Prosím o kontrolu - napadnutie hesiel

Zpráva

Čaroděj ze Země KOZ · #1 Příspěvek od **Čaroděj ze Země KOZ** » Dnes 14:19

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 07-11-2026
Ran by Krylias (administrator) on DESKTOP-KH76570 (Gigabyte Technology Co., Ltd. Z390 M) (09-11-2026 13:23:43)
Running from C:\Users\Krylias\Downloads\FRST64.exe
Loaded Profiles: Krylias & DefaultAppPool
Platform: Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) Language: Slovenčina (Slovensko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files (x86)\Epson Software\Epson Printer Connection Checker\EPPCCMON.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\MSI Center\Engine\CC_Engine_x64.exe
(C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderAiPlatformHost.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderSessionHelper.exe
(C:\Users\Krylias\Desktop\CCleaner Professional\CCleaner64.exe ->) (Avast Software s.r.o. -> OPSWAT, Inc.) C:\Users\Krylias\Desktop\CCleaner Professional\wa_3rd_party_host_32.exe
(Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(explorer.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\Epson Software\Epson Printer Connection Checker\EPPCCMON.EXE
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.195.1006.0007\OneDrive.Sync.Service.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_37503b637f6a53da\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(services.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe <2>
(services.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(services.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe <2>
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Mystic Light\LightKeeperService.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\Mystic Light\Mystic_Light_Service.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_37503b637f6a53da\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Photodex Corporation -> ) C:\Program Files (x86)\Photodex\ProShow Producer\scsiaccess.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\System32\DriverStore\FileRepository\netrtwlanu.inf_amd64_0dc97ba2af82c338\RTUWPSrvcMain.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2607.0.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(svchost.exe ->) (Gen Digital Inc. -> Piriform Software Ltd) [File not signed] C:\Users\Krylias\Desktop\CCleaner Professional\CCleaner64.exe
(svchost.exe ->) (Infatica Pte. Ltd. -> ) C:\Program Files (x86)\Infatica P2B\infatica_agent.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\inetsrv\w3wp.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [827200 2021-12-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [470440 2026-06-02] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [856288 2019-10-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11112208 2024-01-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [680120 2026-04-09] (Geek Software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [WDDiscovery] => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe [132587352 2024-09-15] (Western Digital Technologies, Inc. -> Western Digital Corporation)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2024-09-15] (Adobe Inc. -> )
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5085848 2021-12-23] (Acronis International GmbH -> )
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [441448 2021-12-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2770680 2025-09-19] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [751240 2026-03-30] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725608 2026-11-03] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIYDE.EXE [485976 2025-06-24] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIYDE.EXE [485976 2025-06-24] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\Run: [EPSDNMON] => "" (No File)
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [6189056 2026-09-15] (Tonec Inc.) [File not signed]
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\Run: [Mozilla-Firefox-308046B0AF4A39CB] => "C:\Program Files\Mozilla Firefox\firefox.exe" -os-autostart [1083008 2026-11-09] (Mozilla Corporation -> Mozilla Corporation)
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\Run: [GoogleChromeAutoLaunch_AEA15880D324C5CD8D0666A3D2942D26] => "C:\Program Files\Google\Chrome\Application\chrome.exe" --startup-foreground-launch [4466840 2026-10-28] (Google LLC -> Google LLC)
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\Run: [MicrosoftEdgeAutoLaunch_05322832B228209A9519DE0EA077A1DE] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5073736 2026-11-05] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\Policies\Explorer: [DisallowRun] 0
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725608 2026-11-03] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [203936 2026-06-24] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\EPSON L8180 Series 64MonitorBE: C:\Windows\system32\E_YLMBYDE.DLL [249528 2025-06-24] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\Windows\system32\enppmon.dll [3182776 2025-02-20] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\pdfcmon: C:\Windows\system32\pdfcmon.dll [196096 2024-09-15] (pdfforge GmbH) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\156.0.8078.80\Installer\chrmstp.exe [8358040 2026-11-03] (Google LLC -> Google LLC)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {9FF50745-928E-49E9-B6F0-DFD6909ABC38} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (No File) (No File)
Task: {B4186DDA-29E8-44D9-AE96-4175F30703B0} - System32\Tasks\CCleanerCrashReporting => C:\Users\Krylias\Desktop\CCleaner Professional\CCleanerBugReport.exe [5075248 2024-08-16] (Gen Digital Inc. -> Gen Digital Inc. All rights reserved.) -> --product 90 --send dumps|report --path "C:\Users\Krylias\Desktop\CCleaner Professional\LOG" --programpath "C:\Users\Krylias\Desktop\CCleaner Professional" --guid "2c296bb5-43a2-44a1-9348-5bb114b5e9c8" --version "6.27.11214" --silent
Task: {B5F721F4-7040-4AC3-B875-74C9456D42CD} - System32\Tasks\CCleanerSkipUAC - Krylias => C:\Users\Krylias\Desktop\CCleaner Professional\CCleaner64.exe [45120304 2024-08-21] (Gen Digital Inc. -> Piriform Software Ltd) [File not signed]
Task: {AD1DADCC-4810-4FE1-B76A-18187B44BF62} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {70B56EB7-E640-4D98-86AE-6A6DFBDD3F2B} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {02B55CCC-8C1A-478E-96AE-9E8A62AF52CA} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {265DF5A8-329B-4DA3-926C-509109D5E220} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {0C91DFE3-2955-4B3E-A6EE-B3EEDA8DC0DC} - System32\Tasks\COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {27C44C60-6D39-4091-9622-465321D81AE0} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {67F653A6-F9D8-4A22-8D3E-5CE1DB179033} - System32\Tasks\CorelUpdateHelperTask-9A1B4A33D8B3AC087EC3F36977EE1FBD => c:\Program Files (x86)\Corel\CUH\v2\CUH.EXE [3813224 2024-09-19] (COREL CORPORATION -> Corel Corporation)
Task: {67EA2D3F-B427-437B-8418-E8A8CE888B65} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.EXE [3813224 2024-09-19] (COREL CORPORATION -> Corel Corporation)
Task: {98712034-BFF7-4C4C-9BE4-E0EEF9182522} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [6089584 2026-06-07] (Microsoft Windows -> Microsoft Corporation)
Task: {4E371B9D-CAD7-43B6-A342-4EF35DFCE3A4} - System32\Tasks\Driver Booster SkipUAC (Krylias) => C:\Users\Krylias\Desktop\IObit Driver Booster 12.0.0.308 Portable\App\ProgramFiles\DriverBooster.exe [8129904 2024-09-10] (IObit CO., LTD -> IObit)
Task: {952A92AC-3FF9-4BF5-8900-550EC75189FC} - System32\Tasks\EPSON L8180 Series Update {5921F2FF-156F-4520-9BD3-DC8DB339646D} => C:\Windows\System32\spool\drivers\x64\3\E_YTSYDE.EXE [680440 2025-06-24] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {745DFC8A-AE0E-4693-8666-1E7029CCA24E} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem157.0.8089.0{B50AA630-FEFC-40EC-999A-1EB2AB9EC5B7} => C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe [9958552 2026-10-06] (Google LLC -> Google LLC)
Task: {6480AD08-E820-45A3-B88D-66682D5A807E} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {B7DD94EF-9755-4B3C-B861-FE628BCA0744} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {FB282240-7212-4F3D-8A96-4621ECFA226F} - System32\Tasks\infatica_p2b => C:\Program Files (x86)\Infatica P2B\infatica_agent.exe [3708512 2023-10-30] (Infatica Pte. Ltd. -> )
Task: {F308E2E6-634E-40B2-816B-14A8EDE78C4B} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [11423528 2026-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {034664CA-877E-4A9D-AB3D-784DD1E5AE34} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29079360 2026-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {2D4A2E96-4F5A-423E-BBB5-07D12E8E9961} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE16\opushutil.exe [61272 2026-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {B55FCD5E-18A0-42B5-8A64-4C29B20013B1} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29079360 2026-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {5C300B10-A3C0-4383-B33B-CE71555C6E7C} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [224536 2026-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {85C9A2A6-55DA-4BD8-936A-0ABED3825B8A} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [224536 2026-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {08F464A0-38EB-492E-8DCE-B9B0E0021910} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {92856405-1A87-4DD4-9A8C-64E2E8D61FEC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {00617205-5FE7-412E-B872-E86ECE52F415} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {37228AAC-E89C-4A20-A4F8-8C74B9A3D02A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8C047172-6CB1-4D09-AFBF-4A1A90FD4AB6} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-578757146-292678226-1064010467-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1083008 2026-11-09] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {4BC50F4A-A53C-41DD-8F67-C7982452394B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-11-09] (Mozilla Corporation -> Mozilla Foundation)
Task: {21BB6E71-9F0A-440A-B459-1E1FF26FC547} - System32\Tasks\MSI Task Host - LEDKeeper2_Host => C:\Program Files (x86)\MSI\MSI Center\Mystic Light\LEDKeeper2.exe [2804840 2024-08-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {705A5E14-8011-4876-AAE9-6B14A51CDF3A} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Nero\Nero Apps\NeroInfo\NeroInfo.exe [3959176 2026-08-07] (Nero AG -> Nero AG)
Task: {214A9D12-6A86-4974-A58E-1D422A869F66} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3324528 2025-10-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F2A088A0-4C90-4381-B49D-B27855480CB1} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-11-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {AB2021EA-0D23-46CE-9934-F3D0C13D7469} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-578757146-292678226-1064010467-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-11-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {6CB44E03-2D9A-4010-A358-9AC2441FCD79} - System32\Tasks\OneDrive Startup Task-S-1-5-21-578757146-292678226-1064010467-1001 => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\OneDriveLauncher.exe [877928 2026-11-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {B058CC18-07F0-4ED3-8B2E-727176D69923} - System32\Tasks\PinnacleStudio24Notifier => C:\Program Files\Pinnacle\Studio 24\programs\PinnacleNotifierWrapper.exe [18016 2020-08-09] (Corel Corporation -> Pinnacle)
Task: {0723C852-2D23-4DDD-BABF-690ACB6CA2E5} - System32\Tasks\PinnacleStudio24Updater => C:\Program Files\Pinnacle\Studio 24\programs\PSNotification.exe [933512 2020-08-06] (Corel Corporation -> )
Task: {3F62F94C-3ECC-4328-B3E3-7B59838501C7} - System32\Tasks\RunSpeccy => C:\Program Files\Speccy\Speccy64.exe [20915616 2024-05-14] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {C0E55443-1876-41E8-9C04-A0129DB433F5} - System32\Tasks\SystemOptimization\WindowsNeroCheck => C:\Program Files (x86)\Nero\Nero Apps\Nero CoverDesigner\NeroCheck.exe [711944 2026-08-07] (Nero AG -> Nero AG)
Task: {5BEDEA24-C67E-459A-B8F7-41C2A359D49B} - System32\Tasks\WD Device Agent Task krylias => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [727384 2024-09-15] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {24D25BE2-65B1-43A7-B179-9C8340BEC0EC} - System32\Tasks\WD Discovery Service Task krylias => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [82264 2024-09-15] (Western Digital Technologies, Inc. -> )

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Users\Krylias\Desktop\CCleaner Professional\CCleanerBugReport.exe
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
Task: C:\Windows\Tasks\EPSON L8180 Series Update {5921F2FF-156F-4520-9BD3-DC8DB339646D}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSYDE.EXE:/EXE:{5921F2FF-156F-4520-9BD3-DC8DB339646D} /F:UpdateWORKGROUP\DESKTOP-KH76570$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6cdcb1d3-f15a-4c26-ab1c-8ac58d3a73c8}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6cdcb1d3-f15a-4c26-ab1c-8ac58d3a73c8}: [DhcpDomain] home

FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: 6jsbiiq0.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\Krylias\AppData\Roaming\Mozilla\Firefox\Profiles\ygtck294.default [2024-09-16]
FF user.js: detected! => C:\Users\Krylias\AppData\Roaming\Mozilla\Firefox\Profiles\ygtck294.default\user.js [2024-09-17]
FF ProfilePath: C:\Users\Krylias\AppData\Roaming\Mozilla\Firefox\Profiles\6jsbiiq0.default-release [2026-11-09]
FF user.js: detected! => C:\Users\Krylias\AppData\Roaming\Mozilla\Firefox\Profiles\6jsbiiq0.default-release\user.js [2024-09-17]
FF Homepage: Mozilla\Firefox\Profiles\6jsbiiq0.default-release -> google.sk
FF Notifications: Mozilla\Firefox\Profiles\6jsbiiq0.default-release -> hxxps://aukro.cz
FF Extension: (Linkificator) - C:\Users\Krylias\AppData\Roaming\Mozilla\Firefox\Profiles\6jsbiiq0.default-release\Extensions\linkificator@markapola.xpi [2026-11-01]
FF Extension: (IDM Integration Module) - C:\Users\Krylias\AppData\Roaming\Mozilla\Firefox\Profiles\6jsbiiq0.default-release\Extensions\mozilla_cc3@internetdownloadmanager.com.xpi [2026-07-03]
FF Extension: (New Tab) - C:\Users\Krylias\AppData\Roaming\Mozilla\Firefox\Profiles\6jsbiiq0.default-release\Extensions\newtab@mozilla.org.xpi [2026-11-09]
FF HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Krylias\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Krylias\AppData\Roaming\IDM\idmmzcc5 [2026-09-15] [Legacy] [not signed]
FF HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-19] [Legacy]
FF Plugin: @java.com/DTPlugin,version=11.491.2 -> C:\Program Files\Java\jre1.8.0_491\bin\dtplugin\npDeployJava1.dll [2026-03-30] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.491.2 -> C:\Program Files\Java\jre1.8.0_491\bin\plugin2\npjp2.dll [2026-03-30] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @photodex.com/PhotodexPresenter -> C:\Program Files (x86)\Photodex Presenter\npPxPlay.dll [2024-09-15] () [File not signed]

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Krylias\AppData\Local\Microsoft\Edge\User Data\Default [2026-11-09]
Edge StartupUrls: Default -> "hxxp://google.sk/"
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\Krylias\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-15]
Edge Extension: (Edge relevant text changes) - C:\Users\Krylias\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-07-09]
Edge Extension: (IDM Integration Module) - C:\Users\Krylias\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\llbjbkhnmlidjebalopleeepgdfgcpec [2026-10-15]
Edge HKU\S-1-5-21-578757146-292678226-1064010467-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [llbjbkhnmlidjebalopleeepgdfgcpec] - C:\Program Files (x86)\Internet Download Manager\IDMEdgeExt.crx [2026-02-18]

Chrome:
=======
CHR Profile: C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default [2026-11-09]
CHR Notifications: Default -> hxxps://epson-print-cd.updatestar.com; hxxps://www.facebook.com; hxxps://www.youtube.com
CHR HomePage: Default -> hxxp://google.sk/
CHR StartupUrls: Default -> "hxxp://google.sk/"
CHR Extension: (Image downloader - Imageye) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\agionbommeaifngbhincahgmoflcikhm [2026-10-31]
CHR Extension: (Webpage Screenshot - Entire page screenshot!) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\akgpcdalpfphjmfifkmfbpdmgdmeeaeo [2026-06-07]
CHR Extension: (AdGuard blokovač reklamy) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2026-11-09]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2026-11-07]
CHR Extension: (Notifier for Gmail™) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcjichoefijpinlfnjghokpkojhlhkgl [2026-10-16]
CHR Extension: (uBlock Origin Lite) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddkjiahejlhfcafbddmgiahcphecmpfh [2026-11-07]
CHR Extension: (uBlock) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\epcnnfbjfcgphgdmggkamkmgojdagdnn [2026-09-30]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-16]
CHR Extension: (AdBlock - najlepší blokovač reklám) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-11-03]
CHR Extension: (Hola VPN - Your Website Unblocker) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2026-11-09]
CHR Extension: (Volume Master - regulátor hlasitosti) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\jghecgabfgfdldnmbfkhmffcabddioke [2026-06-07]
CHR Extension: (Web Content Copier) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\kclanalaafbcibcojcadccipafbdmoin [2026-06-07]
CHR Extension: (Snímajte screenshoty webových stránok v celku - FireShot) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbpblocgmgfnpjjppndjkmgjaogfceg [2026-06-07]
CHR Extension: (Clickable Links) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgamelhnfokapndfdodnmfiningckjia [2024-09-15]
CHR Extension: (IDM Integration Module) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2026-09-15]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-09-15]
CHR Extension: (Webový archív) - C:\Users\Krylias\AppData\Local\Google\Chrome\User Data\Default\Extensions\obffcbmimfeagglkonmdmnhcolhjcobf [2026-06-07]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2026-02-18]
CHR HKU\S-1-5-21-578757146-292678226-1064010467-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-578757146-292678226-1064010467-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2026-02-18]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2026-02-18]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [10426224 2021-12-23] (Acronis International GmbH -> )
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1264400 2021-12-23] (Acronis International GmbH -> Acronis International GmbH)
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2025-03-21] (Adobe Inc. -> Adobe Inc.)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6382320 2024-09-17] (Acronis International GmbH -> )
S3 brlapi; C:\Windows\brltty\bin\brltty.exe [847886 2019-10-15] (Microsoft Windows -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13312824 2026-10-15] (Microsoft Corporation -> Microsoft Corporation)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R2 CmdAgentProt; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2675504 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [222768 2025-04-04] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncHelper.exe [3812712 2026-11-03] (Microsoft Corporation -> Microsoft Corporation)
R2 LightKeeperService; C:\Program Files (x86)\MSI\MSI Center\Mystic Light\LightKeeperService.exe [92768 2023-05-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe [2386280 2026-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4882992 2021-12-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2021-12-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1928184 2021-12-23] (Acronis International GmbH -> )
R2 MSI_Case_Service; C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe [74768 2024-06-06] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_Center_Service; C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe [172048 2024-07-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 Mystic_Light_Service; C:\Program Files (x86)\MSI\MSI Center\Mystic Light\Mystic_Light_Service.exe [41064 2024-04-23] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_37503b637f6a53da\Display.NvContainer\NVDisplay.Container.exe [1275624 2026-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.195.1006.0007\OneDriveUpdaterService.exe [4112232 2026-11-03] (Microsoft Corporation -> Microsoft Corporation)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [680120 2026-04-09] (Geek Software GmbH -> geek software GmbH)
R2 RTUsbSwSrvc; C:\Windows\System32\DriverStore\FileRepository\netrtwlanu.inf_amd64_0dc97ba2af82c338\RTUWPSrvcMain.exe [1026936 2026-01-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
R2 ScsiAccess; C:\Program Files (x86)\Photodex\ProShow Producer\ScsiAccess.exe [186760 2016-07-30] (Photodex Corporation -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803064 2026-06-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7393448 2021-12-23] (Acronis International GmbH -> )
S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [7095824 2021-12-23] (Acronis International GmbH -> Acronis International GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe [5609240 2026-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe [378128 2026-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 wuauserv; C:\Windows\system32\wuaueng.dll [3441152 2026-06-07] (Microsoft Windows -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [File not signed]
S0 cmdboot; C:\Windows\System32\DRIVERS\cmdboot.sys [17576 2019-10-22] (Microsoft Windows Early Launch Anti-malware Publisher -> COMODO)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [38880 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [844000 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R1 cmdhlp; C:\Windows\system32\DRIVERS\cmdhlp.sys [47104 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R3 e1dexpress; C:\Windows\System32\DriverStore\FileRepository\e1d.inf_amd64_9aec23fc8b7cff7c\e1d.sys [615552 2026-06-24] (Intel Corporation -> Intel Corporation)
R2 file_protector; C:\Windows\System32\DRIVERS\file_protector.sys [701064 2024-09-17] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [390592 2024-09-17] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 fltsrv; C:\Windows\System32\DRIVERS\fltsrv.sys [182832 2024-09-17] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 gdrv2; \??\C:\Windows\gdrv2.sys [32008 2026-06-24] (GIGA-BYTE Technology Co., Ltd. -> )
R2 IDMWFP; C:\Windows\System32\drivers\idmwfp.sys [187064 2026-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Tonec Inc.)
R1 inspect; C:\Windows\system32\DRIVERS\inspect.sys [130256 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [82968 2026-10-31] (Microsoft Windows -> Microsoft Corporation)
S1 MSIO; \??\C:\Windows\system32\drivers\MsIo64.sys [19672 2023-12-10] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 NTIOLib_CC_COMM; \??\C:\Program Files (x86)\MSI\MSI Center\Lib\SYS\NTIOLib_X64.sys [32576 2024-01-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
S3 Revoflt; C:\Windows\System32\DRIVERS\revoflt.sys [38400 2021-11-17] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
R3 RtlWlanu; C:\Windows\System32\drivers\rtwlanu.sys [12434304 2026-01-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
S3 tib; C:\Windows\system32\DRIVERS\tib.sys [883256 2024-09-17] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [171968 2024-09-17] (Acronis International GmbH -> Acronis International GmbH)
S3 tnd; C:\Windows\system32\DRIVERS\tnd.sys [693768 2024-09-17] (Acronis International GmbH -> Acronis International GmbH)
U5 UnlockerDriver5; \??\C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] (Empty Loop -> )
R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [330176 2024-09-17] (Acronis International GmbH -> Acronis International GmbH)
R0 volume_tracker; C:\Windows\System32\DRIVERS\volume_tracker.sys [243472 2024-09-17] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S4 WdAiNisDrv; C:\Windows\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-31] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [21632 2026-10-31] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [677952 2026-10-31] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [144408 2026-10-31] (Microsoft Windows -> Microsoft Corporation)
S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys (No File)
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys (No File)
S3 cpuz143; \??\C:\Windows\temp\cpuz143\cpuz143_x64.sys (No File) <==== ATTENTION
S3 cpuz145; \??\C:\Windows\temp\cpuz145\cpuz145_x64.sys (No File) <==== ATTENTION

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-11-09 13:23 - 2026-11-09 13:24 - 000043038 _____ C:\Users\Krylias\Downloads\FRST.txt
2026-11-09 13:23 - 2026-11-09 13:24 - 000000000 ____D C:\FRST
2026-11-09 13:19 - 2026-11-09 13:19 - 002458112 _____ (Farbar) C:\Users\Krylias\Downloads\FRST64.exe
2026-11-09 12:41 - 2026-11-09 12:41 - 000108689 _____ C:\Users\Krylias\Downloads\Z1118802854.pdf
2026-11-09 12:24 - 2026-11-09 12:24 - 000003462 _____ C:\Windows\system32\Tasks\CorelUpdateHelperTask-9A1B4A33D8B3AC087EC3F36977EE1FBD
2026-11-03 23:39 - 2026-11-03 23:40 - 000000000 ____D C:\Users\Krylias\Downloads\Kino revue 1-26 (1993) ročník III. (chybí čísla 1.,2.,11.,12. 22 čísel)
2026-11-03 17:44 - 2026-11-03 17:44 - 000002158 _____ C:\Users\Krylias\Desktop\JDownloader 2.lnk
2026-11-03 17:44 - 2026-11-03 17:44 - 000000000 ____D C:\Users\Krylias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2026-11-03 17:29 - 2026-11-03 17:31 - 000000000 ____D C:\Users\Krylias\AppData\Local\Webshare
2026-11-03 12:32 - 2026-11-03 12:32 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-11-03 12:32 - 2026-11-03 12:32 - 000002011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-11-02 18:17 - 2026-11-03 20:33 - 000000000 ____D C:\Users\Krylias\Downloads\fwdcvbubelka
2026-11-02 18:14 - 2026-11-02 18:14 - 008756152 _____ C:\Users\Krylias\Downloads\fwdcvbubelka.zip
2026-11-02 16:30 - 2026-11-02 16:30 - 000942810 _____ C:\Users\Krylias\Downloads\Kolektívna_zmluva_2026-2029 FINAL.pdf
2026-11-02 07:20 - 2026-11-02 07:30 - 177735352 _____ C:\Users\Krylias\Downloads\FRANTISEK SAHULA A SYNOVE VYCEPU - 2003 - Bestie Off [MP3 CBR 320].rar
2026-11-01 10:31 - 2026-11-01 10:32 - 000000000 ____D C:\Users\Krylias\Desktop\Nový priečinok (3)
2026-11-01 10:31 - 2026-11-01 10:31 - 000000000 ____D C:\Users\Krylias\Downloads\Gmail (2)
2026-11-01 10:30 - 2026-11-01 10:31 - 000000000 ____D C:\Users\Krylias\Downloads\Gmail (1)
2026-11-01 10:30 - 2026-11-01 10:30 - 008001468 _____ C:\Users\Krylias\Downloads\Gmail (1).zip
2026-11-01 10:30 - 2026-11-01 10:30 - 007022439 _____ C:\Users\Krylias\Downloads\Gmail (2).zip
2026-10-26 14:12 - 2026-10-26 14:12 - 000000000 ____D C:\Users\Krylias\Downloads\foto (1)
2026-10-26 14:10 - 2026-10-26 14:13 - 000000000 ____D C:\Users\Krylias\Downloads\foto
2026-10-26 00:12 - 2026-10-26 00:13 - 000000000 ____D C:\Users\Krylias\Downloads\Celý život se zabýval biblickými tématy, říká o Karlu Krylovi... _ Témata
2026-10-26 00:11 - 2026-10-26 00:11 - 000000000 ____D C:\Users\Krylias\Downloads\Detail fota
2026-10-26 00:06 - 2026-10-26 00:09 - 000000000 ____D C:\Users\Krylias\Downloads\GALERIE_ Bohumil Pečinka_ Ukradený Karel Kryl. Jaký byl legendární písničkář__ FOTO 1 _ Reflex.cz
2026-10-26 00:05 - 2026-10-26 00:05 - 000000000 ____D C:\Users\Krylias\Downloads\TS63ca68_BratricekKarel_4_foto_Artcam.JPG (541×840)
2026-10-26 00:00 - 2026-10-26 00:04 - 000000000 ____D C:\Users\Krylias\Downloads\GALERIE_ Karel Kryl přinášel krajanům v těžkých časech naději a rozhřešení_ FOTO 1 _ Reflex.cz
2026-10-24 23:49 - 2026-10-24 23:49 - 000160861 _____ C:\Users\Krylias\Downloads\POL_Poznań_flag.svg
2026-10-24 23:46 - 2026-10-24 23:46 - 000000000 ____D C:\Users\Krylias\Downloads\Na výlete k susedom_ Poľská Poznaň ponúka pútavú históriu aj gastronomické pochúťky - galéria _ Dromedár.sk
2026-10-24 22:09 - 2026-10-24 22:09 - 000000000 ____D C:\Users\Krylias\Downloads\Ahoj Občani! Karel Kryl
2026-10-24 22:05 - 2026-10-24 22:06 - 000000000 ____D C:\Users\Krylias\Downloads\Zajímavé fotky z celého světa 1846_14871 _ Zonerama.com
2026-10-24 22:03 - 2026-10-24 22:04 - 000000000 ____D C:\Users\Krylias\Downloads\Studenti a osobnosti 394_886 _ Zonerama.com
2026-10-24 22:01 - 2026-10-24 22:01 - 000000000 ____D C:\Users\Krylias\Downloads\Zajímavé fotky z celého světa 1847_14871 _ Zonerama.com
2026-10-24 21:53 - 2026-10-24 21:53 - 000000000 ____D C:\Users\Krylias\Downloads\Tak jsem je videl kdysi (1)
2026-10-24 21:52 - 2026-10-24 21:52 - 105160111 _____ C:\Users\Krylias\Downloads\Tak jsem je videl kdysi (1).zip
2026-10-24 21:43 - 2026-10-24 21:43 - 000000000 ____D C:\Users\Krylias\Downloads\1989 Wroclav (1)
2026-10-24 21:42 - 2026-10-24 21:42 - 012636328 _____ C:\Users\Krylias\Downloads\1989 Wroclav (1).zip
2026-10-24 18:07 - 2026-10-24 18:07 - 000199208 _____ C:\Users\Krylias\Desktop\Karel Kryl - Telč 1992.webp
2026-10-24 15:06 - 2026-10-25 11:23 - 000000000 ____D C:\Users\Krylias\Desktop\MiniCD Bonus - Rosyjskie pisene
2026-10-24 11:45 - 2026-10-24 11:46 - 000000000 ____D C:\Users\Krylias\Desktop\Pohladnice
2026-10-24 08:35 - 2026-10-24 08:37 - 000000000 ____D C:\Users\Krylias\Desktop\Heslá export v Chrome !!! 24.10. 2026
2026-10-23 11:01 - 2026-10-23 11:01 - 000000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2026-10-23 11:01 - 2026-10-23 11:01 - 000000000 ____D C:\Users\DefaultAppPool
2026-10-23 11:01 - 2024-09-16 17:02 - 000000000 ___RD C:\Users\DefaultAppPool\OneDrive
2026-10-23 11:01 - 2019-12-07 10:31 - 000000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows
2026-10-16 00:43 - 2026-10-16 00:43 - 000004152 _____ C:\Users\Krylias\Desktop\Výstava v Prahe Ahoj, občani.lnk
2026-10-15 22:51 - 2026-10-15 22:51 - 006559230 _____ C:\Users\Krylias\Downloads\OPPCP032024 - OPP CESTOVNÉ ZP 03 2024.pdf
2026-10-15 22:51 - 2026-10-15 22:51 - 001773906 _____ C:\Users\Krylias\Downloads\OPPASZP012024 - OPP ZDRAVOTNÉ AS ZP 01 2024.pdf
2026-10-15 22:51 - 2026-10-15 22:51 - 000157037 _____ C:\Users\Krylias\Downloads\Sprievodný list k poistke_RP06_WOP_základný.pdf
2026-10-15 22:50 - 2026-10-15 22:50 - 000159464 _____ C:\Users\Krylias\Downloads\Poistka k RP0625.pdf
2026-10-12 17:11 - 2026-10-12 17:11 - 000040157 _____ C:\Users\Krylias\Downloads\produktovy_list_univerzalni-mrizka-mora_20261012181125_667199.pdf
2026-10-12 17:03 - 2026-10-12 17:03 - 000000000 ____D C:\Users\Krylias\AppData\Roaming\Microsoft\QuickStyles

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-11-09 13:20 - 2024-09-16 20:50 - 000000000 ____D C:\Users\Krylias\Desktop\CCleaner Professional
2026-11-09 13:13 - 2024-09-15 16:05 - 000000000 ____D C:\Windows\system32\SleepStudy
2026-11-09 12:47 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-11-09 12:33 - 2024-09-15 17:30 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-11-09 12:32 - 2026-08-19 09:18 - 000002137 _____ C:\Users\Krylias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-11-09 12:32 - 2024-09-15 17:30 - 000001077 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-11-09 12:32 - 2024-09-15 17:30 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-11-09 12:32 - 2024-09-15 17:30 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-11-09 12:22 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2026-11-09 12:22 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\AppReadiness
2026-11-09 12:20 - 2023-12-04 03:47 - 000000000 ____D C:\Windows\SystemTemp
2026-11-07 12:08 - 2024-09-15 16:14 - 000000000 ____D C:\ProgramData\NVIDIA
2026-11-07 12:05 - 2024-09-15 16:05 - 000002520 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-11-03 19:43 - 2026-07-11 15:33 - 000742908 _____ C:\Windows\system32\perfh005.dat
2026-11-03 19:43 - 2026-07-11 15:33 - 000157028 _____ C:\Windows\system32\perfc005.dat
2026-11-03 19:43 - 2026-07-11 13:27 - 000149484 _____ C:\Windows\system32\perfh01B.dat
2026-11-03 19:43 - 2026-07-11 13:27 - 000033528 _____ C:\Windows\system32\perfc01B.dat
2026-11-03 19:43 - 2024-09-15 16:11 - 001953028 _____ C:\Windows\system32\PerfStringBackup.INI
2026-11-03 19:43 - 2019-12-07 10:13 - 000000000 ____D C:\Windows\INF
2026-11-03 19:38 - 2026-07-11 15:34 - 000008192 ___SH C:\DumpStack.log.tmp
2026-11-03 19:38 - 2024-09-15 20:35 - 000000000 ____D C:\Users\Krylias\AppData\Local\JDownloader 2.0
2026-11-03 19:38 - 2024-09-15 16:05 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-11-03 19:38 - 2019-12-07 10:03 - 000524288 _____ C:\Windows\system32\config\BBI
2026-11-03 17:48 - 2024-09-16 17:02 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-11-03 17:47 - 2026-06-28 14:40 - 000240274 _____ C:\Windows\system32\Drivers\fvstore.dat
2026-11-03 17:14 - 2024-09-15 16:43 - 000000000 ____D C:\Users\Krylias\AppData\Roaming\vlc
2026-11-03 17:13 - 2024-09-15 16:36 - 000002335 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-11-03 16:36 - 2024-09-16 15:37 - 000000349 _____ C:\Users\Public\Documents\PCLECHAL.INI
2026-11-03 12:32 - 2026-06-07 09:19 - 000003540 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-578757146-292678226-1064010467-1001
2026-11-03 12:32 - 2024-09-15 16:17 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-578757146-292678226-1064010467-1001
2026-11-02 16:51 - 2024-09-15 16:05 - 000003632 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-11-02 16:51 - 2024-09-15 16:05 - 000003560 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-11-02 07:40 - 2026-09-15 06:48 - 000000000 ____D C:\Users\Krylias\AppData\Roaming\DMCache
2026-11-02 07:23 - 2026-06-08 11:33 - 000000000 ____D C:\Users\Krylias\Downloads\Compressed
2026-11-01 18:31 - 2024-09-15 16:27 - 000000000 ____D C:\Users\Krylias\AppData\Roaming\Microsoft\Word
2026-11-01 18:15 - 2024-09-16 21:55 - 000000000 ____D C:\Users\Krylias\AppData\Local\Deployment
2026-10-31 23:29 - 2024-09-15 16:05 - 000000000 ____D C:\Windows\system32\Drivers\wd
2026-10-31 00:57 - 2024-09-15 16:15 - 000000000 ____D C:\Users\Krylias\AppData\Local\D3DSCache
2026-10-26 14:36 - 2026-07-11 14:17 - 000000000 ____D C:\Users\Krylias\AppData\Roaming\AIMP
2026-10-26 14:17 - 2026-08-27 16:42 - 000000000 ____D C:\Users\Krylias\Desktop\Mora sporak
2026-10-25 19:02 - 2026-08-27 19:44 - 000000000 ____D C:\Users\Krylias\Desktop\1989 Gdansk Oliwia s Antoninou Krzyston
2026-10-25 15:20 - 2026-08-07 17:45 - 000000000 ____D C:\Users\Krylias\AppData\Roaming\nerostart
2026-10-25 14:46 - 2026-08-27 21:25 - 000000000 ____D C:\Users\Krylias\Desktop\1989 11 06 Poznan s Antoninou Krzyston
2026-10-25 11:53 - 2026-08-26 16:15 - 000001480 _____ C:\Users\Krylias\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2026-10-24 23:00 - 2026-06-07 15:49 - 000000000 ____D C:\Users\Krylias\AppData\Roaming\audacity
2026-10-24 22:56 - 2026-09-15 06:48 - 000001094 _____ C:\Users\Krylias\Desktop\Internet Download Manager.lnk
2026-10-24 22:56 - 2026-07-18 14:50 - 000001102 _____ C:\Users\Krylias\Desktop\RarmaRadio.lnk
2026-10-24 22:56 - 2026-06-07 19:54 - 000000988 _____ C:\Users\Krylias\Desktop\XnView.lnk
2026-10-24 22:56 - 2024-09-16 19:57 - 000000960 _____ C:\Users\Krylias\Desktop\VLC player.lnk
2026-10-24 22:56 - 2024-09-16 00:32 - 000001712 _____ C:\Users\Krylias\Desktop\Photoshop.lnk
2026-10-24 22:56 - 2024-09-16 00:08 - 000001165 _____ C:\Users\Krylias\Desktop\PhotoFiltre Studio X.lnk
2026-10-24 22:56 - 2024-09-15 23:54 - 000001274 _____ C:\Users\Krylias\Desktop\Media Player Classic.lnk
2026-10-24 22:56 - 2024-09-15 23:32 - 000001441 _____ C:\Users\Krylias\Desktop\GoldWave.lnk
2026-10-24 22:56 - 2024-09-15 22:13 - 000001777 _____ C:\Users\Krylias\Desktop\DaVinci Resolve.lnk
2026-10-24 22:56 - 2024-09-15 20:25 - 000001463 _____ C:\Users\Krylias\Desktop\StrongDC.lnk
2026-10-24 22:56 - 2024-09-15 20:23 - 000001512 _____ C:\Users\Krylias\Desktop\MP3Gain.lnk
2026-10-24 22:56 - 2024-09-15 20:11 - 000001124 _____ C:\Users\Krylias\Desktop\mp3DirectCut.lnk
2026-10-24 22:56 - 2024-09-15 20:03 - 000001624 _____ C:\Users\Krylias\Desktop\VideoReDo6.lnk
2026-10-24 22:56 - 2024-09-15 19:55 - 000001544 _____ C:\Users\Krylias\Desktop\EZCD Converter.lnk
2026-10-24 22:56 - 2024-09-15 17:26 - 000001043 _____ C:\Users\Krylias\Desktop\IrfanView.lnk
2026-10-24 22:56 - 2024-09-15 16:28 - 000002513 _____ C:\Users\Krylias\Desktop\Excel.lnk
2026-10-24 22:56 - 2024-09-15 16:27 - 000002541 _____ C:\Users\Krylias\Desktop\Word.lnk
2026-10-24 19:01 - 2026-06-07 11:25 - 000000000 ____D C:\Users\Krylias\Desktop\Epson tlačiareň
2026-10-24 16:05 - 2026-08-15 16:51 - 000000000 ____D C:\Users\Krylias\AppData\Roaming\Mp3tag
2026-10-24 12:23 - 2026-06-08 11:33 - 000000000 ____D C:\Users\Krylias\Downloads\Video
2026-10-22 09:05 - 2026-06-20 19:07 - 000000000 ____D C:\Users\Krylias\AppData\Local\ElevatedDiagnostics
2026-10-16 16:21 - 2024-09-15 16:24 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2026-10-15 08:18 - 2024-09-15 16:44 - 000000000 ____D C:\Windows\system32\MRT
2026-10-15 08:13 - 2024-09-15 16:44 - 230303336 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2026-10-12 17:51 - 2024-09-15 16:27 - 000000000 ____D C:\Users\Krylias\AppData\Roaming\Microsoft\Office
2026-10-12 14:02 - 2026-08-07 17:44 - 000000000 ____D C:\Windows\system32\Tasks\SystemOptimization

==================== Files in the root of some directories ========

2024-09-16 15:38 - 2026-07-22 23:13 - 000000403 _____ () C:\Users\Krylias\AppData\Roaming\DESKTOP-KH76570.MTBF.txt
2024-09-15 19:29 - 2026-06-07 09:58 - 000003954 _____ () C:\Users\Krylias\AppData\Roaming\IDMdefextmap.dat
2024-09-15 19:29 - 2024-08-14 20:17 - 000004608 _____ () C:\Users\Krylias\AppData\Roaming\IDMidmfc.dat
2024-09-15 19:29 - 2026-06-07 09:58 - 000003954 _____ () C:\Users\Krylias\AppData\Roaming\IDMurlexclist.dat
2026-08-26 16:15 - 2026-10-25 11:53 - 000001480 _____ () C:\Users\Krylias\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2024-09-16 15:38 - 2024-09-16 15:38 - 000003584 _____ () C:\Users\Krylias\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2026-06-23 11:39 - 2026-06-23 11:39 - 000000017 _____ () C:\Users\Krylias\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Čaroděj ze Země KOZ · #2 Příspěvek od **Čaroděj ze Země KOZ** » Dnes 14:21

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-11-2026
Ran by Krylias (09-11-2026 13:25:17)
Running from C:\Users\Krylias\Downloads
Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) (2024-09-15 15:07:01)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-578757146-292678226-1064010467-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-578757146-292678226-1064010467-503 - Limited - Disabled)
Guest (S-1-5-21-578757146-292678226-1064010467-501 - Limited - Disabled)
Krylias (S-1-5-21-578757146-292678226-1064010467-1001 - Administrators - Enabled) => C:\Users\Krylias
WDAGUtilityAccount (S-1-5-21-578757146-292678226-1064010467-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: COMODO Firewall (Enabled) {3D87FB90-B561-70B4-3B0B-BCEFE7656ABC}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acronis True Image (HKLM-x32\...\{5B755A36-60DF-40E9-B490-D8A93421D547}) (Version: 24.8.38600 - Acronis) Hidden
Acronis True Image (HKLM-x32\...\{5B755A36-60DF-40E9-B490-D8A93421D547}Visible) (Version: 24.8.38600 - Acronis)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1033-FFFF-7760-BC15014EA700}) (Version: 26.001.21691 - Adobe)
Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.12 - Adobe Systems Incorporated)
Adobe Photoshop 2024 (HKLM-x32\...\PHSP_25_1) (Version: 25.1.0.120 - Adobe Inc.)
AIMP (HKLM\...\AIMP) (Version: 5.40.2722 - Artem Izmaylov)
Audacity 3.7.7 (HKLM\...\Audacity_is1) (Version: 3.7.7 - Audacity Team)
Blackmagic RAW Common Components (HKLM\...\{BF73F11D-8A70-438B-A357-38E1F1A62164}) (Version: 2.8 - Blackmagic Design)
COMODO Firewall (HKLM\...\{529CC629-B436-4886-B322-4BE75B97783D}) (Version: 12.2.2.8012 - COMODO Security Solutions Inc.) Hidden
COMODO Firewall (HKLM\...\COMODO Internet Security) (Version: 12.2.2.8012 - COMODO Security Solutions Inc.)
Corel Graphics - Windows Shell Extension (HKLM\...\_{D22617C7-6FEA-4E5B-9B0A-EFC6610D9925}) (Version: 26.0.0.101 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\{D22617C7-6FEA-4E5B-9B0A-EFC6610D9925}) (Version: 26.0.101 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{AE9D2AA4-9750-4A67-A08C-12DF05CA6D39}) (Version: 26.0.101 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM (x64) (HKLM\...\{00C67A4C-4B73-4C69-AC8F-254B4A051139}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content BR (x64) (HKLM\...\{0820BC6F-5B0D-4315-AD95-E9CBCDE57ECC}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content CS (x64) (HKLM\...\{B42E0872-A1DE-4A0B-823F-1B198B1B10A5}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content CT (x64) (HKLM\...\{6E1C0461-4314-4B6C-94AA-603417A8672F}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content CZ (x64) (HKLM\...\{8E4A5241-9B14-45B3-864F-E7C103CF58C8}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content DE (x64) (HKLM\...\{3D4254EE-CE0C-472C-A6E3-BA192A1F795A}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content EN (x64) (HKLM\...\{C5A4679D-2D59-4EDF-94F7-C2ADECDFB201}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content ES (x64) (HKLM\...\{710C2A18-830C-4F75-AB1B-1F2EF9C22DD1}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content FR (x64) (HKLM\...\{CA66C397-F5D2-4EEA-90ED-84982CF7EA41}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content IT (x64) (HKLM\...\{C5CD95B4-C7C8-4054-8A3E-F6881315C7EF}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content JP (x64) (HKLM\...\{A5DDDA42-10AD-4EB9-8703-D31E010A6F80}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content NL (x64) (HKLM\...\{5A988423-224E-46C5-946F-A7EEE2EAFC8A}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content PL (x64) (HKLM\...\{BCB42306-CB07-47EB-965E-DB11D4D37649}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content RU (x64) (HKLM\...\{02498EC5-33F2-445F-8B92-6605C95B7F65}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content SV (x64) (HKLM\...\{0B2EE50F-4C61-4947-ACA6-4EE10BD2B929}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - IPM Content TR (x64) (HKLM\...\{6B307081-D924-48AB-879A-85AF3B88730C}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 - Writing Tools (x64) (HKLM\...\{D9445B8C-F5B3-4661-AB83-19CC138AB13F}) (Version: 26.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2025 (HKLM\...\_{C9936266-AD8C-4AF9-B597-F2A2FD99BB1B}) (Version: 26.1.0.143 - Corel Corporation)
DaVinci Resolve (HKLM\...\{795B7063-E557-467B-B0CB-EEB7F36D442A}) (Version: 18.1.30008 - Blackmagic Design)
DaVinci Resolve Control Panels (HKLM\...\{7FA59352-9416-49BB-A98F-FDF3C95C8214}) (Version: 2.0.6.0 - Blackmagic Design)
Easy Photo Scan (HKLM-x32\...\{103EAF85-E788-4A6C-836F-F2C637A40B31}) (Version: 1.00.0019 - Seiko Epson Corporation)
ENE Video Capture Box HAL (HKLM\...\{A096611D-BA11-4A1A-8D09-0A0462D7C8F2}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE Video Capture Box HAL (HKLM-x32\...\{974259bf-3ed1-4cd6-9ed1-40c7f601a786}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden
ENE_EHD_M2_HAL (HKLM-x32\...\{c1d017c2-8846-4000-9254-5689eccd462e}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden
ENE_External_Device_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.14.0 - ENE Tech) Hidden
ENE_External_Device_HAL (HKLM-x32\...\{5d3c3229-f8ae-4c6c-9db7-7231adc1ff08}) (Version: 1.0.14.0 - ENE Tech) Hidden
ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden
ENE_MousePad_HAL (HKLM-x32\...\{c2c794a4-7986-4c45-884d-d4ca43b88df9}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM-x32\...\{c662a481-d76a-4188-95d2-6eb4ffd55542}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.11 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{F2B10AC1-7566-4996-BDB1-D9C7516F59F0}) (Version: 3.11.85 - Seiko Epson Corporation)
Epson Manuals (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 2.0.4.0 - Seiko Epson Corporation)
Epson Photo+ (HKLM-x32\...\{7567FF8A-79D8-4B03-B03C-4EBBB7AC9433}) (Version: 4.0.4.0 - Seiko Epson Corporation)
Epson Print CD (HKLM-x32\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.50.01 - Seiko Epson Corporation)
Epson Printer Connection Checker (HKLM-x32\...\{D9B5302D-6EB7-4735-AA44-4416796B6652}) (Version: 3.4.4.0 - Seiko Epson Corporation)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation)
EPSON Scan OCR Component (HKLM-x32\...\{C37347BC-7549-47A6-8E7A-806A6751981E}) (Version: 3.00.06 - Seiko Epson Corporation)
EPSON Scan PDF Extensions (HKLM-x32\...\{50FACF2A-012A-46FC-A9A5-BD64660961E3}) (Version: 1.03.02.02 - Seiko Epson Corporation)
Epson ScanSmart (HKLM-x32\...\{DBC51435-B111-40AF-A25A-9E8FAD6F77A4}) (Version: 3.7.20 - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{7916C864-A6CA-43D8-B8E6-ECC712272055}) (Version: 5.1.0 - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{DB5EDF09-A7A7-47FA-B365-A7500A472878}) (Version: 3.3.1.0 - Seiko Epson Corporation)
EZ CD Audio Converter (HKLM-x32\...\EZ CD Audio Converter) (Version: 11.0.2 - Poikosoft)
foobar2000 v2.26 preview 2026-07-09 (x64) (HKLM\...\foobar2000 (x64)) (Version: 2.26 preview 2026-07-09 - Peter Pawlowski)
Ghostscript GPL 10.03.1 (Msi Setup) (HKLM\...\_{476FD34A-6D96-497A-9B55-63F3A9A8B3C0}) (Version: 10.03.1 - Corel Corporation)
Ghostscript GPL 10.03.1 (Msi Setup) (HKLM\...\{476FD34A-6D96-497A-9B55-63F3A9A8B3C0}) (Version: 10.03.1 - Corel Corporation) Hidden
GoldWave v6.11 (HKLM\...\GoldWave v6.11) (Version: 6.11 - GoldWave Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 156.0.8078.80 - Google LLC)
HandBrake 1.11.2 (HKLM-x32\...\HandBrake) (Version: 1.11.2 - )
Infatica P2B Network (HKLM-x32\...\{C989163F-E0E5-4DE3-B7F5-46C77F411451}_is1) (Version: 1.1.4.0 - )
Inpaint 11.0.1 (HKLM-x32\...\{4A49904F-72DF-41D5-9B60-FBCF9F86F8EC}_is1) (Version: 11.0.1 - Inpaint)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: 6.43.10 - Tonec Inc.)
IrfanView 4.67 (64-bit) (HKLM\...\IrfanView64) (Version: 4.67 - Irfan Skiljan)
Java 8 Update 491 (64-bit) (HKLM\...\{71024AE4-039E-4CA4-87B4-2F64180491F0}) (Version: 8.0.4910.10 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2-1) (Version: 2.0.260331 - AppWork GmbH)
JDownloader 2 (HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
K-Lite Mega Codec Pack 19.7.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 19.7.5 - KLCP)
MediaInfo 26.05 (HKLM\...\MediaInfo) (Version: 26.05 - MediaArea.net)
Microsoft .NET Host - 10.0.8 (x64) (HKLM\...\{B57D6467-F8D0-45AD-AE54-0CF1B28B9982}) (Version: 80.32.52183 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 10.0.8 (x64) (HKLM\...\{D5E1F20D-D271-483B-8963-1360DE7F28FF}) (Version: 80.32.52183 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 10.0.8 (x64) (HKLM\...\{455C1E9B-235E-4724-B36E-2C33FDA8BD1F}) (Version: 80.32.52183 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 157.0.4341.42 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 157.0.4341.42 - Microsoft Corporation) Hidden
Microsoft Office 2019 Professional Plus - sk-sk (HKLM\...\ProPlus2019Retail - sk-sk) (Version: 16.0.19127.20860 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - cs-cz (HKLM\...\ProPlus2019Retail - cs-cz) (Version: 16.0.19127.20860 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.195.1006.0007 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual Basic for Applications 7.1 (x64) (HKLM\...\{34A00A5E-1987-483E-8110-31707461867D}) (Version: 7.1.11.35 - Microsoft Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) English (HKLM\...\{7C93FEF0-A7F3-4C8C-AB5F-B3398C300281}) (Version: 7.1.11.35 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}) (Version: 10.0.50908 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2022 (HKLM-x32\...\{5451d67a-bba3-400d-9705-96fb24f27192}) (Version: 17.0.33529 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2022 x64 Hosting Support (HKLM\...\{2472E763-D716-3A63-ACC5-FFAE11F05B71}) (Version: 17.0.33529 - Microsoft Corporation) Hidden
Microsoft Visual Studio Tools for Applications 2022 x86 Hosting Support (HKLM-x32\...\{86B4A90B-3A22-302E-8407-D83DF8D427F7}) (Version: 17.0.33529 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 10.0.8 (x64) (HKLM\...\{FF569AC6-1EA2-422C-9E46-F013FDDC4776}) (Version: 80.32.52183 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime 10.0.8 (x64) (HKLM-x32\...\{044C9B3D-6B2E-4F02-BA14-700EE8ECE6BF}) (Version: 10.0.8.50000 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox (x64 sk) (HKLM\...\Mozilla Firefox) (Version: 159.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 130.0 - Mozilla)
Mp3tag v3.35.1 (HKLM\...\Mp3tag) (Version: 3.35.1 - Florian Heidenreich)
MSI Center SDK (HKLM-x32\...\{15289038-41BE-48F8-B8B9-0B1021D3089E}}_is1) (Version: 3.2024.0814.01 - MSI)
MyDVD Content Pack 1 (HKLM-x32\...\{ADCF7AE3-8E36-4B80-9460-66B74B56927F}) (Version: 1.00.0000 - Corel Corporation)
MyDVD Content Pack 2 (HKLM-x32\...\{B9987701-F119-46FA-BFF1-A8B593BFAF9E}) (Version: 1.00.0000 - Corel Corporation)
Nero Burning ROM & Express 2025 (HKLM-x32\...\Nero Burning ROM 2025) (Version: 27.0.1.3 - Nero AG)
Nero CoverDesigner (HKLM-x32\...\Nero CoverDesigner) (Version: 28.5.1.3 - Nero AG)
Nero Info (HKLM-x32\...\Nero Info) (Version: 28.5.1.1 - Nero AG)
Nero Start (HKLM-x32\...\Nero Common) (Version: 28.5.95.0 - Nero AG)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.6.9 - Notepad++ Team)
NVIDIA Grafický ovládač 582.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 582.66 - NVIDIA Corporation)
NVIDIA Softvér systému s podporou technológie PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
Odinštalovať tlačiareň EPSON L8180 Series (HKLM\...\EPSON L8180 Series) (Version: - Seiko Epson Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.19127.20800 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.19127.20800 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.19127.20800 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.14026.20302 - Microsoft Corporation) Hidden
PDF24 Creator 11.30.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.30.0 - Geek Software GmbH)
PDFCreator (HKLM\...\{6F668A7E-FD30-4B9F-A8CD-FC3A0F9AF32A}) (Version: 5.3.1 - Avanquest pdfforge GmbH)
Photodex Presenter (HKLM-x32\...\Photodex Presenter) (Version: - Photodex Corporation)
PhotoFiltre Studio X (HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\PhotoFiltre Studio X) (Version: - )
Pinnacle Studio 24 (HKLM\...\{0F0E21A5-6F97-4AA7-B69A-E4F9D7AFBD29}) (Version: 24.0.1.183 - Corel Corporation)
Port Forward Network Utilities (HKLM-x32\...\{88B1D36C-7B70-4C48-8D2F-AAB956ECF4C3}) (Version: 3.0.16 - Portforward, LLC)
ProShow Producer (HKLM-x32\...\ProShow Producer) (Version: - Photodex Corporation)
ProShow Producer version 8.0.3648 (HKLM-x32\...\{5FFCED89-D154-462E-B9EB-9A8D26A7C027}_is1) (Version: 8.0.3648 - Photodex)
RarmaRadio 2.77.9 (HKLM-x32\...\RarmaRadio_is1) (Version: - RaimerSoft)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8186 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 5.3.0 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 5.3.0 - VS Revo Group, Ltd.)
RonyaSoft CD DVD Label Maker 3.02 (HKLM-x32\...\RonyaSoft CD DVD Label Maker) (Version: 3.02 - RonyaSoft)
Solid Converter v10 (HKLM-x32\...\{197C1528-E2AD-4DFC-8177-4BB5557A01F9}_is1) (Version: 10.1.11064.4304 - Solid Documents)
SolidWordAddIn (HKLM-x32\...\{ddad9751-a580-432a-a4c2-893b44e4b0ba}_is1) (Version: 10.1.11064.4304 - Solid Documents)
Speccy (HKLM\...\Speccy) (Version: 1.33 - Piriform)
StrongDC++ 2.41 (HKLM-x32\...\StrongDC++) (Version: 2.41 - Big Muscle)
Topaz Video AI (HKLM\...\{E31A7449-1883-4E13-87C5-483323FB3B0E}) (Version: 7.1.5 - Topaz Labs LLC)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.03 - Ghisler Software GmbH)
TP-Link Archer T4U Plus Driver (HKLM-x32\...\{56214C11-9B9E-4B22-8AB1-DCF9DD604A15}) (Version: 2.1.0 - TP-Link)
TSR Watermark Image software version 3.6.0.9 (HKLM-x32\...\TSR Watermark Image_is1) (Version: 3.6.0.9 - TSR Software)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
UXP WebView Support (HKLM-x32\...\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.)
Verbatim_SureFireGaming_Product (HKLM\...\{35CB65C6-A7E3-4EE7-AD40-738D70A72164}) (Version: 1.0.3.11 - Verbatim) Hidden
Verbatim_SureFireGaming_Product (HKLM-x32\...\{d601832a-0d94-46ce-9b19-78e8a5887313}) (Version: 1.0.3.11 - Verbatim) Hidden
VideoReDo TVSuite Version 6.61.3.821 (HKLM-x32\...\VideoReDo6_is1) (Version: - DRD Systems, Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)
WD Discovery (HKLM-x32\...\WDDiscovery) (Version: 5.0.589 - Western Digital Technologies, Inc.)
WD P40 Game Drive (HKLM\...\{EE55DBAE-ECDD-4ADD-AAB5-23DE848B0996}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden
WD P40 Game Drive (HKLM-x32\...\{72b1a866-fc31-4381-bff3-fa6cd8823777}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden
WD SES Driver Setup (HKLM-x32\...\{D9ABF771-729C-471F-A6DF-1010527DB376}) (Version: 2.1.0 - Western Digital) Hidden
WD_BLACK AN1500 (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.12.0 - ENE TECHNOLOGY INC.) Hidden
WD_BLACK AN1500 (HKLM-x32\...\{9c94735f-73fd-4b0f-9ddb-8be7b3cc4681}) (Version: 1.0.12.0 - ENE TECHNOLOGY INC.) Hidden
WD_BLACK D50 (HKLM\...\{BDE43F26-5917-44F8-B86A-F1D9A6B80B32}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden
WD_BLACK D50 (HKLM-x32\...\{a1d1ba00-92b7-4a99-8ebd-65b25c0e9e44}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
WinDjView 2.1 (HKLM\...\WinDjView) (Version: 2.1 - Andrew Zhezherun)
WinRAR 7.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.01.0 - win.rar GmbH)
XnView (HKLM-x32\...\XnView_is1) (Version: 2.52.2 - Pierre-e Gougelet)

Packages:
=========
Local AI Manager for Microsoft 365 -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\AI [2026-10-16] ()
Microsoft.Office.ActionsServer -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\ActionsServer [2026-10-16] ()
MSI Center -> C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.MSICenter_2.0.75.0_x64__kzh8wxbdkxb8p [2026-11-03] (MICRO-STAR INTERNATIONAL CO., LTD) [Startup Task]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2026-06-07] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16 [2026-10-16] ()
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2026-06-24] (Realtek Semiconductor Corp)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-578757146-292678226-1064010467-1001_Classes\CLSID\{04271989-C4D2-ED1E-A54C-4C885DFD242D} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-578757146-292678226-1064010467-1001_Classes\CLSID\{1a46400f-4c81-802a-c2c1-1e9a687a9340}\localserver32 -> C:\Program Files\HandBrake\HandBrake.exe (HandBrake Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-578757146-292678226-1064010467-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-578757146-292678226-1064010467-1001_Classes\CLSID\{E7143B9B-C977-4105-A0C6-08CA5E1966A9}\localserver32 -> "c:\program files\musehub\current\musehub.exe" ----AppNotificationActivated: => No File
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2021-03-02] (Tonec Inc. -> Tonec FZE)
ShellIconOverlayIdentifiers: [ AcronisDrive] -> {5D74FD4B-4EFB-4586-8022-8637BBE40970} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_24_8_38600.dll [2021-12-23] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [ AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_24_8_38600.dll [2021-12-23] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [ AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_24_8_38600.dll [2021-12-23] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [ AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_24_8_38600.dll [2021-12-23] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-09-15] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-09-15] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-09-15] (Adobe Inc. -> )
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-11-03] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-09-15] (Adobe Inc. -> )
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files\AIMP\System\aimp_menu64.dll [2026-07-11] (IP Izmaylov Artem Andreevich -> AIMP DevTeam)
ContextMenuHandlers1: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
ContextMenuHandlers1: [EzCd] -> {E46D6DC6-9707-43a9-BDBB-0BDBDD096F90} => C:\Program Files\EZ CD Audio Converter\ezcd64.dll [2022-09-23] (Poikosoft -> Poikosoft)
ContextMenuHandlers1: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files\Mp3tag\Mp3tagShell64.dll [2026-07-01] (Florian Heidenreich -> Florian Heidenreich)
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Program Files\PDFCreator\PDFCreatorShell.DLL [2022-10-04] (pdfforge GmbH -> pdfforge GmbH)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
ContextMenuHandlers2: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files\Mp3tag\Mp3tagShell64.dll [2026-07-01] (Florian Heidenreich -> Florian Heidenreich)
ContextMenuHandlers3: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] (Empty Loop -> )
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-11-03] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files\AIMP\System\aimp_menu64.dll [2026-07-11] (IP Izmaylov Artem Andreevich -> AIMP DevTeam)
ContextMenuHandlers4: [EzCd] -> {E46D6DC6-9707-43a9-BDBB-0BDBDD096F90} => C:\Program Files\EZ CD Audio Converter\ezcd64.dll [2022-09-23] (Poikosoft -> Poikosoft)
ContextMenuHandlers4: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files\Mp3tag\Mp3tagShell64.dll [2026-07-01] (Florian Heidenreich -> Florian Heidenreich)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-11-03] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_37503b637f6a53da\nvshext.dll [2026-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-09-15] (Adobe Inc. -> )
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers6: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
ContextMenuHandlers6: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] (Empty Loop -> )
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\system32\x264vfw64.dll [3799552 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\system32\lagarith.dll [148992 2011-12-07] () [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\system32\xvidvfw.dll [310784 2019-12-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\system32\ac3acm.acm [180736 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [vidc.mjpg] => pvmjpgx40.dll
HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\SysWOW64\x264vfw.dll [3850240 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] () [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [284160 2019-12-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\ac3acm.acm [122880 2012-07-21] (fccHandler) [File not signed]

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2026-06-20 20:56 - 2026-06-20 20:56 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll
2021-12-23 12:23 - 2024-09-17 01:05 - 024814984 _____ (Acronis International GmbH -> ) [File not signed] [File is in use] C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers.dll
2026-06-24 18:21 - 2026-06-24 18:21 - 000030720 _____ (Adobe Systems Inc.) [File not signed] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\sk_sk\Acrobat Elements\ContextMenuShim64.sky
2024-09-15 23:53 - 2012-07-21 11:55 - 000180736 _____ (fccHandler) [File not signed] C:\Windows\SYSTEM32\ac3acm.acm
2026-08-07 17:44 - 2026-08-07 17:44 - 003709440 _____ (Nero AG) [File not signed] C:\Program Files (x86)\Nero\Nero 2025\Nero Burning ROM\x64\NeroShellExt.dll
2024-09-15 20:39 - 2024-09-15 20:39 - 000196096 _____ (pdfforge GmbH) [File not signed] C:\Windows\System32\pdfcmon.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:0888F409 [143]
AlternateDataStreams: C:\ProgramData\TEMP:3440EB47 [141]
AlternateDataStreams: C:\ProgramData\TEMP:66633281 [152]
AlternateDataStreams: C:\ProgramData\TEMP:8934AEBA [148]
AlternateDataStreams: C:\ProgramData\TEMP:93433455 [158]
AlternateDataStreams: C:\ProgramData\TEMP:EFDFF94D [344]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

SearchScopes: HKU\S-1-5-21-578757146-292678226-1064010467-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2021-11-07] (Tonec Inc. -> Internet Download Manager, Tonec Inc.)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_491\bin\ssv.dll [2026-03-30] (Oracle America, Inc. -> Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_491\bin\jp2ssv.dll [2026-03-30] (Oracle America, Inc. -> Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Incorporated)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2021-11-07] (Tonec Inc. -> Internet Download Manager, Tonec Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Incorporated)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 10:14 - 2024-09-17 01:06 - 000001361 ___SH C:\Windows\system32\drivers\etc\hosts
127.0.0.1 license.piriform.com
127.0.0.1 alpha-crap.ff.avast.com
127.0.0.1 ip-info.ff.avast.com
127.0.0.1 ipm-provider.ff.avast.com
127.0.0.1 license-api.ccleaner.com
127.0.0.1 analytics.ff.avast.com
127.0.0.1 ncc.avast.com
127.0.0.1 ncc.avast.com.edgesuite.net
127.0.0.1 shepherd.ff.avast.com
127.0.0.1 www.ccleaner.com

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.1.1
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Intel(R) Ethernet Connection (7) I219-V -> e1d.sys
Sieťové pripojenie Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys

inspect: COMODO Internet Security Firewall Driver

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Common Files\Acronis\VirtualFile\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile64\;C:\Program Files (x86)\Common Files\Acronis\FileProtector\;C:\Program Files (x86)\Common Files\Acronis\FileProtector64\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\dotnet\;C:\Program Files\NVIDIA Corporation\NVIDIA App\NvDLISR
HKU\S-1-5-21-578757146-292678226-1064010467-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img3.jpg
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|E:\
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|F:\
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|D:\
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files (x86)\Common Files\Acronis\TrueImageHome\TrueImageHomeService.exe

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "Delete Cached Update Binary"
HKLM\...\StartupApproved\Run: => "Delete Cached Standalone Update Binary"
HKLM\...\StartupApproved\Run: => "PDF24"
HKLM\...\StartupApproved\Run32: => "SecurityHealth"
HKLM\...\StartupApproved\Run32: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor"
HKLM\...\StartupApproved\Run32: => "Adobe CCXProcess"
HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe"
HKLM\...\StartupApproved\Run32: => "WDDiscovery"
HKLM\...\StartupApproved\Run32: => "EEventManager"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "RealtekHDAUpgrade"
HKLM\...\StartupApproved\Run32: => "RtkAudUService"
HKLM\...\StartupApproved\Run32: => "EPPCCMON"
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_05322832B228209A9519DE0EA077A1DE"
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\StartupApproved\Run: => "EPLTarget\P0000000000000000"
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\StartupApproved\Run: => "EPLTarget\P0000000000000001"
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\StartupApproved\Run: => "IDMan"
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\StartupApproved\Run: => "Mozilla-Firefox-308046B0AF4A39CB"
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_AEA15880D324C5CD8D0666A3D2942D26"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{B721E167-7E3E-468A-8A15-3ED39A25B8B0}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A7CBF617-3143-49BB-85E9-38F36558A74F}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{777205B3-35C0-46EE-BB76-185B4875495C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F46989DA-BCB3-4322-8335-A2DFE6371AB1}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{75BA0D85-0F50-4EFA-8B75-4171DC1726C5}C:\program files\java\jre1.8.0_421\launch4j-tmp\frd.exe] => (Allow) C:\program files\java\jre1.8.0_421\launch4j-tmp\frd.exe => No File
FirewallRules: [UDP Query User{B812AE67-1253-4E71-A37C-8EFF1184120D}C:\program files\java\jre1.8.0_421\launch4j-tmp\frd.exe] => (Allow) C:\program files\java\jre1.8.0_421\launch4j-tmp\frd.exe => No File
FirewallRules: [{390CE4C4-6714-41FA-9AE8-22736BA9F0C6}] => (Block) C:\program files\java\jre1.8.0_421\launch4j-tmp\frd.exe => No File
FirewallRules: [{33AAE08E-415F-414F-82F9-A8084781D447}] => (Block) C:\program files\java\jre1.8.0_421\launch4j-tmp\frd.exe => No File
FirewallRules: [TCP Query User{57C81359-5926-41AF-BEFF-F47AA24AA709}C:\program files\strongdc++\strongdc.exe] => (Allow) C:\program files\strongdc++\strongdc.exe () [File not signed]
FirewallRules: [UDP Query User{F236BEFE-FCC8-48A5-8206-B4E49B7E2F85}C:\program files\strongdc++\strongdc.exe] => (Allow) C:\program files\strongdc++\strongdc.exe () [File not signed]
FirewallRules: [{2621FCE3-16A0-424F-8C19-0C4393340C83}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{AE1D4A25-8553-40D8-AC27-7497DA539E6F}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{20B9D78E-9F73-447D-BB54-7560356F3585}] => (Allow) C:\Users\Krylias\AppData\Roaming\uTorrent\utorrent.exe (BitTorrent, Inc.) [File not signed]
FirewallRules: [{EE51AED2-CB48-47C9-A458-442C2F5CDCA7}] => (Allow) C:\Users\Krylias\AppData\Roaming\uTorrent\utorrent.exe (BitTorrent, Inc.) [File not signed]
FirewallRules: [{EA097D02-F509-44EC-9772-0F898D4D800A}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) [File not signed]
FirewallRules: [{63D4263C-9E08-4048-8077-306A5896CA8C}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{58A3AC39-9D96-406B-99BF-FD1ABE49D583}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{166D97B2-9B3F-43BD-9542-422A35F6A2A4}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{4E65AC9B-38C7-4621-A2E1-D7C114630E73}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{B2C68A77-73FC-4656-8516-2953C5C9FCB4}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{C80C4202-B882-448E-81F5-246580ED3CA6}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [TCP Query User{495C15B9-4408-4D8B-9349-9CEF1B11846F}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) [File not signed]
FirewallRules: [UDP Query User{74E5AAFD-5054-4B68-B1A2-EDA008FAC188}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) [File not signed]
FirewallRules: [TCP Query User{C9CD9731-90D0-4407-8F19-F77532EDD99D}C:\program files\blackmagic design\davinci resolve\fuscript.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [UDP Query User{04E5707F-DBB0-4771-9D5F-74073B1B9227}C:\program files\blackmagic design\davinci resolve\fuscript.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [TCP Query User{111FE84D-B932-451A-9027-FB98926C1540}C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe] => (Block) C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe (Blackmagic Design Pty Ltd -> Blackmagic Design)
FirewallRules: [UDP Query User{FA9DA6C1-B5DC-42E0-B787-D0DCD9B7E814}C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe] => (Block) C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe (Blackmagic Design Pty Ltd -> Blackmagic Design)
FirewallRules: [{B8D37CBF-9486-4D7E-8459-0BE9D4EE6E0D}] => (Allow) C:\Program Files\Pinnacle\Studio 24\programs\RM.exe (Corel Corporation -> Pinnacle)
FirewallRules: [{5B4997A5-1872-49A3-A9D5-D53273E56253}] => (Allow) C:\Program Files\Pinnacle\Studio 24\programs\RM.exe (Corel Corporation -> Pinnacle)
FirewallRules: [{609F8045-6657-4FD5-842A-A6622E31A20B}] => (Allow) C:\Program Files\Pinnacle\Studio 24\programs\NGStudio.exe (Corel Corporation -> Pinnacle)
FirewallRules: [{3522A054-3E45-4B39-81AF-16F9E94F1243}] => (Allow) C:\Program Files\Pinnacle\Studio 24\programs\NGStudio.exe (Corel Corporation -> Pinnacle)
FirewallRules: [{BEFE650F-A706-45B8-8B80-0E24F2A5371B}] => (Allow) C:\Program Files\Pinnacle\Studio 24\programs\UMI.exe (Corel Corporation -> Pinnacle)
FirewallRules: [{56AE6DBE-D708-4421-9C68-5C2B09AC4E8D}] => (Allow) C:\Program Files\Pinnacle\Studio 24\programs\UMI.exe (Corel Corporation -> Pinnacle)
FirewallRules: [{245455B0-10ED-4F1E-9A63-D5E80466B987}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Acronis International GmbH -> )
FirewallRules: [{92B3A2E6-8F1B-4F23-949C-A233045CF87A}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{D3CABFF4-6303-42F6-9E58-08CF3D6C3EC4}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImage.exe (Acronis International GmbH -> )
FirewallRules: [{5EAFF27B-E178-40DD-9172-A3428FA04898}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis International GmbH -> )
FirewallRules: [{B21C62A6-D5CB-4060-86CA-4EEDB22C1D22}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageTools.exe (Acronis International GmbH -> ) [File not signed]
FirewallRules: [{69E4D4DE-F3C5-4E8D-9821-11E91BF1F5B7}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\TrueImageHome\TrueImageHomeService.exe (Acronis International GmbH -> ) [File not signed]
FirewallRules: [{0012B84D-21C0-4966-B0CD-5DC733620B23}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\MediaBuilder.exe (Acronis International GmbH -> )
FirewallRules: [{FBBE2528-7AE9-44AE-8A59-520FFFE8235E}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\SystemReport.exe (Acronis International GmbH -> )
FirewallRules: [{7E260652-20BF-4F51-BF0B-BF686A7D4CF1}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\acronis_drive.exe (Acronis International GmbH -> )
FirewallRules: [{4D154455-4A9B-4353-A30C-26BC9318E506}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{1FA93E5E-E51B-4699-8D99-A86F81FFAA1B}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe (Acronis International GmbH -> )
FirewallRules: [{B3D04B2B-487E-4827-8180-F7B83E822D29}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\ga_service.exe (Acronis International GmbH -> )
FirewallRules: [{13D6F06C-90F2-48A5-8035-A9C223473D1D}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\LicenseActivator.exe (Acronis International GmbH -> )
FirewallRules: [{8B9432AA-E415-41BB-BF49-85EC93EE93E8}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Home\report_sender.exe (Acronis International GmbH -> )
FirewallRules: [{E6EC9287-C403-4386-BCD6-79A2F715942F}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe (Acronis International GmbH -> )
FirewallRules: [{1CFB6ACC-27FD-4CA8-8A6D-FD38EDE253AD}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EB244F21-7FB3-4FA8-AE6E-7AA143007086}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F7583AD9-F234-4BC8-BD63-3F790580565E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E96DE01C-67D0-4FD5-89B0-4EEBD50720D4}] => (Allow) C:\Users\Krylias\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => No File
FirewallRules: [{409A25BC-7E68-4A87-9C0D-1451CBE82EBF}] => (Allow) C:\Users\Krylias\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => No File
FirewallRules: [{72E661AC-66E6-483E-A8F7-C6B464DD2C13}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
FirewallRules: [{6FFC06FC-C81C-42D3-8120-27DF9DD5AEAB}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
FirewallRules: [{AD63EEE4-29AD-4EA4-B899-F2C435386AE9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.48051.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BCE617BA-DE6A-41FB-98E9-2F107A062CF7}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.48051.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B4E6C1AB-ED6B-4535-A225-E737B390CD90}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.48051.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D706A4AC-ADC4-4A72-91F4-596FC9E17D43}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.48051.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{73181EAD-4DEB-4FDE-8782-D9E7015933B7}C:\program files\strongdc++\strongdc.exe] => (Allow) C:\program files\strongdc++\strongdc.exe () [File not signed]
FirewallRules: [UDP Query User{7DB73007-E45F-4F98-BFD6-B5097AE8E668}C:\program files\strongdc++\strongdc.exe] => (Allow) C:\program files\strongdc++\strongdc.exe () [File not signed]
FirewallRules: [TCP Query User{C1CFBB7E-30E6-4AF8-AF5F-2E7F19CD2A1A}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{1D682597-402A-4079-A152-F4AA362AFF9B}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{9746A611-200B-4DCE-A7EF-D92FA52D14E6}C:\program files\foobar2000\foobar2000.exe] => (Allow) C:\program files\foobar2000\foobar2000.exe (Illustrate Ltd -> Piotr Pawlowski)
FirewallRules: [UDP Query User{68E7C1DD-4AD1-4895-8EC3-5012A0DFEA38}C:\program files\foobar2000\foobar2000.exe] => (Allow) C:\program files\foobar2000\foobar2000.exe (Illustrate Ltd -> Piotr Pawlowski)
FirewallRules: [TCP Query User{AC67509F-AE0D-4E50-91EC-3F4311882D5F}C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe] => (Allow) C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe (Portforward, LLC -> portforward.com)
FirewallRules: [UDP Query User{17E75226-3DDD-4789-AC2D-C35D6A92FE4C}C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe] => (Allow) C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe (Portforward, LLC -> portforward.com)
FirewallRules: [{3DDF806A-184E-4925-AFBD-433EA429745F}] => (Allow) C:\Program Files (x86)\Nero\Nero 2025\Nero Burning ROM\StartNBR.exe (Nero AG -> Nero AG)
FirewallRules: [{BFA0DB15-9722-45EE-AE31-EC8555DF4C15}] => (Allow) C:\Program Files (x86)\Nero\Nero 2025\Nero Burning ROM\nero.exe (Nero AG -> Nero AG)
FirewallRules: [{3744CF4C-D3CB-427A-B618-63054429F2A5}] => (Allow) C:\Program Files (x86)\Nero\Nero 2025\Nero Burning ROM\StartNE.exe (Nero AG -> Nero AG)
FirewallRules: [{CB1F8B12-750C-47B6-9E35-7BA263E85FB6}] => (Allow) C:\Program Files (x86)\Nero\Nero Common\Nero Launcher\NeroLauncher.exe (Nero AG -> Nero AG)
FirewallRules: [{3A6B52BC-748F-4473-B3BF-167316A9639F}] => (Block) C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe (Adobe Inc. -> Adobe Systems Incorporated)
FirewallRules: [{6BC10D7B-3D34-4B05-A0D8-7306B8C61C5E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{A3A6E6B6-0B6D-4A7C-8223-3494C6C5B9F2}] => (Allow) LPort=32683
FirewallRules: [{E1B4A283-BD38-4A01-AA75-E82A01801B3B}] => (Allow) LPort=33683
FirewallRules: [{499C828A-CFC3-46E9-A8E7-6876EB0473C3}] => (Allow) LPort=26822

==================== Restore Points =========================

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (11/09/2026 12:52:15 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Vytvorenie bodu obnovenia zlyhalo. (Proces = C:\Windows\system32\srtasks.exe ExecuteScheduledSPPCreation; Popis = Scheduled Checkpoint; Chyba = 0x80070422).

Error: (11/09/2026 12:32:07 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5

Error: (11/03/2026 07:39:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: DefenderAiPlatformHost.exe, verzia: 1.0.26100.4, časová značka: 0xdaf48623
Názov chybujúceho modulu: KERNELBASE.dll, verzia: 10.0.19041.6280, časová značka: 0x56511854
Kód výnimky: 0xc06d007e
Odstup chyby: 0x0000000000025369
Identifikácia chybujúceho procesu: 0x2030
Čas spustenia chybujúcej aplikácie: 0x01dd6bc297869fa4
Cesta chybujúcej aplikácie: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderAiPlatformHost.exe
Cesta chybujúceho modulu: C:\Windows\SYSTEM32\KERNELBASE.dll
Identifikácia hlásenia: a537fd8c-ddfd-4aeb-ac37-5e2c35b55129
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (11/03/2026 07:38:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress..

Error: (11/03/2026 07:38:29 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.]

Error: (11/03/2026 07:38:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress..

Error: (11/03/2026 07:38:29 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.]

Error: (11/03/2026 05:48:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: DefenderAiPlatformHost.exe, verzia: 1.0.26100.4, časová značka: 0xdaf48623
Názov chybujúceho modulu: KERNELBASE.dll, verzia: 10.0.19041.6280, časová značka: 0x56511854
Kód výnimky: 0xc06d007e
Odstup chyby: 0x0000000000025369
Identifikácia chybujúceho procesu: 0x2300
Čas spustenia chybujúcej aplikácie: 0x01dd6bb323eb6199
Cesta chybujúcej aplikácie: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderAiPlatformHost.exe
Cesta chybujúceho modulu: C:\Windows\SYSTEM32\KERNELBASE.dll
Identifikácia hlásenia: 7ddc5f3d-06a1-401e-815b-4df148866be1
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

System errors:
=============
Error: (11/09/2026 12:21:15 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Zlyhanie inštalácie: Systému Windows sa nepodarilo nainštalovať nasledujúcu aktualizáciu. Vyskytla sa chyba (0x80073d02 = The package could not be installed because resources it modifies are currently in use.): 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE.

Error: (11/03/2026 07:43:56 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
Description: Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:Gigabyte Technology Co., Ltd.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:F8a;OEMModelNumber:Z390 M;OEMModelBaseBoard:Z390 M-CF;OEMModelSystemFamily:Default string;OEMManufacturerName:Gigabyte Technology Co., Ltd.;OEMModelSKU:Default string;OSArchitecture:amd64;
BucketId: 057092ed379712e8b7387e10a17c90ab008e92ec54dd58112ce4128b889c8e8a
BucketConfidenceLevel:
UpdateType: 0
HResult: 0

Error: (11/03/2026 05:53:20 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
Description: Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:Gigabyte Technology Co., Ltd.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:F8a;OEMModelNumber:Z390 M;OEMModelBaseBoard:Z390 M-CF;OEMModelSystemFamily:Default string;OEMManufacturerName:Gigabyte Technology Co., Ltd.;OEMModelSKU:Default string;OSArchitecture:amd64;
BucketId: 057092ed379712e8b7387e10a17c90ab008e92ec54dd58112ce4128b889c8e8a
BucketConfidenceLevel:
UpdateType: 0
HResult: 0

Error: (10/26/2026 07:43:31 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
Description: Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:Gigabyte Technology Co., Ltd.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:F8a;OEMModelNumber:Z390 M;OEMModelBaseBoard:Z390 M-CF;OEMModelSystemFamily:Default string;OEMManufacturerName:Gigabyte Technology Co., Ltd.;OEMModelSKU:Default string;OSArchitecture:amd64;
BucketId: 057092ed379712e8b7387e10a17c90ab008e92ec54dd58112ce4128b889c8e8a
BucketConfidenceLevel:
UpdateType: 0
HResult: 0

Error: (10/26/2026 07:38:30 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 0:21:07 on ‎26. ‎10. ‎2026 was unexpected.

Error: (10/26/2026 07:38:17 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 3221225684A fatal error occurred processing the restoration data.

Error: (10/25/2026 07:47:06 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
Description: Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:Gigabyte Technology Co., Ltd.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:F8a;OEMModelNumber:Z390 M;OEMModelBaseBoard:Z390 M-CF;OEMModelSystemFamily:Default string;OEMManufacturerName:Gigabyte Technology Co., Ltd.;OEMModelSKU:Default string;OSArchitecture:amd64;
BucketId: 057092ed379712e8b7387e10a17c90ab008e92ec54dd58112ce4128b889c8e8a
BucketConfidenceLevel:
UpdateType: 0
HResult: 0

Error: (10/12/2026 01:59:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Zlyhanie inštalácie: Systému Windows sa nepodarilo nainštalovať nasledujúcu aktualizáciu. Vyskytla sa chyba (0x80073d02 = The package could not be installed because resources it modifies are currently in use.): 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE.

Windows Defender:
================

TimeCreated : 9. 11. 2026 13:25:08
Message : Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... enterprise
=0
Name: Trojan:Win32/Znyonm!rfn
ID: 2147933017
Severity: Závažná
Category: Trójsky kôň
Path: file:_C:\Users\Krylias\Downloads\IDM_6.4x_Crack_v20.7.zip
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
User: DESKTOP-KH76570\Krylias
Process Name: C:\Users\Krylias\Downloads\FRST64.exe
Security intelligence Version: AV: 1.463.207.0, AS: 1.463.207.0, NIS: 1.463.207.0
Engine Version: AM: 1.1.26100.4, NIS: 1.1.26100.4

TimeCreated : 3. 11. 2026 12:40:19
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {A514BBDF-F5AE-4D49-8413-43D10D0F0483}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days

TimeCreated : 2. 11. 2026 17:00:30
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {461940EC-8674-4EF6-885D-103C0E8A280D}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days

TimeCreated : 1. 11. 2026 10:26:49
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {7F187B12-F1A8-4D12-BC11-DFDD0EF0E8EB}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: RPC connection rundown

TimeCreated : 31. 10. 2026 0:56:45
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {2542F139-9912-496B-A3BB-13C93165F903}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days

TimeCreated : 25. 10. 2026 10:35:48
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {D90DCF99-B762-413C-A4E9-1EF54C629DB4}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days

TimeCreated : 24. 10. 2026 10:34:16
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {994DA18C-A81C-49E0-8E66-860DD8E91507}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days

TimeCreated : 22. 10. 2026 10:05:00
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {9A716E5A-7D38-4A36-831A-F3CE0DDEDD4E}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days

CodeIntegrity:
===============
Date: 2026-11-09 13:20:39
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

BIOS: American Megatrends Inc. F8a 06/12/2025
Motherboard: Gigabyte Technology Co., Ltd. Z390 M-CF
Processor: Intel(R) Core(TM) i5-9400F CPU @ 2.90GHz
Percentage of memory in use: 37%
Total physical RAM: 16300.72 MB
Available physical RAM: 10164.07 MB
Total Virtual: 18732.72 MB
Available Virtual: 11032.84 MB

==================== Drives ================================

Disk 1 - Drive c: () (Fixed) (Total:465.54 GB) (Free:284.53 GB) (Model: Samsung SSD 850 EVO 500GB) NTFS
Disk 3 - Drive d: (Data 3TB) (Fixed) (Total:2794.5 GB) (Free:1835.5 GB) (Model: WDC WD30EZRX-00MMMB0) NTFS
Disk 0 - Drive e: (Data 8TB) (Fixed) (Total:7452.02 GB) (Free:1335.97 GB) (Model: ST8000NM0055-1RM112) NTFS
Disk 2 - Drive f: (1 TB) (Fixed) (Total:931.5 GB) (Free:320.9 GB) (Model: ST1000DM003-1SB102) NTFS

Disk 1 - \\?\Volume{33f5f073-b3aa-4783-acf5-4af87e975079}\ () (Fixed) (Total:99.21 MB) (Free:72.33 MB) FAT32

==================== MBR & Partition Table ====================

============================================================
Disk: 0 (Protective MBR) (Size: 7452.04 GB)

Partitions:
===========
Partition Style : GPT
Partition Count : 2
Disk ID : {EF2254A9-84C3-477E-8EF8-5F629C8C19DB}
Usable Offset : 0.02 MB
Usable Length : 7452.04 GB
Max Partitions : 128

Partition 1
Type : Microsoft Reserved (MSR)
Size : 15.98 MB
Offset : 0.02 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {18B10506-6FC4-433B-83B6-9EC684D8E131}
GPT Name : Microsoft reserved partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Basic Data Partition
Size : 7452.02 GB
Offset : 16 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {28D6A32C-7ECC-4D47-8414-D5B5E479C64B}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------

============================================================
Disk: 1 (Size: 465.76 GB) (Disk ID: 96F105CF)

Partitions:
===========
Partition Style : GPT
Partition Count : 3
Disk ID : {521E21B0-F34A-4B58-8970-4FE8F7742921}
Usable Offset : 0.02 MB
Usable Length : 465.76 GB
Max Partitions : 128

Partition 1
Type : Microsoft Reserved (MSR)
Size : 128 MB
Offset : 0.02 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {65C75D16-8724-4BD5-BC75-9B4594115BDC}
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : EFI System Partition
Size : 100 MB
Offset : 129 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {33F5F073-B3AA-4783-ACF5-4AF87E975079}
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 465.54 GB
Offset : 229 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {AE7049CF-6ECC-4CA4-81A3-DE9C159698DB}
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------

============================================================
Disk: 2 (Protective MBR) (Size: 931.51 GB)

Partitions:
===========
Partition Style : GPT
Partition Count : 2
Disk ID : {88C7EB81-BCC1-4EB6-AAD4-12D0A6639F99}
Usable Offset : 0.02 MB
Usable Length : 931.51 GB
Max Partitions : 128

Partition 1
Type : Microsoft Reserved (MSR)
Size : 15.98 MB
Offset : 0.02 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {DB776869-CBD2-4C1A-9B54-3B74B2DC8617}
GPT Name : Microsoft reserved partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Basic Data Partition
Size : 931.5 GB
Offset : 16 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {D705A002-F09A-49FC-B3DE-80E6358EE3D1}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------

============================================================
Disk: 3 (Protective MBR) (Size: 2794.52 GB)

Partitions:
===========
Partition Style : GPT
Partition Count : 2
Disk ID : {62D2F15F-B8BA-4CD7-A7B3-835060E78C09}
Usable Offset : 0.02 MB
Usable Length : 2794.52 GB
Max Partitions : 128

Partition 1
Type : Microsoft Reserved (MSR)
Size : 15.98 MB
Offset : 0.02 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {DB7718C8-2007-44DC-8689-D52FD76F6998}
GPT Name : Microsoft reserved partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Basic Data Partition
Size : 2794.5 GB
Offset : 16 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {A2481FDE-8990-488E-AFFB-DC49507F0132}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------

============================================================

==================== End of Addition.txt =======================

#3 Příspěvek od **Rudy** » před 48 minutami

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
CustomCLSID: HKU\S-1-5-21-578757146-292678226-1064010467-1001_Classes\CLSID\{E7143B9B-C977-4105-A0C6-08CA5E1966A9}\localserver32 -> "c:\program files\musehub\current\musehub.exe" ----AppNotificationActivated: => No File
AlternateDataStreams: C:\ProgramData\TEMP:0888F409 [143]
AlternateDataStreams: C:\ProgramData\TEMP:3440EB47 [141]
AlternateDataStreams: C:\ProgramData\TEMP:66633281 [152]
AlternateDataStreams: C:\ProgramData\TEMP:8934AEBA [148]
AlternateDataStreams: C:\ProgramData\TEMP:93433455 [158]
AlternateDataStreams: C:\ProgramData\TEMP:EFDFF94D [344]
SearchScopes: HKU\S-1-5-21-578757146-292678226-1064010467-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FirewallRules: [TCP Query User{75BA0D85-0F50-4EFA-8B75-4171DC1726C5}C:\program files\java\jre1.8.0_421\launch4j-tmp\frd.exe] => (Allow) C:\program files\java\jre1.8.0_421\launch4j-tmp\frd.exe => No File
FirewallRules: [UDP Query User{B812AE67-1253-4E71-A37C-8EFF1184120D}C:\program files\java\jre1.8.0_421\launch4j-tmp\frd.exe] => (Allow) C:\program files\java\jre1.8.0_421\launch4j-tmp\frd.exe => No File
FirewallRules: [{390CE4C4-6714-41FA-9AE8-22736BA9F0C6}] => (Block) C:\program files\java\jre1.8.0_421\launch4j-tmp\frd.exe => No File
FirewallRules: [{33AAE08E-415F-414F-82F9-A8084781D447}] => (Block) C:\program files\java\jre1.8.0_421\launch4j-tmp\frd.exe => No File
FirewallRules: [{E96DE01C-67D0-4FD5-89B0-4EEBD50720D4}] => (Allow) C:\Users\Krylias\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => No File
FirewallRules: [{409A25BC-7E68-4A87-9C0D-1451CBE82EBF}] => (Allow) C:\Users\Krylias\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => No File
C:\Users\Krylias\Downloads\IDM_6.4x_Crack_v20.7.zip
HKU\S-1-5-21-578757146-292678226-1064010467-1001\...\Run: [EPSDNMON] => "" (No File)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {9FF50745-928E-49E9-B6F0-DFD6909ABC38} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (No File) (No File)
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys (No File)
S3 cpuz143; \??\C:\Windows\temp\cpuz143\cpuz143_x64.sys (No File) <==== ATTENTION
S3 cpuz145; \??\C:\Windows\temp\cpuz145\cpuz145_x64.sys (No File) <==== ATTENTION
C:\Users\Krylias\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Hosts:
EmptyTemp:

End

Uložte do C:\Users\Krylias\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

VIRY.CZ

Prosím o kontrolu - napadnutie hesiel

Prosím o kontrolu - napadnutie hesiel

Re: Prosím o kontrolu - napadnutie hesiel

Re: Prosím o kontrolu - napadnutie hesiel