Defender nedokáže preskenovať datový disk E

[7777]

Mám na počítači štyri disky, a defender vie skenovať len disk c, nedokáže ale preskenovať disky E, F, B. Menil som písmena diskov. Už nespočet krát som musel reinštalovať windows kvôli tomu, že sa mi počas officialnej aktualizácie stiahne aj vírus. Ktorý mi zablokuje prihlásenie na windows a nepomáhajú ani príkazy v cmd. Systém prestane brať heslo a ja ho musím reinštalovať. Naposledy sa mi na E stiahol ramsover.Log z Frst: Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-05-2025
Ran by fk777 (administrator) on DESKTOP-QRCKSAL (ASUS All Series) (06-05-2025 15:10:25)
Running from E:\Download\FRST64.exe
Loaded Profiles: fk777
Platform: Microsoft Windows 10 Home Version 22H2 19045.3803 (X64) Language: Slovenčina (Slovensko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(DriverStore\FileRepository\u0360470.inf_amd64_35c64671e7fac064\B360357\atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0360470.inf_amd64_35c64671e7fac064\B360357\atieclxx.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12>
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0360470.inf_amd64_35c64671e7fac064\B360357\atiesrxx.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\NisSrv.exe
(sihost.exe ->) (Skype Software Sarl -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Skype Software Sarl -> ) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(svchost.exe ->) (Skype Software Sarl -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeApp.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8466136 2025-05-05] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKU\S-1-5-21-3091486019-1904778025-2147267441-1001\...\Run: [MicrosoftEdgeAutoLaunch_E9FD2D5F6DF0E93162A4EC395E128045] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4045880 2025-05-01] (Microsoft Corporation -> Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {9ECA5952-1D9E-4FE5-B9C7-998D9AC6D8E6} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [973768 2023-08-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {30CAF4E5-9AB6-41C9-9241-594EF7B8F337} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [973768 2023-08-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {78068AD4-5726-4285-BB0D-7C2332A5AAFC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-05-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BB1AF54C-8DBB-4057-83DC-3302CE95EA13} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-05-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {81F46904-6386-42F2-99E4-1BB6688A2EEA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-05-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {06DC00A0-5712-4D2F-AA3D-5917CF7B1EB3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-05-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B956FF2B-F62B-4261-9873-DEAA1DE5DA29} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34880 2025-04-30] (Mozilla Corporation -> Mozilla Foundation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{56499627-7cd8-40a4-8597-b10a66848cdb}: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge Profile: C:\Users\fk777\AppData\Local\Microsoft\Edge\User Data\Default [2025-05-06]
Edge DownloadDir: Default -> E:\Download
Edge HomePage: Default -> hxxp://bing.sk/
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\fk777\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-05-05]
Edge Extension: (Edge relevant text changes) - C:\Users\fk777\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-05-05]

FireFox:
========
FF DefaultProfile: 7sepb0ed.default
FF ProfilePath: C:\Users\fk777\AppData\Roaming\Mozilla\Firefox\Profiles\7sepb0ed.default [2025-05-05]
FF ProfilePath: C:\Users\fk777\AppData\Roaming\Mozilla\Firefox\Profiles\w609pvr3.default-release [2025-05-06]
FF DownloadDir: E:\Download
FF Extension: (Language: Slovenčina (Slovak)) - C:\Users\fk777\AppData\Roaming\Mozilla\Firefox\Profiles\w609pvr3.default-release\Extensions\langpack-sk@firefox.mozilla.org.xpi [2025-05-05]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2025-05-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL [2025-05-05] (Microsoft Corporation -> Microsoft Corporation)

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3054128 2023-08-16] (Microsoft Corporation -> Microsoft Corporation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.25030.2-0\MpDefenderCoreService.exe [2009608 2025-05-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.25030.2-0\NisSrv.exe [4538400 2025-05-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.25030.2-0\MsMpEng.exe [278320 2025-05-06] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15368 2025-05-05] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [331168 2025-05-06] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [20016 2025-05-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [605576 2025-05-06] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [100744 2025-05-06] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-05-06 15:10 - 2025-05-06 15:10 - 000000000 ____D C:\FRST
2025-05-06 12:08 - 2025-05-06 12:08 - 000000000 ___HD C:\$WinREAgent
2025-05-06 12:08 - 2025-05-06 12:08 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2025-05-06 12:06 - 2025-05-06 12:07 - 000000000 ____D C:\Windows\system32\MRT
2025-05-06 12:06 - 2025-05-06 12:06 - 000000000 ____D C:\Program Files\RUXIM
2025-05-06 12:04 - 2025-05-06 12:04 - 000000000 ____D C:\Users\fk777\AppData\Local\PlaceholderTileLogoFolder
2025-05-06 04:34 - 2025-05-06 04:34 - 000000000 ____D C:\Users\fk777\AppData\Local\Backup
2025-05-05 23:08 - 2025-05-05 23:08 - 000000877 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2025-05-05 23:08 - 2025-05-05 23:08 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Notepad++
2025-05-05 23:08 - 2025-05-05 23:08 - 000000000 ____D C:\Program Files\Notepad++
2025-05-05 23:06 - 2025-05-05 23:06 - 000000000 ____D C:\Users\fk777\AppData\Roaming\vlc
2025-05-05 23:06 - 2025-05-05 23:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2025-05-05 23:06 - 2025-05-05 23:06 - 000000000 ____D C:\Program Files\VideoLAN
2025-05-05 23:03 - 2025-05-05 23:03 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2025-05-05 23:03 - 2025-05-05 23:03 - 000000000 ____D C:\Users\fk777\AppData\Roaming\IrfanView
2025-05-05 23:03 - 2025-05-05 23:03 - 000000000 ____D C:\Program Files\IrfanView
2025-05-05 23:01 - 2025-05-05 23:01 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Microsoft\UProof
2025-05-05 23:01 - 2025-05-05 23:01 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Microsoft\Excel
2025-05-05 23:01 - 2025-05-05 23:01 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Microsoft\AddIns
2025-05-05 23:00 - 2025-05-05 23:00 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.15
2025-05-05 23:00 - 2025-05-05 23:00 - 000000000 ____D C:\Program Files (x86)\OpenOffice 4
2025-05-05 22:58 - 2025-05-05 22:58 - 000000000 ____D C:\Users\fk777\Desktop\OpenOffice 4.1.15 (sk) Installation Files
2025-05-05 22:49 - 2025-05-05 22:49 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-05-05 22:47 - 2025-05-05 23:01 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Microsoft\Office
2025-05-05 22:47 - 2025-05-05 22:47 - 000000000 ____D C:\Program Files\Microsoft Office
2025-05-05 22:46 - 2025-05-05 22:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2025-05-05 22:46 - 2025-05-05 22:46 - 000000000 ____D C:\Program Files\Microsoft Office 15
2025-05-05 22:33 - 2025-05-05 22:33 - 000000000 ____D C:\Users\fk777\Intel
2025-05-05 22:25 - 2025-05-05 22:25 - 000000000 ____D C:\Users\fk777\Downloads\ASUS_ProbeII_Sense_Win7-8-81-10_Vv1010
2025-05-05 22:25 - 2025-05-05 22:25 - 000000000 ____D C:\Program Files\ASUS
2025-05-05 22:25 - 2025-05-05 22:25 - 000000000 ____D C:\Program Files (x86)\ASUS
2025-05-05 22:24 - 2025-05-05 22:24 - 000000000 ___HD C:\Program Files (x86)\Temp
2025-05-05 22:24 - 2025-05-05 22:24 - 000000000 ____H C:\ProgramData\DP45977C.lfl
2025-05-05 22:24 - 2025-05-05 22:24 - 000000000 ____D C:\Windows\SysWOW64\RTCOM
2025-05-05 22:24 - 2025-05-05 22:24 - 000000000 ____D C:\Program Files\Realtek
2025-05-05 22:24 - 2025-05-05 22:23 - 014048512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 012975360 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 012834736 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO4064.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 007164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 007087448 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 006242576 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 005615552 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 005234952 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 004467928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2025-05-05 22:24 - 2025-05-05 22:23 - 003262184 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 003218800 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 003182104 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 002907864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 002846424 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 002825944 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 002789808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO7064.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 002702040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2025-05-05 22:24 - 2025-05-05 22:23 - 002531544 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 002162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 002101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 002041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001933584 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001739992 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001559744 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001499984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001413776 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001360640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001316056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 001104040 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000995120 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000979280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000943784 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000922880 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000856992 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000837776 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000734376 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000654480 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000631000 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000560328 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000544400 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.DLL
2025-05-05 22:24 - 2025-05-05 22:23 - 000518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000454288 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000435344 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000369296 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000336144 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000329360 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000329360 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000328816 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000284944 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000250536 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000213432 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaemaxapo64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000168816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000109848 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000096568 _____ C:\Windows\system32\audioLibVc.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2025-05-05 22:24 - 2025-05-05 22:23 - 000003008 _____ C:\Windows\system32\Drivers\DTSU2P.DAT
2025-05-05 22:23 - 2025-05-05 22:23 - 000000000 ____D C:\Users\fk777\Downloads\Realtek_Audio_Win10_V6_0_1_7503
2025-05-05 22:23 - 2025-05-05 21:25 - 000000000 ____D C:\Windows\Panther
2025-05-05 22:22 - 2025-05-05 22:24 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2025-05-05 22:22 - 2025-05-05 22:24 - 000000000 ____D C:\Program Files (x86)\Realtek
2025-05-05 22:22 - 2025-05-05 22:22 - 000886528 _____ (Realtek ) C:\Windows\system32\Drivers\rt640x64.sys
2025-05-05 22:22 - 2025-05-05 22:22 - 000082544 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2025-05-05 22:22 - 2025-05-05 22:22 - 000000000 ____D C:\Users\fk777\Downloads\Realtek_LAN_Win10_V1015052015
2025-05-05 22:20 - 2025-05-05 22:20 - 000000000 ____D C:\ProgramData\Package Cache
2025-05-05 22:20 - 2025-05-05 22:20 - 000000000 ____D C:\Program Files\Intel
2025-05-05 22:19 - 2025-05-05 22:19 - 000001769 _____ C:\Windows\Language_trs.ini
2025-05-05 22:19 - 2025-05-05 22:19 - 000000000 ____D C:\Users\fk777\Downloads\Intel_Chipset_10117
2025-05-05 22:18 - 2025-05-05 22:18 - 269846342 _____ C:\Users\fk777\Downloads\Realtek_Audio_Win10_V6_0_1_7503.zip
2025-05-05 22:18 - 2025-05-05 22:18 - 053225736 _____ C:\Users\fk777\Downloads\ASUS_ProbeII_Sense_Win7-8-81-10_Vv1010.zip
2025-05-05 22:18 - 2025-05-05 22:18 - 013600728 _____ C:\Users\fk777\Downloads\Realtek_LAN_Win10_V1015052015.zip
2025-05-05 22:18 - 2025-05-05 22:18 - 003355198 _____ C:\Users\fk777\Downloads\Intel_Chipset_10117.zip
2025-05-05 22:12 - 2025-05-05 22:12 - 000000656 _____ C:\Users\fk777\Desktop\Nový textový dokument.txt
2025-05-05 22:11 - 2025-05-05 22:20 - 000000000 ____D C:\Users\fk777\AppData\Local\GHISLER
2025-05-05 22:10 - 2025-05-05 22:11 - 000000000 ____D C:\Users\fk777\AppData\Roaming\GHISLER
2025-05-05 22:10 - 2025-05-05 22:10 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2025-05-05 22:10 - 2025-05-05 22:10 - 000000000 ____D C:\Program Files\totalcmd
2025-05-05 22:09 - 2025-05-05 22:10 - 007023808 _____ (Ghisler Software GmbH) C:\Users\fk777\Downloads\tcmd1151x64.exe
2025-05-05 22:06 - 2025-05-06 14:44 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-05-05 22:06 - 2025-05-05 22:06 - 000002038 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Private Browsing.lnk
2025-05-05 22:06 - 2025-05-05 22:06 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-05-05 22:06 - 2025-05-05 22:06 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2025-05-05 22:06 - 2025-05-05 22:06 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Mozilla
2025-05-05 22:06 - 2025-05-05 22:06 - 000000000 ____D C:\Users\fk777\AppData\Local\Mozilla
2025-05-05 22:06 - 2025-05-05 22:06 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-05-05 22:06 - 2025-05-05 22:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-05-05 22:05 - 2025-05-05 22:05 - 000000000 ____D C:\Users\fk777\AppData\Local\Comms
2025-05-05 21:57 - 2025-05-06 14:43 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Microsoft\Spelling
2025-05-05 21:55 - 2025-05-05 21:55 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Microsoft\MMC
2025-05-05 21:50 - 2025-05-05 21:50 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3091486019-1904778025-2147267441-1001
2025-05-05 21:50 - 2025-05-05 21:50 - 000003380 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3091486019-1904778025-2147267441-1001
2025-05-05 21:50 - 2025-05-05 21:50 - 000000000 ___RD C:\Users\fk777\OneDrive
2025-05-05 21:50 - 2025-05-05 21:50 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2025-05-05 21:48 - 2025-05-06 12:04 - 000000000 ____D C:\Users\fk777\AppData\Local\Packages
2025-05-05 21:48 - 2025-05-05 23:08 - 000000000 ____D C:\Users\fk777\AppData\Local\D3DSCache
2025-05-05 21:48 - 2025-05-05 22:20 - 000000000 ____D C:\Users\fk777\AppData\Local\ConnectedDevicesPlatform
2025-05-05 21:48 - 2025-05-05 22:05 - 000000000 ____D C:\ProgramData\Packages
2025-05-05 21:48 - 2025-05-05 21:49 - 000000000 __RHD C:\Users\Public\AccountPictures
2025-05-05 21:48 - 2025-05-05 21:48 - 000000000 ___SD C:\Users\fk777\AppData\Roaming\Microsoft\Crypto
2025-05-05 21:48 - 2025-05-05 21:48 - 000000000 ___RD C:\Users\fk777\3D Objects
2025-05-05 21:48 - 2025-05-05 21:48 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Microsoft\Vault
2025-05-05 21:48 - 2025-05-05 21:48 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Microsoft\Network
2025-05-05 21:48 - 2025-05-05 21:48 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Adobe
2025-05-05 21:48 - 2025-05-05 21:48 - 000000000 ____D C:\Users\fk777\AppData\LocalLow\AMD
2025-05-05 21:48 - 2025-05-05 21:48 - 000000000 ____D C:\Users\fk777\AppData\Local\VirtualStore
2025-05-05 21:48 - 2025-05-05 21:48 - 000000000 ____D C:\Users\fk777\AppData\Local\Publishers
2025-05-05 21:48 - 2025-05-05 21:48 - 000000000 ____D C:\Users\fk777\AppData\Local\AMD
2025-05-05 21:44 - 2025-05-05 22:33 - 000000000 ____D C:\Users\fk777
2025-05-05 21:44 - 2025-05-05 21:50 - 000002355 _____ C:\Users\fk777\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-05-05 21:44 - 2025-05-05 21:48 - 000000000 ____D C:\Users\fk777\AppData\Roaming\Microsoft\Windows
2025-05-05 21:44 - 2025-05-05 21:44 - 000000020 ___SH C:\Users\fk777\ntuser.ini
2025-05-05 21:44 - 2025-05-05 21:44 - 000000000 ___SD C:\Users\fk777\AppData\Roaming\Microsoft\SystemCertificates
2025-05-05 21:44 - 2025-05-05 21:44 - 000000000 ___SD C:\Users\fk777\AppData\Roaming\Microsoft\Protect
2025-05-05 21:44 - 2025-05-05 21:44 - 000000000 ___SD C:\Users\fk777\AppData\Roaming\Microsoft\Credentials
2025-05-05 21:36 - 2025-05-05 22:28 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2025-05-05 21:36 - 2025-05-05 21:36 - 000000000 ____D C:\Windows\system32\AMD
2025-05-05 21:36 - 2025-05-05 21:36 - 000000000 ____D C:\Program Files\AMD
2025-05-05 21:36 - 2020-10-29 13:33 - 001783920 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2025-05-05 21:36 - 2020-10-29 13:33 - 001783920 _____ C:\Windows\system32\vulkaninfo.exe
2025-05-05 21:36 - 2020-10-29 13:33 - 001374320 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-05-05 21:36 - 2020-10-29 13:33 - 001374320 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2025-05-05 21:36 - 2020-10-29 13:33 - 001085360 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2025-05-05 21:36 - 2020-10-29 13:33 - 001085360 _____ C:\Windows\system32\vulkan-1.dll
2025-05-05 21:36 - 2020-10-29 13:33 - 000944208 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2025-05-05 21:36 - 2020-10-29 13:33 - 000944208 _____ C:\Windows\SysWOW64\vulkan-1.dll
2025-05-05 21:36 - 2020-10-29 13:33 - 000736880 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Rapidfire64.dll
2025-05-05 21:36 - 2020-10-29 13:33 - 000046704 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\RapidFireServer64.dll
2025-05-05 21:36 - 2020-10-29 13:33 - 000043632 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\RapidFireServer.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 064809072 _____ C:\Windows\system32\amd_comgr.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 053684848 _____ C:\Windows\SysWOW64\amd_comgr32.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 004630640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amfrt64.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 004141168 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amfrt32.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 001774192 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 001341552 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 001341552 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000760432 _____ (AMD) C:\Windows\system32\atieclxx.exe
2025-05-05 21:36 - 2020-10-29 13:32 - 000621168 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\Rapidfire.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000496752 _____ C:\Windows\system32\GameManager64.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000493168 _____ C:\Windows\system32\dgtrayicon.exe
2025-05-05 21:36 - 2020-10-29 13:32 - 000468592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000456304 _____ C:\Windows\system32\atieah64.exe
2025-05-05 21:36 - 2020-10-29 13:32 - 000432752 _____ C:\Windows\system32\EEURestart.exe
2025-05-05 21:36 - 2020-10-29 13:32 - 000380016 _____ C:\Windows\SysWOW64\GameManager32.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000351856 _____ C:\Windows\SysWOW64\atieah32.exe
2025-05-05 21:36 - 2020-10-29 13:32 - 000339568 _____ C:\Windows\system32\clinfo.exe
2025-05-05 21:36 - 2020-10-29 13:32 - 000245360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000213104 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000186992 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000182392 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000167024 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000166512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000158656 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000156784 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000142448 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000140912 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000135792 _____ (AMD) C:\Windows\system32\atimuixx.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000134768 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000125552 _____ C:\Windows\system32\atidxx64.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000122480 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdxc64.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000120432 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000107632 _____ C:\Windows\SysWOW64\atidxx32.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000107120 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdxc32.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000090736 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mcl64.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000075376 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mcl32.dll
2025-05-05 21:36 - 2020-10-29 13:32 - 000070256 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ati2erec.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 071030384 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdhip64.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 001686016 _____ (AMD) C:\Windows\system32\amf-mft-mjpeg-decoder64.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 001365368 _____ (AMD) C:\Windows\SysWOW64\amf-mft-mjpeg-decoder32.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000941168 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000768624 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000553584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmcl64.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000546800 _____ C:\Windows\system32\amdmiracast.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000489584 _____ C:\Windows\system32\amdgfxinfo64.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000466544 _____ C:\Windows\system32\amdlogum.exe
2025-05-05 21:36 - 2020-10-29 13:31 - 000383600 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmcl32.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000380016 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000198312 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdihk64.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000167400 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdihk32.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000135928 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000130232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000130232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000120264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000108248 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2025-05-05 21:36 - 2020-10-29 13:31 - 000108248 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2025-05-05 21:36 - 2020-10-29 12:29 - 000154384 _____ C:\Windows\system32\samu_krnl_ci.sbin
2025-05-05 21:36 - 2020-10-29 12:29 - 000138832 _____ C:\Windows\system32\samu_krnl_isv_ci.sbin
2025-05-05 21:36 - 2020-10-29 12:29 - 000125488 _____ C:\Windows\system32\kapp_ci.sbin
2025-05-05 21:36 - 2020-10-29 12:29 - 000121168 _____ C:\Windows\system32\kapp_si.sbin
2025-05-05 21:30 - 2025-05-05 21:37 - 000795738 _____ C:\Windows\system32\PerfStringBackup.INI
2025-05-05 21:25 - 2025-05-05 21:25 - 000000000 _SHDL C:\Documents and Settings
2025-05-05 21:24 - 2025-05-06 14:42 - 000000000 ____D C:\Windows\system32\SleepStudy
2025-05-05 21:24 - 2025-05-06 04:36 - 000000000 ____D C:\Windows\system32\Drivers\wd
2025-05-05 21:24 - 2025-05-06 04:25 - 000344744 _____ C:\Windows\system32\FNTCACHE.DAT
2025-05-05 21:24 - 2025-05-06 04:25 - 000008192 ___SH C:\DumpStack.log.tmp
2025-05-05 21:24 - 2025-05-06 04:25 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2025-05-05 21:24 - 2025-05-05 21:58 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-05-05 21:24 - 2025-05-05 21:58 - 000002282 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2025-05-05 21:24 - 2025-05-05 21:57 - 000003632 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-05-05 21:24 - 2025-05-05 21:57 - 000003508 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-05-05 21:24 - 2025-05-05 21:24 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2025-05-05 21:24 - 2025-05-05 21:24 - 000000000 ____D C:\Windows\ServiceProfiles

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-05-06 12:19 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2025-05-06 12:18 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\servicing
2025-05-06 12:18 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2025-05-06 12:04 - 2023-12-04 04:46 - 000000000 ____D C:\Windows\SystemTemp
2025-05-06 12:04 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-05-06 12:04 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-05-06 04:36 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2025-05-06 04:28 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\appcompat
2025-05-06 04:28 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2025-05-06 04:27 - 2019-12-07 11:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2025-05-05 22:58 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-05-05 22:28 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2025-05-05 22:25 - 2015-05-14 14:47 - 002358280 _____ (Microsoft Corporation) C:\Windows\system32\WudfUpdate_01011.dll
2025-05-05 22:23 - 2019-12-07 11:14 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2025-05-05 22:04 - 2019-12-07 16:38 - 000000000 ____D C:\Windows\OCR
2025-05-05 22:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState
2025-05-05 21:48 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog
2025-05-05 21:48 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2025-05-05 21:44 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioDatabase
2025-05-05 21:26 - 2019-12-07 16:37 - 000000000 ____D C:\Windows\system32\FxsTmp
2025-05-05 21:26 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\spool
2025-05-05 21:26 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\USOPrivate

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================



Log z additon: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-05-2025
Ran by fk777 (06-05-2025 15:12:40)
Running from E:\Download
Microsoft Windows 10 Home Version 22H2 19045.3803 (X64) (2025-05-05 19:26:04)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3091486019-1904778025-2147267441-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3091486019-1904778025-2147267441-503 - Limited - Disabled)
fk777 (S-1-5-21-3091486019-1904778025-2147267441-1001 - Administrator - Enabled) => C:\Users\fk777
Guest (S-1-5-21-3091486019-1904778025-2147267441-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3091486019-1904778025-2147267441-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Intel(R) Chipset Device Software (HKLM\...\{8C91A5EB-2C62-4A6D-8802-CC79FD2ED390}) (Version: 10.1.1.7 - Intel Corporation) Hidden
Intel® Chipset Device Software (HKLM-x32\...\{60c073df-e736-4210-9c3a-5fc2b651cef3}) (Version: 10.1.1.7 - Intel(R) Corporation) Hidden
IrfanView 4.70 (64-bit) (HKLM\...\IrfanView64) (Version: 4.70 - Irfan Skiljan)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 136.0.3240.50 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 136.0.3240.50 - Microsoft Corporation) Hidden
Microsoft Office 2013 pre študentov a domácnosti - sk-sk (HKLM\...\HomeStudentRetail - sk-sk) (Version: 15.0.5603.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3091486019-1904778025-2147267441-1001\...\OneDriveSetup.exe) (Version: 21.220.1024.0005 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox (x64 en-US) (HKLM\...\Mozilla Firefox 138.0.1 (x64 en-US)) (Version: 138.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 138.0.1 - Mozilla)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.8.1 - Notepad++ Team)
Office 15 Click-to-Run Extensibility Component (HKLM\...\{90150000-008C-0000-1000-0000000FF1CE}) (Version: 15.0.5603.1000 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-007E-0000-1000-0000000FF1CE}) (Version: 15.0.5603.1000 - Microsoft Corporation) Hidden
OpenOffice 4.1.15 (HKLM-x32\...\{7F5C13CC-5648-4928-90AC-D5D9146A6BFB}) (Version: 4.115.9813 - Apache Software Foundation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7503 - Realtek Semiconductor Corp.)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.51 - Ghisler Software GmbH)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{85C69797-7336-4E83-8D97-32A7C8465A3B}) (Version: 8.94.0.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)

Packages:
=========
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2025-05-05] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe [2025-05-05] (Microsoft Studios) [MS Ad]
MSN Počasie -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe [2025-05-05] (Microsoft Corporation) [MS Ad]
Pošta a kalendár -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2025-05-05] (Microsoft Corporation) [MS Ad]
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c [2025-05-05] (Skype)

==================== Custom CLSID (Whitelisted): ==============

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2025-05-05] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2025-05-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2025-05-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2025-05-05] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 11:14 - 2019-12-07 11:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3091486019-1904778025-2147267441-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek PCIe GBE Family Controller -> rt640x64.sys

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{AD803D7F-CA2F-4561-901F-35C9B8B5A6D0}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B9E89624-5E0D-44C9-87E5-AD50D92A561B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{656E8CB4-0281-4F4E-A303-D43837C58B1D}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.50\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

05-05-2025 21:34:10 Inštalátor modulov systému Windows

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (05/05/2025 10:42:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program drvinst.exe version 10.0.19041.3758 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 6a0

Start Time: 01dbbdfd9bd03d85

Termination Time: 4

Application Path: C:\Windows\System32\drvinst.exe

Report Id: 79c2654b-ee11-4d11-a847-42b9b3c35076

Faulting package full name:

Faulting package-relative application ID:

Hang type: Unknown

Error: (05/05/2025 10:37:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program drvinst.exe version 10.0.19041.3758 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 184c

Start Time: 01dbbdfcffb76a2d

Termination Time: 5

Application Path: C:\Windows\System32\drvinst.exe

Report Id: 4be7fd25-63ec-4cd7-80c6-45cfe26c12df

Faulting package full name:

Faulting package-relative application ID:

Hang type: Unknown

Error: (05/05/2025 10:33:14 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program drvinst.exe version 10.0.19041.3758 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: fc8

Start Time: 01dbbdfc5c68b866

Termination Time: 5

Application Path: C:\Windows\System32\drvinst.exe

Report Id: a8f27ecb-a152-416a-bf2f-14b449f3a809

Faulting package full name:

Faulting package-relative application ID:

Hang type: Unknown

Error: (05/05/2025 09:28:02 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error while updating Windows Defender status to SECURITY_PRODUCT_STATE_ON.

Error: (05/05/2025 09:25:55 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Službe Cryptographic Services sa nepodarilo inicializovať databázu katalógu. Chyba ESENT: -1409.


System errors:
=============
Error: (05/06/2025 04:25:35 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 23:09:09 on ‎5. ‎5. ‎2025 was unexpected.

Error: (05/06/2025 04:25:26 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 3221225684A fatal error occurred processing the restoration data.

Error: (05/05/2025 10:28:51 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba Device Install Service sa po prijatí ovládacieho príkazu pred vypnutím nevypla správne.

Error: (05/05/2025 10:20:25 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-QRCKSAL)
Description: The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout.

Error: (05/05/2025 10:20:25 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-QRCKSAL)
Description: The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout.

Error: (05/05/2025 10:20:25 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-QRCKSAL)
Description: The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout.

Error: (05/05/2025 10:19:10 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-QRCKSAL)
Description: The server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter did not register with DCOM within the required timeout.

Error: (05/05/2025 09:34:40 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Zlyhanie inštalácie: Systému Windows sa nepodarilo nainštalovať nasledujúcu aktualizáciu. Vyskytla sa chyba 0x8024200b: 2022-11, aktualizácia pre Windows 10 Version 22H2 pre systémy s procesorom typu x64 (KB5020683).


Windows Defender:
================
Date: 2025-05-06 14:42:55
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Custom Scan

Date: 2025-05-06 04:36:02
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Custom Scan

Date: 2025-05-06 04:34:20
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Full Scan

Date: 2025-05-05 23:06:53
Description:
C:\Program Files\VideoLAN\VLC\vlc.exe has been blocked from modifying %userprofile%\Documents by Controlled Folder Access.
Detection time: 2025-05-05T21:06:53.445Z
Path: %userprofile%\Documents
Process Name: C:\Program Files\VideoLAN\VLC\vlc.exe
Security intelligence Version: 1.303.25.0
Engine Version: 1.1.16400.2
Product Version: 4.18.1909.6

Date: 2025-05-05 23:06:53
Description:
E:\Download\vlc-3.0.21-win64.exe has been blocked from modifying %common_desktop%\ by Controlled Folder Access.
Detection time: 2025-05-05T21:06:53.020Z
Path: %common_desktop%\
Process Name: E:\Download\vlc-3.0.21-win64.exe
Security intelligence Version: 1.303.25.0
Engine Version: 1.1.16400.2
Product Version: 4.18.1909.6

==================== Memory info ===========================

BIOS: American Megatrends Inc. 1402 11/05/2014
Motherboard: ASUSTeK COMPUTER INC. Z87-K
Processor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Percentage of memory in use: 48%
Total physical RAM: 8129.98 MB
Available physical RAM: 4221.13 MB
Total Virtual: 10049.98 MB
Available Virtual: 4476.49 MB

==================== Drives ================================

Drive b: () (Fixed) (Total:119.23 GB) (Free:119.13 GB) (Model: P3-128) NTFS
Drive c: () (Fixed) (Total:223.46 GB) (Free:188.43 GB) (Model: KINGSTON SA400S37240G) NTFS
Drive e: (Nový zväzok) (Fixed) (Total:931.51 GB) (Free:388.03 GB) (Model: WDC WD10EZEX-08M2NA0) NTFS ==>[system with boot components (obtained from drive)]
Drive f: () (Fixed) (Total:930.26 GB) (Free:929.28 GB) (Model: WDC WD10SPZX-24Z10T0) NTFS

\\?\Volume{44a5ccae-8c3d-48ab-bdf2-b3d82a94cd6e}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 223.6 GB) (Disk ID: DFC15537)

Partition: GPT.

==========================================================
Disk: 1 (Size: 119.2 GB) (Disk ID: 4560E365)

Partition: GPT.

==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 22A29EFF)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 3 (Size: 931.5 GB) (Disk ID: C75CE47C)

Partition: GPT.

==================== End of Addition.txt =======================

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
C:\ProgramData\DP45977C.lfl

EmptyTemp:
End

Uložte do E:\Download jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[7777]

Fix result of Farbar Recovery Scan Tool (x64) Version: 06-05-2025
Ran by fk777 (06-05-2025 21:55:59) Run:1
Running from E:\Download
Loaded Profiles: fk777
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
C:\ProgramData\DP45977C.lfl

EmptyTemp:
End
*****************

Processes closed successfully.
C:\ProgramData\DP45977C.lfl => moved successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 24410689 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 5970267 B
Edge => 0 B
Firefox => 400057516 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 2516 B
fk777 => 143920813 B

RecycleBin => 0 B
EmptyTemp: => 549 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 21:56:12 ====

[Rudy]

Smazáno. Nastala nějaká změna?

[7777]

Nie. Nenastala. Zmenil som niektoré nastavenia v registroch lebo tam komplet chýbali hodnoty, zmenil som prázdne hodnoty pod windows defender services na 0. A onedrive začalo fungovať i windows defender ale E skenovať nedokáže. Spustil som teda externú ulitku Microsoft Safety Scaner z usb kľuču a našlo 6x trojského koňa ale problém je že sa v polovici zasekol. Skenovalo asi 14 hodín ale zasekol sa na disku E.

[Rudy]

Zkuste spustit tuto utilitu: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 . Stáhněte, spusťte, nechte pracovat a po skončení akce smažte vše, co najde. Pozor, popis v odkazu platí pro starší verzi. Pokud by byl nějaký problé, spusťte v nouz. režimu.

[7777]

Program sa zastavil na zip a exe súborch z divnou príponou Zone.Indentifier, Čo to je?

[Rudy]

Program sa zastavil na zip a exe súborch z divnou príponou Zone.Indentifier, Čo to je?

Jde o alternativní datový tok: Zone.Indentifier : https://www-digital--detective-net.tran ... _tr_pto=sc . Může, ale i nemusí být škodlivý. Dělá ti v nouz režimu?

[7777]

Nudzový režim nezapínam, problém je že dva krát som ho zapol a dva razy sa nedalo prihlásiť späť do windows a nešlo už ani prepnuť späť do normálneho režimu.

[Rudy]

Nudzový režim nezapínam, problém je že dva krát som ho zapol a dva razy sa nedalo prihlásiť späť do windows a nešlo už ani prepnuť späť do normálneho režimu.

To ovšem není žádný důvod to nevyzkoušet. Pokud máte systém v pořádku, neměl by být problém pžejít do nouz. režimu. Zde je videonávod: https://www.youtube.com/watch?v=sek_6-0tgHI . Bez toho nezjistíme, zda je problém opravdu v tom souboru, nebo někde jinde.

[7777]

Skúsil som núdzový režim, funguje ale už nefunguje pod ním kasperka. Ale funguje zasa Microsoft scaner a tak som dal scanovať, všetko čo obsahuje príponu Zone.Indentifier nedokáže zoskanovať a na tejto prípone sa zasekne. ČO z tým robiť.

[Rudy]

Tohle by mělo fzungovat: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 . Je to Kaspersky skener, který se neinstaluje. Jen se stáhne a spustí. Funguje i v nouzáku.

[7777]

Nefunguje to! Už som ho skúšal v núdzovom režime. Akonáhle má niečo príponu Zone.Indentifier process sa zasekne a stojí na jednom súbore z takou príponou. Najhoršie je že túto príponu nemá len málo súborov na disku, majú ju exe, xlsx, docx súbroy. Exe by som oželel ale xlsx a docx tie musím archivovať, ak o nich prídem prídem i o prácu.

[JaRon]

Ahoj,
kedze je tu nezanedbatelna sanca, ze toto je dosledok ransomware doporucujem sa obratit
na neslape.cz. Ak sa vsak potvrdi ransomware moze byt uz neskoro - ale nemusi.

[7777]

Tak je po všetkom! Vírus sa nedal odstrániť pomocou bootovateľných medii ani v núdzovom režime. Z Neslapej.cz mi povedali by som stiahol, ich aplikáciu a nechal pustený internet že oni pomôžu. Od Piatku po Nedeľu som čakal, že sa môjho počítača niekto ujme. Nedeľu 11.5.2025 o 12.00 zrazu všetko začalo fungovať, ale ja som zistil že mi z počítača i notebooku zmizlo 500 GB firemných dat. Keby som to bol vedel že sa mi z neslepej.cz neozvú, nikdy nenechám cez víkend zapnutý počítač i notebook z ich programom. Hacker tak mal voľnú cestu. Čo robiť ďalej?