prosím o kontrolu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
prosím o kontrolu
Zdravím,
začal jsem mít záseky při přehrávání videí a některé stránky se načítají neúměrně dlouho
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-09-2026
Ran by robin (administrator) on PC (Gigabyte Technology Co., Ltd. A620M GAMING X) (18-09-2026 19:18:03)
Running from C:\Users\robin\Desktop\FRST64.exe
Loaded Profiles: robin
Platform: Microsoft Windows 11 Home Version 25H2 26200.9457 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files\Logi\LogiPluginService\LogiPluginService.exe ->) (Logitech Inc -> ) C:\Program Files\Logi\LogiPluginService\LogiPluginServiceExt.exe
(C:\Program Files\Logi\LogiPluginService\LogiPluginServiceExt.exe ->) (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe
(C:\Program Files\Logi\LogiPluginService\LogiPluginServiceExt.exe ->) (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech) C:\Program Files\Logi\LogiPluginService\LogiPluginService.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_appbroker.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe
(DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\atieclxx.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <8>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\153.0.4234.32\msedgewebview2.exe <5>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a3944b54ff18b284\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\atiesrxx.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a3944b54ff18b284\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.4019.0_x64__8wekyb3d8bbwe\EdgeGameAssist.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe [1886616 2023-12-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2535400 2026-06-17] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\Run: [MicrosoftEdgeAutoLaunch_939C7F4108421878674BE382227CD57D] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5417288 2026-09-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2287906516-366990468-377022076-1010\...\Run: [MicrosoftEdgeAutoLaunch_C29AEE9D78A5497880E4815AC2DDEBDB] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5417288 2026-09-10] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\153.0.8010.48\Installer\chrmstp.exe [8034968 2026-09-16] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\153.1.95.102\Installer\chrmstp.exe [6556240 2026-09-16] (Brave Software, Inc. -> Brave Software, Inc.)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {A5D58C2B-4A75-4964-B64D-F32A7EC098BE} - System32\Tasks\AMDAutoUpdate => C:\Program Files\AMD\AutoUpdate\AMDAutoUpdate.exe [671440 2024-07-24] (Advanced Micro Devices -> )
Task: {2C39F93D-F39C-44A3-A7EF-63FD1D413BE9} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{455EF7B8-31F4-4770-9639-ED5CF1DBD44A} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-23] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {2DD8547B-734B-483B-9FA0-E49DD826EA2D} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{B586457F-36C9-4E79-9271-993B4F509936} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-23] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {69D48454-F7C8-40BC-BC71-C1DD283AC1EB} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{322C6614-12AF-4D4E-8CF8-4138E5C7FABB} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {11C5E73A-A783-4664-999F-BB7DCF1C270F} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {75FD89B9-0B43-401B-96F3-5C32069199B7} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {828F69BF-5666-47AA-911C-34EB0BA57812} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B67426A1-9695-432D-9DCA-98879EC72AD1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7D6A7D3E-9749-47C5-8BA8-0BDF32E8C2DB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {26EC0917-D0F6-4485-837A-9D644FF8F892} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0B9D0484-EAF4-4336-947E-01EE8BE7FCD8} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2287906516-366990468-377022076-1003 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-15] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {F8F65027-3387-4189-BEBC-09AD65BAE6FB} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-09-15] (Mozilla Corporation -> Mozilla Foundation)
Task: {E3FBF04B-CC08-49BF-A9A8-6422BF6C61E2} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3598960 2026-07-02] (NVIDIA Corporation -> NVIDIA Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{61898aea-927b-4d01-86d9-80f8fc2267b7}: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: gmivswa4.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\aj5uxgbm.default [2026-04-24]
FF ProfilePath: C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release [2026-09-18]
FF DownloadDir: D:\stažené soubory
FF Homepage: Mozilla\Firefox\Profiles\gmivswa4.default-release -> hxxps://www.seznam.cz/
FF Notifications: Mozilla\Firefox\Profiles\gmivswa4.default-release -> hxxps://www.facebook.com; hxxps://www.youtube.com
FF Extension: (Ghostery AdBlocker for Privacy) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\firefox@ghostery.com.xpi [2026-09-16]
FF Extension: (Awesome Screenshot: Screen capture, Annotate) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2025-11-25]
FF Extension: (uBlock Origin) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\uBlock0@raymondhill.net.xpi [2026-09-17]
FF Extension: (TWP - Translate Web Pages) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\{036a55b4-5e72-4d05-a06c-cba2dfcc134a}.xpi [2026-08-17]
FF Extension: (Photon Colors) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\{2c6c94f3-c656-41e9-aa4b-1edba5be9c21}.xpi [2024-02-25]
FF Extension: (Search on Google Lens) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\{56b8308e-566b-4dc0-9957-f6341ceb8552}.xpi [2025-12-12]
FF Extension: (DownThemAll!) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2026-06-16]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2026-06-17] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2026-06-17] (Adobe Inc. -> Adobe Systems)
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\robin\AppData\Local\Microsoft\Edge\User Data\Default [2026-09-18]
Edge Extension: (Dokumenty Google offline) - C:\Users\robin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-20]
Edge Extension: (Edge relevant text changes) - C:\Users\robin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-11-01]
Edge Profile: C:\Users\robin\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2026-04-21]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\robin\AppData\Local\Google\Chrome\User Data\Default [2026-08-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-04-12]
CHR Extension: (Kagane Downloader) - C:\chrome-kagane\dist [2026-07-19] [UpdateUrl:0] <==== ATTENTION
Brave:
=======
BRA DefaultProfile: Profile 1
BRA Profile: C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Profile 1 [2026-09-14]
BRA Profile: C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\System Profile [2026-04-23]
BRA Extension: (Brave Ad Block Updater (Brave First Party Adblock Filters (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2026-09-14]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2026-09-14]
BRA Extension: (Brave NTP background images) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Mobile app promo blocker (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Cookie notice blocker (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2026-09-14]
BRA Extension: (Query Filter) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cemdlagocoimleflkfkjoihojfainiho [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Allow X/Twitter Embeds (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\dkpggglmbjhgjhachikgmohmecomjndo [2026-09-14]
BRA Extension: (Brave NTP sponsored images) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2026-09-14]
BRA Extension: (Brave WebMCP Tool Scripts) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\eingdhelnaolbpcdkgddekhifcjfkalf [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2026-09-14]
BRA Extension: (Brave Ads Resources) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iejekkikpddbbockoldagmfcdbffomfc [2026-04-23]
BRA Extension: (Brave Ad Block Updater (Brave Default Adblock Filters (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Allow Facebook Embeds (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\jmfhneobcdckobmonkfjkbknnjjnegoh [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Brave Default Privacy Filters (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2026-09-14]
BRA Extension: (Brave User Agent) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Czech and Slovak website ad blocker (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\oegebjahecghlckbhkmojgnpcgdeajdi [2026-09-14]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [948704 2026-06-17] (Adobe Inc. -> Adobe Inc.)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-23] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\153.1.95.102\elevation_service.exe [5113424 2026-09-16] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-23] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe [2307776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a3944b54ff18b284\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-08-22] (NVIDIA Corporation -> NVIDIA Corporation)
R2 OptionsPlusUpdaterService; C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe [22855832 2026-09-02] (Logitech Inc -> Logitech, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe [5311776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe [291360 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 GigabyteUpdateService; C:\WINDOWS\system32\GigabyteUpdateService.exe [878840 2026-09-16] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrmgr.sys [55456 2024-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriverV27; \??\C:\Program Files\AMD\RyzenMaster\bin\AMDRyzenMasterDriver.sys [61248 2024-10-01] (Advanced Micro Devices -> )
R3 amduw23g; C:\WINDOWS\System32\DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\amdkmdag.sys [106144848 2024-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [573440 2025-01-17] (Microsoft Corporation) [File not signed]
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [83008 2026-09-03] (Microsoft Windows -> Microsoft Corporation)
S3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [32080 2024-06-25] (Logitech Inc -> Logitech)
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_92b2eef9fcc25565\rt68cx21x64.sys [779752 2023-12-18] (Realtek Semiconductor Corp. -> Realtek)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51264 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-09-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [664592 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [137240 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-09-18 19:18 - 2026-09-18 19:18 - 000022109 _____ C:\Users\robin\Desktop\FRST.txt
2026-09-18 19:17 - 2026-09-18 19:18 - 000000000 ____D C:\FRST
2026-09-18 19:12 - 2026-09-18 19:12 - 002455552 _____ (Farbar) C:\Users\robin\Desktop\FRST64.exe
2026-09-16 18:12 - 2026-09-16 18:12 - 000711764 _____ C:\WINDOWS\system32\perfh005.dat
2026-09-16 18:12 - 2026-09-16 18:12 - 000152978 _____ C:\WINDOWS\system32\perfc005.dat
2026-09-15 15:39 - 2026-09-16 18:05 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-09-14 16:08 - 2026-09-18 18:06 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-09-09 16:13 - 2026-09-09 16:13 - 000004646 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-09-09 16:13 - 2026-09-09 16:13 - 000004646 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-09-09 16:13 - 2026-09-09 16:13 - 000004646 _____ C:\WINDOWS\system32\ResPriImageList
2026-09-09 16:13 - 2026-09-09 16:13 - 000004646 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-09-09 16:13 - 2026-09-09 16:13 - 000004555 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-09-09 16:13 - 2026-09-09 16:13 - 000004555 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-09-09 16:12 - 2026-09-09 16:12 - 000039215 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-09-09 16:12 - 2026-09-09 16:12 - 000039215 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-09-09 16:12 - 2026-09-09 16:12 - 000014689 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-09-03 16:37 - 2026-09-03 16:37 - 000000859 _____ C:\Users\Public\Desktop\Logi Options+.lnk
2026-09-03 16:37 - 2026-09-03 16:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2026-09-03 16:37 - 2026-09-03 16:37 - 000000000 ____D C:\Program Files\LogiOptionsPlus
2026-08-30 18:59 - 2026-08-30 18:59 - 000003584 _____ C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2026-08-26 15:44 - 2026-08-22 15:08 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-08-26 15:44 - 2026-08-22 15:08 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-08-26 15:44 - 2026-08-22 15:08 - 002626600 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-08-26 15:44 - 2026-08-22 15:08 - 002626600 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-08-26 15:44 - 2026-08-22 15:08 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 001702120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-08-26 15:44 - 2026-08-22 15:04 - 001594600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 001499368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 001240808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 000685800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 000513768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 028185320 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-08-26 15:44 - 2026-08-22 15:03 - 002343144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 001734888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 001077992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 000828136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 000470760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-08-26 15:44 - 2026-08-22 15:02 - 032227048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 021026024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 006052584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 005926120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 004790504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-08-26 15:44 - 2026-08-22 15:02 - 000574032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 000442640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-08-26 15:44 - 2026-08-20 22:56 - 000176631 _____ C:\WINDOWS\system32\nvinfo.pb
2026-08-26 15:44 - 2026-08-20 22:56 - 000134376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2026-08-20 16:04 - 2026-09-16 16:00 - 000002100 _____ C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-08-20 16:04 - 2026-09-07 15:37 - 000002584 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-08-19 18:55 - 2026-09-11 01:51 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-09-18 19:17 - 2024-02-25 09:20 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-09-18 18:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-09-18 18:28 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-18 15:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-09-18 15:38 - 2024-02-09 18:30 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-09-18 15:21 - 2025-01-18 01:21 - 000003638 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-09-18 15:21 - 2025-01-18 01:21 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-09-18 15:21 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-09-18 15:20 - 2026-03-18 01:27 - 000000000 ____D C:\Users\robin\AppData\Local\LogiOptionsPlus
2026-09-18 01:30 - 2024-02-22 11:05 - 000000000 ____D C:\ProgramData\NVIDIA
2026-09-17 19:53 - 2025-01-18 01:19 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-09-17 19:34 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-09-16 23:55 - 2025-01-17 17:25 - 000000000 ____D C:\Users\robin
2026-09-16 21:34 - 2026-04-23 18:28 - 000002331 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2026-09-16 21:34 - 2026-04-23 18:28 - 000002290 _____ C:\Users\Public\Desktop\Brave.lnk
2026-09-16 19:00 - 2024-02-25 08:53 - 000000000 ____D C:\Users\robin\AppData\Local\D3DSCache
2026-09-16 18:12 - 2025-01-18 09:24 - 001692332 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-09-16 18:10 - 2026-03-18 01:28 - 000000000 ____D C:\Users\robin\AppData\Roaming\logioptionsplus
2026-09-16 18:05 - 2025-01-18 01:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-09-16 18:05 - 2025-01-18 01:20 - 000005110 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-09-16 18:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-09-16 18:05 - 2024-02-25 09:20 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-09-16 18:05 - 2024-02-09 18:33 - 000089336 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteDownloadAssistant.exe
2026-09-16 18:05 - 2024-02-09 18:30 - 000906528 _____ C:\WINDOWS\system32\wpbbin.exe
2026-09-16 18:05 - 2024-02-09 18:30 - 000878840 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteUpdateService.exe
2026-09-16 18:05 - 2024-02-09 18:30 - 000012288 ___SH C:\DumpStack.log.tmp
2026-09-16 16:17 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-09-16 16:00 - 2026-04-24 21:20 - 000001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-16 16:00 - 2026-04-12 06:46 - 000002214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-09-16 00:33 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-09-16 00:32 - 2025-01-18 01:19 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-09-16 00:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-09-15 15:55 - 2025-01-18 09:20 - 003381760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-09-15 15:39 - 2026-04-24 21:20 - 000402048 _____ (Mozilla Foundation) C:\Users\robin\Desktop\Firefox.exe
2026-09-12 12:06 - 2024-02-09 18:31 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-09-11 01:51 - 2025-01-18 01:19 - 000506312 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-09-11 01:50 - 2025-12-12 01:53 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-09-11 01:50 - 2025-07-21 07:42 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-09-11 01:50 - 2025-01-17 17:24 - 000000000 ____D C:\WINDOWS\InboxApps
2026-09-11 01:50 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-09-11 01:50 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\L2Schemas
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-09-11 01:50 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-09-10 15:57 - 2024-02-25 16:24 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-09-10 15:56 - 2024-02-25 16:24 - 230964456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-09-07 15:55 - 2026-05-02 19:53 - 000010640 _____ C:\Users\robin\Desktop\edit.xlsx
2026-09-06 10:05 - 2024-11-14 17:01 - 000000000 ___HD C:\adobeTemp
2026-09-06 10:05 - 2024-02-28 20:27 - 000000000 ____D C:\Program Files\Common Files\Adobe
2026-09-06 10:04 - 2024-02-28 20:27 - 000000000 ____D C:\Program Files\Adobe
2026-09-06 10:04 - 2024-02-25 08:52 - 000000000 ____D C:\Users\robin\AppData\Local\Packages
2026-09-06 10:04 - 2024-02-09 18:32 - 000000000 ____D C:\ProgramData\Packages
2026-09-03 20:41 - 2024-02-25 15:24 - 000001062 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-09-03 16:37 - 2024-06-25 17:17 - 000000000 ____D C:\Program Files\Logi
2026-09-02 20:30 - 2025-05-21 21:22 - 000000985 _____ C:\Users\Public\Desktop\PotPlayer 64 bit.lnk
2026-08-27 12:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\appcompat
2026-08-26 15:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2026-08-26 15:46 - 2024-02-25 09:15 - 000000000 ____D C:\Users\robin\AppData\Local\NVIDIA
2026-08-26 15:46 - 2024-02-22 11:05 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2026-08-26 15:45 - 2024-02-25 08:52 - 000000000 ____D C:\Users\robin\AppData\LocalLow\NVIDIA
2026-08-26 15:43 - 2024-02-25 08:53 - 000000000 ____D C:\Users\robin\AppData\Local\NVIDIA Corporation
2026-08-21 01:01 - 2024-02-25 08:53 - 000000000 ____D C:\Users\robin\AppData\Local\CrashDumps
2026-08-19 19:29 - 2024-02-29 18:00 - 000000000 ____D C:\Users\robin\AppData\Roaming\XnConvert
==================== Files in the root of some directories ========
2026-08-30 18:59 - 2026-08-30 18:59 - 000003584 _____ () C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-09-2026
Ran by robin (18-09-2026 19:19:02)
Running from C:\Users\robin\Desktop
Microsoft Windows 11 Home Version 25H2 26200.9457 (X64) (2025-01-18 07:19:27)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2287906516-366990468-377022076-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-2287906516-366990468-377022076-503 - Limited - Disabled)
Guest (S-1-5-21-2287906516-366990468-377022076-501 - Limited - Disabled)
Rob (S-1-5-21-2287906516-366990468-377022076-1010 - Limited - Enabled) => C:\Users\Rob
robin (DisplayName: R**** G) (S-1-5-21-2287906516-366990468-377022076-1003 - Administrators - Enabled) [MS Account] => C:\Users\robin
WDAGUtilityAccount (S-1-5-21-2287906516-366990468-377022076-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 26.00 (x64) (HKLM\...\7-Zip) (Version: 26.00 - Igor Pavlov)
Adobe Bridge 2026 (HKLM-x32\...\KBRG_16_0_6) (Version: 16.0.6 - Adobe Inc.)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 6.10.0.252.3 - Adobe Inc.)
Adobe Photoshop 2026 (HKLM-x32\...\PHSP_27_8) (Version: 27.8.0.13 - Adobe Inc.)
AMD Ryzen Master (HKLM\...\{02247819-03CD-414E-AC8D-FD518BFBA445}) (Version: 2.14.1.3286 - Advanced Micro Devices, Inc.) Hidden
AMD Ryzen Master (HKLM\...\AMD Ryzen Master) (Version: 2.14.1.3286 - Advanced Micro Devices, Inc.)
Ant Renamer (HKLM-x32\...\Ant Renamer 2_is1) (Version: 2.12.0 - Ant Software)
Baldurs Gate 3 MULTi13 - ElAmigos version 5849914 (HKLM-x32\...\{11F1C23F-D931-4A8F-8E21-8119485681A9}_is1) (Version: 5849914 - Larian Studios)
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 153.1.95.102 - Autoři prohlížeče Brave)
CPUID CPU-Z 2.09 (HKLM\...\CPUID CPU-Z_is1) (Version: 2.09 - CPUID, Inc.)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 153.0.8010.48 - Google LLC)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0.1 - AppWork GmbH)
Logi Options+ (HKLM\...\{850cdc16-85df-4052-b06e-4e3e9e83c5c6}) (Version: 2.7.961922 - Logitech)
Logi Plugin Service (HKLM\...\{8AFB30E7-8172-472A-BE7A-B2367DED2FD5}) (Version: 6.4.1.3246 - Logitech)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 153.0.4234.32 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 153.0.4234.32 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Czech) 2007 (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Excel MUI (Czech) 2007 (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Czech) 2007 (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Czech) 2007 (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2007 (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (HKLM-x32\...\{90120000-002C-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Czech) 2007 (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Czech) 2007 (HKLM\...\{90120000-002A-0405-1000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2007 (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-2287906516-366990468-377022076-1010\...\OneDriveSetup.exe) (Version: 24.166.0818.0003 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x64 8.0.50727.4053 False (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.50727.42 False (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.51011 False (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.56336 False (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.57102 False (HKLM\...\{f0cbd694-71ce-4391-9690-5da93b2f0445}) (Version: 8.0.57102 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.58298 False (HKLM\...\{f45b48a7-f616-4211-b927-17cab6a96613}) (Version: 8.0.58298 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.59192 False (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.61000 (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.50727.4053 False (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.50727.42 False (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.51011 False (HKLM-x32\...\{a0fe116e-9a8a-466f-aee0-625cb7c207e3}) (Version: 8.0.51011 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.56336 False (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.57103 False (HKLM-x32\...\{d8fea624-4f2c-432d-9a54-6eee9cd1a77e}) (Version: 8.0.57103 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.58299 False (HKLM-x32\...\{052bac4a-6f79-46d4-a024-1ce1b4f73cd4}) (Version: 8.0.58299 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.59193 False (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 False (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.0 False (HKLM\...\{D04659D1-EB2D-3DE5-A833-837A623CCCF7}) (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.218 False (HKLM\...\{BBBE35B2-9349-3C48-BD3D-F574B17C7924}) (Version: 9.0.21022.218 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30411 False (HKLM\...\{D93AC9C8-B6CF-391E-BD2F-48AF4727476C}) (Version: 9.0.30411 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 False (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.0 False (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 False (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4048 False (HKLM\...\{91415F19-4C22-3609-A105-92ED3522D83C}) (Version: 9.0.30729.4048 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 False (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148.0 False (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.5570 False (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 False (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.0 False (HKLM-x32\...\{DCB46B42-723F-350E-B18A-449BC6C21636}) (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 False (HKLM-x32\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 False (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 False (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.0 False (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 False (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 False (HKLM-x32\...\{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}) (Version: 9.0.30729.4048 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 False (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148.0 False (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.5570 False (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.30319 False (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.30319 False (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{a2199617-3609-410f-a8e8-e8806c73545b}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 False Eng (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 False Eng (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 False (HKLM\...\{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 False (HKLM\...\{3C28BFD4-90C7-3138-87EF-418DC16E9598}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 False (HKLM\...\{764384C5-BCA9-307C-9AAC-FD443662686A}) (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 False (HKLM\...\{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 False (HKLM\...\{5AF4E09F-5C9B-3AAF-B731-544D3DC821DD}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 False (HKLM\...\{2EDC2FA3-1F34-34E5-9085-588C9EFD1CC6}) (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 False (HKLM-x32\...\{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 False (HKLM-x32\...\{6C772996-BFF3-3C8C-860B-B3D48FF05D65}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 False (HKLM-x32\...\{3D6AD258-61EA-35F5-812C-B7A02152996E}) (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 False (HKLM-x32\...\{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 False (HKLM-x32\...\{E824E81C-80A4-3DFF-B5F9-4842A9FF5F7F}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 False (HKLM-x32\...\{E7D4E834-93EB-351F-B8FB-82CDAE623003}) (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 False (HKLM-x32\...\{51adbf11-493f-431c-a862-967a0fae2944}) (Version: 12.0.21005.1 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 False Eng (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 False (HKLM-x32\...\{1a63c099-febd-4eaf-83ad-a82ea4fdac49}) (Version: 12.0.30501.0 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 False Eng (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{49e969a1-2990-464d-92b5-25f6f34573c6}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 False Eng (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 False (HKLM-x32\...\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}) (Version: 12.0.21005.1 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 False Eng (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 False (HKLM-x32\...\{b55f7208-e02b-4828-ac78-59c73ddf5bc7}) (Version: 12.0.30501.0 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 False Eng (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40649 False (HKLM-x32\...\{78142960-066b-4581-b984-0bdcf560c4be}) (Version: 12.0.40649.5 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40649 False Eng (HKLM-x32\...\{35b83883-40fa-423c-ae73-2aff7e1ea820}) (Version: 12.0.40649.5 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 False (HKLM-x32\...\{10dc8dbf-d3d7-4e23-be07-120fe5c66b78}) (Version: 12.0.40660.0 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 False Eng (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 False Eng (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 False (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40649 False (HKLM\...\{20C1086D-C843-36B1-B678-990089D1BD44}) (Version: 12.0.40649 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40660 False (HKLM\...\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 False (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40649 False (HKLM\...\{ABB19BB4-838D-3082-BDA4-87C6604181A2}) (Version: 12.0.40649 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40660 False (HKLM\...\{CB0836EC-B072-368D-82B2-D3470BF95707}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 False (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40649 False (HKLM-x32\...\{A8589745-51BC-3963-B4E9-201CF8693538}) (Version: 12.0.40649 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40660 False (HKLM-x32\...\{7DAD0258-515C-3DD4-8964-BD714199E0F7}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 False (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40649 False (HKLM-x32\...\{DEA7F8E3-B7B9-3C3C-945B-7F8CE9041748}) (Version: 12.0.40649 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40660 False (HKLM-x32\...\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33810 (HKLM-x32\...\{5af95fd8-a22e-458f-acee-c61bd787178e}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.40.33810 (HKLM-x32\...\{47109d57-d746-4f8b-9618-ed6a17cc922b}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{C931A1C6-A7BF-3737-874A-818881A37E1B}) (Version: 10.0.60915 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.60910 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 156.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 150.0 - Mozilla)
Mozilla Thunderbird (x64 cs) (HKLM\...\Mozilla Thunderbird 154.0 (x64 cs)) (Version: 154.0 - Mozilla)
NVIDIA App 11.0.8.299 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.8.299 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.8.12612.38276700 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.8.12612.38276700 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.4.6.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.6.3 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 616.56 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 616.56 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.26.0703 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.26.0703 - NVIDIA Corporation)
Paradox Launcher v2 (HKLM\...\{BCBAAF27-1C19-48A5-8DEF-258E46D93FE0}) (Version: 2.4.0 - Paradox Interactive)
PhotoImpact X3 (HKLM-x32\...\InstallShield_{15803703-25FA-4C01-A062-3F4A59937E87}) (Version: 13.0 - Corel)
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
Pillars.Of.Eternity.II.Deadfire.OE.REPACK-KaOs (HKLM\...\Pillars.Of.Eternity.II.Deadfire.OE.REPACK-KaOs_is1) (Version: - ..::[KaOs]::..)
PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 26.08.19.0 - Kakao Corp.)
Python 3.14.4 (64-bit) (HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\{21bd423a-1cbb-41b4-b464-5e7c059ec5a4}) (Version: 3.14.4150.0 - Python Software Foundation)
Python 3.14.4 Add to Path (64-bit) (HKLM\...\{8D190621-B91A-4664-8506-C21DEEF6690A}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Core Interpreter (64-bit) (HKLM\...\{C72ADAF1-CF64-4C34-9485-2EE63BF0EA8B}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Development Libraries (64-bit) (HKLM\...\{7C0B1F9F-EF7E-4CCF-BF13-84B2B9EC0272}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Documentation (64-bit) (HKLM\...\{A69DA17D-3DBA-4A57-B9AF-7ED9696E3EF6}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Executables (64-bit) (HKLM\...\{2269A76D-370C-462C-B5AB-56758AABB756}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 pip Bootstrap (64-bit) (HKLM\...\{E841439F-9F10-4B58-BA75-7B6A71565A28}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Standard Library (64-bit) (HKLM\...\{6C0E5B22-995D-4D14-94D2-9F556CF4812E}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Tcl/Tk Support (64-bit) (HKLM\...\{19AB4ED7-05CC-4497-9935-AF829093B5CE}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Test Suite (64-bit) (HKLM\...\{E67B3149-FEEE-4623-A24B-9C096A09D789}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{CF2C2B82-E540-4ACE-B007-DF0C216EFC40}) (Version: 3.14.4150.0 - Python Software Foundation)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9618.1 - Realtek Semiconductor Corp.)
Shareaza 2.7.10.2 (HKLM\...\Shareaza_is1) (Version: 2.7.10.2 - Shareaza Development Team)
Stellaris (HKLM-x32\...\1508702879_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Ancient Relics (HKLM-x32\...\2106739867_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Anniversary Portraits (HKLM-x32\...\1619776270_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Apocalypse (HKLM-x32\...\1988097366_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Aquatics Species Pack (HKLM-x32\...\1253915653_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Arachnoid Portrait Pack (HKLM-x32\...\1897107160_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Astral Planes (HKLM-x32\...\1558204482_is1) (Version: 4.4.6 - GOG.com)
Stellaris: BioGenesis (HKLM-x32\...\1161571108_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Complete Soundtrack (HKLM-x32\...\1892453534_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Cosmic Storms (HKLM-x32\...\1554166669_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Distant Stars Story Pack (HKLM-x32\...\1209094315_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Federations (HKLM-x32\...\1790030450_is1) (Version: 4.4.6 - GOG.com)
Stellaris: First Contact Story Pack (HKLM-x32\...\1210745577_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Galactic Paragons (HKLM-x32\...\2048809075_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Grand Archive (HKLM-x32\...\1197675719_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Horizon Signal (HKLM-x32\...\1490429179_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Humanoids Species Pack (HKLM-x32\...\2062279897_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Infernals Species Pack (HKLM-x32\...\1839971018_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Infinite Frontiers eBook (HKLM-x32\...\1439311238_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Leviathans Story Pack (HKLM-x32\...\1122806862_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Lithoids Species Pack (HKLM-x32\...\1420212493_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Megacorp (HKLM-x32\...\1316465607_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Necroids Species Pack (HKLM-x32\...\2112845659_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Nemesis (HKLM-x32\...\1488827509_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Nomads (HKLM-x32\...\2071004157_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Overlord (HKLM-x32\...\1863527056_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Plantoids Species Pack (HKLM-x32\...\1999794856_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Shadows of the Shroud (HKLM-x32\...\1404109174_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Synthetic Dawn Story Pack (HKLM-x32\...\1292954230_is1) (Version: 4.4.6 - GOG.com)
Stellaris: The Machine Age (HKLM-x32\...\1775099226_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Toxoids Species Pack (HKLM-x32\...\1414149508_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Utopia (HKLM-x32\...\1978231244_is1) (Version: 4.4.6 - GOG.com)
SumatraPDF (HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\SumatraPDF) (Version: 3.5.2 - Krzysztof Kowalczyk)
The Witcher 3: Wild Hunt - Game of the Year Edition (HKLM-x32\...\1495134320_is1) (Version: 4.04a - GOG.com)
UE4 Prerequisites (x64) (HKLM\...\{36EAD5CF-44EF-4FCF-8BE1-D96C4835D7A4}) (Version: 1.0.11.0 - Epic Games, Inc.) Hidden
UE4 Prerequisites (x64) (HKLM-x32\...\{2890ae6b-90e9-448d-b3e6-97e43c21e2fd}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden
UXP WebView Support (HKLM-x32\...\UXPW_1_6_1) (Version: 1.6.1 - Adobe Inc.)
WinRAR 7.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.11.0 - win.rar GmbH)
XnConvert (x64) (HKLM\...\XnConvert (x64)_is1) (Version: 1.105.0.0 - Pierre-e Gougelet)
XnView 2.51.6 (HKLM-x32\...\XnView_is1) (Version: 2.51.6 - Gougelet Pierre-e)
Packages:
=========
Adobe Native Client -> C:\Program Files\Common Files\Adobe\Adobe OS Extension [2026-09-06] ()
Microsoft.D3DMappingLayers -> C:\Program Files\WindowsApps\Microsoft.D3DMappingLayers_1.2608.3.0_x64__8wekyb3d8bbwe [2026-09-03] (Microsoft Corporation)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-11] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.48.315.0_x64__dt26b99r8h8gj [2025-07-20] (Realtek Semiconductor Corp)
WinRAR -> C:\Program Files\WinRAR [2025-07-21] (win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{04CC76C7-1ED7-4CAE-9762-B8664ED008ED}\localserver32 -> C:\Program Files\Shareaza\MediaImageServices.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{0EEA2A0F-AD1F-4555-9827-0DD9335611A4}\localserver32 -> C:\Program Files\Shareaza\WindowsThumbnail.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{0F74BA53-C842-4CB5-B388-DD5663F62479}\InprocServer32 -> C:\Program Files\Shareaza\Preview.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{18D11ED9-1264-48A1-9E14-20F2C633242B}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{21CBAAF2-E3D4-455A-B4E6-223467B53D1A}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{2EE9D739-7726-41cf-8F18-4B1B8763BC63}\InprocServer32 -> C:\Program Files\Shareaza\ImageViewer.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{2F74AA28-2498-4805-911A-04C39858D529}\InprocServer32 -> C:\Program Files\Shareaza\ZIPBuilder.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{30FC662A-D72A-4F79-B63A-ACD4FBFE68A3}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{34791E02-51DC-4CF4-9E34-018166D91D0E}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{3DC28AA6-A597-4E03-96DF-ADA19155B0BE}\localserver32 -> C:\Program Files\Shareaza\MediaPlayer.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{570C197C-FE9C-4D1F-B6E0-EFA44D36399F}\localserver32 -> C:\Program Files\Shareaza\MediaLibraryBuilder.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{61700EEC-D5D3-4793-BD1F-514896D67F44}\InprocServer32 -> C:\Program Files\Shareaza\RatDVDReader.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{6C9E61BE-E58F-4AE1-A304-6FF1D183804C}\InprocServer32 -> C:\Program Files\Shareaza\GFLLibraryBuilder.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{76F13243-9F62-4241-AC07-3B359BBE4EC5}\InprocServer32 -> C:\Program Files\Shareaza\VirusTotal.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{76F13243-9F62-4241-AC07-3B359BBE4EC6}\InprocServer32 -> C:\Program Files\Shareaza\ShortURL.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{A4F1E383-B493-4580-8DB6-5CC89CBAAC53}\InprocServer32 -> C:\Program Files\Shareaza\SkinScanSKS.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{B69F80CD-FB15-45E8-B359-92A41CC571A7}\InprocServer32 -> C:\Program Files\Shareaza\7ZipBuilder.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{B978F591-5137-4612-873A-DC2081BAD6CD}\InprocServer32 -> C:\Program Files\Shareaza\SWFPlugin.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{BEA218D2-6950-497B-9434-61683EC065FE}\InprocServer32 -> C:\Users\robin\AppData\Local\Programs\Python\Launcher\pyshellext.amd64.dll (Python Software Foundation -> Python Software Foundation)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{D73ABD28-3A2A-4E36-AD6F-2AA8F011FBE3}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{E1A67AE5-7041-4AE1-94F7-DE03EF759E27}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{E9B2EF9B-4A0C-451E-801F-257861B87FAD}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{E9F51B1E-DB0F-4EEE-9B36-46151994C715}\InprocServer32 -> C:\Program Files\Shareaza\DocumentReader.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{F801DAD7-F08D-48EF-B0DF-6B120377E835}\InprocServer32 -> C:\Program Files\Shareaza\RARBuilder.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{FC4D8F69-0B18-49BB-8AB7-87EB77AA1A9D}\InprocServer32 -> C:\Program Files\Shareaza\SWFPlugin.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{FF5FCD00-2C20-49D8-84F6-888D2E2C95DA}\InprocServer32 -> C:\Program Files\Shareaza\GFLImageServices.dll (Shareaza Development Team) [File not signed]
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-02-12] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-02-12] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-07-02] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a3944b54ff18b284\nvshext.dll [2026-08-22] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-02-12] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2026-08-10 13:47 - 2026-08-10 13:47 - 001368064 _____ () [File not signed] C:\Program Files\Logi\LogiPluginService\win\LogiEventTracingNativeLibrary.dll
2026-08-10 13:47 - 2026-08-10 13:47 - 000178688 _____ () [File not signed] C:\Program Files\Logi\LogiPluginService\win\LogiLocalConnectionNativeLibrary.dll
2024-11-23 13:26 - 2026-07-09 22:29 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll
2026-04-05 11:04 - 2026-02-12 12:00 - 000101888 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\robin\Downloads:Shareaza.GUID [16]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2022-05-07 07:24 - 2026-04-16 19:30 - 000000735 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.0.1
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKCU\Environment\\Path -> C:\Users\robin\AppData\Local\Programs\Python\Python314\Scripts\;C:\Users\robin\AppData\Local\Programs\Python\Python314\;C:\Users\robin\AppData\Local\Programs\Python\Launcher\;%USERPROFILE%\AppData\Local\Microsoft\WindowsApps
HKU\S-1-5-21-2287906516-366990468-377022076-1003\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\themea\img20.jpg
HKU\S-1-5-21-2287906516-366990468-377022076-1010\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\themea\img20.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run32: => "CzcScript"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [UDP Query User{6219F238-14E3-4D2F-AFAA-79AB74138C7D}C:\hry\baldurs gate 3\bin\bg3.exe] => (Block) C:\hry\baldurs gate 3\bin\bg3.exe (Larian Studios Games Ltd. -> )
FirewallRules: [TCP Query User{222B68AD-991F-4AE3-B878-25702F8FBDB3}C:\hry\baldurs gate 3\bin\bg3.exe] => (Block) C:\hry\baldurs gate 3\bin\bg3.exe (Larian Studios Games Ltd. -> )
FirewallRules: [UDP Query User{3C5D80BD-74F9-48B9-BDB6-A82FE900CF36}C:\hry\phoenixpoint\phoenixpointwin64.exe] => (Block) C:\hry\phoenixpoint\phoenixpointwin64.exe (Snapshot Games Inc. -> )
FirewallRules: [TCP Query User{0C9B7B7C-D6AE-4F3F-AD96-76DACBB16765}C:\hry\phoenixpoint\phoenixpointwin64.exe] => (Block) C:\hry\phoenixpoint\phoenixpointwin64.exe (Snapshot Games Inc. -> )
FirewallRules: [{324404DA-ECFE-4594-9DB6-6180391BCAA3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.21.500.0_x64__8wekyb3d8bbwe\Minecraft.Windows.exe (Microsoft Corporation -> )
FirewallRules: [{0CDD3622-18BD-439F-941A-0FBB1580B082}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.21.500.0_x64__8wekyb3d8bbwe\Minecraft.Windows.exe (Microsoft Corporation -> )
FirewallRules: [{E8EE1609-9685-4904-8BB9-2345FE912E66}] => (Allow) C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
FirewallRules: [{5DE50F62-F644-40EE-9277-9E2C2174124F}] => (Allow) C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
FirewallRules: [{E37639F5-5A21-4603-B005-170EBFEB9D95}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{D8F2BBB1-B67C-4E59-BC39-406171C7F0A6}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [UDP Query User{766746DF-8B3A-4FB1-97D2-870774962567}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [TCP Query User{772A916A-5A09-4567-B999-05520077AF18}C:\hry\terra.invicta.build.23709269\terrainvicta.exe] => (Block) C:\hry\terra.invicta.build.23709269\terrainvicta.exe () [File not signed]
FirewallRules: [UDP Query User{751C3342-79AA-49DC-B6D9-F2B0EF0A1EAE}C:\hry\terra.invicta.build.23709269\terrainvicta.exe] => (Block) C:\hry\terra.invicta.build.23709269\terrainvicta.exe () [File not signed]
FirewallRules: [{A02FCDB2-75EF-453B-98ED-E036AE846361}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{4FA52B79-09FE-4B17-8E96-E22D1C9C9C0C}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{05D4B2FE-ACDC-40F5-8D86-31454921BAC6}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
FirewallRules: [{E4257B56-B3A6-40ED-A6AE-6C64B6A476DE}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
FirewallRules: [{8B2F2355-6DB3-4752-8340-B55DF0B3ABD0}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{B0C88D95-760E-4D3B-A34B-A4A7066570BB}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{180CB9BC-4A83-44AC-8FDB-78E3951B3981}] => (Allow) C:\Program Files\Logi\LogiPluginService\LogiPluginService.exe (Logitech Inc -> Logitech)
FirewallRules: [{00D9F388-FBF9-472A-88B6-1439A1CA01C0}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{1A6ECF60-4CC5-4956-ABDE-02A1CD084E17}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
==================== Restore Points =========================
12-09-2026 21:21:24 Windows Update
16-09-2026 00:32:17 Windows Update
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (09/17/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
Error: (09/16/2026 09:28:40 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
Error: (09/16/2026 04:00:29 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5
Error: (09/16/2026 12:34:05 AM) (Source: CertEnroll) (EventID: 57) (User: NT AUTHORITY)
Description: Zprostředkovatel Microsoft Passport Key Storage Provider nebyl načten, protože se nezdařila inicializace.
Error: (09/15/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
Error: (09/14/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
Error: (09/13/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
Error: (09/12/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
System errors:
=============
Error: (09/18/2026 06:23:56 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (09/18/2026 06:23:53 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (09/17/2026 08:17:53 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (09/17/2026 08:17:51 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (09/17/2026 07:29:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.
Error: (09/16/2026 06:05:38 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (18:00:06, 16.09.2026) bylo neočekávané.
Error: (09/16/2026 12:32:15 AM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} se v daném časovém limitu neregistroval u služby DCOM.
Error: (09/14/2026 09:26:17 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Windows Defender:
================
TimeCreated : 16.09.2026 18:01:22
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
454AD351-5DDA-4B54-BD48-61243CBA9ACC}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή
TimeCreated : 13.09.2026 18:16:06
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
A03016A8-2408-414C-B053-954924D462AF}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъЅćђęđμĺēδ ѕčªη ωáŝ şĸΐррėď ьê¢āúşє ţнё ľãŝ
τ šūçсëśşƒüℓ şсāņ ωąş щĩţнïņ ŧђё ĺǻŝť 7 ðαỳş
TimeCreated : 12.09.2026 15:18:47
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
5C56AD42-7164-42E1-B8A4-E7D80303DB02}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή
TimeCreated : 12.09.2026 11:19:47
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
18B4B2FB-2A20-4471-8917-08B3B9944918}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή
TimeCreated : 12.09.2026 7:43:27
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
F3FE96C0-BAC5-400C-B3EF-74929B2C2488}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή
TimeCreated : 11.09.2026 20:49:58
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
4B8160C5-76CE-4024-8931-F32593C37B51}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή
TimeCreated : 10.09.2026 21:03:38
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
37B1B7F9-80ED-47A6-9E5C-95B130BC958E}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъЅćђęđμĺēδ ѕčªη ωáŝ şĸΐррėď ьê¢āúşє ţнё ľãŝ
τ šūçсëśşƒüℓ şсāņ ωąş щĩţнïņ ŧђё ĺǻŝť 7 ðαỳş
TimeCreated : 10.09.2026 0:26:47
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
A3F9677A-AB08-45BB-8DBB-60C6886CA947}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъЅćђęđμĺēδ ѕčªη ωáŝ şĸΐррėď ьê¢āúşє ţнё ľãŝ
τ šūçсëśşƒüℓ şсāņ ωąş щĩţнïņ ŧђё ĺǻŝť 7 ðαỳş
CodeIntegrity:
===============
Date: 2026-09-18 15:20:48
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\DefenderSessionHelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2026-09-15 15:38:21
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\UUS\amd64\WaaSMedicAgent.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends International, LLC. F22b 02/06/2024
Motherboard: Gigabyte Technology Co., Ltd. A620M GAMING X
Processor: AMD Ryzen 5 7600X 6-Core Processor
Percentage of memory in use: 21%
Total physical RAM: 31893.9 MB
Available physical RAM: 24969.96 MB
Total Virtual: 33941.9 MB
Available Virtual: 26852.38 MB
==================== Drives ================================
Disk 1 - Drive c: (Windows) (Fixed) (Total:952.29 GB GB) (Free:418.67 GB GB) (Model: ADATA SX8200PNP) NTFS
Disk 0 - Drive d: () (Fixed) (Total:976.56 GB GB) (Free:131.09 GB GB) (Model: Samsung SSD 870 QVO 4TB) NTFS
Disk 0 - Drive e: (filmy) (Fixed) (Total:2749.46 GB GB) (Free:318.42 GB GB) (Model: Samsung SSD 870 QVO 4TB) NTFS
Disk 1 - \\?\Volume{034c53f1-8244-48fd-a60e-518bf74a14ba}\ () (Fixed) (Total:0.88 GB) (Free:0.11 GB) NTFS
Disk 1 - \\?\Volume{90cba374-ae74-4937-8c1c-d913159142eb}\ (Recovery) (Fixed) (Total:0.59 GB) (Free:0.57 GB) NTFS
Disk 1 - \\?\Volume{7b948908-ac83-4b25-885c-bf73cd57240d}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32
==================== MBR & Partition Table ====================
============================================================
Disk: 0 (Size: 3726.02 GB) (Disk ID: 83EB098B)
Partitions:
===========
Partition Style : GPT
Partition Count : 2
Disk ID : {E9CADECD-9AD0-47FF-B2F1-16BECE55D803}
Usable Offset : 0.02 MB
Usable Length : 3726.02 GB
Max Partitions : 128
Partition 1
Type : Basic Data Partition
Size : 976.56 GB
Offset : 1 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {D77E7FD3-DA24-4614-B51E-2E866FB7D0C5}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Basic Data Partition
Size : 2749.46 GB
Offset : 1000001 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {0D9BAFE2-C3B7-4F52-8C40-99130ED3C9EA}
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
============================================================
Disk: 1 (Size: 953.87 GB) (Disk ID: 83EB09B9)
Partitions:
===========
Partition Style : GPT
Partition Count : 5
Disk ID : {2B783E0A-1E64-4765-BCBA-5B9955CD1E3B}
Usable Offset : 0.02 MB
Usable Length : 953.87 GB
Max Partitions : 128
Partition 1
Type : EFI System Partition
Size : 100 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {7B948908-AC83-4B25-885C-BF73CD57240D}
GPT Name : EFI system partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 101 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {A0088448-CBD3-45A6-A4B4-9D5A946011AC}
GPT Name : Microsoft reserved partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 952.29 GB
Offset : 117 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {120BE8A3-B893-46C7-B387-40967021EDA2}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 903 MB
Offset : 975258 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {034C53F1-8244-48FD-A60E-518BF74A14BA}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
Partition 5
Type : Windows Recovery
Size : 600 MB
Offset : 976162 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {90CBA374-AE74-4937-8C1C-D913159142EB}
GPT Name : Basic data partition
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
============================================================
==================== End of Addition.txt =======================
začal jsem mít záseky při přehrávání videí a některé stránky se načítají neúměrně dlouho
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-09-2026
Ran by robin (administrator) on PC (Gigabyte Technology Co., Ltd. A620M GAMING X) (18-09-2026 19:18:03)
Running from C:\Users\robin\Desktop\FRST64.exe
Loaded Profiles: robin
Platform: Microsoft Windows 11 Home Version 25H2 26200.9457 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files\Logi\LogiPluginService\LogiPluginService.exe ->) (Logitech Inc -> ) C:\Program Files\Logi\LogiPluginService\LogiPluginServiceExt.exe
(C:\Program Files\Logi\LogiPluginService\LogiPluginServiceExt.exe ->) (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe
(C:\Program Files\Logi\LogiPluginService\LogiPluginServiceExt.exe ->) (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech) C:\Program Files\Logi\LogiPluginService\LogiPluginService.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_appbroker.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe
(DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\atieclxx.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <8>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\153.0.4234.32\msedgewebview2.exe <5>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a3944b54ff18b284\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\atiesrxx.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a3944b54ff18b284\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.4019.0_x64__8wekyb3d8bbwe\EdgeGameAssist.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe [1886616 2023-12-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2535400 2026-06-17] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\Run: [MicrosoftEdgeAutoLaunch_939C7F4108421878674BE382227CD57D] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5417288 2026-09-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2287906516-366990468-377022076-1010\...\Run: [MicrosoftEdgeAutoLaunch_C29AEE9D78A5497880E4815AC2DDEBDB] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5417288 2026-09-10] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\153.0.8010.48\Installer\chrmstp.exe [8034968 2026-09-16] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\153.1.95.102\Installer\chrmstp.exe [6556240 2026-09-16] (Brave Software, Inc. -> Brave Software, Inc.)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {A5D58C2B-4A75-4964-B64D-F32A7EC098BE} - System32\Tasks\AMDAutoUpdate => C:\Program Files\AMD\AutoUpdate\AMDAutoUpdate.exe [671440 2024-07-24] (Advanced Micro Devices -> )
Task: {2C39F93D-F39C-44A3-A7EF-63FD1D413BE9} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{455EF7B8-31F4-4770-9639-ED5CF1DBD44A} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-23] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {2DD8547B-734B-483B-9FA0-E49DD826EA2D} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{B586457F-36C9-4E79-9271-993B4F509936} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-23] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {69D48454-F7C8-40BC-BC71-C1DD283AC1EB} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{322C6614-12AF-4D4E-8CF8-4138E5C7FABB} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {11C5E73A-A783-4664-999F-BB7DCF1C270F} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {75FD89B9-0B43-401B-96F3-5C32069199B7} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {828F69BF-5666-47AA-911C-34EB0BA57812} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B67426A1-9695-432D-9DCA-98879EC72AD1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7D6A7D3E-9749-47C5-8BA8-0BDF32E8C2DB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {26EC0917-D0F6-4485-837A-9D644FF8F892} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0B9D0484-EAF4-4336-947E-01EE8BE7FCD8} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2287906516-366990468-377022076-1003 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-15] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {F8F65027-3387-4189-BEBC-09AD65BAE6FB} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-09-15] (Mozilla Corporation -> Mozilla Foundation)
Task: {E3FBF04B-CC08-49BF-A9A8-6422BF6C61E2} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3598960 2026-07-02] (NVIDIA Corporation -> NVIDIA Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{61898aea-927b-4d01-86d9-80f8fc2267b7}: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: gmivswa4.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\aj5uxgbm.default [2026-04-24]
FF ProfilePath: C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release [2026-09-18]
FF DownloadDir: D:\stažené soubory
FF Homepage: Mozilla\Firefox\Profiles\gmivswa4.default-release -> hxxps://www.seznam.cz/
FF Notifications: Mozilla\Firefox\Profiles\gmivswa4.default-release -> hxxps://www.facebook.com; hxxps://www.youtube.com
FF Extension: (Ghostery AdBlocker for Privacy) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\firefox@ghostery.com.xpi [2026-09-16]
FF Extension: (Awesome Screenshot: Screen capture, Annotate) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2025-11-25]
FF Extension: (uBlock Origin) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\uBlock0@raymondhill.net.xpi [2026-09-17]
FF Extension: (TWP - Translate Web Pages) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\{036a55b4-5e72-4d05-a06c-cba2dfcc134a}.xpi [2026-08-17]
FF Extension: (Photon Colors) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\{2c6c94f3-c656-41e9-aa4b-1edba5be9c21}.xpi [2024-02-25]
FF Extension: (Search on Google Lens) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\{56b8308e-566b-4dc0-9957-f6341ceb8552}.xpi [2025-12-12]
FF Extension: (DownThemAll!) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2026-06-16]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2026-06-17] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2026-06-17] (Adobe Inc. -> Adobe Systems)
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\robin\AppData\Local\Microsoft\Edge\User Data\Default [2026-09-18]
Edge Extension: (Dokumenty Google offline) - C:\Users\robin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-20]
Edge Extension: (Edge relevant text changes) - C:\Users\robin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-11-01]
Edge Profile: C:\Users\robin\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2026-04-21]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\robin\AppData\Local\Google\Chrome\User Data\Default [2026-08-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-04-12]
CHR Extension: (Kagane Downloader) - C:\chrome-kagane\dist [2026-07-19] [UpdateUrl:0] <==== ATTENTION
Brave:
=======
BRA DefaultProfile: Profile 1
BRA Profile: C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Profile 1 [2026-09-14]
BRA Profile: C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\System Profile [2026-04-23]
BRA Extension: (Brave Ad Block Updater (Brave First Party Adblock Filters (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2026-09-14]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2026-09-14]
BRA Extension: (Brave NTP background images) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Mobile app promo blocker (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Cookie notice blocker (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2026-09-14]
BRA Extension: (Query Filter) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cemdlagocoimleflkfkjoihojfainiho [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Allow X/Twitter Embeds (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\dkpggglmbjhgjhachikgmohmecomjndo [2026-09-14]
BRA Extension: (Brave NTP sponsored images) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2026-09-14]
BRA Extension: (Brave WebMCP Tool Scripts) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\eingdhelnaolbpcdkgddekhifcjfkalf [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2026-09-14]
BRA Extension: (Brave Ads Resources) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iejekkikpddbbockoldagmfcdbffomfc [2026-04-23]
BRA Extension: (Brave Ad Block Updater (Brave Default Adblock Filters (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Allow Facebook Embeds (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\jmfhneobcdckobmonkfjkbknnjjnegoh [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Brave Default Privacy Filters (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2026-09-14]
BRA Extension: (Brave User Agent) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Czech and Slovak website ad blocker (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\oegebjahecghlckbhkmojgnpcgdeajdi [2026-09-14]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [948704 2026-06-17] (Adobe Inc. -> Adobe Inc.)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-23] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\153.1.95.102\elevation_service.exe [5113424 2026-09-16] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-23] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe [2307776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a3944b54ff18b284\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-08-22] (NVIDIA Corporation -> NVIDIA Corporation)
R2 OptionsPlusUpdaterService; C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe [22855832 2026-09-02] (Logitech Inc -> Logitech, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe [5311776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe [291360 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 GigabyteUpdateService; C:\WINDOWS\system32\GigabyteUpdateService.exe [878840 2026-09-16] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrmgr.sys [55456 2024-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriverV27; \??\C:\Program Files\AMD\RyzenMaster\bin\AMDRyzenMasterDriver.sys [61248 2024-10-01] (Advanced Micro Devices -> )
R3 amduw23g; C:\WINDOWS\System32\DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\amdkmdag.sys [106144848 2024-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [573440 2025-01-17] (Microsoft Corporation) [File not signed]
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [83008 2026-09-03] (Microsoft Windows -> Microsoft Corporation)
S3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [32080 2024-06-25] (Logitech Inc -> Logitech)
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_92b2eef9fcc25565\rt68cx21x64.sys [779752 2023-12-18] (Realtek Semiconductor Corp. -> Realtek)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51264 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-09-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [664592 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [137240 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-09-18 19:18 - 2026-09-18 19:18 - 000022109 _____ C:\Users\robin\Desktop\FRST.txt
2026-09-18 19:17 - 2026-09-18 19:18 - 000000000 ____D C:\FRST
2026-09-18 19:12 - 2026-09-18 19:12 - 002455552 _____ (Farbar) C:\Users\robin\Desktop\FRST64.exe
2026-09-16 18:12 - 2026-09-16 18:12 - 000711764 _____ C:\WINDOWS\system32\perfh005.dat
2026-09-16 18:12 - 2026-09-16 18:12 - 000152978 _____ C:\WINDOWS\system32\perfc005.dat
2026-09-15 15:39 - 2026-09-16 18:05 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-09-14 16:08 - 2026-09-18 18:06 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-09-09 16:13 - 2026-09-09 16:13 - 000004646 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-09-09 16:13 - 2026-09-09 16:13 - 000004646 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-09-09 16:13 - 2026-09-09 16:13 - 000004646 _____ C:\WINDOWS\system32\ResPriImageList
2026-09-09 16:13 - 2026-09-09 16:13 - 000004646 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-09-09 16:13 - 2026-09-09 16:13 - 000004555 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-09-09 16:13 - 2026-09-09 16:13 - 000004555 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-09-09 16:12 - 2026-09-09 16:12 - 000039215 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-09-09 16:12 - 2026-09-09 16:12 - 000039215 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-09-09 16:12 - 2026-09-09 16:12 - 000014689 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-09-03 16:37 - 2026-09-03 16:37 - 000000859 _____ C:\Users\Public\Desktop\Logi Options+.lnk
2026-09-03 16:37 - 2026-09-03 16:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2026-09-03 16:37 - 2026-09-03 16:37 - 000000000 ____D C:\Program Files\LogiOptionsPlus
2026-08-30 18:59 - 2026-08-30 18:59 - 000003584 _____ C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2026-08-26 15:44 - 2026-08-22 15:08 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-08-26 15:44 - 2026-08-22 15:08 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-08-26 15:44 - 2026-08-22 15:08 - 002626600 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-08-26 15:44 - 2026-08-22 15:08 - 002626600 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-08-26 15:44 - 2026-08-22 15:08 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 001702120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-08-26 15:44 - 2026-08-22 15:04 - 001594600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 001499368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 001240808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 000685800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 000513768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 028185320 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-08-26 15:44 - 2026-08-22 15:03 - 002343144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 001734888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 001077992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 000828136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 000470760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-08-26 15:44 - 2026-08-22 15:02 - 032227048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 021026024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 006052584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 005926120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 004790504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-08-26 15:44 - 2026-08-22 15:02 - 000574032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 000442640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-08-26 15:44 - 2026-08-20 22:56 - 000176631 _____ C:\WINDOWS\system32\nvinfo.pb
2026-08-26 15:44 - 2026-08-20 22:56 - 000134376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2026-08-20 16:04 - 2026-09-16 16:00 - 000002100 _____ C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-08-20 16:04 - 2026-09-07 15:37 - 000002584 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-08-19 18:55 - 2026-09-11 01:51 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-09-18 19:17 - 2024-02-25 09:20 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-09-18 18:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-09-18 18:28 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-18 15:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-09-18 15:38 - 2024-02-09 18:30 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-09-18 15:21 - 2025-01-18 01:21 - 000003638 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-09-18 15:21 - 2025-01-18 01:21 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-09-18 15:21 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-09-18 15:20 - 2026-03-18 01:27 - 000000000 ____D C:\Users\robin\AppData\Local\LogiOptionsPlus
2026-09-18 01:30 - 2024-02-22 11:05 - 000000000 ____D C:\ProgramData\NVIDIA
2026-09-17 19:53 - 2025-01-18 01:19 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-09-17 19:34 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-09-16 23:55 - 2025-01-17 17:25 - 000000000 ____D C:\Users\robin
2026-09-16 21:34 - 2026-04-23 18:28 - 000002331 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2026-09-16 21:34 - 2026-04-23 18:28 - 000002290 _____ C:\Users\Public\Desktop\Brave.lnk
2026-09-16 19:00 - 2024-02-25 08:53 - 000000000 ____D C:\Users\robin\AppData\Local\D3DSCache
2026-09-16 18:12 - 2025-01-18 09:24 - 001692332 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-09-16 18:10 - 2026-03-18 01:28 - 000000000 ____D C:\Users\robin\AppData\Roaming\logioptionsplus
2026-09-16 18:05 - 2025-01-18 01:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-09-16 18:05 - 2025-01-18 01:20 - 000005110 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-09-16 18:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-09-16 18:05 - 2024-02-25 09:20 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-09-16 18:05 - 2024-02-09 18:33 - 000089336 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteDownloadAssistant.exe
2026-09-16 18:05 - 2024-02-09 18:30 - 000906528 _____ C:\WINDOWS\system32\wpbbin.exe
2026-09-16 18:05 - 2024-02-09 18:30 - 000878840 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteUpdateService.exe
2026-09-16 18:05 - 2024-02-09 18:30 - 000012288 ___SH C:\DumpStack.log.tmp
2026-09-16 16:17 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-09-16 16:00 - 2026-04-24 21:20 - 000001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-16 16:00 - 2026-04-12 06:46 - 000002214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-09-16 00:33 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-09-16 00:32 - 2025-01-18 01:19 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-09-16 00:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-09-15 15:55 - 2025-01-18 09:20 - 003381760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-09-15 15:39 - 2026-04-24 21:20 - 000402048 _____ (Mozilla Foundation) C:\Users\robin\Desktop\Firefox.exe
2026-09-12 12:06 - 2024-02-09 18:31 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-09-11 01:51 - 2025-01-18 01:19 - 000506312 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-09-11 01:50 - 2025-12-12 01:53 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-09-11 01:50 - 2025-07-21 07:42 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-09-11 01:50 - 2025-01-17 17:24 - 000000000 ____D C:\WINDOWS\InboxApps
2026-09-11 01:50 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-09-11 01:50 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\L2Schemas
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-09-11 01:50 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-09-10 15:57 - 2024-02-25 16:24 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-09-10 15:56 - 2024-02-25 16:24 - 230964456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-09-07 15:55 - 2026-05-02 19:53 - 000010640 _____ C:\Users\robin\Desktop\edit.xlsx
2026-09-06 10:05 - 2024-11-14 17:01 - 000000000 ___HD C:\adobeTemp
2026-09-06 10:05 - 2024-02-28 20:27 - 000000000 ____D C:\Program Files\Common Files\Adobe
2026-09-06 10:04 - 2024-02-28 20:27 - 000000000 ____D C:\Program Files\Adobe
2026-09-06 10:04 - 2024-02-25 08:52 - 000000000 ____D C:\Users\robin\AppData\Local\Packages
2026-09-06 10:04 - 2024-02-09 18:32 - 000000000 ____D C:\ProgramData\Packages
2026-09-03 20:41 - 2024-02-25 15:24 - 000001062 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-09-03 16:37 - 2024-06-25 17:17 - 000000000 ____D C:\Program Files\Logi
2026-09-02 20:30 - 2025-05-21 21:22 - 000000985 _____ C:\Users\Public\Desktop\PotPlayer 64 bit.lnk
2026-08-27 12:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\appcompat
2026-08-26 15:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2026-08-26 15:46 - 2024-02-25 09:15 - 000000000 ____D C:\Users\robin\AppData\Local\NVIDIA
2026-08-26 15:46 - 2024-02-22 11:05 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2026-08-26 15:45 - 2024-02-25 08:52 - 000000000 ____D C:\Users\robin\AppData\LocalLow\NVIDIA
2026-08-26 15:43 - 2024-02-25 08:53 - 000000000 ____D C:\Users\robin\AppData\Local\NVIDIA Corporation
2026-08-21 01:01 - 2024-02-25 08:53 - 000000000 ____D C:\Users\robin\AppData\Local\CrashDumps
2026-08-19 19:29 - 2024-02-29 18:00 - 000000000 ____D C:\Users\robin\AppData\Roaming\XnConvert
==================== Files in the root of some directories ========
2026-08-30 18:59 - 2026-08-30 18:59 - 000003584 _____ () C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-09-2026
Ran by robin (18-09-2026 19:19:02)
Running from C:\Users\robin\Desktop
Microsoft Windows 11 Home Version 25H2 26200.9457 (X64) (2025-01-18 07:19:27)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2287906516-366990468-377022076-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-2287906516-366990468-377022076-503 - Limited - Disabled)
Guest (S-1-5-21-2287906516-366990468-377022076-501 - Limited - Disabled)
Rob (S-1-5-21-2287906516-366990468-377022076-1010 - Limited - Enabled) => C:\Users\Rob
robin (DisplayName: R**** G) (S-1-5-21-2287906516-366990468-377022076-1003 - Administrators - Enabled) [MS Account] => C:\Users\robin
WDAGUtilityAccount (S-1-5-21-2287906516-366990468-377022076-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 26.00 (x64) (HKLM\...\7-Zip) (Version: 26.00 - Igor Pavlov)
Adobe Bridge 2026 (HKLM-x32\...\KBRG_16_0_6) (Version: 16.0.6 - Adobe Inc.)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 6.10.0.252.3 - Adobe Inc.)
Adobe Photoshop 2026 (HKLM-x32\...\PHSP_27_8) (Version: 27.8.0.13 - Adobe Inc.)
AMD Ryzen Master (HKLM\...\{02247819-03CD-414E-AC8D-FD518BFBA445}) (Version: 2.14.1.3286 - Advanced Micro Devices, Inc.) Hidden
AMD Ryzen Master (HKLM\...\AMD Ryzen Master) (Version: 2.14.1.3286 - Advanced Micro Devices, Inc.)
Ant Renamer (HKLM-x32\...\Ant Renamer 2_is1) (Version: 2.12.0 - Ant Software)
Baldurs Gate 3 MULTi13 - ElAmigos version 5849914 (HKLM-x32\...\{11F1C23F-D931-4A8F-8E21-8119485681A9}_is1) (Version: 5849914 - Larian Studios)
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 153.1.95.102 - Autoři prohlížeče Brave)
CPUID CPU-Z 2.09 (HKLM\...\CPUID CPU-Z_is1) (Version: 2.09 - CPUID, Inc.)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 153.0.8010.48 - Google LLC)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0.1 - AppWork GmbH)
Logi Options+ (HKLM\...\{850cdc16-85df-4052-b06e-4e3e9e83c5c6}) (Version: 2.7.961922 - Logitech)
Logi Plugin Service (HKLM\...\{8AFB30E7-8172-472A-BE7A-B2367DED2FD5}) (Version: 6.4.1.3246 - Logitech)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 153.0.4234.32 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 153.0.4234.32 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Czech) 2007 (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Excel MUI (Czech) 2007 (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Czech) 2007 (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Czech) 2007 (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2007 (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (HKLM-x32\...\{90120000-002C-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Czech) 2007 (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Czech) 2007 (HKLM\...\{90120000-002A-0405-1000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2007 (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-2287906516-366990468-377022076-1010\...\OneDriveSetup.exe) (Version: 24.166.0818.0003 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x64 8.0.50727.4053 False (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.50727.42 False (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.51011 False (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.56336 False (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.57102 False (HKLM\...\{f0cbd694-71ce-4391-9690-5da93b2f0445}) (Version: 8.0.57102 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.58298 False (HKLM\...\{f45b48a7-f616-4211-b927-17cab6a96613}) (Version: 8.0.58298 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.59192 False (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.61000 (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.50727.4053 False (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.50727.42 False (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.51011 False (HKLM-x32\...\{a0fe116e-9a8a-466f-aee0-625cb7c207e3}) (Version: 8.0.51011 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.56336 False (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.57103 False (HKLM-x32\...\{d8fea624-4f2c-432d-9a54-6eee9cd1a77e}) (Version: 8.0.57103 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.58299 False (HKLM-x32\...\{052bac4a-6f79-46d4-a024-1ce1b4f73cd4}) (Version: 8.0.58299 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.59193 False (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 False (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.0 False (HKLM\...\{D04659D1-EB2D-3DE5-A833-837A623CCCF7}) (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.218 False (HKLM\...\{BBBE35B2-9349-3C48-BD3D-F574B17C7924}) (Version: 9.0.21022.218 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30411 False (HKLM\...\{D93AC9C8-B6CF-391E-BD2F-48AF4727476C}) (Version: 9.0.30411 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 False (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.0 False (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 False (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4048 False (HKLM\...\{91415F19-4C22-3609-A105-92ED3522D83C}) (Version: 9.0.30729.4048 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 False (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148.0 False (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.5570 False (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 False (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.0 False (HKLM-x32\...\{DCB46B42-723F-350E-B18A-449BC6C21636}) (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 False (HKLM-x32\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 False (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 False (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.0 False (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 False (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 False (HKLM-x32\...\{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}) (Version: 9.0.30729.4048 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 False (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148.0 False (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.5570 False (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.30319 False (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.30319 False (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{a2199617-3609-410f-a8e8-e8806c73545b}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 False Eng (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 False Eng (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 False (HKLM\...\{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 False (HKLM\...\{3C28BFD4-90C7-3138-87EF-418DC16E9598}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 False (HKLM\...\{764384C5-BCA9-307C-9AAC-FD443662686A}) (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 False (HKLM\...\{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 False (HKLM\...\{5AF4E09F-5C9B-3AAF-B731-544D3DC821DD}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 False (HKLM\...\{2EDC2FA3-1F34-34E5-9085-588C9EFD1CC6}) (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 False (HKLM-x32\...\{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 False (HKLM-x32\...\{6C772996-BFF3-3C8C-860B-B3D48FF05D65}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 False (HKLM-x32\...\{3D6AD258-61EA-35F5-812C-B7A02152996E}) (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 False (HKLM-x32\...\{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 False (HKLM-x32\...\{E824E81C-80A4-3DFF-B5F9-4842A9FF5F7F}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 False (HKLM-x32\...\{E7D4E834-93EB-351F-B8FB-82CDAE623003}) (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 False (HKLM-x32\...\{51adbf11-493f-431c-a862-967a0fae2944}) (Version: 12.0.21005.1 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 False Eng (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 False (HKLM-x32\...\{1a63c099-febd-4eaf-83ad-a82ea4fdac49}) (Version: 12.0.30501.0 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 False Eng (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{49e969a1-2990-464d-92b5-25f6f34573c6}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 False Eng (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 False (HKLM-x32\...\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}) (Version: 12.0.21005.1 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 False Eng (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 False (HKLM-x32\...\{b55f7208-e02b-4828-ac78-59c73ddf5bc7}) (Version: 12.0.30501.0 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 False Eng (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40649 False (HKLM-x32\...\{78142960-066b-4581-b984-0bdcf560c4be}) (Version: 12.0.40649.5 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40649 False Eng (HKLM-x32\...\{35b83883-40fa-423c-ae73-2aff7e1ea820}) (Version: 12.0.40649.5 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 False (HKLM-x32\...\{10dc8dbf-d3d7-4e23-be07-120fe5c66b78}) (Version: 12.0.40660.0 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 False Eng (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 False Eng (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 False (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40649 False (HKLM\...\{20C1086D-C843-36B1-B678-990089D1BD44}) (Version: 12.0.40649 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40660 False (HKLM\...\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 False (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40649 False (HKLM\...\{ABB19BB4-838D-3082-BDA4-87C6604181A2}) (Version: 12.0.40649 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40660 False (HKLM\...\{CB0836EC-B072-368D-82B2-D3470BF95707}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 False (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40649 False (HKLM-x32\...\{A8589745-51BC-3963-B4E9-201CF8693538}) (Version: 12.0.40649 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40660 False (HKLM-x32\...\{7DAD0258-515C-3DD4-8964-BD714199E0F7}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 False (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40649 False (HKLM-x32\...\{DEA7F8E3-B7B9-3C3C-945B-7F8CE9041748}) (Version: 12.0.40649 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40660 False (HKLM-x32\...\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33810 (HKLM-x32\...\{5af95fd8-a22e-458f-acee-c61bd787178e}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.40.33810 (HKLM-x32\...\{47109d57-d746-4f8b-9618-ed6a17cc922b}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{C931A1C6-A7BF-3737-874A-818881A37E1B}) (Version: 10.0.60915 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.60910 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 156.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 150.0 - Mozilla)
Mozilla Thunderbird (x64 cs) (HKLM\...\Mozilla Thunderbird 154.0 (x64 cs)) (Version: 154.0 - Mozilla)
NVIDIA App 11.0.8.299 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.8.299 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.8.12612.38276700 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.8.12612.38276700 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.4.6.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.6.3 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 616.56 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 616.56 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.26.0703 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.26.0703 - NVIDIA Corporation)
Paradox Launcher v2 (HKLM\...\{BCBAAF27-1C19-48A5-8DEF-258E46D93FE0}) (Version: 2.4.0 - Paradox Interactive)
PhotoImpact X3 (HKLM-x32\...\InstallShield_{15803703-25FA-4C01-A062-3F4A59937E87}) (Version: 13.0 - Corel)
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
Pillars.Of.Eternity.II.Deadfire.OE.REPACK-KaOs (HKLM\...\Pillars.Of.Eternity.II.Deadfire.OE.REPACK-KaOs_is1) (Version: - ..::[KaOs]::..)
PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 26.08.19.0 - Kakao Corp.)
Python 3.14.4 (64-bit) (HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\{21bd423a-1cbb-41b4-b464-5e7c059ec5a4}) (Version: 3.14.4150.0 - Python Software Foundation)
Python 3.14.4 Add to Path (64-bit) (HKLM\...\{8D190621-B91A-4664-8506-C21DEEF6690A}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Core Interpreter (64-bit) (HKLM\...\{C72ADAF1-CF64-4C34-9485-2EE63BF0EA8B}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Development Libraries (64-bit) (HKLM\...\{7C0B1F9F-EF7E-4CCF-BF13-84B2B9EC0272}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Documentation (64-bit) (HKLM\...\{A69DA17D-3DBA-4A57-B9AF-7ED9696E3EF6}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Executables (64-bit) (HKLM\...\{2269A76D-370C-462C-B5AB-56758AABB756}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 pip Bootstrap (64-bit) (HKLM\...\{E841439F-9F10-4B58-BA75-7B6A71565A28}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Standard Library (64-bit) (HKLM\...\{6C0E5B22-995D-4D14-94D2-9F556CF4812E}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Tcl/Tk Support (64-bit) (HKLM\...\{19AB4ED7-05CC-4497-9935-AF829093B5CE}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Test Suite (64-bit) (HKLM\...\{E67B3149-FEEE-4623-A24B-9C096A09D789}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{CF2C2B82-E540-4ACE-B007-DF0C216EFC40}) (Version: 3.14.4150.0 - Python Software Foundation)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9618.1 - Realtek Semiconductor Corp.)
Shareaza 2.7.10.2 (HKLM\...\Shareaza_is1) (Version: 2.7.10.2 - Shareaza Development Team)
Stellaris (HKLM-x32\...\1508702879_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Ancient Relics (HKLM-x32\...\2106739867_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Anniversary Portraits (HKLM-x32\...\1619776270_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Apocalypse (HKLM-x32\...\1988097366_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Aquatics Species Pack (HKLM-x32\...\1253915653_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Arachnoid Portrait Pack (HKLM-x32\...\1897107160_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Astral Planes (HKLM-x32\...\1558204482_is1) (Version: 4.4.6 - GOG.com)
Stellaris: BioGenesis (HKLM-x32\...\1161571108_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Complete Soundtrack (HKLM-x32\...\1892453534_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Cosmic Storms (HKLM-x32\...\1554166669_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Distant Stars Story Pack (HKLM-x32\...\1209094315_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Federations (HKLM-x32\...\1790030450_is1) (Version: 4.4.6 - GOG.com)
Stellaris: First Contact Story Pack (HKLM-x32\...\1210745577_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Galactic Paragons (HKLM-x32\...\2048809075_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Grand Archive (HKLM-x32\...\1197675719_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Horizon Signal (HKLM-x32\...\1490429179_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Humanoids Species Pack (HKLM-x32\...\2062279897_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Infernals Species Pack (HKLM-x32\...\1839971018_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Infinite Frontiers eBook (HKLM-x32\...\1439311238_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Leviathans Story Pack (HKLM-x32\...\1122806862_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Lithoids Species Pack (HKLM-x32\...\1420212493_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Megacorp (HKLM-x32\...\1316465607_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Necroids Species Pack (HKLM-x32\...\2112845659_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Nemesis (HKLM-x32\...\1488827509_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Nomads (HKLM-x32\...\2071004157_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Overlord (HKLM-x32\...\1863527056_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Plantoids Species Pack (HKLM-x32\...\1999794856_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Shadows of the Shroud (HKLM-x32\...\1404109174_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Synthetic Dawn Story Pack (HKLM-x32\...\1292954230_is1) (Version: 4.4.6 - GOG.com)
Stellaris: The Machine Age (HKLM-x32\...\1775099226_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Toxoids Species Pack (HKLM-x32\...\1414149508_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Utopia (HKLM-x32\...\1978231244_is1) (Version: 4.4.6 - GOG.com)
SumatraPDF (HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\SumatraPDF) (Version: 3.5.2 - Krzysztof Kowalczyk)
The Witcher 3: Wild Hunt - Game of the Year Edition (HKLM-x32\...\1495134320_is1) (Version: 4.04a - GOG.com)
UE4 Prerequisites (x64) (HKLM\...\{36EAD5CF-44EF-4FCF-8BE1-D96C4835D7A4}) (Version: 1.0.11.0 - Epic Games, Inc.) Hidden
UE4 Prerequisites (x64) (HKLM-x32\...\{2890ae6b-90e9-448d-b3e6-97e43c21e2fd}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden
UXP WebView Support (HKLM-x32\...\UXPW_1_6_1) (Version: 1.6.1 - Adobe Inc.)
WinRAR 7.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.11.0 - win.rar GmbH)
XnConvert (x64) (HKLM\...\XnConvert (x64)_is1) (Version: 1.105.0.0 - Pierre-e Gougelet)
XnView 2.51.6 (HKLM-x32\...\XnView_is1) (Version: 2.51.6 - Gougelet Pierre-e)
Packages:
=========
Adobe Native Client -> C:\Program Files\Common Files\Adobe\Adobe OS Extension [2026-09-06] ()
Microsoft.D3DMappingLayers -> C:\Program Files\WindowsApps\Microsoft.D3DMappingLayers_1.2608.3.0_x64__8wekyb3d8bbwe [2026-09-03] (Microsoft Corporation)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-11] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.48.315.0_x64__dt26b99r8h8gj [2025-07-20] (Realtek Semiconductor Corp)
WinRAR -> C:\Program Files\WinRAR [2025-07-21] (win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{04CC76C7-1ED7-4CAE-9762-B8664ED008ED}\localserver32 -> C:\Program Files\Shareaza\MediaImageServices.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{0EEA2A0F-AD1F-4555-9827-0DD9335611A4}\localserver32 -> C:\Program Files\Shareaza\WindowsThumbnail.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{0F74BA53-C842-4CB5-B388-DD5663F62479}\InprocServer32 -> C:\Program Files\Shareaza\Preview.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{18D11ED9-1264-48A1-9E14-20F2C633242B}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{21CBAAF2-E3D4-455A-B4E6-223467B53D1A}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{2EE9D739-7726-41cf-8F18-4B1B8763BC63}\InprocServer32 -> C:\Program Files\Shareaza\ImageViewer.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{2F74AA28-2498-4805-911A-04C39858D529}\InprocServer32 -> C:\Program Files\Shareaza\ZIPBuilder.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{30FC662A-D72A-4F79-B63A-ACD4FBFE68A3}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{34791E02-51DC-4CF4-9E34-018166D91D0E}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{3DC28AA6-A597-4E03-96DF-ADA19155B0BE}\localserver32 -> C:\Program Files\Shareaza\MediaPlayer.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{570C197C-FE9C-4D1F-B6E0-EFA44D36399F}\localserver32 -> C:\Program Files\Shareaza\MediaLibraryBuilder.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{61700EEC-D5D3-4793-BD1F-514896D67F44}\InprocServer32 -> C:\Program Files\Shareaza\RatDVDReader.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{6C9E61BE-E58F-4AE1-A304-6FF1D183804C}\InprocServer32 -> C:\Program Files\Shareaza\GFLLibraryBuilder.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{76F13243-9F62-4241-AC07-3B359BBE4EC5}\InprocServer32 -> C:\Program Files\Shareaza\VirusTotal.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{76F13243-9F62-4241-AC07-3B359BBE4EC6}\InprocServer32 -> C:\Program Files\Shareaza\ShortURL.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{A4F1E383-B493-4580-8DB6-5CC89CBAAC53}\InprocServer32 -> C:\Program Files\Shareaza\SkinScanSKS.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{B69F80CD-FB15-45E8-B359-92A41CC571A7}\InprocServer32 -> C:\Program Files\Shareaza\7ZipBuilder.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{B978F591-5137-4612-873A-DC2081BAD6CD}\InprocServer32 -> C:\Program Files\Shareaza\SWFPlugin.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{BEA218D2-6950-497B-9434-61683EC065FE}\InprocServer32 -> C:\Users\robin\AppData\Local\Programs\Python\Launcher\pyshellext.amd64.dll (Python Software Foundation -> Python Software Foundation)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{D73ABD28-3A2A-4E36-AD6F-2AA8F011FBE3}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{E1A67AE5-7041-4AE1-94F7-DE03EF759E27}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{E9B2EF9B-4A0C-451E-801F-257861B87FAD}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{E9F51B1E-DB0F-4EEE-9B36-46151994C715}\InprocServer32 -> C:\Program Files\Shareaza\DocumentReader.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{F801DAD7-F08D-48EF-B0DF-6B120377E835}\InprocServer32 -> C:\Program Files\Shareaza\RARBuilder.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{FC4D8F69-0B18-49BB-8AB7-87EB77AA1A9D}\InprocServer32 -> C:\Program Files\Shareaza\SWFPlugin.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{FF5FCD00-2C20-49D8-84F6-888D2E2C95DA}\InprocServer32 -> C:\Program Files\Shareaza\GFLImageServices.dll (Shareaza Development Team) [File not signed]
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-02-12] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-02-12] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-07-02] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a3944b54ff18b284\nvshext.dll [2026-08-22] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-02-12] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2026-08-10 13:47 - 2026-08-10 13:47 - 001368064 _____ () [File not signed] C:\Program Files\Logi\LogiPluginService\win\LogiEventTracingNativeLibrary.dll
2026-08-10 13:47 - 2026-08-10 13:47 - 000178688 _____ () [File not signed] C:\Program Files\Logi\LogiPluginService\win\LogiLocalConnectionNativeLibrary.dll
2024-11-23 13:26 - 2026-07-09 22:29 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll
2026-04-05 11:04 - 2026-02-12 12:00 - 000101888 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\robin\Downloads:Shareaza.GUID [16]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2022-05-07 07:24 - 2026-04-16 19:30 - 000000735 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.0.1
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKCU\Environment\\Path -> C:\Users\robin\AppData\Local\Programs\Python\Python314\Scripts\;C:\Users\robin\AppData\Local\Programs\Python\Python314\;C:\Users\robin\AppData\Local\Programs\Python\Launcher\;%USERPROFILE%\AppData\Local\Microsoft\WindowsApps
HKU\S-1-5-21-2287906516-366990468-377022076-1003\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\themea\img20.jpg
HKU\S-1-5-21-2287906516-366990468-377022076-1010\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\themea\img20.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run32: => "CzcScript"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [UDP Query User{6219F238-14E3-4D2F-AFAA-79AB74138C7D}C:\hry\baldurs gate 3\bin\bg3.exe] => (Block) C:\hry\baldurs gate 3\bin\bg3.exe (Larian Studios Games Ltd. -> )
FirewallRules: [TCP Query User{222B68AD-991F-4AE3-B878-25702F8FBDB3}C:\hry\baldurs gate 3\bin\bg3.exe] => (Block) C:\hry\baldurs gate 3\bin\bg3.exe (Larian Studios Games Ltd. -> )
FirewallRules: [UDP Query User{3C5D80BD-74F9-48B9-BDB6-A82FE900CF36}C:\hry\phoenixpoint\phoenixpointwin64.exe] => (Block) C:\hry\phoenixpoint\phoenixpointwin64.exe (Snapshot Games Inc. -> )
FirewallRules: [TCP Query User{0C9B7B7C-D6AE-4F3F-AD96-76DACBB16765}C:\hry\phoenixpoint\phoenixpointwin64.exe] => (Block) C:\hry\phoenixpoint\phoenixpointwin64.exe (Snapshot Games Inc. -> )
FirewallRules: [{324404DA-ECFE-4594-9DB6-6180391BCAA3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.21.500.0_x64__8wekyb3d8bbwe\Minecraft.Windows.exe (Microsoft Corporation -> )
FirewallRules: [{0CDD3622-18BD-439F-941A-0FBB1580B082}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.21.500.0_x64__8wekyb3d8bbwe\Minecraft.Windows.exe (Microsoft Corporation -> )
FirewallRules: [{E8EE1609-9685-4904-8BB9-2345FE912E66}] => (Allow) C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
FirewallRules: [{5DE50F62-F644-40EE-9277-9E2C2174124F}] => (Allow) C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
FirewallRules: [{E37639F5-5A21-4603-B005-170EBFEB9D95}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{D8F2BBB1-B67C-4E59-BC39-406171C7F0A6}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [UDP Query User{766746DF-8B3A-4FB1-97D2-870774962567}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [TCP Query User{772A916A-5A09-4567-B999-05520077AF18}C:\hry\terra.invicta.build.23709269\terrainvicta.exe] => (Block) C:\hry\terra.invicta.build.23709269\terrainvicta.exe () [File not signed]
FirewallRules: [UDP Query User{751C3342-79AA-49DC-B6D9-F2B0EF0A1EAE}C:\hry\terra.invicta.build.23709269\terrainvicta.exe] => (Block) C:\hry\terra.invicta.build.23709269\terrainvicta.exe () [File not signed]
FirewallRules: [{A02FCDB2-75EF-453B-98ED-E036AE846361}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{4FA52B79-09FE-4B17-8E96-E22D1C9C9C0C}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{05D4B2FE-ACDC-40F5-8D86-31454921BAC6}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
FirewallRules: [{E4257B56-B3A6-40ED-A6AE-6C64B6A476DE}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
FirewallRules: [{8B2F2355-6DB3-4752-8340-B55DF0B3ABD0}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{B0C88D95-760E-4D3B-A34B-A4A7066570BB}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{180CB9BC-4A83-44AC-8FDB-78E3951B3981}] => (Allow) C:\Program Files\Logi\LogiPluginService\LogiPluginService.exe (Logitech Inc -> Logitech)
FirewallRules: [{00D9F388-FBF9-472A-88B6-1439A1CA01C0}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{1A6ECF60-4CC5-4956-ABDE-02A1CD084E17}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
==================== Restore Points =========================
12-09-2026 21:21:24 Windows Update
16-09-2026 00:32:17 Windows Update
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (09/17/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
Error: (09/16/2026 09:28:40 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
Error: (09/16/2026 04:00:29 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5
Error: (09/16/2026 12:34:05 AM) (Source: CertEnroll) (EventID: 57) (User: NT AUTHORITY)
Description: Zprostředkovatel Microsoft Passport Key Storage Provider nebyl načten, protože se nezdařila inicializace.
Error: (09/15/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
Error: (09/14/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
Error: (09/13/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
Error: (09/12/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155
System errors:
=============
Error: (09/18/2026 06:23:56 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (09/18/2026 06:23:53 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (09/17/2026 08:17:53 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (09/17/2026 08:17:51 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (09/17/2026 07:29:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.
Error: (09/16/2026 06:05:38 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (18:00:06, 16.09.2026) bylo neočekávané.
Error: (09/16/2026 12:32:15 AM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} se v daném časovém limitu neregistroval u služby DCOM.
Error: (09/14/2026 09:26:17 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Windows Defender:
================
TimeCreated : 16.09.2026 18:01:22
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
454AD351-5DDA-4B54-BD48-61243CBA9ACC}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή
TimeCreated : 13.09.2026 18:16:06
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
A03016A8-2408-414C-B053-954924D462AF}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъЅćђęđμĺēδ ѕčªη ωáŝ şĸΐррėď ьê¢āúşє ţнё ľãŝ
τ šūçсëśşƒüℓ şсāņ ωąş щĩţнïņ ŧђё ĺǻŝť 7 ðαỳş
TimeCreated : 12.09.2026 15:18:47
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
5C56AD42-7164-42E1-B8A4-E7D80303DB02}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή
TimeCreated : 12.09.2026 11:19:47
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
18B4B2FB-2A20-4471-8917-08B3B9944918}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή
TimeCreated : 12.09.2026 7:43:27
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
F3FE96C0-BAC5-400C-B3EF-74929B2C2488}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή
TimeCreated : 11.09.2026 20:49:58
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
4B8160C5-76CE-4024-8931-F32593C37B51}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή
TimeCreated : 10.09.2026 21:03:38
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
37B1B7F9-80ED-47A6-9E5C-95B130BC958E}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъЅćђęđμĺēδ ѕčªη ωáŝ şĸΐррėď ьê¢āúşє ţнё ľãŝ
τ šūçсëśşƒüℓ şсāņ ωąş щĩţнïņ ŧђё ĺǻŝť 7 ðαỳş
TimeCreated : 10.09.2026 0:26:47
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
A3F9677A-AB08-45BB-8DBB-60C6886CA947}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъЅćђęđμĺēδ ѕčªη ωáŝ şĸΐррėď ьê¢āúşє ţнё ľãŝ
τ šūçсëśşƒüℓ şсāņ ωąş щĩţнïņ ŧђё ĺǻŝť 7 ðαỳş
CodeIntegrity:
===============
Date: 2026-09-18 15:20:48
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\DefenderSessionHelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2026-09-15 15:38:21
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\UUS\amd64\WaaSMedicAgent.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends International, LLC. F22b 02/06/2024
Motherboard: Gigabyte Technology Co., Ltd. A620M GAMING X
Processor: AMD Ryzen 5 7600X 6-Core Processor
Percentage of memory in use: 21%
Total physical RAM: 31893.9 MB
Available physical RAM: 24969.96 MB
Total Virtual: 33941.9 MB
Available Virtual: 26852.38 MB
==================== Drives ================================
Disk 1 - Drive c: (Windows) (Fixed) (Total:952.29 GB GB) (Free:418.67 GB GB) (Model: ADATA SX8200PNP) NTFS
Disk 0 - Drive d: () (Fixed) (Total:976.56 GB GB) (Free:131.09 GB GB) (Model: Samsung SSD 870 QVO 4TB) NTFS
Disk 0 - Drive e: (filmy) (Fixed) (Total:2749.46 GB GB) (Free:318.42 GB GB) (Model: Samsung SSD 870 QVO 4TB) NTFS
Disk 1 - \\?\Volume{034c53f1-8244-48fd-a60e-518bf74a14ba}\ () (Fixed) (Total:0.88 GB) (Free:0.11 GB) NTFS
Disk 1 - \\?\Volume{90cba374-ae74-4937-8c1c-d913159142eb}\ (Recovery) (Fixed) (Total:0.59 GB) (Free:0.57 GB) NTFS
Disk 1 - \\?\Volume{7b948908-ac83-4b25-885c-bf73cd57240d}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32
==================== MBR & Partition Table ====================
============================================================
Disk: 0 (Size: 3726.02 GB) (Disk ID: 83EB098B)
Partitions:
===========
Partition Style : GPT
Partition Count : 2
Disk ID : {E9CADECD-9AD0-47FF-B2F1-16BECE55D803}
Usable Offset : 0.02 MB
Usable Length : 3726.02 GB
Max Partitions : 128
Partition 1
Type : Basic Data Partition
Size : 976.56 GB
Offset : 1 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {D77E7FD3-DA24-4614-B51E-2E866FB7D0C5}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Basic Data Partition
Size : 2749.46 GB
Offset : 1000001 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {0D9BAFE2-C3B7-4F52-8C40-99130ED3C9EA}
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
============================================================
Disk: 1 (Size: 953.87 GB) (Disk ID: 83EB09B9)
Partitions:
===========
Partition Style : GPT
Partition Count : 5
Disk ID : {2B783E0A-1E64-4765-BCBA-5B9955CD1E3B}
Usable Offset : 0.02 MB
Usable Length : 953.87 GB
Max Partitions : 128
Partition 1
Type : EFI System Partition
Size : 100 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {7B948908-AC83-4B25-885C-BF73CD57240D}
GPT Name : EFI system partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 101 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {A0088448-CBD3-45A6-A4B4-9D5A946011AC}
GPT Name : Microsoft reserved partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 952.29 GB
Offset : 117 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {120BE8A3-B893-46C7-B387-40967021EDA2}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 903 MB
Offset : 975258 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {034C53F1-8244-48FD-A60E-518BF74A14BA}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
Partition 5
Type : Windows Recovery
Size : 600 MB
Offset : 976162 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {90CBA374-AE74-4937-8C1C-D913159142EB}
GPT Name : Basic data partition
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
============================================================
==================== End of Addition.txt =======================
Vyrostl jsem v tak chudé rodině, že kdybych se nenarodil jako chlapeček, tak bych si neměl s čím hrát.
- Rudy
- Site Admin

- Příspěvky: 120119
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu
Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\Run: [AdobeBridge] => [X]
CHR Extension: (Kagane Downloader) - C:\chrome-kagane\dist [2026-07-19] [UpdateUrl:0] <==== ATTENTION
C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
AlternateDataStreams: C:\Users\robin\Downloads:Shareaza.GUID [16]
FirewallRules: [TCP Query User{D8F2BBB1-B67C-4E59-BC39-406171C7F0A6}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [UDP Query User{766746DF-8B3A-4FB1-97D2-870774962567}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [{05D4B2FE-ACDC-40F5-8D86-31454921BAC6}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
FirewallRules: [{E4257B56-B3A6-40ED-A6AE-6C64B6A476DE}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosím o kontrolu
Fix result of Farbar Recovery Scan Tool (x64) Version: 17-09-2026
Ran by robin (18-09-2026 20:29:24) Run:3
Running from C:\Users\robin\Desktop
Loaded Profiles: robin & Rob
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\Run: [AdobeBridge] => [X]
CHR Extension: (Kagane Downloader) - C:\chrome-kagane\dist [2026-07-19] [UpdateUrl:0] <==== ATTENTION
C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
AlternateDataStreams: C:\Users\robin\Downloads:Shareaza.GUID [16]
FirewallRules: [TCP Query User{D8F2BBB1-B67C-4E59-BC39-406171C7F0A6}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [UDP Query User{766746DF-8B3A-4FB1-97D2-870774962567}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [{05D4B2FE-ACDC-40F5-8D86-31454921BAC6}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
FirewallRules: [{E4257B56-B3A6-40ED-A6AE-6C64B6A476DE}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
"HKU\S-1-5-21-2287906516-366990468-377022076-1003\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge" => removed successfully
CHR Extension: (Kagane Downloader) - C:\chrome-kagane\dist [2026-07-19] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
C:\Users\robin\Downloads => ":Shareaza.GUID" ADS could not remove.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D8F2BBB1-B67C-4E59-BC39-406171C7F0A6}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{766746DF-8B3A-4FB1-97D2-870774962567}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{05D4B2FE-ACDC-40F5-8D86-31454921BAC6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E4257B56-B3A6-40ED-A6AE-6C64B6A476DE}" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 25567792 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 13636018 B
Edge => 48008518 B
Chrome => 491404979 B
Brave => 215681325 B
Firefox => 1268046997 B
Opera => 0 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 5 B
ProgramData => 988257 B
Public => 0 B
systemprofile => 469523 B
systemprofile32 => 0 B
LocalService => 470281 B
NetworkService => 161891 B
robin => 64149926 B
Rob => 5 B
RecycleBin => 21781283354 B
EmptyTemp: => 22.27 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 20:30:34 ====
Ran by robin (18-09-2026 20:29:24) Run:3
Running from C:\Users\robin\Desktop
Loaded Profiles: robin & Rob
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\Run: [AdobeBridge] => [X]
CHR Extension: (Kagane Downloader) - C:\chrome-kagane\dist [2026-07-19] [UpdateUrl:0] <==== ATTENTION
C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
AlternateDataStreams: C:\Users\robin\Downloads:Shareaza.GUID [16]
FirewallRules: [TCP Query User{D8F2BBB1-B67C-4E59-BC39-406171C7F0A6}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [UDP Query User{766746DF-8B3A-4FB1-97D2-870774962567}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [{05D4B2FE-ACDC-40F5-8D86-31454921BAC6}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
FirewallRules: [{E4257B56-B3A6-40ED-A6AE-6C64B6A476DE}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
"HKU\S-1-5-21-2287906516-366990468-377022076-1003\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge" => removed successfully
CHR Extension: (Kagane Downloader) - C:\chrome-kagane\dist [2026-07-19] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
C:\Users\robin\Downloads => ":Shareaza.GUID" ADS could not remove.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D8F2BBB1-B67C-4E59-BC39-406171C7F0A6}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{766746DF-8B3A-4FB1-97D2-870774962567}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{05D4B2FE-ACDC-40F5-8D86-31454921BAC6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E4257B56-B3A6-40ED-A6AE-6C64B6A476DE}" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 25567792 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 13636018 B
Edge => 48008518 B
Chrome => 491404979 B
Brave => 215681325 B
Firefox => 1268046997 B
Opera => 0 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 5 B
ProgramData => 988257 B
Public => 0 B
systemprofile => 469523 B
systemprofile32 => 0 B
LocalService => 470281 B
NetworkService => 161891 B
robin => 64149926 B
Rob => 5 B
RecycleBin => 21781283354 B
EmptyTemp: => 22.27 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 20:30:34 ====
Vyrostl jsem v tak chudé rodině, že kdybych se nenarodil jako chlapeček, tak bych si neměl s čím hrát.
- Rudy
- Site Admin

- Příspěvky: 120119
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu
Smazáno. Nastala změna k lepšímu?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosím o kontrolu
ne
Vyrostl jsem v tak chudé rodině, že kdybych se nenarodil jako chlapeček, tak bych si neměl s čím hrát.
- Rudy
- Site Admin

- Příspěvky: 120119
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu
Ještě vyčistíme prohlížeče.
Stahnete Zoek.exe https://sdilej.cz/29519076/zoek.rar, https://sdilej.cz/29519076/zoek.rar a ulozte jej na plochu
Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize
Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.
Stahnete Zoek.exe https://sdilej.cz/29519076/zoek.rar, https://sdilej.cz/29519076/zoek.rar a ulozte jej na plochu
Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize
autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;
Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosím o kontrolu
je to moc velký, tak jsem to zabalil
https://forum.viry.cz/download/file.php ... w&id=23045
jinak se nic nezměnilo
https://forum.viry.cz/download/file.php ... w&id=23045
jinak se nic nezměnilo
- Přílohy
-
- zoek-results.rar
- zoek-results
- (30.47 KiB) Staženo 8 x
Vyrostl jsem v tak chudé rodině, že kdybych se nenarodil jako chlapeček, tak bych si neměl s čím hrát.
- Rudy
- Site Admin

- Příspěvky: 120119
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu
OK, bylo smazáno. Děje se to ve včech prohlížečích?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosím o kontrolu
děje
otestoval jsem rychlost netu a byla třetinová...tohle vypadá na problém u providera
otestoval jsem rychlost netu a byla třetinová...tohle vypadá na problém u providera
Vyrostl jsem v tak chudé rodině, že kdybych se nenarodil jako chlapeček, tak bych si neměl s čím hrát.
- Rudy
- Site Admin

- Příspěvky: 120119
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu
Tak to určitě. Kontaktujte ho a zeptejte se, proč je tomu tak. Chtěl jsem se na to zeptat po této vaší odpovědi. Mějte se! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosím o kontrolu
aspoň mám vyčištěný pc...díky 
Vyrostl jsem v tak chudé rodině, že kdybych se nenarodil jako chlapeček, tak bych si neměl s čím hrát.
- Rudy
- Site Admin

- Příspěvky: 120119
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu
OK as nemáte zač! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Přispějete na provoz fóra?