Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23-04-2025
Ran by 13918 (administrator) on MSI (Micro-Star International Co., Ltd. MS-7D46) (24-04-2025 08:46:47)
Running from C:\Users\13918\Downloads\FRST64.exe
Loaded Profiles: 13918
Platform: Microsoft Windows 11 Home Version 24H2 26100.3775 (X64) Language: Čeština (Česko)
Default browser: Brave
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe
(C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\MSI Center\Engine\CC_Engine_x64.exe
(C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe
(DriverStore\FileRepository\u0409974.inf_amd64_db5d684bd08db28d\B409690\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0409974.inf_amd64_db5d684bd08db28d\B409690\atieclxx.exe
(explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <13>
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATIYWE.EXE
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0409974.inf_amd64_db5d684bd08db28d\B409690\atiesrxx.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\NisSrv.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_434f4faf6aa034b3\RtkAudUService64.exe <2>
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.327.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.8401.30.0_x64__cw5n1h2txyewy\WidgetBoard.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_434f4faf6aa034b3\RtkAudUService64.exe [2389976 2024-12-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [455968 2023-05-26] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2765952 2024-10-01] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3331464132-3830428412-573898847-1001\...\Run: [MicrosoftEdgeAutoLaunch_B92492922E84AF6C06A72D733262D31A] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4419624 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3331464132-3830428412-573898847-1001\...\Run: [Opera Stable] => C:\Users\13918\AppData\Local\Programs\Opera\opera.exe [1606552 2025-04-02] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-3331464132-3830428412-573898847-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIYWE.EXE [486808 2022-04-12] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3331464132-3830428412-573898847-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIYWE.EXE [486808 2022-04-12] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3331464132-3830428412-573898847-1001\...\Run: [Opera Browser Assistant] => C:\Users\13918\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4536216 2025-04-14] (Opera Norway AS -> Opera Software)
HKLM\...\Windows x64\Print Processors\SST3CPC: C:\Windows\System32\spool\prtprocs\x64\sst3cpc.dll [36864 2011-06-21] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Server 2003 DDK provider)
HKLM\...\Print\Monitors\EPSON L3250 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBYWE.DLL [237568 2021-09-21] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [3167256 2024-08-30] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\SST3C Langmon: C:\WINDOWS\system32\sst3cl6.dll [34304 2011-06-21] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\135.1.77.101\Installer\chrmstp.exe [2025-04-24] (Brave Software, Inc. -> Brave Software, Inc.)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {BA3407C3-6B53-47EE-9C36-83318B7A0278} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{0358413E-1F7F-4478-9608-77C19CAFF23E} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167440 2025-01-25] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {E47F3BD0-444F-4A52-BA1C-41B7D4EDBF3F} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{304878B0-5238-4675-8F9C-03E2A0BD2B18} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167440 2025-01-25] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {A0D4D5FB-BE11-469A-B712-D85DC8609E96} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\13918\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [15204208 2025-02-14] (ESET, spol. s r.o. -> ESET)
Task: {7314C4BF-5111-4F1B-9B74-0DA16E933654} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\13918\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [15204208 2025-02-14] (ESET, spol. s r.o. -> ESET)
Task: {7CFFE994-A378-4F29-B86A-FA9B43A36225} - System32\Tasks\EPSON L3250 Series Update {3A8847C7-6E39-4EA0-B8CD-94BD0BE11964} => C:\Windows\System32\spool\drivers\x64\3\E_YTSYWE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {A1EF4D0E-DDE5-47FD-9BD3-ABFD46BE662D} - System32\Tasks\EPSON L3250 Series Update {E2EC4DB4-DBDA-4567-B737-DF5ED16105C7} => C:\Windows\System32\spool\drivers\x64\3\E_YTSYWE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {F14F1CE8-647E-4736-9FA4-0C1042175D55} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0B504FB3-3A29-43A7-9C1D-3B3A141FA74D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7A985858-B9F7-417F-8349-E655B2F7B652} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9C9D790D-6B7D-4F69-9768-29C1E9E64E47} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A3CAC0EE-F009-48C6-B16B-7BFFBE84FD7B} - System32\Tasks\OneDrive Startup Task-S-1-5-21-3331464132-3830428412-573898847-1001 => C:\Users\13918\AppData\Local\Microsoft\OneDrive\25.056.0324.0003\OneDriveLauncher.exe [676680 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {93523BAC-8CF4-42AE-B620-1C1A638347ED} - System32\Tasks\Opera scheduled assistant Autoupdate 1732362534 => C:\Users\13918\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\13918\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {DA004E91-2E69-4E03-B2FD-5C311A6046A5} - System32\Tasks\Opera scheduled Autoupdate 1732362534 => C:\Users\13918\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\EPSON L3250 Series Update {3A8847C7-6E39-4EA0-B8CD-94BD0BE11964}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSYWE.EXE:/EXE:{3A8847C7-6E39-4EA0-B8CD-94BD0BE11964} /F:UpdateWORKGROUP\MSI$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON L3250 Series Update {E2EC4DB4-DBDA-4567-B737-DF5ED16105C7}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSYWE.EXE:/EXE:{E2EC4DB4-DBDA-4567-B737-DF5ED16105C7} /F:UpdateWORKGROUP\MSI$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{18885cdd-4745-483f-8739-7c9b492d147a}: [DhcpNameServer] 10.0.0.138
Edge:
=======
Edge Profile: C:\Users\13918\AppData\Local\Microsoft\Edge\User Data\Default [2025-04-23]
Edge Extension: (Dokumenty Google offline) - C:\Users\13918\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-31]
Edge Extension: (Edge relevant text changes) - C:\Users\13918\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-11-23]
FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
Opera:
=======
OPR DefaultProfile: Default
StartMenuInternet: (HKU\S-1-5-21-3331464132-3830428412-573898847-1001) OperaStable - "C:\Users\13918\AppData\Local\Programs\Opera\opera.exe"
Brave:
=======
BRA Profile: C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2025-04-24]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2025-04-22]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2025-04-24]
BRA Extension: (Brave NTP background images) - C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2025-04-22]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2025-04-24]
BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2025-04-24]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2025-01-27]
BRA Extension: (Brave NTP sponsored images) - C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2025-04-24]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2025-04-12]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2025-01-25]
BRA Extension: (Brave Ads Resources) - C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\iejekkikpddbbockoldagmfcdbffomfc [2025-03-27]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2025-04-24]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2025-03-27]
BRA Extension: (Brave Ad Block Updater (EasyList Czech and Slovak (plaintext))) - C:\Users\13918\AppData\Local\BraveSoftware\Brave-Browser\User Data\oegebjahecghlckbhkmojgnpcgdeajdi [2025-04-12]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167440 2025-01-25] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\135.1.77.101\elevation_service.exe [3518480 2025-04-23] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167440 2025-01-25] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [222768 2024-12-02] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe [2009608 2025-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 MSI_Case_Service; C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe [74768 2024-06-06] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_Center_Service; C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe [172048 2024-07-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\NisSrv.exe [4538400 2025-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe [278320 2025-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrmgr.sys [55688 2024-09-12] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amduw23g; C:\WINDOWS\System32\DriverStore\FileRepository\u0409974.inf_amd64_db5d684bd08db28d\B409690\amdkmdag.sys [106158496 2024-12-04] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 e1dexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1d.inf_amd64_e64afe811c7e4662\e1d.sys [607400 2022-02-16] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_e11257f05c0c2f89\iaLPSS2_GPIO2_ADL.sys [139928 2021-07-29] (Intel Corporation -> Intel Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_6f93b7542fd3ead9\gna.sys [88656 2023-08-28] (Intel Corporation -> Intel Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [331168 2025-04-01] (Microsoft Windows -> Microsoft Corporation)
R3 NTIOLib_CC_COMM; C:\Program Files (x86)\MSI\MSI Center\Lib\SYS\NTIOLib_X64.sys [32592 2024-09-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 ThermalFilter; C:\WINDOWS\System32\DriverStore\FileRepository\c_thermal.inf_amd64_732a53ed1662b707\ThermalFilter.sys [75376 2025-04-09] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20016 2025-04-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [605576 2025-04-01] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100744 2025-04-01] (Microsoft Windows -> Microsoft Corporation)
S3 wini3ctarget; C:\WINDOWS\System32\DriverStore\FileRepository\wini3ctarget.inf_amd64_bdb09ebda2834009\wini3ctarget.sys [75168 2025-04-09] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2024-09-06] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_971c769b103df369\WSDScan.sys [61440 2024-09-06] (Microsoft Windows -> Microsoft Corporation)
S0 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-04-24 08:46 - 2025-04-24 08:48 - 000020584 _____ C:\Users\13918\Downloads\FRST.txt
2025-04-24 08:46 - 2025-04-24 08:47 - 000000000 ____D C:\FRST
2025-04-24 08:45 - 2025-04-24 08:45 - 002405376 _____ (Farbar) C:\Users\13918\Downloads\FRST64.exe
2025-04-24 07:50 - 2025-04-24 07:50 - 000677108 _____ C:\WINDOWS\system32\perfh005.dat
2025-04-24 07:50 - 2025-04-24 07:50 - 000144960 _____ C:\WINDOWS\system32\perfc005.dat
2025-04-23 10:04 - 2025-04-23 10:04 - 003264760 _____ (Hewlett-Packard Company ) C:\Users\13918\Downloads\sp48024.exe
2025-04-22 08:11 - 2025-04-22 08:12 - 000384231 _____ C:\Users\13918\Downloads\ig01.epub
2025-04-22 08:10 - 2025-04-22 08:10 - 001196594 _____ C:\Users\13918\Downloads\KinTemn.7z
2025-04-22 08:08 - 2025-04-22 08:08 - 001162424 _____ C:\Users\13918\Downloads\amdhfth.rar
2025-04-11 18:18 - 2025-04-11 18:19 - 000000000 ____D C:\WINDOWS\system32\AccountHealthAssets
2025-04-11 18:18 - 2025-04-11 18:18 - 000000000 ____D C:\inetpub
2025-04-11 17:42 - 2025-04-23 14:44 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-04-11 17:18 - 2025-04-23 15:03 - 013028920 _____ C:\Users\13918\Desktop\Seznam knih-A.xlsx
2025-04-09 18:09 - 2025-04-09 18:09 - 000029042 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-04-09 18:09 - 2025-04-09 18:09 - 000029042 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-04-01 08:57 - 2022-09-30 05:23 - 000167440 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus2.sys
2025-04-01 08:41 - 2025-04-01 08:41 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2025-03-26 11:28 - 2025-03-26 11:28 - 000002209 _____ C:\Users\Public\Desktop\Epson Printer Connection Checker.lnk
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-04-24 08:35 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-04-24 07:58 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-04-24 07:56 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-04-24 07:56 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-04-24 07:54 - 2025-01-25 20:54 - 000002364 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2025-04-24 07:54 - 2025-01-25 20:54 - 000002323 _____ C:\Users\Public\Desktop\Brave.lnk
2025-04-24 07:50 - 2024-11-23 11:24 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-04-24 07:50 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2025-04-24 07:44 - 2024-11-23 11:10 - 000007884 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-04-24 07:43 - 2024-11-23 11:09 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-04-24 07:43 - 2024-11-23 11:08 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-04-24 07:43 - 2024-11-21 14:58 - 000012288 ___SH C:\DumpStack.log.tmp
2025-04-23 15:03 - 2024-11-23 15:02 - 000000000 ____D C:\Users\13918\AppData\Roaming\Microsoft\Excel
2025-04-23 09:38 - 2024-11-23 12:28 - 000000000 ____D C:\Users\13918\AppData\Local\D3DSCache
2025-04-23 09:36 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2025-04-23 09:27 - 2024-11-23 12:38 - 000000000 ___RD C:\Users\13918\OneDrive
2025-04-23 09:23 - 2024-11-24 13:30 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2025-04-22 08:12 - 2024-11-23 13:54 - 000000000 ____D C:\Users\13918\AppData\Roaming\calibre
2025-04-22 08:05 - 2024-11-23 13:54 - 000000000 ____D C:\Users\13918\AppData\Local\calibre-cache
2025-04-21 07:32 - 2025-02-14 13:07 - 000003834 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2025-04-21 07:32 - 2025-02-14 13:07 - 000003392 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2025-04-21 07:32 - 2025-02-14 11:20 - 000001378 _____ C:\Users\13918\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2025-04-20 09:44 - 2024-11-23 11:10 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-04-17 17:50 - 2025-01-30 16:04 - 000003570 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3331464132-3830428412-573898847-1001
2025-04-17 17:50 - 2024-11-23 12:38 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3331464132-3830428412-573898847-1001
2025-04-17 17:50 - 2024-11-23 12:38 - 000003354 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3331464132-3830428412-573898847-1001
2025-04-17 17:50 - 2024-11-23 12:38 - 000002377 _____ C:\Users\13918\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-04-17 17:30 - 2024-11-23 13:48 - 000004476 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1732362534
2025-04-11 18:25 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-04-11 18:22 - 2024-11-23 11:08 - 000477296 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-04-11 18:19 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-04-11 18:19 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\UNP
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-04-11 18:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-04-11 18:18 - 2024-09-06 06:12 - 000000000 ____D C:\WINDOWS\InboxApps
2025-04-11 18:18 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2025-04-11 18:18 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2025-04-11 18:18 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-04-11 18:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2025-04-11 18:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-04-11 18:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-04-11 18:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-04-11 18:18 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2025-04-11 18:18 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2025-04-09 18:07 - 2024-11-23 11:12 - 003352064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-04-09 14:40 - 2024-11-23 13:48 - 000004194 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1732362534
2025-04-09 14:40 - 2024-11-23 13:48 - 000001386 _____ C:\Users\13918\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2025-04-08 09:50 - 2024-11-23 14:58 - 000000000 ____D C:\Users\13918\AppData\Local\CrashDumps
2025-04-05 10:18 - 2024-11-23 11:10 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{0837D2A0-ECF5-4CBE-9D10-4DE5E7257372}
2025-04-05 10:18 - 2024-11-23 11:10 - 000003592 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{8C3F1172-25A0-45DA-98A8-4F099FCED7E3}
2025-04-04 06:39 - 2024-11-28 17:36 - 000000000 ____D C:\Users\13918\AppData\Roaming\vlc
2025-04-01 08:57 - 2024-11-23 11:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-03-28 19:52 - 2024-11-23 13:54 - 000000000 ____D C:\Users\13918\Knihovna Calibre
2025-03-26 11:28 - 2024-11-23 14:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2025-03-26 11:28 - 2024-11-23 14:51 - 000000000 ____D C:\Program Files (x86)\Epson Software
2025-03-26 11:05 - 2024-11-23 15:03 - 000000000 ____D C:\Users\13918\AppData\Roaming\Microsoft\Šablony
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
prosím o kontrolu logu FRST
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: prosím o kontrolu logu FRST
Ahoj,
pouzi fixlist.txt s obsahom:
Start
CloseProcesses:
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
S0 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
End
pouzi fixlist.txt s obsahom:
Start
CloseProcesses:
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
S0 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
End
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: prosím o kontrolu logu FRST
Jsem Lama - Kde vezmu, případně jak vytvořím Fixlist.txt?
Díky
Díky
Re: prosím o kontrolu logu FRST
Navod napr. ako v pripade https://forum.viry.cz/viewtopic.php?t=159057
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: prosím o kontrolu logu FRST
Omlouvám se, snad jsem to provedl dobře.
Fix result of Farbar Recovery Scan Tool (x64) Version: 23-04-2025
Ran by 13918 (25-04-2025 16:58:51) Run:1
Running from C:\Users\13918\Desktop\Nová složka
Loaded Profiles: 13918
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
S0 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
End
*****************
Processes closed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
HKLM\System\CurrentControlSet\Services\WinSetupMon => removed successfully
WinSetupMon => service removed successfully
The system needed a reboot.
==== End of Fixlog 16:58:52 ====
Fix result of Farbar Recovery Scan Tool (x64) Version: 23-04-2025
Ran by 13918 (25-04-2025 16:58:51) Run:1
Running from C:\Users\13918\Desktop\Nová složka
Loaded Profiles: 13918
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
S0 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
End
*****************
Processes closed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
HKLM\System\CurrentControlSet\Services\WinSetupMon => removed successfully
WinSetupMon => service removed successfully
The system needed a reboot.
==== End of Fixlog 16:58:52 ====
Re: prosím o kontrolu logu FRST
OK, akcia sa podarila
Su s PC nejake problemy?

Su s PC nejake problemy?
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: prosím o kontrolu logu FRST
Zdá se, že je vše OK.
Děkuji a přeji hezký den.
Děkuji a přeji hezký den.
Re: prosím o kontrolu logu FRST
Rado sa stalo
Maj sa fajn
Maj sa fajn

FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/