Prosím o kontrolu Vyřešeno

[lukas polak]

MiniToolBox by Farbar Version: 13-05-2022
Ran by lukin (administrator) on 10-08-2022 at 17:31:31
Running from "C:\Users\lukin\Downloads"
Microsoft Windows 10 Pro (X64)
Model: To be filled by O.E.M. Manufacturer: Gigabyte Technology Co., Ltd.
Boot Mode: Normal
***************************************************************************

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.
========================= Hosts content: =================================
========================= IP Configuration: ================================

Realtek PCIe GbE Family Controller = Ethernet (Connected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global
set interface interface="Ethernet (ladicˇ program j dra)" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled


popd
# End of IPv4 configuration



Windows IP Configuration

Host Name . . . . . . . . . . . . : DESKTOP-H67KVF5
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : home

Ethernet adapter Ethernet:

Connection-specific DNS Suffix . : home
Description . . . . . . . . . . . : Realtek PCIe GbE Family Controller
Physical Address. . . . . . . . . : E0-D5-5E-78-27-1B
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2a00:1028:9943:d41e:3884:942f:8a5a:4c43(Preferred)
Temporary IPv6 Address. . . . . . : 2a00:1028:9943:d41e:50ce:7d9d:8097:550b(Preferred)
Link-local IPv6 Address . . . . . : fe80::3884:942f:8a5a:4c43%13(Preferred)
IPv4 Address. . . . . . . . . . . : 10.0.1.12(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : stýeda 10. srpna 2022 17:09:40
Lease Expires . . . . . . . . . . : źtvrtek 11. srpna 2022 17:09:39
Default Gateway . . . . . . . . . : fe80::828c:97ff:fed7:da0a%13
10.0.1.138
DHCP Server . . . . . . . . . . . : 10.0.1.138
DHCPv6 IAID . . . . . . . . . . . : 115397982
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-2A-7C-13-9D-E0-D5-5E-78-27-1B
DNS Servers . . . . . . . . . . . : 2a00:1028:9943:d41e:828c:97ff:fed7:da0a
10.0.1.138
2a00:1028:9943:d41e:828c:97ff:fed7:da0a
NetBIOS over Tcpip. . . . . . . . : Enabled
Connection-specific DNS Suffix Search List :
home
home
Server: internet.o2
Address: 2a00:1028:9943:d41e:828c:97ff:fed7:da0a

Name: google.com
Addresses: 2a00:1450:4014:80f::200e
142.251.36.142


Pinging google.com [2a00:1450:4014:80f::200e] with 32 bytes of data:
Reply from 2a00:1450:4014:80f::200e: time=8ms
Reply from 2a00:1450:4014:80f::200e: time=8ms

Ping statistics for 2a00:1450:4014:80f::200e:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 8ms, Maximum = 8ms, Average = 8ms
Server: internet.o2
Address: 2a00:1028:9943:d41e:828c:97ff:fed7:da0a

Name: yahoo.com
Addresses: 2001:4998:44:3507::8000
2001:4998:44:3507::8001
2001:4998:124:1507::f000
2001:4998:124:1507::f001
2001:4998:24:120d::1:0
2001:4998:24:120d::1:1
74.6.143.25
74.6.231.21
98.137.11.164
98.137.11.163
74.6.143.26
74.6.231.20


Pinging yahoo.com [2001:4998:24:120d::1:1] with 32 bytes of data:
Reply from 2001:4998:24:120d::1:1: time=169ms
Reply from 2001:4998:24:120d::1:1: time=167ms

Ping statistics for 2001:4998:24:120d::1:1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 167ms, Maximum = 169ms, Average = 168ms

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
13...e0 d5 5e 78 27 1b ......Realtek PCIe GbE Family Controller
1...........................Software Loopback Interface 1
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.0.1.138 10.0.1.12 25
10.0.1.0 255.255.255.0 On-link 10.0.1.12 281
10.0.1.12 255.255.255.255 On-link 10.0.1.12 281
10.0.1.255 255.255.255.255 On-link 10.0.1.12 281
127.0.0.0 255.0.0.0 On-link 127.0.0.1 331
127.0.0.1 255.255.255.255 On-link 127.0.0.1 331
127.255.255.255 255.255.255.255 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 10.0.1.12 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 331
255.255.255.255 255.255.255.255 On-link 10.0.1.12 281
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
13 41 ::/0 fe80::828c:97ff:fed7:da0a
1 331 ::1/128 On-link
13 41 2a00:1028:9943:d41e::/64 On-link
13 281 2a00:1028:9943:d41e:3884:942f:8a5a:4c43/128
On-link
13 281 2a00:1028:9943:d41e:50ce:7d9d:8097:550b/128
On-link
13 281 fe80::/64 On-link
13 281 fe80::3884:942f:8a5a:4c43/128
On-link
1 331 ff00::/8 On-link
13 281 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\napinsp.dll [54784] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\pnrpnsp.dll [70656] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [70656] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\wshbth.dll [50688] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\NLAapi.dll [71168] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog5 07 C:\Windows\SysWOW64\winrnr.dll [34304] (Microsoft Corporation)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 11 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 12 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 13 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 14 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\napinsp.dll [70144] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [89088] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [89088] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\wshbth.dll [64000] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\NLAapi.dll [97280] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog5 07 C:\Windows\System32\winrnr.dll [49152] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 12 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 13 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 14 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (08/09/2022 01:12:10 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: DaS_21.exe, verze: 2.1.0.4, časové razítko: 0x540c90b2
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.19041.1865, časové razítko: 0xdd841229
Kód výjimky: 0xe0434352
Posun chyby: 0x0000000000034fd9
ID chybujícího procesu: 0x3038
Čas spuštění chybující aplikace: 0x01d8ab7c4955bbea
Cesta k chybující aplikaci: C:\Users\lukin\AppData\Local\Temp\DaS_21.exe
Cesta k chybujícímu modulu: C:\Windows\System32\KERNELBASE.dll
ID zprávy: 6b35a4ae-a91c-4dd0-ac6e-90d319bcc77e
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (08/09/2022 01:12:10 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: DaS_21.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.IO.IOException
na System.IO.__Error.WinIOError(Int32, System.String)
na System.Console.SetWindowSize(Int32, Int32)
na DriverAndServicesOut.Program.Main(System.String[])

Error: (08/03/2022 06:14:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: SamsungMagicianSVC.exe, verze: 7.1.1.820, časové razítko: 0x62907fff
Název chybujícího modulu: Logger.dll, verze: 7.1.1.820, časové razítko: 0x62907fba
Kód výjimky: 0xc0000005
Posun chyby: 0x00005783
ID chybujícího procesu: 0x2520
Čas spuštění chybující aplikace: 0x01d8a7542403f6e8
Cesta k chybující aplikaci: C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Samsung\Samsung Magician\Logger.dll
ID zprávy: b28275be-ec01-4f6b-8507-f7a48f89bd06
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (08/03/2022 02:16:35 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (08/03/2022 02:16:35 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (08/03/2022 01:41:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: wuauclt.exe, verze: 10.0.19041.1288, časové razítko: 0x17884906
Název chybujícího modulu: combase.dll, verze: 10.0.19041.1288, časové razítko: 0x7e843d58
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000031434
ID chybujícího procesu: 0x7bc
Čas spuštění chybující aplikace: 0x01d8a72ddec2af1a
Cesta k chybující aplikaci: C:\Windows\system32\wuauclt.exe
Cesta k chybujícímu modulu: C:\Windows\System32\combase.dll
ID zprávy: 2831d448-0dbe-4677-a88c-fd4b03aead4d
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (08/03/2022 01:30:06 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Při aktualizaci stavu Windows Defender na SECURITY_PRODUCT_STATE_ON došlo k chybě.

Error: (08/03/2022 01:28:02 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Služba Šifrování neinicializovala databázi katalogu. Chyba součásti ESENT: -1409.


System errors:
=============
Error: (08/09/2022 01:25:48 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (08/09/2022 01:25:48 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (08/09/2022 01:25:48 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (08/09/2022 01:25:47 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (08/09/2022 01:25:47 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (08/08/2022 10:11:50 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Realtek Audio Universal Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (08/08/2022 10:11:49 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba NVIDIA Display Container LS byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 6000 milisekund: Restartovat službu.

Error: (08/08/2022 10:06:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Realtek Audio Universal Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (08/08/2022 10:06:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba NVIDIA Display Container LS byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 6000 milisekund: Restartovat službu.

Error: (08/08/2022 08:10:04 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: Event-ID 10005


Windows Defender:
================
Date: 2022-08-08 15:00:26
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {6A0D39AD-CC53-4641-BE12-70EA6353341A}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2022-08-08 12:18:28
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {408EEDFE-2CF4-4598-BBCD-DE938DBFD563}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2022-08-06 12:22:12
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {5EF2EBD7-5AC6-4208-98F3-745A0DF03228}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Úplné prohledávání
Uživatel: DESKTOP-H67KVF5\lukin

Date: 2022-08-04 16:47:19
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {1E83B679-135D-4D6A-8599-A442AA1CCDB6}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

CodeIntegrity Errors:
====================
Date: 2022-08-10 17:11:44
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.


=========================== Installed Programs ============================

CrystalDiskInfo 8.17.5 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.17.5 - Crystal Dew World)
Epic Games Launcher (HKLM-x32\...\{FAC47927-1A6A-4C6E-AD7D-E9756794A4BC}) (Version: 1.3.23.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{758842D2-1538-4008-A8E3-66F65A061C52}) (Version: 2.0.33.0 - Epic Games, Inc.)
Fraps (HKLM-x32\...\Fraps) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 104.0.5112.81 - Google LLC)
H550 Gaming Keyboard (HKLM-x32\...\Gaming Keyboard_is1) (Version: - HS)
HWiNFO64 Version 7.26 (HKLM\...\HWiNFO64_is1) (Version: 7.26 - Martin Malik - REALiX)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Malwarebytes version 4.5.12.204 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.12.204 - Malwarebytes)
Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation)
NVIDIA Ovladač HD audia 1.3.38.60 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.60 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 473.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 473.81 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8447 - Realtek Semiconductor Corp.)
RogueKiller version 15.5.3.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 15.5.3.0 - Adlice Software)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 7.1.1.820 - Samsung Electronics)
Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.9.0 - Sophos Limited)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
WinRAR 6.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.11.0 - win.rar GmbH)
Zemana AntiMalware verze 3.2.28 (HKLM-x32\...\{4E1F3677-C72E-4F7D-B66E-85467B1A289E}_is1) (Version: 3.2.28 - Zemana)

Packages:
=========
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_1.34.1.0_x64__6rarf9sa4v8jt [2022-08-03] (Disney)
Facebook -> C:\Program Files\WindowsApps\FACEBOOK.FACEBOOK_2021.927.1.0_neutral__8xx8rvfyw5nnt [2022-08-05] (Facebook Inc)
Messenger -> C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1560.21.216.0_x64__8xx8rvfyw5nnt [2022-08-04] (Meta) [Startup Task]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.13.7180.0_x64__8wekyb3d8bbwe [2022-08-05] (Microsoft Studios) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-08-03] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2022-08-03] (Realtek Semiconductor Corp)
Telegram Desktop -> C:\Program Files\WindowsApps\TelegramMessengerLLP.TelegramDesktop_4.0.0.0_x64__t4vj0pshhgkwm [2022-08-03] (Telegram Messenger LLP) [Startup Task]

========================= Memory info: ===================================

Percentage of memory in use: 34%
Total physical RAM: 8165.13 MB
Available physical RAM: 5383.03 MB
Total Virtual: 10085.13 MB
Available Virtual: 5492.27 MB

========================= Partitions: =====================================

1 Drive c: (SYSTEM) (Fixed) (Total:232.27 GB) (Free:188.4 GB) NTFS
2 Drive d: (DATA) (Fixed) (Total:465.75 GB) (Free:465.64 GB) NTFS

========================= Users: ========================================

U§ivatelsk‚ Łźty pro \\DESKTOP-H67KVF5

Administrator DefaultAccount Guest
lukin WDAGUtilityAccount
Pýˇkaz byl ŁspŘçnŘ dokonźen.


**** End of log ****

[Reklama]

[lukas polak]

Zatím bez problému

[lukas polak]

ogfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:47:21, on 10.08.2022
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.19041.1566)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\Steam\steam.exe
C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe
C:\Users\lukin\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O1 - Hosts: ::1 localhost
O4 - HKCU\..\Run: [OneDrive] "C:\Users\lukin\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [MicrosoftEdgeAutoLaunch_C2A946453535DAC8E26670192D3842C0] "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
O4 - HKCU\..\Run: [Spotify] C:\Users\lukin\AppData\Roaming\Spotify\Spotify.exe --autostart --minimized
O4 - HKCU\..\Run: [EpicGamesLauncher] "C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\Windows\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_24422 - Unknown owner - C:\Windows\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Epic Online Services (EpicOnlineServices) - Epic Games, Inc. - C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) (GoogleChromeElevationService) - Google LLC - C:\Program Files\Google\Chrome\Application\104.0.5112.81\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_6fd074e02d655c70\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: RogueKiller RTP (rkrtservice) - Unknown owner - C:\Program Files\RogueKiller\RogueKillerSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Universal Service (RtkAudioUniversalService) - Unknown owner - C:\Windows\System32\RtkAudUService64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SamsungMagicianSVC - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\Windows\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\Windows\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\Windows\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\steamservice.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7926 bytes

[jaro3]

8ms není špatné.

Stáhni si zde DelFix
Další odkazy:
https://toolslib.net/downloads/viewdownload/2-delfix/
http://ccm.net/download/download-24087-delfix
https://www.bleepingcomputer.com/download/delfix/

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7, 8 a10 musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt

Pokud nebudou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.

[lukas polak]

# DelFix v1.013 - Logfile created 10/08/2022 at 18:49:01
# Updated 17/04/2016 by Xplode
# Username : lukin - DESKTOP-H67KVF5
# Operating System : Windows 10 Enterprise (64 bits)

~ Removing disinfection tools ...

Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\zoek-results.log
Deleted : C:\Users\lukin\Desktop\AdwCleaner.exe
Deleted : C:\Users\lukin\Desktop\JRT.exe
Deleted : C:\Users\lukin\Desktop\JRT.txt
Deleted : C:\Users\Public\Desktop\RogueKiller.lnk
Deleted : C:\Users\lukin\Downloads\HijackThis.exe
Deleted : C:\Users\lukin\Downloads\hijackthis.log
Deleted : C:\Users\lukin\Downloads\HiJackThis.zip
Deleted : C:\Users\lukin\Downloads\MiniToolBox.exe
Deleted : C:\Users\lukin\Downloads\RogueKiller_setup.exe
Deleted : C:\Users\lukin\Downloads\TFC.exe
Deleted : C:\Users\lukin\Downloads\zoek1.rar
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

~ Cleaning system restore ...

Deleted : RP #3 [Naplánovaný kontrolní bod | 08/08/2022 15:22:33]
Deleted : RP #4 [JRT Pre-Junkware Removal | 08/08/2022 20:06:08]
Deleted : RP #5 [JRT Pre-Junkware Removal | 08/08/2022 20:11:37]
Deleted : RP #6 [Instalační služba modulů systému Windows | 08/09/2022 22:59:39]

New restore point created !

########## - EOF - ##########

[lukas polak]

Děkuji