Prosím o kontrolu.

[Martin000]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-09-2025
Ran by Dafi (administrator) on DESKTOP-UPBMIK4 (Dell Inc. OptiPlex 390) (22-09-2025 11:25:46)
Running from C:\Users\Dafi\Desktop\FRST64 (1).exe
Loaded Profiles: Dafi
Platform: Microsoft Windows 10 Pro Version 22H2 19045.6332 (X64) Language: Čeština (Česko)
Default browser: "C:\Program Files\CCleaner Browser\Application\CCleanerBrowser.exe" --single-argument %1
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\AVG\Antivirus\AVGSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\aswEngSrv.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\NVIDIA Corporation\Display\nvtray.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(C:\Users\Dafi\AppData\Local\Kingsoft\WPS Office\12.2.0.22549\office6\wps.exe ->) (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) C:\Users\Dafi\AppData\Local\Kingsoft\WPS Office\12.2.0.22549\office6\promecefpluginhost.exe <2>
(C:\Users\Dafi\AppData\Local\Kingsoft\WPS Office\12.2.0.22549\office6\wpscloudsvr.exe ->) (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) C:\Users\Dafi\AppData\Local\Kingsoft\WPS Office\12.2.0.22549\office6\wps.exe <2>
(C:\Users\Dafi\AppData\Local\Kingsoft\WPS Office\12.2.0.22549\office6\wpscloudsvr.exe ->) (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) C:\Users\Dafi\AppData\Local\Kingsoft\WPS Office\12.2.0.22549\office6\wpscenter.exe <2>
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\AVGUI.exe <4>
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\CCleaner\CCleaner64.exe
(nvvsvc.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\wsc_proxy.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\avgToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.6271_none_7e26b07e7c7a5b82\TiWorker.exe
(svchost.exe ->) (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.) C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe
(svchost.exe ->) (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) C:\Users\Dafi\AppData\Local\Kingsoft\WPS Office\12.2.0.22549\office6\wpscloudsvr.exe
(TP-Link Technologies Co., Ltd) [File not signed] C:\Users\Dafi\TP-Link Wireless Adapter WPS Tool\TWCU.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [870568 2025-09-02] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1794888 2015-06-29] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM-x32\...\Run: [WPSTool] => C:\Users\Dafi\TP-Link Wireless Adapter WPS Tool\TWCU.exe [1891840 2018-01-30] (TP-Link Technologies Co., Ltd) [File not signed]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3938597611-2843190907-3524625560-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45988576 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-3938597611-2843190907-3524625560-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [408896 2021-03-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-3938597611-2843190907-3524625560-1001\...\Run: [MicrosoftEdgeAutoLaunch_C2AB7B4C4369F745A9AA04A850088382] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4241448 2025-09-18] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\EPSON PGSTM 64Monitor67: C:\WINDOWS\system32\E_L12067.DLL [108032 2008-08-08] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{052EB454-9F19-CB42-7875-807F79F311C4}] -> C:\Program Files\CCleaner Browser\Application\139.0.31974.157\Installer\chrmstp.exe [2025-09-21] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\139.0.7258.155\Installer\chrmstp.exe [2025-08-30] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {7D27B816-892B-43CA-A8DE-ACB06C750940} - System32\Tasks\AVG\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [5565096 2025-09-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {6086E144-BCF9-4DB7-AB71-765D9AABA480} - System32\Tasks\AVG\AVG Antivirus Patcher => C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus.exe [9032024 2025-08-15] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {4A5D261F-5D57-4072-87B9-FD21AA7E2F93} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [2181560 2023-08-01] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {D4C7F499-D7B8-42A5-A589-5D4015858DB1} - System32\Tasks\CCleaner Browser Heartbeat Task (Hourly) => C:\Program Files\CCleaner Browser\Application\CCleanerBrowser.exe [3645480 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {00E19307-126D-4B82-AD11-E8BD4D101F04} - System32\Tasks\CCleaner Browser Heartbeat Task (Logon) => C:\Program Files\CCleaner Browser\Application\CCleanerBrowser.exe [3645480 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B4A938C7-B481-490A-A121-D9D4CE7B5086} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {CBEFE686-3DAC-4643-B9DD-00DFE14F0C20} - System32\Tasks\CCleanerBrowserProtectS-1-5-21-3938597611-2843190907-3524625560-1001 => C:\Program Files\CCleaner Browser\Application\CCleanerBrowserProtect.exe [1774816 2025-09-11] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {AC17E035-72D1-488D-926E-236ABC6903F0} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "6615d54d-6df3-4a67-b25a-cbbfd50f58f5" --version "6.39.0.11548" --silent
Task: {CA3BD46D-2AD7-49B4-8B95-17E9D61FBA88} - System32\Tasks\CCleanerSkipUAC - Dafi => C:\Program Files\CCleaner\CCleaner.exe [39822560 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {62980A6A-33A3-4EA7-A905-E5F3A3B6F08F} - System32\Tasks\CCleanerUpdateTaskMachineCore => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208688 2024-05-30] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
Task: {E3A1E706-B3CA-48F4-8C61-C31EFB7D1464} - System32\Tasks\CCleanerUpdateTaskMachineUA => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208688 2024-05-30] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
Task: {73254657-5D7C-4A34-AE03-D64C5D18B13D} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem141.0.7376.0{42229F0C-6444-4F5C-862D-964B4410C875} => C:\Program Files (x86)\Google\GoogleUpdater\141.0.7376.0\updater.exe [6855320 2025-08-26] (Google LLC -> Google LLC)
Task: {C2752090-C0A7-4510-B97A-EF1B6A36E18C} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [712832 2025-08-29] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {464E0A40-7C59-4CE1-8C88-3A56A8D61CF1} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3938597611-2843190907-3524625560-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [712832 2025-08-29] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {6A528637-43C0-42D3-90DF-553D493E0C3B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34944 2025-08-29] (Mozilla Corporation -> Mozilla Foundation)
Task: {BF28BB99-D133-4AA9-B949-EBBF3CB02AE3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-3938597611-2843190907-3524625560-1001 => C:\Users\Dafi\AppData\Local\Microsoft\OneDrive\25.164.0824.0003\OneDriveLauncher.exe [725864 2025-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {C10277BA-62A7-468E-A7E0-839D9F05E825} - System32\Tasks\WpsExternal_Dafi_interval => C:\Users\Dafi\AppData\Local\Kingsoft\WPS Office\12.2.0.22549\office6\wpscloudsvr.exe [1079800 2025-08-30] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) -> /wpscloudlaunch /run_plugin /plugin_name=ktaskschdtool /plugin_entry=ktaskschdtool.dll /task=wpsexternal /launchtask /ver=1.0 /start_from=task_external_interval
Task: {3133A539-ACAA-429D-8A7B-4DD5642357A1} - System32\Tasks\WpsExternal_Dafi_startup => C:\Users\Dafi\AppData\Local\Kingsoft\WPS Office\12.2.0.22549\office6\wpscloudsvr.exe [1079800 2025-08-30] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) -> /wpscloudlaunch /run_plugin /plugin_name=ktaskschdtool /plugin_entry=ktaskschdtool.dll /task=wpsexternal /launchtask /ver=1.0 /start_from=task_external_startup
Task: {FBE751CB-9421-4671-9FB0-E72EA798BF35} - System32\Tasks\WpsUpdateTask_Dafi => C:\Users\Dafi\AppData\Local\Kingsoft\WPS Office\12.2.0.22549\office6\wpsupdate.exe [1738232 2025-08-30] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{b1da4807-c8e5-49e8-b90a-1804c71203a4}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ca65ab3b-b193-419c-83c7-27bd681738f9}: [DhcpNameServer] 192.168.1.1

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Dafi\AppData\Local\Microsoft\Edge\User Data\Default [2025-09-22]
Edge Extension: (Dokumenty Google offline) - C:\Users\Dafi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-06-09]
Edge Extension: (Edge relevant text changes) - C:\Users\Dafi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-29]
Edge Extension: (WPS PDF - Read, Edit, Fill, Convert, and AI Chat PDF with Ease) - C:\Users\Dafi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mjdgandcagmikhlbjnilkmfnjeamfikk [2025-02-19]
Edge HKU\S-1-5-21-3938597611-2843190907-3524625560-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [mjdgandcagmikhlbjnilkmfnjeamfikk]

FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.19 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-06-29] (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-06-29] (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=3 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1691.6\npCCleanerBrowserUpdate3.dll [2024-05-30] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=9 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1691.6\npCCleanerBrowserUpdate3.dll [2024-05-30] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Default [2025-09-22]
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee_uninternational&type=G210CZ91105G91962M6fc01cc1aea128f99939d3ad16acf090&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2025-08-30]
CHR Extension: (Dokumenty Google offline) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-09-21]
CHR Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2025-09-21]
CHR Extension: (Custom Teamspeak 3 Display - by Frizzant) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkocffpmmelgidgjhkadhmhgfeckcpge [2020-03-29]
CHR Extension: (WPS PDF - Read, Edit, Fill, Convert, and AI Chat PDF with Ease) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdpelmjpfafjppnhbloffcjpeomlnpah [2025-08-04]
CHR Extension: (Jitsi Meetings) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Default\Extensions\kglhbbefdnlheedjiejgomgmfplipfeb [2024-06-07]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Profile: C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Guest Profile [2025-08-22]
CHR Profile: C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-09-22]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2025-08-22]
CHR Extension: (Dokumenty Google offline) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-08-26]
CHR Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2025-09-05]
CHR Extension: (WPS PDF - Read, Edit, Fill, Convert, and AI Chat PDF with Ease) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kdpelmjpfafjppnhbloffcjpeomlnpah [2025-08-04]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-10-25]
CHR Profile: C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Profile 2 [2025-09-22]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2025-08-31]
CHR Extension: (Dokumenty Google offline) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-08-31]
CHR Extension: (WPS PDF - Read, Edit, Fill, Convert, and AI Chat PDF with Ease) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\kdpelmjpfafjppnhbloffcjpeomlnpah [2025-08-17]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-04-04]
CHR Profile: C:\Users\Dafi\AppData\Local\Google\Chrome\User Data\System Profile [2025-09-12]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKU\S-1-5-21-3938597611-2843190907-3524625560-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kdpelmjpfafjppnhbloffcjpeomlnpah]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [1063592 2025-09-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AVG Tools; C:\Program Files\AVG\Antivirus\avgToolsSvc.exe [1115816 2025-09-02] (Gen Digital Inc. -> Gen Digital Inc.)
R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [7785640 2025-09-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvgWscReporter; C:\Program Files\AVG\Antivirus\wsc_proxy.exe [109480 2021-06-02] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S2 ccleaner; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208688 2024-05-30] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
S3 CCleanerBrowserElevationService; C:\Program Files\CCleaner Browser\Application\139.0.31974.157\elevation_service.exe [2411512 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
S3 ccleanerm; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208688 2024-05-30] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc.)
R3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1080544 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4993344 2021-03-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [951024 2025-09-21] (McAfee, LLC -> McAfee, LLC)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [918456 2025-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\NisSrv.exe [3304992 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MsMpEng.exe [103376 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 avgArDisk; C:\WINDOWS\System32\drivers\avgArDisk.sys [21048 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgArPot; C:\WINDOWS\System32\drivers\avgArPot.sys [245304 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgbidsdriver; C:\WINDOWS\System32\drivers\avgbidsdriver.sys [391224 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgbidsh; C:\WINDOWS\System32\drivers\avgbidsh.sys [299576 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgbuniv; C:\WINDOWS\System32\drivers\avgbuniv.sys [85552 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgElam; C:\WINDOWS\System32\drivers\avgElam.sys [29144 2025-08-03] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 avgKbd; C:\WINDOWS\System32\drivers\avgKbd.sys [29744 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgMonFlt; C:\WINDOWS\System32\drivers\avgMonFlt.sys [284728 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgNetHub; C:\WINDOWS\System32\drivers\avgNetHub.sys [571960 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgRdr; C:\WINDOWS\System32\drivers\avgRdr2.sys [92216 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgRvrt; C:\WINDOWS\System32\drivers\avgRvrt.sys [72248 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgSnx; C:\WINDOWS\System32\drivers\avgSnx.sys [887376 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgSP; C:\WINDOWS\System32\drivers\avgSP.sys [1279032 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 avgStm; C:\WINDOWS\System32\drivers\avgStm.sys [202320 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgVmm; C:\WINDOWS\System32\drivers\avgVmm.sys [392248 2025-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [File not signed]
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2021-03-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2021-03-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45960 2020-05-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [394680 2020-05-01] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64944 2020-05-01] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-09-22 11:25 - 2025-09-22 11:26 - 000025426 _____ C:\Users\Dafi\Desktop\FRST.txt
2025-09-22 11:23 - 2025-09-22 11:23 - 009616736 _____ (Malwarebytes) C:\Users\Dafi\Desktop\adwcleaner(3).exe
2025-09-22 11:22 - 2025-09-22 11:22 - 000000000 ____D C:\Users\Dafi\AppData\Roaming\CCleaner
2025-09-02 19:43 - 2025-09-02 19:43 - 000322216 _____ (Gen Digital Inc.) C:\WINDOWS\system32\avgBoot.exe
2025-08-30 19:25 - 2025-09-21 19:39 - 000003060 _____ C:\WINDOWS\system32\Tasks\WpsExternal_Dafi_interval
2025-08-30 19:25 - 2025-09-21 19:39 - 000002934 _____ C:\WINDOWS\system32\Tasks\WpsExternal_Dafi_startup
2025-08-30 19:24 - 2025-09-21 19:39 - 000002760 _____ C:\WINDOWS\system32\Tasks\WpsUpdateTask_Dafi
2025-08-30 19:24 - 2025-08-30 19:24 - 000002441 _____ C:\Users\Dafi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WPS Office.lnk
2025-08-30 17:29 - 2025-08-30 17:29 - 000000732 _____ C:\Users\Dafi\Downloads\Videa – zástupce.lnk
2025-08-29 14:04 - 2025-08-30 13:49 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-08-26 18:58 - 2025-08-26 19:32 - 728428992 _____ C:\Users\Dafi\Downloads\Lexx S01E01-04 CZdab.avi
2025-08-26 15:48 - 2025-08-26 17:08 - 1708267516 _____ C:\Users\Dafi\Downloads\Brutální Nikita (Nikita, 1990).mkv
2025-08-24 21:18 - 2025-08-24 21:32 - 295507593 _____ C:\Users\Dafi\Downloads\Scooby doo show - 1x04.mp4

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-09-22 11:26 - 2024-12-02 11:43 - 000000000 ____D C:\FRST
2025-09-22 11:25 - 2025-08-22 14:26 - 000000000 ____D C:\Users\Dafi\Desktop\FRST-OlderVersion
2025-09-22 11:25 - 2025-08-10 10:53 - 002442752 _____ (Farbar) C:\Users\Dafi\Desktop\FRST64 (1).exe
2025-09-22 11:24 - 2024-01-28 16:03 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-09-22 11:23 - 2020-05-06 20:18 - 000000000 ____D C:\Program Files\CCleaner
2025-09-22 11:22 - 2025-01-08 20:23 - 000000000 ____D C:\WINDOWS\Minidump
2025-09-22 11:22 - 2024-03-17 18:56 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-09-22 11:22 - 2020-05-11 20:42 - 000000000 ____D C:\Users\Dafi\AppData\Local\CrashDumps
2025-09-22 11:21 - 2025-08-10 10:46 - 000003386 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2025-09-22 11:21 - 2025-08-10 10:46 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2025-09-22 11:20 - 2020-02-12 12:34 - 000000000 ___RD C:\Users\Dafi\OneDrive
2025-09-22 11:20 - 2020-02-12 12:31 - 000000000 ____D C:\Users\Dafi\AppData\Local\Packages
2025-09-22 11:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-09-22 11:20 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-09-21 21:15 - 2024-01-28 19:51 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-09-21 19:46 - 2024-01-28 19:57 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-09-21 19:46 - 2024-01-28 19:57 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2025-09-21 19:46 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-09-21 19:45 - 2020-05-06 20:20 - 000000000 ____D C:\Users\Dafi\AppData\Local\Avg
2025-09-21 19:41 - 2024-05-30 22:13 - 000002333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner Browser.lnk
2025-09-21 19:41 - 2024-05-30 22:13 - 000002298 _____ C:\Users\Public\Desktop\CCleaner Browser.lnk
2025-09-21 19:41 - 2024-05-30 22:09 - 000000000 ____D C:\Program Files\CCleaner Browser
2025-09-21 19:40 - 2025-02-07 21:27 - 000003574 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3938597611-2843190907-3524625560-1001
2025-09-21 19:40 - 2024-01-28 20:01 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3938597611-2843190907-3524625560-1001
2025-09-21 19:40 - 2024-01-28 20:01 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3938597611-2843190907-3524625560-1001
2025-09-21 19:40 - 2024-01-28 16:10 - 000002378 _____ C:\Users\Dafi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-09-21 19:39 - 2024-05-30 22:13 - 000002848 _____ C:\WINDOWS\system32\Tasks\CCleanerBrowserProtectS-1-5-21-3938597611-2843190907-3524625560-1001
2025-09-21 19:39 - 2024-05-30 22:10 - 000003092 _____ C:\WINDOWS\system32\Tasks\CCleaner Browser Heartbeat Task (Hourly)
2025-09-21 19:39 - 2024-05-30 22:10 - 000002610 _____ C:\WINDOWS\system32\Tasks\CCleaner Browser Heartbeat Task (Logon)
2025-09-21 19:39 - 2024-05-30 22:09 - 000003456 _____ C:\WINDOWS\system32\Tasks\CCleanerUpdateTaskMachineUA
2025-09-21 19:39 - 2024-05-30 22:09 - 000003232 _____ C:\WINDOWS\system32\Tasks\CCleanerUpdateTaskMachineCore
2025-09-21 19:39 - 2024-01-28 20:01 - 000003568 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-09-21 19:39 - 2024-01-28 20:01 - 000003342 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-09-21 19:39 - 2024-01-28 20:01 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2025-09-21 19:39 - 2024-01-28 20:01 - 000002252 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Dafi
2025-09-21 19:39 - 2024-01-28 20:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2025-09-12 20:12 - 2024-01-28 20:03 - 001693140 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-09-12 20:12 - 2019-12-07 16:43 - 000716770 _____ C:\WINDOWS\system32\perfh005.dat
2025-09-12 20:12 - 2019-12-07 16:43 - 000144948 _____ C:\WINDOWS\system32\perfc005.dat
2025-09-12 20:12 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2025-09-12 20:08 - 2024-01-28 20:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-09-12 20:08 - 2021-02-01 23:31 - 000008192 ___SH C:\DumpStack.log.tmp
2025-09-12 20:08 - 2020-05-18 16:23 - 000000000 ____D C:\ProgramData\NVIDIA
2025-09-12 20:08 - 2020-05-06 20:18 - 000000000 ____D C:\ProgramData\AVG
2025-09-12 20:07 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2025-09-11 19:50 - 2023-10-09 20:16 - 000000000 ____D C:\Program Files\RUXIM
2025-09-10 21:07 - 2024-01-28 19:51 - 000268672 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-09-10 21:06 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-09-10 21:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-09-10 21:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-09-10 21:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-09-10 21:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-09-10 21:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-09-10 21:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-09-10 21:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-09-10 21:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-09-10 21:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-09-10 17:54 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-09-10 17:50 - 2024-01-28 19:53 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-09-09 15:09 - 2020-02-14 15:05 - 000000000 ____D C:\Users\Dafi\AppData\Roaming\vlc
2025-09-03 20:01 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-09-02 19:43 - 2024-01-28 20:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVG
2025-09-02 19:43 - 2020-10-24 19:51 - 000284728 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys
2025-09-02 19:43 - 2020-06-16 12:35 - 000571960 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgNetHub.sys
2025-09-02 19:43 - 2020-05-06 20:19 - 001279032 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgSP.sys
2025-09-02 19:43 - 2020-05-06 20:19 - 000392248 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgVmm.sys
2025-09-02 19:43 - 2020-05-06 20:19 - 000299576 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbidsh.sys
2025-09-02 19:43 - 2020-05-06 20:19 - 000092216 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgRdr2.sys
2025-09-02 19:43 - 2020-05-06 20:19 - 000085552 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbuniv.sys
2025-09-02 19:43 - 2020-05-06 20:19 - 000072248 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgRvrt.sys
2025-09-02 19:43 - 2020-05-06 20:19 - 000029744 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgKbd.sys
2025-09-02 19:42 - 2020-05-06 20:19 - 000887376 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgSnx.sys
2025-09-02 19:42 - 2020-05-06 20:19 - 000391224 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbidsdriver.sys
2025-09-02 19:42 - 2020-05-06 20:19 - 000245304 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgArPot.sys
2025-09-02 19:42 - 2020-05-06 20:19 - 000021048 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgArDisk.sys
2025-09-01 19:12 - 2023-02-17 19:03 - 000000000 ____D C:\Users\Dafi\AppData\Local\The Witcher
2025-08-31 21:26 - 2024-01-28 16:10 - 000000000 ____D C:\Users\Dafi
2025-08-30 19:24 - 2023-08-07 17:45 - 000002541 _____ C:\Users\Dafi\Desktop\WPS PDF.lnk
2025-08-30 14:31 - 2020-02-14 14:31 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-08-30 14:31 - 2020-02-14 14:31 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-08-30 13:49 - 2024-03-17 18:56 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-08-30 09:11 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2025-08-29 15:32 - 2024-03-17 18:56 - 000001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-08-29 15:32 - 2024-03-17 18:56 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2025-08-23 18:32 - 2023-10-14 13:45 - 000000000 ____D C:\Users\Dafi\Downloads\Hudba
2025-08-23 16:37 - 2024-05-04 18:58 - 000000000 ___HD C:\Users\Dafi\WPS Cloud Files
2025-08-23 16:34 - 2023-10-14 14:19 - 000000000 ____D C:\Users\Dafi\Downloads\Pravydla

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-09-2025
Ran by Dafi (22-09-2025 11:29:14)
Running from C:\Users\Dafi\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.6332 (X64) (2024-01-28 18:01:55)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3938597611-2843190907-3524625560-500 - Administrator - Disabled)
Dafi (S-1-5-21-3938597611-2843190907-3524625560-1001 - Administrator - Enabled) => C:\Users\Dafi
DefaultAccount (S-1-5-21-3938597611-2843190907-3524625560-503 - Limited - Disabled)
Guest (S-1-5-21-3938597611-2843190907-3524625560-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3938597611-2843190907-3524625560-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG Antivirus (Enabled - Up to date) {18A975F9-A60C-37D8-E30B-4BEF31AD3411}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 19.01 alpha (x64) (HKLM\...\7-Zip) (Version: 19.01 alpha - Igor Pavlov)
7-Zip 23.00 (x64 edition) (HKLM\...\{23170F69-40C1-2702-2300-000001000000}) (Version: 23.00.00.0 - Igor Pavlov)
Aktualizace NVIDIA 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
AVG AntiVirus Free (HKLM\...\AVG Antivirus) (Version: 25.8.10387.3048 - Gen Digital Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 6.39 - Piriform)
CCleaner Browser (HKLM-x32\...\CCleaner Browser) (Version: 139.0.31974.157 - Autoři prohlížeče CCleaner Browser)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1691.6 - Piriform Software) Hidden
Codec Pack - All In 1 6.0.3.0 (HKLM-x32\...\Cool's_Codec_pack_4.12) (Version: - )
Corel Applications (HKLM-x32\...\Corel Applications) (Version: - )
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.14.0.1709 - Disc Soft Ltd)
Fallout2 (HKLM-x32\...\Fallout2) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 139.0.7258.155 - Google LLC)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 140.0.3485.81 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 140.0.3485.81 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-3938597611-2843190907-3524625560-1001\...\OneDriveSetup.exe) (Version: 25.164.0824.0003 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 x64 ENU (HKLM\...\{8424B163-D1E0-48B7-88A2-C7A61767B3D7}) (Version: 4.0.8482.1 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 x64 Additional Runtime - 14.0.24215 (HKLM\...\{EF1EC6A9-17DE-3DA9-B040-686A1E8A8B04}) (Version: 14.0.24215 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x64 Minimum Runtime - 14.0.24215 (HKLM\...\{50A2BC33-C9CD-3BF1-A8FF-53C10A0B183C}) (Version: 14.0.24215 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.24215 (HKLM-x32\...\{69BCE4AC-9572-3271-A2FB-9423BDA36A43}) (Version: 14.0.24215 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.24215 (HKLM-x32\...\{BBF2AC74-720C-3CB3-8291-5E34039232FA}) (Version: 14.0.24215 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 142.0.1 (x64 cs)) (Version: 142.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 119.0 - Mozilla)
NVIDIA Ovladač 3D Vision 341.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.74 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 341.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.74 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}) (Version: 9.10.0514 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
qBittorrent 4.2.1 (HKLM-x32\...\qBittorrent) (Version: 4.2.1 - The qBittorrent project)
Software tiskárny EPSON (HKLM\...\EPSON Printer and Utilities) (Version: - )
Star Wars Jedi Knight - Jedi Academy Čeština + Dabing (HKLM-x32\...\Star Wars Jedi Knight - Jedi Academy Čeština + Dabing 1.0.0) (Version: 1.0.0 - BonusWeb)
Star Wars Jedi Knight Jedi Academy (CZ Dabing) (HKLM-x32\...\FPD_SWJKJA_is1) (Version: 1.0 - Fénix ProDabing)
Star Wars Jedi Knight Jedi Academy (HKLM-x32\...\{1EECBA68-8BE4-4076-94DF-E9ED206B1D21}) (Version: - )
Star Wars Knights Of The Old Republic II The Siths Lords (HKLM-x32\...\Star Wars Knights Of The Old Republic II The Siths Lordsv2.0 Update 1.0b) (Version: v2.0 Update 1.0b - LucasArts by Etnik_23)
The Witcher Enhanced Edition Director's Cut (HKLM-x32\...\1207658924_is1) (Version: 2.1.0.15 - GOG.com)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.50 - Ghisler Software GmbH)
TP-Link TL-WN722N (HKLM-x32\...\{F9C15685-38A9-46A1-9826-97204015C19C}) (Version: 2.1.0 - TP-Link)
TP-Link Wireless Adapter WPS Tool (HKLM-x32\...\{685EFF87-B126-49E4-8213-70C56625C5B5}) (Version: 1.0.0.1 - TP-Link)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.11 - VideoLAN)
War Thunder Launcher 1.0.3.213 (HKU\S-1-5-21-3938597611-2843190907-3524625560-1001\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment)
WebAdvisor od společnosti McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.1070 - McAfee, LLC)
WPS Office (12.2.0.22549) (HKU\S-1-5-21-3938597611-2843190907-3524625560-1001\...\Kingsoft Office) (Version: 12.2.0.22549 - Kingsoft Corp.)

Packages:
=========
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-11-09] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2024-01-28] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2024-01-28] (Microsoft Corporation) [MS Ad]
Microsoft Mahjong -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMahjong_4.7.4221.0_x64__8wekyb3d8bbwe [2025-05-11] (Microsoft Studios)
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-01-15] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8000.616.304.0_x64__8wekyb3d8bbwe [2025-09-10] (Microsoft Corp.)
Windows App Runtime DDLM 5001.119.156.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.5001.119.156.0-x6_5001.119.156.0_x64__8wekyb3d8bbwe [2024-06-06] (Microsoft Corporation)
Windows App Runtime DDLM 5001.119.156.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.5001.119.156.0-x8_5001.119.156.0_x86__8wekyb3d8bbwe [2024-06-06] (Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3938597611-2843190907-3524625560-1001_Classes\CLSID\{28A80003-18FD-411D-B0A3-3C81F618E22B}\InprocServer32 -> C:\Users\Dafi\AppData\Local\Kingsoft\WPS Office\12.2.0.22549\office6\kwpsmenushellext64.dll (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)
CustomCLSID: HKU\S-1-5-21-3938597611-2843190907-3524625560-1001_Classes\CLSID\{47E6DCAF-41F8-441C-BD0E-A50D5FE6C4D1}\localserver32 -> C:\Users\Dafi\AppData\Local\Microsoft\OneDrive\25.164.0824.0003\OneDrive.Sync.Service.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3938597611-2843190907-3524625560-1001_Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}\localserver32 -> C:\Users\Dafi\AppData\Local\Microsoft\OneDrive\25.164.0824.0003\OneDrive.Sync.Service.exe (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2025-09-02] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2025-09-02] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2023-05-07] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2025-09-02] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2021-03-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2025-09-02] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2021-03-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2023-05-07] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2015-06-29] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2023-05-07] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2025-09-02] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1_S-1-5-21-3938597611-2843190907-3524625560-1001: [ kwpsshellext] -> {28A80003-18FD-411D-B0A3-3C81F618E22B} => C:\Users\Dafi\AppData\Local\Kingsoft\WPS Office\12.2.0.22549\office6\kwpsmenushellext64.dll [2025-08-30] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)
ContextMenuHandlers4_S-1-5-21-3938597611-2843190907-3524625560-1001: [ kwpsshellext] -> {28A80003-18FD-411D-B0A3-3C81F618E22B} => C:\Users\Dafi\AppData\Local\Kingsoft\WPS Office\12.2.0.22549\office6\kwpsmenushellext64.dll [2025-08-30] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2020-02-23 16:33 - 2018-01-30 10:59 - 000195072 _____ () [File not signed] C:\Users\Dafi\TP-Link Wireless Adapter WPS Tool\DC_WFF.dll
2023-05-07 21:00 - 2023-05-07 21:00 - 000100352 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2024-01-28 19:52 - 2015-06-29 21:08 - 001406200 _____ (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [File not signed] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
2020-02-23 16:33 - 2018-01-30 10:59 - 001715200 _____ (TP-Link Technologies Co., Ltd) [File not signed] C:\Users\Dafi\TP-Link Wireless Adapter WPS Tool\language\English(United_States)\nicLan.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\avgSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\avgSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2022-07-22] (McAfee, LLC -> McAfee, LLC)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2022-07-22] (McAfee, LLC -> McAfee, LLC)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.1.1
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-3938597611-2843190907-3524625560-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Dafi\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\111111111.png
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: )
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKU\S-1-5-21-3938597611-2843190907-3524625560-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-3938597611-2843190907-3524625560-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-3938597611-2843190907-3524625560-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_C2AB7B4C4369F745A9AA04A850088382"
HKU\S-1-5-21-3938597611-2843190907-3524625560-1001\...\StartupApproved\Run: => "Microsoft Edge Update"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{558E563A-BD33-4FF0-9AE6-F8AD9531CEC6}E:\sw hra\gamedata\jamp.exe] => (Block) E:\sw hra\gamedata\jamp.exe (Activision Inc) [File not signed]
FirewallRules: [TCP Query User{ABB9E6F0-97DE-499C-8B67-219A1976D8E2}E:\sw hra\gamedata\jamp.exe] => (Block) E:\sw hra\gamedata\jamp.exe (Activision Inc) [File not signed]
FirewallRules: [UDP Query User{B8CCC716-F1B2-4D6D-AF72-DF2BDD1F3557}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{BE75F05E-3E47-496D-AF6F-71EB6271F3D3}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{64E105F3-3AB6-43F9-B739-32CD0831C0B5}] => (Allow) C:\Program Files\AVG\Antivirus\AVGUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{96F2B676-0358-4C88-B529-5D67CA886277}] => (Allow) C:\Program Files\AVG\Antivirus\AVGUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{4093DC9D-3C34-4708-82AA-0FD5520CA0F9}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{AC8D357E-701B-4203-8148-5EAE44A6DE7B}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{4C260CBF-A754-45F4-9313-943C9D167BC4}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [File not signed]
FirewallRules: [{2D34D30B-1E2C-4A27-9F2F-B860E5D7CE4E}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [File not signed]
FirewallRules: [{74EDA6EB-3BA3-47BF-A786-F407864FB873}] => (Allow) C:\Users\Dafi\TP-Link Wireless Adapter WPS Tool\RTLDHCP.exe (Realtek) [File not signed]
FirewallRules: [{E3303BA8-5C06-4C2B-A467-AE8A00470F86}] => (Allow) C:\Users\Dafi\TP-Link Wireless Adapter WPS Tool\RTLDHCP.exe (Realtek) [File not signed]
FirewallRules: [{5D256B55-B38E-464A-880B-68389231537B}] => (Allow) C:\Users\Dafi\TP-Link Wireless Adapter WPS Tool\RTLDHCP.exe (Realtek) [File not signed]
FirewallRules: [{7BBF3463-1D94-405E-9C5C-9755AA5772BB}] => (Allow) C:\Users\Dafi\TP-Link Wireless Adapter WPS Tool\RTLDHCP.exe (Realtek) [File not signed]
FirewallRules: [{136142E5-C13D-4BB2-A8CC-68B895BE076E}] => (Allow) C:\Users\Dafi\TP-Link Wireless Adapter WPS Tool\RTLDHCP.exe (Realtek) [File not signed]
FirewallRules: [{FFF644A4-830C-43AA-9EDF-3AA43A888F4B}] => (Allow) C:\Users\Dafi\TP-Link Wireless Adapter WPS Tool\RTLDHCP.exe (Realtek) [File not signed]
FirewallRules: [TCP Query User{0BD83078-F610-4FFA-8758-2F20819C4678}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{FEE46216-7AEA-4EF7-B9E4-57DDAC829501}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{16D7342C-A041-47BA-9DE1-9DBA013FEC3F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C3353ACB-603D-4C81-817A-4401758D9348}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{560CBFD0-89EB-4F53-AC1F-51ABD1ABC156}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{27F30953-29F3-4622-97CC-75526D42BDD7}] => (Allow) C:\Program Files\CCleaner Browser\Application\CCleanerBrowser.exe (Gen Digital Inc. -> Gen Digital Inc.)

==================== Restore Points =========================

22-08-2025 18:55:22 Naplánovaný kontrolní bod
04-09-2025 18:16:51 Naplánovaný kontrolní bod
10-09-2025 17:38:53 Instalační služba modulů systému Windows
10-09-2025 17:41:25 Instalační služba modulů systému Windows
10-09-2025 17:43:48 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (09/09/2025 04:04:33 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (09/04/2025 05:53:47 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (09/04/2025 05:48:22 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (09/04/2025 05:41:03 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (09/02/2025 04:08:15 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (08/26/2025 04:06:31 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (08/23/2025 07:25:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: witcher.EXE, verze: 1.5.0.1304, časové razítko: 0x4910475c
Název chybujícího modulu: witcher.EXE, verze: 1.5.0.1304, časové razítko: 0x4910475c
Kód výjimky: 0xc0000005
Posun chyby: 0x006656cc
ID chybujícího procesu: 0x2b68
Čas spuštění chybující aplikace: 0x01dc145086536c83
Cesta k chybující aplikaci: C:\GOG Games\The Witcher Enhanced Edition\SYSTEM\witcher.EXE
Cesta k chybujícímu modulu: C:\GOG Games\The Witcher Enhanced Edition\SYSTEM\witcher.EXE
ID zprávy: 949a4b18-12a0-42eb-94a6-bed0d49ca2d4
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (08/22/2025 06:53:41 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)


System errors:
=============
Error: (09/22/2025 11:22:21 AM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-UPBMIK4)
Description: Nelze spustit server DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Došlo k chybě:
2147942767
při provádění příkazu:
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

Error: (09/12/2025 08:10:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Google Update (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (09/12/2025 08:10:43 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Google Update (gupdate) bylo dosaženo časového limitu (30000 ms).

Error: (09/11/2025 07:51:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Google Update (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (09/11/2025 07:51:11 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Google Update (gupdate) bylo dosaženo časového limitu (30000 ms).

Error: (09/07/2025 09:03:54 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-UPBMIK4)
Description: Server {5F7F3F7B-1177-4D4B-B1DB-BC6F671B8F25} se v daném časovém limitu neregistroval u služby DCOM.

Error: (09/03/2025 08:03:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Google Update (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (09/03/2025 08:03:45 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Google Update (gupdate) bylo dosaženo časového limitu (30000 ms).


CodeIntegrity:
===============
Date: 2025-01-08 19:31:24
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.


==================== Memory info ===========================

BIOS: Dell Inc. A01 06/13/2011
Motherboard: Dell Inc. 0M5DCD
Processor: Intel(R) Core(TM) i3-2100 CPU @ 3.10GHz
Percentage of memory in use: 44%
Total physical RAM: 8164.94 MB
Available physical RAM: 4526.25 MB
Total Virtual: 9444.94 MB
Available Virtual: 5948.58 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:446.56 GB) (Free:201.47 GB) (Model: KINGSTON SA400S37480G ATA Device) NTFS
Drive e: (Nový svazek) (Fixed) (Total:232.88 GB) (Free:152.26 GB) (Model: ST3250312AS ATA Device) NTFS

\\?\Volume{f357c740-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.57 GB) (Free:0.1 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 447.1 GB) (Disk ID: F357C740)
Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=446.6 GB) - (Type=07 NTFS)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 232.9 GB) (Disk ID: 9523BD1D)
Partition 1: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

[JaRon]

Ahoj,
log vypada OK - su nejake problemy

[Martin000]

Dobrý den. Děkuji. Po zapnutí probliknou dvě černá okna. Nevím co to je. Jinak nic.

[JaRon]

Mozes preventivne prescanovat s MBAM

[Martin000]

Předpokládám že chcete vidět tohle.

# -------------------------------
# Malwarebytes AdwCleaner 8.6.0.613
# -------------------------------
# Build: 08-19-2025
# Database: 2025-08-19.3 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 09-22-2025
# Duration: 00:00:10
# OS: Windows 10 (Build 19045.6332)
# Scanned: 32071
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.


AdwCleaner[S00].txt - [1405 octets] - [15/08/2022 19:09:06]
AdwCleaner[S01].txt - [1466 octets] - [15/08/2022 19:10:13]
AdwCleaner[S02].txt - [1527 octets] - [15/08/2022 21:24:29]
AdwCleaner[S03].txt - [1603 octets] - [15/03/2024 21:55:01]
AdwCleaner[C03].txt - [1793 octets] - [15/03/2024 21:55:51]
AdwCleaner[S04].txt - [1756 octets] - [10/12/2024 19:01:57]
AdwCleaner[C04].txt - [1926 octets] - [10/12/2024 19:03:44]
AdwCleaner[S05].txt - [1849 octets] - [23/03/2025 09:59:16]
AdwCleaner[C05].txt - [2039 octets] - [23/03/2025 10:00:26]
AdwCleaner[S06].txt - [1971 octets] - [15/06/2025 20:55:09]
AdwCleaner[S07].txt - [2032 octets] - [22/09/2025 11:25:01]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S08].txt ##########

[JaRon]

Ani nie aj ked je to zastresene jednou firmou
MBAM https://www.bleepingcomputer.com/downlo ... i-malware/

[Martin000]

Jedna věc převedena do trezoru jinak vše OK.
a pokus 2 z reportem
¨
Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 9/22/2025
Scan Time: 2:36 PM
Log File: c65a617a-97b0-11f0-a34a-d067e50ea9a0.json

-Software Information-
Version: 5.3.8.212
Components Version: 140.0.5364
Update Package Version: 1.0.103133
License: Trial

-System Information-
OS: Windows 10 (Build 19045.6332)
CPU: x64
File System: NTFS
User: DESKTOP-UPBMIK4\Dafi

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 182929
Threats Detected: 1
Threats Quarantined: 1
Time Elapsed: 4 min, 4 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
PUP.Optional.BundleInstaller, C:\USERS\DAFI\DOWNLOADS\DTLITEINSTALLER.EXE, Quarantined, 90, 1078096, 1.0.103133, , ame, , A968A29BFEBDA5B9857A09D5D372E52C, 87D317EE5C296B7CF167B12EEF91668704997CB2033AEB90B6A27C6E9A7D4D79

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

[JaRon]

Super a mame hotovo

[Martin000]

Díky za pomoc a přeju hezký den.

[JaRon]

Za malo aj Tebe prajem pekny den