hlášení eset

Zpráva

petr2222 · #1 Příspěvek od **petr2222** » včera, 22:56

Dobrý večer,
asi to sem nepatří, ale chtěl jsem se zeptat, dnes mí při otevření prohlížeče firefox opakovaně eset hlásí, že zablokoval stránku https:/sync.iqzonertb.live . Smazal jsem cache, historii i koláčky z prohlížeče, ale bez úspěchu.
Objevuje se to hlavně na idnes.cz, ale občas se přihlásí i jinde.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-02-2026
Ran by petrs (administrator) on PC-HORNÍ (ASUS All Series) (02-03-2026 22:43:58)
Running from C:\Users\petrs\Desktop\FRST64.exe
Loaded Profiles: petrs
Platform: Microsoft Windows 10 Home Service Pack 2 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eServiceHost.exe <2>
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\Sandboxie\SandboxieRpcSs.exe ->) (Tonalio GmbH -> Sandboxie-Plus.com) C:\Program Files\Sandboxie\SandboxieDcomLaunch.exe
(C:\Program Files\Sandboxie\SbieSvc.exe ->) (Tonalio GmbH -> Sandboxie-Plus.com) C:\Program Files\Sandboxie\SandboxieRpcSs.exe
(C:\Program Files\Sandboxie\SbieSvc.exe ->) (Tonalio GmbH -> Sandboxie-Plus.com) C:\Program Files\Sandboxie\SbieCtrl.exe
(C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2602.54091.0_x64__8wekyb3d8bbwe\M365Copilot.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.82\msedgewebview2.exe <12>
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(explorer.exe ->) (Ivaylo Beltchev -> IvoSoft) [File not signed] C:\Program Files\Classic Shell\ClassicStartMenu.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2602.54091.0_x64__8wekyb3d8bbwe\M365Copilot.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <17>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (DTS, Inc. -> DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Tonalio GmbH -> Sandboxie-Plus.com) C:\Program Files\Sandboxie\SbieSvc.exe <2>
(services.exe ->) (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8853248 2016-03-31] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-03-31] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [285616 2025-11-26] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5564784 2015-02-12] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-1815491245-3320787842-3649032699-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4746600 2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1815491245-3320787842-3649032699-1001\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [3400712 2026-01-02] (Tonalio GmbH -> Sandboxie-Plus.com)
HKU\S-1-5-21-1815491245-3320787842-3649032699-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [41732568 2026-02-17] (Adobe Inc. -> Adobe Systems Incorporated)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2026-01-30] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\145.0.7632.117\Installer\chrmstp.exe [2026-02-26] (Google LLC -> Google LLC)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {4C5D3326-26D7-4C45-B477-6F28BB4831CE} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {38FEE594-5505-4A7B-8CEB-B525DF5B0336} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem147.0.7703.0{B73FBCDD-9F1D-4915-BC0F-9D5B24856441} => C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe [8495256 2026-02-25] (Google LLC -> Google LLC)
Task: {BE23A779-D9CA-412E-8E71-20F00FAFD36C} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16258944 2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {86AE8971-CCA0-4E52-A23B-F0CF0257CF52} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28625808 2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {2AAADD6B-77C5-4830-8087-2965A51B3C67} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [73560 2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {45BE7968-5568-44E4-BA47-2545BDB85A32} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28625808 2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {49285C28-9790-494C-9C4D-5A2270CFA91C} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [310128 2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {9E7B4BA2-41A1-49E6-99F4-5D49388EF008} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [310128 2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {AD96DD21-C41F-41B7-AEE2-126035F617EA} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [1346840 2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {700E3D82-B1B5-4247-8223-B6A3079549D7} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16258944 2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {623C5571-1855-425C-AE35-48721BA7870E} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-1815491245-3320787842-3649032699-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [707200 2026-02-28] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {BF140260-53FB-4E21-A861-15BF196DE162} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-02-28] (Mozilla Corporation -> Mozilla Foundation)
Task: {415C9E96-6FDF-4AA7-883E-3C3ED51E7B6D} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4409704 2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {217FEE07-D8DD-4FE9-B27F-5A9BD7F671A5} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1815491245-3320787842-3649032699-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4409704 2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {10B83978-E82E-4314-88C8-5E59F8DBD527} - System32\Tasks\OneDrive Startup Task-S-1-5-21-1815491245-3320787842-3649032699-1001 => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\OneDriveLauncher.exe [756584 2026-02-27] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{f0058910-1bce-45b7-9fcc-c105108cfecf}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{f0058910-1bce-45b7-9fcc-c105108cfecf}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{f0058910-1bce-45b7-9fcc-c105108cfecf}: [DhcpDomain] .

FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: kohw3eot.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\petrs\AppData\Roaming\Mozilla\Firefox\Profiles\jgdiz975.default [2025-11-03]
FF ProfilePath: C:\Users\petrs\AppData\Roaming\Mozilla\Firefox\Profiles\kohw3eot.default-release [2026-03-02]
FF Extension: (No Name) - C:\Users\petrs\AppData\Roaming\Mozilla\Firefox\Profiles\kohw3eot.default-release\Extensions\newtab@mozilla.org.xpi [0] [not signed]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-01-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-02-17] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-12-07] (Microsoft Corporation -> Microsoft Corporation)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2026-03-02]

Edge:
=======
Edge Profile: C:\Users\petrs\AppData\Local\Microsoft\Edge\User Data\Default [2026-02-16]
Error reading preferences. Please check "Secure Preferences" file for possible corruption. <==== ATTENTION
Edge Extension: (No Name) - C:\Users\petrs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-02-13] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\petrs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-11-02] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\petrs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2025-11-12] [UpdateUrl:0] <==== ATTENTION
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]

Chrome:
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\petrs\AppData\Local\Google\Chrome\User Data\Default [2026-02-07]
Error reading preferences. Please check "Secure Preferences" file for possible corruption. <==== ATTENTION
CHR Extension: (No Name) - C:\Users\petrs\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-01-29] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\petrs\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-11-02] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\petrs\AppData\Local\Google\Chrome\User Data\Default\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2025-11-17] [UpdateUrl:0] <==== ATTENTION
CHR Profile: C:\Users\petrs\AppData\Local\Google\Chrome\User Data\Profile 1 [2026-03-02]
CHR Extension: (No Name) - C:\Users\petrs\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-03-02] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\petrs\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-11-03] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\petrs\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2026-02-07] [UpdateUrl:0] <==== ATTENTION
CHR Profile: C:\Users\petrs\AppData\Local\Google\Chrome\User Data\System Profile [2025-11-03]
CHR HKU\S-1-5-21-1815491245-3320787842-3649032699-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [oombnmpbbhbakfpfgdflaajkhicgfaam]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936456 2015-05-13] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13235088 2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [249320 2016-03-31] (DTS, Inc. -> DTS, Inc)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5543856 2025-11-26] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [4980040 2025-11-26] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [4980040 2025-11-26] (ESET, spol. s r.o. -> ESET)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncHelper.exe [3600784 2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.25090.3009-0\MpDefenderCoreService.exe [2026144 2025-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.022.0203.0006\OneDriveUpdaterService.exe [3995496 2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [452616 2026-01-02] (Tonalio GmbH -> Sandboxie-Plus.com)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [302968 2015-02-12] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.25090.3009-0\NisSrv.exe [4418608 2025-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.25090.3009-0\MsMpEng.exe [282440 2025-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15368 2015-05-13] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [File not signed]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [175824 2024-10-17] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [232928 2025-10-10] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [139904 2025-10-10] (Microsoft Windows Hardware Compatibility Publisher -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [17840 2025-11-26] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [273768 2025-10-10] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [57368 2025-10-10] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [86800 2025-10-10] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [126552 2025-10-10] (ESET, spol. s r.o. -> ESET)
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [333216 2025-11-02] (Microsoft Windows -> Microsoft Corporation)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [269504 2026-01-02] (Microsoft Windows Hardware Compatibility Publisher -> Sandboxie-Plus.com)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174264 2024-10-17] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [20888 2025-11-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [629128 2025-11-02] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102832 2025-11-02] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

Error Reading file: "C:\ProgramData\Desktop\VLC media player.lnk"
Error Reading file: "C:\ProgramData\Desktop\PbX Zabezpečení.lnk"
Error Reading file: "C:\ProgramData\Desktop\desktop.ini"
Error Reading file: "C:\ProgramData\Desktop\CDBurnerXP.lnk"
Error Reading file: "C:\ProgramData\Desktop\Adobe Acrobat.lnk"
2026-03-02 22:43 - 2026-03-02 22:45 - 000021020 _____ C:\Users\petrs\Desktop\FRST.txt
2026-03-02 22:43 - 2026-03-02 22:44 - 000000000 ____D C:\FRST
2026-03-02 22:40 - 2026-03-02 22:40 - 002445312 _____ (Farbar) C:\Users\petrs\Desktop\FRST64.exe
2026-03-02 22:25 - 2026-03-02 22:25 - 000000000 ____D C:\AdwCleaner
2026-03-02 22:24 - 2026-03-02 22:24 - 009633776 _____ (Malwarebytes) C:\Users\petrs\Desktop\adwcleaner.exe
2026-02-28 12:21 - 2026-02-28 12:21 - 000000923 _____ C:\Users\petrs\Desktop\Sandbox webový prohlížeč.lnk
2026-02-28 12:21 - 2026-02-28 12:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
2026-02-21 10:52 - 2026-02-21 10:57 - 000000991 _____ C:\Users\petrs\Desktop\threads – zástupce.lnk
2026-02-20 22:08 - 2026-02-20 22:08 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-02-19 18:07 - 2026-02-28 16:47 - 000004117 _____ C:\Users\petrs\Desktop\Nový textový dokument.txt
2026-02-16 17:41 - 2026-02-16 17:41 - 000435699 _____ C:\Users\petrs\Desktop\1.pdf
2026-02-16 17:41 - 2026-02-16 17:41 - 000239705 _____ C:\Users\petrs\Desktop\2.pdf
2026-02-07 16:16 - 2018-07-01 13:54 - 000000773 _____ C:\Users\petrs\Desktop\Aktuální rodokmen – zástupce.lnk
2026-02-07 16:06 - 2026-02-07 16:06 - 000000953 _____ C:\Users\petrs\Desktop\www.instagram.com_cookies.txt
2026-02-07 15:59 - 2026-02-07 16:07 - 000000082 _____ C:\WINDOWS\system32\cookies.txt
2026-02-07 15:59 - 2026-02-07 15:59 - 000000000 ____D C:\WINDOWS\system32\Stazene
2026-02-07 15:54 - 2026-02-07 16:07 - 000001191 _____ C:\Users\petrs\Desktop\instagram-video-clipboard NEW – zástupce.lnk
2026-02-07 15:52 - 2026-02-07 15:52 - 000000963 _____ C:\Users\petrs\Desktop\instagram new.txt
2026-01-31 09:44 - 2026-01-31 09:44 - 000000000 ____D C:\ProgramData\Package Cache

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-03-02 22:13 - 2025-11-02 17:49 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-03-02 22:12 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-03-02 22:03 - 2025-11-05 18:59 - 000002332 _____ C:\WINDOWS\Sandboxie.ini
2026-03-02 22:01 - 2025-11-03 18:37 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-03-02 21:47 - 2025-11-02 17:55 - 001605602 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-03-02 21:47 - 2019-12-07 15:41 - 000682210 _____ C:\WINDOWS\system32\perfh005.dat
2026-03-02 21:47 - 2019-12-07 15:41 - 000137026 _____ C:\WINDOWS\system32\perfc005.dat
2026-03-02 21:47 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2026-03-02 21:45 - 2022-09-08 04:11 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-03-02 21:41 - 2025-11-02 11:30 - 000000000 ___RD C:\Users\petrs\OneDrive
2026-03-02 21:40 - 2025-11-02 17:52 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-03-02 21:40 - 2025-11-02 17:49 - 000008192 ___SH C:\DumpStack.log.tmp
2026-03-02 19:13 - 2025-11-08 16:18 - 000000000 ____D C:\Users\petrs\AppData\Local\ClassicShell
2026-03-02 19:02 - 2025-11-02 14:28 - 000000000 ____D C:\Users\petrs\AppData\Local\D3DSCache
2026-03-02 19:00 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2026-03-02 19:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-03-01 10:10 - 2025-11-03 17:35 - 000000000 ____D C:\Users\petrs\AppData\Roaming\Microsoft\Word
2026-02-28 23:13 - 2025-11-02 17:49 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-02-28 23:06 - 2025-11-02 17:52 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{64355CF0-2DC3-4410-A43B-E0219FA4D18D}
2026-02-28 23:06 - 2025-11-02 17:52 - 000003590 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{A7CC6984-7A9B-4FD0-880E-451189CFEEF9}
2026-02-28 17:25 - 2025-11-03 18:37 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-02-28 17:25 - 2025-11-03 18:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-02-28 10:37 - 2025-12-12 17:34 - 000392320 _____ (Mozilla Foundation) C:\Users\petrs\Desktop\Firefox.exe
2026-02-28 10:37 - 2025-11-03 18:37 - 000001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-02-28 07:59 - 2025-11-03 17:40 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-02-27 22:17 - 2025-11-03 17:41 - 000003552 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1815491245-3320787842-3649032699-1001
2026-02-27 22:17 - 2025-11-03 17:23 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-02-27 22:17 - 2025-11-03 17:23 - 000002023 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-02-27 22:17 - 2025-11-03 16:54 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1815491245-3320787842-3649032699-1001
2026-02-26 18:24 - 2025-11-02 14:26 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-02-25 23:21 - 2025-11-03 18:22 - 000000000 ____D C:\Users\petrs\AppData\Roaming\vlc
2026-02-21 23:13 - 2025-11-03 17:19 - 000000000 ____D C:\Program Files\Microsoft Office
2026-02-21 15:38 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-02-21 12:07 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-02-21 10:52 - 2025-11-03 18:26 - 000000000 ____D C:\YT-DLP
2026-02-18 22:01 - 2025-12-13 11:04 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-02-18 22:01 - 2025-12-13 11:04 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2026-02-18 21:59 - 2025-12-13 11:04 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2026-02-12 07:47 - 2025-11-02 17:49 - 000305320 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-02-11 23:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-02-11 23:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2026-02-11 23:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2026-02-11 23:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-02-11 23:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-02-11 22:54 - 2025-11-02 17:56 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-02-11 22:52 - 2025-11-02 17:55 - 221154392 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-02-11 22:49 - 2025-11-02 17:52 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-02-06 19:04 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2026-02-01 09:50 - 2025-11-28 18:07 - 000000000 ____D C:\Users\petrs\AppData\Local\CrashDumps
2026-01-31 17:16 - 2025-11-03 17:37 - 000000000 ____D C:\Users\petrs\AppData\Roaming\Microsoft\Excel

==================== Files in the root of some directories ========

2025-11-02 14:26 - 2025-11-02 14:26 - 000052468 _____ () C:\Program Files\chrome_installer.log

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\SysWOW64\wininit.exe IS MISSING <==== ATTENTION
==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-02-2026
Ran by petrs (02-03-2026 22:49:53)
Running from C:\Users\petrs\Desktop
Microsoft Windows 10 Home Service Pack 2 (X64) (2025-11-02 16:52:46)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-1815491245-3320787842-3649032699-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-1815491245-3320787842-3649032699-503 - Limited - Disabled)
Guest (S-1-5-21-1815491245-3320787842-3649032699-501 - Limited - Disabled)
petrs (S-1-5-21-1815491245-3320787842-3649032699-1001 - Administrators - Enabled) => C:\Users\petrs
WDAGUtilityAccount (S-1-5-21-1815491245-3320787842-3649032699-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {26E0861C-6FB9-CEF9-E4F0-531986211ACE}
FW: ESET Firewall (Enabled) {1EDB0739-25D6-CFA1-CFAF-FA2C78F25DB5}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 25.001.21223 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Avidemux VC++ 64bits (HKU\S-1-5-21-1815491245-3320787842-3649032699-1001\...\{ab4a4329-d955-4b80-ad3d-8340c0f8ee0b}) (Version: 2.7.8 - Mean)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7128 - CDBurnerXP)
Classic Shell (HKLM\...\{CABCE573-0A86-42FA-A52A-C7EA61D5BE08}) (Version: 4.3.1 - IvoSoft)
ESET Security (HKLM\...\{2805328B-648E-4E1E-BE66-2C73A83EFEA5}) (Version: 19.0.14.0 - ESET, spol. s r.o.)
F-Link 2.9.8.1625 (HKLM-x32\...\F-Link 2.9.8.1625_is1) (Version: F-Link 2.9.8.1625 - Jablotron Alarms a.s.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 145.0.7632.117 - Google LLC)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 145.0.3800.82 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 145.0.3800.82 - Microsoft Corporation) Hidden
Microsoft Office 2019 pro studenty a domácnosti - cs-cz (HKLM\...\HomeStudent2019Retail - cs-cz) (Version: 16.0.19628.20214 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.022.0203.0006 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visio - cs-cz (HKLM\...\VisioStdRetail - cs-cz) (Version: 16.0.19628.20214 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 148.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 144.0.2 - Mozilla)
NVIDIA Ovladače grafiky 456.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 456.71 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.19628.20214 - Microsoft Corporation) Hidden
Pomocník s aktualizací Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.19041.2183 - Microsoft Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7786 - Realtek Semiconductor Corp.)
Sandboxie 5.71.9 (64-bit) (HKLM\...\Sandboxie) (Version: 5.71.9 - Sandboxie-Plus.com)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)
WD Quick View (HKLM-x32\...\{4ABD918F-CD70-40FD-87AC-A72AA8B19240}) (Version: 2.4.10.17 - Western Digital Technologies, Inc.)
WinRAR 5.90 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.90.0 - win.rar GmbH)

Packages:
=========
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-02-21] ()
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-02-21] ()
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-06] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-02-21] ()

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1815491245-3320787842-3649032699-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-1815491245-3320787842-3649032699-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-1815491245-3320787842-3649032699-1001_Classes\CLSID\{6e1f4e4d-65f7-4c83-be2e-9e6683cda268}\localserver32 -> C:\Program Files\ESET\ESET Security\egui.exe (ESET, spol. s r.o. -> ESET)
CustomCLSID: HKU\S-1-5-21-1815491245-3320787842-3649032699-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-02-17] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-26] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-26] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.022.0203.0006\FileSyncShell64.dll [2026-02-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\nvshext.dll [2020-10-07] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-26] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\WINDOWS\system32\StartMenuHelper64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\petrs\Desktop\D Art.lnk -> C:\YT-DLP\deviantart-download.bat ()
Shortcut: C:\Users\petrs\Desktop\instagram-video-clipboard NEW – zástupce.lnk -> C:\YT-DLP\instagram-video-clipboard NEW.bat ()
Shortcut: C:\Users\petrs\Desktop\Instagram.lnk -> C:\YT-DLP\instagram-video-clipboard.bat ()
Shortcut: C:\Users\petrs\Desktop\threads – zástupce.lnk -> C:\YT-DLP\threads.bat ()
Shortcut: C:\Users\petrs\Desktop\Tik Tok.lnk -> C:\YT-DLP\tiktok-video-clipboard.bat ()
Shortcut: C:\Users\petrs\Desktop\youtube-download – zástupce.lnk -> C:\YT-DLP\youtube-download.bat ()
Shortcut: C:\Users\petrs\Desktop\yt-video-clipboard – zástupce.lnk -> C:\YT-DLP\yt-video-clipboard.bat ()
ShortcutWithArgument: C:\Users\petrs\Desktop\Váš Chrome - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Default"

==================== Loaded Modules (Whitelisted) =============

2025-12-06 22:34 - 2025-12-06 22:34 - 000030720 _____ (Adobe Systems Inc.) [File not signed] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\cs_cz\Acrobat Elements\ContextMenuShim64.cze
2025-11-02 11:32 - 2026-03-02 21:40 - 000035984 _____ (ASUSTeK Computer Inc. -> ) [File not signed] C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll
2018-07-15 13:15 - 2018-07-15 13:15 - 003664696 _____ (Ivaylo Beltchev -> IvoSoft) [File not signed] C:\Program Files\Classic Shell\ClassicStartMenuDLL.dll
2018-07-15 13:15 - 2018-07-15 13:15 - 000291128 _____ (Ivaylo Beltchev -> IvoSoft) [File not signed] C:\WINDOWS\system32\StartMenuHelper64.dll
2025-11-03 17:22 - 2025-11-03 17:22 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2025-11-03 17:22 - 2025-11-03 17:22 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKLM\...\cmdfile\DefaultIcon: %SystemRoot%\System32\imageres.dll,-68 <==== ATTENTION

==================== Internet Explorer (Version 11) (Whitelisted) =============

BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-01-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-02-20] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 05:49 - 2019-03-19 05:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 8.8.8.8 - 8.8.4.4
Windows Firewall is enabled.

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1815491245-3320787842-3649032699-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\petrs\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\15706154806522022060\134166899916895804.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{DD4C1BEB-4151-43FB-ABC0-049D51FB30FC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{772EA2B4-8ADD-4D31-915D-B160EB656249}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D3D9F918-309B-413B-AE87-44BAC7128B53}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

16-02-2026 17:25:49 Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211
20-02-2026 22:07:45 Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211
20-02-2026 22:07:58 Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211
21-02-2026 23:13:40 Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211
21-02-2026 23:13:54 Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211
02-03-2026 22:12:47 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (03/02/2026 10:12:26 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (D:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (03/01/2026 03:36:49 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 6612. ID zprávy: [0x2509].

Error: (03/01/2026 10:25:12 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 9916. ID zprávy: [0x2509].

Error: (03/01/2026 10:20:24 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 8064. ID zprávy: [0x2509].

Error: (03/01/2026 10:07:35 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 9748. ID zprávy: [0x2509].

Error: (02/28/2026 10:37:17 AM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5

Error: (02/26/2026 08:17:41 AM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5

Error: (02/23/2026 07:11:20 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (D:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

System errors:
=============
Error: (03/02/2026 09:45:24 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
Description: Updated Secure Boot certificates are available on this device but have not yet been applied to the firmware. Review the published guidance to complete the update and maintain full protection. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:ASUSTeK COMPUTER INC.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:2103;OEMModelBaseBoard:Z87-PLUS;OEMManufacturerName:ASUS;OSArchitecture:amd64;
BucketId: 2bd355d24dc18fbfd570896ed3c6ef509a8a54e9fe57b625b2bdb16d29bfaff7
BucketConfidenceLevel: Under Observation - More Data Needed
UpdateType:
For more information, please see https://go.microsoft.com/fwlink/?linkid=2301018.

Error: (03/02/2026 09:42:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (03/02/2026 09:42:26 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (30000 ms).

Error: (03/02/2026 09:41:04 PM) (Source: LsaSrv) (EventID: 6033) (User: NT AUTHORITY)
Description: Anonymní relace připojená z: PC-HORNÍ se pokusila v tomto počítači otevřít popisovač zásad místní autority zabezpečení. Pokus byl odmítnut s hodnotou STATUS_ACCESS_DENIED, aby se zabránilo úniku informací citlivých z hlediska zabezpečení k anonymnímu volajícímu.
Aplikaci, která provedla tento pokus, je třeba opravit. Obraťte se na dodavatele této aplikace. Toto bezpečnostní opatření lze dočasně obejít tím, že v registru nastavíte parametr \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\TurnOffAnonymousBlock DWORD na hodnotu 1.
Tato zpráva bude zapsána do protokolu maximálně jednou denně.

Error: (03/02/2026 09:40:21 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (19:00:03, ‎02.‎03.‎2026) bylo neočekávané.

Error: (03/02/2026 09:40:12 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 3221225684Při zpracování obnovovacích dat došlo k závažné chybě.

Error: (03/02/2026 07:05:05 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
Description: Updated Secure Boot certificates are available on this device but have not yet been applied to the firmware. Review the published guidance to complete the update and maintain full protection. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:ASUSTeK COMPUTER INC.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:2103;OEMModelBaseBoard:Z87-PLUS;OEMManufacturerName:ASUS;OSArchitecture:amd64;
BucketId: 2bd355d24dc18fbfd570896ed3c6ef509a8a54e9fe57b625b2bdb16d29bfaff7
BucketConfidenceLevel: Under Observation - More Data Needed
UpdateType:
For more information, please see https://go.microsoft.com/fwlink/?linkid=2301018.

Error: (03/02/2026 07:02:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

CodeIntegrity:
===============
Date: 2026-03-02 22:42:27
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Windows signing level requirements.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 2103 08/15/2014
Motherboard: ASUSTeK COMPUTER INC. Z87-PLUS
Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz
Percentage of memory in use: 19%
Total physical RAM: 24514.28 MB
Available physical RAM: 19844.49 MB
Total Virtual: 28098.28 MB
Available Virtual: 22831 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.88 GB) (Free:818.11 GB) (Model: WDC WDS100T2B0A-00SM50) NTFS
Drive d: (Nový svazek) (Fixed) (Total:1862.89 GB) (Free:1394.21 GB) (Model: WDC WD20EFRX-68EUZN0) NTFS

\\?\Volume{7d5c8756-5070-42f3-8c67-1b3dc7ba3475}\ () (Fixed) (Total:0.52 GB) (Free:0.03 GB) NTFS
\\?\Volume{e47ca8b8-be61-4188-905b-e48f6e58fda8}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 09FC7AC5)

Partition: GPT.

==========================================================
Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================