Poprosil by som Vás o preventívnu kontrolu logu

[Nabuchodonozor671]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-08-2026
Ran by Administrator1682026 (administrator) on MSI-PC-ROCKY671 (Micro-Star International Co., Ltd. MS-7A39) (29-08-2026 09:24:18)
Running from C:\Users\Administrator180826\Desktop\FRST64.exe
Loaded Profiles: Administrator1682026
Platform: Microsoft Windows 10 IoT Enterprise LTSC Version 21H2 19044.7663 (X64) Language: Slovenčina (Slovensko)
Default browser: Brave
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\Dell\Dell Peripheral Manager\DPM.exe ->) (IndiLogic LLC -> ) C:\Program Files\Dell\Dell Peripheral Manager\DPMCrashHandler.exe
(C:\Program Files\Dell\Dell Peripheral Manager\DPMService.exe ->) (IndiLogic LLC -> ) C:\Program Files\Dell\Dell Peripheral Manager\DPMCrashHandler.exe
(C:\Program Files\Dell\Dell Peripheral Manager\DPMService.exe ->) (IndiLogic LLC -> Dell Inc.) C:\Program Files\Dell\Dell Peripheral Manager\DPM.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eServiceHost.exe <2>
(DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\atieclxx.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispsi.inf_amd64_671c0a23616db704\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_47725f5567f931ee\amdfendrsr.exe
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\atiesrxx.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (IndiLogic LLC -> Dell Inc.) C:\Program Files\Dell\Dell Peripheral Manager\DPMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispsi.inf_amd64_671c0a23616db704\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Windscribe Limited -> ESET, spol. s r.o.) C:\Program Files\ESET\ESET VPN\esetvpnservice.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Reflect UI] => C:\Program Files\Macrium\Common\ReflectUI.exe [11859680 2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
HKLM\...\Run: [Nearby Share] => C:\Program Files\Google\NearbyShare\nearby_share_launcher.exe [2951832 2026-05-15] (Google LLC -> Google)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [285104 2026-06-22] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [835760 2019-11-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-3027844117-2545590462-1958035622-1001\...\Run: [ESET VPN] => C:\Program Files\ESET\ESET VPN\esetvpn.exe [5494232 2026-06-04] (Windscribe Limited -> ESET, spol. s r.o.)
HKU\S-1-5-21-3027844117-2545590462-1958035622-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [6199664 2026-08-19] (Tonec Inc. -> Tonec Inc.)
HKU\S-1-5-21-3027844117-2545590462-1958035622-1002\...\Run: [MicrosoftEdgeAutoLaunch_0D3A46B562E7F5B8C059975C9FD6A406] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5018440 2026-08-22] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3027844117-2545590462-1958035622-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\MARINE~1.SCR [7250944 2020-01-22] (SereneScreen) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\152.1.94.117\Installer\chrmstp.exe [6485584 2026-08-27] (Brave Software, Inc. -> Brave Software, Inc.)
IFEO\MicrosoftEdge.exe: [Debugger] C:\Windows\System32\systray.exe
IFEO\MicrosoftEdgeUpdate.exe: [Debugger] C:\Windows\System32\systray.exe
IFEO\msedge.exe: [Debugger] C:\Windows\System32\systray.exe
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1E81EAE6-35D8-42E9-8C4E-48D50C5F9F80} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{66533790-6B20-4A0F-A184-46D148FE2B75} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-08-16] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {5CD0CFC3-E858-4ABE-BA86-34F66C7CA857} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{048647D2-9491-4FB0-8775-D893FD27584F} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-08-16] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {E9C1C635-C07C-4A5F-835A-72D7AA875A01} - System32\Tasks\Google\Quick Share Relaunch => C:\Program Files\Google\NearbyShare\nearby_share_launcher.exe [2951832 2026-05-15] (Google LLC -> Google)
Task: {59AC5879-5B06-4D30-906C-7837C1BE7D0E} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{CFB2E328-B750-42D2-ABE5-8F6A6EA61861} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [7400088 2026-07-05] (Google LLC -> Google LLC)
Task: {CDFA738D-32CD-49DF-A6A1-CB160D682F09} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21920576 2026-08-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {A255AEF3-C5F9-41F2-ADDD-38D59F788AE9} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21920576 2026-08-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {752F8A20-C516-456C-8EA7-D363D27AF07F} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143728 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {EDDA4BD2-3AC0-4290-A00C-E2D0AC28C641} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143728 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 1.1.1.1 1.0.0.1
Tcpip\..\Interfaces\{f8b623ee-4928-475f-9fdc-db9ebbc6036a}: [DhcpNameServer] 1.1.1.1 1.0.0.1

FireFox:
========
FF HKU\S-1-5-21-3027844117-2545590462-1958035622-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Administrator180826\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Administrator180826\AppData\Roaming\IDM\idmmzcc5 [2026-08-24] [Legacy] [not signed]
FF HKU\S-1-5-21-3027844117-2545590462-1958035622-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-19] [Legacy]
FF HKU\S-1-5-21-3027844117-2545590462-1958035622-1002\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Rocky671RZ\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Rocky671RZ\AppData\Roaming\IDM\idmmzcc5 [2026-08-24] [Legacy] [not signed]
FF HKU\S-1-5-21-3027844117-2545590462-1958035622-1002\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)

Edge:
=======
Edge Profile: C:\Users\Administrator180826\AppData\Local\Microsoft\Edge\User Data\Default [2026-08-28]
Error reading preferences. Please make sure ESET "Secure Browser" option is disabled. <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Administrator180826\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-20] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Administrator180826\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-08-20] [UpdateUrl:0] <==== ATTENTION
Edge HKU\S-1-5-21-3027844117-2545590462-1958035622-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [llbjbkhnmlidjebalopleeepgdfgcpec] - C:\Program Files (x86)\Internet Download Manager\IDMEdgeExt.crx [2026-02-18]
Edge HKU\S-1-5-21-3027844117-2545590462-1958035622-1002\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [llbjbkhnmlidjebalopleeepgdfgcpec] - C:\Program Files (x86)\Internet Download Manager\IDMEdgeExt.crx [2026-02-18]
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2026-02-18]
CHR HKU\S-1-5-21-3027844117-2545590462-1958035622-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2026-02-18]
CHR HKU\S-1-5-21-3027844117-2545590462-1958035622-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2026-02-18]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2026-02-18]
CHR HKLM-x32\...\Chrome\Extension: [oombnmpbbhbakfpfgdflaajkhicgfaam]

Brave:
=======
BRA Profile: C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2026-08-29]
Error reading preferences. Please make sure ESET "Secure Browser" option is disabled. <==== ATTENTION
BRA Extension: (No Name) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2026-08-27] [UpdateUrl:0] <==== ATTENTION
BRA Extension: (Brave Ad Block Updater (Brave First Party Adblock Filters (plaintext))) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2026-08-29]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2026-08-29]
BRA Extension: (Brave NTP background images) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2026-08-16]
BRA Extension: (Brave Ad Block Updater (Mobile app promo blocker (plaintext))) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2026-08-27]
BRA Extension: (Brave Ad Block Updater (Cookie notice blocker (plaintext))) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2026-08-29]
BRA Extension: (Query Filter) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\cemdlagocoimleflkfkjoihojfainiho [2026-08-29]
BRA Extension: (Brave Ad Block Updater (Allow X/Twitter Embeds (plaintext))) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\dkpggglmbjhgjhachikgmohmecomjndo [2026-08-16]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2026-08-19]
BRA Extension: (Brave Ad Block Updater (Brave Default Adblock Filters (plaintext))) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2026-08-29]
BRA Extension: (Brave Ad Block Updater (Allow Facebook Embeds (plaintext))) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\jmfhneobcdckobmonkfjkbknnjjnegoh [2026-08-16]
BRA Extension: (Brave Ad Block Updater (Brave Default Privacy Filters (plaintext))) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf [2026-08-29]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2026-08-28]
BRA Extension: (Brave NTP sponsored images) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\mjgplcflbkgklplplbakkopkafojhbmk [2026-08-29]
BRA Extension: (Brave User Agent) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe [2026-08-29]
BRA Extension: (Brave Ads Resources) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\obponfmfefkaeehakbehbnnlcbebebhd [2026-08-16]
BRA Extension: (Brave Ad Block Updater (Czech and Slovak website ad blocker (plaintext))) - C:\Users\Administrator180826\AppData\Local\BraveSoftware\Brave-Browser\User Data\oegebjahecghlckbhkmojgnpcgdeajdi [2026-08-16]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-08-16] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\152.1.94.117\elevation_service.exe [5045840 2026-08-26] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-08-16] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9214352 2026-08-05] (Microsoft Corporation -> Microsoft Corporation)
R2 DPMService; C:\Program Files\Dell\Dell Peripheral Manager\DPMService.exe [2199416 2024-10-22] (IndiLogic LLC -> Dell Inc.)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5748144 2026-06-22] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [5058536 2026-06-22] (ESET, spol. s r.o. -> ESET)
R2 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [5058536 2026-06-22] (ESET, spol. s r.o. -> ESET)
R2 ESETVPNService; C:\Program Files\ESET\ESET VPN\esetvpnservice.exe [1076696 2026-06-04] (Windscribe Limited -> ESET, spol. s r.o.)
S4 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [13004248 2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.26070.9-0\MpDefenderCoreService.exe [2113568 2026-08-17] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService_x64.exe [2669240 2018-01-12] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2343600 2019-10-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService_x64.exe [2725048 2017-12-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [2255544 2018-11-19] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2507952 2019-10-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2136248 2018-03-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [2740912 2019-10-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispsi.inf_amd64_671c0a23616db704\Display.NvContainer\NVDisplay.Container.exe [1275584 2025-10-10] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [877528 2026-08-16] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.26070.9-0\NisSrv.exe [5183648 2026-08-17] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.26070.9-0\MsMpEng.exe [291352 2026-08-17] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdfendrmgr; C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_47725f5567f931ee\amdfendrmgr.sys [37232 2026-03-31] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 amdgpio3; C:\Windows\System32\drivers\amdgpio3.sys [43400 2025-12-23] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
R3 AMDSAFD; C:\Windows\System32\DriverStore\FileRepository\amdsafd.inf_amd64_960126269e89c62e\amdsafd.sys [114048 2025-09-15] (Advanced Micro Devices -> Advanced Micro Devices)
R3 amdwddmg; C:\Windows\System32\DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\amdkmdag.sys [106666512 2026-05-20] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 DPMDriver; C:\Windows\System32\drivers\DPMDriver.sys [142272 2024-08-26] (IndiLogic LLC -> Dell Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [233992 2026-06-22] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [142504 2026-06-22] (Microsoft Windows Hardware Compatibility Publisher -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [17872 2026-06-22] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [374992 2026-06-22] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [57928 2026-06-22] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [83704 2026-06-22] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [127584 2026-06-22] (ESET, spol. s r.o. -> ESET)
S3 ESETVPNSplitTunnel; C:\Windows\system32\DRIVERS\esetvpnsplittunnel.sys [38152 2026-06-04] (Windscribe Limited -> )
R3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [181072 2019-11-19] (GENESYS LOGIC, INC. -> Genesys Logic)
R2 IDMWFP; C:\Windows\System32\drivers\idmwfp.sys [187064 2026-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Tonec Inc.)
S3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [82312 2026-08-17] (Microsoft Windows -> Microsoft Corporation)
S3 Revoflt; C:\Windows\System32\DRIVERS\revoflt.sys [38400 2021-11-17] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
S4 WdAiNisDrv; C:\Windows\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-08-17] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [21632 2026-08-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\Windows\System32\drivers\wdcsam64.sys [25704 2025-09-15] (WDKTestCert user,132375440089837053 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [625688 2026-08-17] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [111640 2026-08-17] (Microsoft Windows -> Microsoft Corporation)
S3 WireGuard; C:\Windows\System32\drivers\wireguard.sys [489368 2026-08-25] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-08-29 09:24 - 2026-08-29 09:24 - 000022664 _____ C:\Users\Administrator180826\Desktop\FRST.txt
2026-08-29 09:24 - 2026-08-29 09:24 - 000000000 ____D C:\FRST
2026-08-29 09:23 - 2026-08-29 09:23 - 002450944 _____ (Farbar) C:\Users\Administrator180826\Desktop\FRST64.exe
2026-08-29 07:46 - 2026-08-29 07:46 - 000439368 _____ C:\Windows\system32\FNTCACHE.DAT
2026-08-28 17:36 - 2026-08-28 17:36 - 000001025 _____ C:\Users\Administrator180826\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PrivaZer.lnk
2026-08-28 15:34 - 2026-08-28 15:34 - 000000000 ____D C:\Users\Rocky671RZ\AppData\LocalLow\NVIDIA
2026-08-28 15:34 - 2026-08-28 15:34 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\NVIDIA
2026-08-28 15:32 - 2026-08-29 08:58 - 000000000 ____D C:\ProgramData\NVIDIA
2026-08-28 15:32 - 2026-08-28 17:32 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2026-08-28 15:32 - 2026-08-28 15:32 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2026-08-28 15:32 - 2026-08-28 15:32 - 000000000 ____D C:\Windows\LastGood.Tmp
2026-08-28 15:32 - 2026-08-28 15:32 - 000000000 ____D C:\Users\Administrator180826\AppData\LocalLow\NVIDIA
2026-08-28 15:32 - 2026-08-28 15:32 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\NVIDIA
2026-08-28 15:30 - 2025-10-10 07:36 - 000126056 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2026-08-28 15:29 - 2025-10-10 17:01 - 002402656 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2026-08-28 15:29 - 2025-10-10 17:01 - 002402656 _____ C:\Windows\system32\vulkaninfo.exe
2026-08-28 15:29 - 2025-10-10 17:01 - 001908064 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-08-28 15:29 - 2025-10-10 17:01 - 001908064 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2026-08-28 15:29 - 2025-10-10 17:01 - 001581920 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2026-08-28 15:29 - 2025-10-10 17:01 - 001581920 _____ C:\Windows\system32\vulkan-1.dll
2026-08-28 15:29 - 2025-10-10 17:01 - 001395552 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2026-08-28 15:29 - 2025-10-10 17:01 - 001395552 _____ C:\Windows\SysWOW64\vulkan-1.dll
2026-08-28 15:29 - 2025-10-10 17:01 - 000478400 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2026-08-28 15:29 - 2025-10-10 17:01 - 000374976 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2026-08-28 15:29 - 2025-10-10 16:58 - 001322176 _____ (NVIDIA Corporation) C:\Windows\system32\nvml.dll
2026-08-28 15:29 - 2025-10-10 16:58 - 000675008 _____ (NVIDIA Corporation) C:\Windows\system32\nvofapi64.dll
2026-08-28 15:29 - 2025-10-10 16:58 - 000509120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvofapi.dll
2026-08-28 15:29 - 2025-10-10 16:57 - 026354880 _____ C:\Windows\system32\nvidia-pcc.exe
2026-08-28 15:29 - 2025-10-10 16:57 - 002317504 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2026-08-28 15:29 - 2025-10-10 16:57 - 001715904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2026-08-28 15:29 - 2025-10-10 16:57 - 001599680 _____ (NVIDIA Corporation) C:\Windows\system32\nvidia-smi.exe
2026-08-28 15:29 - 2025-10-10 16:57 - 001572544 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2026-08-28 15:29 - 2025-10-10 16:57 - 001223360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2026-08-28 15:29 - 2025-10-10 16:57 - 001057472 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2026-08-28 15:29 - 2025-10-10 16:57 - 000813248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2026-08-28 15:29 - 2025-10-10 16:56 - 024676032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2026-08-28 15:29 - 2025-10-10 16:56 - 021714112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2026-08-28 15:29 - 2025-10-10 16:56 - 007683264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2026-08-28 15:29 - 2025-10-10 16:56 - 005469888 _____ (NVIDIA Corporation) C:\Windows\system32\nvcudadebugger.dll
2026-08-28 15:29 - 2025-10-10 16:56 - 004175040 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2026-08-28 15:29 - 2025-10-10 16:56 - 000468672 _____ (NVIDIA Corporation) C:\Windows\system32\nvdebugdump.exe
2026-08-28 15:29 - 2025-10-10 16:55 - 005918912 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2026-08-28 15:29 - 2025-10-10 16:55 - 005625520 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2026-08-28 15:29 - 2025-10-10 16:55 - 004924120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2026-08-28 15:29 - 2025-10-10 16:55 - 000853696 _____ (NVIDIA Corporation) C:\Windows\system32\MCU.exe
2026-08-28 15:29 - 2025-10-10 07:36 - 000148902 _____ C:\Windows\system32\nvinfo.pb
2026-08-28 15:28 - 2026-08-29 09:01 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\D3DSCache
2026-08-28 15:28 - 2026-08-29 07:49 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\D3DSCache
2026-08-28 15:13 - 2026-08-28 15:14 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2026-08-28 15:12 - 2026-08-28 15:12 - 000000000 ____D C:\Windows\pss
2026-08-28 14:29 - 2026-08-28 14:29 - 000000000 ____D C:\ProgramData\dbg
2026-08-28 14:25 - 2026-08-28 14:25 - 000000000 ___HD C:\$Windows.~WS
2026-08-28 14:01 - 2026-08-28 14:01 - 2065310373 _____ C:\Windows\MEMORY.DMP
2026-08-28 14:01 - 2026-08-28 14:01 - 001363868 _____ C:\Windows\Minidump\082826-6156-01.dmp
2026-08-28 14:01 - 2026-08-28 14:01 - 000000000 ____D C:\Windows\Minidump
2026-08-27 14:11 - 2026-08-27 14:11 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\Adlice Software
2026-08-25 19:40 - 2026-08-25 19:40 - 000000000 ____D C:\ProgramData\Western Digital
2026-08-25 17:12 - 2026-08-25 17:12 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\FastStone
2026-08-25 17:12 - 2026-08-25 17:12 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\FastStone
2026-08-25 10:50 - 2026-08-25 10:50 - 000001070 __RSH C:\ProgramData\ntuser.pol
2026-08-25 10:26 - 2026-08-25 10:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerShell
2026-08-25 10:26 - 2026-08-25 10:26 - 000000000 ____D C:\Program Files\PowerShell
2026-08-24 20:11 - 2026-08-29 08:58 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\DMCache
2026-08-24 20:11 - 2026-08-25 19:20 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\IDM
2026-08-24 20:11 - 2026-08-25 16:06 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\DMCache
2026-08-24 20:11 - 2026-08-25 10:50 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\IDM
2026-08-24 20:11 - 2026-08-24 20:11 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2026-08-24 20:11 - 2026-08-24 20:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2026-08-24 20:11 - 2026-08-24 20:11 - 000000000 ____D C:\ProgramData\IDM
2026-08-24 20:11 - 2026-08-24 20:11 - 000000000 ____D C:\Program Files (x86)\Internet Download Manager
2026-08-24 18:28 - 2026-08-24 18:28 - 000001667 _____ C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\videodownloader.lnk
2026-08-24 18:04 - 2026-08-24 18:04 - 000001096 _____ C:\Users\Administrator180826\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UCheck_portable64_win10.lnk
2026-08-24 17:34 - 2026-08-24 17:34 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Digiarty
2026-08-24 17:34 - 2026-08-24 17:34 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Digiarty
2026-08-24 17:34 - 2026-08-24 17:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoProc Converter AI
2026-08-24 17:34 - 2026-08-24 17:34 - 000000000 ____D C:\Program Files (x86)\Digiarty
2026-08-24 07:42 - 2026-08-24 07:42 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_mticache_01011.Wdf
2026-08-24 07:35 - 2026-08-24 07:35 - 000000000 ____D C:\ProgramData\Teorex
2026-08-24 07:35 - 2026-08-24 07:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FolderIco
2026-08-24 07:35 - 2026-08-24 07:35 - 000000000 ____D C:\Program Files\FolderIco
2026-08-21 13:06 - 2026-08-21 13:06 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Stationery
2026-08-21 13:06 - 2026-08-21 13:06 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Signatures
2026-08-21 10:07 - 2026-08-27 13:38 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-08-21 05:15 - 2026-08-28 14:30 - 000000000 ____D C:\Program Files\WhoCrashed
2026-08-21 05:15 - 2026-08-21 05:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed
2026-08-20 18:29 - 2026-08-21 14:35 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\BID
2026-08-20 18:28 - 2026-08-20 18:28 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\BID
2026-08-20 18:28 - 2026-08-20 18:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bulk Image Downloader
2026-08-20 18:28 - 2026-08-20 18:28 - 000000000 ____D C:\Program Files\Bulk Image Downloader
2026-08-20 18:27 - 2026-08-20 18:27 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\Bulk Image Downloader
2026-08-20 17:57 - 2026-08-24 19:43 - 000003694 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{29003036-CBDA-4947-A13E-D2713932DE01}
2026-08-20 17:57 - 2026-08-24 19:43 - 000003468 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{BDBB3824-2F30-48DD-9D94-9418F13A4029}
2026-08-20 17:57 - 2026-08-24 19:43 - 000003056 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateBrowserReplacementTask
2026-08-20 17:57 - 2026-08-24 17:30 - 000002323 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-08-20 17:04 - 2026-08-21 14:34 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Word
2026-08-20 16:54 - 2026-08-20 16:55 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Outlook
2026-08-20 16:54 - 2026-08-20 16:54 - 000001397 _____ C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2026-08-20 16:54 - 2026-08-20 16:54 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\UProof
2026-08-20 16:54 - 2026-08-20 16:54 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Proof
2026-08-20 16:53 - 2026-08-20 17:05 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Office
2026-08-20 16:45 - 2026-08-20 16:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje balíka Microsoft Office
2026-08-20 16:43 - 2026-08-20 16:43 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\PowerPoint
2026-08-20 16:42 - 2026-08-24 12:23 - 000000000 ___SD C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Credentials
2026-08-20 16:42 - 2026-08-20 16:42 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\AddIns
2026-08-20 16:42 - 2026-08-20 16:42 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-08-20 16:41 - 2026-08-20 16:45 - 000002521 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2026-08-20 16:41 - 2026-08-20 16:45 - 000002482 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk
2026-08-20 16:41 - 2026-08-20 16:45 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2026-08-20 16:41 - 2026-08-20 16:45 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2026-08-20 16:41 - 2026-08-20 16:45 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2026-08-20 16:41 - 2026-08-20 16:45 - 000002433 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2026-08-20 16:41 - 2026-08-20 16:45 - 000002407 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2026-08-20 16:41 - 2026-08-20 16:45 - 000002399 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2026-08-20 16:38 - 2026-08-20 16:38 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Vault
2026-08-20 16:34 - 2026-08-20 16:46 - 000000000 ____D C:\Program Files\Microsoft Office
2026-08-20 16:34 - 2026-08-20 16:34 - 000000000 ____D C:\Program Files\Microsoft Office 15
2026-08-20 15:13 - 2026-08-20 15:13 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Microsoft\PowerPoint
2026-08-20 15:13 - 2026-08-20 15:13 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Microsoft\AddIns
2026-08-20 15:13 - 2026-08-20 15:13 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\SquirrelTemp
2026-08-20 15:08 - 2026-08-20 16:42 - 000000000 ___RD C:\Users\Default\OneDrive
2026-08-20 09:52 - 2026-08-20 09:52 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\IsolatedStorage
2026-08-20 06:49 - 2026-08-20 06:49 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\IsolatedStorage
2026-08-20 06:40 - 2026-08-20 06:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2026-08-20 06:40 - 2026-08-20 06:40 - 000000000 ____D C:\Program Files (x86)\MSI
2026-08-20 05:44 - 2026-08-20 05:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2026-08-20 05:44 - 2026-08-20 05:44 - 000000000 ____D C:\ProgramData\ESET
2026-08-20 05:39 - 2026-08-20 05:39 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Dell
2026-08-20 05:39 - 2026-08-20 05:39 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\cache
2026-08-19 16:37 - 2026-08-24 18:30 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Allavsoft
2026-08-19 15:49 - 2026-08-19 15:50 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Marine Aquarium 3
2026-08-19 15:49 - 2026-08-19 15:49 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Marine Aquarium 3
2026-08-19 15:49 - 2026-08-19 15:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SereneScreen
2026-08-19 15:49 - 2026-08-19 15:49 - 000000000 ____D C:\Program Files (x86)\SereneScreen
2026-08-19 15:49 - 2020-01-22 16:48 - 007250944 _____ (SereneScreen) C:\Windows\SysWOW64\MarineAquarium3.scr
2026-08-19 15:49 - 2020-01-22 16:48 - 007250944 _____ (SereneScreen) C:\Windows\system32\MarineAquarium3.scr
2026-08-19 15:45 - 2026-08-19 15:45 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\WinRAR
2026-08-19 15:44 - 2026-08-19 15:44 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\WinRAR
2026-08-19 15:36 - 2026-08-28 16:28 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\qBittorrent
2026-08-19 15:36 - 2026-08-19 15:36 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\qBittorrent
2026-08-19 15:33 - 2026-08-19 15:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2026-08-19 15:33 - 2026-08-19 15:33 - 000000000 ____D C:\Program Files\qBittorrent
2026-08-19 15:15 - 2026-08-20 06:51 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\ESET
2026-08-19 15:15 - 2026-08-19 15:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET VPN
2026-08-19 14:57 - 2026-08-19 14:57 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Dell
2026-08-19 14:57 - 2026-08-19 14:57 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\cache
2026-08-19 14:57 - 2026-08-19 14:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2026-08-19 14:57 - 2026-08-19 14:57 - 000000000 ____D C:\ProgramData\Dell
2026-08-19 14:57 - 2026-08-19 14:57 - 000000000 ____D C:\Program Files\Dell
2026-08-19 14:44 - 2026-08-19 14:44 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\Microsoft Games
2026-08-19 14:12 - 2026-08-19 14:12 - 000000000 ___RD C:\Users\Administrator180826\Obľúbené položky
2026-08-19 14:10 - 2026-08-19 14:10 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Hard Disk Sentinel
2026-08-19 14:10 - 2026-08-19 14:10 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\PeerDistRepub
2026-08-19 13:52 - 2026-08-19 13:52 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\Downloaded Installations
2026-08-19 13:47 - 2026-08-20 06:39 - 000001623 _____ C:\Windows\system32\config\VSMIDK
2026-08-19 13:39 - 2026-08-19 13:39 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\JxBrowser
2026-08-19 13:36 - 2026-08-19 13:36 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Micron Storage Executive
2026-08-19 13:36 - 2026-08-19 13:36 - 000000000 ____D C:\Program Files\Micron Technology
2026-08-19 13:34 - 2026-08-19 13:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZD Soft
2026-08-19 13:34 - 2026-08-19 13:34 - 000000000 ____D C:\Program Files (x86)\ZD Soft
2026-08-19 13:33 - 2026-08-19 13:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shutter Encoder
2026-08-19 13:33 - 2026-08-19 13:33 - 000000000 ____D C:\Program Files\Shutter Encoder
2026-08-19 13:32 - 2026-08-19 13:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScissors
2026-08-19 13:32 - 2026-08-19 13:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inpaint
2026-08-19 13:32 - 2026-08-19 13:32 - 000000000 ____D C:\Program Files\PhotoScissors
2026-08-19 13:32 - 2026-08-19 13:32 - 000000000 ____D C:\Program Files\Inpaint
2026-08-19 13:31 - 2026-08-20 05:44 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\ESET
2026-08-19 13:31 - 2026-08-20 05:44 - 000000000 ____D C:\Program Files\ESET
2026-08-19 13:31 - 2026-06-04 17:54 - 000038152 _____ C:\Windows\system32\Drivers\esetvpnsplittunnel.sys
2026-08-19 13:30 - 2026-08-19 14:11 - 000000000 ____D C:\Program Files (x86)\Hard Disk Sentinel
2026-08-19 13:30 - 2026-08-19 13:30 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Allavsoft
2026-08-19 13:30 - 2026-08-19 13:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hard Disk Sentinel
2026-08-19 13:30 - 2026-08-19 13:30 - 000000000 ____D C:\Program Files (x86)\Allavsoft
2026-08-19 13:29 - 2026-08-25 11:05 - 000000000 ___HD C:\MSI
2026-08-19 13:28 - 2026-08-19 13:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire
2026-08-19 13:28 - 2026-08-19 13:28 - 000000000 ____D C:\Program Files\FinalWire
2026-08-19 10:08 - 2026-08-28 18:23 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\AIMP
2026-08-19 10:07 - 2026-08-28 17:39 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\AIMP
2026-08-19 10:07 - 2026-08-27 14:14 - 000000000 ____D C:\Program Files\AIMP
2026-08-19 10:07 - 2026-08-19 10:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP
2026-08-19 10:03 - 2026-08-21 12:49 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\SumatraPDF
2026-08-19 10:03 - 2026-08-19 10:03 - 000002094 _____ C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Windows\Start Menu\SumatraPDF.lnk
2026-08-19 09:56 - 2026-08-19 10:00 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\PotPlayerMini64
2026-08-19 09:56 - 2026-08-19 09:56 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Daum
2026-08-19 09:56 - 2026-08-19 09:56 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\PotPlayerMini64
2026-08-19 09:56 - 2026-08-19 09:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PotPlayer
2026-08-19 09:56 - 2026-08-19 09:56 - 000000000 ____D C:\Program Files\DAUM
2026-08-19 09:53 - 2026-08-19 16:40 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\FastStone
2026-08-19 09:53 - 2026-08-19 16:40 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\FastStone
2026-08-19 08:54 - 2026-08-19 08:54 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\Google
2026-08-19 08:48 - 2026-08-19 08:48 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\VS Revo Group
2026-08-19 08:34 - 2026-08-19 08:37 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\Publishers
2026-08-19 08:29 - 2026-08-29 08:34 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\eM Client
2026-08-19 08:29 - 2026-08-19 08:29 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\eM Client
2026-08-19 08:29 - 2026-08-19 08:29 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\CEF
2026-08-19 08:26 - 2026-08-26 20:59 - 000001104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eM Client.lnk
2026-08-19 08:26 - 2026-08-26 20:59 - 000000000 ____D C:\Program Files (x86)\eM Client
2026-08-19 08:26 - 2026-08-19 15:45 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2026-08-19 08:26 - 2026-08-19 15:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2026-08-19 08:26 - 2026-08-19 08:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks
2026-08-19 08:26 - 2026-08-19 08:26 - 000000000 ____D C:\ProgramData\2BrightSparks
2026-08-19 08:26 - 2026-08-19 08:26 - 000000000 ____D C:\Program Files (x86)\2BrightSparks
2026-08-19 08:25 - 2026-08-24 12:23 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\Google
2026-08-19 08:25 - 2026-08-19 08:48 - 000000000 ____D C:\Program Files\WinRAR
2026-08-19 08:25 - 2026-08-19 08:25 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\VS Revo Group
2026-08-19 08:25 - 2026-08-19 08:25 - 000000000 ____D C:\ProgramData\VS Revo Group
2026-08-19 08:25 - 2026-08-19 08:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2026-08-19 08:25 - 2026-08-19 08:25 - 000000000 ____D C:\Program Files\VS Revo Group
2026-08-19 08:24 - 2026-08-19 08:24 - 000001177 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Quick Share.lnk
2026-08-19 08:24 - 2026-08-19 08:24 - 000000000 ____D C:\Windows\system32\Tasks\GoogleSystem
2026-08-19 08:24 - 2026-08-19 08:24 - 000000000 ____D C:\Windows\system32\Tasks\Google
2026-08-19 08:24 - 2026-08-19 08:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Photo Resizer
2026-08-19 08:24 - 2026-08-19 08:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone MaxView
2026-08-19 08:24 - 2026-08-19 08:24 - 000000000 ____D C:\Program Files\Google
2026-08-19 08:24 - 2026-08-19 08:24 - 000000000 ____D C:\Program Files (x86)\Google
2026-08-19 08:24 - 2026-08-19 08:24 - 000000000 ____D C:\Program Files (x86)\FastStone Photo Resizer
2026-08-19 08:24 - 2026-08-19 08:24 - 000000000 ____D C:\Program Files (x86)\FastStone MaxView
2026-08-19 08:08 - 2026-08-19 08:08 - 000000000 ___RD C:\Users\Rocky671RZ\Obľúbené položky
2026-08-19 07:41 - 2026-08-19 16:07 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\Microsoft Games
2026-08-19 07:41 - 2026-08-19 07:41 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\Programs\Common
2026-08-19 07:41 - 2026-08-19 07:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2026-08-19 07:41 - 2026-08-19 07:41 - 000000000 ____D C:\Program Files\Microsoft Games
2026-08-19 07:20 - 2026-08-29 07:52 - 000673048 _____ C:\Windows\system32\perfh005.dat
2026-08-19 07:20 - 2026-08-29 07:52 - 000137034 _____ C:\Windows\system32\perfc005.dat
2026-08-19 07:20 - 2026-08-29 07:52 - 000080866 _____ C:\Windows\system32\perfh01B.dat
2026-08-19 07:20 - 2026-08-29 07:52 - 000015816 _____ C:\Windows\system32\perfc01B.dat
2026-08-19 07:20 - 2026-08-19 08:44 - 000000000 ____D C:\Windows\SysWOW64\cs
2026-08-19 07:20 - 2026-08-19 08:44 - 000000000 ____D C:\Windows\system32\cs
2026-08-19 07:18 - 2026-08-24 08:00 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\PlaceholderTileLogoFolder
2026-08-18 18:58 - 2026-08-18 18:58 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\InputMethod
2026-08-17 04:20 - 2026-08-17 04:20 - 000000000 ____D C:\Users\Administrator180826\Documents\Reflect
2026-08-17 04:19 - 2026-08-17 04:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macrium
2026-08-17 04:19 - 2026-08-17 04:19 - 000000000 ____D C:\Program Files\Macrium
2026-08-17 04:18 - 2026-08-24 18:08 - 000000000 ____D C:\ProgramData\Macrium
2026-08-16 21:14 - 2026-08-19 07:21 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\MMC
2026-08-16 21:08 - 2026-08-16 21:08 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\Comms
2026-08-16 21:07 - 2026-08-16 21:07 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\IME
2026-08-16 21:05 - 2026-08-16 21:05 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Spelling
2026-08-16 21:02 - 2026-08-28 15:34 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\Packages
2026-08-16 21:02 - 2026-08-28 15:11 - 000000000 ____D C:\Users\Rocky671RZ
2026-08-16 21:02 - 2026-08-25 19:49 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\AMD
2026-08-16 21:02 - 2026-08-20 16:53 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\ConnectedDevicesPlatform
2026-08-16 21:02 - 2026-08-19 09:07 - 000000000 ___SD C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Protect
2026-08-16 21:02 - 2026-08-19 08:34 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Windows
2026-08-16 21:02 - 2026-08-16 21:02 - 000000020 ___SH C:\Users\Rocky671RZ\ntuser.ini
2026-08-16 21:02 - 2026-08-16 21:02 - 000000000 ___SD C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\SystemCertificates
2026-08-16 21:02 - 2026-08-16 21:02 - 000000000 ___SD C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Crypto
2026-08-16 21:02 - 2026-08-16 21:02 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Microsoft\Network
2026-08-16 21:02 - 2026-08-16 21:02 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Roaming\Adobe
2026-08-16 21:02 - 2026-08-16 21:02 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\VirtualStore
2026-08-16 21:02 - 2026-08-16 21:02 - 000000000 ____D C:\Users\Rocky671RZ\AppData\Local\BraveSoftware
2026-08-16 20:50 - 2026-08-16 20:50 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2026-08-16 20:50 - 2026-08-16 20:50 - 000000000 ____D C:\Program Files (x86)\Realtek
2026-08-16 20:50 - 2026-07-19 22:26 - 001473064 _____ (Realtek ) C:\Windows\system32\Drivers\rt640x64.sys
2026-08-16 20:38 - 2026-08-29 08:58 - 000000000 ____D C:\Windows\SystemTemp
2026-08-16 20:38 - 2026-08-16 20:38 - 000000000 ____D C:\Windows\system32\Drivers\mde
2026-08-16 20:38 - 2026-08-16 20:38 - 000000000 ____D C:\Windows\system32\compatrel
2026-08-16 20:38 - 2026-08-16 20:38 - 000000000 ____D C:\Windows\SecureBoot
2026-08-16 20:38 - 2026-08-16 20:38 - 000000000 ____D C:\Windows\InboxApps
2026-08-16 20:31 - 2026-08-16 20:31 - 000023734 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-08-16 20:30 - 2026-08-16 20:30 - 000023734 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2026-08-16 20:17 - 2026-08-16 20:18 - 000000000 ____D C:\Windows\system32\MRT
2026-08-16 20:14 - 2026-08-28 14:26 - 000000000 ____D C:\Windows\Panther
2026-08-16 20:12 - 2026-05-20 12:02 - 000207888 _____ C:\Windows\system32\mantle64.dll
2026-08-16 20:12 - 2026-05-20 12:02 - 000186896 _____ C:\Windows\system32\mantleaxl64.dll
2026-08-16 20:12 - 2026-05-20 12:02 - 000165904 _____ C:\Windows\SysWOW64\mantle32.dll
2026-08-16 20:12 - 2026-05-20 12:02 - 000149520 _____ C:\Windows\SysWOW64\mantleaxl32.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 002245648 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdsasrv64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 002100240 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 001717800 _____ (AMD) C:\Windows\system32\amf-mft-mjpeg-decoder64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 001617936 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 001617936 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 001395256 _____ (AMD) C:\Windows\SysWOW64\amf-mft-mjpeg-decoder32.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 001362416 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdsacli64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 001059856 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdsacli32.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000978448 _____ (AMD) C:\Windows\system32\atieclxx.exe
2026-08-16 20:12 - 2026-05-20 12:01 - 000944144 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000771600 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000610832 _____ C:\Windows\system32\GameManager64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000570384 _____ C:\Windows\system32\amdgfxinfo64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000560480 _____ C:\Windows\system32\amdmiracast.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000537616 _____ C:\Windows\system32\atieah64.exe
2026-08-16 20:12 - 2026-05-20 12:01 - 000504336 _____ C:\Windows\system32\EEURestart.exe
2026-08-16 20:12 - 2026-05-20 12:01 - 000473616 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000464400 _____ C:\Windows\SysWOW64\GameManager32.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000434184 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000406544 _____ C:\Windows\SysWOW64\atieah32.exe
2026-08-16 20:12 - 2026-05-20 12:01 - 000267280 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000229392 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000226608 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdihk64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000201232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000196624 _____ (AMD) C:\Windows\system32\atimuixx.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000184848 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000178192 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdihk32.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000168248 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000165392 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000157864 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000157864 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000149008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000142864 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amfrt64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000141640 _____ C:\Windows\system32\amdxc64.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000129136 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000129136 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000118800 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amfrt32.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000117136 _____ C:\Windows\SysWOW64\amdxc32.dll
2026-08-16 20:12 - 2026-05-20 12:01 - 000075280 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ati2erec.dll
2026-08-16 20:12 - 2026-05-20 12:00 - 105410576 _____ C:\Windows\system32\amd_comgr.dll
2026-08-16 20:12 - 2026-05-20 12:00 - 088606736 _____ C:\Windows\SysWOW64\amd_comgr32.dll
2026-08-16 20:12 - 2026-05-20 12:00 - 019435536 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdhip64.dll
2026-08-16 20:12 - 2026-05-20 12:00 - 004374544 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdadlx64.dll
2026-08-16 20:12 - 2026-05-20 12:00 - 004179984 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdadlx32.dll
2026-08-16 20:12 - 2026-05-20 12:00 - 000801808 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Rapidfire64.dll
2026-08-16 20:12 - 2026-05-20 12:00 - 000678928 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\Rapidfire.dll
2026-08-16 20:12 - 2026-05-20 12:00 - 000545800 _____ C:\Windows\system32\dgtrayicon.exe
2026-08-16 20:12 - 2026-05-20 12:00 - 000471560 _____ C:\Windows\system32\amdlogum.exe
2026-08-16 20:12 - 2026-05-20 12:00 - 000177168 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2026-08-16 20:12 - 2026-05-20 12:00 - 000145928 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl.dll
2026-08-16 20:12 - 2026-05-20 12:00 - 000143104 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2026-08-16 20:12 - 2026-05-20 12:00 - 000103440 _____ C:\Windows\system32\clinfo.exe
2026-08-16 20:12 - 2026-05-20 12:00 - 000051728 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\RapidFireServer64.dll
2026-08-16 20:12 - 2026-05-20 12:00 - 000048656 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\RapidFireServer.dll
2026-08-16 20:12 - 2026-05-20 11:35 - 109628208 _____ C:\Windows\system32\amdxc64.so
2026-08-16 20:09 - 2026-08-16 20:24 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\AMD
2026-08-16 20:05 - 2019-11-19 03:37 - 003183120 _____ (Genesys Logic) C:\Windows\SysWOW64\GLCRIcon.dll
2026-08-16 20:05 - 2019-11-19 03:37 - 000181072 _____ (Genesys Logic) C:\Windows\system32\Drivers\GeneStor.sys
2026-08-16 20:01 - 2026-08-16 20:01 - 000000000 ____D C:\Windows\SysWOW64\NV
2026-08-16 20:01 - 2026-08-16 20:01 - 000000000 ____D C:\Windows\system32\NV
2026-08-16 19:59 - 2023-04-06 13:09 - 000113056 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\amdkmpfd.sys
2026-08-16 19:58 - 2026-08-19 13:52 - 000000000 ____D C:\Program Files\AMD
2026-08-16 19:58 - 2026-08-16 19:58 - 000000000 ____D C:\Windows\system32\AMD
2026-08-16 19:54 - 2026-08-28 17:39 - 000000000 ___HD C:\AMD
2026-08-16 19:54 - 2026-08-26 18:00 - 000000000 ____D C:\ProgramData\Package Cache
2026-08-16 19:54 - 2026-08-16 19:54 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\AMD
2026-08-16 19:54 - 2026-08-16 19:54 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\setup
2026-08-16 19:54 - 2026-08-16 19:54 - 000000000 ____D C:\Program Files (x86)\AMD
2026-08-16 19:52 - 2026-08-27 18:22 - 000002376 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2026-08-16 19:52 - 2026-08-16 19:52 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\BraveSoftware
2026-08-16 19:51 - 2026-08-16 19:51 - 000003850 _____ C:\Windows\system32\Tasks\BraveSoftwareUpdateTaskMachineUA{048647D2-9491-4FB0-8775-D893FD27584F}
2026-08-16 19:51 - 2026-08-16 19:51 - 000003726 _____ C:\Windows\system32\Tasks\BraveSoftwareUpdateTaskMachineCore{66533790-6B20-4A0F-A184-46D148FE2B75}
2026-08-16 19:51 - 2026-08-16 19:51 - 000000000 ____D C:\Program Files\Crashpad
2026-08-16 19:51 - 2026-08-16 19:51 - 000000000 ____D C:\Program Files\BraveSoftware
2026-08-16 19:51 - 2026-08-16 19:51 - 000000000 ____D C:\Program Files (x86)\BraveSoftware
2026-08-16 19:41 - 2026-08-24 08:00 - 000000000 ____D C:\ProgramData\Packages
2026-08-16 19:41 - 2026-08-16 19:41 - 000000000 ____D C:\Windows\system32\lxss
2026-08-16 19:38 - 2026-08-16 19:38 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2026-08-16 19:30 - 2026-08-16 19:30 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Microsoft\IME
2026-08-16 19:26 - 2026-08-16 20:46 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Microsoft\MMC
2026-08-16 19:24 - 2026-08-16 19:53 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Microsoft\Spelling
2026-08-16 19:23 - 2026-08-16 19:23 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\Comms
2026-08-16 19:21 - 2026-08-28 15:32 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\Packages
2026-08-16 19:21 - 2026-08-24 07:32 - 000000000 ___SD C:\Users\Administrator180826\AppData\Roaming\Microsoft\SystemCertificates
2026-08-16 19:21 - 2026-08-19 08:54 - 000000000 ___SD C:\Users\Administrator180826\AppData\Roaming\Microsoft\Protect
2026-08-16 19:21 - 2026-08-16 21:10 - 000000000 __RHD C:\Users\Public\AccountPictures
2026-08-16 19:21 - 2026-08-16 19:26 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\ConnectedDevicesPlatform
2026-08-16 19:21 - 2026-08-16 19:21 - 000000000 ___SD C:\Users\Administrator180826\AppData\Roaming\Microsoft\Crypto
2026-08-16 19:21 - 2026-08-16 19:21 - 000000000 ___SD C:\Users\Administrator180826\AppData\Roaming\Microsoft\Credentials
2026-08-16 19:21 - 2026-08-16 19:21 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Microsoft\Vault
2026-08-16 19:21 - 2026-08-16 19:21 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Microsoft\Network
2026-08-16 19:21 - 2026-08-16 19:21 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Adobe
2026-08-16 19:21 - 2026-08-16 19:21 - 000000000 ____D C:\Users\Administrator180826\AppData\Local\VirtualStore
2026-08-16 19:20 - 2026-08-25 10:21 - 000000000 ____D C:\Users\Administrator180826\AppData\Roaming\Microsoft\Windows
2026-08-16 19:20 - 2026-08-24 07:31 - 000000000 ____D C:\Users\Administrator180826
2026-08-16 19:20 - 2026-08-16 19:20 - 000000020 ___SH C:\Users\Administrator180826\ntuser.ini
2026-08-16 19:19 - 2026-08-29 07:52 - 001685440 _____ C:\Windows\system32\PerfStringBackup.INI
2026-08-16 19:17 - 2026-08-16 19:17 - 000000000 ____D C:\Windows\CSC
2026-08-16 19:15 - 2026-08-16 19:15 - 000000000 _SHDL C:\Documents and Settings
2026-08-16 19:14 - 2026-08-29 07:46 - 000008192 ___SH C:\DumpStack.log.tmp
2026-08-16 19:14 - 2026-08-29 07:46 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-08-16 19:14 - 2026-08-28 17:34 - 000000000 ____D C:\Windows\system32\SleepStudy
2026-08-16 19:14 - 2026-08-18 18:54 - 000000000 ____D C:\Windows\system32\Drivers\wd
2026-08-16 19:14 - 2026-08-16 19:14 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2026-08-16 19:14 - 2026-08-16 19:14 - 000000000 ____D C:\Windows\ServiceProfiles
2026-08-12 12:50 - 2026-08-12 12:50 - 000013261 _____ C:\Windows\Info.xml

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-08-29 09:04 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-08-29 07:52 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2026-08-28 18:50 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2026-08-28 18:50 - 2019-12-07 11:03 - 000262144 _____ C:\Windows\system32\config\BBI
2026-08-28 15:33 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2026-08-25 19:51 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\LiveKernelReports
2026-08-24 18:35 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2026-08-24 17:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Drivers\DriverData
2026-08-24 16:18 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\appcompat
2026-08-20 17:39 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemApps
2026-08-20 16:42 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2026-08-20 05:44 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2026-08-19 07:20 - 2019-12-07 16:40 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-08-19 07:20 - 2019-12-07 16:40 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-08-19 07:20 - 2019-12-07 16:40 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2026-08-19 07:20 - 2019-12-07 16:37 - 000000000 ____D C:\Windows\SysWOW64\winrm
2026-08-19 07:20 - 2019-12-07 16:37 - 000000000 ____D C:\Windows\SysWOW64\WCN
2026-08-19 07:20 - 2019-12-07 16:37 - 000000000 ____D C:\Windows\SysWOW64\slmgr
2026-08-19 07:20 - 2019-12-07 16:37 - 000000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2026-08-19 07:20 - 2019-12-07 16:37 - 000000000 ____D C:\Windows\system32\winrm
2026-08-19 07:20 - 2019-12-07 16:37 - 000000000 ____D C:\Windows\system32\WCN
2026-08-19 07:20 - 2019-12-07 16:37 - 000000000 ____D C:\Windows\system32\slmgr
2026-08-19 07:20 - 2019-12-07 16:37 - 000000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\SysWOW64\F12
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\F12
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Com
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Sysprep
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\migwiz
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Com
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\IME
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2026-08-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2026-08-19 07:20 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\servicing
2026-08-18 18:57 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog
2026-08-16 20:56 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2026-08-16 20:38 - 2019-12-07 16:40 - 000000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents
2026-08-16 20:38 - 2019-12-07 16:40 - 000000000 ___SD C:\Windows\system32\AppV
2026-08-16 20:38 - 2019-12-07 16:40 - 000000000 ____D C:\Program Files\Windows Portable Devices
2026-08-16 20:38 - 2019-12-07 16:40 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2026-08-16 20:38 - 2019-12-07 16:40 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2026-08-16 20:38 - 2019-12-07 16:40 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2026-08-16 20:38 - 2019-12-07 16:38 - 000000000 ____D C:\Windows\system32\OpenSSH
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\UNP
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\migwiz
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\es-MX
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\downlevel
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\AdvancedInstallers
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\ShellExperiences
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\setup
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\lv-LV
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\lt-LT
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\et-EE
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\es-MX
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\downlevel
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\DDFs
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\AdvancedInstallers
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellExperiences
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellComponents
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Provisioning
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\DiagTrack
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2026-08-16 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\USOPrivate
2026-08-16 20:35 - 2019-12-07 16:40 - 000007680 _____ (Microsoft Corporation) C:\Windows\system32\OEMDefaultAssociations.dll
2026-08-16 20:35 - 2019-12-07 11:15 - 000208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
2026-08-16 20:35 - 2019-12-07 11:14 - 000232448 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2026-08-16 20:19 - 2019-12-07 11:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2026-08-16 20:13 - 2019-12-07 11:14 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2026-08-16 19:28 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2026-08-16 19:26 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioDatabase
2026-08-16 19:17 - 2019-12-07 16:38 - 000000000 ____D C:\Windows\system32\FxsTmp
2026-08-16 19:17 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\spool
2026-08-16 19:15 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState

==================== Files in the root of some directories ========

2026-08-16 19:51 - 2026-08-16 19:52 - 000001205 _____ () C:\Program Files\chromium_installer.log

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

[JaRon]

Spust s prikazoveho riadku ako spravca:
sfc /scannow