Kontrola logu

[jaro3]

Vypni antivir i firewall.
Prosím stáhni příslušnou verzi programu pro Tvůj systém 32-bit/64-bit FarbarRecovery Scan Tool (FrSt)
32bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/81/
64bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/82/
další odkaz:
http://www.bleepingcomputer.com/downloa ... scan-tool/
a ulož jej na plochu. ,pak spusť FrSt.
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.

[Reklama]

[breta21]

RAM test po 4 hodinách bez erroru

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-05-2022
Ran by breta (21-05-2022 22:44:38)
Running from C:\Users\breta\Downloads
Microsoft Windows 10 Home Version 21H1 19043.1706 (X64) (2020-10-07 07:21:08)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-1885444895-1151541194-3766610177-500 - Administrator - Disabled)
breta (S-1-5-21-1885444895-1151541194-3766610177-1001 - Administrator - Enabled) => C:\Users\breta
DefaultAccount (S-1-5-21-1885444895-1151541194-3766610177-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-1885444895-1151541194-3766610177-1000 - Limited - Disabled) => C:\Users\defaultuser0
Guest (S-1-5-21-1885444895-1151541194-3766610177-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1885444895-1151541194-3766610177-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Free (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}
AV: Avast Antivirus (Disabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: Kaspersky Free (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 22.4.6011 - Avast Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 101.0.16358.65 - Autoři prohlížeče Avast Secure Browser)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1189.1 - AVAST Software) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BFME2 Patch Switcher (HKLM-x32\...\BFME2 Patch Switcher) (Version: - BFME2 Patch Switcher)
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 101.1.38.119 - Autoři prohlížeče Brave)
CCleaner (HKLM-x32\...\CCleaner) (Version: 6.00 - Piriform)
Cisco Webex Meetings (HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\ActiveTouchMeetingClient) (Version: 41.11.3 - Cisco Webex LLC)
CrystalDiskInfo 8.16.4 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 8.16.4 - Crystal Dew World)
DoNotSpy10 (HKLM-x32\...\{32D066BD-F94C-4948-8FA8-84653EE9617E}_is1) (Version: 5.1.0.0 - pXc-coding.com)
EaseUS Data Recovery Wizard (HKLM-x32\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS)
Exif Pilot 5.4 (HKLM-x32\...\Exif Pilot_is1) (Version: 5.4 - Two Pilots)
FormApps Signing Extension (HKLM-x32\...\{35C42D1D-32DC-404F-8978-A30B0D64DD26}) (Version: 2.24.0.43 - Software602 a.s.)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 9.4.0.16811 - Foxit Software Inc.)
GameRanger (HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\GameRanger) (Version: - GameRanger Technologies)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 101.0.4951.67 - Google LLC)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.101.0 - Google LLC) Hidden
Greenshot 1.2.10.6 (HKLM-x32\...\Greenshot_is1) (Version: 1.2.10.6 - Greenshot)
Intel(R) Computing Improvement Program (HKLM-x32\...\{F6B5BD59-21F0-47F8-A6C6-63BAEB1A6569}) (Version: 2.1.03720 - Intel Corporation)
Intel(R) Chipset Device Software (HKLM-x32\...\{81520FC5-3518-40E9-9803-70CE8A801D07}) (Version: 10.1.1.38 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.2.1183 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{B5F3C3A9-225A-4CAB-A56A-2CA278DC8EBE}) (Version: 11.0.2.1183 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{F76DCE2C-FE39-4B74-9393-6E57BC3E7136}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM-x32\...\{CA0C143D-F121-405C-A863-D95BC462A444}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 24.20.100.6286 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.2.0.1020 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{EBE12EC7-60DF-41C2-AAC8-0B2586F15C96}) (Version: 15.2.0.1020 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM-x32\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1633.3 - Intel Corporation)
Intel(R) Serial IO (HKLM-x32\...\{EC883E72-01ED-4DED-AA46-9162C34A7D4F}) (Version: 30.100.1633.03 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (HKLM-x32\...\{21D65C5B-7EB7-42A2-A596-56C275341D53}) (Version: 1.42.679.1 - Intel Corporation) Hidden
Kontrola stavu osobního počítače s Windows (HKLM-x32\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Kontrola stavu osobního počítače s Windows (HKLM-x32\...\{E496AFB7-CB04-46CF-8FBB-5D665BC8811B}) (Version: 3.3.2110.22002 - Microsoft Corporation)
LibreOffice 7.2.6.2 (HKLM-x32\...\{D21963A8-765F-4458-A227-1D88D8122C2B}) (Version: 7.2.6.2 - The Document Foundation)
Malwarebytes version 4.5.7.186 (HKLM-x32\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.7.186 - Malwarebytes)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 3.1.2 - pdfforge GmbH)
PhotoFiltre Studio X (HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\PhotoFiltre Studio X) (Version: - )
Qualcomm Atheros 11ac Wireless LAN Installer (HKLM-x32\...\{20CA507E-24AA-4741-87CF-CC1B250790B7}) (Version: 11.0.10388 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.15063.21299 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.10.714.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9225.1 - Realtek Semiconductor Corp.)
ShareX (HKLM-x32\...\82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1) (Version: 13.1.0 - ShareX Team)
The Battle for Middle-earth (tm) II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version: - )
Trader Workstation (HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\5889-6375-8446-2021) (Version: latest (10.12.2h) 20220111 15:56:04 - Interactive Brokers LLC)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM-x32\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
UpdateAssistant (HKLM-x32\...\{B7AFAF92-D1C8-49A0-B34A-B5DAF9C9D5C6}) (Version: 1.9.0.0 - Microsoft Corporation) Hidden
Viber (HKLM-x32\...\{0B863FF2-B8B4-4F51-873E-9ACBE3B0F8DB}) (Version: 12.8.1.20 - Viber Media S.a.r.l) Hidden
Viber (HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\{80e9c69f-df63-4fca-bff4-bd9f6c23ec8d}) (Version: 12.8.1.20 - 2010-2020 Viber Media S.a.r.l)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.7.1 - VideoLAN)
WinRAR 5.71 (64-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)
Zoom (HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\ZoomUMX) (Version: 5.10.1 (4420) - Zoom Video Communications, Inc.)

Packages:
=========
Cortana -> C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-06-27] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1801.1.0_x86__8wekyb3d8bbwe [2018-01-21] (Microsoft Corporation) [MS Ad]
Ovládací centrum grafiky Intel® -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3407.0_x64__8j3eq9eme6ctt [2022-04-01] (INTEL CORP) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1885444895-1151541194-3766610177-1001_Classes\CLSID\{1019ADC7-17CB-4489-AFD5-6642C7400ACE}\localserver32 -> C:\Users\breta\AppData\Local\Webex\Webex\Applications\ptOIEx64.exe (Cisco WebEx LLC -> Cisco WebEx LLC)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ AAASyncNo] -> {CD0DD5EC-23D2-4AE0-A111-C7B89038E695} => C:\ProgramData\Sync.Com DLL\overlay.dll [2018-01-20] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ AAASyncProg] -> {9A1FA446-6778-4A02-883B-3100549CF193} => C:\ProgramData\Sync.Com DLL\overlay.dll [2018-01-20] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ AAASyncRoot] -> {B57A832B-F40A-4A9D-A0F5-49E7D17B8EE4} => C:\ProgramData\Sync.Com DLL\overlay.dll [2018-01-20] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ AAASyncSkip] -> {AFE40DBB-AB20-4979-B0D2-483B6866C8C9} => C:\ProgramData\Sync.Com DLL\overlay.dll [2018-01-20] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ AAASyncYes] -> {9C569020-57C0-4CE0-9605-8AD42F4B1C7F} => C:\ProgramData\Sync.Com DLL\overlay.dll [2018-01-20] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-05-12] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-05-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-05-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-12-25] (Foxit Software Incorporated -> Foxit Software Inc.)
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Program Files\PDFCreator\PDFCreatorShell.DLL [2017-10-19] (pdfforge GmbH -> pdfforge GmbH)
ContextMenuHandlers1: [SyncComContextShlExt] -> {0dcd9583-eb2f-4e08-a146-885c923c0833} => C:\ProgramData\Sync.Com DLL\rclick.dll [2018-01-20] () [File not signed]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-05-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-04-15] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [SyncComContextShlExt] -> {0dcd9583-eb2f-4e08-a146-885c923c0833} => C:\ProgramData\Sync.Com DLL\rclick.dll [2018-01-20] () [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-05-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-12-25] (Foxit Software Incorporated -> Foxit Software Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-04-15] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\breta\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default

==================== Loaded Modules (Whitelisted) =============

2018-05-28 15:19 - 2010-04-24 06:00 - 000336896 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMLM9Z.DLL
2018-04-30 21:50 - 2018-04-30 21:50 - 000117248 _____ (pdfforge GmbH) [File not signed] C:\WINDOWS\System32\pdfcmon.dll
2018-01-20 16:42 - 2018-01-20 16:42 - 001467904 _____ (TODO: <Company name>) [File not signed] C:\ProgramData\Sync.Com DLL\overlay.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========


(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\sharepoint.com -> hxxps://prigoskoly-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-07-16 13:47 - 2022-04-27 17:00 - 000000813 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost

2018-03-26 13:48 - 2019-07-13 18:43 - 000000588 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.137.1 LAPTOP-RCMATI0H.mshome.net # 2024 7 4 11 16 43 33 833
192.168.137.87 nb-vacula.mshome.net # 2019 7 6 20 16 43 33 833
78
192.168.137.87 nb-vacula.mshome.net # 2019 7 1 15 21 0 54 632
32
18 7 605

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1885444895-1151541194-3766610177-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\acer01.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "MouseDriver"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\StartupFolder: => "Sync.LNK"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\StartupFolder: => "Registration Heroes of Might & Magic 5.LNK"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "OneDriveSetup"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "Lync"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "Viber"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "ManicTimeC34F57B2DA6E6758"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "Wargaming.net Game Center"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "CiscoMeetingDaemon"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "ut"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{77D620C3-929C-4457-9E0E-53212D48D89E}C:\users\breta\desktop\wc3connect.exe] => (Allow) C:\users\breta\desktop\wc3connect.exe => No File
FirewallRules: [TCP Query User{FEA29AD6-60AF-4D0F-95D4-2CCA5A9A4796}C:\users\breta\desktop\wc3connect.exe] => (Allow) C:\users\breta\desktop\wc3connect.exe => No File
FirewallRules: [UDP Query User{17B1506F-F9FB-4D07-95D4-AEE2C320C40E}C:\users\breta\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\breta\appdata\roaming\utorrent\utorrent.exe => No File
FirewallRules: [TCP Query User{2632E140-B880-4B6D-A453-3CF1A1B0F45D}C:\users\breta\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\breta\appdata\roaming\utorrent\utorrent.exe => No File
FirewallRules: [{991FEDA9-7799-4A6C-9E23-EFD4823A67D8}] => (Allow) C:\Program Files (x86)\EA GAMES\The Battle for Middle-earth (tm)\game.dat (*DEV!ANCE*) [File not signed]
FirewallRules: [{4B127A6D-48B1-4F71-B986-B3AF27CA029A}] => (Allow) C:\Program Files (x86)\EA GAMES\The Battle for Middle-earth (tm)\game.dat (*DEV!ANCE*) [File not signed]
FirewallRules: [UDP Query User{70BDB053-7A5F-4A59-B95C-67271EE61EE1}C:\warcraft iii roc + tft v1.26 complete -iceblitz\warcraft iii 1.26 -iceblitz\war3.exe] => (Allow) C:\warcraft iii roc + tft v1.26 complete -iceblitz\warcraft iii 1.26 -iceblitz\war3.exe (Blizzard Entertainment) [File not signed]
FirewallRules: [TCP Query User{82E74818-D76D-4692-AFB2-2C40CA9F5C25}C:\warcraft iii roc + tft v1.26 complete -iceblitz\warcraft iii 1.26 -iceblitz\war3.exe] => (Allow) C:\warcraft iii roc + tft v1.26 complete -iceblitz\warcraft iii 1.26 -iceblitz\war3.exe (Blizzard Entertainment) [File not signed]
FirewallRules: [{8553EB2B-1B38-416B-9626-BC492E8FE4DD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{AB886DD0-2D08-43E6-9DE4-D97BC45D7409}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{E4A89BEE-BC60-47C6-9A37-4A8AE2F9CD24}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{E736E746-CB2F-4470-8F11-2381ED9F55CC}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{BF498B1F-3CC5-47E0-B7CE-F50FD63484EA}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe => No File
FirewallRules: [{56043177-0CCB-4108-9453-E9792FA38F40}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe => No File
FirewallRules: [TCP Query User{E2D5CE10-FC68-455B-9B37-4D488C278032}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [UDP Query User{CA384981-799E-4B8F-9902-C0B689A58B41}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [TCP Query User{65EAFD36-9F56-409F-8050-593443614691}C:\users\breta\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\breta\appdata\roaming\gameranger\gameranger\gameranger.exe (GameRanger Technologies -> GameRanger Pty Ltd)
FirewallRules: [UDP Query User{2AD8F2E3-4827-46F7-B223-E0CF28F05182}C:\users\breta\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\breta\appdata\roaming\gameranger\gameranger\gameranger.exe (GameRanger Technologies -> GameRanger Pty Ltd)
FirewallRules: [{F8292BBB-DBD9-44DF-B51E-B07F77219D17}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{AF558970-59C3-44DA-BFA2-A737AD54192B}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{08E1AE8B-53CC-449A-86A2-21BE3664AEA9}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{6FD4676F-02FC-43FE-89D7-45092C6627A1}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{B98796BA-382A-481D-A551-D8C394D5F7A7}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{F3751F83-ACCC-4A9F-AD77-54CDB7D16B81}] => (Allow) C:\Program Files (x86)\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat (*DEV!ANCE*) [File not signed]
FirewallRules: [{47EAF97C-564E-4095-8780-974FDA3D8061}] => (Allow) C:\Program Files (x86)\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat (*DEV!ANCE*) [File not signed]
FirewallRules: [TCP Query User{315B5384-6179-4581-A5DE-7C3B40F676BB}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{FAAA877F-90B9-4CB7-B31F-E29FA90F3E13}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{A4572BB5-FE83-44A3-BFD9-18E83EB37946}] => (Allow) C:\Users\breta\AppData\Roaming\uTorrent\uTorrent.exe => No File
FirewallRules: [{FC1DB5EE-A5D4-42CB-816C-F0CEAF0F6157}] => (Allow) C:\Users\breta\AppData\Roaming\uTorrent\uTorrent.exe => No File
FirewallRules: [{935F0288-CD34-4EA5-981A-B1A63E9AFF87}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{335D7AC4-B11D-458A-954E-B461D1B2DD06}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{2291C38F-9761-41BE-961B-4DF7313625E1}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{4AF0920B-E500-4A35-95D8-54BF85C69FC9}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{16897ECA-50A4-48D3-884A-425BC8857247}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{EE394D2C-4958-472A-9713-EA652E0F72D4}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{AC83F458-9FA1-4076-B3E7-54FE3A9C8E06}] => (Allow) C:\Program Files\Avast Software\Driver Updater\DriverUpdUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{07A85D0D-A9E1-4E51-972A-70DD6F0BFAB8}] => (Allow) C:\Program Files\Avast Software\Driver Updater\DriverUpdUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{6AAF5C36-F7CC-42DA-8076-90FD5C1D0D97}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{57D32845-0410-4B51-B6D3-BBC05735060D}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{191DAC92-55E8-45D5-BF9C-C12253A7A0F0}] => (Allow) C:\Users\breta\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{5ADE28B0-5572-48D0-9A53-744C0932ED21}] => (Allow) C:\Users\breta\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{CF2E8754-CEA4-439B-9D5F-5422BD9821B3}] => (Allow) C:\Users\breta\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{5B6014A4-754A-46C3-A549-276193209BA3}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{E55C32E3-36D8-49D6-8763-F345A1FCE226}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{60F97BBD-75EB-4920-95B3-491A1F75625A}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{10B91A3A-165B-46C1-B8DB-0E98A5FEC80B}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [{DE8B4982-B5BF-4809-B114-10BD09174CF2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

14-05-2022 09:31:02 Instalační služba modulů systému Windows
14-05-2022 09:32:28 Instalační služba modulů systému Windows
14-05-2022 09:33:49 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (05/18/2022 10:08:56 PM) (Source: Microsoft-Windows-Spell-Checking) (EventID: 31) (User: LAPTOP-RCMATI0H)
Description: Aktualizace vlastního uživatelského seznamu slov 2 se nezdařila: -2147024864. Kontrola pravopisu zůstane dostupná, ale tento uživatelský seznam slov nebude aktualizován.

Error: (05/16/2022 03:44:13 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program ShellExperienceHost.exe verze 10.0.19041.1620 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 2194

Čas spuštění: 01d8692ae6e61d57

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe

ID hlášení: 641b1418-e3ff-4d3d-aab7-0fdd7fff9e15

Úplný název balíčku s chybou: Microsoft.Windows.ShellExperienceHost_10.0.19041.1320_neutral_neutral_cw5n1h2txyewy

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Quiesce

Error: (05/12/2022 05:33:37 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (05/12/2022 05:33:37 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (04/27/2022 05:04:04 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program delfix_1.013.exe verze 1.0.1.3 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: c84

Čas spuštění: 01d85a47ca7ca72b

Čas ukončení: 24

Cesta k aplikaci: C:\Users\breta\Downloads\delfix_1.013.exe

ID hlášení: b3d3216a-33b4-49af-8893-cb95c1bbe051

Úplný název balíčku s chybou:

ID aplikace relativní podle balíčku s chybou:

Typ zablokování: Unknown

Error: (04/25/2022 10:58:37 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe, identifikátor PID: 4232, identifikátor PID ProfSvc: 1460.

Error: (04/10/2022 07:32:57 PM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhostw (1304,R,98) WebCacheLocal: Při otevírání souboru protokolu C:\Users\breta\AppData\Local\Microsoft\Windows\WebCache\V0100002.log došlo k chybě -1811 (0xfffff8ed).

Error: (04/01/2022 07:32:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: explorer.exe, verze: 10.0.19041.1566, časové razítko: 0x66a7e2c5
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x73b477d0
ID chybujícího procesu: 0x1e18
Čas spuštění chybující aplikace: 0x01d84589e16689a0
Cesta k chybující aplikaci: C:\WINDOWS\SysWOW64\explorer.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: 06193630-eb63-4302-a852-e2afa0b0127d
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (05/19/2022 07:43:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba LMS neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (05/19/2022 07:43:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba CCDMonitorService neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (05/17/2022 08:14:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba LMS neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (05/17/2022 08:14:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba CCDMonitorService neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (05/17/2022 08:14:32 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (21:53:50, ‎16.‎05.‎2022) bylo neočekávané.

Error: (05/17/2022 08:14:23 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 3221225684Při zpracování obnovovacích dat došlo k závažné chybě.

Error: (05/16/2022 03:47:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba LMS neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (05/16/2022 03:47:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba CCDMonitorService neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.


CodeIntegrity:
===============
Date: 2022-05-21 22:41:09
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2022-05-21 17:11:09
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.


==================== Memory info ===========================

BIOS: Insyde Corp. V1.32 10/24/2017
Motherboard: Acer Ironman_SK
Processor: Intel(R) Core(TM) i3-6006U CPU @ 2.00GHz
Percentage of memory in use: 74%
Total physical RAM: 3969.9 MB
Available physical RAM: 998.05 MB
Total Virtual: 5953.9 MB
Available Virtual: 2282.2 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:237.36 GB) (Free:95.04 GB) NTFS

\\?\Volume{20c8984f-eb3d-4c60-a35c-3643db261b25}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.48 GB) NTFS
\\?\Volume{77565014-d76a-4066-8df2-50c3f75ea011}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 96E57C31)

Partition: GPT.

==================== End of Addition.txt =======================

[breta21]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21-05-2022
Ran by breta (administrator) on LAPTOP-RCMATI0H (Acer Aspire E5-575) (21-05-2022 22:42:58)
Running from C:\Users\breta\Downloads
Loaded Profiles: breta
Platform: Microsoft Windows 10 Home Version 21H1 19043.1706 (X64) Language: Čeština (Česko)
Default browser: Brave
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1189.1\AvastBrowserCrashHandler.exe
(C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1189.1\AvastBrowserCrashHandler64.exe
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Driver Updater\DriverUpdUI.exe <3>
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <13>
(explorer.exe ->) (Open Source Developer, Robin Krom -> Greenshot) C:\Program Files\Greenshot\Greenshot.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe
(services.exe ->) (ICEpower a/s -> ICEpower) C:\Windows\System32\ICEsoundService64.exe
(services.exe ->) (Intel(R) CN -> Intel Corporation) C:\Windows\System32\IntelSSTAPO\ParameterService\ParameterService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_c52b34f1b30918c5\RstMwService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_6850e1b6319e5b65\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_14b6c79434365e33\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_377c238b1690ab0f\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_377c238b1690ab0f\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [19572528 2021-08-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_TrueHarmony] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617864 2021-08-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [MouseDriver] => C:\WINDOWS\system32\TiltWheelMouse.exe [241152 2013-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Pixart Imaging Inc)
HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [527792 2017-08-09] (Open Source Developer, Robin Krom -> Greenshot)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [212816 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [DriverUpdUI.exe] => C:\Program Files\Avast Software\Driver Updater\DriverUpdUI.exe [4251416 2022-04-01] (Avast Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [36836592 2022-05-11] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\Run: [Viber] => C:\Users\breta\AppData\Local\Viber\Viber.exe [41192976 2020-04-21] (Viber Media S.à r.l. -> Viber Media S.à r.l.)
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\breta\AppData\Local\WebEx\WebexHost.exe [6281552 2021-12-10] (Cisco WebEx LLC -> Cisco Webex LLC)
HKLM\...\Windows x64\Print Processors\Canon MG3500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBV.DLL [30208 2013-04-04] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP550 series: C:\WINDOWS\system32\CNMLM9Z.DLL [336896 2010-04-24] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [117248 2018-04-30] (pdfforge GmbH) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [OpenVPN_UserSetup] -> reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\101.0.4951.67\Installer\chrmstp.exe [2022-05-18] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\101.0.16358.65\Installer\chrmstp.exe [2022-05-12] (Avast Software s.r.o. -> AVAST Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\101.1.38.119\Installer\chrmstp.exe [2022-05-18] (Brave Software, Inc. -> Brave Software, Inc.)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {09E9163E-D020-4199-9E8B-FEC3E0B1FDF9} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe /default (No File)
Task: {24A399E6-F98C-44E7-956B-39D03F6043A1} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {40B0D556-8C0B-4A55-AF3E-55917610B399} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2717768 2022-05-11] (Avast Software s.r.o. -> AVAST Software)
Task: {44B5396A-F980-423F-8A26-E2C916023487} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-15] (Google Inc -> Google Inc.)
Task: {4CBB7FBD-D531-4B80-B694-6793E24BC35D} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2717768 2022-05-11] (Avast Software s.r.o. -> AVAST Software)
Task: {54C878E6-6F4D-4E02-BEEA-458F0C8C9F54} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-30] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {55281153-CA61-4907-8C02-8F0F66D7ACE1} - System32\Tasks\FubToolByPLD => C:\OEM\Preload\FubTool\FubTool.exe [30976 2015-05-14] (Acer Incorporated -> )
Task: {55BE4552-7D22-4F71-9D65-13CCED7F0655} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe task (No File)
Task: {6B81B823-A64F-4822-B805-A4B13C3871B9} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {700EF0B1-8C5F-4761-BDFE-8F713D528809} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-05-11] (Piriform Software Ltd -> Piriform)
Task: {88E10648-8FC0-4CDF-B65B-A46C9DB24AD6} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (No File)
Task: {890ED475-AFFE-414D-A42A-B8CDB72FB138} - System32\Tasks\Avast Software\Avast Driver Updater Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-du\icarus.exe [6475544 2022-03-14] (Avast Software s.r.o. -> Avast Software)
Task: {A08BF631-C5A9-4A17-A576-568FB451575B} - System32\Tasks\CCleanerSkipUAC - breta => C:\Program Files\CCleaner\CCleaner.exe [30924528 2022-05-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {A6C37217-CC81-4995-81D8-765FCD2E37A8} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4925264 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
Task: {B4C3BF5A-0BEC-499B-904F-2355FAF20892} - System32\Tasks\Avast Software\Avast Driver Updater BugReport => C:\Program Files\Avast Software\Driver Updater\AvBugReport.exe [4791064 2022-04-01] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 148 --programpath "C:\Program Files\Avast Software\Driver Updater\Setup\.." --configpath "C:\Program Files\Avast Software\Driver Updater\Setup" --path "C:\ProgramData\Avast Software\Driver Updater\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --guid 1c7afd08-3f97-434d-af2d-da1349dd6e45
Task: {CF177237-AFD1-45E5-8B14-E5E2A6E8C65E} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe -auto (No File)
Task: {D559D144-72CA-4AB3-A661-003BD9DB74EA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {F432E459-C8F4-4531-9E58-FDD7E5B1BB2E} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-30] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {F5992769-8E49-42F4-A6FC-7C525306D793} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-15] (Google Inc -> Google Inc.)
Task: {F9D17362-5A10-4702-9BC1-773BDBC8E0A5} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2250576 2022-05-20] (Avast Software s.r.o. -> Avast Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{26c323b0-5e78-4dd9-b8f1-a22bff627736}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5cbbdb09-6f6e-4358-b37e-be6ca6f4f22c}: [DhcpNameServer] 192.168.1.1
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION

Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Profile 1

FireFox:
========
FF DefaultProfile: 3fa1oxu4.default
FF ProfilePath: C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\3fa1oxu4.default [2022-05-19]
FF Homepage: Mozilla\Firefox\Profiles\3fa1oxu4.default -> about:home
FF NewTab: Mozilla\Firefox\Profiles\3fa1oxu4.default -> about:newtab
FF Extension: (Czech (CZ) Language Pack) - C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\3fa1oxu4.default\Extensions\langpack-cs@firefox.mozilla.org.xpi [2020-09-22]
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-04-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2018-12-27] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2018-12-27] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2018-12-27] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2018-12-27] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-25] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-25] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1189.1\npAvastBrowserUpdate3.dll [2022-01-16] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1189.1\npAvastBrowserUpdate3.dll [2022-01-16] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)

Chrome:
=======
CHR Profile: C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default [2022-05-21]
CHR Extension: (Safe Torrent Scanner) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2022-04-26]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-04-26]
CHR Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2022-04-26]
CHR Extension: (Dokumenty Google offline) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-04-26]
CHR Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2022-05-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-04-26]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]

Brave:
=======
BRA Profile: C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2022-05-18]
BRA Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-04-28]
BRA Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2022-04-28]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2022-04-28]
BRA Extension: (Brave NTP background images) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-04-25]
BRA Extension: (Wallet Data Files Updater) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2022-04-25]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-04-28]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2022-04-28]
BRA Extension: (Brave NTP sponsored images) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2022-04-28]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-04-25]
BRA Extension: (Brave Ad Block Updater (CZE, SVK: EasyList Czech and Slovak)) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\omkkefoeihpbpebhhbhmjekpnegokpbj [2022-04-28]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2022-04-28]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
S3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8434824 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [193872 2022-01-16] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [576336 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [576336 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [193872 2022-01-16] (Avast Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\101.0.16358.65\elevation_service.exe [1982744 2022-05-11] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2022-01-16] (Avast Software s.r.o. -> AVAST Software)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-30] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-30] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 DriverUpdSvc; C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe [7475480 2022-04-01] (Avast Software s.r.o. -> AVAST Software)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8348856 2022-04-15] (Malwarebytes Inc -> Malwarebytes)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1909.6-0\NisSrv.exe [3004048 2019-10-03] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1909.6-0\MsMpEng.exe [103384 2019-10-03] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 CCDMonitorService; "C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe" [X]
S3 QALSvc; "C:\Program Files\Acer\Acer Quick Access\QALSvc.exe" [X]
S3 QASvc; "C:\Program Files\Acer\Acer Quick Access\QASvc.exe" [X]
S3 UEIPSvc; "C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe" [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [38936 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [232648 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [381616 2022-05-14] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [255144 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [102568 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [21936 2022-01-16] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [44568 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [271592 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [548976 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [111056 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [86120 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [857488 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [558768 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
S2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [218088 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [317832 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2018-01-20] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2018-01-20] (Disc Soft Ltd -> Disc Soft Ltd)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2020-04-20] (Martin Malik - REALiX -> REALiX(tm))
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [31032 2017-10-20] (Acer Incorporated -> Acer Incorporated)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223688 2022-04-26] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2022-04-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2022-04-15] (Malwarebytes Inc -> Malwarebytes)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2018-11-26] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [25400 2017-10-20] (Acer Incorporated -> Acer Incorporated)
S3 RvNetMP60; C:\WINDOWS\System32\drivers\RvNetMP60.sys [69048 2019-02-18] (Famatech Corp. -> Famatech Corp.)
S3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2018-01-31] (TunnelBear, Inc. -> The OpenVPN Project)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 t_mouse.sys; C:\WINDOWS\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46688 2019-10-03] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [350136 2019-10-03] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54200 2019-10-03] (Microsoft Windows -> Microsoft Corporation)
S3 zttap300; C:\WINDOWS\System32\drivers\zttap300.sys [30488 2018-03-16] (ZeroTier Networks LLC -> ZeroTier Networks LLC)
S1 amsdk; \??\C:\WINDOWS\system32\drivers\amsdk.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-05-21 22:42 - 2022-05-21 22:43 - 000027473 _____ C:\Users\breta\Downloads\FRST.txt
2022-05-21 22:42 - 2022-05-21 22:43 - 000000000 ____D C:\FRST
2022-05-21 22:41 - 2022-05-21 22:41 - 002366464 _____ (Farbar) C:\Users\breta\Downloads\Nepotvrzeno 348218.crdownload
2022-05-21 22:41 - 2022-05-21 22:41 - 002366464 _____ (Farbar) C:\Users\breta\Downloads\FRST64 (1).exe
2022-05-21 18:29 - 2022-05-21 18:29 - 000017671 _____ C:\Users\breta\Downloads\MemTest.zip
2022-05-21 18:10 - 2022-05-21 18:10 - 000018291 _____ C:\Users\breta\Desktop\darovacka_simona.odt
2022-05-21 18:10 - 2022-05-21 18:10 - 000008920 _____ C:\Users\breta\Desktop\darovacka_simona.dotx
2022-05-20 09:58 - 2022-05-20 09:58 - 000124108 _____ C:\Users\breta\Downloads\KPMG-smlouva.sluzby_z.pdf
2022-05-18 21:40 - 2022-05-18 22:59 - 000000000 ____D C:\AdwCleaner
2022-05-18 21:40 - 2022-05-18 21:41 - 000000000 ____D C:\Program Files\CrystalDiskInfo
2022-05-18 21:40 - 2022-05-18 21:40 - 008551608 _____ (Malwarebytes) C:\Users\breta\Downloads\AdwCleaner.exe
2022-05-18 21:40 - 2022-05-18 21:40 - 000001792 _____ C:\Users\breta\Desktop\CrystalDiskInfo.lnk
2022-05-18 21:40 - 2022-05-18 21:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2022-05-18 21:39 - 2022-05-18 21:40 - 005139704 _____ (Crystal Dew World ) C:\Users\breta\Downloads\CrystalDiskInfo8_16_4.exe
2022-05-15 14:42 - 2022-05-15 15:47 - 000028322 _____ C:\Users\breta\Desktop\projekt.odt
2022-05-15 10:54 - 2022-05-15 10:54 - 000219895 _____ C:\Users\breta\Downloads\Projekt-disertační-práce (1).pdf
2022-05-15 10:33 - 2022-05-15 14:42 - 000026599 _____ C:\Users\breta\Desktop\Nový Textový dokument OpenDocument (2).odt
2022-05-15 10:24 - 2022-05-15 10:24 - 000832823 _____ C:\Users\breta\Downloads\Spravni_pravo_1-12vedral.pdf
2022-05-14 09:44 - 2022-05-14 09:44 - 000011799 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-05-14 09:43 - 2022-05-14 09:43 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-05-14 09:43 - 2022-05-14 09:43 - 000093696 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2022-05-14 09:33 - 2022-05-14 09:33 - 000000000 ___HD C:\$WinREAgent
2022-05-14 09:32 - 2022-05-14 09:32 - 000188815 _____ C:\Users\breta\Downloads\WhatsApp Image 2022-05-14 at 09.30.38 (1).jpeg
2022-05-14 09:32 - 2022-05-14 09:32 - 000181428 _____ C:\Users\breta\Downloads\WhatsApp Image 2022-05-14 at 09.30.38 (2).jpeg
2022-05-14 09:32 - 2022-05-14 09:32 - 000161429 _____ C:\Users\breta\Downloads\WhatsApp Image 2022-05-14 at 09.30.36.jpeg
2022-05-14 09:32 - 2022-05-14 09:32 - 000147572 _____ C:\Users\breta\Downloads\WhatsApp Image 2022-05-14 at 09.30.38.jpeg
2022-05-13 14:24 - 2022-05-13 14:24 - 000879292 _____ C:\Users\breta\Downloads\vy_roc_ni_zpra_vaaukro2018.pdf
2022-05-13 14:23 - 2022-05-13 14:23 - 000091302 _____ C:\Users\breta\Downloads\rozvaha 2020.pdf
2022-05-13 14:23 - 2022-05-13 14:23 - 000070265 _____ C:\Users\breta\Downloads\vykaz zisku a ztrat 2020.pdf
2022-05-13 13:31 - 2022-05-13 13:31 - 000000109 ____H C:\Users\breta\Downloads\.~lock.Kotacka_diplomova_prace.docx#
2022-05-12 17:37 - 2022-05-12 17:37 - 000287056 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2022-05-12 17:37 - 2022-05-12 17:37 - 000218088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2022-05-09 19:26 - 2022-05-09 19:26 - 000422357 _____ C:\Users\breta\Downloads\Scan_Martínek Břetislav Mgr. Bc._07_43_09-05-2022.pdf
2022-05-08 21:06 - 2022-05-08 21:06 - 000227744 _____ C:\Users\breta\Downloads\HYPO_sazby (1).pdf
2022-05-08 20:10 - 2022-05-08 20:10 - 000227744 _____ C:\Users\breta\Downloads\HYPO_sazby.pdf
2022-05-06 17:07 - 2022-05-06 17:07 - 002119256 _____ C:\Users\breta\Desktop\konference-final.pdf
2022-05-05 22:14 - 2022-05-05 22:14 - 000219895 _____ C:\Users\breta\Downloads\Projekt-disertační-práce.pdf
2022-05-04 15:58 - 2022-05-04 15:58 - 000003856 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2022-05-04 15:58 - 2022-05-04 15:58 - 000003272 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2022-05-01 09:37 - 2022-05-01 09:37 - 000147399 _____ C:\Users\breta\Downloads\WhatsApp Image 2022-05-01 at 08.59.37.jpeg
2022-05-01 09:37 - 2022-05-01 09:37 - 000137251 _____ C:\Users\breta\Downloads\WhatsApp Image 2022-05-01 at 08.59.36.jpeg
2022-04-30 18:57 - 2022-04-30 22:01 - 1976025131 _____ C:\Users\breta\Downloads\Amélie z Montmartru _ Le Fabuleux destin d'Amélie Poulain 2001, CZ.mkv
2022-04-29 21:31 - 2022-04-29 21:31 - 000933185 _____ C:\Users\breta\Downloads\Omaníková_BP.pdf
2022-04-29 21:31 - 2022-04-29 21:31 - 000690671 _____ C:\Users\breta\Downloads\Jurková_BP.pdf
2022-04-28 22:40 - 2022-04-28 22:40 - 000072142 _____ C:\Users\breta\Desktop\U8bd4aaff8ccf4cf1948fb90e1511c3ddJ.webp
2022-04-27 17:02 - 2022-04-27 17:05 - 000001820 _____ C:\DelFix.txt
2022-04-27 17:00 - 2022-04-27 17:00 - 000000000 ____D C:\Users\breta\Desktop\backups
2022-04-26 19:52 - 2022-04-26 19:52 - 000000000 ____D C:\Users\breta\AppData\Local\Greenshot
2022-04-26 19:51 - 2022-04-26 19:51 - 000223688 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2022-04-25 23:29 - 2022-04-28 16:59 - 000000000 ____D C:\Users\breta\AppData\Local\Avast Software
2022-04-25 22:59 - 2022-04-26 19:26 - 001693241 _____ C:\WINDOWS\ZAM.krnl.trace
2022-04-25 22:59 - 2022-04-26 19:26 - 000000000 ____D C:\Users\breta\AppData\Local\AMSDK
2022-04-25 22:59 - 2022-04-25 22:59 - 000000000 ____D C:\Users\breta\AppData\Local\Zemana
2022-04-25 22:46 - 2014-02-13 23:59 - 000024064 _____ C:\WINDOWS\zoek-delete.exe
2022-04-25 22:38 - 2022-04-25 22:46 - 000000000 ____D C:\zoek
2022-04-24 13:49 - 2022-04-24 13:49 - 000006594 _____ C:\WINDOWS\system32\asd.txt
2022-04-24 11:36 - 2022-04-24 11:36 - 000000000 ____D C:\Program Files\PCHealthCheck
2022-04-24 09:47 - 2022-04-24 09:47 - 000210219 _____ C:\Users\breta\Desktop\Sml- o odv. vyp. odpadních vod.pdf
2022-04-24 09:20 - 2022-04-24 09:20 - 000000000 ____D C:\ProgramData\Sophos
2022-04-24 08:25 - 2022-04-24 08:26 - 185115928 _____ (Sophos Limited) C:\Users\breta\Desktop\Sophos Virus Removal Tool.exe
2022-04-24 08:10 - 2022-04-24 08:25 - 000010681 _____ C:\Users\breta\Desktop\Nový Textový dokument OpenDocument.odt

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-05-21 22:38 - 2020-10-07 09:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-05-21 22:14 - 2017-12-15 17:12 - 000000000 ____D C:\Program Files (x86)\Google
2022-05-21 22:10 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-05-21 21:41 - 2018-01-21 20:13 - 000000000 ____D C:\Program Files\CCleaner
2022-05-21 17:12 - 2020-08-27 21:12 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-05-21 17:12 - 2020-08-27 21:12 - 000002278 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-05-21 17:12 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-05-21 17:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-05-19 19:47 - 2020-10-07 09:20 - 001693350 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-05-19 19:47 - 2019-12-07 16:41 - 000718024 _____ C:\WINDOWS\system32\perfh005.dat
2022-05-19 19:47 - 2019-12-07 16:41 - 000145166 _____ C:\WINDOWS\system32\perfc005.dat
2022-05-19 19:47 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-05-19 19:43 - 2020-10-07 09:20 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-05-19 19:43 - 2020-10-07 09:10 - 000008192 ___SH C:\DumpStack.log.tmp
2022-05-19 19:43 - 2017-12-15 20:30 - 000000000 ____D C:\ProgramData\AVAST Software
2022-05-19 19:43 - 2017-02-11 05:36 - 000000000 ___HD C:\Intel
2022-05-19 09:41 - 2020-10-07 09:20 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-05-18 22:57 - 2022-01-16 20:15 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2022-05-18 22:57 - 2021-12-07 19:13 - 000002254 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - breta
2022-05-18 22:57 - 2021-11-30 19:57 - 000003424 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA
2022-05-18 22:57 - 2021-11-30 19:57 - 000003200 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore
2022-05-18 22:57 - 2020-10-07 09:20 - 000003568 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-05-18 22:57 - 2020-10-07 09:20 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-05-18 22:57 - 2020-10-07 09:20 - 000003402 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-05-18 22:57 - 2020-10-07 09:20 - 000003344 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-05-18 22:57 - 2020-10-07 09:20 - 000003178 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-05-18 22:57 - 2020-10-07 09:20 - 000003042 _____ C:\WINDOWS\system32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2022-05-18 22:57 - 2020-10-07 09:20 - 000002970 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132
2022-05-18 22:57 - 2020-10-07 09:20 - 000002604 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon
2022-05-18 22:57 - 2020-10-07 09:20 - 000002042 _____ C:\WINDOWS\system32\Tasks\FubToolByPLD
2022-05-18 21:08 - 2017-12-15 17:12 - 000002305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-05-18 21:08 - 2017-12-15 17:12 - 000002264 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-05-18 16:07 - 2021-11-30 19:58 - 000002328 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2022-05-18 16:07 - 2021-11-30 19:58 - 000002287 _____ C:\Users\Public\Desktop\Brave.lnk
2022-05-16 15:48 - 2022-01-16 20:15 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2022-05-16 15:45 - 2019-12-07 11:03 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2022-05-15 09:27 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-05-15 08:32 - 2022-02-22 07:49 - 000000000 ____D C:\Users\breta\Desktop\matoni
2022-05-15 00:09 - 2022-04-10 19:32 - 000638808 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-05-15 00:08 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-05-15 00:08 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-05-15 00:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-05-15 00:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-05-15 00:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-05-15 00:08 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-05-14 09:31 - 2022-01-16 20:15 - 000381616 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2022-05-13 12:44 - 2017-12-14 20:51 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-05-13 12:38 - 2017-12-14 20:51 - 145501456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-05-12 19:47 - 2020-10-07 09:12 - 000000000 ____D C:\Users\breta
2022-05-12 17:50 - 2022-01-16 20:18 - 000002502 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2022-05-12 17:50 - 2022-01-16 20:18 - 000002467 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2022-05-12 17:38 - 2022-01-16 20:15 - 000317832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000857488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000558768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000548976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000271592 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000255144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000232648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000111056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000102568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000086120 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000044568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000038936 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2022-05-12 17:37 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-05-11 21:42 - 2021-12-05 22:23 - 000000302 _____ C:\Users\breta\Desktop\Nový textový dokument.txt
2022-04-27 21:20 - 2018-02-01 13:24 - 000000000 ____D C:\Users\breta\AppData\Roaming\vlc
2022-04-26 19:30 - 2022-01-16 20:16 - 000000000 ____D C:\Users\breta\AppData\Roaming\Avast Software
2022-04-26 19:30 - 2022-01-16 20:14 - 000000000 ____D C:\Program Files\Avast Software
2022-04-25 22:47 - 2020-10-07 09:12 - 000000000 ____D C:\Users\defaultuser0
2022-04-24 11:36 - 2021-11-30 22:21 - 000001110 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2022-04-24 09:17 - 2020-05-11 14:20 - 000000000 ____D C:\Users\breta\AppData\Local\Viber
2022-04-24 08:29 - 2020-04-20 17:52 - 000000000 ____D C:\Users\breta\AppData\Roaming\IObit
2022-04-24 08:29 - 2017-02-11 06:03 - 000000000 ____D C:\ProgramData\Acer
2022-04-24 08:29 - 2017-02-11 06:03 - 000000000 ____D C:\Program Files (x86)\Acer
2022-04-24 08:29 - 2017-02-11 06:02 - 000000000 ____D C:\Program Files\Acer

==================== Files in the root of some directories ========

2018-08-20 10:37 - 2018-08-20 10:37 - 000001256 _____ () C:\Users\breta\AppData\Local\recently-used.xbel
2018-01-20 12:48 - 2018-01-20 12:48 - 000000017 _____ () C:\Users\breta\AppData\Local\resmon.resmoncfg
2018-01-20 16:39 - 2018-01-20 16:39 - 013583872 _____ () C:\Users\breta\AppData\Local\Sync-1516459179.msi

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

[jaro3]

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Free (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}
AV: Avast Antivirus (Disabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: Kaspersky Free (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

nech jen jeden antivir a antispawre , ostatní odinstaluj!
Pak nový sken frst. Oba logy.

[breta21]

Jak odinstalovat defendera jsem bohužel nenašel ani na internetu. Každopadne ten Kaspersky je asi jenom nejaky zaznam v registru, nemam ho, nepouživam (ani nejde zapnout) a nevidim ho ani v "odebrat programy" ani v ccleanru pro odstranění.

[breta21]

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-05-2022
Ran by breta (22-05-2022 08:27:43)
Running from C:\Users\breta\Downloads
Microsoft Windows 10 Home Version 21H1 19043.1706 (X64) (2020-10-07 07:21:08)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-1885444895-1151541194-3766610177-500 - Administrator - Disabled)
breta (S-1-5-21-1885444895-1151541194-3766610177-1001 - Administrator - Enabled) => C:\Users\breta
DefaultAccount (S-1-5-21-1885444895-1151541194-3766610177-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-1885444895-1151541194-3766610177-1000 - Limited - Disabled) => C:\Users\defaultuser0
Guest (S-1-5-21-1885444895-1151541194-3766610177-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1885444895-1151541194-3766610177-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Free (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}
AV: Avast Antivirus (Disabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: Kaspersky Free (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 22.4.6011 - Avast Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 101.0.16358.65 - Autoři prohlížeče Avast Secure Browser)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1189.1 - AVAST Software) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BFME2 Patch Switcher (HKLM-x32\...\BFME2 Patch Switcher) (Version: - BFME2 Patch Switcher)
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 101.1.38.119 - Autoři prohlížeče Brave)
CCleaner (HKLM-x32\...\CCleaner) (Version: 6.00 - Piriform)
Cisco Webex Meetings (HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\ActiveTouchMeetingClient) (Version: 41.11.3 - Cisco Webex LLC)
CrystalDiskInfo 8.16.4 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 8.16.4 - Crystal Dew World)
DoNotSpy10 (HKLM-x32\...\{32D066BD-F94C-4948-8FA8-84653EE9617E}_is1) (Version: 5.1.0.0 - pXc-coding.com)
EaseUS Data Recovery Wizard (HKLM-x32\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS)
Exif Pilot 5.4 (HKLM-x32\...\Exif Pilot_is1) (Version: 5.4 - Two Pilots)
FormApps Signing Extension (HKLM-x32\...\{35C42D1D-32DC-404F-8978-A30B0D64DD26}) (Version: 2.24.0.43 - Software602 a.s.)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 9.4.0.16811 - Foxit Software Inc.)
GameRanger (HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\GameRanger) (Version: - GameRanger Technologies)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 101.0.4951.67 - Google LLC)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.101.0 - Google LLC) Hidden
Greenshot 1.2.10.6 (HKLM-x32\...\Greenshot_is1) (Version: 1.2.10.6 - Greenshot)
Intel(R) Computing Improvement Program (HKLM-x32\...\{F6B5BD59-21F0-47F8-A6C6-63BAEB1A6569}) (Version: 2.1.03720 - Intel Corporation)
Intel(R) Chipset Device Software (HKLM-x32\...\{81520FC5-3518-40E9-9803-70CE8A801D07}) (Version: 10.1.1.38 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.2.1183 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{B5F3C3A9-225A-4CAB-A56A-2CA278DC8EBE}) (Version: 11.0.2.1183 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{F76DCE2C-FE39-4B74-9393-6E57BC3E7136}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM-x32\...\{CA0C143D-F121-405C-A863-D95BC462A444}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 24.20.100.6286 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.2.0.1020 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{EBE12EC7-60DF-41C2-AAC8-0B2586F15C96}) (Version: 15.2.0.1020 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM-x32\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1633.3 - Intel Corporation)
Intel(R) Serial IO (HKLM-x32\...\{EC883E72-01ED-4DED-AA46-9162C34A7D4F}) (Version: 30.100.1633.03 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (HKLM-x32\...\{21D65C5B-7EB7-42A2-A596-56C275341D53}) (Version: 1.42.679.1 - Intel Corporation) Hidden
Kontrola stavu osobního počítače s Windows (HKLM-x32\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Kontrola stavu osobního počítače s Windows (HKLM-x32\...\{E496AFB7-CB04-46CF-8FBB-5D665BC8811B}) (Version: 3.3.2110.22002 - Microsoft Corporation)
LibreOffice 7.2.6.2 (HKLM-x32\...\{D21963A8-765F-4458-A227-1D88D8122C2B}) (Version: 7.2.6.2 - The Document Foundation)
Malwarebytes version 4.5.7.186 (HKLM-x32\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.7.186 - Malwarebytes)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 3.1.2 - pdfforge GmbH)
PhotoFiltre Studio X (HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\PhotoFiltre Studio X) (Version: - )
Qualcomm Atheros 11ac Wireless LAN Installer (HKLM-x32\...\{20CA507E-24AA-4741-87CF-CC1B250790B7}) (Version: 11.0.10388 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.15063.21299 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.10.714.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9225.1 - Realtek Semiconductor Corp.)
ShareX (HKLM-x32\...\82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1) (Version: 13.1.0 - ShareX Team)
The Battle for Middle-earth (tm) II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version: - )
Trader Workstation (HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\5889-6375-8446-2021) (Version: latest (10.12.2h) 20220111 15:56:04 - Interactive Brokers LLC)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM-x32\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
UpdateAssistant (HKLM-x32\...\{B7AFAF92-D1C8-49A0-B34A-B5DAF9C9D5C6}) (Version: 1.9.0.0 - Microsoft Corporation) Hidden
Viber (HKLM-x32\...\{0B863FF2-B8B4-4F51-873E-9ACBE3B0F8DB}) (Version: 12.8.1.20 - Viber Media S.a.r.l) Hidden
Viber (HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\{80e9c69f-df63-4fca-bff4-bd9f6c23ec8d}) (Version: 12.8.1.20 - 2010-2020 Viber Media S.a.r.l)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.7.1 - VideoLAN)
WinRAR 5.71 (64-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)
Zoom (HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\ZoomUMX) (Version: 5.10.1 (4420) - Zoom Video Communications, Inc.)

Packages:
=========
Cortana -> C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe [2019-12-07] (Microsoft Corporation)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-06-27] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1801.1.0_x86__8wekyb3d8bbwe [2018-01-21] (Microsoft Corporation) [MS Ad]
Ovládací centrum grafiky Intel® -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3407.0_x64__8j3eq9eme6ctt [2022-04-01] (INTEL CORP) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1885444895-1151541194-3766610177-1001_Classes\CLSID\{1019ADC7-17CB-4489-AFD5-6642C7400ACE}\localserver32 -> C:\Users\breta\AppData\Local\Webex\Webex\Applications\ptOIEx64.exe (Cisco WebEx LLC -> Cisco WebEx LLC)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ AAASyncNo] -> {CD0DD5EC-23D2-4AE0-A111-C7B89038E695} => C:\ProgramData\Sync.Com DLL\overlay.dll [2018-01-20] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ AAASyncProg] -> {9A1FA446-6778-4A02-883B-3100549CF193} => C:\ProgramData\Sync.Com DLL\overlay.dll [2018-01-20] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ AAASyncRoot] -> {B57A832B-F40A-4A9D-A0F5-49E7D17B8EE4} => C:\ProgramData\Sync.Com DLL\overlay.dll [2018-01-20] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ AAASyncSkip] -> {AFE40DBB-AB20-4979-B0D2-483B6866C8C9} => C:\ProgramData\Sync.Com DLL\overlay.dll [2018-01-20] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ AAASyncYes] -> {9C569020-57C0-4CE0-9605-8AD42F4B1C7F} => C:\ProgramData\Sync.Com DLL\overlay.dll [2018-01-20] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-05-12] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-05-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-05-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-12-25] (Foxit Software Incorporated -> Foxit Software Inc.)
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Program Files\PDFCreator\PDFCreatorShell.DLL [2017-10-19] (pdfforge GmbH -> pdfforge GmbH)
ContextMenuHandlers1: [SyncComContextShlExt] -> {0dcd9583-eb2f-4e08-a146-885c923c0833} => C:\ProgramData\Sync.Com DLL\rclick.dll [2018-01-20] () [File not signed]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-05-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-04-15] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [SyncComContextShlExt] -> {0dcd9583-eb2f-4e08-a146-885c923c0833} => C:\ProgramData\Sync.Com DLL\rclick.dll [2018-01-20] () [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-05-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-12-25] (Foxit Software Incorporated -> Foxit Software Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-04-15] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\breta\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default

==================== Loaded Modules (Whitelisted) =============

2018-01-20 16:42 - 2018-01-20 16:42 - 001136640 _____ () [File not signed] C:\ProgramData\Sync.Com DLL\rclick.dll
2018-05-28 15:19 - 2010-04-24 06:00 - 000336896 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMLM9Z.DLL
2018-04-30 21:50 - 2018-04-30 21:50 - 000117248 _____ (pdfforge GmbH) [File not signed] C:\WINDOWS\System32\pdfcmon.dll
2018-01-20 16:42 - 2018-01-20 16:42 - 001467904 _____ (TODO: <Company name>) [File not signed] C:\ProgramData\Sync.Com DLL\overlay.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========


(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\sharepoint.com -> hxxps://prigoskoly-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-07-16 13:47 - 2022-04-27 17:00 - 000000813 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost

2018-03-26 13:48 - 2019-07-13 18:43 - 000000588 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.137.1 LAPTOP-RCMATI0H.mshome.net # 2024 7 4 11 16 43 33 833
192.168.137.87 nb-vacula.mshome.net # 2019 7 6 20 16 43 33 833
78
192.168.137.87 nb-vacula.mshome.net # 2019 7 1 15 21 0 54 632
32
18 7 605

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1885444895-1151541194-3766610177-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\acer01.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "MouseDriver"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\StartupFolder: => "Sync.LNK"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\StartupFolder: => "Registration Heroes of Might & Magic 5.LNK"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "OneDriveSetup"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "Lync"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "Viber"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "ManicTimeC34F57B2DA6E6758"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "Wargaming.net Game Center"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "CiscoMeetingDaemon"
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\StartupApproved\Run: => "ut"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{991FEDA9-7799-4A6C-9E23-EFD4823A67D8}] => (Allow) C:\Program Files (x86)\EA GAMES\The Battle for Middle-earth (tm)\game.dat (*DEV!ANCE*) [File not signed]
FirewallRules: [{4B127A6D-48B1-4F71-B986-B3AF27CA029A}] => (Allow) C:\Program Files (x86)\EA GAMES\The Battle for Middle-earth (tm)\game.dat (*DEV!ANCE*) [File not signed]
FirewallRules: [UDP Query User{70BDB053-7A5F-4A59-B95C-67271EE61EE1}C:\warcraft iii roc + tft v1.26 complete -iceblitz\warcraft iii 1.26 -iceblitz\war3.exe] => (Allow) C:\warcraft iii roc + tft v1.26 complete -iceblitz\warcraft iii 1.26 -iceblitz\war3.exe (Blizzard Entertainment) [File not signed]
FirewallRules: [TCP Query User{82E74818-D76D-4692-AFB2-2C40CA9F5C25}C:\warcraft iii roc + tft v1.26 complete -iceblitz\warcraft iii 1.26 -iceblitz\war3.exe] => (Allow) C:\warcraft iii roc + tft v1.26 complete -iceblitz\warcraft iii 1.26 -iceblitz\war3.exe (Blizzard Entertainment) [File not signed]
FirewallRules: [{AB886DD0-2D08-43E6-9DE4-D97BC45D7409}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{E4A89BEE-BC60-47C6-9A37-4A8AE2F9CD24}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{E736E746-CB2F-4470-8F11-2381ED9F55CC}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [TCP Query User{E2D5CE10-FC68-455B-9B37-4D488C278032}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [UDP Query User{CA384981-799E-4B8F-9902-C0B689A58B41}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [TCP Query User{65EAFD36-9F56-409F-8050-593443614691}C:\users\breta\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\breta\appdata\roaming\gameranger\gameranger\gameranger.exe (GameRanger Technologies -> GameRanger Pty Ltd)
FirewallRules: [UDP Query User{2AD8F2E3-4827-46F7-B223-E0CF28F05182}C:\users\breta\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\breta\appdata\roaming\gameranger\gameranger\gameranger.exe (GameRanger Technologies -> GameRanger Pty Ltd)
FirewallRules: [{F8292BBB-DBD9-44DF-B51E-B07F77219D17}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{AF558970-59C3-44DA-BFA2-A737AD54192B}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{08E1AE8B-53CC-449A-86A2-21BE3664AEA9}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{6FD4676F-02FC-43FE-89D7-45092C6627A1}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{B98796BA-382A-481D-A551-D8C394D5F7A7}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{F3751F83-ACCC-4A9F-AD77-54CDB7D16B81}] => (Allow) C:\Program Files (x86)\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat (*DEV!ANCE*) [File not signed]
FirewallRules: [{47EAF97C-564E-4095-8780-974FDA3D8061}] => (Allow) C:\Program Files (x86)\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat (*DEV!ANCE*) [File not signed]
FirewallRules: [TCP Query User{315B5384-6179-4581-A5DE-7C3B40F676BB}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{FAAA877F-90B9-4CB7-B31F-E29FA90F3E13}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{935F0288-CD34-4EA5-981A-B1A63E9AFF87}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{335D7AC4-B11D-458A-954E-B461D1B2DD06}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{2291C38F-9761-41BE-961B-4DF7313625E1}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{4AF0920B-E500-4A35-95D8-54BF85C69FC9}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{16897ECA-50A4-48D3-884A-425BC8857247}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{EE394D2C-4958-472A-9713-EA652E0F72D4}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{AC83F458-9FA1-4076-B3E7-54FE3A9C8E06}] => (Allow) C:\Program Files\Avast Software\Driver Updater\DriverUpdUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{07A85D0D-A9E1-4E51-972A-70DD6F0BFAB8}] => (Allow) C:\Program Files\Avast Software\Driver Updater\DriverUpdUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{6AAF5C36-F7CC-42DA-8076-90FD5C1D0D97}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{57D32845-0410-4B51-B6D3-BBC05735060D}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{191DAC92-55E8-45D5-BF9C-C12253A7A0F0}] => (Allow) C:\Users\breta\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{5B6014A4-754A-46C3-A549-276193209BA3}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{E55C32E3-36D8-49D6-8763-F345A1FCE226}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{60F97BBD-75EB-4920-95B3-491A1F75625A}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{10B91A3A-165B-46C1-B8DB-0E98A5FEC80B}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [{DE8B4982-B5BF-4809-B114-10BD09174CF2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

14-05-2022 09:31:02 Instalační služba modulů systému Windows
14-05-2022 09:32:28 Instalační služba modulů systému Windows
14-05-2022 09:33:49 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (05/18/2022 10:08:56 PM) (Source: Microsoft-Windows-Spell-Checking) (EventID: 31) (User: LAPTOP-RCMATI0H)
Description: Aktualizace vlastního uživatelského seznamu slov 2 se nezdařila: -2147024864. Kontrola pravopisu zůstane dostupná, ale tento uživatelský seznam slov nebude aktualizován.

Error: (05/16/2022 03:44:13 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program ShellExperienceHost.exe verze 10.0.19041.1620 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 2194

Čas spuštění: 01d8692ae6e61d57

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe

ID hlášení: 641b1418-e3ff-4d3d-aab7-0fdd7fff9e15

Úplný název balíčku s chybou: Microsoft.Windows.ShellExperienceHost_10.0.19041.1320_neutral_neutral_cw5n1h2txyewy

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Quiesce

Error: (05/12/2022 05:33:37 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (05/12/2022 05:33:37 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (04/27/2022 05:04:04 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program delfix_1.013.exe verze 1.0.1.3 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: c84

Čas spuštění: 01d85a47ca7ca72b

Čas ukončení: 24

Cesta k aplikaci: C:\Users\breta\Downloads\delfix_1.013.exe

ID hlášení: b3d3216a-33b4-49af-8893-cb95c1bbe051

Úplný název balíčku s chybou:

ID aplikace relativní podle balíčku s chybou:

Typ zablokování: Unknown

Error: (04/25/2022 10:58:37 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe, identifikátor PID: 4232, identifikátor PID ProfSvc: 1460.

Error: (04/10/2022 07:32:57 PM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhostw (1304,R,98) WebCacheLocal: Při otevírání souboru protokolu C:\Users\breta\AppData\Local\Microsoft\Windows\WebCache\V0100002.log došlo k chybě -1811 (0xfffff8ed).

Error: (04/01/2022 07:32:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: explorer.exe, verze: 10.0.19041.1566, časové razítko: 0x66a7e2c5
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x73b477d0
ID chybujícího procesu: 0x1e18
Čas spuštění chybující aplikace: 0x01d84589e16689a0
Cesta k chybující aplikaci: C:\WINDOWS\SysWOW64\explorer.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: 06193630-eb63-4302-a852-e2afa0b0127d
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (05/22/2022 08:06:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba LMS neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (05/22/2022 07:56:27 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba LMS neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (05/19/2022 07:43:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba LMS neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (05/19/2022 07:43:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba CCDMonitorService neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (05/17/2022 08:14:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba LMS neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (05/17/2022 08:14:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba CCDMonitorService neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (05/17/2022 08:14:32 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (21:53:50, ‎16.‎05.‎2022) bylo neočekávané.

Error: (05/17/2022 08:14:23 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 3221225684Při zpracování obnovovacích dat došlo k závažné chybě.


CodeIntegrity:
===============
Date: 2022-05-22 08:07:32
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.


==================== Memory info ===========================

BIOS: Insyde Corp. V1.32 10/24/2017
Motherboard: Acer Ironman_SK
Processor: Intel(R) Core(TM) i3-6006U CPU @ 2.00GHz
Percentage of memory in use: 67%
Total physical RAM: 3969.9 MB
Available physical RAM: 1281.31 MB
Total Virtual: 5633.9 MB
Available Virtual: 2978.67 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:237.36 GB) (Free:94.62 GB) NTFS

\\?\Volume{20c8984f-eb3d-4c60-a35c-3643db261b25}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.48 GB) NTFS
\\?\Volume{77565014-d76a-4066-8df2-50c3f75ea011}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 96E57C31)

Partition: GPT.

==================== End of Addition.txt =======================

[breta21]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21-05-2022
Ran by breta (administrator) on LAPTOP-RCMATI0H (Acer Aspire E5-575) (22-05-2022 08:26:05)
Running from C:\Users\breta\Downloads
Loaded Profiles: breta
Platform: Microsoft Windows 10 Home Version 21H1 19043.1706 (X64) Language: Čeština (Česko)
Default browser: Brave
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <3>
(C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1189.1\AvastBrowserCrashHandler.exe
(C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1189.1\AvastBrowserCrashHandler64.exe
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Driver Updater\DriverUpdUI.exe <4>
(explorer.exe ->) (Open Source Developer, Robin Krom -> Greenshot) C:\Program Files\Greenshot\Greenshot.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe
(services.exe ->) (ICEpower a/s -> ICEpower) C:\Windows\System32\ICEsoundService64.exe
(services.exe ->) (Intel(R) CN -> Intel Corporation) C:\Windows\System32\IntelSSTAPO\ParameterService\ParameterService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_c52b34f1b30918c5\RstMwService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_6850e1b6319e5b65\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_14b6c79434365e33\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_377c238b1690ab0f\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_377c238b1690ab0f\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(svchost.exe ->) (Acer Incorporated -> ) C:\OEM\Preload\FubTool\FubTool.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [19572528 2021-08-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_TrueHarmony] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617864 2021-08-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [MouseDriver] => C:\WINDOWS\system32\TiltWheelMouse.exe [241152 2013-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Pixart Imaging Inc)
HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [527792 2017-08-09] (Open Source Developer, Robin Krom -> Greenshot)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [212816 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [DriverUpdUI.exe] => C:\Program Files\Avast Software\Driver Updater\DriverUpdUI.exe [4251416 2022-04-01] (Avast Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [36836592 2022-05-11] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\Run: [Viber] => C:\Users\breta\AppData\Local\Viber\Viber.exe [41192976 2020-04-21] (Viber Media S.à r.l. -> Viber Media S.à r.l.)
HKU\S-1-5-21-1885444895-1151541194-3766610177-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\breta\AppData\Local\WebEx\WebexHost.exe [6281552 2021-12-10] (Cisco WebEx LLC -> Cisco Webex LLC)
HKLM\...\Windows x64\Print Processors\Canon MG3500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBV.DLL [30208 2013-04-04] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP550 series: C:\WINDOWS\system32\CNMLM9Z.DLL [336896 2010-04-24] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [117248 2018-04-30] (pdfforge GmbH) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [OpenVPN_UserSetup] -> reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\101.0.4951.67\Installer\chrmstp.exe [2022-05-18] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\101.0.16358.65\Installer\chrmstp.exe [2022-05-12] (Avast Software s.r.o. -> AVAST Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\101.1.38.119\Installer\chrmstp.exe [2022-05-18] (Brave Software, Inc. -> Brave Software, Inc.)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {09E9163E-D020-4199-9E8B-FEC3E0B1FDF9} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe /default (No File)
Task: {24A399E6-F98C-44E7-956B-39D03F6043A1} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {40B0D556-8C0B-4A55-AF3E-55917610B399} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2717768 2022-05-11] (Avast Software s.r.o. -> AVAST Software)
Task: {44B5396A-F980-423F-8A26-E2C916023487} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-15] (Google Inc -> Google Inc.)
Task: {4CBB7FBD-D531-4B80-B694-6793E24BC35D} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2717768 2022-05-11] (Avast Software s.r.o. -> AVAST Software)
Task: {54C878E6-6F4D-4E02-BEEA-458F0C8C9F54} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-30] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {55281153-CA61-4907-8C02-8F0F66D7ACE1} - System32\Tasks\FubToolByPLD => C:\OEM\Preload\FubTool\FubTool.exe [30976 2015-05-14] (Acer Incorporated -> )
Task: {55BE4552-7D22-4F71-9D65-13CCED7F0655} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe task (No File)
Task: {6B81B823-A64F-4822-B805-A4B13C3871B9} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {700EF0B1-8C5F-4761-BDFE-8F713D528809} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-05-11] (Piriform Software Ltd -> Piriform)
Task: {88E10648-8FC0-4CDF-B65B-A46C9DB24AD6} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (No File)
Task: {890ED475-AFFE-414D-A42A-B8CDB72FB138} - System32\Tasks\Avast Software\Avast Driver Updater Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-du\icarus.exe [6475544 2022-03-14] (Avast Software s.r.o. -> Avast Software)
Task: {A08BF631-C5A9-4A17-A576-568FB451575B} - System32\Tasks\CCleanerSkipUAC - breta => C:\Program Files\CCleaner\CCleaner.exe [30924528 2022-05-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {A6C37217-CC81-4995-81D8-765FCD2E37A8} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4925264 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
Task: {B4C3BF5A-0BEC-499B-904F-2355FAF20892} - System32\Tasks\Avast Software\Avast Driver Updater BugReport => C:\Program Files\Avast Software\Driver Updater\AvBugReport.exe [4791064 2022-04-01] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 148 --programpath "C:\Program Files\Avast Software\Driver Updater\Setup\.." --configpath "C:\Program Files\Avast Software\Driver Updater\Setup" --path "C:\ProgramData\Avast Software\Driver Updater\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --guid 1c7afd08-3f97-434d-af2d-da1349dd6e45
Task: {CF177237-AFD1-45E5-8B14-E5E2A6E8C65E} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe -auto (No File)
Task: {D559D144-72CA-4AB3-A661-003BD9DB74EA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {F432E459-C8F4-4531-9E58-FDD7E5B1BB2E} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-30] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {F5992769-8E49-42F4-A6FC-7C525306D793} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-15] (Google Inc -> Google Inc.)
Task: {F9D17362-5A10-4702-9BC1-773BDBC8E0A5} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2250576 2022-05-20] (Avast Software s.r.o. -> Avast Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{26c323b0-5e78-4dd9-b8f1-a22bff627736}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5cbbdb09-6f6e-4358-b37e-be6ca6f4f22c}: [DhcpNameServer] 192.168.1.1
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION

Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Profile 1

FireFox:
========
FF DefaultProfile: 3fa1oxu4.default
FF ProfilePath: C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\3fa1oxu4.default [2022-05-22]
FF Homepage: Mozilla\Firefox\Profiles\3fa1oxu4.default -> about:home
FF NewTab: Mozilla\Firefox\Profiles\3fa1oxu4.default -> about:newtab
FF Extension: (Czech (CZ) Language Pack) - C:\Users\breta\AppData\Roaming\Mozilla\Firefox\Profiles\3fa1oxu4.default\Extensions\langpack-cs@firefox.mozilla.org.xpi [2020-09-22]
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-04-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2018-12-27] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2018-12-27] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2018-12-27] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2018-12-27] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-25] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-25] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1189.1\npAvastBrowserUpdate3.dll [2022-01-16] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1189.1\npAvastBrowserUpdate3.dll [2022-01-16] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)

Chrome:
=======
CHR Profile: C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default [2022-05-22]
CHR Extension: (Safe Torrent Scanner) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2022-04-26]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-04-26]
CHR Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2022-04-26]
CHR Extension: (Dokumenty Google offline) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-04-26]
CHR Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2022-05-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\breta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-04-26]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]

Brave:
=======
BRA Profile: C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2022-05-18]
BRA Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-04-28]
BRA Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2022-04-28]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2022-04-28]
BRA Extension: (Brave NTP background images) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-04-25]
BRA Extension: (Wallet Data Files Updater) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2022-04-25]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-04-28]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2022-04-28]
BRA Extension: (Brave NTP sponsored images) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2022-04-28]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-04-25]
BRA Extension: (Brave Ad Block Updater (CZE, SVK: EasyList Czech and Slovak)) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\omkkefoeihpbpebhhbhmjekpnegokpbj [2022-04-28]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\breta\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2022-04-28]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
S3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8434824 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [193872 2022-01-16] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [576336 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [576336 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [193872 2022-01-16] (Avast Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\101.0.16358.65\elevation_service.exe [1982744 2022-05-11] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2022-01-16] (Avast Software s.r.o. -> AVAST Software)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-30] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-30] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 DriverUpdSvc; C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe [7475480 2022-04-01] (Avast Software s.r.o. -> AVAST Software)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8348856 2022-04-15] (Malwarebytes Inc -> Malwarebytes)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1909.6-0\NisSrv.exe [3004048 2019-10-03] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1909.6-0\MsMpEng.exe [103384 2019-10-03] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [38936 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [232648 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [381616 2022-05-14] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [255144 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [102568 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [21936 2022-01-16] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [44568 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [271592 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [548976 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [111056 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [86120 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [857488 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [558768 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [218088 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [317832 2022-05-12] (Avast Software s.r.o. -> AVAST Software)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2018-01-20] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2018-01-20] (Disc Soft Ltd -> Disc Soft Ltd)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2020-04-20] (Martin Malik - REALiX -> REALiX(tm))
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [31032 2017-10-20] (Acer Incorporated -> Acer Incorporated)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223688 2022-04-26] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2022-04-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2022-05-22] (Malwarebytes Inc -> Malwarebytes)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2018-11-26] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [25400 2017-10-20] (Acer Incorporated -> Acer Incorporated)
S3 RvNetMP60; C:\WINDOWS\System32\drivers\RvNetMP60.sys [69048 2019-02-18] (Famatech Corp. -> Famatech Corp.)
S3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2018-01-31] (TunnelBear, Inc. -> The OpenVPN Project)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 t_mouse.sys; C:\WINDOWS\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46688 2019-10-03] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [350136 2019-10-03] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54200 2019-10-03] (Microsoft Windows -> Microsoft Corporation)
S3 zttap300; C:\WINDOWS\System32\drivers\zttap300.sys [30488 2018-03-16] (ZeroTier Networks LLC -> ZeroTier Networks LLC)
S1 amsdk; \??\C:\WINDOWS\system32\drivers\amsdk.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-05-22 07:51 - 2022-05-22 07:52 - 013819528 _____ (Kaspersky Lab ZAO) C:\Users\breta\Downloads\kavremvr.exe
2022-05-21 22:44 - 2022-05-21 22:46 - 000036439 _____ C:\Users\breta\Downloads\Addition.txt
2022-05-21 22:42 - 2022-05-22 08:26 - 000027476 _____ C:\Users\breta\Downloads\FRST.txt
2022-05-21 22:42 - 2022-05-22 08:26 - 000000000 ____D C:\FRST
2022-05-21 22:41 - 2022-05-21 22:41 - 002366464 _____ (Farbar) C:\Users\breta\Downloads\FRST64 (1).exe
2022-05-21 18:29 - 2022-05-21 18:29 - 000017671 _____ C:\Users\breta\Downloads\MemTest.zip
2022-05-21 18:10 - 2022-05-21 18:10 - 000018291 _____ C:\Users\breta\Desktop\darovacka_simona.odt
2022-05-21 18:10 - 2022-05-21 18:10 - 000008920 _____ C:\Users\breta\Desktop\darovacka_simona.dotx
2022-05-20 09:58 - 2022-05-20 09:58 - 000124108 _____ C:\Users\breta\Downloads\KPMG-smlouva.sluzby_z.pdf
2022-05-18 21:40 - 2022-05-18 22:59 - 000000000 ____D C:\AdwCleaner
2022-05-18 21:40 - 2022-05-18 21:41 - 000000000 ____D C:\Program Files\CrystalDiskInfo
2022-05-18 21:40 - 2022-05-18 21:40 - 008551608 _____ (Malwarebytes) C:\Users\breta\Downloads\AdwCleaner.exe
2022-05-18 21:40 - 2022-05-18 21:40 - 000001792 _____ C:\Users\breta\Desktop\CrystalDiskInfo.lnk
2022-05-18 21:40 - 2022-05-18 21:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2022-05-18 21:39 - 2022-05-18 21:40 - 005139704 _____ (Crystal Dew World ) C:\Users\breta\Downloads\CrystalDiskInfo8_16_4.exe
2022-05-15 14:42 - 2022-05-15 15:47 - 000028322 _____ C:\Users\breta\Desktop\projekt.odt
2022-05-15 10:54 - 2022-05-15 10:54 - 000219895 _____ C:\Users\breta\Downloads\Projekt-disertační-práce (1).pdf
2022-05-15 10:33 - 2022-05-15 14:42 - 000026599 _____ C:\Users\breta\Desktop\Nový Textový dokument OpenDocument (2).odt
2022-05-15 10:24 - 2022-05-15 10:24 - 000832823 _____ C:\Users\breta\Downloads\Spravni_pravo_1-12vedral.pdf
2022-05-14 09:44 - 2022-05-14 09:44 - 000011799 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-05-14 09:43 - 2022-05-14 09:43 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-05-14 09:43 - 2022-05-14 09:43 - 000093696 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2022-05-14 09:33 - 2022-05-14 09:33 - 000000000 ___HD C:\$WinREAgent
2022-05-14 09:32 - 2022-05-14 09:32 - 000188815 _____ C:\Users\breta\Downloads\WhatsApp Image 2022-05-14 at 09.30.38 (1).jpeg
2022-05-14 09:32 - 2022-05-14 09:32 - 000181428 _____ C:\Users\breta\Downloads\WhatsApp Image 2022-05-14 at 09.30.38 (2).jpeg
2022-05-14 09:32 - 2022-05-14 09:32 - 000161429 _____ C:\Users\breta\Downloads\WhatsApp Image 2022-05-14 at 09.30.36.jpeg
2022-05-14 09:32 - 2022-05-14 09:32 - 000147572 _____ C:\Users\breta\Downloads\WhatsApp Image 2022-05-14 at 09.30.38.jpeg
2022-05-13 14:24 - 2022-05-13 14:24 - 000879292 _____ C:\Users\breta\Downloads\vy_roc_ni_zpra_vaaukro2018.pdf
2022-05-13 14:23 - 2022-05-13 14:23 - 000091302 _____ C:\Users\breta\Downloads\rozvaha 2020.pdf
2022-05-13 14:23 - 2022-05-13 14:23 - 000070265 _____ C:\Users\breta\Downloads\vykaz zisku a ztrat 2020.pdf
2022-05-13 13:31 - 2022-05-13 13:31 - 000000109 ____H C:\Users\breta\Downloads\.~lock.Kotacka_diplomova_prace.docx#
2022-05-12 17:37 - 2022-05-12 17:37 - 000287056 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2022-05-12 17:37 - 2022-05-12 17:37 - 000218088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2022-05-09 19:26 - 2022-05-09 19:26 - 000422357 _____ C:\Users\breta\Downloads\Scan_Martínek Břetislav Mgr. Bc._07_43_09-05-2022.pdf
2022-05-08 21:06 - 2022-05-08 21:06 - 000227744 _____ C:\Users\breta\Downloads\HYPO_sazby (1).pdf
2022-05-08 20:10 - 2022-05-08 20:10 - 000227744 _____ C:\Users\breta\Downloads\HYPO_sazby.pdf
2022-05-06 17:07 - 2022-05-06 17:07 - 002119256 _____ C:\Users\breta\Desktop\konference-final.pdf
2022-05-05 22:14 - 2022-05-05 22:14 - 000219895 _____ C:\Users\breta\Downloads\Projekt-disertační-práce.pdf
2022-05-04 15:58 - 2022-05-04 15:58 - 000003856 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2022-05-04 15:58 - 2022-05-04 15:58 - 000003272 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2022-05-01 09:37 - 2022-05-01 09:37 - 000147399 _____ C:\Users\breta\Downloads\WhatsApp Image 2022-05-01 at 08.59.37.jpeg
2022-05-01 09:37 - 2022-05-01 09:37 - 000137251 _____ C:\Users\breta\Downloads\WhatsApp Image 2022-05-01 at 08.59.36.jpeg
2022-04-30 18:57 - 2022-04-30 22:01 - 1976025131 _____ C:\Users\breta\Downloads\Amélie z Montmartru _ Le Fabuleux destin d'Amélie Poulain 2001, CZ.mkv
2022-04-29 21:31 - 2022-04-29 21:31 - 000933185 _____ C:\Users\breta\Downloads\Omaníková_BP.pdf
2022-04-29 21:31 - 2022-04-29 21:31 - 000690671 _____ C:\Users\breta\Downloads\Jurková_BP.pdf
2022-04-28 22:40 - 2022-04-28 22:40 - 000072142 _____ C:\Users\breta\Desktop\U8bd4aaff8ccf4cf1948fb90e1511c3ddJ.webp
2022-04-27 17:02 - 2022-04-27 17:05 - 000001820 _____ C:\DelFix.txt
2022-04-27 17:00 - 2022-04-27 17:00 - 000000000 ____D C:\Users\breta\Desktop\backups
2022-04-26 19:52 - 2022-04-26 19:52 - 000000000 ____D C:\Users\breta\AppData\Local\Greenshot
2022-04-26 19:51 - 2022-04-26 19:51 - 000223688 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2022-04-25 23:29 - 2022-04-28 16:59 - 000000000 ____D C:\Users\breta\AppData\Local\Avast Software
2022-04-25 22:59 - 2022-04-26 19:26 - 001693241 _____ C:\WINDOWS\ZAM.krnl.trace
2022-04-25 22:59 - 2022-04-26 19:26 - 000000000 ____D C:\Users\breta\AppData\Local\AMSDK
2022-04-25 22:59 - 2022-04-25 22:59 - 000000000 ____D C:\Users\breta\AppData\Local\Zemana
2022-04-25 22:46 - 2014-02-13 23:59 - 000024064 _____ C:\WINDOWS\zoek-delete.exe
2022-04-25 22:38 - 2022-04-25 22:46 - 000000000 ____D C:\zoek
2022-04-24 13:49 - 2022-04-24 13:49 - 000006594 _____ C:\WINDOWS\system32\asd.txt
2022-04-24 11:36 - 2022-04-24 11:36 - 000000000 ____D C:\Program Files\PCHealthCheck
2022-04-24 09:47 - 2022-04-24 09:47 - 000210219 _____ C:\Users\breta\Desktop\Sml- o odv. vyp. odpadních vod.pdf
2022-04-24 09:20 - 2022-04-24 09:20 - 000000000 ____D C:\ProgramData\Sophos
2022-04-24 08:25 - 2022-04-24 08:26 - 185115928 _____ (Sophos Limited) C:\Users\breta\Desktop\Sophos Virus Removal Tool.exe
2022-04-24 08:10 - 2022-04-24 08:25 - 000010681 _____ C:\Users\breta\Desktop\Nový Textový dokument OpenDocument.odt

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-05-22 08:25 - 2020-10-07 09:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-05-22 08:24 - 2017-12-15 17:12 - 000000000 ____D C:\Program Files (x86)\Google
2022-05-22 08:10 - 2020-10-07 09:20 - 001693350 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-05-22 08:10 - 2019-12-07 16:41 - 000718024 _____ C:\WINDOWS\system32\perfh005.dat
2022-05-22 08:10 - 2019-12-07 16:41 - 000145166 _____ C:\WINDOWS\system32\perfc005.dat
2022-05-22 08:10 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-05-22 08:08 - 2018-01-21 20:13 - 000000000 ____D C:\Program Files\CCleaner
2022-05-22 08:06 - 2020-10-07 09:20 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-05-22 08:06 - 2020-10-07 09:10 - 000008192 ___SH C:\DumpStack.log.tmp
2022-05-22 08:06 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-05-22 08:06 - 2019-12-07 11:03 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2022-05-22 08:06 - 2017-12-15 20:30 - 000000000 ____D C:\ProgramData\AVAST Software
2022-05-22 08:06 - 2017-02-11 05:36 - 000000000 ___HD C:\Intel
2022-05-22 07:56 - 2022-04-15 07:59 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2022-05-22 07:53 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-05-21 17:12 - 2020-08-27 21:12 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-05-21 17:12 - 2020-08-27 21:12 - 000002278 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-05-21 17:12 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-05-21 17:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-05-19 09:41 - 2020-10-07 09:20 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-05-18 22:57 - 2022-01-16 20:15 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2022-05-18 22:57 - 2021-12-07 19:13 - 000002254 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - breta
2022-05-18 22:57 - 2021-11-30 19:57 - 000003424 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA
2022-05-18 22:57 - 2021-11-30 19:57 - 000003200 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore
2022-05-18 22:57 - 2020-10-07 09:20 - 000003568 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-05-18 22:57 - 2020-10-07 09:20 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-05-18 22:57 - 2020-10-07 09:20 - 000003402 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-05-18 22:57 - 2020-10-07 09:20 - 000003344 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-05-18 22:57 - 2020-10-07 09:20 - 000003178 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-05-18 22:57 - 2020-10-07 09:20 - 000003042 _____ C:\WINDOWS\system32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2022-05-18 22:57 - 2020-10-07 09:20 - 000002970 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132
2022-05-18 22:57 - 2020-10-07 09:20 - 000002604 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon
2022-05-18 22:57 - 2020-10-07 09:20 - 000002042 _____ C:\WINDOWS\system32\Tasks\FubToolByPLD
2022-05-18 21:08 - 2017-12-15 17:12 - 000002305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-05-18 21:08 - 2017-12-15 17:12 - 000002264 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-05-18 16:07 - 2021-11-30 19:58 - 000002328 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2022-05-18 16:07 - 2021-11-30 19:58 - 000002287 _____ C:\Users\Public\Desktop\Brave.lnk
2022-05-16 15:48 - 2022-01-16 20:15 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2022-05-15 09:27 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-05-15 08:32 - 2022-02-22 07:49 - 000000000 ____D C:\Users\breta\Desktop\matoni
2022-05-15 00:09 - 2022-04-10 19:32 - 000638808 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-05-15 00:08 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-05-15 00:08 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-05-15 00:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-05-15 00:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-05-15 00:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-05-15 00:08 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-05-14 09:31 - 2022-01-16 20:15 - 000381616 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2022-05-13 12:44 - 2017-12-14 20:51 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-05-13 12:38 - 2017-12-14 20:51 - 145501456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-05-12 19:47 - 2020-10-07 09:12 - 000000000 ____D C:\Users\breta
2022-05-12 17:50 - 2022-01-16 20:18 - 000002502 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2022-05-12 17:50 - 2022-01-16 20:18 - 000002467 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2022-05-12 17:38 - 2022-01-16 20:15 - 000317832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000857488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000558768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000548976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000271592 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000255144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000232648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000111056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000102568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000086120 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000044568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2022-05-12 17:37 - 2022-01-16 20:15 - 000038936 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2022-05-11 21:42 - 2021-12-05 22:23 - 000000302 _____ C:\Users\breta\Desktop\Nový textový dokument.txt
2022-04-27 21:20 - 2018-02-01 13:24 - 000000000 ____D C:\Users\breta\AppData\Roaming\vlc
2022-04-26 19:30 - 2022-01-16 20:16 - 000000000 ____D C:\Users\breta\AppData\Roaming\Avast Software
2022-04-26 19:30 - 2022-01-16 20:14 - 000000000 ____D C:\Program Files\Avast Software
2022-04-25 22:47 - 2020-10-07 09:12 - 000000000 ____D C:\Users\defaultuser0
2022-04-24 11:36 - 2021-11-30 22:21 - 000001110 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2022-04-24 09:17 - 2020-05-11 14:20 - 000000000 ____D C:\Users\breta\AppData\Local\Viber
2022-04-24 08:29 - 2020-04-20 17:52 - 000000000 ____D C:\Users\breta\AppData\Roaming\IObit
2022-04-24 08:29 - 2017-02-11 06:03 - 000000000 ____D C:\ProgramData\Acer
2022-04-24 08:29 - 2017-02-11 06:03 - 000000000 ____D C:\Program Files (x86)\Acer
2022-04-24 08:29 - 2017-02-11 06:02 - 000000000 ____D C:\Program Files\Acer

==================== Files in the root of some directories ========

2018-08-20 10:37 - 2018-08-20 10:37 - 000001256 _____ () C:\Users\breta\AppData\Local\recently-used.xbel
2018-01-20 12:48 - 2018-01-20 12:48 - 000000017 _____ () C:\Users\breta\AppData\Local\resmon.resmoncfg
2018-01-20 16:39 - 2018-01-20 16:39 - 013583872 _____ () C:\Users\breta\AppData\Local\Sync-1516459179.msi

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

[jaro3]

4 antiviry , to je snad rekord..

Prosím, postupuj následujícím způsobem:
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.

Kód: Vybrat vše

Start
CreateRestorePoint:
CloseProcesses:
AV: Kaspersky Free (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}
AV: Kaspersky Free (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
HKLM\...\Run: [DriverUpdUI.exe] => C:\Program Files\Avast Software\Driver Updater\DriverUpdUI.exe [4251416 2022-04-01] (Avast Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {09E9163E-D020-4199-9E8B-FEC3E0B1FDF9} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe /default (No File)
Task: {44B5396A-F980-423F-8A26-E2C916023487} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-15] (Google Inc -> Google Inc.)
Task: {88E10648-8FC0-4CDF-B65B-A46C9DB24AD6} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (No File)
Task: {CF177237-AFD1-45E5-8B14-E5E2A6E8C65E} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe -auto (No File)
Task: {F5992769-8E49-42F4-A6FC-7C525306D793} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-15] (Google Inc -> Google Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Profile 1
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
Hosts:
EmptyTemp:
End

(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).

Ulož jej na na plochu jako fixlist.txt


Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.

Pak dej vědět s těmi problémy.

[breta21]

Jak 4 antiviry? ja použival kdysi kaspersky, ale ten je už odinstalovany. Ted mam jenom Avast.

Fix result of Farbar Recovery Scan Tool (x64) Version: 23-05-2022
Ran by breta (23-05-2022 20:30:31) Run:1
Running from C:\Users\breta\Desktop
Loaded Profiles: defaultuser0 & breta
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
AV: Kaspersky Free (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}
AV: Kaspersky Free (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
HKLM\...\Run: [DriverUpdUI.exe] => C:\Program Files\Avast Software\Driver Updater\DriverUpdUI.exe [4251416 2022-04-01] (Avast Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {09E9163E-D020-4199-9E8B-FEC3E0B1FDF9} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe /default (No File)
Task: {44B5396A-F980-423F-8A26-E2C916023487} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-15] (Google Inc -> Google Inc.)
Task: {88E10648-8FC0-4CDF-B65B-A46C9DB24AD6} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (No File)
Task: {CF177237-AFD1-45E5-8B14-E5E2A6E8C65E} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe -auto (No File)
Task: {F5992769-8E49-42F4-A6FC-7C525306D793} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-15] (Google Inc -> Google Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Profile 1
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
Hosts:
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.
"AV: Kaspersky Free (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}" => removed successfully
"AV: Kaspersky Free (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}" => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\DriverUpdUI.exe" => removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{09E9163E-D020-4199-9E8B-FEC3E0B1FDF9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{09E9163E-D020-4199-9E8B-FEC3E0B1FDF9}" => removed successfully
C:\WINDOWS\System32\Tasks\Oem\AcerJumpstartTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Oem\AcerJumpstartTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{44B5396A-F980-423F-8A26-E2C916023487}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44B5396A-F980-423F-8A26-E2C916023487}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{88E10648-8FC0-4CDF-B65B-A46C9DB24AD6}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{88E10648-8FC0-4CDF-B65B-A46C9DB24AD6}" => removed successfully
C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CF177237-AFD1-45E5-8B14-E5E2A6E8C65E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF177237-AFD1-45E5-8B14-E5E2A6E8C65E}" => removed successfully
C:\WINDOWS\System32\Tasks\ACC => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ACC" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F5992769-8E49-42F4-A6FC-7C525306D793}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F5992769-8E49-42F4-A6FC-7C525306D793}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\BookReader_B171F20233094AC88D05A8EF7B9763E8 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => removed successfully
Edge DefaultProfile: Profile 1 => Error: No automatic fix found for this entry.
"HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN" => not found
C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll => moved successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN" => not found
"C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll" => not found
"HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN" => not found
"C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll" => not found
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck => removed successfully
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 1572864 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 15836337 B
Java, Discord, Steam htmlcache => 54027418 B
Windows/system/drivers => 3712730 B
Edge => 0 B
Chrome => 505922513 B
Brave => 163840 B
Firefox => 622902 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 17782 B
NetworkService => 17782 B
defaultuser0 => 17782 B
breta => 7437820 B

RecycleBin => 0 B
EmptyTemp: => 562 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 20:30:59 ====

[jaro3]

Ale tady:
==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Free (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}
AV: Avast Antivirus (Disabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: Kaspersky Free (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

Co problémy?

[breta21]

problémy zatím OK, opravdu to vypadá, že pokud vytahu NTB z nabijecky, je problém. Pokud je na nabiječce tak zatim asi OK.....chvili to necham a pak napišu a pripadne vlakno ukončím :) :)

[jaro3]

špatná baterie?

Stáhni si zde DelFix
Další odkazy:
https://toolslib.net/downloads/viewdownload/2-delfix/
http://ccm.net/download/download-24087-delfix
https://www.bleepingcomputer.com/download/delfix/

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7, 8 a10 musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt

Pokud nebudou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.