Zasekané PC, především během hraní CS:GO

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: memphisto, Mods_senior, Security team

Uživatelský avatar
strangereu
Level 4.5
Level 4.5
Příspěvky: 1712
Registrován: září 11
Bydliště: Vršovice
Pohlaví: Muž

Re: Zasekané PC, především během hraní CS:GO

Příspěvekod strangereu » 20 lis 2022 19:46

Informace o kontroly
Název produktu    :  Zemana AntiMalware
Stav kontroly    :  Dokončena
Datum kontroly    :  20.11.2022 19:45:57
Typ kontroly    :  Inteligentní kontrola
Čas trvání    :  00:00:09
Zkontrolované objekty    :  2007
Zjištěné objekty    :  0
Vyloučené objekty    :  0
Automatické odesílání    :  Ano
Operační systém    :  Windows 10 x64
Procesor    :  4X Intel(R) Core(TM) i5-3350P CPU @ 3.10GHz
Režim systému BIOS    :  UEFI
Informace o doméně    :  WORKGROUP,False,NetSetupWorkgroupName
CUID    :  12CFA47B3404C92327DA88
http://screenshare.cz/

Reklama
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 42512
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž

Re: Zasekané PC, především během hraní CS:GO

Příspěvekod jaro3 » 20 lis 2022 20:46

Stáhni si MiniToolBox
a spusť ho.
V okně zaškrtni čtverečky:
Report IE Proxy Settings
Report FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size

Potom klikni na GO , po chvíli skenu se objeví log s názvem „Result“ , zkopíruj sem celý jeho obsah.

ještě dej nový log z HJT.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

Uživatelský avatar
strangereu
Level 4.5
Level 4.5
Příspěvky: 1712
Registrován: září 11
Bydliště: Vršovice
Pohlaví: Muž

Re: Zasekané PC, především během hraní CS:GO

Příspěvekod strangereu » 20 lis 2022 20:51

MiniToolBox by Farbar Version: 13-05-2022
Ran by jdvor (administrator) on 20-11-2022 at 20:50:13
Running from "C:\Users\jdvor\Downloads"
Microsoft Windows 11 Home (X64)
Model: MS-7758 Manufacturer: MSI
Boot Mode: Normal
***************************************************************************

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.
========================= Hosts content: =================================
========================= IP Configuration: ================================

Realtek PCIe GbE Family Controller = Ethernet (Connected)
VirtualBox Host-Only Ethernet Adapter = Ethernet 2 (Connected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global
set interface interface="Ethernet (ladicˇ program j dra)" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="VirtualBox Host-Only Network" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Ethernet 2" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
add address name="VirtualBox Host-Only Network" address=192.168.56.1 mask=255.255.255.0
add address name="Ethernet 2" address=192.168.56.1 mask=255.255.255.0


popd
# End of IPv4 configuration



Windows IP Configuration

Host Name . . . . . . . . . . . . : DESKTOP-M7HR9P7
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : home

Ethernet adapter Ethernet:

Connection-specific DNS Suffix . : home
Description . . . . . . . . . . . : Realtek PCIe GbE Family Controller
Physical Address. . . . . . . . . : D4-3D-7E-32-FA-32
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2a02:8308:38e:4100:89f:c2a0:3121:b7d1(Preferred)
Temporary IPv6 Address. . . . . . : 2a02:8308:38e:4100:b845:3994:c43b:410b(Preferred)
Link-local IPv6 Address . . . . . : fe80::b6bf:afae:9aa9:b2ef%5(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.0.158(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : nedŘle 20. listopadu 2022 19:36:57
Lease Expires . . . . . . . . . . : nedŘle 20. listopadu 2022 21:36:57
Default Gateway . . . . . . . . . : fe80::362c:c4ff:fe5d:c166%5
192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DHCPv6 IAID . . . . . . . . . . . : 114572670
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-25-92-B8-BF-D4-3D-7E-32-FA-32
DNS Servers . . . . . . . . . . . : 2a00:11b4:4110::a
2a00:11b4:4110::b
192.168.0.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Ethernet 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VirtualBox Host-Only Ethernet Adapter
Physical Address. . . . . . . . . : 0A-00-27-00-00-0A
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::7c2b:856b:3b42:228b%10(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.56.1(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 285868071
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-25-92-B8-BF-D4-3D-7E-32-FA-32
NetBIOS over Tcpip. . . . . . . . : Enabled
Server: UnKnown
Address: 2a00:11b4:4110::a

Name: google.com
Addresses: 2a00:1450:4014:80e::200e
142.251.36.142


Pinging google.com [2a00:1450:4014:80e::200e] with 32 bytes of data:
Reply from 2a00:1450:4014:80e::200e: time=18ms
Reply from 2a00:1450:4014:80e::200e: time=15ms

Ping statistics for 2a00:1450:4014:80e::200e:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 15ms, Maximum = 18ms, Average = 16ms
Server: UnKnown
Address: 2a00:11b4:4110::a

Name: yahoo.com
Addresses: 2001:4998:124:1507::f001
2001:4998:124:1507::f000
2001:4998:24:120d::1:0
2001:4998:44:3507::8000
2001:4998:24:120d::1:1
2001:4998:44:3507::8001
74.6.143.26
74.6.231.21
98.137.11.164
98.137.11.163
74.6.231.20
74.6.143.25


Pinging yahoo.com [2001:4998:124:1507::f000] with 32 bytes of data:
Reply from 2001:4998:124:1507::f000: time=129ms
Reply from 2001:4998:124:1507::f000: time=131ms

Ping statistics for 2001:4998:124:1507::f000:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 129ms, Maximum = 131ms, Average = 130ms

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
5...d4 3d 7e 32 fa 32 ......Realtek PCIe GbE Family Controller
10...0a 00 27 00 00 0a ......VirtualBox Host-Only Ethernet Adapter
1...........................Software Loopback Interface 1
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.158 25
127.0.0.0 255.0.0.0 On-link 127.0.0.1 331
127.0.0.1 255.255.255.255 On-link 127.0.0.1 331
127.255.255.255 255.255.255.255 On-link 127.0.0.1 331
192.168.0.0 255.255.255.0 On-link 192.168.0.158 281
192.168.0.158 255.255.255.255 On-link 192.168.0.158 281
192.168.0.255 255.255.255.255 On-link 192.168.0.158 281
192.168.56.0 255.255.255.0 On-link 192.168.56.1 281
192.168.56.1 255.255.255.255 On-link 192.168.56.1 281
192.168.56.255 255.255.255.255 On-link 192.168.56.1 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 192.168.56.1 281
224.0.0.0 240.0.0.0 On-link 192.168.0.158 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 331
255.255.255.255 255.255.255.255 On-link 192.168.56.1 281
255.255.255.255 255.255.255.255 On-link 192.168.0.158 281
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
5 41 ::/0 fe80::362c:c4ff:fe5d:c166
1 331 ::1/128 On-link
5 41 2a02:8308:38e:4100::/64 On-link
5 281 2a02:8308:38e:4100::/64 fe80::362c:c4ff:fe5d:c166
5 281 2a02:8308:38e:4100:89f:c2a0:3121:b7d1/128
On-link
5 281 2a02:8308:38e:4100:b845:3994:c43b:410b/128
On-link
10 281 fe80::/64 On-link
5 281 fe80::/64 On-link
10 281 fe80::7c2b:856b:3b42:228b/128
On-link
5 281 fe80::b6bf:afae:9aa9:b2ef/128
On-link
1 331 ff00::/8 On-link
10 281 ff00::/8 On-link
5 281 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\WINDOWS\SysWOW64\napinsp.dll [67632] (Microsoft Corporation)
Catalog5 02 C:\WINDOWS\SysWOW64\pnrpnsp.dll [72192] (Microsoft Corporation)
Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [72192] (Microsoft Corporation)
Catalog5 04 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog5 05 C:\WINDOWS\SysWOW64\winrnr.dll [44432] (Microsoft Corporation)
Catalog5 06 C:\WINDOWS\SysWOW64\wshbth.dll [51712] (Microsoft Corporation)
Catalog5 07 C:\WINDOWS\SysWOW64\nlansp_c.dll [83456] (Microsoft Corporation)
Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128] (Apple Inc.)
Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog9 12 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog9 13 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
Catalog9 14 C:\WINDOWS\SysWOW64\mswsock.dll [318800] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\napinsp.dll [103648] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [110592] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [110592] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\winrnr.dll [82992] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\wshbth.dll [86016] (Microsoft Corporation)
x64-Catalog5 07 C:\Windows\System32\nlansp_c.dll [126976] (Microsoft Corporation)
x64-Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392] (Apple Inc.)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog9 12 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog9 13 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)
x64-Catalog9 14 C:\Windows\System32\mswsock.dll [430080] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (11/20/2022 07:36:10 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (11/20/2022 07:36:10 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (11/20/2022 07:36:10 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (11/20/2022 07:36:10 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (11/20/2022 07:06:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: zoek (1).exe, verze: 0.0.0.0, časové razítko: 0x00000000
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.22000.1219, časové razítko: 0x554c45b0
Kód výjimky: 0xc0000409
Posun chyby: 0x00140762
ID chybujícího procesu: 0x46a4
Čas spuštění chybující aplikace: 0x01d8fd0acfe2f2b6
Cesta k chybující aplikaci: C:\Users\jdvor\Desktop\zoek1\zoek (1).exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID zprávy: 8430cae7-e0f5-4ede-8bd5-86d7072e6b5c
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/20/2022 11:57:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: csgo.exe, verze: 0.0.0.0, časové razítko: 0x62745503
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.22000.1219, časové razítko: 0x554c45b0
Kód výjimky: 0xc06d007f
Posun chyby: 0x00140762
ID chybujícího procesu: 0x4ec
Čas spuštění chybující aplikace: 0x01d8fccdcb3c8b76
Cesta k chybující aplikaci: F:\Games\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID zprávy: 96329276-0b9b-406e-9ada-57fb17f755e7
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/20/2022 11:14:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: gameinputsvc.exe, verze: 0.2210.22621.1846, časové razítko: 0x79ac3219
Název chybujícího modulu: ntdll.dll, verze: 10.0.22000.918, časové razítko: 0x57b668f2
Kód výjimky: 0xc0000374
Posun chyby: 0x000000000010c509
ID chybujícího procesu: 0x2eac
Čas spuštění chybující aplikace: 0x01d8fb839ae6ce9d
Cesta k chybující aplikaci: C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID zprávy: e6411096-bb5b-4224-a55e-8be5ada64c9f
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/18/2022 08:26:11 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5031

Error: (11/18/2022 08:26:11 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5031

Error: (11/18/2022 08:26:11 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (11/20/2022 07:41:27 PM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-M7HR9P7)
Description: Event-ID 10000

Error: (11/20/2022 07:26:42 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/20/2022 07:26:42 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/20/2022 07:26:42 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/20/2022 07:26:42 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/20/2022 07:26:41 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/20/2022 04:50:52 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-M7HR9P7)
Description: Event-ID 10010

Error: (11/20/2022 04:47:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba GameInput Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 1000 milisekund: Restartovat službu.

Error: (11/20/2022 04:47:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba NVIDIA LocalSystem Container byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 6000 milisekund: Restartovat službu.

Error: (11/20/2022 04:47:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba NVIDIA Display Container LS byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 6000 milisekund: Restartovat službu.


Windows Defender:
================
Date: 2022-11-20 11:18:55
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {05C2840E-0707-4829-8F42-D06EDB11D268}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2022-11-18 15:23:57
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {DA64DB9D-B238-42E7-9E3F-70DFC6B49A88}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2022-11-17 17:43:09
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {7D321217-58B5-4064-85FE-38736B18FF9D}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2022-11-16 17:36:10
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {D6AAF675-33F9-4755-9ADF-69AB190E7105}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2022-11-15 10:23:25
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {44BB3F67-686D-4813-AFB6-733FDB8FC720}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

CodeIntegrity Errors:
====================
Date: 2022-11-20 20:10:52
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.


=========================== Installed Programs ============================

7-Zip 21.07 (x64) (HKLM\...\7-Zip) (Version: 21.07 - Igor Pavlov)
Apple Mobile Device Support (HKLM\...\{82C2A7D9-6BFC-4BED-9EF9-C49780F02C3E}) (Version: 15.5.0.16 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
Application Verifier x64 External Package (HKLM\...\{8A4CD158-E6B3-6D91-D7DE-10098BC980E2}) (Version: 10.1.19041.685 - Microsoft) Hidden
Arduino (HKLM-x32\...\Arduino) (Version: 1.8.19 - Arduino LLC)
Assassin's Creed Odyssey (HKLM-x32\...\{B7EC622B-1979-450E-8281-C5648506DB83}_is1) (Version: - Ubisoft)
Audacity 2.3.3 (HKLM-x32\...\Audacity_is1) (Version: 2.3.3 - Audacity Team)
Audacity 3.1.3 (64bitový) (HKLM\...\Audacity_is1) (Version: 3.1.3 - Audacity Team)
Balíček ovladače systému Windows - Adafruit Industries LLC (usbser) Ports (02/25/2016 6.2.2600.0) (HKLM\...\1245A5961AC9D2C18ADF9EEC931D77E059B7F74E) (Version: 02/25/2016 6.2.2600.0 - Adafruit Industries LLC)
Balíček ovladače systému Windows - Arduino LLC (www.arduino.cc) Arduino USB Driver (11/24/2015 1.2.3.0) (HKLM\...\8B585560B248755A6C5A24D5C0F50FA998310883) (Version: 11/24/2015 1.2.3.0 - Arduino LLC (www.arduino.cc))
Balíček ovladače systému Windows - Arduino LLC (www.arduino.cc) Genuino USB Driver (01/07/2016 1.0.3.0) (HKLM\...\EC414D98E2986DCA1628FAED2163CD1C9A4ED7EC) (Version: 01/07/2016 1.0.3.0 - Arduino LLC (www.arduino.cc))
Balíček ovladače systému Windows - libusb-win32 (libusb0) libusb-win32 devices (04/21/2015 1.0.0.0) (HKLM\...\28E91B69CA377EB48D6E1B92C37F897036E8A818) (Version: 04/21/2015 1.0.0.0 - libusb-win32)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
blender (HKLM\...\{820DFD48-DAE3-478D-B9BF-2CA912F40742}) (Version: 3.2.2 - Blender Foundation)
blender (HKLM\...\{F47A29A2-F468-439F-8B31-D13A7668B895}) (Version: 3.1.0 - Blender Foundation)
Bloody7 (HKLM-x32\...\Bloody3) (Version: 22.08.0001 - Bloody)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Call of Duty Modern Warfare (HKLM-x32\...\Call of Duty Modern Warfare) (Version: - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 6.06 - Piriform)
Circuit Diagram version 3.1 (HKLM\...\{7A2A8C3A-93F9-47D2-8EF4-23D7910099BB}_is1) (Version: 3.1 - Circuit Diagram)
ClickOnce Bootstrapper Package for Microsoft .NET Framework (HKLM-x32\...\{5A260D5A-95D3-4956-8E0A-E182CC4144ED}) (Version: 4.8.04162 - Microsoft Corporation) Hidden
Coinomi Wallet (HKLM\...\{EE5A628F-810E-44CF-B45E-CA24076FF104}_is1) (Version: 1.3.0 - Coinomi Holdings Ltd)
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)
CPUID CPU-Z 2.03 (HKLM\...\CPUID CPU-Z_is1) (Version: 2.03 - CPUID, Inc.)
Crash Bandicoot 4 (HKLM-x32\...\Crash Bandicoot 4) (Version: - Blizzard Entertainment)
Crash Bandicoot™ N. Sane Trilogy (HKLM\...\Steam App 731490) (Version: - Vicarious Visions)
Creality Slicer 4.8.2 (HKLM-x32\...\Creality Slicer 4.8.2) (Version: 4.8.2 - Creality Company)
CrystalDiskInfo 8.17.11 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.17.11 - Crystal Dew World)
DiagnosticsHub_CollectionService (HKLM\...\{1F3C3AAC-9F7A-47DA-A082-0ACE770041BE}) (Version: 16.1.28901 - Microsoft Corporation) Hidden
Entity Framework 6.2.0 Tools for Visual Studio 2022 (HKLM-x32\...\{BA73F2EE-EEB4-4A9C-BAF4-AC3599983E8B}) (Version: 6.2.0.0 - Microsoft Corporation) Hidden
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Ethereum - Geth - Official Go implementation of the Ethereum protocol (HKLM-x32\...\Ethereum Geth) (Version: 1.10.12-6c4dc6c3 - Ethereum)
Gameforge Client (HKLM-x32\...\{d3b2a0c1-f0d0-4888-ae0b-1c5e1febdafb}_is1) (Version: 2.2.24.1823 - Gameforge)
Gameforge Live 2.0.13 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.13 - Gameforge)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 107.0.5304.107 - Google LLC)
HeidiSQL 10.3.0.5771 (HKLM\...\HeidiSQL_is1) (Version: 10.3 - Ansgar Becker)
icecap_collection_neutral (HKLM-x32\...\{04C533D3-8445-4E47-A351-A66B1DA1B631}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
icecap_collection_x64 (HKLM\...\{4CDCF412-13D2-48AD-B98C-3AB4A771A127}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
icecap_collectionresources (HKLM-x32\...\{CFA0F486-C9F7-4E0F-A899-60A5489A4003}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
icecap_collectionresourcesx64 (HKLM-x32\...\{7DF99A1A-EE6E-4132-BAAE-492C00838417}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
iCloud Outlook (HKLM\...\{BC06C9EA-78BE-4B52-BA89-E6FAAFBF3CB0}) (Version: 12.2.0.10 - Apple Inc.)
IIS 10.0 Express (HKLM\...\{028D4B22-B70B-447E-9B80-8E3E98CB2667}) (Version: 10.0.06027 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - ) Hidden
IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - ) Hidden
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
IntelliTraceProfilerProxy (HKLM-x32\...\{C8891AD2-C223-45CD-A9BE-617A68923B61}) (Version: 15.0.21225.01 - Microsoft Corporation) Hidden
iTunes (HKLM\...\{7FC61561-1F27-47A6-9364-9F9E7EC5D8C4}) (Version: 12.12.3.5 - Apple Inc.)
Kits Configuration Installer (HKLM-x32\...\{E75A9998-E979-760B-6AEB-49763F279EDD}) (Version: 10.1.19041.685 - Microsoft) Hidden
Kontrola stavu osobního počítače s Windows (HKLM\...\{D18FE9D2-2F54-4C68-A2DE-A59D4A80A9BC}) (Version: 3.1.2109.29003 - Microsoft Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LibreOffice 7.3.1.3 (HKLM\...\{2AB46F12-061D-4BB1-BE17-FD65830DE46B}) (Version: 7.3.1.3 - The Document Foundation)
Malwarebytes version 4.5.17.221 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.17.221 - Malwarebytes)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Metin2 (HKLM-x32\...\Metin2_CZ_is1) (Version: - Gameforge 4D GmbH)
Metin2 cs-CZ (HKLM-x32\...\{fab180a3-cd65-4b7e-bd0e-2ef77fd0c258.cs-CZ}) (Version: - Gameforge)
Microsoft .NET SDK 6.0.201 (x64) from Visual Studio (HKLM\...\{523CF0D5-3186-4886-84C1-0F33795C0E51}) (Version: 6.2.122.12412 - Microsoft Corporation)
Microsoft 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.15726.20202 - Microsoft Corporation)
Microsoft Azure Authoring Tools - v2.9.7 (HKLM\...\{90462BD2-DF5B-449C-A401-FCC1DC264E4E}) (Version: 2.9.8999.45 - Microsoft Corporation)
Microsoft Azure Compute Emulator - v2.9.7 (HKLM\...\Microsoft Azure Compute Emulator - v2.9.7) (Version: 2.9.8999.43 - Microsoft Corporation)
Microsoft Azure Libraries for .NET – v2.9 (HKLM\...\{C5C91AA6-3E83-430E-8B7A-6B790083F28D}) (Version: 3.0.0127.060 - Microsoft Corporation)
Microsoft Azure PowerShell - April 2018 (HKLM\...\{3BA7CAA9-97BA-4528-B7E1-B640910BB149}) (Version: 5.7.0.18831 - Microsoft Corporation)
Microsoft Build of OpenJDK with Hotspot 11.0.12+7 (x64) (HKLM\...\{0D2DCFF8-7746-445B-B643-9E85ABE01173}) (Version: 11.0.12.7 - Microsoft)
Microsoft ODBC Driver 17 for SQL Server (HKLM\...\{853997DA-6FCB-4FB9-918E-E0FF881FAF65}) (Version: 17.7.2.1 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 22.225.1026.0001 - Microsoft Corporation)
Microsoft SQL Server 2019 LocalDB (HKLM\...\{36E492B8-CB83-4DA5-A5D2-D99A8E8228A1}) (Version: 15.0.4153.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2019 (HKLM\...\{5BC7E9EB-13E8-45DB-8A60-F2481FEB4595}) (Version: 15.0.2000.5 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{6A2A8076-135F-4F55-BB02-DED67C8C6934}) (Version: 4.67.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 3.1.2196.8931 - Microsoft Corporation)
Microsoft Web Deploy 4.0 (HKLM\...\{DB7B43E1-BB6C-4417-9F20-2488FD8EECC8}) (Version: 10.0.5402 - Microsoft Corporation)
Microsoft Word 2013 (HKLM\...\Office15.WORD) (Version: 15.0.4569.1506 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{F6678473-0198-46D0-A88F-2A247E6FA03C}) (Version: 1.0.0.0 - Mojang)
mixxx (HKLM\...\{AA87FE3F-1E29-4227-B552-33698F51AA5F}) (Version: 2.3.2 - Mixxx Project)
MSI Development Tools (HKLM-x32\...\{7AAC93B0-F3D7-6B24-6B37-9E74980C1C81}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
MTA:SA v1.5.8 (HKLM-x32\...\MTA:SA 1.5) (Version: v1.5.8 - Multi Theft Auto)
MySQL Connector Net 8.0.28 (HKLM-x32\...\{DDA9C4B3-766C-41FC-9BA2-615524AAF36B}) (Version: 8.0.28 - Oracle)
Nitem4 verze 1.0 (HKLM-x32\...\{0FA967BD-14C6-4DBE-AF3E-9127E23101C9}_is1) (Version: 1.0 - Mt2Factory Limited)
NosTale (HKLM-x32\...\{dd4e22d6-00d1-44b9-8126-d8b40e0cd7c9}) (Version: - Gameforge)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.8.2 - Notepad++ Team)
NVIDIA FrameView SDK 1.1.4923.29968894 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29968894 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.23.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.23.0.74 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 456.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 456.71 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.15726.20202 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.15726.20202 - Microsoft Corporation) Hidden
Oracle VM VirtualBox 6.1.32 (HKLM\...\{4A51F890-19E4-4E7C-A118-4B8ACEB5AEC5}) (Version: 6.1.32 - Oracle Corporation)
PuTTY release 0.73 (64-bit) (HKLM\...\{44F7642C-AB7E-4468-B028-E8D08A0CBB0E}) (Version: 0.73.0.0 - Simon Tatham)
Python 3.9.0 Add to Path (64-bit) (HKLM\...\{4F5E962C-96E9-45B9-8F14-9A91748981C6}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Core Interpreter (64-bit) (HKLM\...\{92F322B1-D69A-43D1-82B4-24ADEBE5C650}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Development Libraries (64-bit) (HKLM\...\{E73FE192-7766-49FA-B28A-32F700D98A15}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Documentation (64-bit) (HKLM\...\{35E94198-B9F1-4D1E-A869-636AD5E6BCA8}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Executables (64-bit) (HKLM\...\{A9F718BA-8B5F-4AE7-ADDA-EFFF431948DB}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 pip Bootstrap (64-bit) (HKLM\...\{27FF09D8-6DE6-4F63-A3DD-8758D615D543}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Standard Library (64-bit) (HKLM\...\{42480EE5-670F-4AF3-A619-2E761A398340}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Tcl/Tk Support (64-bit) (HKLM\...\{4460A893-EFF6-4B33-BF21-BAA2159F57E6}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Test Suite (64-bit) (HKLM\...\{9141E990-BD45-4F42-BB32-B3012969355D}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Utility Scripts (64-bit) (HKLM\...\{35DC2DFB-0AEA-4DC2-AFA5-4EA2D2612B51}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{E45E56A4-FCDD-4C4A-966A-4FB81C932219}) (Version: 3.9.7217.0 - Python Software Foundation)
qBittorrent 4.2.1 (HKLM-x32\...\qBittorrent) (Version: 4.2.1 - The qBittorrent project)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8716.1 - Realtek Semiconductor Corp.)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.35.340 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.7.9 - Rockstar Games)
RogueKiller version 15.6.3.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 15.6.3.0 - Adlice Software)
SDK ARM Additions (HKLM-x32\...\{FCF9D89E-6F79-64FB-B08D-B0E69FF54DEE}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
SDK ARM Redistributables (HKLM-x32\...\{72DB07D6-E166-5A3F-B6E6-4664383781B8}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.9.0 - Sophos Limited)
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Universal CRT Extension SDK (HKLM-x32\...\{4D69FB64-4443-F2DD-DE1C-F14FD98AAC59}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{6B56745A-F6A4-C51C-933A-AD96C00683EA}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{A57CD0A6-4297-FD30-34A4-34758B6F5F69}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{CD06199B-41C1-AE6D-7567-984CC68792C3}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{BD75F257-50A4-E0CD-9942-C3550CA3E66A}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{A7E95C47-B5F4-110C-D27A-DECB03412B96}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Update for Skype for Business 2015 (KB4484289) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.WORD_{1C76EBD9-0A70-4094-A543-00CAA3B62113}) (Version: - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 104.1 - Ubisoft)
USB Network Joystick (HKLM-x32\...\{2A558A06-A44E-400D-95AD-D9FAA89AFD36}) (Version: V3.70a - )
vcpp_crt.redist.clickonce (HKLM-x32\...\{ACF98F9A-6CA0-4E0F-A375-3AC09AFD9CEB}) (Version: 14.31.31103 - Microsoft Corporation) Hidden
VEGAS Pro 18.0 (HKLM\...\{75111FE1-CE55-11EA-8B12-00155D43CFCE}) (Version: 18.0.284 - VEGAS)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.16 - VideoLAN)
VS Immersive Activate Helper (HKLM-x32\...\{C0ACF658-B4DC-4CBB-B8F2-9E667D69919A}) (Version: 17.0.114.0 - Microsoft Corporation) Hidden
VS JIT Debugger (HKLM\...\{43F73608-5C94-436F-A1E6-E09ACE680391}) (Version: 17.0.114.0 - Microsoft Corporation) Hidden
VS Script Debugging Common (HKLM\...\{9EC852BD-33D2-457C-99BB-ED3099B8176F}) (Version: 17.0.114.0 - Microsoft Corporation) Hidden
vs_BlendMsi (HKLM-x32\...\{2D12F791-263F-4ABA-B7A8-5485933CADCF}) (Version: 17.1.32112 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsi (HKLM-x32\...\{B8B0A861-C76A-4DBA-B8D5-8830511173A3}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsires (HKLM-x32\...\{16946E6F-037E-4A92-A30C-80293603EEC9}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
vs_clickoncesigntoolmsi (HKLM-x32\...\{15CE6C23-B92A-4B2B-8521-6FA81661068B}) (Version: 17.1.32112 - Microsoft Corporation) Hidden
vs_communitymsires (HKLM-x32\...\{382F58E9-0AA3-476E-A8D0-DDCA4A6CDDBE}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
vs_communitysharedmsi (HKLM-x32\...\{7571C303-621A-4ACF-A392-BD6B9B3C67BF}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
vs_communityx64msi (HKLM\...\{EB7405ED-A99C-47D4-8516-C5C35704B07C}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
vs_CoreEditorFonts (HKLM-x32\...\{1414E4EA-B73C-45FC-923D-9D911C5BFB65}) (Version: 17.1.32318 - Microsoft Corporation) Hidden
vs_devenvsharedmsi (HKLM-x32\...\{923446B9-70EB-4850-95D7-1A1AB5D111CD}) (Version: 17.1.32112 - Microsoft Corporation) Hidden
vs_devenx64vmsi (HKLM\...\{5C99AE76-BEF9-4D4B-A77A-1B63238B86B0}) (Version: 17.1.32112 - Microsoft Corporation) Hidden
vs_filehandler_amd64 (HKLM-x32\...\{2C910925-05EE-403B-8295-D2593E11F751}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{46F71CD4-4841-4B77-A491-9933B98F8D0D}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{9DCCEEF7-CC00-4054-9879-7E0A12E5CF0A}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
vs_minshellinteropsharedmsi (HKLM-x32\...\{05A82EA9-8768-4E1B-B16C-FCCF299D331C}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
vs_minshellinteropx64msi (HKLM\...\{FB59095C-C7C6-4CA6-B300-852B50AB976D}) (Version: 17.1.32112 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{3BC9E31D-E778-44B4-9F9C-68EDEF5275E7}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
vs_minshellsharedmsi (HKLM-x32\...\{FEFEDA38-9B6A-4374-8D43-7D5517152080}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
vs_minshellx64msi (HKLM\...\{CC15CA94-9817-4914-A9ED-A694A2F27783}) (Version: 17.1.32113 - Microsoft Corporation) Hidden
vs_SQLClickOnceBootstrappermsi (HKLM-x32\...\{4EF9011A-8E81-4D6F-9CB9-DBF0B1B12809}) (Version: 17.1.32112 - Microsoft Corporation) Hidden
vs_tipsmsi (HKLM-x32\...\{874561BE-97AD-4865-8512-579D41009147}) (Version: 17.1.32112 - Microsoft Corporation) Hidden
WinAppDeploy (HKLM-x32\...\{2ADF1977-BF31-E127-B651-AC28A8658317}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRAR 5.71 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{BCF7CA0F-E53C-2A4F-B128-A751EC9A1016}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{B42BF427-AFDB-C00F-DB60-6F51395D74A1}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{3335615C-ABEB-960E-2226-4274CD28E046}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{216D5F47-257D-6284-5849-B51037875EFA}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{443FF51E-16C3-F23B-18FC-0D1D66024B0B}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{15E29AFF-CB19-A20B-9A81-B0765A63115F}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{FF2B49B7-0254-3D6A-4BE0-EF4C59DBCC2B}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{0AF3B821-474B-1885-473A-6E3FB4F1CF71}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{8832F8ED-1035-9ABE-FD73-4E5ABAA84A5C}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinSCP 5.19.6 (HKLM-x32\...\winscp3_is1) (Version: 5.19.6 - Martin Prikryl)
WinToUSB (HKLM\...\WinToUSB_is1) (Version: 6.2 - Hasleo Software.)
Xamarin Remoted iOS Simulator (HKLM-x32\...\{133F3464-C283-4AF7-998A-B0DCD13AE9D0}) (Version: 16.10.0.380 - Xamarin) Hidden
XAMPP (HKLM\...\xampp) (Version: 8.1.2-0 - Bitnami)
Yamaha Steinberg USB Driver (HKLM\...\{D891D2FB-CABD-4817-9394-6C5F7D995507}) (Version: 2.0.3 - Yamaha Corporation) Hidden
Yamaha Steinberg USB Driver (HKLM-x32\...\yUninstall_{2938B185-2D57-47B0-9FC8-C90A67BA9277}) (Version: 2.0.3 - Yamaha Corporation)
Zemana AntiMalware verze 3.2.28 (HKLM-x32\...\{4E1F3677-C72E-4F7D-B66E-85467B1A289E}_is1) (Version: 3.2.28 - Zemana)

Packages:
=========
Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_7.26.33.0_x64__kgqvnymyfvs32 [2022-11-11] (king.com)
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.92.3.0_x64__kgqvnymyfvs32 [2022-11-11] (king.com)
Corel PaintShop Pro -> C:\Program Files\WindowsApps\CorelCorporation.PaintShopPro_25.1.28.0_x64__wbjqpk9xt50t4 [2022-11-05] (Corel Corporation)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-11-14] (Microsoft Corporation)
iCloud -> C:\Program Files\WindowsApps\AppleInc.iCloud_13.4.101.0_x86__nzyj5cx40ttqa [2022-08-08] (Apple Inc.) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-10-07] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-10-07] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.14.9130.0_x64__8wekyb3d8bbwe [2022-11-02] (Microsoft Studios) [MS Ad]
Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_1.1.28.0_x64__8wekyb3d8bbwe [2022-08-22] (Microsoft Studios)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-02-17] (Netflix, Inc.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.963.0_x64__56jybvy8sckqj [2022-10-19] (NVIDIA Corp.)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.198.691.0_x86__zpdnekdrzrea0 [2022-11-14] (Spotify AB) [Startup Task]

========================= Memory info: ===================================

Percentage of memory in use: 29%
Total physical RAM: 16318.93 MB
Available physical RAM: 11552.81 MB
Total Virtual: 18750.93 MB
Available Virtual: 12203.5 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:110.62 GB) (Free:5.29 GB) NTFS
2 Drive d: (Místní disk) (Fixed) (Total:931.51 GB) (Free:261.49 GB) NTFS
3 Drive f: (NVMe) (Fixed) (Total:465.76 GB) (Free:358.08 GB) NTFS

========================= Users: ========================================

U§ivatelsk‚ Łźty pro \\DESKTOP-M7HR9P7

Administrator DefaultAccount Guest
jdvor WDAGUtilityAccount
Pýˇkaz byl ŁspŘçnŘ dokonźen.


**** End of log ****
http://screenshare.cz/

Uživatelský avatar
strangereu
Level 4.5
Level 4.5
Příspěvky: 1712
Registrován: září 11
Bydliště: Vršovice
Pohlaví: Muž

Re: Zasekané PC, především během hraní CS:GO

Příspěvekod strangereu » 20 lis 2022 20:53

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:53:13, on 20.11.2022
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.22000.0120)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\Bloody7\Bloody7\Bloody7.exe
C:\Users\jdvor\Downloads\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O1 - Hosts: ::1 localhost
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O4 - HKLM\..\Run: [USB Gamepad] C:\WINDOWS\USB Vibration\7906\USB Gamepad.exe -boot
O4 - HKCU\..\Run: [CCXProcess] "C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe"
O4 - HKCU\..\Run: [Steam] "F:\Games\steam.exe" -silent
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody7\Bloody7\Bloody7.exe" Minimum
O4 - HKCU\..\Run: [Opera Browser Assistant] C:\Users\jdvor\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [MicrosoftEdgeAutoLaunch_8087349144A598EE5C15A22767F1D84A] "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
O4 - Startup: MEGAsync.lnk = C:\Users\jdvor\AppData\Local\MEGAsync\MEGAsync.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlansp_c.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL (file missing)
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_85626 - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA FrameView SDK service (FvSvc) - NVIDIA - C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe
O23 - Service: Gameforge Client Service (GameforgeClientService) - Unknown owner - C:\Program Files (x86)\GameforgeClient\gfservice.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) (GoogleChromeElevationService) - Google LLC - C:\Program Files (x86)\Google\Chrome\Application\107.0.5304.107\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: RogueKiller RTP (rkrtservice) - Unknown owner - C:\Program Files\RogueKiller\RogueKillerSvc.exe
O23 - Service: Rockstar Game Library Service (Rockstar Service) - Rockstar Games - D:\Games\Launcher\RockstarService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTrap) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: VirtualBox system service (VBoxSDS) - Oracle Corporation - C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11105 bytes
http://screenshare.cz/

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 42512
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž

Re: Zasekané PC, především během hraní CS:GO

Příspěvekod jaro3 » 20 lis 2022 21:40

Tak předně:

1 Drive c: () (Fixed) (Total:110.62 GB) (Free:5.29 GB) NTFS

Máš mít na disku alespoň 15-20% volného místa. Nejprve si místo uvolni , něco odinstaluj , nebo smaž , přesuň.

Pokud to nebude mít efekt ( po restartu).
Application errors:
==================
Error: (11/20/2022 07:36:10 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.
Error: (11/20/2022 11:57:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: csgo.exe, verze: 0.0.0.0, časové razítko: 0x62745503
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.22000.1219, časové razítko: 0x554c45b0
Kód výjimky: 0xc06d007f
Posun chyby: 0x00140762
ID chybujícího procesu: 0x4ec
Čas spuštění chybující aplikace: 0x01d8fccdcb3c8b76
Cesta k chybující aplikaci: F:\Games\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID zprávy: 96329276-0b9b-406e-9ada-57fb17f755e7
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


Tak ten CSGO přeinstaluj.

18ms je možná dost..

Spusť znovu MiniToolBox.
Zaškrtni čtverečky:
Flush DNS
Reset IE Proxy Settings
Reset FF Proxy Settings
List Device * Only problem * No Driver *All
List Minidump Files
Potom klikni na GO , po chvíli skenu se objeví log s názvem „Result“ , zkopíruj sem celý jeho obsah.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

Uživatelský avatar
strangereu
Level 4.5
Level 4.5
Příspěvky: 1712
Registrován: září 11
Bydliště: Vršovice
Pohlaví: Muž

Re: Zasekané PC, především během hraní CS:GO

Příspěvekod strangereu » 21 lis 2022 09:39

MiniToolBox by Farbar Version: 13-05-2022
Ran by jdvor (administrator) on 21-11-2022 at 09:39:22
Running from "C:\Users\jdvor\Desktop"
Microsoft Windows 11 Home (X64)
Model: MS-7758 Manufacturer: MSI
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.


"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= Devices: ================================

Name: Základní deska
Description: Základní deska
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0C01\1

Name: Prostředky základní desky
Description: Prostředky základní desky
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0C02\1

Name: Prostředky základní desky
Description: Prostředky základní desky
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0C02\2

Name: Vstupní zařízení USB
Description: Vstupní zařízení USB
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: (Standardní systémová zařízení)
Service: HidUsb
Device ID: USB\VID_0458&PID_0708&MI_00\7&3B49CDA1&0&0000

Name: Ventilátor standardu ACPI
Description: Ventilátor standardu ACPI
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0C0B\0

Name: Ventilátor standardu ACPI
Description: Ventilátor standardu ACPI
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0C0B\1

Name: Ventilátor standardu ACPI
Description: Ventilátor standardu ACPI
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0C0B\2

Name: Ventilátor standardu ACPI
Description: Ventilátor standardu ACPI
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0C0B\3

Name: Ventilátor standardu ACPI
Description: Ventilátor standardu ACPI
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0C0B\4

Name: Kořenový rozbočovač USB (USB 3.0)
Description: Kořenový rozbočovač USB (USB 3.0)
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standardní rozbočovače USB)
Service: USBHUB3
Device ID: USB\ROOT_HUB30\4&72FD6A2&0&0

Name: Systémový časovač
Description: Systémový časovač
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0100\4&12FA4AA2&0

Name: Root Print Queue
Description: Místní tisková fronta
Class Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
Manufacturer: Microsoft
Service:
Device ID: SWD\PRINTENUM\PRINTQUEUES

Name: Standardní řadič SATA AHCI
Description: Standardní řadič SATA AHCI
Class Guid: {4d36e96a-e325-11ce-bfc1-08002be10318}
Manufacturer: Standardní řadič SATA AHCI
Service: storahci
Device ID: PCI\VEN_8086&DEV_1E02&SUBSYS_77581462&REV_04\3&11583659&0&FA

Name: ST1000LM024 HN-M101MBB
Description: Disková jednotka
Class Guid: {4d36e967-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní diskové jednotky)
Service: disk
Device ID: SCSI\DISK&VEN_&PROD_ST1000LM024_HN-M\4&2308A434&0&010000

Name: Správce svazků
Description: Správce svazků
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: volmgr
Device ID: ROOT\VOLMGR\0000

Name: Xeon(R) processor E3 - 1200 v2/3rd Gen Core processor PCI Express Root Port - 0151
Description: Xeon(R) processor E3 - 1200 v2/3rd Gen Core processor PCI Express Root Port - 0151
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: INTEL
Service: pci
Device ID: PCI\VEN_8086&DEV_0151&SUBSYS_77581462&REV_09\3&11583659&0&08

Name: Intel(R) 7 Series/C216 Chipset Family PCI Express Root Port 2 - 1E12
Description: Intel(R) 7 Series/C216 Chipset Family PCI Express Root Port 2 - 1E12
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: INTEL
Service: pci
Device ID: PCI\VEN_8086&DEV_1E12&SUBSYS_77581462&REV_C4\3&11583659&0&E1

Name: KINGSTON SA400S37120G
Description: Disková jednotka
Class Guid: {4d36e967-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní diskové jednotky)
Service: disk
Device ID: SCSI\DISK&VEN_&PROD_KINGSTON_SA400S3\4&2308A434&0&000000

Name: WAN Miniport (PPPOE)
Description: Připojení WAN Miniport (PPPOE)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: RasPppoe
Device ID: SWD\MSRRAS\MS_PPPOEMINIPORT

Name: Uživatelské zařízení standardu HID
Description: Uživatelské zařízení standardu HID
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: Microsoft
Service:
Device ID: HID\VID_09DA&PID_3EFE&MI_02&COL03\8&17EAF866&0&0002

Name: Vstupní zařízení USB
Description: Vstupní zařízení USB
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: (Standardní systémová zařízení)
Service: HidUsb
Device ID: USB\VID_09DA&PID_3EFE&MI_02\7&14D788EF&1&0002

Name: Intel(R) B75 Express Chipset LPC Controller - 1E49
Description: Intel(R) B75 Express Chipset LPC Controller - 1E49
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: INTEL
Service: msisadrv
Device ID: PCI\VEN_8086&DEV_1E49&SUBSYS_77581462&REV_04\3&11583659&0&F8

Name: Základní ovladač zobrazení Microsoft
Description: Základní ovladač zobrazení Microsoft
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní typy zobrazovacích jednotek)
Service: BasicDisplay
Device ID: ROOT\BASICDISPLAY\0000

Name: Svazek
Description: Svazek
Class Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: volume
Device ID: STORAGE\VOLUME\{CA989EEE-A153-11EC-85C0-806E6F6E6963}#0000000000100000

Name: VirtualBox Host-Only Ethernet Adapter
Description: VirtualBox Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Oracle Corporation
Service: VBoxNetAdp
Device ID: ROOT\NET\0000

Name: Termální zóna standardu ACPI
Description: Termální zóna standardu ACPI
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\THERMALZONE\TZ00

Name: Termální zóna standardu ACPI
Description: Termální zóna standardu ACPI
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\THERMALZONE\TZ01

Name: Microsoft RRAS Root Enumerator
Description: Obecné softwarové zařízení
Class Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
Manufacturer: Microsoft
Service:
Device ID: SWD\MSRRAS\{5E259276-BC7E-40E3-B93B-8F89B5F3ABC0}

Name: Rozhraní WMI (Windows Management Interface) společnosti Microsoft pro standard ACPI
Description: Rozhraní WMI (Windows Management Interface) společnosti Microsoft pro standard ACPI
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: WmiAcpi
Device ID: ACPI\PNP0C14\0

Name: Realtek PCIe GbE Family Controller
Description: Realtek PCIe GbE Family Controller
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: rt640x64
Device ID: PCI\VEN_10EC&DEV_8168&SUBSYS_77581462&REV_06\4&1FEA2515&0&00E1

Name: WAN Miniport (PPTP)
Description: Připojení WAN Miniport (PPTP)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: PptpMiniport
Device ID: SWD\MSRRAS\MS_PPTPMINIPORT

Name: Ovladač infrastruktury virtualizace Microsoft Hyper-V
Description: Ovladač infrastruktury virtualizace Microsoft Hyper-V
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: Vid
Device ID: ROOT\VID\0000

Name: Vstupní zařízení USB
Description: Vstupní zařízení USB
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: (Standardní systémová zařízení)
Service: HidUsb
Device ID: USB\VID_0458&PID_0708&MI_01\7&3B49CDA1&0&0001

Name: Intel(R) 7 Series/C216 Chipset Family USB – rozšířený hostitelský řadič – 1E2D
Description: Intel(R) 7 Series/C216 Chipset Family USB – rozšířený hostitelský řadič – 1E2D
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: Intel
Service: usbehci
Device ID: PCI\VEN_8086&DEV_1E2D&SUBSYS_77581462&REV_04\3&11583659&0&D0

Name: Časovač událostí s vysokou přesností
Description: Časovač událostí s vysokou přesností
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0103\0

Name: WAN Miniport (IKEv2)
Description: Připojení WAN Miniport (IKEv2)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: RasAgileVpn
Device ID: SWD\MSRRAS\MS_AGILEVPNMINIPORT

Name: Rozpoznávací modul složené sběrnice
Description: Rozpoznávací modul složené sběrnice
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: CompositeBus
Device ID: ROOT\COMPOSITEBUS\0000

Name: Enumerátor virtuální jednotky Microsoft
Description: Enumerátor virtuální jednotky Microsoft
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vdrvroot
Device ID: ROOT\VDRVROOT\0000

Name: Řadič prostorů úložišť
Description: Řadič prostorů úložišť
Class Guid: {4d36e97b-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: spaceport
Device ID: ROOT\SPACEPORT\0000

Name: Fax
Description: Místní tisková fronta
Class Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
Manufacturer: Microsoft
Service:
Device ID: SWD\PRINTENUM\{2F223153-2C99-4EBD-8F15-65561E56F7CE}

Name: Zvukový kabel (2 - Steinberg UR12 )
Description: Zvukový koncový bod
Class Guid: {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
Manufacturer: Microsoft
Service:
Device ID: SWD\MMDEVAPI\{0.0.0.00000000}.{5BE7AA81-4FA2-45B8-BA55-AC104FA1B01C}

Name: Komunikační port (COM1)
Description: Komunikační port
Class Guid: {4d36e978-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní typy portů)
Service: Serial
Device ID: ACPI\PNP0501\1

Name: Microsoft Kernel Debug Network Adapter
Description: Síťový adaptér ladění jádra společnosti Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: kdnic
Device ID: ROOT\KDNIC\0000

Name: Generic USB Hub
Description: Generic USB Hub
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Generic USB Hub)
Service: usbhub
Device ID: USB\VID_8087&PID_0024\5&26678DA6&0&1

Name: Stínová kopie obecného svazku
Description: Stínová kopie obecného svazku
Class Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}
Manufacturer: Microsoft
Service:
Device ID: STORAGE\VOLUMESNAPSHOT\HARDDISKVOLUMESNAPSHOT1

Name: Dodavatelem definované zařízení standardu HID
Description: Dodavatelem definované zařízení standardu HID
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: HID\VID_09DA&PID_3EFE&MI_02&COL04\8&17EAF866&0&0003

Name: Složené zařízení USB
Description: Složené zařízení USB
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standardní hostitelský řadič USB)
Service: usbccgp
Device ID: USB\VID_0458&PID_0708\6&29F8669C&0&1

Name: OneNote for Windows 10
Description: Místní tisková fronta
Class Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
Manufacturer: Microsoft
Service:
Device ID: SWD\PRINTENUM\{C09ADCAA-2B06-4BDE-949B-303145B4A17B}

Name: OneNote (Desktop)
Description: Místní tisková fronta
Class Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
Manufacturer: Microsoft
Service:
Device ID: SWD\PRINTENUM\{BC63EA1F-C8BE-4CDA-9A06-EEDE12B2E526}

Name: Steinberg UR12
Description: Yamaha Steinberg USB Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Yamaha Corporation.
Service: ysusb_w10_64
Device ID: USB\VID_0499&PID_170A\7&484DB34&0&1

Name: Řadič High Definition Audio
Description: Řadič High Definition Audio
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HDAudBus
Device ID: PCI\VEN_8086&DEV_1E20&SUBSYS_D7581462&REV_04\3&11583659&0&D8

Name: Intel(R) 7 Series/C216 Chipset Family USB – rozšířený hostitelský řadič – 1E26
Description: Intel(R) 7 Series/C216 Chipset Family USB – rozšířený hostitelský řadič – 1E26
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: Intel
Service: usbehci
Device ID: PCI\VEN_8086&DEV_1E26&SUBSYS_77581462&REV_04\3&11583659&0&E8

Name: Řadič High Definition Audio
Description: Řadič High Definition Audio
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HDAudBus
Device ID: PCI\VEN_10DE&DEV_0FB9&SUBSYS_37331458&REV_A1\4&2B8DBD9&0&01E4

Name: UMBus Root Bus Enumerator
Description: UMBus Root Bus Enumerator
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: umbus
Device ID: ROOT\UMBUS\0000

Name: Samsung SSD 980 500GB
Description: Disková jednotka
Class Guid: {4d36e967-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní diskové jednotky)
Service: disk
Device ID: SCSI\DISK&VEN_NVME&PROD_SAMSUNG_SSD_980\5&BE1E341&0&000000

Name: Microsoft Radio Device Enumeration Bus
Description: Obecné softwarové zařízení
Class Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
Manufacturer: Microsoft
Service:
Device ID: SWD\RADIO\{3DB5895D-CC28-44B3-AD3D-6F01A782B8D2}

Name: Xeon(R) processor E3 - 1200 v2/3rd Gen Core processor DRAM Controller - 0150
Description: Xeon(R) processor E3 - 1200 v2/3rd Gen Core processor DRAM Controller - 0150
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: INTEL
Service:
Device ID: PCI\VEN_8086&DEV_0150&SUBSYS_77581462&REV_09\3&11583659&0&00

Name: Systémová paměť CMOS/hodiny reálného času
Description: Systémová paměť CMOS/hodiny reálného času
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0B00\4&12FA4AA2&0

Name: Počítač standardu ACPI pro platformu x64
Description: Počítač standardu ACPI pro platformu x64
Class Guid: {4d36e966-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní počítače)
Service: \Driver\ACPI_HAL
Device ID: ROOT\ACPI_HAL\0000

Name: WAN Miniport (Network Monitor)
Description: Připojení WAN Miniport (Sledování sítě)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Device ID: SWD\MSRRAS\MS_NDISWANBH

Name: WAN Miniport (IP)
Description: Připojení WAN Miniport (IP)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Device ID: SWD\MSRRAS\MS_NDISWANIP

Name: Zařízení root complex sběrnice PCI Express
Description: Zařízení root complex sběrnice PCI Express
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service: pci
Device ID: ACPI\PNP0A08\0

Name: Programovatelný řadič přerušení
Description: Programovatelný řadič přerušení
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0000\4&12FA4AA2&0

Name: Systém vyhovující standardu ACPI (Microsoft)
Description: Systém vyhovující standardu ACPI (Microsoft)
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: ACPI
Device ID: ACPI_HAL\PNP0C08\0

Name:
Description:
Class Guid:
Manufacturer:
Service:
Device ID: HTREE\ROOT\0

Name: Základní ovladač vykreslování Microsoft
Description: Základní ovladač vykreslování Microsoft
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: BasicRender
Device ID: ROOT\BASICRENDER\0000

Name: Prostředky základní desky
Description: Prostředky základní desky
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\INT3F0D\4&12FA4AA2&0

Name: WAN Miniport (SSTP)
Description: Připojení WAN Miniport (SSTP)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: RasSstp
Device ID: SWD\MSRRAS\MS_SSTPMINIPORT

Name: Intel(R) Core(TM) i5-3350P CPU @ 3.10GHz
Description: Procesor Intel
Class Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}
Manufacturer: Intel
Service: intelppm
Device ID: ACPI\GENUINEINTEL_-_INTEL64_FAMILY_6_MODEL_58_-________INTEL(R)_CORE(TM)_I5-3350P_CPU_@_3.10GHZ\_1

Name: Intel(R) Core(TM) i5-3350P CPU @ 3.10GHz
Description: Procesor Intel
Class Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}
Manufacturer: Intel
Service: intelppm
Device ID: ACPI\GENUINEINTEL_-_INTEL64_FAMILY_6_MODEL_58_-________INTEL(R)_CORE(TM)_I5-3350P_CPU_@_3.10GHZ\_2

Name: Intel(R) Core(TM) i5-3350P CPU @ 3.10GHz
Description: Procesor Intel
Class Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}
Manufacturer: Intel
Service: intelppm
Device ID: ACPI\GENUINEINTEL_-_INTEL64_FAMILY_6_MODEL_58_-________INTEL(R)_CORE(TM)_I5-3350P_CPU_@_3.10GHZ\_3

Name: Intel(R) Core(TM) i5-3350P CPU @ 3.10GHz
Description: Procesor Intel
Class Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}
Manufacturer: Intel
Service: intelppm
Device ID: ACPI\GENUINEINTEL_-_INTEL64_FAMILY_6_MODEL_58_-________INTEL(R)_CORE(TM)_I5-3350P_CPU_@_3.10GHZ\_4

Name: Svazek
Description: Svazek
Class Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: volume
Device ID: STORAGE\VOLUME\{1FEA9091-DFC9-11EA-8565-806E6F6E6963}#0000001BCC400000

Name: Zařízení klávesnice standardu HID
Description: Zařízení klávesnice standardu HID
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní klávesnice)
Service: kbdhid
Device ID: HID\VID_0458&PID_0708&MI_00\8&1D8B6A40&0&0000

Name: Řadič DMA
Description: Řadič DMA
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0200\4&12FA4AA2&0

Name: Tlačítko standardu ACPI s definovanou funkcí
Description: Tlačítko standardu ACPI s definovanou funkcí
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\FIXEDBUTTON\2&DABA3FF&0

Name: Realtek High Definition Audio
Description: Realtek High Definition Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: IntcAzAudAddService
Device ID: HDAUDIO\FUNC_01&VEN_10EC&DEV_0892&SUBSYS_1462D758&REV_1003\4&1EFE03A&0&0001

Name: NVIDIA GeForce GTX 1050 Ti
Description: NVIDIA GeForce GTX 1050 Ti
Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}
Manufacturer: NVIDIA
Service: nvlddmkm
Device ID: PCI\VEN_10DE&DEV_1C82&SUBSYS_37331458&REV_A1\4&2B8DBD9&0&00E4

Name: Prostředky základní desky
Description: Prostředky základní desky
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0C02\10

Name: Logické rozhraní portu tiskárny
Description: Logické rozhraní portu tiskárny
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: LPTENUM\MICROSOFTRAWPORT\5&242672BD&0&LPT1

Name: Svazek
Description: Svazek
Class Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: volume
Device ID: STORAGE\VOLUME\{1FEA9091-DFC9-11EA-8565-806E6F6E6963}#0000000024400000

Name: Složené zařízení USB
Description: Složené zařízení USB
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standardní hostitelský řadič USB)
Service: usbccgp
Device ID: USB\VID_09DA&PID_3EFE\6&29F8669C&0&5

Name: Intel(R) USB 3.0 eXtensible Host Controller - 1.0 (Microsoft)
Description: Hostitelský řadič USB kompatibilní s rozhraním xHCI
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: Obecný hostitelský řadič USB xHCI
Service: USBXHCI
Device ID: PCI\VEN_8086&DEV_1E31&SUBSYS_77581462&REV_04\3&11583659&0&A0

Name: Generic USB Hub
Description: Generic USB Hub
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Generic USB Hub)
Service: usbhub
Device ID: USB\VID_8087&PID_0024\5&17512212&0&1

Name:
Description:
Class Guid:
Manufacturer:
Service:
Device ID: ACPI\INT33A0\0
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Reproduktory (Realtek High Definition Audio)
Description: Zvukový koncový bod
Class Guid: {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
Manufacturer: Microsoft
Service:
Device ID: SWD\MMDEVAPI\{0.0.0.00000000}.{AC541CA9-7B5B-4B1A-BA7A-1B41B00F1678}

Name: Zařízení klávesnice standardu HID
Description: Zařízení klávesnice standardu HID
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní klávesnice)
Service: kbdhid
Device ID: HID\VID_09DA&PID_3EFE&MI_02&COL01\8&17EAF866&0&0000

Name: Vstupní zařízení USB
Description: Vstupní zařízení USB
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: (Standardní systémová zařízení)
Service: HidUsb
Device ID: USB\VID_09DA&PID_3EFE&MI_00\7&14D788EF&1&0000

Name: Port tiskárny (LPT1)
Description: Port tiskárny
Class Guid: {4d36e978-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní typy portů)
Service: Parport
Device ID: ACPI\PNP0400\4&12FA4AA2&0

Name: NVIDIA Virtual Audio Device (Wave Extensible) (WDM)
Description: NVIDIA Virtual Audio Device (Wave Extensible) (WDM)
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: NVIDIA
Service: nvvad_WaveExtensible
Device ID: ROOT\UNNAMED_DEVICE\0000

Name: NVVHCI Enumerator
Description: NVVHCI Enumerator
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: NVIDIA
Service: nvvhci
Device ID: ROOT\UNNAMED_DEVICE\0001

Name: NvModuleTracker Device
Description: NvModuleTracker Device
Class Guid: {aa018edf-4915-415e-9c17-d7ebec8917d2}
Manufacturer: NVIDIA
Service: NvModuleTracker
Device ID: ROOT\UNNAMED_DEVICE\0002

Name: Generic USB Hub
Description: Generic USB Hub
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Generic USB Hub)
Service: usbhub
Device ID: USB\VID_0424&PID_2422\6&29F8669C&0&6

Name: Kořenový rozbočovač USB
Description: Kořenový rozbočovač USB
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standardní hostitelský řadič USB)
Service: usbhub
Device ID: USB\ROOT_HUB20\4&246AA915&0

Name: Xvdd SCSI Miniport
Description: Xvdd SCSI Miniport
Class Guid: {4d36e97b-e325-11ce-bfc1-08002be10318}
Manufacturer: Xbox
Service: Xvdd
Device ID: SWD\XVDDENUM\XVDDROOTDEVICE_INSTANCE

Name: Softwarový syntezátor Microsoft GS Wavetable
Description: Obecné softwarové zařízení
Class Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
Manufacturer: Microsoft
Service:
Device ID: SWD\MMDEVAPI\MICROSOFTGSWAVETABLESYNTH

Name: Vypínač standardu ACPI
Description: Vypínač standardu ACPI
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0C0C\AA

Name: Myš kompatibilní s technologií HID
Description: Myš kompatibilní s technologií HID
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: mouhid
Device ID: HID\VID_09DA&PID_3EFE&MI_01\8&276C21&0&0000

Name: PHL 243V7 (2 - NVIDIA High Definition Audio)
Description: Zvukový koncový bod
Class Guid: {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
Manufacturer: Microsoft
Service:
Device ID: SWD\MMDEVAPI\{0.0.0.00000000}.{DC538B8F-668C-4C79-BB3D-6FAE814399CB}

Name: Intel(R) Management Engine Interface
Description: Intel(R) Management Engine Interface
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service: MEIx64
Device ID: PCI\VEN_8086&DEV_1E3A&SUBSYS_77581462&REV_04\3&11583659&0&B0

Name: Microsoft Print to PDF
Description: Místní tisková fronta
Class Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
Manufacturer: Microsoft
Service:
Device ID: SWD\PRINTENUM\{08865301-AA21-4B55-B940-1FFF729DDCC0}

Name: Svazek
Description: Svazek
Class Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: volume
Device ID: STORAGE\VOLUME\{1FEA9091-DFC9-11EA-8565-806E6F6E6963}#0000000000100000

Name: Enumerátor virtuálního síťového adaptéru NDIS
Description: Enumerátor virtuálního síťového adaptéru NDIS
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisVirtualBus
Device ID: ROOT\NDISVIRTUALBUS\0000

Name: Svazek
Description: Svazek
Class Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: volume
Device ID: STORAGE\VOLUME\{1FEA9092-DFC9-11EA-8565-806E6F6E6963}#0000000000007E00

Name: Numerický datový procesor
Description: Numerický datový procesor
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0C04\4&12FA4AA2&0

Name: Intel(R) 7 Series/C216 Chipset Family PCI Express Root Port 1 - 1E10
Description: Intel(R) 7 Series/C216 Chipset Family PCI Express Root Port 1 - 1E10
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: INTEL
Service: pci
Device ID: PCI\VEN_8086&DEV_1E10&SUBSYS_77581462&REV_C4\3&11583659&0&E0

Name: Obecný monitor PnP
Description: Obecný monitor PnP
Class Guid: {4d36e96e-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní typy monitorů)
Service: monitor
Device ID: DISPLAY\PHLC155\5&1DACF002&0&UID16641

Name: Prostředky základní desky
Description: Prostředky základní desky
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: ACPI\PNP0C02\111

Name: Řadič Standard NVM Express
Description: Řadič Standard NVM Express
Class Guid: {4d36e97b-e325-11ce-bfc1-08002be10318}
Manufacturer: Řadič Standard NVM Express
Service: stornvme
Device ID: PCI\VEN_144D&DEV_A809&SUBSYS_A801144D&REV_00\4&2CDFDEC1&0&0008

Name: Intel(R) 7 Series/C216 Chipset Family PCI Express Root Port 5 - 1E18
Description: Intel(R) 7 Series/C216 Chipset Family PCI Express Root Port 5 - 1E18
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: INTEL
Service: pci
Device ID: PCI\VEN_8086&DEV_1E18&SUBSYS_77581462&REV_C4\3&11583659&0&E4

Name: NVIDIA High Definition Audio
Description: NVIDIA High Definition Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: NVIDIA
Service: NVHDA
Device ID: HDAUDIO\FUNC_01&VEN_10DE&DEV_0080&SUBSYS_14583733&REV_1001\5&32AC141E&0&0001

Name: Ovladač Microsoft System Management BIOS
Description: Ovladač Microsoft System Management BIOS
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service: mssmbios
Device ID: ROOT\MSSMBIOS\0000

Name: Intel(R) 7 Series/C216 Chipset Family SMBus Host Controller - 1E22
Description: Intel(R) 7 Series/C216 Chipset Family SMBus Host Controller - 1E22
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: INTEL
Service:
Device ID: PCI\VEN_8086&DEV_1E22&SUBSYS_77581462&REV_04\3&11583659&0&FB

Name: Zařízení klávesnice standardu HID
Description: Zařízení klávesnice standardu HID
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní klávesnice)
Service: kbdhid
Device ID: HID\VID_09DA&PID_3EFE&MI_00\8&2930F808&0&0000

Name: Systémový řadič standardu HID
Description: Systémový řadič standardu HID
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: (Standardní systémová zařízení)
Service:
Device ID: HID\VID_09DA&PID_3EFE&MI_02&COL02\8&17EAF866&0&0001

Name: Vstupní zařízení USB
Description: Vstupní zařízení USB
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: (Standardní systémová zařízení)
Service: HidUsb
Device ID: USB\VID_09DA&PID_3EFE&MI_01\7&14D788EF&1&0001

Name: Most mezi sběrnicemi PCI
Description: Most mezi sběrnicemi PCI
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service: pci
Device ID: PCI\VEN_8086&DEV_244E&SUBSYS_77581462&REV_A4\3&11583659&0&F0

Name: Softwarový modul pro výčet zařízení typu Plug and Play
Description: Softwarový modul pro výčet zařízení typu Plug and Play
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service: swenum
Device ID: ROOT\SYSTEM\0000

Name: Virtual Gamepad Emulation Bus
Description: Virtual Gamepad Emulation Bus
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Benjamin Hoeglinger-Stelzer
Service: ViGEmBus
Device ID: ROOT\SYSTEM\0001

Name: Starší zařízení
Description: Starší zařízení
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service:
Device ID: ACPI\INT0800\4&12FA4AA2&0

Name: Sběrnice přesměrovače zařízení vzdálené plochy
Description: Sběrnice přesměrovače zařízení vzdálené plochy
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: rdpbus
Device ID: ROOT\RDPBUS\0000

Name: Zvukový kabel (2 - Steinberg UR12 )
Description: Zvukový koncový bod
Class Guid: {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
Manufacturer: Microsoft
Service:
Device ID: SWD\MMDEVAPI\{0.0.1.00000000}.{60E8251F-D509-4B76-A95A-995F27901372}

Name: Uživatelské zařízení standardu HID
Description: Uživatelské zařízení standardu HID
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: Microsoft
Service:
Device ID: HID\VID_0458&PID_0708&MI_01\8&354EF685&0&0000

Name: WAN Miniport (IPv6)
Description: Připojení WAN Miniport (IPv6)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisWan
Device ID: SWD\MSRRAS\MS_NDISWANIPV6

Name: Microsoft XPS Document Writer
Description: Místní tisková fronta
Class Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
Manufacturer: Microsoft
Service:
Device ID: SWD\PRINTENUM\{A0B2C5E4-8C1A-40A3-A6B4-246884E14230}

Name: Kořenový rozbočovač USB
Description: Kořenový rozbočovač USB
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standardní hostitelský řadič USB)
Service: usbhub
Device ID: USB\ROOT_HUB20\4&23B87B90&0

Name: WAN Miniport (L2TP)
Description: Připojení WAN Miniport (L2TP)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: Rasl2tp
Device ID: SWD\MSRRAS\MS_L2TPMINIPORT

========================= Minidump Files ==================================

No minidump file found


**** End of log ****
http://screenshare.cz/

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 42512
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž

Re: Zasekané PC, především během hraní CS:GO

Příspěvekod jaro3 » 21 lis 2022 14:27

Uvolnil si místo na disku?
Pak napiš , jak to vypadá.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

Uživatelský avatar
strangereu
Level 4.5
Level 4.5
Příspěvky: 1712
Registrován: září 11
Bydliště: Vršovice
Pohlaví: Muž

Re: Zasekané PC, především během hraní CS:GO

Příspěvekod strangereu » 21 lis 2022 18:19

Misto jsem uvolnil, CSGO preinstaloval.
Behem zitrka budu zkouset, tak dam urcite vedet.

Nicmene, rovnou se zeptam, at nezakladam novy thread. V PC mam ten NVMe M.2 disk, coz sis jiste vsiml z logu. Mam ho v PC pres adapter v PCIE, ale z PCIE nelze bootovat nebo se mi to minimalne nepovedlo… Kdybych sehnal nejaky mSATA -> SATA adapter, bylo by mozne pouzit ten nvme jako systemovy disk?
Napriklad tento: https://m.alza.cz/roline-sata-22pin-msa ... 264923253~

Pripadne nejaky jiny? Je to vubec mozne?
http://screenshare.cz/

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 42512
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž

Re: Zasekané PC, především během hraní CS:GO

Příspěvekod jaro3 » 21 lis 2022 20:03

Nejsem odborník , ale takové krkolomné připojení..
Asi budeš muset zadat nové téma.

Pak dej vědět ohledně tohoto tématu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

Uživatelský avatar
strangereu
Level 4.5
Level 4.5
Příspěvky: 1712
Registrován: září 11
Bydliště: Vršovice
Pohlaví: Muž

Re: Zasekané PC, především během hraní CS:GO

Příspěvekod strangereu » 23 lis 2022 12:52

Tak jsem to nyní zkoušel a kupodivu se FPS zvedlo o cca 10-15, ale v jistých částech herní mapy se propadá klidně až na 40. Zkoušel jsem hru offline s boty, takže internet do toho nezasahoval.
Během těch propadů FPS je to nejvíc znatelné, protože obraz doslova zamrzává. Jsou to takové mikrolagy, ale nepříjemné.
http://screenshare.cz/

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 42512
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž

Re: Zasekané PC, především během hraní CS:GO

Příspěvekod jaro3 » 23 lis 2022 14:49

Nemůže to dělat grafika? Ovladače? Jaké je vytížení CPU a GPU při těch pádech?

Vypni antivir i firewall.
Prosím stáhni příslušnou verzi programu pro Tvůj systém 32-bit/64-bit FarbarRecovery Scan Tool (FrSt)
32bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/81/
64bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/82/
další odkaz:
http://www.bleepingcomputer.com/downloa ... scan-tool/
a ulož jej na plochu. ,pak spusť FrSt.
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

Uživatelský avatar
strangereu
Level 4.5
Level 4.5
Příspěvky: 1712
Registrován: září 11
Bydliště: Vršovice
Pohlaví: Muž

Re: Zasekané PC, především během hraní CS:GO

Příspěvekod strangereu » 23 lis 2022 15:38

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 18-11-2022
Ran by jdvor (administrator) on DESKTOP-M7HR9P7 (MSI MS-7758) (23-11-2022 15:25:04)
Running from C:\Users\jdvor\Desktop
Loaded Profiles: jdvor
Platform: Microsoft Windows 11 Home Version 21H2 22000.1219 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\Program Files\WindowsApps\MicrosoftTeams_22287.702.1670.9453_x64__8wekyb3d8bbwe\msteams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\107.0.1418.52\msedgewebview2.exe <12>
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2210.6-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2210.6-0\MpCopyAccelerator.exe
(Discord Inc. -> Discord Inc.) C:\Users\jdvor\AppData\Local\Discord\app-1.0.9007\Discord.exe <6>
(explorer.exe ->) (A FOUR TECH CO., LTD. -> ) C:\Program Files (x86)\Bloody7\Bloody7\Bloody7.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <61>
(explorer.exe ->) (Valve Corp. -> Valve Corporation) F:\Games\steam.exe
(F:\Games\steam.exe ->) (Valve Corp. -> Valve Corporation) F:\Games\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(Microsoft Corporation -> Microsoft Corporation) F:\VS\Common7\IDE\PerfWatson2.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2>
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_8.71.12001.0_x64__8wekyb3d8bbwe\gamingservices.exe
(services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_8.71.12001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2210.6-0\MsMpEng.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.25183.1000.0_x64__8wekyb3d8bbwe\SecHealthUI.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\SecurityHealth\1.0.2208.16003-0\SecurityHealthHost.exe <2>
(svchost.exe ->) (Microsoft Windows) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20070.765.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => F:\iTunes\iTunesHelper.exe [357944 2022-02-08] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [USB Gamepad] => C:\WINDOWS\USB Vibration\7906\USB Gamepad.exe [796784 2008-12-10] (Shen Zhen Dragon Rise Macro Technology Limited Company -> )
HKU\S-1-5-21-1794834367-1300129054-3649426368-1001\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [597640 2020-02-07] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1794834367-1300129054-3649426368-1001\...\Run: [Steam] => F:\Games\steam.exe [4245352 2022-11-17] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1794834367-1300129054-3649426368-1001\...\Run: [Bloody2] => C:\Program Files (x86)\Bloody7\Bloody7\Bloody7.exe [20979728 2022-08-05] (A FOUR TECH CO., LTD. -> )
HKU\S-1-5-21-1794834367-1300129054-3649426368-1001\...\Run: [Opera Browser Assistant] => C:\Users\jdvor\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4152776 2022-10-19] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1794834367-1300129054-3649426368-1001\...\Run: [CCleaner Smart Cleaning] => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR (No File)
HKU\S-1-5-21-1794834367-1300129054-3649426368-1001\...\Run: [MicrosoftEdgeAutoLaunch_8087349144A598EE5C15A22767F1D84A] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3892168 2022-11-21] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\107.0.5304.107\Installer\chrmstp.exe [2022-11-11] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {05821BE6-C71C-4578-A777-788125468268} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2019-12-23] (Google LLC -> Google LLC)
Task: {0D4850FF-E58E-4FB6-BEC9-F07F943E5712} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2210.6-0\MpCmdRun.exe [1567360 2022-11-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0D93F550-56AE-4E7E-A52E-5300E29EC222} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe scan upload mininterval:2880 (No File)
Task: {1E052E8A-6529-4A51-A377-B0429A0795ED} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => C:\WINDOWS\system32\SecureBootEncodeUEFI.exe [90112 2022-11-11] (Microsoft Windows -> )
Task: {33C86AA0-B1B2-4E0E-A454-B0BDE678E842} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {403BC83A-AFDA-4F78-9DAF-DBDDF1D5AA1B} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {40CC0AAB-24D2-4324-9275-0DEE150907FA} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [66936 2022-11-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {42C970B2-5441-4D4E-A92C-3BAA61E02468} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4BFF5DC8-5283-40BB-9295-7FEEDC6A9F07} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2210.6-0\MpCmdRun.exe [1567360 2022-11-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {590AEB71-1FE3-443B-A6B1-3F43BFBAEF82} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6824830D-DA37-4769-9528-4C5A6A7674CD} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {73046E48-0049-4D4C-B22A-58BA5A021764} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2210.6-0\MpCmdRun.exe [1567360 2022-11-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {760258CD-5D5C-4D15-BBB9-B3D84F4E5B0B} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144280 2022-11-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {791F4873-06E6-4E38-876F-5B963D7AA829} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe scan upload (No File)
Task: {7F7E8390-FF14-4A1C-B01D-2328B36DD966} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {85BA609C-9E2C-4062-87BE-7F9F4C86F2D9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2210.6-0\MpCmdRun.exe [1567360 2022-11-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9001AC33-EC72-4929-98A5-D04649F3CD1E} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26154376 2022-11-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {961F468F-780F-4790-B467-96C7A40FCF6E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe (No File)
Task: {9BEBB988-553D-468B-B300-A1D44EBBFA55} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {9DCD7310-46A7-4273-A88D-5AEA1B7F5BE3} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {AA3D325E-DCC1-4D0A-B28A-62D6657F3B1C} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (No File)
Task: {B6BA45B0-D11B-410E-A465-08384C45B337} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26154376 2022-11-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No File)
Task: {CFEE6914-D42F-4E74-8761-10CBD015E2BB} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D28FFBBD-9DDB-43B4-8E61-446ED1DCC502} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D83ECC31-4BD7-488C-BCED-37B7F68B0460} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "b2d0c7f7-d1f2-40a1-ac38-bd0f8f112d1c" --version "6.06.10144" --silent
Task: {E0F1A8E1-45F9-4287-87C8-53938B4967E3} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [66472 2022-03-27] (Microsoft Corporation -> Microsoft)
Task: {E1065125-E0A0-4B09-957D-8D9EE6A1E2DF} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1794834367-1300129054-3649426368-1004 => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe /reporting (No File)
Task: {E1090BBD-F093-43C3-84A4-FB9CDE5FF6F3} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1794834367-1300129054-3649426368-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4189064 2022-11-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {E337B8A4-7A99-41C4-9DB4-1EFF51A5662C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2019-12-23] (Google LLC -> Google LLC)
Task: {E9241550-AB5A-4BE1-AA8B-4B8CF3D48016} - System32\Tasks\Microsoft\Windows\WaaSMedic\MaintenanceWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
Task: {F48E84BC-6903-48B6-BA42-D01550C6E8B8} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {FBFE50B8-A3BF-4D30-8B41-A25740847CA8} - System32\Tasks\Opera scheduled Autoupdate 1578904809 => C:\Users\jdvor\AppData\Local\Programs\Opera\launcher.exe [2569160 2022-11-03] (Opera Norway AS -> Opera Software)
Task: {FD9087C2-F70B-4708-AC72-E85572176D6D} - System32\Tasks\Opera scheduled assistant Autoupdate 1582740249 => C:\Users\jdvor\AppData\Local\Programs\Opera\launcher.exe [2569160 2022-11-03] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\jdvor\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {FDEC7B0C-FDD8-4C9A-A667-29448152854A} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144280 2022-11-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {FDFF510E-D4B6-47A1-B662-32BCEC55EE7C} - System32\Tasks\CCleanerSkipUAC - jdvor => C:\Program Files\CCleaner\CCleaner.exe $(Arg0) (No File)
Task: {FEE3DFE6-B18C-443C-B531-C8F580ABB5BE} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4189064 2022-11-14] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{223920f3-6713-418c-9e92-845feb9c8a25}: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge Profile: C:\Users\jdvor\AppData\Local\Microsoft\Edge\User Data\Default [2022-11-23]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\jdvor\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-11-20]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-11-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-11-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-1794834367-1300129054-3649426368-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\jdvor\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [No File]

Chrome:
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\jdvor\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-11-23]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\jdvor\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2022-11-20]
CHR Extension: (Dokumenty Google offline) - C:\Users\jdvor\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-11-20]
CHR Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\jdvor\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2022-11-20]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\jdvor\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-11-20]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\jdvor\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-11-20]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

Opera:
=======
OPR Profile: C:\Users\jdvor\AppData\Roaming\Opera Software\Opera Stable [2022-11-23]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\jdvor\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-11-21]
OPR Extension: (Opera Wallet) - C:\Users\jdvor\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2022-11-21]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\jdvor\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-11-21]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2022-02-25] (Apple Inc. -> Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12515768 2022-11-17] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.225.1026.0001\FileSyncHelper.exe [3476368 2022-11-14] (Microsoft Corporation -> Microsoft Corporation)
S3 GameforgeClientService; C:\Program Files (x86)\GameforgeClient\gfservice.exe [636480 2022-10-17] (Gameforge 4D GmbH -> )
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.225.1026.0001\OneDriveUpdaterService.exe [3842480 2022-11-14] (Microsoft Corporation -> Microsoft Corporation)
S3 Rockstar Service; D:\Games\Launcher\RockstarService.exe [1347464 2021-03-13] (Rockstar Games, Inc. -> Rockstar Games)
S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [147392 2019-04-30] (Microsoft Corporation -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2210.6-0\NisSrv.exe [3191272 2022-11-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2210.6-0\MsMpEng.exe [133544 2022-11-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [507904 2021-09-13] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [180224 2021-06-05] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [98304 2021-06-05] (Microsoft Corporation) [File not signed]
S3 CH341SER_A64; C:\WINDOWS\System32\Drivers\CH341S64.SYS [78328 2021-08-25] (Microsoft Windows Hardware Compatibility Publisher -> www.winchiphead.com)
S3 FairplayKD; C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [104512 2021-12-14] (Hans Roes -> Multi Theft Auto)
S3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [239648 2022-01-17] (Oracle Corporation -> Oracle Corporation)
R3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2019-04-04] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49616 2022-11-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [469288 2022-11-11] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [95520 2022-11-11] (Microsoft Windows -> Microsoft Corporation)
R3 ysusb_w10_64; C:\WINDOWS\system32\drivers\ysusb_w10_64.sys [180024 2020-01-19] (Yamaha Corporation -> Yamaha Corporation)
S1 amsdk; \??\C:\WINDOWS\system32\drivers\amsdk.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-11-23 15:25 - 2022-11-23 15:25 - 000024794 _____ C:\Users\jdvor\Desktop\FRST.txt
2022-11-23 15:24 - 2022-11-23 15:25 - 000000000 ____D C:\FRST
2022-11-23 15:22 - 2022-11-23 15:22 - 002375680 _____ (Farbar) C:\Users\jdvor\Desktop\FRST64.exe
2022-11-23 14:29 - 2022-11-23 14:30 - 000000000 ____D C:\Users\jdvor\AppData\Roaming\discord
2022-11-23 12:44 - 2022-11-23 12:44 - 000000000 ____D C:\Users\jdvor\AppData\Local\Apple
2022-11-22 13:05 - 2022-11-22 13:05 - 000690554 _____ C:\Users\jdvor\Downloads\IMG_0539.jpeg
2022-11-22 13:05 - 2022-11-22 13:05 - 000672163 _____ C:\Users\jdvor\Downloads\IMG_0534.jpeg
2022-11-22 12:54 - 2022-11-22 12:54 - 000246663 _____ C:\Users\jdvor\Downloads\8443_2 (1).pdf
2022-11-22 12:53 - 2022-11-22 12:53 - 000246593 _____ C:\Users\jdvor\Downloads\8443_2.pdf
2022-11-21 11:02 - 2022-11-21 11:02 - 001100005 _____ C:\Users\jdvor\Downloads\Nová smlouva.zip
2022-11-21 09:55 - 2022-11-21 09:55 - 000012288 ___SH C:\DumpStack.log.tmp
2022-11-21 09:42 - 2022-11-21 09:42 - 000000000 ____D C:\Users\jdvor\AppData\Local\Adobe
2022-11-21 09:37 - 2022-11-21 09:37 - 000031986 _____ C:\WINDOWS\SysWOW64\MTB.txt
2022-11-21 09:37 - 2022-11-21 09:37 - 000000000 _____ C:\WINDOWS\system32\MTB.txt
2022-11-20 20:36 - 2022-11-23 14:31 - 000000000 ____D C:\Users\jdvor\AppData\Local\.IdentityService
2022-11-20 19:44 - 2022-11-21 09:48 - 002642281 _____ C:\WINDOWS\ZAM.krnl.trace
2022-11-20 19:44 - 2022-11-21 09:48 - 000000000 ____D C:\Users\jdvor\AppData\Local\AMSDK
2022-11-20 19:44 - 2022-11-20 19:44 - 000000000 ____D C:\Users\jdvor\AppData\Local\Zemana
2022-11-20 19:39 - 2022-11-21 09:55 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2022-11-20 19:39 - 2022-11-20 19:39 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-11-20 19:39 - 2022-11-20 19:39 - 000003476 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2022-11-20 19:39 - 2022-11-20 19:39 - 000002904 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - jdvor
2022-11-20 19:39 - 2022-11-20 19:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2022-11-20 19:36 - 2022-11-20 19:36 - 000000000 ____D C:\WINDOWS\Panther
2022-11-20 19:32 - 2014-02-13 23:59 - 000024064 _____ C:\WINDOWS\zoek-delete.exe
2022-11-20 16:48 - 2022-11-20 16:48 - 000000000 ____D C:\Users\jdvor\AppData\Local\CEF
2022-11-20 15:40 - 2022-11-20 15:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2022-11-20 15:31 - 2022-11-20 15:31 - 000000000 ____D C:\Program Files\Malwarebytes
2022-11-20 11:59 - 2022-11-20 11:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2022-11-20 11:14 - 2022-11-20 11:14 - 000000000 ____D C:\Program Files (x86)\Microsoft GameInput
2022-11-15 16:50 - 2022-11-15 19:09 - 000000035 _____ C:\Users\jdvor\Desktop\Nový Textový dokument.txt
2022-11-11 18:48 - 2022-11-11 18:48 - 000372736 _____ C:\WINDOWS\system32\hwreqchk.dll
2022-11-11 18:48 - 2022-11-11 18:48 - 000319488 _____ C:\WINDOWS\system32\EsclScan.dll
2022-11-11 18:48 - 2022-11-11 18:48 - 000200704 _____ C:\WINDOWS\system32\EsclProtocol.dll
2022-11-11 18:48 - 2022-11-11 18:48 - 000090112 _____ C:\WINDOWS\system32\SecureBootEncodeUEFI.exe
2022-11-11 18:48 - 2022-11-11 18:48 - 000015461 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-11-11 18:47 - 2022-11-11 18:47 - 000335872 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-11-11 18:47 - 2022-11-11 18:47 - 000172032 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-11-11 18:38 - 2022-11-11 18:38 - 000000000 ___HD C:\$WinREAgent
2022-10-31 19:15 - 2022-11-21 10:02 - 000771248 _____ C:\WINDOWS\system32\perfh019.dat
2022-10-31 19:15 - 2022-11-21 10:02 - 000156860 _____ C:\WINDOWS\system32\perfc019.dat
2022-10-31 19:15 - 2022-10-31 19:15 - 000340720 _____ C:\WINDOWS\system32\perfi019.dat
2022-10-31 19:15 - 2022-10-31 19:15 - 000041686 _____ C:\WINDOWS\system32\perfd019.dat
2022-10-31 19:15 - 2022-10-31 19:15 - 000000000 ____D C:\WINDOWS\SysWOW64\ru
2022-10-31 19:15 - 2022-10-31 19:15 - 000000000 ____D C:\WINDOWS\system32\ru
2022-10-26 18:35 - 2022-10-26 18:35 - 000064143 _____ C:\Users\jdvor\Desktop\kolejkovec.html
2022-10-26 18:35 - 2022-10-26 18:35 - 000000000 ____D C:\Users\jdvor\Desktop\kolejkovec_files

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-11-23 14:55 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-11-23 14:54 - 2021-06-05 13:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-11-23 14:51 - 2019-12-23 19:15 - 000000000 ____D C:\Program Files (x86)\Google
2022-11-23 14:29 - 2019-12-23 19:14 - 000000000 ____D C:\Users\jdvor\AppData\Local\Discord
2022-11-23 13:39 - 2021-06-05 13:10 - 000000000 ___HD C:\Program Files\WindowsApps
2022-11-23 12:59 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2022-11-23 12:50 - 2020-01-27 20:06 - 000000000 ____D C:\Users\jdvor\AppData\Local\CrashDumps
2022-11-23 12:44 - 2019-12-23 19:16 - 000000000 ____D C:\ProgramData\NVIDIA
2022-11-23 12:41 - 2020-06-08 15:27 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-11-23 12:39 - 2021-06-05 13:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-11-22 11:57 - 2021-10-07 18:43 - 000000000 ____D C:\Users\jdvor\AppData\Local\D3DSCache
2022-11-21 17:46 - 2021-10-07 18:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-11-21 10:07 - 2022-02-24 20:31 - 000000000 ____D C:\WINDOWS\system32\Tasks\MEGA
2022-11-21 10:07 - 2021-06-05 13:10 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-11-21 10:02 - 2021-10-07 18:39 - 002644918 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-11-21 10:02 - 2021-06-05 18:20 - 000725068 _____ C:\WINDOWS\system32\perfh005.dat
2022-11-21 10:02 - 2021-06-05 18:20 - 000150740 _____ C:\WINDOWS\system32\perfc005.dat
2022-11-21 10:02 - 2021-06-05 13:09 - 000000000 ____D C:\WINDOWS\INF
2022-11-21 09:55 - 2021-10-07 18:38 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-11-21 09:55 - 2021-10-07 18:29 - 000752768 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-11-21 09:55 - 2021-06-05 13:01 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-11-21 09:53 - 2020-08-02 16:54 - 000000000 ____D C:\Users\jdvor\Documents\Adobe
2022-11-21 09:47 - 2019-12-23 19:16 - 000000000 ____D C:\ProgramData\Packages
2022-11-21 09:47 - 2019-12-23 19:06 - 000000000 ____D C:\Users\jdvor\AppData\Local\Packages
2022-11-21 09:45 - 2022-07-03 11:01 - 000000000 ____D C:\XboxGames
2022-11-21 09:42 - 2019-12-23 19:06 - 000000000 ____D C:\Users\jdvor\AppData\Roaming\Adobe
2022-11-21 09:14 - 2022-08-28 09:06 - 000000000 ____D C:\Users\jdvor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2022-11-20 19:41 - 2020-01-28 17:55 - 000000000 ____D C:\Users\jdvor\AppData\Roaming\TeamViewer
2022-11-20 19:36 - 2021-10-07 17:14 - 000000008 __RSH C:\ProgramData\ntuser.pol
2022-11-20 19:28 - 2022-03-12 09:56 - 000000000 ____D C:\Users\jadvo\AppData\Local\Google
2022-11-20 19:27 - 2021-10-07 18:31 - 000000000 ____D C:\Users\jdvor
2022-11-20 19:27 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2022-11-20 19:27 - 2019-03-19 05:52 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2022-11-20 11:13 - 2022-10-20 19:33 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2022-11-20 11:13 - 2022-10-20 19:33 - 000067064 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2022-11-20 11:13 - 2022-07-03 11:01 - 002815440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2022-11-20 11:13 - 2022-07-03 11:01 - 000460240 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2022-11-20 11:13 - 2022-07-03 11:01 - 000243192 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll
2022-11-20 11:13 - 2022-07-03 11:01 - 000198136 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2022-11-20 11:13 - 2022-07-03 11:01 - 000165368 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2022-11-20 11:13 - 2022-07-03 11:01 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2022-11-17 12:14 - 2022-03-26 19:00 - 000000000 ____D C:\Program Files (x86)\GameforgeClient
2022-11-17 12:14 - 2019-12-31 10:29 - 000000037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Gameforge Client.url
2022-11-17 09:03 - 2022-03-12 09:42 - 000000000 ____D C:\Program Files\Microsoft Office
2022-11-15 10:13 - 2021-10-07 18:38 - 000003640 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-11-15 10:13 - 2021-10-07 18:38 - 000003516 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-11-14 21:16 - 2022-03-13 09:35 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-11-14 21:16 - 2022-03-12 09:47 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-11-14 21:16 - 2022-03-12 09:47 - 000002130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-11-14 21:16 - 2021-12-12 17:02 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1794834367-1300129054-3649426368-1001
2022-11-14 16:56 - 2019-12-27 19:25 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-11-14 16:53 - 2019-12-27 19:25 - 146960040 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-11-14 16:19 - 2021-06-05 13:10 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-11-14 16:19 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-11-14 16:19 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SystemResources
2022-11-14 16:19 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-11-14 16:19 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-11-14 16:19 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-11-14 16:19 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-11-14 16:19 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-11-14 16:19 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\ShellComponents
2022-11-14 16:19 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-11-11 18:55 - 2022-04-14 07:08 - 000000000 ____D C:\Program Files (x86)\dotnet
2022-11-11 18:55 - 2022-03-27 10:09 - 000000000 ____D C:\Program Files\dotnet
2022-11-11 18:47 - 2021-10-07 18:32 - 003107840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-11-11 09:35 - 2019-12-23 19:16 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-11-11 09:35 - 2019-12-23 18:59 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-11-11 04:21 - 2022-07-03 11:01 - 000316880 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameInputRedist.dll
2022-11-11 02:35 - 2022-07-03 11:01 - 000199672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GameInputRedist.dll
2022-11-09 19:33 - 2021-10-07 18:38 - 000004206 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1578904809
2022-11-09 19:33 - 2020-05-22 16:47 - 000001409 _____ C:\Users\jdvor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2022-11-06 22:53 - 2022-08-01 15:21 - 000000000 ____D C:\Users\jdvor\Documents\Soubory Outlooku
2022-11-06 20:17 - 2020-01-26 19:34 - 000000000 ____D C:\Users\jdvor\AppData\Roaming\audacity
2022-11-06 15:33 - 2020-01-25 10:26 - 000000128 _____ C:\Users\jdvor\AppData\Roaming\winscp.rnd
2022-11-01 08:44 - 2019-12-23 19:08 - 000000000 ____D C:\Users\jdvor\AppData\Local\PlaceholderTileLogoFolder
2022-10-31 19:15 - 2021-10-07 19:19 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2022-10-31 19:15 - 2021-06-05 18:28 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2022-10-31 19:15 - 2021-06-05 18:28 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2022-10-31 19:15 - 2021-06-05 18:20 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2022-10-31 19:15 - 2021-06-05 18:20 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2022-10-31 19:15 - 2021-06-05 18:20 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2022-10-31 19:15 - 2021-06-05 18:20 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2022-10-31 19:15 - 2021-06-05 18:20 - 000000000 ____D C:\WINDOWS\system32\winrm
2022-10-31 19:15 - 2021-06-05 18:20 - 000000000 ____D C:\WINDOWS\system32\WCN
2022-10-31 19:15 - 2021-06-05 18:20 - 000000000 ____D C:\WINDOWS\system32\slmgr
2022-10-31 19:15 - 2021-06-05 18:20 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ___SD C:\WINDOWS\system32\F12
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ___SD C:\WINDOWS\system32\dsc
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\MUI
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\Com
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\IME
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\Program Files\Windows Defender
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\Program Files\Common Files\System
2022-10-31 19:15 - 2021-06-05 13:10 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2022-10-31 19:15 - 2021-06-05 13:01 - 000000000 ____D C:\WINDOWS\servicing
2022-10-31 19:12 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\OCR

==================== Files in the root of some directories ========

2020-01-25 10:26 - 2022-11-06 15:33 - 000000128 _____ () C:\Users\jdvor\AppData\Roaming\winscp.rnd
2019-12-23 19:30 - 2022-04-10 14:56 - 000000128 _____ () C:\Users\jdvor\AppData\Local\PUTTY.RND
2021-03-15 15:45 - 2021-03-15 15:45 - 000004756 _____ () C:\Users\jdvor\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================
http://screenshare.cz/


Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: CommonCrawl [Bot], OTAS a 7 hostů