03-06 19:47 - 2018-03-06 20:15 - 000000099 _____ () C:\Users\PECHY\AppData\Roaming\LauncherSettings_live.cfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

LastRegBack: 2021-02-21 00:43
==================== End of FRST.txt ========================

PECHY15 · Příspěvekod **PECHY15** » 01 bře 2021 18:45

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-02-2021
Ran by PECHY (01-03-2021 18:40:59)
Running from C:\Users\PECHY\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2015-05-09 16:18:15)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-50467274-3595313862-2648565765-500 - Administrator - Disabled)
Guest (S-1-5-21-50467274-3595313862-2648565765-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-50467274-3595313862-2648565765-1007 - Limited - Enabled)
PECHY (S-1-5-21-50467274-3595313862-2648565765-1000 - Administrator - Enabled) => C:\Users\PECHY

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Disabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 21.001.20142 - Adobe Systems Incorporated)
Adobe Flash Player 32 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 32.0.0.453 - Adobe)
Aktualizace NVIDIA 34.0.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 34.0.0.0 - NVIDIA Corporation) Hidden
AoA Audio Extractor 1.0 (HKLM-x32\...\AoA Audio Extractor_is1) (Version: - AoAMedia.Com)
aTube Catcher verze 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 21.1.2449 - Avast Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 88.1.8016.150 - Autoři prohlížeče Avast Secure Browser)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 5.77 - Piriform)
CPUID CPU-Z 1.76 (HKLM\...\CPUID CPU-Z_is1) (Version: - ) <==== ATTENTION
CPUID HWMonitor 1.30 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
CrystalDiskInfo 7.0.5 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.0.5 - Crystal Dew World)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.11.0.0939 - Disc Soft Ltd)
Driver Booster 5 (HKLM-x32\...\Driver Booster_is1) (Version: 5.2.0 - IObit)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 88.0.4324.190 - Google LLC)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.169 - Google Inc.) Hidden
HandBrake 1.2.2 (HKLM-x32\...\HandBrake) (Version: 1.2.2 - )
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Java 8 Update 281 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180281F0}) (Version: 8.0.2810.9 - Oracle Corporation)
Killer Bandwidth Control Filter Driver (HKLM\...\{F19B250A-58F9-4B9E-864B-B77C490E166B}) (Version: 1.1.50.1073 - Rivet Networks) Hidden
Killer E220x Drivers (HKLM\...\{5CF9FE6F-7EBC-4391-8547-C8F9D83890B4}) (Version: 1.1.50.1073 - Rivet Networks) Hidden
Killer Network Manager (HKLM\...\{E1635028-06FE-4E4D-B471-A28B429C837C}) (Version: 1.1.50.1073 - Rivet Networks) Hidden
Killer Performance Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.50.1073 - Rivet Networks)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
MediaInfo 19.09 (HKLM\...\MediaInfo) (Version: 19.09 - MediaArea.net)
Microsoft .NET Framework 4.8 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.8.03761 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Language Pack 2013 - Czech/čeština (HKLM\...\Office15.OMUI.cs-cz) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710F4C1C-CC18-4C49-8CBF-51240C89A1A2}) (Version: - )
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{AD8A2FA1-06E7-4B0D-927D-6E54B3D31028}) (Version: - )
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.22.27821 (HKLM-x32\...\{6361b579-2795-4886-b2a8-53d5239b6452}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017 (HKLM-x32\...\{d6f233bd-3f8c-43f6-878b-07bd0568d595}) (Version: 14.10.25017.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017 (HKLM-x32\...\{cb7c3049-21de-415b-bd85-b65c14e547df}) (Version: 14.10.25017.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
MKVToolNix 37.0.0 (32-bit) (HKLM-x32\...\MKVToolNix) (Version: 37.0.0 - Moritz Bunkus)
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (HKLM\...\{90150000-001F-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (HKLM\...\{90150000-001F-041B-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Never Alone Artic verze 1.8.0 (HKLM-x32\...\{2C39EFE2-6079-4D39-A373-4A030227CD01}_is1) (Version: 1.8.0 - )
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.12 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.16.0.140 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.16.0.140 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.38.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.40 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 460.79 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 460.79 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Ovládací panel NVIDIA 460.79 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 460.79 - NVIDIA Corporation) Hidden
PDFCreator (HKLM\...\{00010FEF-82A2-497E-983A-7105A0364FA7}) (Version: 4.2.0 - pdfforge GmbH)
Plex Media Server (HKLM-x32\...\{3FCB18D0-5BBE-4771-ADA9-DF28AA69D053}) (Version: 1.20.4517 - Plex, Inc.) Hidden
Plex Media Server (HKLM-x32\...\{dc541992-a29f-4d8e-8f5e-13b4998a4716}) (Version: 1.20.4.3517 - Plex, Inc.)
PokerStars.cz (HKLM-x32\...\PokerStars.cz) (Version: - PokerStars.cz)
Print Passport Photo 1.2.6 (HKLM-x32\...\Print Passport Photo_is1) (Version: 1.2.6 - Marcello Pietrelli & Gianni Baini)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8746.1 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.2.2 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.2.2 - VS Revo Group, Ltd.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0100-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft)
Shadow of the Tomb Raider The Path Home (HKLM-x32\...\Shadow of the Tomb Raider The Path Home_is1) (Version: - )
Startup Sound Changer (HKLM-x32\...\Startup Sound Changer) (Version: 1.0 - hxxp://winreview.ru/)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stopping Plex (HKLM-x32\...\{BCB26446-682E-447D-8FE1-D71E28C3F801}) (Version: 1.20.4517 - Plex, Inc.) Hidden
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{C224EEBF-D40A-4056-9DD3-EE74666F74AB}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{0FA8AE0C-69AE-4F60-A1AB-F79C6BA5A999}) (Version: - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
XTREME GAMING ENGINE (HKLM-x32\...\GIGABYTE XTREME GAMING ENGINE_is1) (Version: 1.2.2.1 - GIGABYTE Technology Co.,Inc.)
Zemana AntiMalware verze 3.2.27 (HKLM-x32\...\{4E1F3677-C72E-4F7D-B66E-85467B1A289E}_is1) (Version: 3.2.27 - Zemana)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-02-22] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-02-22] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana\AntiMalware\AM_ShellExt64.dll [2020-07-29] (Zemana D.O.O. Sarajevo -> Advanced Malware Protection. Copyright 2019.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-02-22] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Program Files\PDFCreator\PDFCreatorShell.DLL [2020-07-10] (Dev Code-Sign -> pdfforge GmbH) [File not signed] [File is in use]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2019-06-26] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-02-22] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2019-06-26] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2020-12-04] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana\AntiMalware\AM_ShellExt64.dll [2020-07-29] (Zemana D.O.O. Sarajevo -> Advanced Malware Protection. Copyright 2019.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-02-22] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-18] (Fox Magic Software) [File not signed]

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]

==================== Loaded Modules (Whitelisted) =============

2020-11-06 20:10 - 2020-11-06 20:10 - 000336384 _____ () [File not signed] \\?\C:\Users\PECHY\AppData\Local\Plex Media Server\Codecs\02cff92-3522-windows-x86\ac3_decoder.dll
2020-11-06 20:10 - 2020-11-06 20:10 - 001559040 _____ () [File not signed] \\?\C:\Users\PECHY\AppData\Local\Plex Media Server\Codecs\02cff92-3522-windows-x86\h264_decoder.dll
2020-11-06 20:10 - 2020-11-06 20:10 - 000818688 _____ () [File not signed] \\?\C:\Users\PECHY\AppData\Local\Plex Media Server\Codecs\02cff92-3522-windows-x86\hevc_decoder.dll
2020-11-06 20:10 - 2020-11-06 20:10 - 001800704 _____ () [File not signed] \\?\C:\Users\PECHY\AppData\Local\Plex Media Server\Codecs\02cff92-3522-windows-x86\libx264_encoder.dll
2020-11-06 20:10 - 2020-11-06 20:10 - 000579072 _____ () [File not signed] \\?\C:\Users\PECHY\AppData\Local\Plex Media Server\Codecs\02cff92-3522-windows-x86\mp2_decoder.dll
2020-11-06 20:10 - 2020-11-06 20:10 - 000579072 _____ () [File not signed] \\?\C:\Users\PECHY\AppData\Local\Plex Media Server\Codecs\02cff92-3522-windows-x86\mp3_decoder.dll
2020-11-06 20:10 - 2020-11-06 20:10 - 000548864 _____ () [File not signed] \\?\C:\Users\PECHY\AppData\Local\Plex Media Server\Codecs\02cff92-3522-windows-x86\mpeg1video_decoder.dll
2020-11-06 20:10 - 2020-11-06 20:10 - 000561152 _____ () [File not signed] \\?\C:\Users\PECHY\AppData\Local\Plex Media Server\Codecs\02cff92-3522-windows-x86\mpeg2video_decoder.dll
2020-11-06 20:10 - 2020-11-06 20:10 - 001268224 _____ () [File not signed] \\?\C:\Users\PECHY\AppData\Local\Plex Media Server\Codecs\02cff92-3522-windows-x86\mpeg4_decoder.dll
2020-11-06 20:10 - 2020-11-06 20:10 - 001497600 _____ () [File not signed] \\?\C:\Users\PECHY\AppData\Local\Plex Media Server\Codecs\02cff92-3522-windows-x86\msmpeg4v3_decoder.dll
2017-03-10 13:47 - 2017-01-19 10:04 - 000025088 _____ () [File not signed] C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\BSL430.dll
2017-03-10 13:47 - 2017-01-19 10:04 - 000225792 _____ () [File not signed] C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\GvFireware.dll
2017-03-10 13:47 - 2017-01-19 10:04 - 000270336 _____ (GIGABYTE Technology Co.,Ltd.) [File not signed] C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\GVBIOSLib.dll
2017-03-10 13:47 - 2017-01-19 10:04 - 000013312 _____ (GIGABYTE Technology Co.,Ltd.) [File not signed] C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\GvCrypt.dll
2017-03-10 13:47 - 2017-01-19 10:04 - 000335872 _____ (GIGABYTE Technology Co.,Ltd.) [File not signed] C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\GVDisplay.dll
2017-03-10 13:47 - 2017-01-19 10:04 - 000218112 _____ (GIGABYTE Technology Co.,Ltd.) [File not signed] C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\GvOrderLib.dll
2009-08-18 11:24 - 2009-08-18 11:24 - 000167424 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll
2015-05-11 10:41 - 2015-05-11 10:41 - 001093120 _____ (Microsoft Corporation) [File not signed] C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80U.DLL
2020-07-10 09:58 - 2020-07-10 09:58 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\1029\avast.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll
2020-07-10 09:58 - 2020-07-10 09:58 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\1029\avast.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll
2020-07-10 09:58 - 2020-07-10 09:58 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\1029\avast.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll
2020-07-10 09:58 - 2020-07-10 09:58 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\1029\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll
2020-07-10 09:58 - 2020-07-10 09:58 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\1029\avast.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll
2020-07-10 09:58 - 2020-07-10 09:58 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\1029\avast.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll
2020-07-10 09:58 - 2020-07-10 09:58 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\1029\avast.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll
2020-07-10 09:58 - 2020-07-10 09:58 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\1029\avast.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll
2020-07-10 09:58 - 2020-07-10 09:58 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\1029\avast.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll
2020-07-10 09:58 - 2020-07-10 09:58 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\1029\avast.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll
2020-07-10 09:58 - 2020-07-10 09:58 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\1029\avast.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll
2020-07-10 09:58 - 2020-07-10 09:58 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\1029\avast.local_vc142.crt\ucrtbase.DLL
2020-07-10 09:58 - 2020-07-10 09:58 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\1029\avast.local_vc142.crt\VCRUNTIME140.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-crt-environment-l1-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-crt-filesystem-l1-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-crt-math-l1-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-crt-multibyte-l1-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-crt-time-l1-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\api-ms-win-crt-utility-l1-1-0.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\MSVCP140.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\ucrtbase.DLL
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\VCRUNTIME140.dll
2021-03-01 10:17 - 2021-03-01 10:17 - 000000000 ____L (Microsoft Corporation) C:\Program Files\AVAST Software\Avast\defs\21030100\avast.local_vc142.crt\VCRUNTIME140_1.dll
2021-01-02 13:34 - 2021-01-02 13:34 - 000116736 _____ (pdfforge GmbH) [File not signed] C:\Windows\System32\pdfcmon.dll
2017-03-10 13:47 - 2017-01-23 17:03 - 000200704 _____ (TODO: <Company name>) [File not signed] C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\GvAutoUpdate.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:8CE646EE [117]

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Version 11) (Whitelisted) ==========

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-50467274-3595313862-2648565765-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-50467274-3595313862-2648565765-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-50467274-3595313862-2648565765-1000 -> {39E4C3D4-3EB9-4E1D-BC54-E7AA82A71BD0} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_40139
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-07-19] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_281\bin\ssv.dll [2021-02-01] (Oracle America, Inc. -> Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-06-14] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_281\bin\jp2ssv.dll [2021-02-01] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2016-06-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2021-03-01 18:37 - 000000813 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 localhost

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-50467274-3595313862-2648565765-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\PECHY\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{5AD61F7C-F04C-4309-A869-459370BF9542}C:\users\pechy\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\pechy\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [UDP Query User{9D14303B-AD20-4884-A5BD-0646C532CFB1}C:\users\pechy\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\pechy\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{42DE0915-2511-4FD2-B881-5953D77BF35C}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A49369B9-3784-4B70-9D82-B34463CB970B}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{20CE22C0-A4F3-4A5A-9EF1-42E332C82639}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1A60934F-1B44-44F4-9D7F-6A8251D37EDA}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8E37CBEA-EA11-458A-8039-F1475FB7BC65}] => (Allow) C:\Users\PECHY\AppData\Roaming\uTorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{C3A8F7C2-DC7F-4739-8174-2FC90D08C932}] => (Allow) C:\Users\PECHY\AppData\Roaming\uTorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{B4532023-5583-4ED3-9492-1C126D2C09D4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{FE652E59-D99D-4AE7-9F25-B1768CECDFF9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{1259D334-1EB0-49A6-9855-8E2057DDAA00}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{FC13C8B2-5A05-4BB9-86A9-BBE914D129D2}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe (IObit Information Technology -> IObit)
FirewallRules: [{6B00B899-1A63-4CF8-A8A3-BE0FD04EB97A}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe (IObit Information Technology -> IObit)
FirewallRules: [{0B8C736E-BB29-40F7-91AC-D48A97CD1DFB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{98C2EDAB-3B33-4BD2-A322-F00120F12AC6}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe (IObit Information Technology -> IObit)
FirewallRules: [{055ED4F1-CCFA-4F4C-BBE1-063DE1A13F40}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe (IObit Information Technology -> IObit)
FirewallRules: [{055A51C7-B72D-43AB-B806-1D97A2024C8D}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DBDownloader.exe (IObit Information Technology -> IObit)
FirewallRules: [{98B807B1-ED2A-49BB-AE5A-C40D18DE9C4A}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DBDownloader.exe (IObit Information Technology -> IObit)
FirewallRules: [{13688027-70C3-496F-A349-B64CEDF2B912}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\AutoUpdate.exe (IObit Information Technology -> IObit)
FirewallRules: [{56A4652C-07C1-4693-80E4-401BF504A321}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\AutoUpdate.exe (IObit Information Technology -> IObit)
FirewallRules: [{88250D00-C678-4411-8BDC-CBE76075D748}] => (Allow) LPort=5357
FirewallRules: [{048DC643-0692-4DE6-962F-BC62E75CBED4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{34A5355D-3AA7-45BA-8431-FA48F4D7A4BB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{5BC94417-BE1D-4E6E-9E6E-40EE7559F9DA}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{9EFE19C7-3459-498B-9713-7DA22323E7DC}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{B9BFEA5C-FE2C-41CD-B9C8-14A307FD3257}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{886B7103-4D04-426D-A023-8586848D6977}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{3D872162-179A-4AF4-B44C-686293E2AF6E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{E1408D0F-3024-4346-A515-A20B66E4B4F4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{220D9C13-9AAA-4983-9CC9-4397A30558B1}] => (Allow) C:\Program Files\HP\HP DeskJet 2600 series\bin\DigitalWizards.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{ECC136B1-AABB-43B5-84D0-9F01F7EF5030}] => (Allow) C:\Program Files\HP\HP DeskJet 2600 series\Bin\DeviceSetup.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{23EEB74F-9233-49A1-8FFF-EAE76263ADB3}] => (Allow) C:\Program Files\HP\HP DeskJet 2600 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{9ECADE78-C8A6-4E67-AF4F-86EC0FA9C23B}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{01D5846B-3BA5-465A-BF99-483E91BA3A9D}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{EF2954A1-796B-4994-8F1B-4C718321D754}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe (Plex, Inc. -> Plex, Inc.)
FirewallRules: [{AC057702-48F4-4ED5-814F-9C14DC85A167}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe (Plex, Inc. -> Python Software Foundation)
FirewallRules: [{B5A8CCA8-332C-4687-A824-7A4F56E9D2E5}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe (Plex, Inc. -> Plex, Inc.)
FirewallRules: [{6C8546A5-0B4A-401C-9A70-3660ED2EEB0A}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe (Plex, Inc. -> )
FirewallRules: [TCP Query User{4A1F555C-D5FA-4D3F-B10D-61891A9CFF7E}G:\hearthstone\hearthstone.exe] => (Allow) G:\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [UDP Query User{00D02CFF-1C37-4AEE-A878-842E95799538}G:\hearthstone\hearthstone.exe] => (Allow) G:\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [{8BF048BF-1C91-49AB-AFCA-C210583E4817}] => (Allow) G:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{E02CE4BD-29F6-4720-AC0E-2BF4DE4C6449}] => (Allow) G:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{148D9F5A-20CA-4E68-A752-30A79772FC9E}] => (Allow) G:\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{B6FA7E28-1A59-497A-A081-092C3D568D0B}] => (Allow) G:\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{2008A203-60E3-4E28-B731-871EEC8E3027}] => (Allow) C:\Users\PECHY\AppData\Local\Temp\7zS37C2\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{506CAB03-79FA-4824-9A22-94D5707F8326}] => (Allow) C:\Users\PECHY\AppData\Local\Temp\7zS37C2\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{CC5C7339-76EC-46E7-BB8E-A145B43BE294}] => (Allow) G:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{781A1F3D-123F-4E94-9EC1-BA8D24402959}] => (Allow) G:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{031FADF3-F996-46DD-8D08-A56237BBC19D}] => (Allow) C:\Users\PECHY\AppData\Local\Temp\7zS73F1\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{BAE4DF9E-AF7B-4A80-ACCC-92526E3F5958}] => (Allow) C:\Users\PECHY\AppData\Local\Temp\7zS73F1\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{03C2EBA3-44B0-4695-A3BB-0364B2121D79}] => (Allow) C:\Program Files (x86)\HP\Diagnostics\PSDR\SoftPaq\Binaries\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{A6B94E7F-E00A-461B-96B9-E2A48D797ADD}] => (Allow) C:\Program Files (x86)\HP\Diagnostics\PSDR\SoftPaq\Binaries\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{F36A3344-CAD5-45D6-BF43-B36F78D4A0E9}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{E1818625-3A31-4C7C-9D88-29530434CD0B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

01-03-2021 10:14:06 Revo Uninstaller's restore point - RogueKiller version 14.8.5.0

==================== Faulty Device Manager Devices ============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: ZAM Helper Driver
Description: ZAM Helper Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ZAM
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: ZAM Guard Driver
Description: ZAM Guard Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ZAM_Guard
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: ========================

Application errors:
==================
Error: (03/01/2021 06:26:59 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.

Error: (03/01/2021 05:26:59 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.

Error: (03/01/2021 04:26:59 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.

Error: (03/01/2021 03:26:59 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.

Error: (03/01/2021 02:26:59 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.

Error: (03/01/2021 01:26:59 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.

Error: (03/01/2021 12:26:59 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.

Error: (03/01/2021 11:26:59 AM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.

System errors:
=============
Error: (03/01/2021 06:18:26 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 80.

Error: (03/01/2021 06:18:26 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 70.

Error: (03/01/2021 05:18:25 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 80.

Error: (03/01/2021 05:18:25 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 70.

Error: (03/01/2021 04:18:25 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 80.

Error: (03/01/2021 04:18:25 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 70.

Error: (03/01/2021 03:18:25 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 80.

Error: (03/01/2021 03:18:25 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 70.

==================== Memory info ===========================

BIOS: American Megatrends Inc. V12.7 07/18/2014
Motherboard: MSI B85-G43 GAMING (MS-7816)
Processor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz
Percentage of memory in use: 51%
Total physical RAM: 8119.93 MB
Available physical RAM: 3951.03 MB
Total Virtual: 16238.01 MB
Available Virtual: 11428.38 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:10.54 GB) NTFS
Drive d: (Filmy & Hudba) (Fixed) (Total:298.09 GB) (Free:137.7 GB) NTFS
Drive g: (Data) (Fixed) (Total:931.51 GB) (Free:117.6 GB) NTFS

\\?\Volume{eddf1773-f665-11e4-8822-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.04 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 61E95CE1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: A6328A24)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 298.1 GB) (Disk ID: C600C600)
Partition 1: (Not Active) - (Size=298.1 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

Prosím o kontrolu logu - pomalý chrome Vyřešeno

Prosím o kontrolu logu - pomalý chrome

Re: Prosím o kontrolu logu - pomalý chrome

Re: Prosím o kontrolu logu - pomalý chrome

Re: Prosím o kontrolu logu - pomalý chrome

Re: Prosím o kontrolu logu - pomalý chrome

Re: Prosím o kontrolu logu - pomalý chrome

Re: Prosím o kontrolu logu - pomalý chrome

Re: Prosím o kontrolu logu - pomalý chrome

Re: Prosím o kontrolu logu - pomalý chrome

Re: Prosím o kontrolu logu - pomalý chrome

Re: Prosím o kontrolu logu - pomalý chrome

Re: Prosím o kontrolu logu - pomalý chrome

Kdo je online