Prosím o kontrolu logu

[ceasare]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-04-2025
Ran by mrazk (administrator) on DESKTOP-E58R78N (ASUS All Series) (19-04-2025 00:45:35)
Running from C:\Users\mrazk\Desktop\FRST64.exe
Loaded Profiles: mrazk
Platform: Microsoft Windows 10 Pro Version 22H2 19045.5737 (X64) Language: Slovenčina (Slovensko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\ProgramData\Wargaming.net\GameCenter\wgc.exe ->) (Wargaming Group Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\dlls\wgc_renderer_host.exe <5>
(C:\ProgramData\Wargaming.net\GameCenter\wgc.exe ->) (Wargaming.net Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\wargamingerrormonitor.exe
(C:\Users\mrazk\AppData\Local\Programs\Opera GX\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\mrazk\AppData\Local\Programs\Opera GX\117.0.5408.213\opera_crashreporter.exe
(cmd.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(DriverStore\FileRepository\u0407052.inf_amd64_84d15514ad17ffa0\B406619\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0407052.inf_amd64_84d15514ad17ffa0\B406619\atieclxx.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\mrazk\AppData\Local\Programs\Opera GX\opera.exe <25>
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(explorer.exe ->) (Wargaming Group Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <15>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <29>
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0407052.inf_amd64_84d15514ad17ffa0\B406619\atiesrxx.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\NisSrv.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2514.4.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\mrazk\AppData\Local\Microsoft\OneDrive\25.056.0324.0003\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-4021623482-843976797-1413372724-1001\...\Run: [MicrosoftEdgeAutoLaunch_9D4B852FE7DADD4CFE7789D8C4964C60] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4418112 2025-04-11] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4021623482-843976797-1413372724-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4694624 2025-04-02] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-4021623482-843976797-1413372724-1001\...\Run: [Wargaming.net Game Center] => C:\ProgramData\Wargaming.net\GameCenter\wgc.exe [2129936 2025-04-17] (Wargaming Group Limited -> Wargaming.net)
HKU\S-1-5-21-4021623482-843976797-1413372724-1001\...\Run: [AMDNoiseSuppression] => "C:\Windows\system32\AMD\ANR\AMDNoiseSuppression.exe" (No File)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\135.0.7049.96\Installer\chrmstp.exe [2025-04-18] (Google LLC -> Google LLC)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {27953081-2DD7-4F88-A5FE-E679AD9B4285} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030872 2024-08-19] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {6AF9DA52-2BEF-4903-822C-F026F196D1CD} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030872 2024-08-19] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {F70EEDB2-E003-4712-A24F-AFD543298E2B} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem137.0.7115.0{2066B49B-E8C3-468C-8A5A-4E3AD232DCA9} => C:\Program Files (x86)\Google\GoogleUpdater\137.0.7115.0\updater.exe [7360096 2025-04-08] (Google LLC -> Google LLC)
Task: {BEB4C435-529B-4AF7-84B0-DEAC64D40E7F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {84951745-BCC1-4BBB-B62B-0D12258CFE9F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {67A7FF1C-EA0B-458D-91CE-67C45071E471} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {562BDE3B-AD39-48A1-BB2B-B67B0C71F889} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5094FC2B-1ED1-4F8C-ABEA-3B19EE1DBCA5} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030872 2024-08-19] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {8AB3FD0A-9CB5-448A-BE23-73337348ECC8} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34880 2025-04-16] (Mozilla Corporation -> Mozilla Foundation)
Task: {70B05E7A-36B7-46C3-8F07-F1E3B2A6AC4D} - System32\Tasks\OneDrive Startup Task-S-1-5-21-4021623482-843976797-1413372724-1001 => C:\Users\mrazk\AppData\Local\Microsoft\OneDrive\25.056.0324.0003\OneDriveLauncher.exe [676680 2025-04-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {6E782A94-72A5-48BB-BAE8-FFE37301E08E} - System32\Tasks\Opera GX scheduled Autoupdate 1744349504 => C:\Users\mrazk\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe [5661064 2025-04-08] (Opera Norway AS -> Opera Software)
Task: {8F24F69E-AE64-4484-AE0B-9F3D04E3B000} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60632 2024-08-19] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {CB8D2D43-8455-415E-B800-37BE791E3676} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [324312 2024-08-19] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{18797393-658f-44c0-8815-d392741dbe71}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{18797393-658f-44c0-8815-d392741dbe71}: [DhcpDomain] home

Edge:
=======
Edge Profile: C:\Users\mrazk\AppData\Local\Microsoft\Edge\User Data\Default [2025-04-18]
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\mrazk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-11]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Edge relevant text changes) - C:\Users\mrazk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-04-11]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx

FireFox:
========
FF DefaultProfile: 0uxywriw.default
FF ProfilePath: C:\Users\mrazk\AppData\Roaming\Mozilla\Firefox\Profiles\0uxywriw.default [2025-04-11]
FF ProfilePath: C:\Users\mrazk\AppData\Roaming\Mozilla\Firefox\Profiles\8ieqnkrd.default-release [2025-04-18]
FF Session Restore: Mozilla\Firefox\Profiles\8ieqnkrd.default-release -> is enabled.
FF Extension: (Tampermonkey) - C:\Users\mrazk\AppData\Roaming\Mozilla\Firefox\Profiles\8ieqnkrd.default-release\Extensions\firefox@tampermonkey.net.xpi [2025-04-11]
FF Extension: (Language: Slovenčina (Slovak)) - C:\Users\mrazk\AppData\Roaming\Mozilla\Firefox\Profiles\8ieqnkrd.default-release\Extensions\langpack-sk@firefox.mozilla.org.xpi [2025-04-15]
FF Extension: (RoboForm Password Manager) - C:\Users\mrazk\AppData\Roaming\Mozilla\Firefox\Profiles\8ieqnkrd.default-release\Extensions\rf-firefox@siber.com.xpi [2025-04-11]
FF Extension: (uBlock Origin) - C:\Users\mrazk\AppData\Roaming\Mozilla\Firefox\Profiles\8ieqnkrd.default-release\Extensions\uBlock0@raymondhill.net.xpi [2025-04-11]
FF Extension: (EPUBReader) - C:\Users\mrazk\AppData\Roaming\Mozilla\Firefox\Profiles\8ieqnkrd.default-release\Extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F}.xpi [2025-04-11]
FF Extension: (Royal Purple Blues) - C:\Users\mrazk\AppData\Roaming\Mozilla\Firefox\Profiles\8ieqnkrd.default-release\Extensions\{b12be733-8f33-430e-8265-4b5e3369374f}.xpi [2025-04-11]

Chrome:
=======
CHR Profile: C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default [2025-04-18]
CHR HomePage: Default -> hxxp://google.sk/
CHR StartupUrls: Default -> "hxxp://mystart.incredibar.com/mb187?a=6OyT6MPidt&i=26","hxxp://us.yahoo.com?fr=fpc-comodo","hxxp://www.delta-search.com/?affID=119816&tt=1 ... oogle.com/"
CHR Session Restore: Default -> is enabled.
CHR Extension: (Překladač Google) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (uBlock Origin) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (buykers | slevové kupony a kódy) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\dacdinoicboceafielngnmjjplncljhj [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (WebCRX) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddgilliopjknmglnpkegbjpoilgachlm [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Tampermonkey) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (AHA Music - Hledač písní pro prohlížeč) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpacanjfikmhoddligfbehkpomnbgblf [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Ochrana Kaspersky 20.0) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\elhpdacimkjpccooodognopfhbdgnpbk [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (TinEye Reverse Image Search) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Context Menu Search) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\idpcgabojogahgmhdgnjkmdliaeeofka [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Kopírování a vkládání v Office Online) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifbmcpbgkhlpfcodhjhdbllhiaomkdej [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (EPUBReader) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhclmfgfllimlhabjkgkeebkbiadflb [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (ESET Password Manager) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\khhapgacijodhjokkcjmleaempmchlem [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Stands AdBlocker) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-04-11]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (RoboForm Password Manager) - C:\Users\mrazk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2025-04-11]hxxps://clients2.google.com/service/update2/crx

Opera:
=======
StartMenuInternet: (HKU\S-1-5-21-4021623482-843976797-1413372724-1001) Opera GXStable - "C:\Users\mrazk\AppData\Local\Programs\Opera GX\opera.exe"

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.25030.2-0\MpDefenderCoreService.exe [2009608 2025-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [559304 2025-04-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.25030.2-0\NisSrv.exe [4538400 2025-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.25030.2-0\MsMpEng.exe [278320 2025-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdfendrmgr; C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrmgr.sys [25672 2024-04-23] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 AMDSAFD; C:\Windows\System32\DriverStore\FileRepository\amdsafd.inf_amd64_960126269e89c62e\amdsafd.sys [113880 2024-05-10] (Advanced Micro Devices -> Advanced Micro Devices)
R3 amdwddmg; C:\Windows\System32\DriverStore\FileRepository\u0407052.inf_amd64_84d15514ad17ffa0\B406619\amdkmdag.sys [106596128 2024-09-04] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\Windows\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [331168 2025-04-11] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [20016 2025-04-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [605576 2025-04-11] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [100744 2025-04-11] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-04-19 00:45 - 2025-04-19 00:46 - 000018490 _____ C:\Users\mrazk\Desktop\FRST.txt
2025-04-19 00:45 - 2025-04-19 00:45 - 000000000 ____D C:\FRST
2025-04-19 00:43 - 2025-04-19 00:43 - 002404864 _____ (Farbar) C:\Users\mrazk\Desktop\FRST64.exe
2025-04-18 21:28 - 2025-04-18 21:28 - 000000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2025-04-18 21:26 - 2025-04-18 21:39 - 000000000 ___HD C:\$WinREAgent
2025-04-18 21:05 - 2025-04-18 21:05 - 000000209 _____ C:\Users\mrazk\Downloads\account_activities_202504.csv
2025-04-18 11:07 - 2025-04-18 11:07 - 000185450 _____ C:\Users\mrazk\Downloads\potvrzeni-o-uhrade-pravidelne-pohybove-sportovni-aktivity.pdf
2025-04-18 09:32 - 2025-04-18 09:32 - 000056624 _____ (Zdenek Svub) C:\Users\mrazk\Downloads\Teredo.exe
2025-04-18 09:06 - 2025-04-18 16:19 - 000000000 ____D C:\Users\mrazk\AppData\Roaming\uTorrent
2025-04-18 09:06 - 2025-04-18 09:06 - 002220432 _____ (Zdenek Svub) C:\Users\mrazk\Downloads\uTorrent221_4K.exe
2025-04-18 09:06 - 2025-04-18 09:06 - 000000000 ____D C:\Users\mrazk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2025-04-18 09:05 - 2025-04-18 09:05 - 000000000 ____D C:\Users\mrazk\Documents\subori
2025-04-18 07:45 - 2025-04-18 07:46 - 000001140 _____ C:\Users\mrazk\Desktop\Minecraft Launcher.lnk
2025-04-17 21:06 - 2025-04-17 21:06 - 000202516 _____ C:\Users\mrazk\Downloads\priloha_1463995248_1_OBZP 2025_vyuctovani.pdf
2025-04-17 21:06 - 2025-04-17 21:06 - 000135508 _____ C:\Users\mrazk\Downloads\priloha_1427967594_0_VypisROB.pdf
2025-04-17 21:05 - 2025-04-17 21:05 - 000158003 _____ C:\Users\mrazk\Downloads\priloha_1463995248_0_p720064819.pdf
2025-04-17 21:01 - 2025-04-17 21:01 - 000200207 _____ C:\Users\mrazk\Downloads\priloha_1508791014_0_DT_na_zkoušku.pdf
2025-04-17 20:53 - 2025-04-17 20:53 - 000193010 _____ C:\Users\mrazk\Downloads\priloha_1511155386_0_VypisROB.pdf
2025-04-16 22:17 - 2025-04-16 22:18 - 091864663 _____ (Aslain ) C:\Users\mrazk\Downloads\Aslains_WoT_Modpack_Installer_v.1.28.1.0_01.exe
2025-04-16 18:21 - 2025-04-18 09:37 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-04-14 21:28 - 2025-04-14 21:28 - 000755969 _____ C:\Users\mrazk\Downloads\doklad o příjmu_000018.pdf
2025-04-14 21:26 - 2025-04-14 21:26 - 000000000 ____D C:\Users\mrazk\AppData\Local\Apps\2.0
2025-04-14 21:25 - 2025-04-14 21:25 - 000091930 _____ C:\Users\mrazk\Downloads\Eva daňové2024.pdf
2025-04-14 18:40 - 2025-04-14 18:40 - 000026775 _____ C:\Users\mrazk\Downloads\tahak_na_piti.pdf
2025-04-13 19:07 - 2025-04-13 19:07 - 000000000 ____D C:\Windows\system32\compatrel
2025-04-13 19:07 - 2025-04-13 19:07 - 000000000 ____D C:\inetpub
2025-04-13 16:47 - 2025-04-13 16:47 - 000000000 ____D C:\ProgramData\Propagation
2025-04-13 14:02 - 2025-04-13 14:02 - 000000024 _____ C:\Users\mrazk\Desktop\pyrofyshing.txt
2025-04-13 10:17 - 2025-04-13 10:17 - 000022205 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-04-13 10:16 - 2025-04-13 10:16 - 000022205 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2025-04-13 10:08 - 2025-04-13 10:08 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2025-04-13 10:06 - 2025-04-15 05:09 - 000000000 ____D C:\Program Files\RUXIM
2025-04-13 10:06 - 2025-04-13 10:08 - 000000000 ____D C:\Windows\system32\MRT
2025-04-12 07:04 - 2025-04-16 08:41 - 000003570 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-4021623482-843976797-1413372724-1001
2025-04-12 07:04 - 2025-04-12 07:04 - 000000000 ___HD C:\OneDriveTemp
2025-04-12 05:24 - 2025-04-12 05:24 - 000000000 ____D C:\Users\mrazk\AppData\Local\Backup
2025-04-11 17:57 - 2025-04-18 18:46 - 000003118 _____ C:\Windows\system32\Tasks\AMDInstallLauncher
2025-04-11 17:57 - 2025-04-18 18:46 - 000003110 _____ C:\Windows\system32\Tasks\AMDLinkUpdate
2025-04-11 17:57 - 2025-04-12 07:59 - 000000000 ____D C:\Users\mrazk\AppData\Local\AMD_Common
2025-04-11 17:57 - 2025-04-11 17:57 - 000003484 _____ C:\Windows\system32\Tasks\ModifyLinkUpdate
2025-04-11 17:57 - 2025-04-11 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Bug Report Tool
2025-04-11 17:57 - 2025-04-11 17:57 - 000000000 ____D C:\ProgramData\AMD
2025-04-11 17:56 - 2025-04-11 17:56 - 000003152 _____ C:\Windows\system32\Tasks\StartCN
2025-04-11 17:56 - 2025-04-11 17:56 - 000003072 _____ C:\Windows\system32\Tasks\StartDVR
2025-04-11 17:56 - 2025-04-11 17:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Software꞉ Adrenalin Edition
2025-04-11 17:55 - 2025-04-11 17:55 - 000000000 ____D C:\ProgramData\Package Cache
2025-04-11 17:55 - 2024-08-20 00:13 - 002976160 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\AMDBugReportTool.exe
2025-04-11 17:50 - 2025-04-12 05:17 - 000000000 ____D C:\AMD
2025-04-11 17:50 - 2024-09-04 09:44 - 002100128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 001617824 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 001617824 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000978336 _____ (AMD) C:\Windows\system32\atieclxx.exe
2025-04-11 17:50 - 2024-09-04 09:44 - 000856864 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2025-04-11 17:50 - 2024-09-04 09:44 - 000856864 _____ C:\Windows\system32\vulkaninfo.exe
2025-04-11 17:50 - 2024-09-04 09:44 - 000737696 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-04-11 17:50 - 2024-09-04 09:44 - 000737696 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2025-04-11 17:50 - 2024-09-04 09:44 - 000682400 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000682400 _____ C:\Windows\system32\vulkan-1.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000668008 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000668008 _____ C:\Windows\SysWOW64\vulkan-1.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000610720 _____ C:\Windows\system32\GameManager64.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000537504 _____ C:\Windows\system32\atieah64.exe
2025-04-11 17:50 - 2024-09-04 09:44 - 000504088 _____ C:\Windows\system32\EEURestart.exe
2025-04-11 17:50 - 2024-09-04 09:44 - 000473480 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000464288 _____ C:\Windows\SysWOW64\GameManager32.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000406408 _____ C:\Windows\SysWOW64\atieah32.exe
2025-04-11 17:50 - 2024-09-04 09:44 - 000267168 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000229280 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000211128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000207776 _____ C:\Windows\system32\mantle64.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000196512 _____ (AMD) C:\Windows\system32\atimuixx.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000186656 _____ C:\Windows\system32\mantleaxl64.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000184608 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000174944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000165792 _____ C:\Windows\SysWOW64\mantle32.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000149280 _____ C:\Windows\SysWOW64\mantleaxl32.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000148896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000142624 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amfrt64.dll
2025-04-11 17:50 - 2024-09-04 09:44 - 000075176 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ati2erec.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 105410432 _____ C:\Windows\system32\amd_comgr.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 088606496 _____ C:\Windows\SysWOW64\amd_comgr32.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 004374408 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdadlx64.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 004179848 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdadlx32.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 002245408 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdsasrv64.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 001355520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdsacli64.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 001074664 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdsacli32.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000944008 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000801672 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Rapidfire64.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000771488 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000678816 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\Rapidfire.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000570248 _____ C:\Windows\system32\amdgfxinfo64.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000545568 _____ C:\Windows\system32\dgtrayicon.exe
2025-04-11 17:50 - 2024-09-04 09:43 - 000525088 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000471456 _____ C:\Windows\system32\amdlogum.exe
2025-04-11 17:50 - 2024-09-04 09:43 - 000434056 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000390936 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000232672 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdihk64.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000187968 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdihk32.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000139168 _____ C:\Windows\system32\amdxc64.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000118560 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amfrt32.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000115104 _____ C:\Windows\SysWOW64\amdxc32.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000103304 _____ C:\Windows\system32\clinfo.exe
2025-04-11 17:50 - 2024-09-04 09:43 - 000051616 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\RapidFireServer64.dll
2025-04-11 17:50 - 2024-09-04 09:43 - 000048520 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\RapidFireServer.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 019434400 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdhip64.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 001736464 _____ (AMD) C:\Windows\system32\amf-mft-mjpeg-decoder64.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 001412064 _____ (AMD) C:\Windows\SysWOW64\amf-mft-mjpeg-decoder32.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 000572312 _____ C:\Windows\system32\amdmiracast.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 000177984 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 000177056 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 000167552 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 000167528 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 000157536 _____ C:\Windows\system32\atidxx64.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 000152504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 000145800 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 000138624 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 000138616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2025-04-11 17:50 - 2024-09-04 09:42 - 000131136 _____ C:\Windows\SysWOW64\atidxx32.dll
2025-04-11 17:50 - 2024-09-04 08:56 - 109624080 _____ C:\Windows\system32\amdxc64.so
2025-04-11 17:50 - 2023-05-24 13:42 - 000061888 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\amdxe.sys
2025-04-11 17:48 - 2025-04-11 17:49 - 648277352 _____ (Advanced Micro Devices, Inc.) C:\Users\mrazk\Downloads\whql-amd-software-adrenalin-edition-24.9.1-win10-win11-vega-polaris.exe
2025-04-11 17:47 - 2025-04-11 17:47 - 000000000 ____D C:\Users\mrazk\AppData\Roaming\Microsoft\MMC
2025-04-11 17:07 - 2025-04-11 17:07 - 091502334 _____ (Aslain ) C:\Users\mrazk\Downloads\Aslains_WoT_Modpack_Installer_v.1.28.0.1_09.exe
2025-04-11 16:18 - 2025-04-11 17:28 - 000000000 ____D C:\Users\mrazk\AppData\Roaming\Wargaming.net
2025-04-11 16:18 - 2025-04-11 16:18 - 000000000 ____D C:\Users\mrazk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wargaming.net
2025-04-11 16:18 - 2025-04-11 16:18 - 000000000 ____D C:\Users\mrazk\AppData\Local\PeerDistRepub
2025-04-11 16:18 - 2025-04-11 16:18 - 000000000 ____D C:\Games
2025-04-11 16:17 - 2025-04-11 16:17 - 006541528 _____ (Wargaming.net ) C:\Users\mrazk\Downloads\world_of_tanks_install_eu_d93vgxg3m166.exe
2025-04-11 16:17 - 2025-04-11 16:17 - 000000000 ____D C:\ProgramData\Wargaming.net
2025-04-11 13:31 - 2025-04-11 13:31 - 000183096 _____ (Zoom Communications, Inc.) C:\Users\mrazk\Downloads\Zoom_cm_fo42pnktZ9vvrZo4_mLK8SdheXOBUzBZHTZzjefJ5Ehb61Nx4ZI7cK@KMsUrvaHLjmcVpFE_k9ca8065c998f5b72_.exe
2025-04-11 13:31 - 2025-04-11 13:31 - 000183096 _____ (Zoom Communications, Inc.) C:\Users\mrazk\Downloads\Zoom_cm_fo42pnktZ9vvrZo4_mFtSFn9eGFJIpAnJ8fOC42laHPGo9z1F-OSdx@U9MAyYJFCIROce6o_k9ca8065c998f5b72_.exe
2025-04-11 11:16 - 2025-04-11 11:18 - 000000000 ____D C:\Users\mrazk\AppData\Local\Steam
2025-04-11 11:16 - 2025-04-11 11:16 - 000000000 ____D C:\Users\mrazk\AppData\Local\CEF
2025-04-11 11:15 - 2025-04-19 00:38 - 000000000 ____D C:\Program Files (x86)\Steam
2025-04-11 11:15 - 2025-04-11 11:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2025-04-11 11:14 - 2025-04-11 11:14 - 002380800 _____ C:\Users\mrazk\Downloads\SteamSetup.exe
2025-04-11 09:30 - 2025-04-11 09:30 - 000466598 _____ (Fabric Team) C:\Users\mrazk\Downloads\fabric-installer-1.0.3.exe
2025-04-11 09:29 - 2025-04-11 09:29 - 000072296 _____ (N/A) C:\Windows\system32\WindowsAccessBridge-64.dll
2025-04-11 09:29 - 2025-04-11 09:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2025-04-11 09:29 - 2025-04-11 09:29 - 000000000 ____D C:\Program Files\Java
2025-04-11 09:29 - 2025-04-11 09:29 - 000000000 ____D C:\Program Files\Common Files\Oracle
2025-04-11 09:28 - 2025-04-11 09:29 - 215759976 _____ (Oracle Corporation) C:\Users\mrazk\Downloads\jdk-24_windows-x64_bin.exe
2025-04-11 09:27 - 2025-04-11 09:29 - 000000000 ____D C:\ProgramData\Oracle
2025-04-11 09:27 - 2025-04-11 09:27 - 069258336 _____ (Oracle Corporation) C:\Users\mrazk\Downloads\jre-8u441-windows-x64(1).exe
2025-04-11 09:25 - 2025-04-11 09:25 - 000073482 _____ C:\Users\mrazk\Downloads\jarfix(1).exe
2025-04-11 09:24 - 2025-04-11 09:24 - 000000000 ____D C:\Users\mrazk\AppData\LocalLow\Sun
2025-04-11 09:23 - 2025-04-11 09:23 - 069258336 _____ (Oracle Corporation) C:\Users\mrazk\Downloads\jre-8u441-windows-x64.exe
2025-04-11 09:23 - 2025-04-11 09:23 - 000073482 _____ C:\Users\mrazk\Downloads\jarfix.exe
2025-04-11 09:15 - 2025-04-18 11:54 - 000000000 ____D C:\Users\mrazk\AppData\Roaming\.minecraft
2025-04-11 09:13 - 2025-04-11 09:13 - 000000000 ____D C:\Users\mrazk\AppData\Local\INetHistory
2025-04-11 09:08 - 2025-04-11 09:08 - 000000028 ____H C:\.GamingRoot
2025-04-11 09:08 - 2025-04-11 09:08 - 000000000 ____D C:\XboxGames
2025-04-11 08:59 - 2025-04-15 05:13 - 000000000 ____D C:\Users\mrazk\AppData\Local\PlaceholderTileLogoFolder
2025-04-11 08:27 - 2025-04-11 09:16 - 000000000 ____D C:\Users\mrazk\AppData\Local\MinecraftInstaller
2025-04-11 07:45 - 2025-04-13 12:34 - 000000000 ____D C:\Windows\Panther
2025-04-11 07:45 - 2025-04-13 10:17 - 000420166 __RSH C:\bootmgr
2025-04-11 07:45 - 2025-04-11 07:45 - 000008192 __RSH C:\BOOTSECT.BAK
2025-04-11 07:45 - 2019-12-07 11:08 - 000000001 ___SH C:\BOOTNXT
2025-04-11 07:34 - 2025-04-18 07:40 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-04-11 07:34 - 2025-04-11 07:34 - 000000000 ____D C:\Users\mrazk\AppData\Local\Google
2025-04-11 07:34 - 2025-04-11 07:34 - 000000000 ____D C:\Program Files\Google
2025-04-11 07:33 - 2025-04-11 07:34 - 000000000 ____D C:\Program Files (x86)\Google
2025-04-11 07:33 - 2025-04-11 07:33 - 010781056 _____ (Google LLC) C:\Users\mrazk\Downloads\ChromeSetup.exe
2025-04-11 07:33 - 2025-04-11 07:33 - 000000000 ____D C:\Windows\system32\Tasks\GoogleSystem
2025-04-11 07:31 - 2025-04-11 07:31 - 004261392 _____ () C:\Users\mrazk\Downloads\OperaGXSetup.exe
2025-04-11 07:31 - 2025-04-11 07:31 - 000004290 _____ C:\Windows\system32\Tasks\Opera GX scheduled Autoupdate 1744349504
2025-04-11 07:31 - 2025-04-11 07:31 - 000001409 _____ C:\Users\mrazk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prehliadač Opera GX.lnk
2025-04-11 07:31 - 2025-04-11 07:31 - 000000000 ____D C:\Users\mrazk\AppData\Roaming\Opera Software
2025-04-11 07:31 - 2025-04-11 07:31 - 000000000 ____D C:\Users\mrazk\AppData\Local\Opera Software
2025-04-11 07:16 - 2025-04-11 07:16 - 000000000 ____D C:\Users\mrazk\AppData\Local\Comms
2025-04-11 07:15 - 2025-04-18 19:29 - 000000000 ____D C:\Users\mrazk\AppData\Roaming\Microsoft\Spelling
2025-04-11 07:08 - 2025-04-18 18:48 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-04-11 07:08 - 2025-04-18 09:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-04-11 07:08 - 2025-04-17 17:24 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-04-11 07:08 - 2025-04-11 07:08 - 000002038 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Private Browsing.lnk
2025-04-11 07:08 - 2025-04-11 07:08 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2025-04-11 07:08 - 2025-04-11 07:08 - 000000000 ____D C:\Users\mrazk\AppData\Roaming\Mozilla
2025-04-11 07:08 - 2025-04-11 07:08 - 000000000 ____D C:\Users\mrazk\AppData\Local\Mozilla
2025-04-11 07:07 - 2025-04-11 07:07 - 000382376 _____ (Mozilla) C:\Users\mrazk\Downloads\Firefox Installer.exe
2025-04-11 07:02 - 2025-04-11 07:02 - 000000837 _____ C:\Users\mrazk\Desktop\záloha 10.04.2025 – odkaz.lnk
2025-04-11 07:01 - 2025-04-16 08:41 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4021623482-843976797-1413372724-1001
2025-04-11 07:00 - 2025-04-18 18:47 - 000000000 ___RD C:\Users\mrazk\OneDrive
2025-04-11 07:00 - 2025-04-16 08:41 - 000003378 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4021623482-843976797-1413372724-1001
2025-04-11 07:00 - 2025-04-11 07:00 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2025-04-11 06:59 - 2025-04-16 08:05 - 000000000 ____D C:\Users\mrazk\AppData\Local\Packages
2025-04-11 06:59 - 2025-04-13 19:26 - 000000000 ____D C:\ProgramData\Packages
2025-04-11 06:59 - 2025-04-13 19:13 - 000000000 ____D C:\Users\mrazk\AppData\Local\D3DSCache
2025-04-11 06:59 - 2025-04-12 21:04 - 000000000 ____D C:\Users\mrazk\AppData\Local\AMD
2025-04-11 06:59 - 2025-04-12 13:25 - 000000000 __RHD C:\Users\Public\AccountPictures
2025-04-11 06:59 - 2025-04-11 09:26 - 000000000 ____D C:\Users\mrazk\AppData\Local\ConnectedDevicesPlatform
2025-04-11 06:59 - 2025-04-11 06:59 - 000000000 ___SD C:\Users\mrazk\AppData\Roaming\Microsoft\Crypto
2025-04-11 06:59 - 2025-04-11 06:59 - 000000000 ___RD C:\Users\mrazk\3D Objects
2025-04-11 06:59 - 2025-04-11 06:59 - 000000000 ____D C:\Users\mrazk\AppData\Roaming\Microsoft\Vault
2025-04-11 06:59 - 2025-04-11 06:59 - 000000000 ____D C:\Users\mrazk\AppData\Roaming\Microsoft\Network
2025-04-11 06:59 - 2025-04-11 06:59 - 000000000 ____D C:\Users\mrazk\AppData\Roaming\Adobe
2025-04-11 06:59 - 2025-04-11 06:59 - 000000000 ____D C:\Users\mrazk\AppData\LocalLow\AMD
2025-04-11 06:59 - 2025-04-11 06:59 - 000000000 ____D C:\Users\mrazk\AppData\Local\VirtualStore
2025-04-11 06:59 - 2025-04-11 06:59 - 000000000 ____D C:\Users\mrazk\AppData\Local\Publishers
2025-04-11 06:54 - 2025-04-16 08:41 - 000002367 _____ C:\Users\mrazk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-04-11 06:54 - 2025-04-15 19:54 - 000000000 ____D C:\Users\mrazk
2025-04-11 06:54 - 2025-04-11 06:59 - 000000000 ____D C:\Users\mrazk\AppData\Roaming\Microsoft\Windows
2025-04-11 06:54 - 2025-04-11 06:54 - 000000020 ___SH C:\Users\mrazk\ntuser.ini
2025-04-11 06:54 - 2025-04-11 06:54 - 000000000 ___SD C:\Users\mrazk\AppData\Roaming\Microsoft\SystemCertificates
2025-04-11 06:54 - 2025-04-11 06:54 - 000000000 ___SD C:\Users\mrazk\AppData\Roaming\Microsoft\Protect
2025-04-11 06:54 - 2025-04-11 06:54 - 000000000 ___SD C:\Users\mrazk\AppData\Roaming\Microsoft\Credentials
2025-04-11 06:51 - 2025-04-18 18:52 - 000795738 _____ C:\Windows\system32\PerfStringBackup.INI
2025-04-11 06:51 - 2025-04-18 09:37 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2025-04-11 06:51 - 2025-04-11 17:56 - 000000000 ____D C:\Program Files\AMD
2025-04-11 06:51 - 2025-04-11 06:51 - 000000000 ____D C:\Windows\system32\AMD
2025-04-11 06:51 - 2024-09-04 09:43 - 000116944 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\amdkmpfd.sys
2025-04-11 06:51 - 2023-04-06 13:07 - 000623104 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdfendrsr.exe
2025-04-11 06:51 - 2023-04-06 13:07 - 000195032 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\amdfendr.sys
2025-04-11 06:51 - 2023-04-06 13:07 - 000054792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\amdfendrmgr.sys
2025-04-11 06:47 - 2025-04-11 06:47 - 000000000 _SHDL C:\Documents and Settings
2025-04-11 06:47 - 2025-04-11 06:47 - 000000000 ____D C:\Windows\CSC
2025-04-11 06:45 - 2025-04-19 00:38 - 000000000 ____D C:\Windows\system32\SleepStudy
2025-04-11 06:45 - 2025-04-18 18:46 - 000008192 ___SH C:\DumpStack.log.tmp
2025-04-11 06:45 - 2025-04-18 18:46 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2025-04-11 06:45 - 2025-04-13 20:52 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-04-11 06:45 - 2025-04-13 19:09 - 000287800 _____ C:\Windows\system32\FNTCACHE.DAT
2025-04-11 06:45 - 2025-04-11 09:06 - 000000000 ____D C:\Windows\system32\Drivers\wd
2025-04-11 06:45 - 2025-04-11 06:46 - 000003632 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-04-11 06:45 - 2025-04-11 06:46 - 000003508 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-04-11 06:45 - 2025-04-11 06:45 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2025-04-11 06:45 - 2025-04-11 06:45 - 000000000 ____D C:\Windows\ServiceProfiles

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-04-18 22:01 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-04-18 21:39 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2025-04-18 18:52 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2025-04-18 09:43 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-04-18 09:43 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2025-04-18 09:37 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2025-04-18 07:44 - 2023-12-04 04:47 - 000000000 ____D C:\Windows\SystemTemp
2025-04-13 19:11 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2025-04-13 19:07 - 2023-12-04 04:47 - 000000000 ____D C:\Windows\InboxApps
2025-04-13 19:07 - 2019-12-07 16:41 - 000000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents
2025-04-13 19:07 - 2019-12-07 16:41 - 000000000 ___SD C:\Windows\system32\AppV
2025-04-13 19:07 - 2019-12-07 16:41 - 000000000 ____D C:\Program Files\Windows Portable Devices
2025-04-13 19:07 - 2019-12-07 16:41 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2025-04-13 19:07 - 2019-12-07 16:41 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2025-04-13 19:07 - 2019-12-07 16:41 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2025-04-13 19:07 - 2019-12-07 16:41 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2025-04-13 19:07 - 2019-12-07 16:39 - 000000000 ____D C:\Windows\system32\OpenSSH
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\SysWOW64\F12
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\UNP
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\F12
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\ShellExperiences
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\setup
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\migwiz
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\DDFs
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellExperiences
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellComponents
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Provisioning
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\DiagTrack
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2025-04-13 19:07 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\USOPrivate
2025-04-13 19:07 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\servicing
2025-04-12 05:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\appcompat
2025-04-12 05:17 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Drivers\DriverData
2025-04-11 09:06 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2025-04-11 09:02 - 2019-12-07 11:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2025-04-11 07:45 - 2019-12-07 11:14 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2025-04-11 07:15 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState
2025-04-11 06:54 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioDatabase
2025-04-11 06:47 - 2019-12-07 16:39 - 000000000 ____D C:\Windows\system32\FxsTmp
2025-04-11 06:47 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\spool

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================



Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-04-2025
Ran by mrazk (19-04-2025 00:47:58)
Running from C:\Users\mrazk\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.5737 (X64) (2025-04-11 04:47:14)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-4021623482-843976797-1413372724-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4021623482-843976797-1413372724-503 - Limited - Disabled)
Guest (S-1-5-21-4021623482-843976797-1413372724-501 - Limited - Disabled)
mrazk (S-1-5-21-4021623482-843976797-1413372724-1001 - Administrator - Enabled) => C:\Users\mrazk
WDAGUtilityAccount (S-1-5-21-4021623482-843976797-1413372724-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 24.9.1 - Advanced Micro Devices, Inc.)
Aslain's WoT Modpack verze 1.28.1.0.01 (HKLM-x32\...\Aslains_WoT_Modpack_Installer_is1) (Version: 1.28.1.0.01 - Aslain)
Branding64 (HKLM\...\{492AEFBE-1B81-4C20-A111-E6974BB98EC5}) (Version: 1.00.0009 - Advanced Micro Devices, Inc.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 135.0.7049.96 - Google LLC)
Java(TM) SE Development Kit 24 (64-bit) (HKLM\...\{4357E090-E02D-5CB2-9C32-639375983B2B}) (Version: 24.0.0.0 - Oracle Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 135.0.3179.73 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 135.0.3179.73 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-4021623482-843976797-1413372724-1001\...\OneDriveSetup.exe) (Version: 25.056.0324.0003 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30133 (HKLM-x32\...\{295d1583-fdb9-414b-a4c8-da539362a26b}) (Version: 14.29.30133.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.29.30133 (HKLM\...\{E699E009-1C3C-4E50-9B57-2B39F0954C7F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.29.30133 (HKLM\...\{6CD9E9ED-906D-4196-8DC3-F987D2F6615F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 en-US) (HKLM\...\Mozilla Firefox 137.0.2 (x64 en-US)) (Version: 137.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 137.0.1 - Mozilla)
Opera GX Stable 117.0.5408.213 (HKU\S-1-5-21-4021623482-843976797-1413372724-1001\...\Opera GX 117.0.5408.213) (Version: 117.0.5408.213 - Opera Software)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
Wargaming.net Game Center (HKU\S-1-5-21-4021623482-843976797-1413372724-1001\...\Wargaming.net Game Center) (Version: 25.1.0.8902 - Wargaming.net)
World of Tanks EU (HKU\S-1-5-21-4021623482-843976797-1413372724-1001\...\2314027414) (Version: - Wargaming.net)

Packages:
=========
Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_2.2.2.0_x64__8wekyb3d8bbwe [2025-04-11] (Microsoft Studios)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2514.4.0_x64__cv1g1gvanyjgm [2025-04-16] (WhatsApp Inc.) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2024-08-19] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2025-04-11 11:15 - 2024-12-03 22:40 - 005378048 _____ (FFmpeg Project) [File not signed] C:\Program Files (x86)\Steam\libavcodec-61.dll
2025-04-11 11:15 - 2024-12-03 22:40 - 000875008 _____ (FFmpeg Project) [File not signed] C:\Program Files (x86)\Steam\libavfilter-10.dll
2025-04-11 11:15 - 2024-12-03 22:40 - 001674240 _____ (FFmpeg Project) [File not signed] C:\Program Files (x86)\Steam\libavformat-61.dll
2025-04-11 11:15 - 2024-12-03 22:40 - 001640960 _____ (FFmpeg Project) [File not signed] C:\Program Files (x86)\Steam\libavutil-59.dll
2025-04-11 11:15 - 2024-12-03 22:40 - 000630272 _____ (FFmpeg Project) [File not signed] C:\Program Files (x86)\Steam\libswresample-5.dll
2025-04-11 11:15 - 2024-12-03 22:40 - 001092608 _____ (FFmpeg Project) [File not signed] C:\Program Files (x86)\Steam\libswscale-8.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============


==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 11:14 - 2019-12-07 11:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-4021623482-843976797-1413372724-1001\Control Panel\Desktop\\Wallpaper -> F:\záloha 10.04.2025\Obrázky\3840x2160-small-memory-4k_1551642806.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Intel(R) Ethernet Connection I217-V -> e1d68x64.sys

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{B24F75E9-8C90-4053-8A6D-DD0F905D2356}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{38BBDDCF-E95C-49BC-A2E1-C0C6ED4CEAEB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{5F1ABAC3-19DB-42DD-A8DB-E7DC2C1F9484}C:\users\mrazk\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\mrazk\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe
FirewallRules: [UDP Query User{548322CB-E7E3-4871-BCD1-20CE134614EF}C:\users\mrazk\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\mrazk\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe
FirewallRules: [{3001AC2D-3B6B-45BE-B756-8BEFB0740072}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D17C638E-C8CD-4A88-9C00-0E3C36627323}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{A10F0E12-BFB5-4A94-B9EB-A3AC9BB66271}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{993B9272-9F3A-4DC6-84C2-996C63BA12C2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{4A710EDE-19D2-43D3-87D1-6BC5D2BD2C3D}] => (Allow) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{D9BF8B70-F65F-461B-B221-CE29A371E4A2}] => (Allow) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{8E8F83AD-F1BC-4834-8688-0B1810DC91A0}] => (Allow) C:\Games\World_of_Tanks_EU\WorldOfTanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{B697B31B-D334-4989-9301-30E90FAF2D27}] => (Allow) C:\Games\World_of_Tanks_EU\WorldOfTanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [TCP Query User{30D82455-16EE-465E-B8DB-7540A70C8958}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [UDP Query User{F2A36EBB-3CAC-4846-9800-2174AD47AF38}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [TCP Query User{65C5DA70-DDD3-4234-A0EF-E4CD6610C15E}C:\users\mrazk\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\mrazk\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{0D4510B4-3D62-45BA-96CB-A23D56CA4B37}C:\users\mrazk\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\mrazk\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{1B892D0A-D3D7-451E-B8B8-C6846CEE6FF4}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\135.0.3179.73\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4E1B218A-4B48-457D-AE1B-524CCEB352DD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.138.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9829E97A-2FF4-40B9-AC58-10420282B015}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.138.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{45B8285F-1EF4-4A17-9A2C-6F51CBBF2742}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.138.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{DF5838C7-9A12-448B-A15E-782EA087908E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.138.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{80A64D95-8EB7-47EE-9CB1-FCD78C3D94D2}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{9FEE7F76-E9E5-4150-8E2F-08891D0F4BC3}C:\users\mrazk\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\mrazk\appdata\roaming\utorrent\utorrent.exe (Zdenek Svub -> BitTorrent, Inc.)
FirewallRules: [UDP Query User{3712B17B-A2AD-4715-86F9-6A4DAF609674}C:\users\mrazk\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\mrazk\appdata\roaming\utorrent\utorrent.exe (Zdenek Svub -> BitTorrent, Inc.)

==================== Restore Points =========================

18-04-2025 21:39:10 Inštalátor modulov systému Windows

==================== Faulty Device Manager Devices ============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM Bus Controller
Description: SM Bus Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: ========================

Application errors:
==================
Error: (04/17/2025 05:24:43 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5

Error: (04/16/2025 10:18:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: WorldOfTanks.exe, verzia: 1.28.1.1297, časová značka: 0x67f3e4a7
Názov chybujúceho modulu: ntdll.dll, verzia: 10.0.19041.5438, časová značka: 0xab0dece3
Kód výnimky: 0xc0000374
Odstup chyby: 0x00000000000ff3c9
Identifikácia chybujúceho procesu: 0x2bd0
Čas spustenia chybujúcej aplikácie: 0x01dbaf0c889fb18a
Cesta chybujúcej aplikácie: C:\Games\World_of_Tanks_EU\win64\WorldOfTanks.exe
Cesta chybujúceho modulu: C:\Windows\SYSTEM32\ntdll.dll
Identifikácia hlásenia: 2e77c85a-f756-4dfb-abb0-254322d5081c
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (04/16/2025 08:22:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: GameBar.exe, verzia: 7.225.3271.0, časová značka: 0x67e5a73f
Názov chybujúceho modulu: ntdll.dll, verzia: 10.0.19041.5438, časová značka: 0xab0dece3
Kód výnimky: 0xc0000409
Odstup chyby: 0x000000000008cc4f
Identifikácia chybujúceho procesu: 0x283c
Čas spustenia chybujúcej aplikácie: 0x01dbae97c03e780f
Cesta chybujúcej aplikácie: C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.225.3271.0_x64__8wekyb3d8bbwe\GameBar.exe
Cesta chybujúceho modulu: C:\Windows\SYSTEM32\ntdll.dll
Identifikácia hlásenia: c4ff018b-315a-4382-8ff3-a1bce8015d9e
Celé meno chybujúceho balíka: Microsoft.XboxGamingOverlay_7.225.3271.0_x64__8wekyb3d8bbwe
Identifikácia chybujúcej aplikácie vzhľadom na balík: App

Error: (04/15/2025 04:06:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: GameBar.exe, verzia: 7.225.3271.0, časová značka: 0x67e5a73f
Názov chybujúceho modulu: ntdll.dll, verzia: 10.0.19041.5438, časová značka: 0xab0dece3
Kód výnimky: 0xc0000409
Odstup chyby: 0x000000000008cc4f
Identifikácia chybujúceho procesu: 0x3340
Čas spustenia chybujúcej aplikácie: 0x01dbae0f14231cc7
Cesta chybujúcej aplikácie: C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.225.3271.0_x64__8wekyb3d8bbwe\GameBar.exe
Cesta chybujúceho modulu: C:\Windows\SYSTEM32\ntdll.dll
Identifikácia hlásenia: 51cebd99-15e4-4528-83e6-43bd8e6e45e9
Celé meno chybujúceho balíka: Microsoft.XboxGamingOverlay_7.225.3271.0_x64__8wekyb3d8bbwe
Identifikácia chybujúcej aplikácie vzhľadom na balík: App

Error: (04/15/2025 08:44:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: GameBar.exe, verzia: 7.225.3271.0, časová značka: 0x67e5a73f
Názov chybujúceho modulu: InputHost.dll, verzia: 10.0.19041.4355, časová značka: 0x4a00af42
Kód výnimky: 0xc0000005
Odstup chyby: 0x000000000000e5f7
Identifikácia chybujúceho procesu: 0x8e8
Čas spustenia chybujúcej aplikácie: 0x01dbadd1d3a762cd
Cesta chybujúcej aplikácie: C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.225.3271.0_x64__8wekyb3d8bbwe\GameBar.exe
Cesta chybujúceho modulu: C:\Windows\SYSTEM32\InputHost.dll
Identifikácia hlásenia: b36df69d-431a-4042-aea3-21bff229aa38
Celé meno chybujúceho balíka: Microsoft.XboxGamingOverlay_7.225.3271.0_x64__8wekyb3d8bbwe
Identifikácia chybujúcej aplikácie vzhľadom na balík: App

Error: (04/12/2025 11:31:51 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SearchApp.exe version 10.0.19041.3758 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 5b4

Start Time: 01dbab9f093f3b9f

Termination Time: 4294967295

Application Path: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe

Report Id: 1ad49159-9c75-4fe5-a19a-28ab1f3e8289

Faulting package full name: Microsoft.Windows.Search_1.14.10.19041_neutral_neutral_cw5n1h2txyewy

Faulting package-relative application ID: ShellFeedsUI

Hang type: Quiesce

Error: (04/11/2025 07:37:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: GameBar.exe, verzia: 7.225.3271.0, časová značka: 0x67e5a73f
Názov chybujúceho modulu: ntdll.dll, verzia: 10.0.19041.3636, časová značka: 0x9b64aa6f
Kód výnimky: 0xc0000409
Odstup chyby: 0x000000000008c80f
Identifikácia chybujúceho procesu: 0x17c0
Čas spustenia chybujúcej aplikácie: 0x01dbab084821c049
Cesta chybujúcej aplikácie: C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.225.3271.0_x64__8wekyb3d8bbwe\GameBar.exe
Cesta chybujúceho modulu: C:\Windows\SYSTEM32\ntdll.dll
Identifikácia hlásenia: 3d96777e-92c7-4087-bc38-db69c8d5534e
Celé meno chybujúceho balíka: Microsoft.XboxGamingOverlay_7.225.3271.0_x64__8wekyb3d8bbwe
Identifikácia chybujúcej aplikácie vzhľadom na balík: App

Error: (04/11/2025 11:17:33 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SearchApp.exe version 10.0.19041.3758 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 231c

Start Time: 01dbaac2778b4304

Termination Time: 4294967295

Application Path: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe

Report Id: f2d80192-dcf0-412f-9a9d-45a800409171

Faulting package full name: Microsoft.Windows.Search_1.14.10.19041_neutral_neutral_cw5n1h2txyewy

Faulting package-relative application ID: ShellFeedsUI

Hang type: Quiesce


System errors:
=============
Error: (04/18/2025 06:48:42 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba System Guard Runtime Monitor Broker bola ukončená s nasledujúcou chybou:
%%3489660935

Error: (04/18/2025 06:46:39 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 16:17:19 on ‎18. ‎4. ‎2025 was unexpected.

Error: (04/18/2025 06:46:31 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 3221225684A fatal error occurred processing the restoration data.

Error: (04/18/2025 04:19:08 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-E58R78N)
Description: The server microsoft.windowscommunicationsapps_16005.14326.22342.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca did not register with DCOM within the required timeout.

Error: (04/18/2025 09:43:39 AM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: DCOM got error "87" attempting to start the service GamingServices with arguments "Unavailable" in order to run the server:
{D529741A-1BF1-4D1E-9976-35089622E758}

Error: (04/18/2025 09:43:39 AM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: DCOM got error "87" attempting to start the service GamingServices with arguments "Unavailable" in order to run the server:
{3E8C9ABE-9226-4609-BF5B-60288A391DEE}

Error: (04/18/2025 09:43:39 AM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: DCOM got error "87" attempting to start the service GamingServices with arguments "Unavailable" in order to run the server:
{D529741A-1BF1-4D1E-9976-35089622E758}

Error: (04/18/2025 09:43:39 AM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: DCOM got error "87" attempting to start the service GamingServices with arguments "Unavailable" in order to run the server:
{3E8C9ABE-9226-4609-BF5B-60288A391DEE}


Windows Defender:
================
Date: 2025-04-17 11:14:46
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2025-04-14 10:07:54
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2025-04-12 13:40:51
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2025-04-11 15:29:08
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Custom Scan

Date: 2025-04-11 15:23:21
Description:
Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Name: Trojan:Win32/Sabsik.FL.A!ml
Severity: Severe
Category: Trojan
Path: file:_F:\záloha 10.04.2025\Stiahnuté súbory\total uninstall professional 7\FULL DOWNLOADS SETUP\SETUP RUN.exe
Detection Origin: Local machine
Detection Type: FastPath
Detection Source: User
Process Name: Unknown
Security intelligence Version: AV: 1.427.190.0, AS: 1.427.190.0, NIS: 1.427.190.0
Engine Version: AM: 1.1.25030.1, NIS: 1.1.25030.1
Event[0]:

Date: 2025-04-16 22:17:59
Description:
Microsoft Defender Antivirus has encountered an error trying to upload a suspicious file for further analysis.
Filename: C:\Users\mrazk\Downloads\7797ed09-2802-4203-a53d-d065fc01d12b.tmp
Sha256: 2c3ab6fc7ab37431d99b82ba764ffc09457da8e18ed9d6b72af706a1840460fa
Current security intelligence Version: AV: 1.427.283.0, AS: 1.427.283.0
Current Engine Version: 1.1.25030.1
Error code: 0x80508016

Date: 2025-04-13 19:08:27
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.427.216.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.25030.1
Error code: 0x80240022
Error description: The program can't check for definition updates.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 2202 04/01/2015
Motherboard: ASUSTeK COMPUTER INC. VANGUARD B85
Processor: Intel(R) Core(TM) i5-4570S CPU @ 2.90GHz
Percentage of memory in use: 77%
Total physical RAM: 16289.18 MB
Available physical RAM: 3726.43 MB
Total Virtual: 29735.14 MB
Available Virtual: 5768.71 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:237.97 GB) (Free:51.95 GB) (Model: KINGSTON SKC600256G) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (Editing) (Fixed) (Total:953.85 GB) (Free:26.13 GB) (Model: ADATA SU800) NTFS
Drive e: () (Fixed) (Total:111.79 GB) (Free:7.66 GB) (Model: KINGSTON SA400S37120G) NTFS
Drive f: (D 4TB ) (Fixed) (Total:3725.83 GB) (Free:3072.56 GB) (Model: WDC WD40PURX-64GVNY0) NTFS

\\?\Volume{833efe45-0000-0000-0000-007e3b000000}\ () (Fixed) (Total:0.5 GB) (Free:0.08 GB) NTFS
\\?\Volume{8c88c851-d9a4-4652-b70b-d51d2a93d9a1}\ (EFI) (Fixed) (Total:0.19 GB) (Free:0.17 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: 833EFE45)
Partition 1: (Active) - (Size=238 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=516 MB) - (Type=27)

==========================================================
Disk: 1 (Protective MBR) (Size: 953.9 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 89065677)
Partition 1: (Active) - (Size=111.8 GB) - (Type=07 NTFS)

==========================================================
Disk: 3 (Protective MBR) (Size: 3726 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================

[Rudy]

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-21-4021623482-843976797-1413372724-1001\...\Run: [AMDNoiseSuppression] => "C:\Windows\system32\AMD\ANR\AMDNoiseSuppression.exe" (No File)
C:\DumpStack.log.tmp
F:\záloha 10.04.2025\Stiahnuté súbory\total uninstall professional 7\FULL DOWNLOADS SETUP\SETUP RUN.exe

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[ceasare]

Fix result of Farbar Recovery Scan Tool (x64) Version: 01-04-2025
Ran by mrazk (19-04-2025 22:20:20) Run:1
Running from C:\Users\mrazk\Desktop
Loaded Profiles: mrazk
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKU\S-1-5-21-4021623482-843976797-1413372724-1001\...\Run: [AMDNoiseSuppression] => "C:\Windows\system32\AMD\ANR\AMDNoiseSuppression.exe" (No File)
C:\DumpStack.log.tmp
F:\záloha 10.04.2025\Stiahnuté súbory\total uninstall professional 7\FULL DOWNLOADS SETUP\SETUP RUN.exe

EmptyTemp:
End
*****************

Processes closed successfully.
"HKU\S-1-5-21-4021623482-843976797-1413372724-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AMDNoiseSuppression" => removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
"F:\záloha 10.04.2025\Stiahnuté súbory\total uninstall professional 7\FULL DOWNLOADS SETUP\SETUP RUN.exe" => not found

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1048576 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 50728622 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 93045573 B
Windows/system/drivers => 5617909 B
Edge => 0 B
Chrome => 277965724 B
Firefox => 1285454776 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 11370 B
mrazk => 45677969 B

RecycleBin => 0 B
EmptyTemp: => 1.6 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 19-04-2025 22:21:44)

C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 22:21:44 ====

[Rudy]

Smazáno, log by již měl být OK.

[ceasare]

Smazáno, log by již měl být OK.

Díky moc za Váš čas

[Rudy]

Rádo se stalo!