Prosím o kontrolu

Zpráva

sobtik · #1 Příspěvek od **sobtik** » 16 srp 2025 08:45

Dobrý den,
prosím o kontrolu. PC se v poslední době seká a strašně dlouho najíždí. Moc děkuji

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-08-2025
Ran by Lukáš (administrator) on DESKTOP-NP4QRMM (MSI MS-7971) (16-08-2025 09:37:35)
Running from C:\Users\Lukáš\Desktop\FRST64(1).exe
Loaded Profiles: Lukáš
Platform: Microsoft Windows 11 Pro Version 24H2 26100.4946 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_1ace26b01689a987\Display.NvContainer\NVDisplay.Container.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11103992 2024-01-28] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [ESET Full Disk Encryption Startup] => C:\Program Files\ESET\ESET Full Disk Encryption\EFDEUI.exe [1875936 2025-01-07] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [288480 2025-06-29] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45741280 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\Run: [electron.app.BlueStacks Services] => C:\Users\Lukáš\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe [162219656 2024-05-08] (Now.gg, INC -> now.gg, Inc.)
HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [36981208 2024-12-24] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\Policies\Explorer: []
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [203936 2025-03-13] (Adobe Inc. -> Adobe Systems Inc)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\139.0.7258.66\Installer\chrmstp.exe [2025-08-08] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{92F53200-AE1E-4993-B181-F8826DF6BC1C}] -> C:\Program Files\ESET\ESET Full Disk Encryption\esetCredProvider.dll [2025-02-17] (ESET, spol. s r.o. -> ESET)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\Software\...\Authentication\Credential Provider Filters: [{92F53200-AE1E-4993-B181-F8826DF6BC1C}] -> C:\Program Files\ESET\ESET Full Disk Encryption\esetCredProvider.dll [2025-02-17] (ESET, spol. s r.o. -> ESET)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2B846331-BCE7-4711-8087-0BD99BF7CA00} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [302968 2024-06-04] (Now.gg, INC -> BlueStack Systems, Inc.)
Task: {73B8C98D-8671-4035-AD4D-917946E4850F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {D6E7DD9F-2530-4CD3-8A40-43EFE8F26DE0} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "147330dc-bc6d-46aa-9229-eceba5475d00" --version "6.38.0.11537" --silent
Task: {154ECFF9-A3A3-4551-80BD-7B2327A22EB9} - System32\Tasks\CCleanerSkipUAC - Lukáš => C:\Program Files\CCleaner\CCleaner.exe [39575776 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B836FB57-DE63-4D60-A0F0-2C1B754B5464} - System32\Tasks\Driver Booster SkipUAC (Lukáš) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [8946688 2023-06-09] (IObit) [File not signed]
Task: {9A0705AE-CA49-4B56-A739-1EADCE64765B} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem141.0.7340.0{72F5AA8A-865E-45FA-A2D3-42EB03A46DAD} => C:\Program Files (x86)\Google\GoogleUpdater\141.0.7340.0\updater.exe [6813336 2025-08-06] (Google LLC -> Google LLC)
Task: {6D507371-B30D-442D-8D73-55F4FC6DC512} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\IntelPTTEKRecertification.exe [855664 2023-12-14] (Intel Corporation -> Intel(R) Corporation)
Task: {E1439FDA-E194-41DF-B91A-BB9A51D84040} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => %SystemRoot%\system32\clipesu.exe (No File)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {7703BFDA-EB02-48E7-9E99-65E56E0F97B7} - System32\Tasks\Microsoft\Windows\rempl\shell => %ProgramFiles%\rempl\sedlauncher.exe (No File)
Task: {5D81326C-D6EC-49A0-AAB5-D8A874E06E83} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe (No File)
Task: {2B92E035-5623-4620-9F2A-640FF4FF5F90} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {4E96EA0C-7256-4B8C-9749-ED81EA6A9460} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {F673CBA6-BC1F-425F-87FD-012D7D77679F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {E783D8FF-9B23-48BC-8F07-357B84C21DE5} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)
Task: {A04FA2FD-AE17-414A-BA79-1D4B64829799} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3447725056-3232184070-4191867560-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [695360 2025-05-18] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {021310D9-A244-4663-BCF7-7E600919657B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34880 2025-05-18] (Mozilla Corporation -> Mozilla Foundation)
Task: {DF1AC40E-A7B3-4448-9B2C-B2DE9549069E} - System32\Tasks\OneDrive Startup Task-S-1-5-21-3447725056-3232184070-4191867560-1001 => C:\Users\Lukáš\AppData\Local\Microsoft\OneDrive\25.137.0715.0001\OneDriveLauncher.exe [685456 2025-08-13] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{374d349e-3542-4d03-9fcf-3d5ce653cf52}: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Lukáš\AppData\Local\Microsoft\Edge\User Data\Default [2025-06-22]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Lukáš\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2025-06-22]
Edge Extension: (Dokumenty Google offline) - C:\Users\Lukáš\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-27]
Edge Extension: (Edge relevant text changes) - C:\Users\Lukáš\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]

FireFox:
========
FF DefaultProfile: ffmfuc97.default
FF ProfilePath: C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\ffmfuc97.default [2023-12-09]
FF ProfilePath: C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\nxqh78zy.default-release [2025-08-15]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-03-13] (Adobe Inc. -> Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2025-08-16]

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default [2025-08-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-23]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-12-10]
CHR Profile: C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\System Profile [2024-10-15]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2024-12-18] (Adobe Inc. -> Adobe Inc.)
S3 AdskLicensingService; C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\Current\AdskLicensingService\AdskLicensingService.exe [18673448 2020-11-17] (Autodesk, Inc. -> Autodesk)
S4 AntiCheatExpert Protection; C:\Program Files\AntiCheatExpert\ACE-Service64.exe [3493272 2025-02-08] (ACEVILLE PTE LTD -> ANTICHEATEXPERT.COM)
S4 AntiCheatExpert Service; C:\Program Files\AntiCheatExpert\SGuard\x64\SGuardSvc64.exe [2098080 2024-12-07] (ACEVILLE PTE LTD -> ANTICHEATEXPERT.COM)
S4 Autodesk Access Service Host; C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessServiceHost.exe [11630368 2023-12-12] (Autodesk, Inc. -> Autodesk, Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [15689512 2024-03-11] (BattlEye Innovations e.K. -> )
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1080544 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [955816 2024-01-14] (EasyAntiCheat Oy -> Epic Games, Inc.)
S4 efdeais; C:\Program Files\ESET\ESET Full Disk Encryption\efdeais.exe [4989416 2025-02-17] (ESET, spol. s r.o. -> ESET)
S4 efdesrv; C:\Program Files\ESET\ESET Full Disk Encryption\efdesrv.exe [382440 2025-01-06] (ESET, spol. s r.o. -> ESET)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5566320 2025-06-29] (ESET, spol. s r.o. -> ESET)
S3 EHttpSrv; C:\Program Files\ESET\ESET Security\ehttpsrv.exe [58224 2025-06-29] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [4532392 2025-06-29] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [4532392 2025-06-29] (ESET, spol. s r.o. -> ESET)
S4 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-08-02] (Epic Games Inc. -> Epic Games, Inc.)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpDefenderCoreService.exe [1431160 2024-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 MsMpiLaunchSvc; C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe [159512 2019-11-04] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_1ace26b01689a987\Display.NvContainer\NVDisplay.Container.exe [1275008 2025-08-15] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [918456 2025-07-24] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [24710448 2025-05-22] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\NisSrv.exe [3199656 2024-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MsMpEng.exe [133704 2024-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ACE-BASE; C:\WINDOWS\system32\drivers\ACE-BASE.sys [4211872 2025-02-22] (Microsoft Windows Hardware Compatibility Publisher -> ANTICHEATEXPERT.COM)
S3 ace-game; C:\WINDOWS\System32\drivers\ace-game.sys [3260144 2025-02-22] (Tencent Technology (Shenzhen) Company Limited -> ANTICHEATEXPERT.COM)
S3 ACE-SSC-DRV64; C:\Program Files\AntiCheatExpert\SGuard\x64\plugins\ACE-SSC-DRV64.sys [236136 2025-02-08] (Microsoft Windows Hardware Compatibility Publisher -> ANTICHEATEXPERT.COM)
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [394176 2024-06-04] (Microsoft Windows Hardware Compatibility Publisher -> Bluestack System Inc.)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-04-27] (Microsoft Corporation) [File not signed]
R0 DLMFENC; C:\WINDOWS\System32\DRIVERS\DLMFENC.sys [193952 2024-11-27] (ESET, spol. s r.o. -> ESET, spol. s r.o.)
R0 dlpfde; C:\WINDOWS\System32\drivers\dlpfde.sys [372792 2025-03-05] (ESET, spol. s r.o. -> ESET, spol. s r.o.)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [225144 2025-06-29] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [121816 2025-06-29] (Microsoft Windows Hardware Compatibility Publisher -> ESET)
R1 edevmonm; C:\WINDOWS\System32\DRIVERS\edevmonm.sys [124416 2025-06-29] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [16336 2024-08-05] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [269544 2025-06-29] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [57824 2025-06-29] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [86712 2025-06-29] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [128512 2025-06-29] (ESET, spol. s r.o. -> ESET)
S3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64sta.inf_amd64_dd02613ac8afa9e2\rt68cx21x64.sys [896448 2025-06-25] (Realtek Semiconductor Corp. -> Realtek)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [22080 2024-10-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [602392 2024-10-16] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2024-10-16] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-08-16 09:37 - 2025-08-16 09:38 - 000019768 _____ C:\Users\Lukáš\Desktop\FRST.txt
2025-08-15 21:01 - 2025-08-15 21:01 - 000677108 _____ C:\WINDOWS\system32\perfh005.dat
2025-08-15 21:01 - 2025-08-15 21:01 - 000144960 _____ C:\WINDOWS\system32\perfc005.dat
2025-08-15 21:00 - 2025-08-15 21:00 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2025-08-15 20:59 - 2025-08-15 20:59 - 002402672 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2025-08-15 20:59 - 2025-08-15 20:59 - 002402672 _____ C:\WINDOWS\system32\vulkaninfo.exe
2025-08-15 20:59 - 2025-08-15 20:59 - 001908104 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-08-15 20:59 - 2025-08-15 20:59 - 001908104 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2025-08-15 20:59 - 2025-08-15 20:59 - 001581944 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2025-08-15 20:59 - 2025-08-15 20:59 - 001581944 _____ C:\WINDOWS\system32\vulkan-1.dll
2025-08-15 20:59 - 2025-08-15 20:59 - 001395576 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2025-08-15 20:59 - 2025-08-15 20:59 - 001395576 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2025-08-15 20:59 - 2025-08-15 20:59 - 000477848 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2025-08-15 20:59 - 2025-08-15 20:59 - 000374992 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 026342096 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2025-08-15 20:58 - 2025-08-15 20:58 - 024675048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 021712592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 007683280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 005917328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 005618192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 005469312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 004917440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 004175056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 002316496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 001714808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 001595512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2025-08-15 20:58 - 2025-08-15 20:58 - 001571472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 001304192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 001222376 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 001056896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 000853712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2025-08-15 20:58 - 2025-08-15 20:58 - 000812672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 000674432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 000508536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2025-08-15 20:58 - 2025-08-15 20:58 - 000468176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2025-08-15 20:58 - 2025-08-15 20:58 - 000149839 _____ C:\WINDOWS\system32\nvinfo.pb
2025-08-15 20:58 - 2025-08-15 20:58 - 000126056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2025-08-15 20:33 - 2025-08-15 20:34 - 009568256 _____ (Malwarebytes) C:\Users\Lukáš\Desktop\adwcleaner(1).exe
2025-08-14 17:55 - 2025-08-14 17:55 - 000246409 _____ C:\Users\Lukáš\Downloads\zpo_8830732003_6525VB005080_153512.pdf
2025-08-14 17:41 - 2025-08-14 17:41 - 000245269 _____ C:\Users\Lukáš\Downloads\zpo_8820601020_6525VB005639_153512.pdf
2025-08-14 17:38 - 2025-08-14 17:38 - 000051493 _____ C:\Users\Lukáš\Downloads\ZPO_final_zr1_8810519013_6525VB006925.pdf
2025-08-14 17:35 - 2025-08-14 17:35 - 000331767 _____ C:\Users\Lukáš\Downloads\zpo_8810519013_6525VB006925_153512.pdf
2025-08-14 17:34 - 2025-08-14 17:34 - 000261467 _____ C:\Users\Lukáš\Downloads\zpo_8820616015_6525VB005347_153512.pdf
2025-08-14 17:33 - 2025-08-14 17:33 - 000356826 _____ C:\Users\Lukáš\Downloads\zpo_8800353003_6525VB005476_153512 (2).pdf
2025-08-14 17:31 - 2025-08-14 17:31 - 000252119 _____ C:\Users\Lukáš\Downloads\zpo_8601613003_6525VB005434_153512.pdf
2025-08-14 16:26 - 2025-08-14 16:26 - 000002779 _____ C:\Users\Lukáš\Downloads\smime (1).p7s
2025-08-14 15:31 - 2025-08-14 19:57 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-08-13 17:48 - 2025-08-13 17:48 - 000323410 _____ C:\Users\Lukáš\Downloads\zpo_8810630019_6525VB005137_153512 (1).pdf
2025-08-06 19:39 - 2025-08-06 20:05 - 000000000 ____D C:\Users\Lukáš\Desktop\Prototyp - Fichna
2025-08-06 18:07 - 2025-08-06 19:39 - 000000000 ____D C:\Users\Lukáš\Desktop\Prototyp - JMB
2025-08-06 18:07 - 2025-08-06 18:20 - 000000000 ____D C:\Users\Lukáš\Desktop\Prototyp IPS
2025-08-06 18:07 - 2025-08-06 18:09 - 020963169 _____ C:\Users\Lukáš\Downloads\Výroba - prototypy uzávěrů.zip
2025-08-05 16:50 - 2025-08-05 16:50 - 000253555 _____ C:\Users\Lukáš\Downloads\C20-014262__00_0.pdf
2025-08-05 16:50 - 2025-08-05 16:50 - 000228759 _____ C:\Users\Lukáš\Downloads\C20-014264__00_0.pdf
2025-08-05 16:50 - 2025-08-05 16:50 - 000224316 _____ C:\Users\Lukáš\Downloads\C20-014270__00_0.pdf
2025-08-05 16:50 - 2025-08-05 16:50 - 000223149 _____ C:\Users\Lukáš\Downloads\C20-014269__00_0.pdf
2025-08-05 16:29 - 2025-08-05 16:49 - 000254893 _____ C:\Users\Lukáš\Downloads\C20-014259__00_0.pdf
2025-08-04 19:06 - 2025-08-04 19:06 - 000323410 _____ C:\Users\Lukáš\Downloads\zpo_8810630019_6525VB005137_153512.pdf
2025-08-04 18:53 - 2025-08-04 18:53 - 000013714 _____ C:\Users\Lukáš\Downloads\Rozměrový_prtokol_-_00265853.xlsx
2025-08-04 18:53 - 2025-08-04 18:53 - 000013660 _____ C:\Users\Lukáš\Downloads\Rozměrový_prtokol_-_00265860.xlsx
2025-08-04 18:53 - 2025-08-04 18:53 - 000013620 _____ C:\Users\Lukáš\Downloads\Rozměrový_prtokol_-_00266216.xlsx
2025-08-04 18:53 - 2025-08-04 18:53 - 000013585 _____ C:\Users\Lukáš\Downloads\Rozměrový_prtokol_-_00265963.xlsx
2025-08-04 18:52 - 2025-08-04 18:55 - 000241195 _____ C:\Users\Lukáš\Downloads\zpo_8632324002_6525VB004981_153512.pdf
2025-08-04 18:43 - 2025-08-04 18:43 - 000043115 _____ C:\Users\Lukáš\Downloads\lukassobarna-2025-088.pdf
2025-08-04 18:30 - 2025-08-04 18:30 - 000042265 _____ C:\Users\Lukáš\Downloads\JMB Steel-2025-075.pdf
2025-08-04 18:30 - 2025-08-04 18:30 - 000041140 _____ C:\Users\Lukáš\Downloads\JMB Steel-2025-078.pdf
2025-08-04 18:28 - 2025-08-04 18:28 - 000125952 _____ C:\Users\Lukáš\Downloads\Rozmerovy_protokol.xls
2025-08-03 17:21 - 2025-08-03 17:21 - 000047739 _____ C:\Users\Lukáš\Downloads\Shrnutí objednávky-164a75cf-fb9e-3257-8bce-6efb02e8558a.pdf
2025-07-28 16:16 - 2025-07-28 16:16 - 000221635 _____ C:\Users\Lukáš\Downloads\CH2.pdf
2025-07-28 16:16 - 2025-07-28 16:16 - 000214877 _____ C:\Users\Lukáš\Downloads\CH1.pdf
2025-07-27 18:13 - 2025-07-27 18:13 - 000275488 _____ C:\Users\Lukáš\Downloads\Díl003.Z3PRT
2025-07-27 18:13 - 2025-07-27 18:13 - 000053538 _____ C:\Users\Lukáš\Downloads\Díl001 (1).Z3PRT
2025-07-27 18:13 - 2025-07-27 18:13 - 000052313 _____ C:\Users\Lukáš\Downloads\Díl002.Z3PRT
2025-07-27 18:12 - 2025-07-27 18:12 - 000053538 _____ C:\Users\Lukáš\Downloads\Díl001.Z3PRT
2025-07-26 22:30 - 2025-07-26 22:52 - 000047819 _____ C:\Users\Lukáš\Desktop\Ozubene kolo počet zubu 52.dwg
2025-07-26 17:59 - 2025-07-26 17:59 - 000012627 _____ C:\Users\Lukáš\Downloads\ozubene_kolo_08B1_50zubu.pdf
2025-07-26 17:07 - 2025-07-27 19:00 - 000000000 ____D C:\Users\Lukáš\Desktop\ZW3D modely
2025-07-24 16:33 - 2025-07-26 20:50 - 000000000 ____D C:\ProgramData\DassaultSystemes
2025-07-24 16:33 - 2025-07-24 16:33 - 000000000 ____D C:\Users\Lukáš\AppData\Roaming\DassaultSystemes
2025-07-24 16:33 - 2025-07-24 16:33 - 000000000 ____D C:\Users\Lukáš\AppData\Local\DassaultSystemes
2025-07-24 16:32 - 2025-07-24 16:32 - 000183147 _____ C:\Users\Lukáš\Downloads\Kladka_D119.SLDPRT
2025-07-24 16:32 - 2025-07-24 16:32 - 000177902 _____ C:\Users\Lukáš\Downloads\Kladka_D62.SLDPRT
2025-07-24 16:29 - 2025-07-24 16:29 - 000034314 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-07-24 16:29 - 2025-07-24 16:29 - 000034314 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-07-23 19:34 - 2025-07-23 19:34 - 001446360 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2025-07-23 19:12 - 2025-07-23 19:14 - 001278725 _____ C:\Users\Lukáš\Desktop\Odstraněnka El. závad.pdf
2025-07-23 19:08 - 2025-07-23 19:08 - 000356826 _____ C:\Users\Lukáš\Downloads\zpo_8800353003_6525VB005476_153512 (1).pdf
2025-07-23 18:46 - 2025-07-23 18:46 - 000299138 _____ C:\Users\Lukáš\Downloads\EX_OV_Porubská_353_BJ_3_6525VB005476.pdf
2025-07-23 18:46 - 2025-07-23 18:46 - 000016383 _____ C:\Users\Lukáš\Downloads\Revision_6525VB005476.pdf
2025-07-23 18:45 - 2025-07-23 19:03 - 000249499 _____ C:\Users\Lukáš\Downloads\zpo_8800353003_6525VB005476_153512.pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-08-16 09:37 - 2025-04-27 13:41 - 000003326 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2025-08-16 09:37 - 2024-03-17 11:44 - 000000000 ____D C:\FRST
2025-08-16 09:37 - 2024-03-17 11:43 - 002409472 _____ (Farbar) C:\Users\Lukáš\Desktop\FRST64(1).exe
2025-08-16 09:37 - 2024-01-28 19:56 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2025-08-16 09:36 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-08-16 09:36 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-08-16 09:35 - 2025-04-27 13:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-08-16 09:35 - 2025-04-27 13:38 - 000002628 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-08-16 09:35 - 2025-04-27 13:36 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-08-16 09:35 - 2025-04-27 11:29 - 000000000 ____D C:\Users\Lukáš
2025-08-16 09:35 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-08-16 09:35 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-08-16 09:35 - 2023-12-09 21:00 - 000000000 ____D C:\ProgramData\Packages
2025-08-16 09:35 - 2023-12-09 20:49 - 000000000 ____D C:\ProgramData\NVIDIA
2025-08-16 09:35 - 2023-12-09 20:44 - 000000000 ____D C:\Users\Lukáš\AppData\Local\Packages
2025-08-16 09:35 - 2023-11-16 13:35 - 000012288 ___SH C:\DumpStack.log.tmp
2025-08-16 09:12 - 2023-12-09 22:50 - 000000000 ____D C:\Users\Lukáš\AppData\Local\D3DSCache
2025-08-15 21:14 - 2024-01-28 18:24 - 000000000 ____D C:\SteamLibrary
2025-08-15 21:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2025-08-15 21:03 - 2025-04-27 13:41 - 000003292 _____ C:\WINDOWS\system32\Tasks\Driver Booster SkipUAC (Lukáš)
2025-08-15 21:03 - 2025-04-27 13:41 - 000002254 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Lukáš
2025-08-15 21:03 - 2024-01-28 19:55 - 000000000 ____D C:\Program Files\CCleaner
2025-08-15 21:01 - 2025-04-27 13:40 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-08-15 21:01 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2025-08-15 20:43 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-08-15 20:13 - 2025-07-12 12:05 - 000000000 ____D C:\Users\Lukáš\AppData\Roaming\ZWSOFT
2025-08-15 19:54 - 2025-01-07 19:07 - 000000000 ____D C:\Jts
2025-08-14 21:06 - 2025-04-27 13:36 - 000590280 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-08-14 21:05 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-08-14 21:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-08-14 21:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-08-14 21:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-08-14 21:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-08-14 21:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-08-14 18:08 - 2023-12-09 21:49 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-08-14 18:00 - 2023-12-09 21:49 - 223939376 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-08-14 17:58 - 2023-12-10 16:23 - 000000000 ____D C:\Users\Lukáš\AppData\Roaming\Microsoft\Excel
2025-08-14 17:15 - 2024-02-15 11:37 - 000000000 ____D C:\Users\Lukáš\Desktop\Excel + World
2025-08-14 17:15 - 2023-12-10 16:23 - 000000000 ____D C:\Users\Lukáš\AppData\Roaming\Microsoft\Word
2025-08-14 15:35 - 2025-04-27 13:41 - 000003168 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3447725056-3232184070-4191867560-1001
2025-08-13 19:21 - 2025-04-27 13:39 - 003389952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-08-13 17:50 - 2025-06-16 19:02 - 000002381 _____ C:\Users\Lukáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-08-13 17:50 - 2025-04-27 13:41 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3447725056-3232184070-4191867560-1001
2025-08-13 17:50 - 2025-04-27 13:41 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3447725056-3232184070-4191867560-1001
2025-08-11 19:10 - 2023-12-09 22:43 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-08-11 19:10 - 2023-12-09 22:43 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2025-08-08 20:16 - 2023-12-10 17:23 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-08-08 20:16 - 2023-12-10 17:23 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-08-08 20:13 - 2025-06-05 20:56 - 000046644 _____ C:\Users\Lukáš\Desktop\IBKR kopi.xlsx
2025-08-08 15:27 - 2025-01-07 19:08 - 000001491 _____ C:\Users\Lukáš\Desktop\Trader Workstation.lnk
2025-08-08 15:27 - 2025-01-07 19:08 - 000000000 ____D C:\Users\Lukáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trader Workstation
2025-08-06 19:46 - 2025-04-27 13:41 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2025-08-06 19:46 - 2023-12-18 20:57 - 000000000 ____D C:\Users\Lukáš\AppData\Local\CrashDumps
2025-08-06 19:46 - 2023-12-09 21:37 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-08-01 17:39 - 2024-07-18 18:29 - 000000000 ____D C:\Users\Lukáš\Desktop\Heimstaden - bydleni
2025-08-01 15:19 - 2025-04-27 13:41 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{FEF11975-67BB-4A59-BFA5-4C18ECF74965}
2025-08-01 15:19 - 2025-04-27 13:41 - 000003590 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{212D5D9F-62E1-4BCD-A1A4-2D316B2B2DA7}
2025-07-27 19:20 - 2023-12-10 19:04 - 000000000 ____D C:\Users\Lukáš\AppData\Local\Steam
2025-07-26 21:21 - 2024-01-22 18:32 - 000000000 ____D C:\ProgramData\boost_interprocess
2025-07-26 20:43 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-07-26 20:43 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2025-07-26 20:43 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2025-07-24 17:00 - 2025-04-27 19:56 - 000000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2025-07-23 19:32 - 2025-04-27 13:41 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2025-07-23 19:10 - 2024-02-15 20:15 - 000130992 _____ C:\Users\Lukáš\AppData\Local\GDIPFONTCACHEV1.DAT

==================== Files in the root of some directories ========

2024-02-15 20:18 - 2024-02-15 20:18 - 000004096 ____H () C:\Users\Lukáš\AppData\Local\keyfile3.drm

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-08-2025
Ran by Lukáš (16-08-2025 09:39:52)
Running from C:\Users\Lukáš\Desktop
Microsoft Windows 11 Pro Version 24H2 26100.4946 (X64) (2025-04-27 11:41:52)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3447725056-3232184070-4191867560-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3447725056-3232184070-4191867560-503 - Limited - Disabled)
Guest (S-1-5-21-3447725056-3232184070-4191867560-501 - Limited - Disabled)
Lukáš (S-1-5-21-3447725056-3232184070-4191867560-1001 - Administrator - Enabled) => C:\Users\Lukáš
Pavel S (S-1-5-21-3447725056-3232184070-4191867560-1002 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-3447725056-3232184070-4191867560-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {26E0861C-6FB9-CEF9-E4F0-531986211ACE}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Enabled) {1EDB0739-25D6-CFA1-CFAF-FA2C78F25DB5}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip ZS 18.06 ZS v1.3.8 R1 (x64) (HKLM\...\7-Zip-Zstandard) (Version: 18.06 ZS v1.3.8 R1 - Igor Pavlov, Tino Reichardt)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1033-FFFF-7760-BC15014EA700}) (Version: 25.001.20435 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601108}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AIDA64 Engineer v5.99 (HKLM-x32\...\AIDA64 Engineer_is1) (Version: 5.99 - FinalWire Ltd.)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
AntiCheatExpert (HKLM\...\AntiCheatExpert) (Version: 17.6.2412.504 - )
AutoCAD Open in Desktop (HKLM\...\{1C66A0B0-784E-4777-97B3-93F843D1C8CF}) (Version: 1.0.20.0 - Autodesk)
Autodesk App Manager (HKLM-x32\...\{9C2E49CB-F671-47EC-8093-CC1A8749A92A}) (Version: 3.2.1 - Autodesk)
Autodesk AutoCAD 2022 - English (HKLM\...\{1E7D4EF7-A28E-3D3E-BA3C-C6FAE4AAB2E0}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk AutoCAD 2022 Language Pack – Čeština (Czech) (HKLM\...\{B914E66E-BDF2-3DB2-ADDC-782AC4A48F1F}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk AutoCAD Performance Feedback Tool 1.3.8 (HKLM-x32\...\{3EDD9D7F-E305-485B-A0E5-7F6D24A87093}) (Version: 1.3.8.0 - Autodesk)
Autodesk Identity Manager (HKLM\...\Autodesk Identity Manager) (Version: 1.10.4.0 - Autodesk)
Autodesk Material Library 2022 (HKLM-x32\...\{A9221A68-5AD0-4215-B54F-CB5DBA4FB27C}) (Version: 20.3.7.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2022 (HKLM-x32\...\{6256584F-B04B-41D4-8A59-44E70940C473}) (Version: 20.3.7.0 - Autodesk)
BlueStacks App Player (HKLM\...\BlueStacks_nxt) (Version: 5.21.210.1023 - now.gg, Inc.)
BlueStacks Services (HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\BlueStacksServices) (Version: 3.0.9 - now.gg, Inc.)
BlueStacks X (HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\BlueStacks X) (Version: 10.41.210.1001 - now.gg, Inc.)
bocang v1.0 zw3d2026 win x64 (HKLM\...\{980AD500-B432-4430-929A-461B640B01D4}_is1) (Version: 1.0 - 粤港澳大湾区（广东）国创中心)
CCleaner (HKLM\...\CCleaner) (Version: 6.38 - Piriform)
Dassault Systemes Software VC11 Prerequisites x86-x64 (HKLM\...\{C857169D-3F1A-4530-99A0-CAE966CE267E}) (Version: 11.0.1 - Dassault Systemes)
Epic Games Launcher (HKLM-x32\...\{B85FAA6E-A9AA-4655-9029-E1A4EDC05E1A}) (Version: 1.3.93.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{57A956AB-4BCC-45C6-9B40-957E4E125568}) (Version: 2.0.44.0 - Epic Games, Inc.)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - )
ESET Endpoint Security (HKLM\...\{E96886FF-EC69-4A16-AF40-540A146FE3FE}) (Version: 12.0.2058.0 - ESET, spol. s r.o.)
ESET Full Disk Encryption (HKLM\...\{3B753DA2-804C-42F7-8C58-4634623888BF}) (Version: 2.1.12.0 - ESET, spol. s r.o.)
Google Chrome (HKLM\...\{2954C506-50DF-3C89-A2FC-B1B1161F142D}) (Version: 139.0.7258.66 - Google LLC)
Google Chrome (HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\Google Chrome) (Version: 115.0.5790.99 - Google LLC)
IObit Driver Booster 10.5.0.139 (HKLM-x32\...\IObit Driver Booster_is1) (Version: 10.5.0.139 - LR)
Kontrola stavu osobního počítače s Windows (HKLM\...\{95548B78-8547-4E91-B0DA-1CBB82150917}) (Version: 3.7.2204.15001 - Microsoft Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Microsoft .NET Core Host - 3.1.32 (x64) (HKLM\...\{8A8E3A04-83BC-4CDE-9259-893B666C1AB1}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.32 (x64) (HKLM\...\{ABC6B3C2-1A8D-4C5E-AC16-C2AE44F02743}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.32 (x64) (HKLM\...\{A741B803-3F0E-4684-81EF-FC128D15A92C}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.32 (x64) (HKLM-x32\...\{784973c8-d618-4ac8-97ed-1fd52c5bdf2f}) (Version: 3.1.32.31915 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.32 - Shared Framework (x64) (HKLM-x32\...\{65fddc17-d55b-46b7-a750-5c179fef3d81}) (Version: 3.1.32.22566 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.32 Shared Framework (x64) (HKLM\...\{2E69E59E-17DF-3977-A405-49096F8B8432}) (Version: 3.1.32.22566 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 139.0.3405.86 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 139.0.3405.86 - Microsoft Corporation) Hidden
Microsoft MPI (10.1.12498.18) (HKLM\...\{8499ACD3-C1E3-45AB-BF96-DA491727EBE1}) (Version: 10.1.12498.18 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0405-1000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office Access MUI (Czech) 2007 (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Excel MUI (Czech) 2007 (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Czech) 2007 (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Czech) 2007 (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2007 (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (HKLM-x32\...\{90120000-002C-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{0B7A4B67-2A38-42B1-9857-662FAB361E08}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{FDF9A959-241A-4662-A8DE-7DED9C22D160}) (Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (Czech) 2007 (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Czech) 2007 (HKLM\...\{90120000-002A-0405-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2007 (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\OneDriveSetup.exe) (Version: 25.137.0715.0001 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.06502 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34438 (HKLM-x32\...\{b49c10dd-4d54-45f8-ad13-fa25704456a4}) (Version: 14.42.34438.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.42.34438 (HKLM-x32\...\{ba10fda9-f731-441f-a999-000bbb7ceec2}) (Version: 14.42.34438.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34438 (HKLM\...\{E528AD94-12D7-42C4-91A3-908BE28E9BD2}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34438 (HKLM\...\{2E15F519-4FDA-4834-B4EE-7EFCE7D8D4EE}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.42.34438 (HKLM-x32\...\{A5592FEF-F948-4BA6-A066-8BBFC2DC7EE1}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.42.34438 (HKLM-x32\...\{5D0C4511-3CA1-4FF8-A4BA-C0E1957ABEEA}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 137.0.2 (x64 cs)) (Version: 137.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 132.0.2 - Mozilla)
NVIDIA Ovladače grafiky 512.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 512.15 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Pomocník s instalací Windows 11 (HKLM-x32\...\{115DF11E-4B4C-4EA9-9A79-00DB0C7EF02D}) (Version: 1.4.19041.3630 - Microsoft Corporation)
qBittorrent (HKLM-x32\...\qBittorrent) (Version: 4.6.4 - The qBittorrent project)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9239.1 - Realtek Semiconductor Corp.)
Speciální aplikace Autodesk (HKLM-x32\...\{46EA8955-D629-4B3E-AAF0-D136031D7C95}) (Version: 3.2.1 - Autodesk)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer (HKLM\...\TeamViewer) (Version: 15.66.5 - TeamViewer)
Tpv výpočty 10.7.0 (HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\{F6B5C00E-1A01-4ECE-9E7E-51E4B2945A9F}_is1) (Version: - Radek Jureček)
Trader Workstation (HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\5889-6375-8446-2021) (Version: stable (10.37.1k) 20250807 11:58:23 - Interactive Brokers LLC)
Uložit do služby Autodesk Web and Mobile (HKLM\...\{192B349F-C3F7-4BBE-B49E-00DD4BD28373}) (Version: 3.0.29 - Autodesk) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
Vietcong - Gold Edition verze 1.60 (HKLM-x32\...\{C77CF4A8-70F3-41AA-84AE-AA82298A4725}_is1) (Version: 1.60 - )
VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version: - )
ZW3D 2026 (HKLM\...\{1A155128-4E43-4B4E-9AB8-C2D44C1729E9}) (Version: 17.0.25.0526 - ZWSOFT CO., LTD.(Guangzhou))
ZW3D 2026 (HKLM\...\{B5BAB4EC-B2F1-45BC-BE5B-829012424039}) (Version: 17.0.25.0526 - ZWSOFT CO., LTD.(Guangzhou)) Hidden
ZWTeammate For ZW3D 2026 (HKLM\...\{0A0DE496-5B62-4659-9755-3A6A689B2705}) (Version: 1.6.0 - ZWSOFT CO.,LTD.(Guangzhou))

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3912.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-30] ()
@{MicrosoftWindows.57074904.InpApp_1000.26100.4484.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57074904.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074904.InpApp_cw5n1h2txyewy [2025-08-14] (Microsoft Windows)
@{MicrosoftWindows.57074904.InpApp_1000.26100.4652.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57074904.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074904.InpApp_cw5n1h2txyewy [2025-08-14] (Microsoft Windows)
@{MicrosoftWindows.57074904.InpApp_1000.26100.4768.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57074904.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074904.InpApp_cw5n1h2txyewy [2025-08-14] (Microsoft Windows)
Balíček prostředí funkcí systému Windows -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074904.InpApp_cw5n1h2txyewy [2025-08-14] (Microsoft Windows)
ESET Context Menu -> C:\Program Files\ESET\ESET Security [2025-08-01] (Sparse Package)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2023-12-09] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2023-12-09] (Microsoft Corporation) [MS Ad]
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_55.20610.576.0_x64__8wekyb3d8bbwe [2025-07-07] (Microsoft Corporation)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.968.0_x64__56jybvy8sckqj [2025-06-12] (NVIDIA Corp.)
TradingView -> C:\Program Files\WindowsApps\31178TradingViewInc.TradingView_2.12.0.0_x64__q4jpyh43s5mv6 [2025-08-13] (TradingView, Inc.) [Startup Task]
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2532.3.0_x64__cv1g1gvanyjgm [2025-08-14] (WhatsApp Inc.) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3447725056-3232184070-4191867560-1001_Classes\CLSID\{345D3165-3889-4694-AB75-A91A27B217E8}\localserver32 -> D:\AutoCad\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-3447725056-3232184070-4191867560-1001_Classes\CLSID\{8B4929F8-076F-4AEC-AFEE-8928747B7AE3}\localserver32 -> D:\AutoCad\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-3447725056-3232184070-4191867560-1001_Classes\CLSID\{AA46BA8A-9825-40FD-8493-0BA3C4D5CEB5}\localserver32 -> D:\AutoCad\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-3447725056-3232184070-4191867560-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> D:\AutoCad\AutoCAD 2022\cs-CZ\acadficn.dll (Autodesk Asia Pte. Ltd. -> Autodesk, Inc.)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2217832 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2021-01-29] (Autodesk, Inc. -> Autodesk, Inc.)
ContextMenuHandlers1: [7-Zip-Zstandard] -> {23170F69-20BB-278A-1000-000100020000} => C:\Program Files\7-Zip-Zstandard\7-zip.dll [2018-12-30] (Igor Pavlov, Tino Reichardt) [File not signed]
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2021-01-29] (Autodesk, Inc. -> Autodesk)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2025-03-13] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-06-29] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] () [File not signed]
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-06-29] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers4: [7-Zip-Zstandard] -> {23170F69-20BB-278A-1000-000100020000} => C:\Program Files\7-Zip-Zstandard\7-zip.dll [2018-12-30] (Igor Pavlov, Tino Reichardt) [File not signed]
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] () [File not signed]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_1ace26b01689a987\nvshext.dll [2025-08-15] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip-Zstandard] -> {23170F69-20BB-278A-1000-000100020000} => C:\Program Files\7-Zip-Zstandard\7-zip.dll [2018-12-30] (Igor Pavlov, Tino Reichardt) [File not signed]
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2025-03-13] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-06-29] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] () [File not signed]

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [8968]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\Software\Classes\.scr: AutoCADScriptFile =>

==================== Internet Explorer (Whitelisted) =============

BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2025-03-13] (Adobe Inc. -> Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2025-03-13] (Adobe Inc. -> Adobe Systems Incorporated)
BHO-x32: No Name -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2025-03-13] (Adobe Inc. -> Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2025-03-13] (Adobe Inc. -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2025-03-13] (Adobe Inc. -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2025-03-13] (Adobe Inc. -> Adobe Systems Incorporated)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-03-18 23:03 - 2024-01-28 19:57 - 000001810 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 lm.licenses.adobe.com
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm-prd-da1.licenses.adobe.com
127.0.0.1 activate.adobe.com
127.0.0.1 activate.wip4.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 practivate-da1.adobe.com
127.0.0.1 na1r.services.adobe.com
127.0.0.1 hlrcv.stage.adobe.com
127.0.0.1 uds.licenses.adobe.com
127.0.0.1 licenses.adobe.com
127.0.0.1 license.adobe.com
127.0.0.1 helpexamples.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.adobe.com
127.0.0.1 na1r.services.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 genuine.adobe.com
127.0.0.1 prod.adobegenuine.com
127.0.0.1 license.piriform.com
127.0.0.1 www.license.piriform.com
127.0.0.1 ccleaner.piriform.com
127.0.0.1 www.ccleaner.piriform.com
127.0.0.1 license-api.ccleaner.com

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.0.1
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Microsoft MPI\Bin\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\dotnet\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Lukáš\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\11346208261055613744\133991335396203876.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run: => "ESET Full Disk Encryption Startup"
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKLM\...\StartupApproved\Run32: => "SecurityHealth"
HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_076A9EB0D5804522FC34D41423B600BC"
HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\StartupApproved\Run: => "electron.app.BlueStacks Services"
HKU\S-1-5-21-3447725056-3232184070-4191867560-1001\...\StartupApproved\Run: => "Steam"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{B21120E3-2A99-4386-A0D0-05BF3F5E2139}] => (Block) C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe (Adobe Inc. -> Adobe Systems Incorporated)
FirewallRules: [{4C29D456-4042-49C5-AAA7-3E6043EB453F}] => (Block) C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef\AcroCEF.exe (Adobe Inc. -> Adobe Systems Incorporated)
FirewallRules: [{E475E034-5D1D-4CD1-92B4-B23438C0E002}] => (Block) C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe (Adobe Inc. -> Adobe Systems Incorporated)
FirewallRules: [{98A900CF-DAFB-4AA5-963C-7FBB4B982672}] => (Block) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [{5E8EA564-844C-4FB3-B166-FFB6034F43D6}] => (Block) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [{03E128EB-759F-4182-8AEC-E3EA9ED8EB28}] => (Block) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [{FB5C08BD-1B11-4269-B2CB-B11B6A2A07EB}] => (Block) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [{FD9F9D36-A25E-4933-8BC4-696B8F5BCA86}] => (Block) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [{5C6E8293-C27C-474A-B61E-6E0C1AD6E1A6}] => (Block) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [{B676E806-D5E8-417E-AE1E-0FA24749D0BA}] => (Block) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [{9B3F7298-EC19-49BC-BC4F-3967F9A7B4AD}] => (Block) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [{C9E7C2C0-D8C1-4B8E-B784-26473033E282}] => (Block) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [{FF8A801C-1561-4B14-A2E5-CA0C72B9C6E1}] => (Block) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [{6AC3FFFB-0C56-43E4-8DF1-759D381C4F76}] => (Block) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [{5B2E30D9-036A-4605-9BC1-E9ABE062D0C9}] => (Block) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [{9A821D38-C969-41D3-A8B6-91F98C4DD6C2}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Delta Force\Launcher\df_launcher.exe (PROXIMA BETA PTE. LIMITED -> Tencent)
FirewallRules: [{9E664301-E2A8-47D5-AECE-605129964716}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Delta Force\Launcher\df_launcher.exe (PROXIMA BETA PTE. LIMITED -> Tencent)
FirewallRules: [{38DC78C0-DDD7-4832-ADE1-F9AFCC0D7BA5}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe () [File not signed]
FirewallRules: [{2297022D-8FE6-4B7B-B1B4-CCE496F8D201}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe () [File not signed]
FirewallRules: [{E776496B-E324-4D50-92A1-AECB7DF72367}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe (Now.gg, INC -> The Qt Company Ltd.)
FirewallRules: [{43A30D95-EC9C-4FC3-B263-F05C948DB461}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Now.gg, INC -> BlueStack Systems)
FirewallRules: [{72440044-598C-41CF-80C3-D429387B15F2}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe (Now.gg, INC -> Bluestack Systems, Inc.)
FirewallRules: [{2D316510-F5BE-4D10-AAD1-5200423E6BF1}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [{B32D45BF-2645-45D3-B6D0-98544F0DEDE2}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [{81E23A17-F232-4CC1-AD1E-DC30F3666493}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe (Valve Corp. -> 2K Czech) [File not signed]
FirewallRules: [{A9E5F7FD-DF47-4E6F-8AAC-14BEFE02D8D3}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe (Valve Corp. -> 2K Czech) [File not signed]
FirewallRules: [{8008754C-A265-430D-82C9-30DFD5F251A9}] => (Block) C:\Program Files\CCleaner\CCUpdate.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{D86BFEE3-51D9-47C1-B5FF-848029397119}] => (Block) C:\Program Files\CCleaner\CCUpdate.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{F60C9635-6827-4854-96C6-B52E217DC526}] => (Block) C:\Program Files\CCleaner\CCleaner64.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{CE88B45C-5767-4407-B4E5-9E03D288C083}] => (Block) C:\Program Files\CCleaner\CCleaner64.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{3A0746D6-7832-44A3-BDCC-BAEEBC8DC4EC}] => (Block) C:\Program Files\CCleaner\CCleaner.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{729F9128-E52F-49C6-AF34-37C12402C1B6}] => (Block) C:\Program Files\CCleaner\CCleaner.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{3C8AA7D2-0849-4A91-B9DB-A1BCBE95E3D6}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\World of Tanks Blitz\wotblitz.exe (Wargaming.net) [File not signed]
FirewallRules: [{5585F02D-B8C1-4112-8A01-B7917CE28733}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\World of Tanks Blitz\wotblitz.exe (Wargaming.net) [File not signed]
FirewallRules: [{25ABA46C-5386-4C7D-A3DA-B8A53A815E41}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\World of Warships\WorldOfWarships.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{98569F51-A099-46AB-9E98-98478B88D0E4}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\World of Warships\WorldOfWarships.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{965BAFB0-A405-44CC-9DC1-1CFC2DBE37A4}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Business Tour\BusinessTour.exe () [File not signed]
FirewallRules: [{F1A84CF0-F780-453E-ADB7-494AE395056A}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Business Tour\BusinessTour.exe () [File not signed]
FirewallRules: [{CB164DA3-6F6D-473C-9AD2-9E55A66A092F}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{F77AE037-CF35-4015-A9FB-CF92D175A9CB}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{6BB8C183-2C43-4078-886E-79FDB85050A5}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{77EB7EC6-61FA-4303-8BF1-624231BE2A2F}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{B9648E7D-86E4-4782-A62E-915B6B859C8D}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FE8F6C8D-9D52-45C7-BB43-01CEED1CB7F4}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{3A631D39-269F-4A30-8D1B-BF3641D3152D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D496F010-E2A5-4D40-8383-FC56B1801111}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{442C1A32-6727-4398-B057-C00BEEE51776}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{0A1C6C6D-0D40-45A2-87FF-B077119B2261}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{5A69DE7F-C0B2-4CCB-8286-EFE12DD7FEE7}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{164F5350-C7C6-42FE-8F7F-0BADD5E3B193}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{DC167B89-BF3E-4344-AE4D-5438290E83E4}] => (Allow) C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{AC32B118-FF62-4E29-95A9-BAD4D61CE557}] => (Allow) C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8A62D9C8-B7DC-4514-AC17-B7DCABC1161F}] => (Allow) C:\Program Files\Microsoft MPI\Bin\mpiexec.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{518E9914-F260-4835-A64E-989E7B01B068}] => (Allow) C:\Program Files\Microsoft MPI\Bin\mpiexec.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{62AA069D-4EF5-4CCD-B680-4F6AD7BA1CA7}] => (Allow) C:\Program Files\Microsoft MPI\Bin\smpd.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D7235B11-7351-4576-A766-BAD648A83544}] => (Allow) C:\Program Files\Microsoft MPI\Bin\smpd.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6F0AA600-78C9-40E2-AA51-3629DC1B9238}] => (Allow) C:\Program Files\ZWSOFT\ZW3D 2026\ZW3D.exe (ZWSOFT CO., LTD.(Guangzhou) -> ZWSOFT CO., LTD.(Guangzhou))
FirewallRules: [{0D2A1E19-B6EF-4EFD-8D31-C6796AADBEE2}] => (Allow) C:\Program Files\ZWSOFT\ZW3D 2026\ZW3D.exe (ZWSOFT CO., LTD.(Guangzhou) -> ZWSOFT CO., LTD.(Guangzhou))
FirewallRules: [{A3EE86CD-8BD2-412A-86CA-D0B20FFC2530}] => (Allow) C:\Program Files\ZWSOFT\ZW3D 2026\ZwLicenseManager.exe (ZWSOFT CO., LTD.(Guangzhou) -> ZWSOFT CO., LTD.(Guangzhou))
FirewallRules: [{7D9F0EA1-4E93-4463-A2DB-44193BC5CD4E}] => (Allow) C:\Program Files\ZWSOFT\ZW3D 2026\ZwLicenseManager.exe (ZWSOFT CO., LTD.(Guangzhou) -> ZWSOFT CO., LTD.(Guangzhou))
FirewallRules: [{3E940582-0A1A-4EC2-B247-8F0BA6EAE360}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

16-08-2025 09:28:31 Windows Update
16-08-2025 09:28:51 Windows Update

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (08/14/2025 06:08:03 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: NT AUTHORITY)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.

Error: (08/14/2025 03:31:33 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x80070006, Neplatný popisovač..

Operace:
Spouštění asynchronní operace

Kontext:
Aktuální stav: DoSnapshotSet

Error: (08/14/2025 03:28:48 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Vytvoření bodu obnovení se nezdařilo (Proces = C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wuauserv; Popis = Windows Update; Chyba = 0x81000101).

Error: (08/06/2025 07:46:04 PM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-NP4QRMM)
Description: Název chybující aplikace: Acrobat.exe, verze: 25.1.20435.0, časové razítko: 0x67d2292d
Název chybujícího modulu: Acrobat.dll, verze: 25.1.20435.0, časové razítko: 0x67d22925
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000b88191
ID chybujícího procesu: 0x2168
Čas spuštění chybující aplikace: 0x1dc06f942d435b2
Cesta k chybující aplikaci: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Cesta k chybujícímu modulu: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.dll
ID sestavy: 0020151e-b282-4575-ac95-7da24ad90529
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (07/28/2025 04:09:12 PM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-NP4QRMM)
Description: Název chybující aplikace: zw3d.exe, verze: 30.0.0.0, časové razítko: 0x6830198e
Název chybujícího modulu: nvoglv64.dll, verze: 32.0.15.7688, časové razítko: 0x685b02b0
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000106dd3d
ID chybujícího procesu: 0x2368
Čas spuštění chybující aplikace: 0x1dbffc7337851f5
Cesta k chybující aplikaci: C:\Program Files\ZWSOFT\ZW3D 2026\zw3d.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_fb80e95fa979ce23\nvoglv64.dll
ID sestavy: 60787a75-ea52-4210-9a5c-2f6933cdb9ab
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (07/28/2025 04:09:09 PM) (Source: NVIDIA OpenGL Driver) (EventID: 1) (User: )
Description: A TDR has been detected.
The application must close.

Error code: 7
(pid=9064 tid=2636 zw3d.exe 64bit)

Visit http://nvidia.custhelp.com/app/answers/detail/a_id/3633 for more information.

Error: (07/23/2025 07:45:42 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Název chybující aplikace: NVDisplay.Container.exe, verze: 1.39.3323.1171, časové razítko: 0x64e85748
Název chybujícího modulu: combase.dll, verze: 10.0.26100.4652, časové razítko: 0x69615351
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000c2188
ID chybujícího procesu: 0xa50
Čas spuštění chybující aplikace: 0x1dbf4088dff4b7f
Cesta k chybující aplikaci: C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_13e0ffdc778a9096\Display.NvContainer\NVDisplay.Container.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\combase.dll
ID sestavy: 156993fc-5aa0-4139-8f03-64c6febf4f32
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (07/21/2025 08:22:07 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: Verze 10.0.26100.4484 programu Taskmgr.exe ukončila interakci se systémem Windows a byla ukončena. Pokud chcete zjistit, zda jsou k dispozici další informace o problému, zkontrolujte historii problémů v ovládacím panelu Zabezpečení a údržba.

System errors:
=============
Error: (08/16/2025 09:40:14 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error (-2147020471 = Zabezpečené spouštění není v tomto počítači zapnuto.). For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931

Error: (08/16/2025 09:40:14 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error (-2147020471 = Zabezpečené spouštění není v tomto počítači zapnuto.). For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931

Error: (08/16/2025 09:37:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (08/16/2025 09:37:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (30000 ms).

Error: (08/16/2025 09:35:15 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (9:33:11, ‎16.‎08.‎2025) bylo neočekávané.

Error: (08/16/2025 09:29:11 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9PC1H9VN18CM-Microsoft.StartExperiencesApp.

Error: (08/16/2025 09:12:07 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error (-2147020471 = Zabezpečené spouštění není v tomto počítači zapnuto.). For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931

Error: (08/16/2025 09:12:07 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error (-2147020471 = Zabezpečené spouštění není v tomto počítači zapnuto.). For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931

CodeIntegrity:
===============
Date: 2025-08-16 09:39:19
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\ESET\ESET Security\ekrn.exe) attempted to load \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

BIOS: American Megatrends Inc. C.E0 06/27/2018
Motherboard: MSI B150 PC MATE (MS-7971)
Processor: Intel(R) Core(TM) i5-6500 CPU @ 3.20GHz
Percentage of memory in use: 11%
Total physical RAM: 40924.14 MB
Available physical RAM: 36326.41 MB
Total Virtual: 43484.14 MB
Available Virtual: 38717.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:446.5 GB) (Free:11.13 GB) (Model: WD Green M.2 2280 480GB) NTFS
Drive d: (Druhy disk) (Fixed) (Total:930.88 GB) (Free:448.26 GB) (Model: WDC WD10EZEX-21WN4A0) NTFS
Drive g: (My Book) (Fixed) (Total:465.75 GB) (Free:82.59 GB) (Model: WD 5000AAV External USB Device) NTFS

\\?\Volume{d25347dc-2f23-4e47-8753-8890c5a3405e}\ () (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS
\\?\Volume{f745145b-7bf9-4a5f-be7d-8bea0bf27a06}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32
\\?\Volume{e48938f4-a255-4791-8d95-af3776b8b472}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 447.1 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 475DDCC4)

Partition: GPT.

==========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 6FE8B7D9)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

#2 Příspěvek od **JaRon** » 16 srp 2025 08:55

Ahoj,
1. odinstaluj IObit Driver Booster
2. prescanuj PC s MBAM - log sem
3. skontroluj velkost adresara plocha/desktop - nemal by presahovat 1GB prip. poupratuj

sobtik · #3 Příspěvek od **sobtik** » 16 srp 2025 09:59

Ten iobit není dobrý pro aktualizace?
Plocha pročuštěna, bylo tam 35G.

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 8/16/2025
Scan Time: 10:52 AM
Log File: 5096dd50-7a7e-11f0-8217-4ccc6a63e9a1.json

-Software Information-
Version: 5.3.6.205
Components Version: 138.0.5346
Update Package Version: 1.0.102061
License: Expired

-System Information-
OS: Windows 11 (Build 26100.4946)
CPU: x64
File System: NTFS
User: DESKTOP-NP4QRMM\Luk\u00c3\u00a1\u00c5\u00a1

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 233861
Threats Detected: 0
Threats Quarantined: 0
Time Elapsed: 2 min, 43 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

#4 Příspěvek od **JaRon** » 16 srp 2025 10:49

Pouzi fixlist.txt s obsahom:

Start

CloseProcesses:

HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION

Task: {E1439FDA-E194-41DF-B91A-BB9A51D84040} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => %SystemRoot%\system32\clipesu.exe (No File)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {7703BFDA-EB02-48E7-9E99-65E56E0F97B7} - System32\Tasks\Microsoft\Windows\rempl\shell => %ProgramFiles%\rempl\sedlauncher.exe (No File)
Task: {5D81326C-D6EC-49A0-AAB5-D8A874E06E83} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe (No File)
Task: {2B92E035-5623-4620-9F2A-640FF4FF5F90} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {4E96EA0C-7256-4B8C-9749-ED81EA6A9460} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {F673CBA6-BC1F-425F-87FD-012D7D77679F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {E783D8FF-9B23-48BC-8F07-357B84C21DE5} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)

EmptyTemp:

End

sobtik · #5 Příspěvek od **sobtik** » 17 srp 2025 11:12

Fix result of Farbar Recovery Scan Tool (x64) Version: 16-08-2025
Ran by Lukáš (16-08-2025 14:30:02) Run:1
Running from C:\Users\Lukáš\Desktop
Loaded Profiles: Lukáš
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:

HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION

Task: {E1439FDA-E194-41DF-B91A-BB9A51D84040} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => %SystemRoot%\system32\clipesu.exe (No File)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {7703BFDA-EB02-48E7-9E99-65E56E0F97B7} - System32\Tasks\Microsoft\Windows\rempl\shell => %ProgramFiles%\rempl\sedlauncher.exe (No File)
Task: {5D81326C-D6EC-49A0-AAB5-D8A874E06E83} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe (No File)
Task: {2B92E035-5623-4620-9F2A-640FF4FF5F90} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {4E96EA0C-7256-4B8C-9749-ED81EA6A9460} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {F673CBA6-BC1F-425F-87FD-012D7D77679F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {E783D8FF-9B23-48BC-8F07-357B84C21DE5} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)

EmptyTemp:

End
*****************

Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E1439FDA-E194-41DF-B91A-BB9A51D84040}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E1439FDA-E194-41DF-B91A-BB9A51D84040}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Clip\ClipESU => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Clip\ClipESU" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E88D9B2C-DDEA-47B2-9582-085153004DB5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E88D9B2C-DDEA-47B2-9582-085153004DB5}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7703BFDA-EB02-48E7-9E99-65E56E0F97B7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7703BFDA-EB02-48E7-9E99-65E56E0F97B7}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\rempl\shell => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\rempl\shell" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5D81326C-D6EC-49A0-AAB5-D8A874E06E83}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5D81326C-D6EC-49A0-AAB5-D8A874E06E83}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2B92E035-5623-4620-9F2A-640FF4FF5F90}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2B92E035-5623-4620-9F2A-640FF4FF5F90}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4E96EA0C-7256-4B8C-9749-ED81EA6A9460}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E96EA0C-7256-4B8C-9749-ED81EA6A9460}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F673CBA6-BC1F-425F-87FD-012D7D77679F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F673CBA6-BC1F-425F-87FD-012D7D77679F}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E783D8FF-9B23-48BC-8F07-357B84C21DE5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E783D8FF-9B23-48BC-8F07-357B84C21DE5}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot" => removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 157308652 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 474880490 B
Windows/system/drivers => 3612568981 B
Edge => 0 B
Chrome => 700017568 B
Firefox => 62555978 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 74932 B
NetworkService => 76110 B
Lukáš => 51490167 B

RecycleBin => 45103640586 B
EmptyTemp: => 46.7 GB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 14:31:25 ====

#6 Příspěvek od **JaRon** » 17 srp 2025 11:45

Parada, malo by to byt OK

sobtik · #7 Příspěvek od **sobtik** » 17 srp 2025 17:03

Moc děkuji, vše je těd v pořádku.

#8 Příspěvek od **JaRon** » 17 srp 2025 17:05

Rado sa stalo

VIRY.CZ

Prosím o kontrolu

Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu