Prosím o kontrolu

[David27]

Zdravím, chtěl bych poprosit o kontrolu. Děkuji.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-07-2025
Ran by david (administrator) on DESKTOP-IJSLQ8R (Micro-Star International Co., Ltd MS-7B86) (03-08-2025 21:43:21)
Running from C:\Users\david\Desktop\FRST64.exe
Loaded Profiles: david
Platform: Microsoft Windows 11 Home Version 24H2 26100.4652 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe <2>
(C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe ->) (AVerMedia TECHNOLOGIES, Inc -> ) C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eServiceHost.exe <2>
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\BrowserPrivacyAndSecurity.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\ProgramData\Wargaming.net\GameCenter\wgc.exe ->) (Wargaming Group Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\dlls\wgc_renderer_host.exe <5>
(C:\ProgramData\Wargaming.net\GameCenter\wgc.exe ->) (Wargaming.net Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\wargamingerrormonitor.exe
(explorer.exe ->) (AVerMedia TECHNOLOGIES, Inc -> AVerMedia TECHNOLOGIES, Inc.) C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(explorer.exe ->) (Wargaming Group Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\25.130.0706.0004\Microsoft.SharePoint.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <19>
(SearchFilterHost.exe ->) (SteelSeries France SASU -> A-Volute) C:\Users\david\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe
(services.exe ->) () [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (AVerMedia TECHNOLOGIES, Inc -> AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncHelper.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_9425e4c3b1ac1c47\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_0b6ff136fecebab7\RtkAudUService64.exe <2>
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(services.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicService.exe
(svchost.exe ->) (21E1B422-257A-44A2-9C8F-379165856473 -> ) C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.5.0_x64__w2gh52qy24etm\Nahimic3.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileCoAuth.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.87.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicSvc64.exe
(svchost.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\SysWOW64\NahimicSvc32.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_0b6ff136fecebab7\RtkAudUService64.exe [1650016 2023-03-15] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [285616 2025-07-04] (ESET, spol. s r.o. -> ESET)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-2920095854-1669752291-3635278505-1001\...\Run: [MicrosoftEdgeAutoLaunch_30FCCE2722F4190AAE310221237BB02B] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4113464 2025-07-31] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2920095854-1669752291-3635278505-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4969848 2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2920095854-1669752291-3635278505-1001\...\Run: [Wargaming.net Game Center] => C:\ProgramData\Wargaming.net\GameCenter\wgc.exe [2136016 2025-07-10] (Wargaming Group Limited -> Wargaming.net)
HKU\S-1-5-21-2920095854-1669752291-3635278505-1002\...\Run: [MicrosoftEdgeAutoLaunch_976B15C38270B7405518FFD29BBCD6E4] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4113464 2025-07-31] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2920095854-1669752291-3635278505-1002\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4969848 2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon TS3300 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDG3.DLL [506368 2023-06-05] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3300 series: C:\Windows\system32\CNMLMG3.DLL [1334784 2023-06-05] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk [2025-05-29]
ShortcutTarget: AVer HID Receiver.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe (AVerMedia TECHNOLOGIES, Inc -> )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk [2025-05-29]
ShortcutTarget: AVerQuick.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe (AVerMedia TECHNOLOGIES, Inc -> AVerMedia TECHNOLOGIES, Inc.)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {3B5BC435-0AFF-474B-BE58-CF9CB11233E5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2025-03-21] (Adobe Inc. -> Adobe Inc.)
Task: {52B32012-2460-4A02-9A97-DAA27F07B86F} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [10453840 2025-07-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {6E4C206F-05EB-4AAD-BFFC-733BD5CE52D5} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28583864 2025-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {B0141335-8380-4C00-9979-75CDDF1053D1} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\opushutil.exe [61248 2025-07-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {1E58767F-89E3-44A6-9886-DF17993B75A7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28583864 2025-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {1FDC2F5D-2E76-4FB3-A0B8-182ED92DB5B7} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [221952 2025-07-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {F9D2F505-E60A-48DB-9E4E-D72FEC1BB0E3} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [221952 2025-07-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {B1AADECF-5E91-4F9C-BB81-D3D5972710CF} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2920095854-1669752291-3635278505-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [694912 2025-07-22] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {CA13F34A-2E69-4611-873D-BCAFB4B801BF} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2920095854-1669752291-3635278505-1002 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [694912 2025-07-22] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {67B73CDE-D8EC-43A1-BA0E-2E4BCCB6FEE7} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34944 2025-07-22] (Mozilla Corporation -> Mozilla Foundation)
Task: {653DA56B-3946-43B8-8423-1C6A61DC2AEF} - System32\Tasks\NahimicSvc32Run => C:\Windows\SysWOW64\NahimicSvc32.exe [1118128 2025-01-14] (SteelSeries France SASU -> Nahimic)
Task: {D59DBDC6-EC3D-4181-BC12-4C81E0D0A90C} - System32\Tasks\NahimicSvc64Run => C:\Windows\system32\NahimicSvc64.exe [1438128 2025-01-14] (SteelSeries France SASU -> Nahimic)
Task: {348A294E-A712-4937-8B7E-52919DF3AA81} - System32\Tasks\NahimicTask32 => C:\Windows\System32\..\SysWOW64\NahimicSvc32.exe [1118128 0] (SteelSeries France SASU -> Nahimic)
Task: {77AFBAE8-5081-4437-903D-7174A490B495} - System32\Tasks\NahimicTask64 => C:\Windows\System32\.\NahimicSvc64.exe [1438128 0] (SteelSeries France SASU -> Nahimic)
Task: {52B8713B-1DC4-4071-B92C-C8313D5E90EA} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4232040 2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {0C642580-5160-4C97-8B9B-F25FCAE3A971} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2920095854-1669752291-3635278505-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4232040 2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {786121F6-529F-43B5-9307-AFCE5036EF9B} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2920095854-1669752291-3635278505-1002 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4232040 2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {2ACBAE90-3CBA-46D8-8AA6-DC21E9653A5E} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2920095854-1669752291-3635278505-1001 => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\OneDriveLauncher.exe [685432 2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {96BD36BE-0E0A-4C02-8ECE-B629D29F6993} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2920095854-1669752291-3635278505-1002 => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\OneDriveLauncher.exe [685432 2025-08-02] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.1
Tcpip\..\Interfaces\{597a1605-d190-4301-8c5e-d20e46aa83ab}: [DhcpNameServer] 192.168.0.1 192.168.0.1

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\david\AppData\Local\Microsoft\Edge\User Data\Default [2025-08-03]
Edge HomePage: Default -> hxxp://www.seznam.cz/
Edge StartupUrls: Default -> "hxxps://www.seznam.cz/"
Edge Extension: (Dokumenty Google offline) - C:\Users\david\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-23]
Edge Extension: (Edge relevant text changes) - C:\Users\david\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-05-29]
Edge Extension: (ESET Browser Privacy & Security) - C:\Users\david\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2025-06-20]
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]

FireFox:
========
FF DefaultProfile: loa9ywao.default
FF ProfilePath: C:\Users\david\AppData\Roaming\Mozilla\Firefox\Profiles\loa9ywao.default [2025-06-10]
FF ProfilePath: C:\Users\david\AppData\Roaming\Mozilla\Firefox\Profiles\e4rv2yyu.default-release [2025-08-03]
FF Homepage: Mozilla\Firefox\Profiles\e4rv2yyu.default-release -> www.seznam.cz
FF Extension: (ESET Browser Privacy & Security) - C:\Users\david\AppData\Roaming\Mozilla\Firefox\Profiles\e4rv2yyu.default-release\Extensions\browserextension@eset.com.xpi [2025-05-29]
FF Extension: (Google Translator for Firefox) - C:\Users\david\AppData\Roaming\Mozilla\Firefox\Profiles\e4rv2yyu.default-release\Extensions\translator@zoli.bod.xpi [2025-05-29]
FF Extension: (Lion Power) - C:\Users\david\AppData\Roaming\Mozilla\Firefox\Profiles\e4rv2yyu.default-release\Extensions\{7044fa00-e6bb-40d6-88a2-e087ac3f53e6}.xpi [2025-05-29]
FF Extension: (Firefox B) - C:\Users\david\AppData\Roaming\Mozilla\Firefox\Profiles\e4rv2yyu.default-release\Extensions\{ac40163c-8804-4dad-90fc-e25ebd6e9a57}.xpi [2025-05-29]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-07-27] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2025-07-15] (Adobe Inc. -> Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2025-08-03]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2025-03-21] (Adobe Inc. -> Adobe Inc.)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [377664 2015-06-25] (AVerMedia TECHNOLOGIES, Inc -> AVerMedia)
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [771072 2017-02-06] () [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13045120 2025-07-18] (Microsoft Corporation -> Microsoft Corporation)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5538224 2025-07-04] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [4660272 2025-07-04] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [4660272 2025-07-04] (ESET, spol. s r.o. -> ESET)
R3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncHelper.exe [3633536 2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460488 2024-04-03] (Canon Inc. -> )
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpDefenderCoreService.exe [2042672 2025-08-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NahimicService; C:\Windows\System32\NahimicService.exe [1910704 2025-01-14] (SteelSeries France SASU -> Nahimic)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_9425e4c3b1ac1c47\Display.NvContainer\NVDisplay.Container.exe [1275568 2024-12-04] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.130.0706.0004\OneDriveUpdaterService.exe [3886480 2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2024-10-18] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [933432 2024-10-18] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\NisSrv.exe [4546688 2025-08-02] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MsMpEng.exe [282464 2025-08-02] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdgpio3; C:\Windows\System32\drivers\amdgpio3.sys [33592 2024-09-12] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
R3 AVer871BDA; C:\Windows\System32\Drivers\AVer9303.sys [323096 2016-10-28] (Microsoft Windows Hardware Compatibility Publisher -> AVerMedia)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [573440 2024-10-05] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [200704 2024-10-05] (Microsoft Corporation) [File not signed]
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus2.sys [175824 2024-10-18] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [232384 2025-07-04] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [144552 2025-07-04] (Microsoft Windows Hardware Compatibility Publisher -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [16336 2025-04-13] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [270080 2025-07-04] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [57304 2025-07-04] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [86736 2025-07-04] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [125976 2025-07-04] (ESET, spol. s r.o. -> ESET)
S3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [330112 2025-06-13] (Microsoft Windows -> Microsoft Corporation)
R3 Nahimic_Mirroring; C:\Windows\System32\drivers\Nahimic_Mirroring.sys [94784 2022-06-02] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
S3 rtcx21; C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys [539648 2024-03-28] (Microsoft Windows -> Realtek)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [174264 2024-10-18] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [20888 2025-08-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [623008 2025-08-02] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [101792 2025-08-02] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-08-03 21:43 - 2025-08-03 21:43 - 000022270 _____ C:\Users\david\Desktop\FRST.txt
2025-08-03 21:42 - 2025-08-03 21:43 - 000000000 ____D C:\FRST
2025-08-03 21:39 - 2025-08-03 21:39 - 002409472 _____ (Farbar) C:\Users\david\Desktop\FRST64.exe
2025-08-03 09:29 - 2025-08-03 09:29 - 000677108 _____ C:\Windows\system32\perfh005.dat
2025-08-03 09:29 - 2025-08-03 09:29 - 000144960 _____ C:\Windows\system32\perfc005.dat
2025-08-02 09:54 - 2025-08-02 09:54 - 003792748 _____ C:\Users\david\Downloads\Jawa_250-559_350-360_manual.zip
2025-08-02 09:54 - 2025-08-02 09:54 - 000000000 ____D C:\Users\david\Downloads\Jawa_250-559_350-360_manual
2025-08-02 09:21 - 2025-08-02 09:21 - 010347934 _____ C:\Users\david\Downloads\477.05.pdf
2025-07-29 20:12 - 2025-07-29 20:20 - 000000000 ____D C:\Users\david\Documents\FrameView
2025-07-29 20:12 - 2025-07-29 20:12 - 000002191 _____ C:\Users\Public\Desktop\FrameView.lnk
2025-07-29 20:12 - 2025-07-29 20:12 - 000000000 ____D C:\Windows\SysWOW64\VRFCAT-Plugins
2025-07-29 20:12 - 2025-07-29 20:12 - 000000000 ____D C:\Windows\system32\VRFCAT-Plugins
2025-07-29 20:12 - 2025-07-29 20:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA FrameView
2025-07-29 20:12 - 2025-01-30 19:28 - 000015928 _____ C:\Windows\system32\ddETWExternal.dll
2025-07-29 20:11 - 2025-07-29 20:11 - 011969248 _____ (NVIDIA Corporation) C:\Users\david\Downloads\FrameViewSetup.exe
2025-07-26 08:56 - 2025-07-26 08:56 - 000988915 _____ C:\Users\david\Downloads\srovnávací_tabulka_pal_jiskra_brisk-20181.pdf
2025-07-26 08:53 - 2025-07-26 08:53 - 000746654 _____ C:\Users\david\Downloads\systém-značení-ke-stažení-2018.pdf
2025-07-26 08:40 - 2025-08-02 10:47 - 000003552 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-2920095854-1669752291-3635278505-1002
2025-07-25 19:02 - 2025-07-25 19:03 - 044299591 _____ C:\Users\david\Downloads\1959_JCZ_355_356_manual.pdf
2025-07-22 19:28 - 2025-07-23 10:32 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-07-21 21:45 - 2025-07-21 21:45 - 000000000 ____D C:\Users\David Šplíchal\AppData\Roaming\Mozilla
2025-07-21 21:45 - 2025-07-21 21:45 - 000000000 ____D C:\Users\David Šplíchal\AppData\Local\Mozilla
2025-07-21 21:42 - 2025-08-02 10:47 - 000003596 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2920095854-1669752291-3635278505-1002
2025-07-21 21:42 - 2025-07-21 21:46 - 000000000 ____D C:\Users\David Šplíchal\AppData\Local\PlaceholderTileLogoFolder
2025-07-21 21:42 - 2025-07-21 21:42 - 000000000 ____D C:\Users\David Šplíchal\AppData\Local\Publishers
2025-07-21 21:41 - 2025-07-21 21:48 - 000000000 ____D C:\Users\David Šplíchal\AppData\Local\D3DSCache
2025-07-21 21:41 - 2025-07-21 21:41 - 000002455 _____ C:\Users\David Šplíchal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nahimic Companion.lnk
2025-07-21 21:41 - 2025-07-21 21:41 - 000000000 ____D C:\Users\David Šplíchal\AppData\Local\NhNotifSys
2025-07-21 21:40 - 2025-07-21 21:46 - 000000000 ____D C:\Users\David Šplíchal\AppData\Local\Packages
2025-07-21 21:40 - 2025-07-21 21:41 - 000000000 ____D C:\Users\David Šplíchal\AppData\Roaming\Microsoft\Windows
2025-07-21 21:40 - 2025-07-21 21:40 - 000000020 ___SH C:\Users\David Šplíchal\ntuser.ini
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 _SHDL C:\Users\David Šplíchal\Šablony
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 _SHDL C:\Users\David Šplíchal\Soubory cookie
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 _SHDL C:\Users\David Šplíchal\Poslední
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 _SHDL C:\Users\David Šplíchal\Okolní tiskárny
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 _SHDL C:\Users\David Šplíchal\Okolní síť
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 _SHDL C:\Users\David Šplíchal\Nabídka Start
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 _SHDL C:\Users\David Šplíchal\Dokumenty
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 _SHDL C:\Users\David Šplíchal\Documents\Obrázky
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 _SHDL C:\Users\David Šplíchal\Documents\Hudba
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 _SHDL C:\Users\David Šplíchal\Documents\Filmy
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 _SHDL C:\Users\David Šplíchal\Data aplikací
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 _SHDL C:\Users\David Šplíchal\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 _SHDL C:\Users\David Šplíchal\AppData\Local\Data aplikací
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ___SD C:\Users\David Šplíchal\AppData\Roaming\Microsoft\SystemCertificates
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ___SD C:\Users\David Šplíchal\AppData\Roaming\Microsoft\Protect
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ___SD C:\Users\David Šplíchal\AppData\Roaming\Microsoft\Crypto
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ___SD C:\Users\David Šplíchal\AppData\Roaming\Microsoft\Credentials
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ____D C:\Users\David Šplíchal\AppData\Roaming\Microsoft\Vault
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ____D C:\Users\David Šplíchal\AppData\Roaming\Microsoft\Spelling
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ____D C:\Users\David Šplíchal\AppData\Roaming\Microsoft\Network
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ____D C:\Users\David Šplíchal\AppData\Roaming\Adobe
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ____D C:\Users\David Šplíchal\AppData\LocalLow\NVIDIA
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ____D C:\Users\David Šplíchal\AppData\Local\VirtualStore
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ____D C:\Users\David Šplíchal\AppData\Local\Nahimic
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ____D C:\Users\David Šplíchal\AppData\Local\ESET
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ____D C:\Users\David Šplíchal\AppData\Local\ConnectedDevicesPlatform
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ____D C:\Users\David Šplíchal\AppData\Local\AVerMedia
2025-07-21 21:40 - 2025-07-21 21:40 - 000000000 ____D C:\Users\David Šplíchal
2025-07-21 21:40 - 2025-05-31 18:03 - 000000000 ___RD C:\Users\David Šplíchal\OneDrive
2025-07-12 10:13 - 2025-07-26 19:41 - 000000108 _____ C:\logUploaderSettings_temp.ini
2025-07-12 10:13 - 2025-07-26 19:41 - 000000108 _____ C:\logUploaderSettings.ini
2025-07-09 12:00 - 2025-07-09 12:00 - 000001731 _____ C:\Users\david\Desktop\Smart Switch.lnk
2025-07-09 11:48 - 2024-10-18 04:14 - 000175824 _____ (Samsung Electronics Co., Ltd.) C:\Windows\system32\Drivers\ssudbus2.sys
2025-07-09 11:48 - 2024-10-18 04:14 - 000174264 _____ (Samsung Electronics Co., Ltd.) C:\Windows\system32\Drivers\ssudmdm.sys
2025-07-09 11:47 - 2025-07-09 11:47 - 000000000 ___HD C:\Users\Public\Documents\NativeFus_Log
2025-07-09 11:24 - 2025-07-09 11:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2025-07-09 11:23 - 2024-10-18 04:14 - 000069120 _____ (Nokia) C:\Windows\system32\nmwcdclsx64.dll
2025-07-09 11:20 - 2025-07-09 11:38 - 000000000 ____D C:\Program Files (x86)\Samsung
2025-07-08 22:15 - 2025-07-08 22:15 - 000000000 ____D C:\Windows\system32\ruxim
2025-07-08 22:06 - 2025-08-03 14:46 - 000000000 ____D C:\Windows\CbsTemp
2025-07-08 22:03 - 2025-07-08 22:03 - 000073956 _____ C:\Windows\SysWOW64\ctac.json
2025-07-08 22:03 - 2025-07-08 22:03 - 000073956 _____ C:\Windows\system32\ctac.json
2025-07-08 22:03 - 2025-07-08 22:03 - 000033519 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-07-08 22:03 - 2025-07-08 22:03 - 000033519 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2025-07-08 18:40 - 2025-07-08 18:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2025-07-08 18:40 - 2025-07-08 18:40 - 000000000 ____D C:\Program Files\7-Zip

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-08-03 21:37 - 2025-05-29 15:57 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-08-03 21:36 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-08-03 19:49 - 2025-05-29 13:32 - 000000000 ____D C:\Windows\system32\SleepStudy
2025-08-03 14:46 - 2025-05-29 13:47 - 000000000 ____D C:\Users\david\AppData\Local\D3DSCache
2025-08-03 11:39 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SystemTemp
2025-08-03 10:52 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\AppReadiness
2025-08-03 10:50 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-08-03 09:29 - 2025-06-13 13:55 - 000004212 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{29C9C97D-9D0C-4060-AB82-367C056F9AC0}
2025-08-03 09:29 - 2025-05-29 13:41 - 001603790 _____ C:\Windows\system32\PerfStringBackup.INI
2025-08-03 09:29 - 2025-05-29 13:32 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-08-03 09:29 - 2025-05-29 13:32 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2025-08-03 09:29 - 2024-04-01 09:24 - 000000000 ____D C:\Windows\INF
2025-08-03 09:24 - 2025-05-29 13:50 - 000000000 ___RD C:\Users\david\OneDrive
2025-08-03 09:24 - 2025-05-29 13:46 - 000000000 ____D C:\Users\david\AppData\Local\Packages
2025-08-03 09:23 - 2025-06-24 20:01 - 000003108 _____ C:\Windows\system32\Tasks\NahimicTask32
2025-08-03 09:23 - 2025-06-24 20:01 - 000003088 _____ C:\Windows\system32\Tasks\NahimicTask64
2025-08-03 09:23 - 2025-06-18 10:56 - 000002016 _____ C:\Users\Public\Desktop\ESET Zabezpečené bankovnictví a prohlížení webu.lnk
2025-08-03 09:23 - 2025-05-29 14:01 - 000000000 ____D C:\ProgramData\NVIDIA
2025-08-03 09:23 - 2025-05-29 13:32 - 000021900 _____ C:\Windows\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-08-03 09:23 - 2025-05-29 13:32 - 000012288 ___SH C:\DumpStack.log.tmp
2025-08-03 09:23 - 2025-05-29 13:32 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2025-08-02 20:11 - 2024-04-01 09:21 - 000524288 _____ C:\Windows\system32\config\BBI
2025-08-02 19:44 - 2025-05-31 18:02 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-08-02 14:47 - 2025-05-29 13:32 - 000000000 ____D C:\Windows\system32\Drivers\wd
2025-08-02 10:47 - 2025-05-31 18:02 - 000003596 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2920095854-1669752291-3635278505-1001
2025-08-02 10:47 - 2025-05-31 18:02 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2025-08-02 10:47 - 2025-05-31 18:02 - 000002130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-08-02 10:47 - 2025-05-29 13:51 - 000003552 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-2920095854-1669752291-3635278505-1001
2025-08-01 20:36 - 2025-05-29 14:59 - 000000000 ____D C:\Users\david\Documents\AVerTV
2025-08-01 08:39 - 2025-05-29 13:32 - 000003716 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{01B088DA-A62B-4A48-BD8A-07CB154CA3F6}
2025-08-01 08:39 - 2025-05-29 13:32 - 000003590 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{6CF29DA0-3906-413B-B017-6557F6DCB4DD}
2025-07-31 18:54 - 2025-05-31 11:49 - 000000000 ____D C:\Program Files\CrystalDiskInfo
2025-07-29 20:12 - 2025-05-29 14:05 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2025-07-29 20:12 - 2025-05-29 14:01 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2025-07-27 16:05 - 2025-05-31 17:04 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2025-07-23 10:32 - 2025-05-29 15:56 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-07-22 20:13 - 2025-05-29 15:56 - 000001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-07-21 21:45 - 2025-05-29 15:57 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2025-07-21 21:40 - 2025-05-29 13:46 - 000000000 __RHD C:\Users\Public\AccountPictures
2025-07-21 21:36 - 2025-05-29 13:34 - 000000000 ____D C:\ProgramData\Packages
2025-07-17 17:32 - 2025-05-31 13:28 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader.lnk
2025-07-13 15:11 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\AppLocker
2025-07-11 21:40 - 2025-05-29 13:40 - 000000000 ____D C:\Users\david
2025-07-09 21:41 - 2025-06-01 10:42 - 000000000 ____D C:\Users\david\AppData\Local\CrashDumps
2025-07-09 11:47 - 2025-06-01 09:11 - 000000000 ____D C:\Users\david\AppData\Roaming\Samsung
2025-07-09 11:47 - 2025-06-01 09:11 - 000000000 ____D C:\ProgramData\Samsung
2025-07-09 11:47 - 2025-06-01 09:11 - 000000000 ____D C:\Program Files\Samsung
2025-07-09 11:45 - 2025-05-29 13:45 - 000000000 ____D C:\Users\david\AppData\Local\PlaceholderTileLogoFolder
2025-07-09 11:38 - 2025-05-29 14:08 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2025-07-08 22:16 - 2025-05-29 13:32 - 000344008 _____ C:\Windows\system32\FNTCACHE.DAT
2025-07-08 22:15 - 2024-04-01 18:30 - 000000000 ____D C:\Windows\system32\Microsoft-Edge-WebView
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\UUS
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\setup
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\oobe
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\InstallShield
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\Dism
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SystemResources
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\WinMetadata
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\setup
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\oobe
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\migwiz
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\Dism
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\appraiser
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\schemas
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\ShellExperiences
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\ShellComponents
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\Provisioning
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\PolicyDefinitions
2025-07-08 22:15 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\bcastdvr
2025-07-08 22:15 - 2024-04-01 09:21 - 000000000 ____D C:\Windows\servicing
2025-07-08 22:03 - 2025-05-29 13:34 - 003384320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2025-07-06 09:10 - 2025-05-29 20:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kingston SSD Manager x64
2025-07-06 09:10 - 2025-05-29 20:55 - 000000000 ____D C:\Program Files\Kingston_SSD_Manager
2025-07-04 16:05 - 2025-04-28 13:48 - 000270080 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2025-07-04 16:05 - 2025-04-28 13:48 - 000232384 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2025-07-04 16:05 - 2025-04-28 13:48 - 000144552 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2025-07-04 16:05 - 2025-04-28 13:48 - 000125976 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2025-07-04 16:05 - 2025-04-28 13:48 - 000086736 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys
2025-07-04 16:05 - 2025-04-28 13:48 - 000057304 _____ (ESET) C:\Windows\system32\Drivers\ekbdflt.sys

==================== Files in the root of some directories ========

2025-05-31 09:35 - 2025-06-04 11:24 - 000007640 _____ () C:\Users\david\AppData\Local\Resmon.ResmonCfg
2025-06-01 10:42 - 2025-06-01 10:42 - 000000036 _____ () C:\Users\david\AppData\Local\_LOCAL_GUID

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2025
Ran by david (03-08-2025 21:44:25)
Running from C:\Users\david\Desktop
Microsoft Windows 11 Home Version 24H2 26100.4652 (X64) (2025-05-29 11:34:17)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-2920095854-1669752291-3635278505-500 - Administrator - Disabled)
david (S-1-5-21-2920095854-1669752291-3635278505-1001 - Administrator - Enabled) => C:\Users\david
David Šplíchal (S-1-5-21-2920095854-1669752291-3635278505-1002 - Limited - Enabled) => C:\Users\David Šplíchal
DefaultAccount (S-1-5-21-2920095854-1669752291-3635278505-503 - Limited - Disabled)
Guest (S-1-5-21-2920095854-1669752291-3635278505-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2920095854-1669752291-3635278505-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {26E0861C-6FB9-CEF9-E4F0-531986211ACE}
FW: ESET Firewall (Enabled) {1EDB0739-25D6-CFA1-CFAF-FA2C78F25DB5}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 25.00 (x64) (HKLM\...\7-Zip) (Version: 25.00 - Igor Pavlov)
Adobe Acrobat Reader - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 25.001.20577 - Adobe Systems Incorporated)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601110}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.133 - Advanced Micro Devices, Inc.) Hidden
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 6.10.22.027 - Advanced Micro Devices, Inc.)
AMD PCI Driver (HKLM-x32\...\{80EC3CEE-2940-42A1-A776-B5D810D39F1E}) (Version: 1.0.0.90 - Advanced Micro Devices, Inc.) Hidden
AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.30.0.0 - Advanced Micro Devices, Inc.) Hidden
AMD Ryzen Balanced Driver (HKLM-x32\...\{A171D320-C42C-4F3B-A2D8-C6A09F6788CC}) (Version: 8.0.0.13 - Advanced Micro Devices, Inc.) Hidden
AMD SBxxx SMBus Driver (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.44 - Advanced Micro Devices, Inc.) Hidden
AMD_Chipset_Drivers (HKLM-x32\...\{8d13ff58-77bd-4c18-a602-acd72ef0a328}) (Version: 6.10.22.027 - Advanced Micro Devices, Inc.) Hidden
AVerMedia TD310 USB Pure DVB-T/T2/C 14.7.64.18 (HKLM-x32\...\AVerMedia TD310 USB Pure DVB-T/T2/C) (Version: 14.7.64.18 - AVerMedia TECHNOLOGIES, Inc.)
AVerTV 3D (HKLM-x32\...\InstallShield_{5016185F-05AF-455F-AA70-6B6E5D6D4E70}) (Version: 6.9.1.18.17080805-GA - AVerMedia Technologies, Inc.)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.78.1094 - AB Team, d.o.o.)
Canon IJ Printer Assistant Tool (HKLM-x32\...\Canon IJ Printer Assistant Tool) (Version: 1.90.3.36 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.5.5.3 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 6.6.0 - Canon Inc.)
Canon TS3300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_TS3300_series) (Version: 1.04 - Canon Inc.)
CrystalDiskInfo 9.6.3 (HKLM\...\CrystalDiskInfo_is1) (Version: 9.6.3 - Crystal Dew World)
ESET Security (HKLM\...\{0F3CB7F7-E580-4E9D-BC90-58BF9A860742}) (Version: 18.2.14.0 - ESET, spol. s r.o.)
IrfanView 4.70 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.70 - Irfan Skiljan)
Kingston SSD Manager x64 1.5.5.6 (HKLM-x32\...\{53F657CD-C4FC-4DCD-826E-6862917532AC}_is1) (Version: 1.5.5.6 - @2021 Kingston Digital, Inc.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 138.0.3351.121 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 138.0.3351.121 - Microsoft Corporation) Hidden
Microsoft Office 2019 pro studenty a domácnosti - cs-cz (HKLM\...\HomeStudent2019Retail - cs-cz) (Version: 16.0.18925.20184 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 25.130.0706.0004 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.36.32532 (HKLM-x32\...\{8bdfe669-9705-4184-9368-db9ce581e0e7}) (Version: 14.36.32532.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 (HKLM-x32\...\{410c0ee1-00bb-41b6-9772-e12c2828b02f}) (Version: 14.36.32532.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.36.32532 (HKLM\...\{0025DD72-A959-45B5-A0A3-7EFEB15A8050}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.36.32532 (HKLM\...\{D5D19E2F-7189-42FE-8103-92CD1FA457C2}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.36.32532 (HKLM-x32\...\{C2C59CAB-8766-4ABD-A8EF-1151A36C41E5}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.36.32532 (HKLM-x32\...\{73F77E4E-5A17-46E5-A5FC-8A061047725F}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 141.0 (x64 cs)) (Version: 141.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 139.0 - Mozilla)
NVIDIA FrameView 1.6.10930.35470227 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameView) (Version: 1.6.10930.35470227 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.4.2.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.2.6 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 566.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 566.36 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.18925.20184 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.18925.20184 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.18925.20184 - Microsoft Corporation) Hidden
Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 3.0.3.0 - Advanced Micro Devices, Inc.) Hidden
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9492.1 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.74.1128.2024 - Realtek)
Registrace tiskárny (HKLM-x32\...\Canon EISRegistration) (Version: 1.9.2 - Canon Inc.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.9.0.0 - Samsung Electronics Co., Ltd.)
Smart Switch Service (HKLM\...\{3B840FB2-EED4-422F-AEC0-9846383A5165}) (Version: 5.0.30.0 - Samsung Electronics Co., Ltd.)
Wargaming.net Game Center (HKU\S-1-5-21-2920095854-1669752291-3635278505-1001\...\Wargaming.net Game Center) (Version: 25.3.0.9647 - Wargaming.net)
World of Tanks EU (HKU\S-1-5-21-2920095854-1669752291-3635278505-1001\...\2314027414) (Version: - Wargaming.net)

Packages:
=========
Balíček prostředí funkcí systému Windows -> C:\Windows\SystemApps\SxS\MicrosoftWindows.57074904.InpApp_cw5n1h2txyewy [2025-07-08] (Microsoft Windows)
ESET Context Menu -> C:\Program Files\ESET\ESET Security [2025-07-30] (Sparse Package)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-05-30] (Microsoft Corp.)
Microsoft.HEVCVideoExtensions -> C:\Program Files\WindowsApps\Microsoft.HEVCVideoExtensions_2.4.15.0_x64__8wekyb3d8bbwe [2025-07-16] (Microsoft Corporation)
Nahimic -> C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.5.0_x64__w2gh52qy24etm [2025-06-24] (A-Volute)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.968.0_x64__56jybvy8sckqj [2025-06-11] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16 [2025-07-27] ()
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2025-05-29] (Realtek Semiconductor Corp)
Samsung SmartSwitch -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungSmartSwitch_5.0.30.0_x64__3c1yjt4zspk6g [2025-07-09] (Samsung Electronics Co. Ltd.)
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0 [2025-07-31] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2920095854-1669752291-3635278505-1001_Classes\CLSID\{04271989-C4D2-1C86-3D53-F2AC04DA8ED5} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-2920095854-1669752291-3635278505-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\david\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (SteelSeries France SASU -> A-Volute)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2025-07-05] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Acrobat Elements\ContextMenuShim64.dll [2025-07-15] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-07-04] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-07-04] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2025-07-05] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.130.0706.0004\FileSyncShell64.dll [2025-08-02] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_9425e4c3b1ac1c47\nvshext.dll [2024-12-04] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2025-07-05] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-07-04] (ESET, spol. s r.o. -> ESET)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2025-05-29 14:56 - 2012-06-09 18:33 - 000053248 _____ () [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\dll\MsgLog.DLL
2025-05-29 14:56 - 2015-07-13 15:57 - 000372807 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\dll\A871.dll
2025-05-29 14:55 - 2015-08-28 18:05 - 000110080 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\dll\AVERAPI.dll
2025-05-29 14:55 - 2015-12-14 16:39 - 000194560 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\dll\CardID.dll
2025-05-29 14:55 - 2015-02-09 13:32 - 000770048 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\dll\GraphMaster.dll
2025-07-08 18:40 - 2025-07-05 13:00 - 000101888 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2025-07-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-03] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2024-04-01 09:26 - 2024-04-01 09:24 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.0.1
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2920095854-1669752291-3635278505-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-21-2920095854-1669752291-3635278505-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\DesktopSpotlight\Assets\Images\image_0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{C01BF982-ED25-431B-A17D-4F081C2CF53F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F3217FB1-4FE7-4BE6-A23C-46874AB49F1B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{76E2AC32-0845-4C32-A0BD-F09371464B23}] => (Allow) LPort=33683
FirewallRules: [{CFF0B9C9-BF6F-4CE4-8154-6E9EDC35850F}] => (Allow) LPort=26822
FirewallRules: [{F5276D28-A5B7-42AD-A34B-2448D3232694}] => (Allow) LPort=32683
FirewallRules: [{DE4CEFC0-8C5B-46E0-8C34-4E8F82044D3A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{BA05A517-4204-424E-8F70-648A29837E5B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{7E4A6DFF-38EA-452F-BC64-449EA3D30E90}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{4C31F378-2696-415C-807C-CD00DCD97188}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{D49635D6-A1EF-42B0-A2B6-5A203B03DB55}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{2C0588A0-AA73-41AF-83F5-AC87D492F3B6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{85025D41-24E1-46FB-B658-843535076A85}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{EE38C2E7-A8B6-4023-AC50-5AB2E9686D16}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{FEDA1F33-B310-46E4-A125-E7ECA9766BDC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{B6F76D39-0AF3-4E66-BFA8-29DD48771E79}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

==================== Restore Points =========================

22-07-2025 13:11:27 Windows Update
25-07-2025 15:06:17 Windows Update
29-07-2025 09:52:03 Windows Update
02-08-2025 09:03:10 Windows Update
02-08-2025 09:03:19 Windows Update

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (08/03/2025 09:29:06 AM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro WORKGROUP\DESKTOP-IJSLQ8R$ přes https://AMD-KeyId-578c545f796951421221a ... s/Aik/scep se nepovedla:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 03 Aug 2025 07:29:06 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: ce13ab1e-b3d9-427d-9f5e-d4d20559071b

Metoda: GET(422ms)
Fáze: GetCACaps
Nenalezeno (404) 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (08/03/2025 09:24:01 AM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro WORKGROUP\DESKTOP-IJSLQ8R$ přes https://AMD-KeyId-578c545f796951421221a ... s/Aik/scep se nepovedla:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 03 Aug 2025 07:24:01 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 0e6194bb-8586-44b6-a170-6b914bc1ba31

Metoda: GET(375ms)
Fáze: GetCACaps
Nenalezeno (404) 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (08/03/2025 09:24:00 AM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro Místní systém přes https://AMD-KeyId-578c545f796951421221a ... s/Aik/scep se nepovedla:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 03 Aug 2025 07:23:59 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 8ec2b382-e197-4e65-a370-4c54e9819953

Metoda: GET(844ms)
Fáze: GetCACaps
Nenalezeno (404) 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (08/02/2025 07:45:13 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro WORKGROUP\DESKTOP-IJSLQ8R$ přes https://AMD-KeyId-578c545f796951421221a ... s/Aik/scep se nepovedla:

GetCACaps

Metoda: GET(0ms)
Fáze: GetCACaps
Nelze rozpoznat název nebo adresu serveru. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (08/02/2025 07:45:09 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro Místní systém přes https://AMD-KeyId-578c545f796951421221a ... s/Aik/scep se nepovedla:

GetCACaps

Metoda: GET(78ms)
Fáze: GetCACaps
Nelze rozpoznat název nebo adresu serveru. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (08/02/2025 02:34:05 PM) (Source: Microsoft Security Client) (EventID: 3002) (User: )
Description: Event-ID 3002

Error: (08/02/2025 02:34:05 PM) (Source: Microsoft Security Client) (EventID: 2002) (User: )
Description: Event-ID 2002

Error: (08/02/2025 02:34:05 PM) (Source: Microsoft Security Client) (EventID: 2003) (User: )
Description: Event-ID 2003


System errors:
=============
Error: (08/03/2025 09:23:51 AM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024662

Error: (08/02/2025 08:11:13 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-IJSLQ8R)
Description: Server {6FA05A24-B1DF-4155-909E-7B424F2D2BB5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/02/2025 08:11:13 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-IJSLQ8R)
Description: Server {6FA05A24-B1DF-4155-909E-7B424F2D2BB5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/02/2025 07:45:01 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024662

Error: (08/02/2025 05:06:23 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-IJSLQ8R)
Description: Server {6FA05A24-B1DF-4155-909E-7B424F2D2BB5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/02/2025 05:06:23 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-IJSLQ8R)
Description: Server {6FA05A24-B1DF-4155-909E-7B424F2D2BB5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/02/2025 09:03:23 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9PC1H9VN18CM-Microsoft.StartExperiencesApp.

Error: (08/02/2025 08:46:29 AM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024662


Windows Defender:
================
Date: 2025-07-10 15:48:57
Description:
Antivirová ochrana v programu Microsoft Defender šςаņ ħǻѕ вë℮й ŝţоφφзδ ъěƒôřë ¢οмρľęтΐøņ.%ň %ţЅċάй ĬĎ:%ь{DB8DF3A8-69E8-49DB-9753-C8F965656923}%ñ %ťŜĉāņ Ťýрę:%ъAntimalwarový program%ņ %τЅčąņ Ρâґάмêтęŕś:%ьRychlé prohledávání%π %ţŬśзѓ:%ьNT AUTHORITY\SYSTEM%ŋ %τŚťόφ Řèăѕòи:%ьŚ¢ћ℮ďϋℓзđ śĉăπ ẅāš şĸíррēδ вєĉąűŝє ţĥэ ľǻѕŧ šυсćεşŝƒůŀ şċäй ŵâš ώϊţнìŋ ţне łªşŧ 7 ðãỳŝ

Date: 2025-07-05 21:32:33
Description:
Antivirová ochrana v programu Microsoft Defender šςаņ ħǻѕ вë℮й ŝţоφφзδ ъěƒôřë ¢οмρľęтΐøņ.%ň %ţЅċάй ĬĎ:%ь{8AB7F433-CDB5-436A-983C-A721226FC68A}%ñ %ťŜĉāņ Ťýрę:%ъAntimalwarový program%ņ %τЅčąņ Ρâґάмêтęŕś:%ьRychlé prohledávání%π %ţŬśзѓ:%ьNT AUTHORITY\SYSTEM%ŋ %τŚťόφ Řèăѕòи:%ьŚ¢ћ℮ďϋℓзđ śĉăπ ẅāš şĸíррēδ вєĉąűŝє ţĥэ ľǻѕŧ šυсćεşŝƒůŀ şċäй ŵâš ώϊţнìŋ ţне łªşŧ 7 ðãỳŝ

Date: 2025-06-23 16:29:30
Description:
Antivirová ochrana v programu Microsoft Defender šςаņ ħǻѕ вë℮й ŝţоφφзδ ъěƒôřë ¢οмρľęтΐøņ.%ň %ţЅċάй ĬĎ:%ь{E577E5D1-0F55-4D46-A984-4D115538755D}%ñ %ťŜĉāņ Ťýрę:%ъAntimalwarový program%ņ %τЅčąņ Ρâґάмêтęŕś:%ьRychlé prohledávání%π %ţŬśзѓ:%ьNT AUTHORITY\SYSTEM%ŋ %τŚťόφ Řèăѕòи:%ьŚ¢ћ℮ďϋℓзđ śĉăπ ẅāš şĸíррēδ вєĉąűŝє ţĥэ ľǻѕŧ šυсćεşŝƒůŀ şċäй ŵâš ώϊţнìŋ ţне łªşŧ 7 ðãỳŝ

Date: 2025-06-23 16:07:13
Description:
Antivirová ochrana v programu Microsoft Defender šςаņ ħǻѕ вë℮й ŝţоφφзδ ъěƒôřë ¢οмρľęтΐøņ.%ň %ţЅċάй ĬĎ:%ь{1975E3C3-79A9-4A60-B7D1-99511AFC5DB6}%ñ %ťŜĉāņ Ťýрę:%ъAntimalwarový program%ņ %τЅčąņ Ρâґάмêтęŕś:%ьÚplné prohledávání%π %ţŬśзѓ:%ьDESKTOP-IJSLQ8R\david%ŋ %τŚťόφ Řèăѕòи:%ьÙńķήőώή

Date: 2025-06-20 12:47:42
Description:
Antivirová ochrana v programu Microsoft Defender šςаņ ħǻѕ вë℮й ŝţоφφзδ ъěƒôřë ¢οмρľęтΐøņ.%ň %ţЅċάй ĬĎ:%ь{40C88E58-AF14-4EBA-B54E-D659272C8467}%ñ %ťŜĉāņ Ťýрę:%ъAntimalwarový program%ņ %τЅčąņ Ρâґάмêтęŕś:%ьRychlé prohledávání%π %ţŬśзѓ:%ьNT AUTHORITY\SYSTEM%ŋ %τŚťόφ Řèăѕòи:%ьŚ¢ћ℮ďϋℓзđ śĉăπ ẅāš şĸíррēδ вєĉąűŝє ţĥэ ľǻѕŧ šυсćεşŝƒůŀ şċäй ŵâš ώϊţнìŋ ţне łªşŧ 7 ðãỳŝ
Event[0]

Date: 2025-06-18 12:02:35
Description:
Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Microsoft Defender zjistila chybu a došlo k jejímu selhání.
Funkce: Při přístupu
Kód chyby: 0x8007043c
Popis chyby: Tuto službu nelze spustit v nouzovém režimu.
Důvod: Antimalwarové bezpečnostní informace přestaly z neznámých důvodů fungovat. V některých případech se tento problém dá vyřešit restartováním služby.

Date: 2025-06-18 08:52:07
Description:
Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Microsoft Defender zjistila chybu a došlo k jejímu selhání.
Funkce: Při přístupu
Kód chyby: 0x8007043c
Popis chyby: Tuto službu nelze spustit v nouzovém režimu.
Důvod: Antimalwarové bezpečnostní informace přestaly z neznámých důvodů fungovat. V některých případech se tento problém dá vyřešit restartováním služby.

Date: 2025-06-07 20:05:52
Description:
Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Microsoft Defender zjistila chybu a došlo k jejímu selhání.
Funkce: Při přístupu
Kód chyby: 0x8007043c
Popis chyby: Tuto službu nelze spustit v nouzovém režimu.
Důvod: Antimalwarové bezpečnostní informace přestaly z neznámých důvodů fungovat. V některých případech se tento problém dá vyřešit restartováním služby.

Date: 2025-05-29 18:40:46
Description:
Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Microsoft Defender zjistila chybu a došlo k jejímu selhání.
Funkce: Při přístupu
Kód chyby: 0x8007043c
Popis chyby: Tuto službu nelze spustit v nouzovém režimu.
Důvod: Antimalwarové bezpečnostní informace přestaly z neznámých důvodů fungovat. V některých případech se tento problém dá vyřešit restartováním služby.

CodeIntegrity:
===============
Date: 2025-08-03 20:49:07
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Windows signing level requirements.

Date: 2025-08-03 19:49:17
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\ESET\ESET Security\ekrn.exe) attempted to load \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

BIOS: American Megatrends International, LLC. H.N0 03/21/2025
Motherboard: Micro-Star International Co., Ltd B450 GAMING PLUS MAX (MS-7B86)
Processor: AMD Ryzen 5 2600 Six-Core Processor
Percentage of memory in use: 35%
Total physical RAM: 16309.56 MB
Available physical RAM: 10572.74 MB
Total Virtual: 17333.56 MB
Available Virtual: 9741.66 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:299.26 GB) (Free:145.85 GB) (Model: KINGSTON SNV3S1000G) NTFS
Drive d: () (Fixed) (Total:631.51 GB) (Free:473.23 GB) (Model: KINGSTON SNV3S1000G) NTFS

\\?\Volume{51727108-a712-4bcc-b77b-0d333287a8e0}\ () (Fixed) (Total:0.63 GB) (Free:0.06 GB) NTFS
\\?\Volume{ebe85961-9060-4b84-ab32-783278932ad8}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================

[JaRon]

Ahoj,
nevidim tam ziadnych smejdov
Pokial budes potrebovat vycistit drobny neporiadok doporucujem Ccleaner

[David27]

Ještě jednou děkuji za kontrolu

[JaRon]

Za malo