VIRY.CZ

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-04-2025
Ran by fipzu (ATTENTION: The user is not administrator) on FILIP_PC (Dell Inc. Vostro 3020 T) (11-04-2025 19:47:10)
Running from D:\Downloads\FRST64.exe
Loaded Profiles: fipzu
Platform: Microsoft Windows 11 Pro Version 24H2 26100.3775 (X64) Language: Angličtina (Spojené státy) -> Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AnyDesk Software GmbH -> AnyDesk Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe <2>
(Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(C:\Program Files\TeamViewer\TeamViewer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\135.0.3179.54\msedgewebview2.exe <12>
(C:\Program Files\TeamViewer\TeamViewer.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files\TeamViewer\crashpad_handler.exe
(Dell Technologies Inc. -> Dell) C:\Program Files\Dell\MyDell\Console\Dell.UCA.Systray.exe
(explorer.exe ->) (50BDFD77-8903-4850-9FFE-6E8522F64D5B -> OpenAI) C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2025.90.0_x64__2p2nqsd0c76g0\app\ChatGPT.exe <5>
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <38>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <8>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\25.051.0317.0003\Microsoft.SharePoint.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe <2>
(explorer.exe ->) (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectMonitor.exe
(explorer.exe ->) (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectUI.exe
(explorer.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo11de.inf_amd64_d4eabf4492fbb4d5\WavesSvc64.exe
(Intel Corporation -> Intel Corporation) C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_c493e10bcfd25250\ipf_helper.exe
(Intel Corporation -> Intel® Corporation) C:\WINDOWS\System32\drivers\Intel\ICPS\IDBWM.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.296.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.5100.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25022.57.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
Failed to access process -> AggregatorHost.exe
Failed to access process -> aswEngSrv.exe
Failed to access process -> aswidsagent.exe
Failed to access process -> aswToolsSvc.exe
Failed to access process -> AvastSvc.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> crashpad_handler.exe
Failed to access process -> crashpad_handler.exe
Failed to access process -> csrss.exe
Failed to access process -> csrss.exe
Failed to access process -> dasHost.exe
Failed to access process -> dasHost.exe
Failed to access process -> DDVCollectorSvcApi.exe
Failed to access process -> DDVDataCollector.exe
Failed to access process -> DDVRulesProcessor.exe
Failed to access process -> Dell.CoreServices.Client.exe
Failed to access process -> Dell.Customer.Connect.SubAgent.exe
Failed to access process -> Dell.D3.WinSvc.exe
Failed to access process -> Dell.Optimizer.DthProxy.exe
Failed to access process -> Dell.TechHub.Analytics.SubAgent.exe
Failed to access process -> Dell.TechHub.DataManager.SubAgent.exe
Failed to access process -> Dell.TechHub.Diagnostics.SubAgent.exe
Failed to access process -> Dell.TechHub.exe
Failed to access process -> Dell.TechHub.Instrumentation.SubAgent.exe
Failed to access process -> Dell.TechHub.Instrumentation.UserProcess.exe
Failed to access process -> Dell.UCA.Manager.exe
Failed to access process -> Dell.Update.SubAgent.exe
Failed to access process -> DellOptimizer.exe
Failed to access process -> DellSupportAssistRemedationService.exe
Failed to access process -> dllhost.exe
Failed to access process -> dwm.exe
Failed to access process -> FileSyncHelper.exe
Failed to access process -> fontdrvhost.exe
Failed to access process -> fontdrvhost.exe
Failed to access process -> FoxitPDFReaderUpdateService.exe
Failed to access process -> IDBWM.exe
Failed to access process -> IDBWMService.exe
Failed to access process -> IntelAnalyticsService.exe
Failed to access process -> IntelConnect.exe
Failed to access process -> IntelConnectivityNetworkService.exe
Failed to access process -> IntelConnectService.exe
Failed to access process -> IntelCpHDCPSvc.exe
Failed to access process -> ipf_uf.exe
Failed to access process -> jhi_service.exe
Failed to access process -> LsaIso.exe
Failed to access process -> lsass.exe
Failed to access process -> MacriumService.exe
Failed to access process -> MoUsoCoreWorker.exe
Failed to access process -> msdtc.exe
Failed to access process -> NgcIso.exe
Failed to access process -> OfficeClickToRun.exe
Failed to access process -> OneApp.IGCC.WinService.exe
Failed to access process -> RichVideo64.exe
Failed to access process -> RstMwService.exe
Failed to access process -> SearchIndexer.exe
Failed to access process -> SecurityHealthService.exe
Failed to access process -> services.exe
Failed to access process -> ServiceShell.exe
Failed to access process -> smss.exe
Failed to access process -> spoolsv.exe
Failed to access process -> SupportAssistAgent.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> TeamViewer_Desktop.exe
Failed to access process -> TeamViewer_Service.exe
Failed to access process -> TeraCopyService.exe
Failed to access process -> TitanCoreSubAgent.exe
Failed to access process -> tv_w32.exe
Failed to access process -> tv_x64.exe
Failed to access process -> unsecapp.exe
Failed to access process -> WavesAudioService.exe
Failed to access process -> WavesSysSvc64.exe
Failed to access process -> wininit.exe
Failed to access process -> winlogon.exe
Failed to access process -> wlanext.exe
Failed to access process -> WmiApSrv.exe
Failed to access process -> WmiPrvSE.exe
Failed to access process -> WmiPrvSE.exe
Failed to access process -> WMIRegistrationService.exe
Failed to access process -> wsc_proxy.exe
Failed to access process -> WUDFHost.exe
Failed to access process -> WUDFHost.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo11de.inf_amd64_d4eabf4492fbb4d5\WavesSvc64.exe [5147784 2023-04-27] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [455976 2025-04-10] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM\...\Run: [Reflect UI] => C:\Program Files\Macrium\Common\ReflectUI.exe [11859680 2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
HKLM\...\RunOnce: [TzSyncRunOnce] => C:\Windows\System32\tzsync.exe [215552 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe" (No File)
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKLM\...\RunOnce: [msedge_cleanup_{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}] => C:\Program Files (x86)\Microsoft\EdgeWebView\Application\135.0.3179.54\Installer\setup.exe [7716392 2025-04-06] (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3716557575-415477060-2759955272-1002\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [5012288 2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3716557575-415477060-2759955272-1002\...\Run: [Microsoft.Lists] => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\Microsoft.SharePoint.exe [1030440 2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3716557575-415477060-2759955272-1002\...\Run: [MicrosoftEdgeAutoLaunch_96329B60F295A03BC695E7C09CA7B503] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4418128 2025-04-09] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\shj2mPC: C:\Windows\System32\spool\prtprocs\x64\shj2mpc.dll [91216 2022-01-24] (联想图像(天津)科技有限公司 -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\shj2m Langmon: C:\WINDOWS\system32\shj2mlm.dll [70224 2022-01-24] (联想图像(天津)科技有限公司 -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\135.0.7049.85\Installer\chrmstp.exe [2025-04-10] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2024-06-21]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0c4e756f-b054-4721-b9f1-4a56d6887ca2}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{42dc02ce-9da4-4ea8-8db4-0442c145554d}: [DhcpNameServer] 192.168.1.1

Edge:
=======
Edge Profile: C:\Users\fipzu\AppData\Local\Microsoft\Edge\User Data\Default [2025-04-11]
Edge Extension: (Dokumenty Google offline) - C:\Users\fipzu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-10]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Edge relevant text changes) - C:\Users\fipzu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-06-21]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx

FireFox:
========
FF DefaultProfile: xguvqxid.default
FF ProfilePath: C:\Users\fipzu\AppData\Roaming\Mozilla\Firefox\Profiles\xguvqxid.default [2024-12-27]
FF ProfilePath: C:\Users\fipzu\AppData\Roaming\Mozilla\Firefox\Profiles\2y5txon1.default-release [2025-04-11]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-04-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-05-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-05-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-05-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-05-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-05-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2025-04-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-04-06] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR Profile: C:\Users\fipzu\AppData\Local\Google\Chrome\User Data\Default [2025-04-11]
CHR Extension: (Dokumenty Google offline) - C:\Users\fipzu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-27]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (CrxMouse: Mouse Gestures) - C:\Users\fipzu\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlgkpaicikihijadgifklkbpdajbkhjo [2025-03-27]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\fipzu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-06-21]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Checker Plus for Gmail™) - C:\Users\fipzu\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2025-03-29]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (EpubPress - Read the web offline) - C:\Users\fipzu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnhdnpnnffpijjbnhnipkehhibchdeok [2024-06-21]hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [5328200 2024-06-21] (AnyDesk Software GmbH -> AnyDesk Software GmbH)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [7500072 2025-04-10] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [807208 2025-04-10] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [859432 2025-04-10] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2024-06-21] (Avast Software s.r.o. -> AVAST Software)
S2 cbVSCService11; C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe [67584 2013-03-07] (CobianSoft, Luis Cobian) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13860056 2025-04-01] (Microsoft Corporation -> Microsoft Corporation)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [460176 2024-07-15] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [154512 2024-07-15] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [482704 2024-07-15] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 Dell Digital Delivery Services; C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe [59616 2025-01-31] (Dell Inc. -> )
R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe [22224 2023-12-13] (Dell Inc -> Dell INC.)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [51648 2024-11-13] (Dell Technologies Inc. -> )
R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [154544 2024-11-14] (Dell Technologies Inc. -> Dell)
R3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncHelper.exe [3543888 2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
R2 FoxitReaderUpdateService; C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2489328 2024-05-22] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R3 IDBWM; C:\WINDOWS\System32\drivers\Intel\ICPS\IDBWMService.exe [78744 2024-01-24] (Intel Corporation -> Intel® Corporation)
R2 Intel Analytics Service; C:\WINDOWS\System32\drivers\Intel\ICPS\IntelAnalyticsService.exe [1994136 2024-01-24] (Intel Corporation -> Intel)
R3 Intel Connectivity Network Service; C:\WINDOWS\System32\drivers\Intel\ICPS\IntelConnectivityNetworkService.exe [2247576 2024-01-24] (Intel Corporation -> Intel)
S2 Intel Provider Data Helper Service; C:\WINDOWS\System32\drivers\Intel\ICPS\IntelProviderDataHelperService.exe [787760 2024-01-24] (Intel Corporation -> Intel)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_c25dbc60ad3b371a\lib\PlatformLicenseManagerService.exe [742904 2024-11-04] (Intel Corporation -> Intel(R) Corporation)
R3 IntelConnectService; C:\WINDOWS\System32\drivers\Intel\ICPS\IntelConnectService.exe [78640 2024-01-24] (Intel Corporation -> Intel® Corporation)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_c493e10bcfd25250\ipf_uf.exe [3102808 2024-10-11] (Intel Corporation -> Intel Corporation)
R3 lmhosts; C:\WINDOWS\System32\svchost.exe [88152 2025-02-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 lmhosts; C:\WINDOWS\SysWOW64\svchost.exe [53296 2024-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [13004248 2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpDefenderCoreService.exe [1377416 2024-07-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 NlaSvc; C:\WINDOWS\System32\svchost.exe [88152 2025-02-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 NlaSvc; C:\WINDOWS\SysWOW64\svchost.exe [53296 2024-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 nsi; C:\WINDOWS\system32\svchost.exe [88152 2025-02-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 nsi; C:\WINDOWS\SysWOW64\svchost.exe [53296 2024-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.051.0317.0003\OneDriveUpdaterService.exe [3891536 2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2014-04-01] (CyberLink Corp. -> CyberLink)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [559320 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [149832 2024-12-19] (Dell Technologies Inc. -> Dell Inc.)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [22178608 2025-03-14] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 TeraCopyService.exe; C:\Program Files\TeraCopy\TeraCopyService.exe [317664 2023-06-29] (CODE SECTOR PTY LTD -> )
R2 WavesAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo11de.inf_amd64_d4eabf4492fbb4d5\WavesAudioService.exe [160904 2023-04-27] (Waves Inc -> Waves Audio Ltd)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\NisSrv.exe [3236728 2024-07-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MsMpEng.exe [133688 2024-07-18] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [20536 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [248376 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [393272 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [296528 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [84560 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [28280 2024-11-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [37944 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [282680 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [553528 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [98872 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [69688 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [942672 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1427512 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [207440 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [391760 2025-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [573440 2025-02-21] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2025-02-21] (Microsoft Corporation) [File not signed]
R3 CirrusLFD; C:\WINDOWS\System32\DriverStore\FileRepository\cshda.inf_amd64_56dda07e1d6e3782\CSLFD.sys [202432 2023-10-18] (Cirrus Logic, Inc -> Cirrus Logic, Inc.)
R3 CirrusUFD; C:\WINDOWS\System32\DriverStore\FileRepository\cshda.inf_amd64_56dda07e1d6e3782\CSUFD.sys [91432 2023-10-18] (WDKTestCert driver dev,131877739977077075 -> Cirrus Logic, Inc.)
R3 cshsbc; C:\WINDOWS\System32\drivers\cshsbc.sys [224616 2022-08-16] (Microsoft Windows Hardware Compatibility Publisher -> Cirrus Logic Inc.)
R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [44472 2024-12-18] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [222528 2025-02-21] (Microsoft Windows -> Microsoft Corporation)
S2 hardlock; C:\Windows\system32\drivers\hardlock.sys [318464 2009-03-13] (Microsoft Windows Hardware Compatibility Publisher -> Aladdin Knowledge Systems Ltd.)
R0 iaStorVD; C:\WINDOWS\System32\drivers\iaStorVD.sys [1605296 2022-10-17] (Intel Corporation -> Intel Corporation)
R3 INTCCoSvc; C:\WINDOWS\System32\drivers\Intel\ICPS\IntcCo11X64.sys [216472 2024-01-24] (Intel Corporation -> Intel Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_04d4eecc5838a558\gna.sys [88776 2022-06-23] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_ca5ac87d28341730\ipf_acpi.sys [89688 2024-10-11] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_c493e10bcfd25250\ipf_cpu.sys [89688 2024-10-11] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_c493e10bcfd25250\ipf_lf.sys [504920 2024-10-11] (Intel Corporation -> Intel Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [144840 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
S3 PSMounterEx; C:\Windows\system32\drivers\psmounterex.sys [140720 2023-10-02] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 psvolacc; C:\WINDOWS\system32\drivers\psvolacc.sys [50856 2022-05-25] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 ThermalFilter; C:\WINDOWS\System32\DriverStore\FileRepository\c_thermal.inf_amd64_732a53ed1662b707\ThermalFilter.sys [75376 2025-04-10] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2025-02-21] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21968 2024-07-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [602520 2024-07-18] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2024-07-18] (Microsoft Windows -> Microsoft Corporation)
S3 wini3ctarget; C:\WINDOWS\System32\DriverStore\FileRepository\wini3ctarget.inf_amd64_bdb09ebda2834009\wini3ctarget.sys [75168 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-02-21] (Microsoft Windows -> Microsoft Corporation)
U3 aswBcc; no ImagePath
U3 Avast Business Console Client Antivirus Service; no ImagePath
U3 avast! Firewall; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-04-12 05:24 - 2025-04-12 05:24 - 000000000 ___HD C:\$SysReset
2025-04-11 19:47 - 2025-04-11 19:47 - 000000000 ____D C:\FRST
2025-04-11 19:36 - 2025-04-11 19:36 - 000678580 _____ C:\WINDOWS\system32\perfh005.dat
2025-04-11 19:36 - 2025-04-11 19:36 - 000145416 _____ C:\WINDOWS\system32\perfc005.dat
2025-04-11 14:43 - 2025-04-11 19:02 - 000005718 _____ C:\WINDOWS\diagwrn.xml
2025-04-11 14:43 - 2025-04-11 19:02 - 000005718 _____ C:\WINDOWS\diagerr.xml
2025-04-11 14:43 - 2025-04-11 14:43 - 000000000 ____D C:\WINDOWS\Minidump
2025-04-11 13:08 - 2025-04-11 13:08 - 000002264 _____ C:\Users\fipzu\AppData\LocalLow\966f5b1e2cc5cacc3d00f9302170559cdd674ab7bc415c9e8623bb2ba4dca7f4
2025-04-10 22:14 - 2025-04-10 22:14 - 000000000 ____D C:\Users\fipzu\AppData\Local\PeerDistRepub
2025-04-10 17:02 - 2025-04-10 17:02 - 000316200 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2025-04-10 16:59 - 2025-04-10 16:59 - 000000000 ____D C:\WINDOWS\system32\AccountHealthAssets
2025-04-10 16:59 - 2025-04-10 16:59 - 000000000 ____D C:\inetpub
2025-04-10 13:39 - 2025-04-11 19:02 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-04-10 13:36 - 2025-04-10 13:36 - 000029042 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-04-10 13:36 - 2025-04-10 13:36 - 000029042 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-04-10 13:10 - 2025-04-10 17:01 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-04-06 11:33 - 2025-04-06 11:33 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-03-12 15:28 - 2025-03-12 15:28 - 000070484 _____ C:\WINDOWS\SysWOW64\ctac.json
2025-03-12 15:28 - 2025-03-12 15:28 - 000070484 _____ C:\WINDOWS\system32\ctac.json

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-04-12 05:25 - 2025-02-21 14:53 - 000000000 ____D C:\Users\fipzu\AppData\Roaming\Microsoft\Crypto
2025-04-12 05:25 - 2025-02-21 14:38 - 000000000 ____D C:\Users\marti
2025-04-12 05:25 - 2025-02-21 14:38 - 000000000 ____D C:\Users\fipzu\AppData\Roaming\Microsoft\Spelling
2025-04-12 05:25 - 2025-02-21 14:38 - 000000000 ____D C:\Users\fipzu
2025-04-12 05:25 - 2025-02-19 19:16 - 000000000 ____D C:\Users\fipzu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.13
2025-04-12 05:25 - 2024-11-27 21:08 - 000000000 ____D C:\WINDOWS\system32\Dell
2025-04-12 05:25 - 2024-09-23 04:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2025-04-12 05:25 - 2024-09-23 04:41 - 000000000 ____D C:\Program Files\Intel
2025-04-12 05:25 - 2024-07-01 15:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wolfram Player 14
2025-04-12 05:25 - 2024-06-24 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauptwerk Virtual Pipe Organ
2025-04-12 05:25 - 2024-06-23 10:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cobian Backup 11
2025-04-12 05:25 - 2024-06-22 22:15 - 000000000 ____D C:\WINDOWS\system32\%userprofile%
2025-04-12 05:25 - 2024-06-22 13:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CloneSpy
2025-04-12 05:25 - 2024-06-22 11:46 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink WaveEditor 2
2025-04-12 05:25 - 2024-06-22 11:44 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 13
2025-04-12 05:25 - 2024-06-21 21:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PDF Reader
2025-04-12 05:25 - 2024-06-21 19:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office
2025-04-12 05:25 - 2024-06-21 18:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyDesk
2025-04-12 05:25 - 2024-06-21 18:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander
2025-04-12 05:25 - 2024-06-21 18:22 - 000000000 ____D C:\Users\fipzu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2025-04-12 05:25 - 2024-04-01 10:00 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2025-04-12 05:25 - 2024-04-01 10:00 - 000000000 ____D C:\WINDOWS\system32\WCN
2025-04-12 05:25 - 2024-04-01 09:26 - 000000000 __RSD C:\WINDOWS\Media
2025-04-12 05:25 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-04-12 05:25 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2025-04-12 05:25 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\spool
2025-04-12 05:25 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2025-04-12 05:25 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-04-12 05:25 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\NDF
2025-04-12 05:25 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2025-04-12 05:25 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2025-04-12 05:25 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2025-04-12 05:25 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\IME
2025-04-12 05:25 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-04-12 05:25 - 2023-12-11 01:19 - 000000000 __RHD C:\Users\Public\AccountPictures
2025-04-12 05:25 - 2022-05-07 08:10 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2025-04-12 05:25 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2025-04-12 05:25 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2025-04-11 19:48 - 2024-06-22 11:39 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-04-11 19:43 - 2024-06-21 22:39 - 000000000 ____D C:\Users\fipzu\AppData\Local\Avast Software
2025-04-11 19:40 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-04-11 19:38 - 2024-12-23 23:51 - 000000298 _____ C:\Users\fipzu\AppData\LocalLow\18ec5d926f2d6563863c965b1e55c179b8570ac13706b78541bd08116d02bcc2
2025-04-11 19:36 - 2025-02-22 12:53 - 001603798 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-04-11 19:36 - 2024-04-01 11:44 - 000000000 ___HD C:\$WINDOWS.~BT
2025-04-11 19:36 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Registration
2025-04-11 19:36 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-04-11 19:36 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-04-11 19:36 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2025-04-11 19:36 - 2023-12-11 01:05 - 000000000 ____D C:\Program Files (x86)\Dell Digital Delivery Services
2025-04-11 19:34 - 2025-02-22 01:10 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-04-11 19:34 - 2025-02-22 01:08 - 000002628 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-04-11 19:34 - 2024-06-21 22:38 - 000000000 ____D C:\ProgramData\Avast Software
2025-04-11 19:34 - 2024-06-21 22:30 - 000000000 ____D C:\Program Files\TeamViewer
2025-04-11 19:34 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2025-04-11 19:34 - 2023-12-11 00:58 - 000012288 ___SH C:\DumpStack.log.tmp
2025-04-11 19:22 - 2024-06-21 07:06 - 000000000 ____D C:\ProgramData\MyDellCustomerConnect
2025-04-11 19:17 - 2023-12-11 00:59 - 000000000 ____D C:\Program Files\Waves
2025-04-11 19:06 - 2025-02-21 13:47 - 000000000 ___DC C:\WINDOWS\Panther
2025-04-11 19:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-04-11 19:02 - 2025-02-22 01:06 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-04-11 13:08 - 2024-06-21 17:18 - 000000000 ____D C:\Users\fipzu\AppData\Local\D3DSCache
2025-04-11 09:28 - 2023-12-11 00:59 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-04-10 22:55 - 2024-06-21 18:22 - 000002249 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-04-10 17:03 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-04-10 17:02 - 2024-06-21 22:38 - 001427512 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSP.sys
2025-04-10 17:02 - 2024-06-21 22:38 - 000942672 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2025-04-10 17:02 - 2024-06-21 22:38 - 000553528 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2025-04-10 17:02 - 2024-06-21 22:38 - 000393272 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2025-04-10 17:02 - 2024-06-21 22:38 - 000391760 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswVmm.sys
2025-04-10 17:02 - 2024-06-21 22:38 - 000296528 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2025-04-10 17:02 - 2024-06-21 22:38 - 000282680 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2025-04-10 17:02 - 2024-06-21 22:38 - 000248376 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArPot.sys
2025-04-10 17:02 - 2024-06-21 22:38 - 000098872 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2025-04-10 17:02 - 2024-06-21 22:38 - 000084560 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2025-04-10 17:02 - 2024-06-21 22:38 - 000069688 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2025-04-10 17:02 - 2024-06-21 22:38 - 000037944 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2025-04-10 17:02 - 2024-06-21 22:38 - 000020536 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2025-04-10 17:01 - 2025-02-22 01:06 - 000482608 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-04-10 17:01 - 2024-06-22 22:15 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-04-10 17:01 - 2024-06-22 11:39 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-04-10 17:00 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2025-04-10 17:00 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2025-04-10 17:00 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-04-10 17:00 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-04-10 17:00 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-04-10 17:00 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-04-10 16:59 - 2024-04-01 10:03 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-04-10 16:59 - 2024-04-01 10:03 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-04-10 16:59 - 2024-04-01 10:03 - 000000000 ____D C:\WINDOWS\InboxApps
2025-04-10 16:59 - 2024-04-01 10:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2025-04-10 16:59 - 2024-04-01 10:03 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2025-04-10 16:59 - 2024-04-01 10:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\UNP
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-04-10 16:59 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2025-04-10 16:59 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2025-04-10 15:36 - 2024-06-21 19:51 - 000002132 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-04-10 15:10 - 2024-12-23 15:25 - 000000130 _____ C:\Users\fipzu\AppData\LocalLow\963ff56f90cc53373ce74883a9beab3444359720a5fddb8b87ddf90882740e21
2025-04-10 13:54 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2025-04-10 13:36 - 2025-02-22 01:09 - 003352064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-04-10 13:28 - 2024-06-22 11:39 - 000001075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-04-10 13:12 - 2024-06-21 17:18 - 000000000 ____D C:\Users\fipzu\AppData\Local\Packages
2025-04-08 11:59 - 2024-06-21 19:50 - 000000000 ____D C:\Users\fipzu\AppData\Roaming\Microsoft\Word
2025-04-06 11:32 - 2023-12-11 01:06 - 000000000 ____D C:\Program Files\Microsoft Office
2025-04-03 16:50 - 2024-12-23 15:25 - 000018649 _____ C:\Users\fipzu\AppData\LocalLow\c8eaaf1a6b75c186ddec75fa298f9c2faecccaa8e3ac8b5df76df0dec06175bb
2025-04-03 00:13 - 2024-06-21 19:50 - 000000000 ____D C:\Users\fipzu\AppData\Roaming\Microsoft\Office
2025-04-01 16:40 - 2024-12-23 23:51 - 000550362 _____ C:\Users\fipzu\AppData\LocalLow\125de33d0d91245cce3a33c5b5397283a47c107c195cfa717fbaba815730c1eb
2025-03-28 00:24 - 2024-12-18 22:08 - 000000130 _____ C:\Users\fipzu\AppData\LocalLow\45d455606de66cc1a316b292d8c2cf002ad7379f876a77b1d1a00c23cb655feb
2025-03-17 17:53 - 2024-06-21 22:41 - 000000000 ____D C:\Users\fipzu\AppData\Roaming\TeraCopy
2025-03-12 19:11 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender
2025-03-12 19:11 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-03-12 19:11 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2025-03-12 19:11 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2025-03-12 19:11 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-03-12 15:46 - 2024-04-01 09:26 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)



ATTENTION: ==> Could not access BCD. The user is not administrator -> The boot configuration data store could not be opened.
Pýˇstup byl odepýen.

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-04-2025
Ran by fipzu (11-04-2025 19:48:48)
Running from D:\Downloads
Microsoft Windows 11 Pro Version 24H2 26100.3775 (X64) (2025-02-22 10:51:33)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3716557575-415477060-2759955272-500 - Administrator - Disabled)
davzu (S-1-5-21-3716557575-415477060-2759955272-1003 - Limited - Disabled)
DefaultAccount (S-1-5-21-3716557575-415477060-2759955272-503 - Limited - Disabled)
fipzu (S-1-5-21-3716557575-415477060-2759955272-1002 - Limited - Enabled) => C:\Users\fipzu
Guest (S-1-5-21-3716557575-415477060-2759955272-501 - Limited - Disabled)
marti (S-1-5-21-3716557575-415477060-2759955272-1001 - Administrator - Enabled) => C:\Users\marti
WDAGUtilityAccount (S-1-5-21-3716557575-415477060-2759955272-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 8.0.10 - AnyDesk Software GmbH)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 25.3.9983.2649 - Gen Digital Inc.)
CloneSpy 3.43 - 64 bit (HKLM\...\CloneSpy) (Version: 3.43 - The CloneSpy Team)
Cobian Backup 11 Gravity (HKLM-x32\...\CobBackup11) (Version: - )
CyberLink PowerDirector 13 (HKLM-x32\...\{BA385AFC-00B1-417C-8C20-74B996EF3AF0}) (Version: 13.0.2104.0 - CyberLink Corp.)
CyberLink WaveEditor 2 (HKLM-x32\...\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 2.0 - CyberLink Corp.)
Dell Core Services (HKLM\...\{3AE48AB7-8646-46BB-84DB-3FC6FF01CA39}) (Version: 1.6.52.0 - Dell, Inc.) Hidden
Dell Digital Delivery Services (HKLM-x32\...\{E9CD23E0-FC9B-4AE6-83A1-067FC62A39E7}) (Version: 5.5.0.0 - Dell Inc.)
Dell Optimizer (HKLM\...\{1344E072-D68B-48FF-BD2A-C1CCCC511A50}) (Version: 5.0.1101.0 - Dell) Hidden
Dell Optimizer (HKLM-x32\...\{286A9ADE-A581-43E8-AA85-6F5D58C7DC88}) (Version: 5.0.1101.0 - Dell Inc.) Hidden
Dell SupportAssist (HKLM\...\{A73D9A16-C22B-4A2C-8D70-AFFDD50E2A72}) (Version: 4.6.3.23467 - Dell Inc.)
Dell SupportAssist OS Recovery Plugin for Dell Update (HKLM\...\{39BF0E71-7A16-4A80-BBCE-FBDD2D1CC2D5}) (Version: 5.5.9.18923 - Dell Inc.) Hidden
Dell SupportAssist OS Recovery Plugin for Dell Update (HKLM-x32\...\{f6a4df94-48f2-459a-8d40-16b1fbed13c5}) (Version: 5.5.9.18923 - Dell Inc.)
Dell SupportAssist Remediation (HKLM\...\{398E49A0-84CA-43B5-A926-42EF68619E91}) (Version: 5.5.10.19019 - Dell Inc.) Hidden
Dell SupportAssist Remediation (HKLM-x32\...\{3563aa3a-c8ae-48d8-ab19-b1f359265295}) (Version: 5.5.10.19019 - Dell Inc.)
Dell Update for Windows Universal (HKLM\...\{B5318AB2-185E-408A-8ABE-0EDA416E92DB}) (Version: 4.9.0 - Dell Inc.)
Foxit PDF Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 2024.2.2.25170 - Foxit Software Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 135.0.7049.85 - Google LLC)
Hauptwerk (HKLM-x32\...\Hauptwerk) (Version: 4.0.0.724 - Milan Digital Audio)
Intel(R) Connectivity Performance Suite for ExpressConnect (HKLM\...\{F9A5D4BC-C41C-45C6-9943-42763E071937}) (Version: 30.24.153 - Intel Corporation) Hidden
Macrium Reflect Free (HKLM\...\{A302C59F-C733-4DA0-9611-1286A9051D15}) (Version: 8.0.7783 - Paramount Software (UK) Ltd.) Hidden
Macrium Reflect Free (HKLM\...\MacriumReflect) (Version: v8.0.7783 - Paramount Software (UK) Ltd.)
Microsoft .NET Host - 6.0.28 (x64) (HKLM\...\{CA84969C-64F9-4606-A998-E692A5DA9B9F}) (Version: 48.112.10439 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.11 (x64) (HKLM\...\{362B4D0D-8438-44DA-86B2-FEC44E000FCA}) (Version: 64.44.23191 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.25 (x64) (HKLM\...\{AE86D888-1404-47CC-A7BB-8D86C0503E58}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.28 (x64) (HKLM\...\{7C4254A1-17EE-4840-B9D3-7CA9B34C75CD}) (Version: 48.112.10439 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.11 (x64) (HKLM\...\{F59C11F0-D73F-452B-8D1D-8C33B82D8507}) (Version: 64.44.23191 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.25 (x64) (HKLM\...\{3544B2EE-E62F-4D11-B79C-3DDEACE94DA5}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.28 (x64) (HKLM\...\{4BCC5DFD-5D10-4ACC-AAA9-8A1578A9F0C6}) (Version: 48.112.10439 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.11 (x64) (HKLM\...\{9C80213E-9079-4561-8D57-1FDD0D62251F}) (Version: 64.44.23191 - Microsoft Corporation) Hidden
Microsoft 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.18623.20156 - Microsoft Corporation)
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.18623.20156 - Microsoft Corporation)
Microsoft 365 - hu-hu (HKLM\...\O365HomePremRetail - hu-hu) (Version: 16.0.18623.20156 - Microsoft Corporation)
Microsoft 365 - pl-pl (HKLM\...\O365HomePremRetail - pl-pl) (Version: 16.0.18623.20156 - Microsoft Corporation)
Microsoft 365 - sk-sk (HKLM\...\O365HomePremRetail - sk-sk) (Version: 16.0.18623.20156 - Microsoft Corporation)
Microsoft 365 Apps pro velké organizace - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.18623.20156 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 135.0.3179.66 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 135.0.3179.54 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 25.051.0317.0003 - Microsoft Corporation)
Microsoft OneNote - cs-cz (HKLM\...\OneNoteFreeRetail - cs-cz) (Version: 16.0.18623.20156 - Microsoft Corporation)
Microsoft OneNote - en-us (HKLM\...\OneNoteFreeRetail - en-us) (Version: 16.0.18623.20156 - Microsoft Corporation)
Microsoft OneNote - hu-hu (HKLM\...\OneNoteFreeRetail - hu-hu) (Version: 16.0.18623.20156 - Microsoft Corporation)
Microsoft OneNote - pl-pl (HKLM\...\OneNoteFreeRetail - pl-pl) (Version: 16.0.18623.20156 - Microsoft Corporation)
Microsoft OneNote - sk-sk (HKLM\...\OneNoteFreeRetail - sk-sk) (Version: 16.0.18623.20156 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33130 (HKLM-x32\...\{1de5e707-82da-4db6-b810-5d140cc4cbb3}) (Version: 14.38.33130.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.38.33130 (HKLM\...\{C31777DB-51C1-4B19-9F80-38EF5C1D7C89}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.38.33130 (HKLM\...\{1CA7421F-A225-4A9C-B320-A36981A2B789}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.25 (x64) (HKLM\...\{E016F2B9-01FE-4FAA-882E-ECC43FA49751}) (Version: 48.100.4037 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.25 (x64) (HKLM-x32\...\{fb0500c1-f968-4621-a48b-985b52884c49}) (Version: 6.0.25.33020 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 6.0.28 (x64) (HKLM\...\{443A7BE8-E5BE-4514-BDAB-0A872E3E846B}) (Version: 48.112.10435 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.28 (x64) (HKLM-x32\...\{bd3c5800-9256-43b9-97a7-eb349fc38d78}) (Version: 6.0.28.33420 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.11 (x64) (HKLM\...\{C0790AA0-0F40-4836-85B2-677B87625E63}) (Version: 64.44.23253 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.11 (x64) (HKLM-x32\...\{bd40e761-3e88-4202-9b53-26c6bed3d467}) (Version: 8.0.11.34221 - Microsoft Corporation)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 137.0.1 (x64 cs)) (Version: 137.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 127.0.1 - Mozilla)
MyDell (HKLM-x32\...\{E131DFE7-2098-409A-B07F-82F2D76BF17B}) (Version: 3.3.54.0 - Dell, Inc.)
MyDell Application Management (HKLM\...\{F0BC3F6A-93E3-41E7-AD3A-2CB678BBD182}) (Version: 3.3.18.0 - Dell Technologies, Inc.) Hidden
MyDell Components Installer (HKLM\...\{2D169554-AC89-4B50-8F96-8CC0F0FABC63}) (Version: 3.3.23.0 - Dell, Technologies, Inc.) Hidden
MyDell Customer Connect (HKLM\...\{6F63F19A-0FE7-41AA-8C40-DE93D4552645}) (Version: 3.3.23.0 - Dell Technologies, Inc.) Hidden
NewBlue Titler Pro for Windows (HKLM-x32\...\NewBlue Titler Pro for Windows) (Version: 1.0 - NewBlue)
NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)
NewBlue Video Essentials V for Windows (HKLM-x32\...\NewBlue Video Essentials V for Windows) (Version: 3.0 - NewBlue)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18623.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18623.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0415-1000-0000000FF1CE}) (Version: 16.0.18623.20156 - Microsoft Corporation) Hidden
proDAD Adorage 3.0 (64bit) (HKLM\...\proDAD-Adorage-3.0) (Version: 3.0.108.1 - proDAD GmbH)
Python 3.13.2 (64-bit) (HKU\S-1-5-21-3716557575-415477060-2759955272-1002\...\{2f6912bf-a96d-496e-9d97-7d9b771df28d}) (Version: 3.13.2150.0 - Python Software Foundation)
Python 3.13.2 Core Interpreter (64-bit) (HKLM\...\{6B2067F5-FABB-4E5D-9769-ACF1886A7281}) (Version: 3.13.2150.0 - Python Software Foundation) Hidden
Python 3.13.2 Development Libraries (64-bit) (HKLM\...\{7864E49A-A67D-4FA4-A3A6-E5049FCBBBF0}) (Version: 3.13.2150.0 - Python Software Foundation) Hidden
Python 3.13.2 Documentation (64-bit) (HKLM\...\{78405CCF-67BD-4630-ADE2-ADB5D09AC347}) (Version: 3.13.2150.0 - Python Software Foundation) Hidden
Python 3.13.2 Executables (64-bit) (HKLM\...\{5EEECB0A-2BEA-4A17-8F52-33853A198059}) (Version: 3.13.2150.0 - Python Software Foundation) Hidden
Python 3.13.2 pip Bootstrap (64-bit) (HKLM\...\{5E8E4228-121B-49EA-9CC2-B8E3CBED5080}) (Version: 3.13.2150.0 - Python Software Foundation) Hidden
Python 3.13.2 Standard Library (64-bit) (HKLM\...\{89609059-34FF-4C34-8D70-2FF7FA4B2490}) (Version: 3.13.2150.0 - Python Software Foundation) Hidden
Python 3.13.2 Tcl/Tk Support (64-bit) (HKLM\...\{A8BA555F-4CCF-4B73-8205-C9529D178E57}) (Version: 3.13.2150.0 - Python Software Foundation) Hidden
Python 3.13.2 Test Suite (64-bit) (HKLM\...\{E77A600D-F93D-4182-A270-FFBEC7D476B9}) (Version: 3.13.2150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{C7213DDA-56FA-4C9E-BA0C-1C907366F456}) (Version: 3.13.2150.0 - Python Software Foundation)
SmartSound Quicktracks 5 (HKLM-x32\...\{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.) Hidden
SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.)
TeamViewer (HKLM\...\TeamViewer) (Version: 15.64.3 - TeamViewer)
TeraCopy (HKLM\...\{DF5325DF-1F43-4282-85D5-1CA3353E6B13}) (Version: 3.17 - Code Sector)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.03 - Ghisler Software GmbH)
Wolfram Player 14 (M-WIN-D 14.0.0 9685766) (HKLM\...\M-WIN-D 14.0.0 9685766_is1) (Version: 14.0.0 - Wolfram Research, Inc.)

Packages:
=========
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2024-11-09] (INTEL CORP) [Startup Task]
Balíček prostředí funkcí systému Windows -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-04-10] (Microsoft Windows)
Dell Digital Delivery -> C:\Program Files\WindowsApps\DellInc.DellDigitalDelivery_5.5.0.0_x64__htrsf667h5kn2 [2025-02-08] (Dell Inc)
Dell SupportAssist for Home PCs -> C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_4.6.2.0_x64__htrsf667h5kn2 [2025-02-16] (Dell Inc)
Dell Update -> C:\Program Files\WindowsApps\DellInc.DellUpdate_4.9.14.0_x86__htrsf667h5kn2 [2024-06-22] (Dell Inc)
ChatGPT -> C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2025.90.0_x64__2p2nqsd0c76g0 [2025-04-04] (OpenAI) [Startup Task]
Intel® Rapid Storage Technology Application -> C:\Program Files\WindowsApps\AppUp.IntelOptaneMemoryandStorageManagement_20.0.1019.0_x64__8j3eq9eme6ctt [2024-11-17] (INTEL CORP)
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2503.28002.0_x64__8wekyb3d8bbwe [2025-04-04] (Microsoft Corporation) [Startup Task]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-06-21] (Microsoft Corp.)
Microsoft.StartExperiencesApp -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.296.0_x64__8wekyb3d8bbwe [2025-03-25] (Microsoft Corporation)
Waves MaxxAudio Pro for Dell 2022 -> C:\Program Files\WindowsApps\WavesAudio.MaxxAudioProforDell2022_5.0.59.0_x64__fh4rh281wavaa [2024-06-21] (Waves Audio)
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-01-22] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_7000.456.1632.0_x64__8wekyb3d8bbwe [2025-04-10] (Microsoft Corp.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3716557575-415477060-2759955272-1002_Classes\CLSID\{04271989-C4D2-C4F5-3D06-B6CF20AC84D7} -> [OneDrive - Univerzita Palackého v Olomouci] => D:\Dokumenty\OneDrive - Univerzita Palackého v Olomouci [2024-06-23 20:13]
CustomCLSID: HKU\S-1-5-21-3716557575-415477060-2759955272-1002_Classes\CLSID\{227C9E8F-71A1-4B23-9076-682A1A8EAAED}\localserver32 -> c:\program files\macrium\common\reflectmonitor.exe (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
CustomCLSID: HKU\S-1-5-21-3716557575-415477060-2759955272-1002_Classes\CLSID\{6da32e32-0686-8d4f-e799-79dc9f129f0f}\localserver32 -> C:\Program Files\Dell\MyDell\Console\NGA.ThickClient.exe (Dell Technologies Inc. -> Dell)
CustomCLSID: HKU\S-1-5-21-3716557575-415477060-2759955272-1002_Classes\CLSID\{BEA218D2-6950-497B-9434-61683EC065FE}\InprocServer32 -> C:\Users\fipzu\AppData\Local\Programs\Python\Launcher\pyshellext.amd64.dll (Python Software Foundation -> Python Software Foundation)
CustomCLSID: HKU\S-1-5-21-3716557575-415477060-2759955272-1002_Classes\CLSID\{ed071ecf-3772-736c-aec0-661da10aeefc}\localserver32 -> C:\Program Files\Dell\MyDell\Console\Dell.UCA.Systray.exe (Dell Technologies Inc. -> Dell)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-04-10] (Avast Software s.r.o. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-04-10] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-04-10] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers1: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
ContextMenuHandlers1: [TeraCopy] -> {2386CB87-96FF-473D-A009-957E3BFE6F88} => C:\Program Files\TeraCopy\Context.dll [2023-09-04] (CODE SECTOR PTY LTD -> Code Sector)
ContextMenuHandlers2: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
ContextMenuHandlers2: [TeraCopy] -> {2386CB87-96FF-473D-A009-957E3BFE6F88} => C:\Program Files\TeraCopy\Context.dll [2023-09-04] (CODE SECTOR PTY LTD -> Code Sector)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-04-10] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [TeraCopy] -> {2386CB87-96FF-473D-A009-957E3BFE6F88} => C:\Program Files\TeraCopy\Context.dll [2023-09-04] (CODE SECTOR PTY LTD -> Code Sector)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-10] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-04-10] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers6: [TeraCopy] -> {2386CB87-96FF-473D-A009-957E3BFE6F88} => C:\Program Files\TeraCopy\Context.dll [2023-09-04] (CODE SECTOR PTY LTD -> Code Sector)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [vidc.pDAD] => C:\WINDOWS\system32\prodad-codec.dll [607256 2014-09-04] (proDAD GmbH -> proDAD GmbH)

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2025-04-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-04-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-06] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3716557575-415477060-2759955272-1002\...\sharepoint.com -> hxxps://upolomouc-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2022-05-07 07:24 - 2022-05-07 07:22 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3716557575-415477060-2759955272-1002\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
Wi-Fi: Intel(R) Wi-Fi 6 AX201 160MHz -> Netwtw14.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys

vms_vsf: Hyper-V Virtual Switch Extension Filter
ms_l1vhlwf: Nested Network Virtualization
vms_vsp: Hyper-V Virtual Switch Extension Protocol

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{BCB1799F-57F3-47E1-A255-802003D909BA}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8F578B96-FCE5-4689-8A0E-203C7845C16C}] => (Allow) C:\Program Files\Wolfram Research\Wolfram Player\14.0\math.exe (Wolfram Research, Inc -> Wolfram Research, Inc.)
FirewallRules: [{2FF945A3-D8F5-44FF-86C4-C03ADF5FF378}] => (Allow) C:\Program Files\Wolfram Research\Wolfram Player\14.0\math.exe (Wolfram Research, Inc -> Wolfram Research, Inc.)
FirewallRules: [{CC36368C-6C3A-4668-A3B8-F0E8BD646AC9}] => (Allow) C:\Program Files\Wolfram Research\Wolfram Player\14.0\MathKernel.exe (Wolfram Research, Inc -> Wolfram Research, Inc.)
FirewallRules: [{E82AB76A-9335-4CC9-8CCD-4FDF6A4E4B05}] => (Allow) C:\Program Files\Wolfram Research\Wolfram Player\14.0\MathKernel.exe (Wolfram Research, Inc -> Wolfram Research, Inc.)
FirewallRules: [{015247BC-EC75-4C77-9432-38B60B0A8A43}] => (Allow) C:\Program Files\Wolfram Research\Wolfram Player\14.0\WolframPlayer.exe (Wolfram Research, Inc -> Wolfram Research, Inc.)
FirewallRules: [{C01A3D95-D14C-4FE8-A745-12658F03B604}] => (Allow) C:\Program Files\Wolfram Research\Wolfram Player\14.0\WolframPlayer.exe (Wolfram Research, Inc -> Wolfram Research, Inc.)
FirewallRules: [{251112A4-4CE3-4004-B41C-4E1D1EDD931A}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{8B56D2DD-2D4B-4065-BDC8-CA0F7F06D2D3}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{FD057FF7-5985-479B-9E2F-4CD00AB18410}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{EDA1DAF9-D564-4908-9196-A313C019D611}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{E6472D48-4C10-48A0-B613-EECDD3D15DDD}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{0B6B9F02-69B9-417D-8E1B-911A51309A48}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{A6D97FC8-A069-45AC-A034-4A25273A0F7A}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{1A1B0196-1F8C-4BD1-8638-8C97EE9613B2}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{237ED140-F30F-4E27-9A3B-9265BF78C4B8}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DCD2EF08-9E6A-48C3-8933-F25F547F3507}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CA7B6CD5-347E-4337-85E5-CBBD4202715E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D155904E-A570-459A-8DA3-2BBE9F70DCA4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CEF180DF-0184-4BE8-8DF1-47A52F02CC64}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DED85CA4-97F6-4076-A93C-54CD817A7822}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{210C104C-8621-42F3-888B-6D3E028BDE9A}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25017.203.3370.1174_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{658CA20B-31D4-48C4-9E18-521D737E9451}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25017.203.3370.1174_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4D96B53A-6420-4CDF-AA96-700E21E466BF}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\134.0.3124.93\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{728C8D03-2569-4B16-983D-77EF1D0C2A0A}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{E6F2AD86-28C4-475F-9282-25CAD88C8CF0}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{521F72DD-DA58-491F-A602-FD53EBA652E4}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{82BBA4F8-0C1C-411C-AFF3-AA5694178885}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{30C07E09-4372-4CCB-9611-3E32BB724143}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\135.0.3179.54\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B44923E2-F4A1-40B7-A05C-194B5E411A78}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{3D1D95BF-C878-408C-9376-9600A3EC5A1A}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [FPS-SpoolWorker-In-TCP] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-V2] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-NoScope] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{83272BCA-F257-42CF-8A1A-9EDF07C553BA}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{AD6ADF04-3ABD-4245-B285-8FE9E91D0C0C}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{3B4F3C6A-466D-49AF-8452-2FEDB8C82B2F}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{AF44354A-2F67-40FB-848F-68A8C2109523}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{1EF26995-A40D-4E74-BBF4-576B0D35910E}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:454.96 GB) (Free:274.19 GB) (60%)
Check "VSS" service


==================== Faulty Device Manager Devices ============
Name: Intel(R) Dynamic Tuning Technology Updater Component
Description: Intel(R) Dynamic Tuning Technology Updater Component
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Intel(R) Dynamic Tuning Technology Device Component
Description: Intel(R) Dynamic Tuning Technology Device Component
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: ========================

Application errors:
==================
Error: (04/11/2025 07:07:22 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Název chybující aplikace: Dell.CoreServices.Client.exe, verze: 1.5.20.3, časové razítko: 0x65a80000
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.26100.3775, časové razítko: 0x6e2fc3bb
Kód výjimky: 0xe0434352
Posun chyby: 0x00000000000c933a
ID chybujícího procesu: 0x2478
Čas spuštění chybující aplikace: 0x1dbaad9988a7aae
Cesta k chybující aplikaci: C:\Program Files\Dell\TechHub\Dell.CoreServices.Client.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID sestavy: 6a68c3a6-fde5-4f54-848f-13edafd7f4f6
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (04/11/2025 01:58:59 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Název chybující aplikace: Dell.CoreServices.Client.exe, verze: 1.5.20.3, časové razítko: 0x65a80000
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.26100.3775, časové razítko: 0x6e2fc3bb
Kód výjimky: 0xe0434352
Posun chyby: 0x00000000000c933a
ID chybujícího procesu: 0x2554
Čas spuštění chybující aplikace: 0x1dbaad8f9590370
Cesta k chybující aplikaci: C:\Program Files\Dell\TechHub\Dell.CoreServices.Client.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID sestavy: 9fcc10dd-a028-4567-b3c3-8a56c9e398aa
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (04/11/2025 01:54:53 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Název chybující aplikace: Dell.CoreServices.Client.exe, verze: 1.5.20.3, časové razítko: 0x65a80000
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.26100.3775, časové razítko: 0x6e2fc3bb
Kód výjimky: 0xe0434352
Posun chyby: 0x00000000000c933a
ID chybujícího procesu: 0x2730
Čas spuštění chybující aplikace: 0x1dbaac933230b2b
Cesta k chybující aplikaci: C:\Program Files\Dell\TechHub\Dell.CoreServices.Client.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID sestavy: 631848b3-0f54-42b2-a24c-63148e7036cb
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (04/11/2025 12:04:25 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Název chybující aplikace: Dell.CoreServices.Client.exe, verze: 1.5.20.3, časové razítko: 0x65a80000
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.26100.3775, časové razítko: 0x6e2fc3bb
Kód výjimky: 0xe0434352
Posun chyby: 0x00000000000c933a
ID chybujícího procesu: 0x28f4
Čas spuštění chybující aplikace: 0x1dbaab72a42e361
Cesta k chybující aplikaci: C:\Program Files\Dell\TechHub\Dell.CoreServices.Client.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID sestavy: ffa4c6ac-24a0-4565-8eb2-16faeca5f60e
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (04/11/2025 11:07:31 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Chyba služby Stínová kopie svazků: Při dotazu na rozhraní IVssWriterCallback došlo k neočekávané chybě. hr = 0x80070005, Přístup byl odepřen..To je často způsobeno nesprávným nastavením zabezpečení v modulu pro zápis nebo žadateli.


Operace:
Shromažďování dat modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {e8132975-6f93-4464-a53e-1050253ae220}
Název modulu pro zápis: System Writer
ID instance modulu pro zápis: {09a17dba-9979-491d-ba0b-203baa870391}

Error: (04/11/2025 11:05:49 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Chyba služby Stínová kopie svazků: Při dotazu na rozhraní IVssWriterCallback došlo k neočekávané chybě. hr = 0x80070005, Přístup byl odepřen..To je často způsobeno nesprávným nastavením zabezpečení v modulu pro zápis nebo žadateli.


Operace:
Shromažďování dat modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {e8132975-6f93-4464-a53e-1050253ae220}
Název modulu pro zápis: System Writer
ID instance modulu pro zápis: {09a17dba-9979-491d-ba0b-203baa870391}

Error: (04/11/2025 09:56:37 AM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro WORKGROUP\FILIP_PC$ přes https://NTC-KeyId-72b03d712281953463bc7 ... s/Aik/scep se nepovedla:

GetCACaps

Metoda: GET(12062ms)
Fáze: GetCACaps
Nelze rozpoznat název nebo adresu serveru. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (04/11/2025 09:55:16 AM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Název chybující aplikace: Dell.CoreServices.Client.exe, verze: 1.5.20.3, časové razítko: 0x65a80000
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.26100.3775, časové razítko: 0x6e2fc3bb
Kód výjimky: 0xe0434352
Posun chyby: 0x00000000000c933a
ID chybujícího procesu: 0x2510
Čas spuštění chybující aplikace: 0x1dbaa5211cbc821
Cesta k chybující aplikaci: C:\Program Files\Dell\TechHub\Dell.CoreServices.Client.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID sestavy: b3e65b91-6391-42c6-8339-f3f1617f89d0
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:


System errors:
=============
Error: (04/11/2025 07:34:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba cbVSCService11 neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (04/11/2025 07:34:26 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby cbVSCService11 bylo dosaženo časového limitu (45000 ms).

Error: (04/11/2025 07:34:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba hardlock neuspěla při spuštění v důsledku následující chyby:
hardlock není platná aplikace typu Win32.

Error: (04/11/2025 07:34:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba l1vhlwf neuspěla při spuštění v důsledku následující chyby:
Funkce hypervisoru není pro uživatele k dispozici.

Error: (04/11/2025 07:34:15 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Inicializace výpisu stavu systému se nezdařila.

Error: (04/11/2025 07:07:22 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Služba přidružení zařízení zjistila chybu zjišťování koncového bodu.

Error: (04/11/2025 07:07:22 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Služba přidružení zařízení zjistila chybu zjišťování koncového bodu.

Error: (04/11/2025 07:07:22 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Služba přidružení zařízení zjistila chybu zjišťování koncového bodu.


CodeIntegrity:
===============
Date: 2025-04-11 19:34:26
Description:
Code Integrity determined that a process (System) attempted to load \Device\HarddiskVolume7\WINDOWS\System32\drivers\hardlock.sys that is not compatible with hypervisor enforcement. Failure bitmap 0x2. Status 0xC0000220.


==================== Memory info ===========================

BIOS: Dell Inc. 1.23.0 02/06/2025
Motherboard: Dell Inc. 0TPV56
Processor: 13th Gen Intel(R) Core(TM) i7-13700
Percentage of memory in use: 74%
Total physical RAM: 16072.73 MB
Available physical RAM: 4067.54 MB
Total Virtual: 17096.73 MB
Available Virtual: 5012.16 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:454.96 GB) (Free:274.19 GB) (Model: NVMe KBG50ZNS512G NVMe KIOXIA 512GB) NTFS
Drive d: () (Fixed) (Total:465.16 GB) (Free:383.21 GB) (Model: Samsung SSD 870 EVO 500GB) NTFS
Drive z: (Elements) (Fixed) (Total:1862.98 GB) (Free:1489.22 GB) (Model: WD Elements 2621 USB Device) NTFS

\\?\Volume{24bcf54d-1f6e-11ef-9397-94de807d265e}\ (Obnovení) (Fixed) (Total:0.49 GB) (Free:0.06 GB) NTFS
\\?\Volume{a1454ab5-f5f8-451c-a038-97bbe2d0e602}\ (WINRETOOLS) (Fixed) (Total:1.16 GB) (Free:0.47 GB) NTFS
\\?\Volume{c0ad2a9f-b56c-402b-8fb1-6b89a4c41286}\ (Image) (Fixed) (Total:18.97 GB) (Free:0.13 GB) NTFS
\\?\Volume{e4016c01-1d28-46ac-98ce-29a85506f63c}\ (DELLSUPPORT) (Fixed) (Total:1.54 GB) (Free:0.48 GB) NTFS
\\?\Volume{24bcf54e-1f6e-11ef-9397-94de807d265e}\ () (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32
\\?\Volume{359ddb7e-0df4-4b4e-80fc-4bdd9db0b6a7}\ (ESP) (Fixed) (Total:0.19 GB) (Free:0.08 GB) FAT32

==================== MBR & Partition Table ====================

==================== End of Addition.txt =======================

Zdravím!

Otevřte poznámkový blok a zkopírujte do něj:

Start
CloseProcesses:
HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe" (No File)
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
C:\DumpStack.log.tmp

EmptyTemp:
End

Uložte do D:\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Tipuji to na systémový problém, to co teď mažeme jsou jen zbytečnosti a podle logu je tam moho chybujících procesů.