Vyskakujúce upozornenia na vírus_znovu
Napsal: 28 dub 2025 08:28
Dobrý deň, po vyriešení situácie sa po piatkua a víkende bez problémov, dnes ráno znovu začali vyskakovať upozornenia na vírusy:-(
FRST:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-04-2025
Ran by ZSkopcany (administrator) on ZSKOPCANY (HP HP ProBook 455 15.6 inch G10 Notebook PC) (28-04-2025 09:06:04)
Running from C:\Users\zskop\Downloads\FRST64 (1).exe
Loaded Profiles: ZSkopcany
Platform: Microsoft Windows 11 Pro Education Version 24H2 26100.3915 (X64) Language: Čeština (Česká republika) -> Slovenčina (Slovensko)
Default browser: Edge
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19010.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19010.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(C:\Program Files\HP\Sure Click\servers\BrService.exe ->) (Bromium UK Limited -> HP) C:\Program Files\HP\Sure Click\bin\Br-uxendm.exe <2>
(C:\Program Files\HP\Sure Click\servers\BrService.exe ->) (Bromium UK Limited -> HP) C:\Program Files\HP\Sure Click\servers\BrHostSvr.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19010.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19010.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Program Files\WindowsApps\MSTeams_25072.1611.3570.1995_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\135.0.3179.98\msedgewebview2.exe <6>
(cmd.exe ->) (Bromium UK Limited -> ) C:\Program Files\HP\Sure Click\servers\BrHostHelper\BrHostHelper.exe <2>
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\HPDCSetup.exe ->) (Portrait Displays, Inc. -> Portrait Displays, Inc) C:\Program Files\Portrait Displays\HP Display Control Service\DeviceCheck.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\SysInfoCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\BridgeCommunication.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\SysInfoCap.exe ->) (Portrait Displays, Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\HPDCSetup.exe
(DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOMN64.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sonitude, Inc.) C:\Windows\System32\DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOCL64.exe
(DriverStore\FileRepository\u0408580.inf_amd64_8c845c7af98953b1\B408487\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0408580.inf_amd64_8c845c7af98953b1\B408487\atieclxx.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <10>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_25072.1611.3570.1995_x64__8wekyb3d8bbwe\ms-teams.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2>
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0408580.inf_amd64_8c845c7af98953b1\B408487\atiesrxx.exe
(services.exe ->) (Bromium UK Limited -> HP) C:\Program Files\HP\Security Update Service\4.4.24.3257\SecurityUpdateService.exe
(services.exe ->) (Bromium UK Limited -> HP) C:\Program Files\HP\Sure Click\servers\BemSvc.exe
(services.exe ->) (Bromium UK Limited -> HP) C:\Program Files\HP\Sure Click\servers\BrService.exe
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ELAN_MOC_Service.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_67bcefabacf2a385\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dba1fdfaedf1c498\HotKeyServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dba1fdfaedf1c498\HPAudioAnalytics.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dba1fdfaedf1c498\LanWlanWwanSwitchingServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpsvcsscancomp.inf_amd64_2358c22cfce9af22\x64\hpsvcsscan.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sonitude, Inc.) C:\Windows\System32\DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOMN64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_a42d9de41f05fa49\RtkAudUService64.exe <3>
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> DesktopExtension) C:\Program Files\WindowsApps\AD2F1837.myHP_43.52513.1706.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2504.1001.26.0_x64__8wekyb3d8bbwe\XboxPcTray.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25032.52.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(svchost.exe ->) (Bromium UK Limited -> HP) C:\Program Files\HP\Sure Click\servers\BrConsole.exe
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_43.52513.1706.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Client Security Manager\HP.ClientSecurityManager.exe
(svchost.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\HP ICS\ICS.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2504.1001.26.0_x64__8wekyb3d8bbwe\XboxGameBarWidgets.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2504.1001.26.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.296.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.225.4081.0_x64__8wekyb3d8bbwe\GameBar.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.225.4081.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.8401.30.0_x64__cw5n1h2txyewy\WidgetBoard.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_a42d9de41f05fa49\RtkAudUService64.exe [2119512 2024-07-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2459763727-713270161-2395763681-1001\...\Run: [MicrosoftEdgeAutoLaunch_99403A969D43EB0E14EB990E68793760] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4419624 2025-04-24] (Microsoft Corporation -> Microsoft Corporation)
GroupPolicy: Restriction - Chrome <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {919C57FF-8160-43B3-845D-291793147596} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [1003528 2025-02-18] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {72C986FC-014D-4761-8268-8647FDC33254} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [479984 2025-02-18] (HP Inc. -> HP Inc.)
Task: {A9239CEB-92C9-47E3-8972-4D581A6D6296} - System32\Tasks\HP\Consent Manager Launcher => C:\WINDOWS\system32\sc.exe [102400 2024-12-18] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {DB09576F-3804-4E87-B57D-C04B591EAD0B} - System32\Tasks\HP\HP ICS\ICS => C:\Program Files (x86)\HP\HP ICS\ICS.exe [76870640 2023-03-02] (HP Inc. -> HP)
Task: {18E73235-CEA2-4BA8-8885-003226A42632} - System32\Tasks\HP\HP Wolf Security\Launch Console => C:\Program Files\HP\HP Client Security Manager\HP.ClientSecurityManager.exe [262664 2024-12-12] (HP Inc. -> HP Inc.)
Task: {8772D18C-05AB-4017-B243-0151B99527E6} - System32\Tasks\HP\Sure Click\Sure Click 4.4.24.3257 => C:\Program Files\HP\Sure Click\servers\BrLauncher.exe [2792200 2025-03-30] (Bromium UK Limited -> HP)
Task: {790FF585-5C4E-4DB0-A1DA-A421F7DA6C2A} - System32\Tasks\HP\Sure Click\Sure Click UI 4.4.24.3257 => C:\Program Files\HP\Sure Click\servers\BrConsole.exe [185608 2025-03-30] (Bromium UK Limited -> HP)
Task: {1A1B8D73-7643-4900-A630-2C0DD87910F3} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28660920 2024-12-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {4735F1B1-F089-4445-9B9B-F50DDDD7EA48} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28660920 2024-12-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {572DA350-049A-4CB2-BE19-DD3C0C9A38C2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [222352 2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {417E0277-7302-4714-95DA-B8ACD3805436} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [222352 2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {6B2863C0-F7E8-4568-8B68-C852772D8C19} - System32\Tasks\Microsoft\Windows\WindowsAI\Recall\InitialConfiguration => {709FD5EF-7296-4154-BD3A-E9830FCFA60A} C:\WINDOWS\system32\ShellConfigTask.dll [274432 2025-04-27] (Microsoft Windows -> Microsoft Corporation)
Task: {99E4D407-4FED-492A-BB86-6DB6D3041FE6} - System32\Tasks\Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration => {0BE6820D-B667-4CB6-931B-C153A77DA895} C:\WINDOWS\system32\ShellConfigTask.dll [274432 2025-04-27] (Microsoft Windows -> Microsoft Corporation)
Task: {22C713DC-4475-4A61-AD70-CBA744DD0C23} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [954808 2022-12-20] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {33CF2256-C5C0-4BA6-BA96-31019B0BBCA8} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {777EBE79-92C7-42F4-A0DB-675200538951} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2459763727-713270161-2395763681-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {25FE8810-BE6C-485B-B0ED-FD492DA7BF4C} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2459763727-713270161-2395763681-1001 => C:\Program Files\Microsoft OneDrive\25.056.0324.0003\OneDriveLauncher.exe [676680 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {B3BE12E7-0F96-4B25-AB89-E2FCFEB08EBC} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-2459763727-713270161-2395763681-1001 => C:\Users\zskop\AppData\Roaming\Zoom\bin\Zoom.exe [436024 2025-03-20] (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{7fd6ae9d-6f1d-4fca-aba8-eef3445937ae}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{7fd6ae9d-6f1d-4fca-aba8-eef3445937ae}: [DhcpDomain] home
Tcpip\..\Interfaces\{968f8823-c4c9-4ccd-844e-d12ac33f9571}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{968f8823-c4c9-4ccd-844e-d12ac33f9571}: [DhcpDomain] home
Tcpip\..\Interfaces\{968f8823-c4c9-4ccd-844e-d12ac33f9571}\45D2532383131393: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{968f8823-c4c9-4ccd-844e-d12ac33f9571}\45D2532383131393: [DhcpDomain] home
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\zskop\AppData\Local\Microsoft\Edge\User Data\Default [2025-04-28]
Edge Notifications: Default -> hxxps://7l261d6bamv47o.steadychainconnection.co.in; hxxps://cvvbj86071bc73a6ia7g.steadychainconnection.co.in; hxxps://prwcv8bm23fqtm.steadychainconnection.co.in; hxxps://www.messenger.com
Edge Extension: (HP Wolf Security Extension) - C:\Users\zskop\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\aoganjpeihhkhippgnniaclfocnihgln [2025-04-24]
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\zskop\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-24]
Edge Extension: (Edge relevant text changes) - C:\Users\zskop\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-04-24]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
FireFox:
========
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 BrAmSvc; C:\Program Files\HP\Sure Click\servers\BrAmSvc.exe [2077088 2025-03-30] (HP Inc -> HP)
R2 BrEndpointSvc; c:\Program Files\HP\Sure Click\servers\BemSvc.exe [4912904 2025-03-30] (Bromium UK Limited -> HP)
R2 BrService; c:\Program Files\HP\Sure Click\servers\BrService.exe [10899208 2025-03-30] (Bromium UK Limited -> HP)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13512888 2024-12-07] (Microsoft Corporation -> Microsoft Corporation)
R2 ELAN_MOC_Service; C:\WINDOWS\System32\ELAN_MOC_Service.exe [240032 2024-06-12] (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.056.0324.0003\FileSyncHelper.exe [3545416 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [1028024 2024-05-17] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 HotKeyServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dba1fdfaedf1c498\HotKeyServiceUWP.exe [1510464 2025-01-02] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\AppHelperCap.exe [889976 2025-02-23] (HP Inc. -> HP Inc.)
R2 HPAudioAnalytics; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dba1fdfaedf1c498\HPAudioAnalytics.exe [516160 2025-01-02] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\DiagsCap.exe [888928 2025-02-23] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\NetworkCap.exe [885344 2025-02-23] (HP Inc. -> HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1149448 2020-07-23] (HP Inc. -> HP)
R2 hpsvcsscan; C:\WINDOWS\System32\DriverStore\FileRepository\hpsvcsscancomp.inf_amd64_2358c22cfce9af22\x64\hpsvcsscan.exe [7039168 2024-09-24] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\SysInfoCap.exe [889464 2025-02-23] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_67bcefabacf2a385\x64\TouchpointAnalyticsClientService.exe [631472 2025-03-26] (HP Inc. -> HP Inc.)
R2 LanWlanWwanSwitchingServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dba1fdfaedf1c498\LanWlanWwanSwitchingServiceUWP.exe [605248 2025-01-02] (HP Inc. -> HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9406208 2025-04-24] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-04-24] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe [2009608 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.056.0324.0003\OneDriveUpdaterService.exe [3892568 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
R2 SECOMNService; C:\WINDOWS\System32\DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOMN64.exe [1087496 2024-07-08] (Microsoft Windows Hardware Compatibility Publisher -> Sonitude, Inc.)
R2 SecurityUpdateService; C:\Program Files\HP\Security Update Service\4.4.24.3257\SecurityUpdateService.exe [5608200 2025-03-30] (Bromium UK Limited -> HP)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [559320 2025-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\NisSrv.exe [4538400 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe [278320 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ZTHELPER; C:\WINDOWS\System32\zthelper.dll [146096 2025-04-27] (Microsoft Windows -> Microsoft Corporation)
S2 HP Comm Recover; "C:\Program Files\HPCommRecovery\HPCommRecovery.exe" [X]
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrmgr.sys [25672 2024-04-23] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0408580.inf_amd64_8c845c7af98953b1\B408487\amdkmdag.sys [106591144 2024-10-21] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 amdwirelessbutton; C:\WINDOWS\System32\drivers\amdwirelessbutton.sys [39032 2024-03-27] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc)
S3 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [7643696 2025-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender S.R.L. Bucharest, ROMANIA)
S3 BdDci4; C:\WINDOWS\system32\DRIVERS\bddci4.sys [969776 2025-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R0 BrCow_4_4_24_3257; C:\WINDOWS\System32\DRIVERS\BrCow_4_4_24_3257.sys [71120 2025-03-30] (Bromium UK Limited -> HP)
R2 BrFilter_4_4_24_3257; C:\WINDOWS\System32\DRIVERS\BrFilter_4_4_24_3257.sys [238544 2025-03-30] (Bromium UK Limited -> HP)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2025-04-24] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [222528 2024-12-18] (Microsoft Windows -> Microsoft Corporation)
S1 Gemma; C:\WINDOWS\System32\DRIVERS\gemma.sys [1791064 2025-03-30] (Microsoft Windows Hardware Compatibility Publisher -> BitDefender S.R.L. Bucharest, ROMANIA)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1421dec2010cc057\x64\hpcustomcapdriver.sys [18984 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [331168 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [144840 2025-04-08] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [234072 2025-04-24] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-04-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt11.sys [241112 2025-04-28] (Malwarebytes Inc. -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\System32\Drivers\mbam.sys [80448 2025-04-28] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239568 2025-04-24] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [189776 2025-04-28] (Malwarebytes Inc. -> Malwarebytes)
R3 MTKBTFilterX64; C:\WINDOWS\System32\DriverStore\FileRepository\mtkbtfilter.inf_amd64_bee0043985624487\mtkbtfilterx.sys [550072 2025-02-15] (MEDIATEK INC. -> MediaTek Inc.)
R3 mtkwlex; C:\WINDOWS\System32\DriverStore\FileRepository\mtkwl6ex.inf_amd64_28fe41aefe6dd8d1\mtkwl6ex.sys [2011304 2025-02-20] (MEDIATEK INC. -> MediaTek Inc.)
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_d1a236ce16a4bbb1\rt68cx21x64.sys [845256 2024-12-25] (Realtek Semiconductor Corp. -> Realtek)
S0 sselam_4_4_19_828; C:\WINDOWS\System32\DRIVERS\sselam_4_4_19_828.sys [19528 2025-03-30] (Microsoft Windows Early Launch Anti-malware Publisher -> HP)
S3 ThermalFilter; C:\WINDOWS\System32\DriverStore\FileRepository\c_thermal.inf_amd64_732a53ed1662b707\ThermalFilter.sys [75376 2025-04-08] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
R3 uxen; C:\Program Files\HP\Sure Click\bin\uxen.sys [2053056 2025-02-19] (Bromium UK Limited -> HP)
R3 vlflt; C:\WINDOWS\System32\DRIVERS\vlflt.sys [1403456 2025-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2024-12-18] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20016 2025-04-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [605576 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100744 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
S3 wini3ctarget; C:\WINDOWS\System32\DriverStore\FileRepository\wini3ctarget.inf_amd64_8d863c975b4367df\wini3ctarget.sys [79288 2025-04-27] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2024-12-18] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_971c769b103df369\WSDScan.sys [61440 2024-12-18] (Microsoft Windows -> Microsoft Corporation)
S3 ax_pvi; \??\C:\Program Files\HP\Sure Click\bin\ax_pvi.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
Error Reading file: "C:\ProgramData\Desktop\MindMaple Lite.lnk"
Error Reading file: "C:\ProgramData\Desktop\desktop.ini"
Error Reading file: "C:\ProgramData\Desktop\AvalonIT Board.lnk"
2025-04-28 09:09 - 2025-04-28 09:09 - 000668026 _____ C:\WINDOWS\system32\perfh005.dat
2025-04-28 09:09 - 2025-04-28 09:09 - 000145048 _____ C:\WINDOWS\system32\perfc005.dat
2025-04-28 09:03 - 2025-04-28 09:03 - 000241112 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt11.sys
2025-04-28 09:03 - 2025-04-28 09:03 - 000189776 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2025-04-28 09:03 - 2025-04-28 09:03 - 000000000 ____D C:\Users\zskop\AppData\LocalLow\IGDump
2025-04-28 08:48 - 2025-04-28 08:48 - 000010372 __RSH C:\ProgramData\ntuser.pol
2025-04-28 08:47 - 2025-04-28 08:47 - 009568256 _____ (Malwarebytes) C:\Users\zskop\Downloads\adwcleaner (4).exe
2025-04-28 08:47 - 2025-04-28 08:47 - 009568256 _____ (Malwarebytes) C:\Users\zskop\Desktop\adwcleaner (4).exe
2025-04-28 08:31 - 2025-04-28 08:31 - 000000000 ____D C:\Users\zskop\Downloads\FRST-OlderVersion
2025-04-28 08:11 - 2025-04-28 08:11 - 009568256 _____ (Malwarebytes) C:\Users\zskop\Downloads\adwcleaner (3).exe
2025-04-27 21:08 - 2025-04-28 08:05 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-04-27 20:39 - 2025-04-27 20:39 - 000152434 _____ C:\Users\zskop\Downloads\cestovný príkaz tlačivo (1) (1).xlsx
2025-04-27 20:30 - 2025-04-27 20:30 - 000030998 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-04-27 20:30 - 2025-04-27 20:30 - 000030998 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-04-27 20:24 - 2025-04-27 20:24 - 001839616 _____ C:\Users\zskop\Downloads\využitie elektromagnetizmu.ppt.ppt
2025-04-27 20:23 - 2025-04-27 20:23 - 001616053 _____ C:\Users\zskop\Downloads\Využitie elektromagnetov.pptx
2025-04-27 20:22 - 2025-04-27 20:22 - 007080131 _____ C:\Users\zskop\Downloads\2.13 Elektromagnet a jeho využitie.pptx
2025-04-27 20:20 - 2025-04-27 20:20 - 001765812 _____ C:\Users\zskop\Downloads\Elektromagnet.pptx
2025-04-25 11:25 - 2025-04-25 11:25 - 000229772 _____ C:\Users\zskop\Desktop\Dodatok č. 2 ŠTANDARDY DORŽIAVANIA ZÁKAZU SEGREGÁCIE.pdf
2025-04-24 22:32 - 2025-04-28 09:03 - 000000876 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-04-24 22:28 - 2025-04-28 08:36 - 000002906 _____ C:\Users\zskop\Downloads\Fixlog.txt
2025-04-24 18:10 - 2025-04-24 18:10 - 009568256 _____ (Malwarebytes) C:\Users\zskop\Downloads\adwcleaner (2).exe
2025-04-24 17:39 - 2025-04-24 17:39 - 009566696 _____ (Malwarebytes) C:\Users\zskop\Downloads\AdwCleaner (1).exe
2025-04-24 17:03 - 2025-04-28 09:04 - 000000000 ____D C:\Users\zskop\AppData\Local\Malwarebytes
2025-04-24 17:03 - 2025-04-24 17:03 - 000002101 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2025-04-24 17:02 - 2025-04-24 17:02 - 000000000 ____D C:\ProgramData\Malwarebytes
2025-04-24 17:02 - 2025-04-24 17:02 - 000000000 ____D C:\Program Files\Malwarebytes
2025-04-24 17:01 - 2025-04-24 17:01 - 002834160 _____ (Malwarebytes) C:\Users\zskop\Downloads\MBSetup.exe
2025-04-24 16:56 - 2025-04-24 16:58 - 000000000 ____D C:\AdwCleaner
2025-04-24 16:56 - 2025-04-24 16:56 - 009568256 _____ (Malwarebytes) C:\Users\zskop\Downloads\adwcleaner.exe
2025-04-24 13:14 - 2025-04-24 21:15 - 000024542 _____ C:\Users\zskop\Downloads\Addition.txt
2025-04-24 13:08 - 2025-04-28 09:10 - 000027662 _____ C:\Users\zskop\Downloads\FRST.txt
2025-04-24 13:08 - 2025-04-28 09:09 - 000000000 ____D C:\FRST
2025-04-24 13:07 - 2025-04-28 08:31 - 002405376 _____ (Farbar) C:\Users\zskop\Downloads\FRST64 (1).exe
2025-04-24 10:47 - 2025-04-24 10:48 - 000000000 ____D C:\Users\zskop\Desktop\Záloha pracovná plocha
2025-04-23 21:22 - 2025-04-23 21:22 - 000217724 _____ C:\Users\zskop\Downloads\Spoločenstvo lúk - previerka.pdf
2025-04-22 21:58 - 2025-04-22 21:58 - 000589258 _____ C:\Users\zskop\Downloads\Správanie sa telies v kvapalinách s rôznou hustotou.pptx
2025-04-22 21:56 - 2025-04-22 21:56 - 001531926 _____ C:\Users\zskop\Downloads\Správanie telies v kvapalinách s rôznou hustotou.pptx.pptx
2025-04-22 21:53 - 2025-04-22 21:54 - 154567658 _____ C:\Users\zskop\Downloads\ARCHIMEDOV ZÁKON V PRAXI.mp4
2025-04-22 21:51 - 2025-04-22 21:51 - 001014272 _____ C:\Users\zskop\Downloads\Vplyv hmotnosti, objemu a tvaru telies na ich správanie vo vode.ppt
2025-04-22 21:50 - 2025-04-22 21:50 - 001930752 _____ C:\Users\zskop\Downloads\Vplyv objemu a tvaru telies na ich spravanie vo vode.ppt
2025-04-16 21:57 - 2025-04-16 21:57 - 000617928 _____ C:\Users\zskop\Downloads\8. ročník - Biológia.pdf
2025-04-16 20:48 - 2025-03-30 16:20 - 000238544 _____ (HP) C:\WINDOWS\system32\Drivers\BrFilter_4_4_24_3257.sys
2025-04-16 20:48 - 2025-03-30 16:20 - 000071120 _____ (HP) C:\WINDOWS\system32\Drivers\BrCow_4_4_24_3257.sys
2025-04-16 15:47 - 2025-04-16 15:47 - 041457429 _____ C:\Users\zskop\Downloads\Svet-Dinosaurov-Fascinujuci-Prehistoricki-Obri (1).pptx.pptx
2025-04-14 21:47 - 2025-04-14 21:47 - 002294511 _____ C:\Users\zskop\Downloads\Šifra - písmená.zip
2025-04-14 21:37 - 2025-04-14 21:37 - 000238277 _____ C:\Users\zskop\Downloads\Meranie vlastného výkonu.pdf
2025-04-08 23:32 - 2025-04-08 23:32 - 000000000 ____D C:\WINDOWS\system32\AccountHealthAssets
2025-04-08 23:32 - 2025-04-08 23:32 - 000000000 ____D C:\inetpub
2025-04-08 12:19 - 2025-04-08 12:19 - 000000710 _____ C:\Users\zskop\Documents\Zachránený dokument 1.txt
2025-04-07 09:11 - 2025-04-07 09:11 - 013654769 _____ C:\Users\zskop\Downloads\Fascinujuci-svet-dinosaurov.pptx.pdf
2025-04-06 21:41 - 2025-04-06 21:41 - 001566720 _____ C:\Users\zskop\Downloads\Bunková stavba organizmov.ppt
2025-04-06 21:33 - 2024-10-21 08:54 - 000737704 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-04-06 21:33 - 2024-10-21 08:54 - 000737704 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2025-04-06 21:33 - 2024-10-21 08:54 - 000668008 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2025-04-06 21:33 - 2024-10-21 08:54 - 000149392 _____ C:\WINDOWS\SysWOW64\mantleaxl32.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 002100160 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 001617832 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 001617832 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 000978344 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2025-04-06 21:33 - 2024-10-21 08:53 - 000464304 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 000406440 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2025-04-06 21:33 - 2024-10-21 08:53 - 000229296 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 000175072 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 000165784 _____ C:\WINDOWS\SysWOW64\mantle32.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 000148904 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 000142760 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 004179880 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdadlx32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 002245552 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsasrv64.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 001074800 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdsacli32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000771496 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000678832 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000434088 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000232808 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdihk64.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000187976 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdihk32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000118696 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000115136 _____ C:\WINDOWS\SysWOW64\amdxc32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000048560 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2025-04-06 21:33 - 2024-10-21 08:51 - 088606656 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll
2025-04-06 21:33 - 2024-10-21 08:51 - 001412088 _____ (AMD) C:\WINDOWS\SysWOW64\amf-mft-mjpeg-decoder32.dll
2025-04-06 21:33 - 2024-10-21 08:51 - 000152616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2025-04-06 21:33 - 2024-10-21 08:51 - 000138608 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2025-04-06 21:33 - 2024-10-21 08:51 - 000138600 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2025-04-06 21:33 - 2024-10-21 08:51 - 000131192 _____ C:\WINDOWS\SysWOW64\atidxx32.dll
2025-04-06 21:04 - 2025-04-06 21:04 - 000124925 _____ C:\Users\zskop\Downloads\Magnetické pole cievky s prúdom (1).pptx
2025-04-06 21:01 - 2025-04-06 21:01 - 015419419 _____ C:\Users\zskop\Downloads\2.12 Magnetické pole v okolí vodiča s prúdom. Magnetické pole cievky s prúdom.pptx
2025-04-06 21:00 - 2025-04-06 21:00 - 001490300 _____ C:\Users\zskop\Downloads\Magnetické pole cievky s prúdom.pptx
2025-04-06 20:58 - 2025-04-06 20:58 - 001220756 _____ C:\Users\zskop\Downloads\Simulácia mag. poľa v okolí magnet, cievky s prúdom... (1).jar
2025-04-06 20:58 - 2025-04-06 20:58 - 000155156 _____ C:\Users\zskop\Downloads\cievka v poli.pptx.pptx
2025-04-06 20:57 - 2025-04-06 20:57 - 001220756 _____ C:\Users\zskop\Downloads\Simulácia mag. poľa v okolí magnet, cievky s prúdom....jar
2025-04-06 20:55 - 2025-04-06 20:55 - 001534976 _____ C:\Users\zskop\Downloads\Magnetické pole v okolí vodiča s prúdom.ppt
2025-04-06 20:54 - 2025-04-06 20:54 - 000455680 _____ C:\Users\zskop\Downloads\Magnetické pole elektrického prúdu.ppt.ppt
2025-04-04 09:26 - 2025-04-04 09:26 - 014772973 _____ C:\Users\zskop\Downloads\SPOLOČENSTVO LÚK.pptx
2025-04-04 09:24 - 2025-04-04 09:24 - 004696415 _____ C:\Users\zskop\Downloads\RASTLINY SPOLOČENSTVA LÚK - 1.pptx
2025-04-04 08:05 - 2025-04-04 08:05 - 013068666 _____ C:\Users\zskop\Downloads\Svet-Dinosaurov-Fascinujuci-Prehistoricki-Obri (1).pptx
2025-04-03 18:27 - 2025-04-03 18:27 - 012080271 _____ C:\Users\zskop\Downloads\Fascinujuci-svet-dinosaurov.pptx
2025-04-03 18:20 - 2025-04-03 18:20 - 013068666 _____ C:\Users\zskop\Downloads\Svet-Dinosaurov-Fascinujuci-Prehistoricki-Obri.pptx
2025-04-02 20:55 - 2025-04-02 20:55 - 000573644 _____ C:\Users\zskop\Downloads\OPAKOVANIE - LESNÉ SPOLOČENSTVO - SK. B.pdf
2025-04-02 20:52 - 2025-04-02 20:52 - 003085937 _____ C:\Users\zskop\Downloads\Prírodoveda4- PU str. 68-69 Lesné spoločenstvo.pptx
2025-04-02 20:52 - 2025-04-02 20:52 - 000116602 _____ C:\Users\zskop\Downloads\PRI 4.roč._ Malá písomka Medveď a buk Pravda-nepravda.pdf
2025-04-02 20:48 - 2025-04-02 20:48 - 000629027 _____ C:\Users\zskop\Downloads\Prírodné spoločenstvá.pdf
2025-04-01 13:10 - 2025-04-01 13:10 - 004191468 _____ C:\Users\zskop\Downloads\Biela ružová zelená Kvetinový Deň matiek Príspevok na Instagram.pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-04-28 09:09 - 2024-12-18 04:35 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-04-28 09:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-04-28 09:09 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2025-04-28 09:03 - 2024-12-18 04:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-04-28 09:03 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2025-04-28 09:03 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-04-28 09:03 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-04-28 09:03 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-04-28 09:03 - 2023-05-15 13:29 - 000012288 ___SH C:\DumpStack.log.tmp
2025-04-28 08:49 - 2023-05-15 13:36 - 000000000 ____D C:\ProgramData\HP
2025-04-28 08:14 - 2024-12-18 04:27 - 000000000 ____D C:\Users\zskop
2025-04-28 08:14 - 2024-12-18 04:26 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2025-04-28 08:13 - 2023-05-15 13:36 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2025-04-28 08:01 - 2024-03-04 20:53 - 000000000 ____D C:\Users\zskop\AppData\Local\D3DSCache
2025-04-28 07:57 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-04-28 07:56 - 2024-03-04 20:50 - 000000000 ____D C:\Users\zskop\AppData\Local\Packages
2025-04-28 07:56 - 2023-05-15 13:38 - 000000000 ____D C:\ProgramData\Packages
2025-04-28 07:51 - 2024-12-18 04:26 - 000622176 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-04-28 07:49 - 2024-12-18 04:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-04-28 07:49 - 2024-04-01 18:31 - 000000000 ____D C:\WINDOWS\InboxApps
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-04-27 22:26 - 2024-03-04 21:26 - 000000000 ____D C:\Users\zskop\AppData\Roaming\Microsoft\Word
2025-04-27 21:37 - 2024-03-04 21:27 - 000000000 ____D C:\Users\zskop\AppData\Roaming\Microsoft\Excel
2025-04-27 20:30 - 2024-12-18 04:30 - 003369984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-04-27 20:02 - 2023-05-15 13:29 - 000002452 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-04-24 22:29 - 2024-03-12 20:14 - 000000000 ____D C:\Users\zskop\AppData\LocalLow\Temp
2025-04-24 22:29 - 2022-05-07 07:24 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2025-04-24 22:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2025-04-24 17:02 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-04-24 16:58 - 2023-06-01 03:27 - 000000000 _RSHD C:\hp
2025-04-24 16:58 - 2023-05-15 13:36 - 000000000 ____D C:\Program Files (x86)\HP
2025-04-24 12:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2025-04-24 12:42 - 2023-07-29 22:15 - 000000000 ____D C:\ProgramData\Bromium
2025-04-24 12:35 - 2023-07-29 22:10 - 000000000 ____D C:\Program Files\AMD
2025-04-24 12:34 - 2024-03-12 16:11 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-04-23 20:42 - 2025-03-18 05:32 - 000378432 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_8.dll
2025-04-23 20:42 - 2024-06-10 07:31 - 002901544 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2025-04-23 20:42 - 2024-06-10 07:31 - 000796224 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2025-04-23 20:42 - 2024-06-10 07:31 - 000267840 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2025-04-23 20:42 - 2024-06-10 07:31 - 000243240 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2025-04-23 20:42 - 2024-06-10 07:31 - 000153152 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2025-04-23 20:42 - 2024-06-10 07:31 - 000124480 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2025-04-23 20:42 - 2024-06-10 07:31 - 000075304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2025-04-22 07:48 - 2025-02-07 10:14 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2459763727-713270161-2395763681-1001
2025-04-22 07:48 - 2024-12-18 04:30 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2459763727-713270161-2395763681-1001
2025-04-22 07:48 - 2024-12-18 04:30 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2025-04-22 07:48 - 2024-03-04 21:26 - 000002128 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-04-16 20:48 - 2023-07-29 22:15 - 000006571 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog
2025-04-16 20:31 - 2023-05-15 13:36 - 000000000 ____D C:\Program Files\HP
2025-04-10 10:42 - 2023-05-15 13:29 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-04-10 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2025-04-10 02:03 - 2024-03-14 13:07 - 000000000 ____D C:\Users\zskop\AppData\Local\CrashDumps
2025-04-08 23:56 - 2024-03-04 21:29 - 000000000 ____D C:\Users\zskop\AppData\Roaming\Microsoft\PowerPoint
2025-04-08 23:32 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2025-04-08 23:32 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2025-04-08 23:32 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2025-04-08 23:32 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-04-08 23:32 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\UNP
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2025-04-08 23:32 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2025-04-06 20:40 - 2024-12-18 04:30 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-04-06 20:40 - 2024-12-18 04:30 - 000003508 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-03-31 00:03 - 2024-12-13 11:02 - 000019528 _____ (HP) C:\WINDOWS\system32\Drivers\sselam_4_4_19_828.sys
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
ADDITION:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-04-2025
Ran by ZSkopcany (28-04-2025 09:14:20)
Running from C:\Users\zskop\Downloads
Microsoft Windows 11 Pro Education Version 24H2 26100.3915 (X64) (2024-12-18 02:30:32)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2459763727-713270161-2395763681-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2459763727-713270161-2395763681-503 - Limited - Disabled)
Guest (S-1-5-21-2459763727-713270161-2395763681-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2459763727-713270161-2395763681-504 - Limited - Disabled)
ZSkopcany (S-1-5-21-2459763727-713270161-2395763681-1001 - Administrator - Enabled) => C:\Users\zskop
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Enabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 22.20.44.10 - Advanced Micro Devices, Inc.)
AvalonIT Board 4.0.1 (HKLM-x32\...\AvalonIT Board) (Version: - )
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP Notifications (HKLM-x32\...\{84937F28-9CB4-49E7-A2CF-E32D97E6DAE6}) (Version: 1.1.28.1 - HP)
HP Security Update Service (HKLM\...\{BA61DF3F-BE8F-4785-AC56-D30049E35A7D}) (Version: 4.4.24.3257 - HP Inc.)
HP Sure Recover (HKLM\...\{7DC79887-72FA-4688-BBB9-2968BA80F61B}) (Version: 10.1.26.255 - HP Inc.)
HP Sure Run Module (HKLM\...\{3A089261-A5F9-4312-ABF0-9564F47A5AB8}) (Version: 5.0.5.81 - HP Inc.)
HP System Default Settings (HKLM-x32\...\{29C20505-3240-4B32-93B7-09BECA8CEF36}) (Version: 1.4.16.17 - HP Inc.) Hidden
HP System Default Settings (HKLM-x32\...\{5C1C084D-1DB7-4CAB-840F-E5DD386C2A50}) (Version: 1.4.16.22 - HP Inc.) Hidden
HP System Default Settings (HKLM-x32\...\{E551DF5A-C791-4466-8049-FEF18C68C2B6}) (Version: 1.4.16.10 - HP Inc.) Hidden
HP Wolf Security - Console (HKLM\...\{8D6BF9FF-C0ED-49E6-970D-9EA7CAB3C7C0}) (Version: 11.1.3.817 - HP Inc.)
HP Wolf Security (HKLM\...\{408F5C0F-0DC9-11F0-A6D9-000C29910851}) (Version: 4.4.24.3257 - HP Inc.)
HP Wolf Security Application Support for Chrome 134.0.6998.178 (HKLM\...\{1DE23EA0-7E93-4166-AADE-55B9F23B7D43}) (Version: 4.4.24.3261 - HP Inc.) Hidden
HP Wolf Security Application Support for Sure Sense (HKLM\...\{2AF2F895-6B1E-48AC-83FB-15CD4DA7A47F}) (Version: 4.4.24.3257 - HP Inc.) Hidden
ICS (HKLM-x32\...\{5CD25FCD-D218-46D0-B405-E5A488969BDF}) (Version: 3.1.1.10 - HP Inc.)
Malwarebytes version 5.2.11.183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.2.11.183 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 135.0.3179.98 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 135.0.3179.98 - Microsoft Corporation) Hidden
Microsoft Office 2019 Professional Plus - sk-sk (HKLM\...\ProPlus2019Retail - sk-sk) (Version: 16.0.18227.20162 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 25.056.0324.0003 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.06502 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
MindMaple Lite 1.71 (HKLM-x32\...\MindMaple_is1) (Version: v1.71 - MindMaple Inc.)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.18227.20082 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.18227.20082 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.18227.20162 - Microsoft Corporation) Hidden
Windows Driver Package - HP Inc. BrCow_4_4_24_3257 ActivityMonitor (03/30/2025 4.4.24.3257) (HKLM\...\10A61BE7E9076E790D19ABF2124E363C8CEE32A8) (Version: 03/30/2025 4.4.24.3257 - HP Inc.) Hidden
Windows Driver Package - HP Inc. BrFilter_4_4_24_3257 ActivityMonitor (03/30/2025 4.4.24.3257) (HKLM\...\5C9C494F96ED5A5E722956420FBF6000FC17D08E) (Version: 03/30/2025 4.4.24.3257 - HP Inc.) Hidden
Windows Driver Package - HP Inc. sselam_4_4_19_828 AntiVirus (08/09/2024 4.4.19.828) (HKLM\...\FB93285F183DE6985F684AEE5F637905935D05BF) (Version: 08/09/2024 4.4.19.828 - HP Inc.) Hidden
Zoom Workplace (HKU\S-1-5-21-2459763727-713270161-2395763681-1001\...\ZoomUMX) (Version: 6.4.0 (62047) - Zoom Communications, Inc.)
Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-04-28] (Microsoft Windows)
Akčné kliknutie (ukážka) -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy [2025-04-28] (Microsoft Windows)
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19010.0_x64__0a9344xs7nr4m [2024-11-11] (Advanced Micro Devices Inc.) [Startup Task]
Balík pre prostredie funkcií Windowsu -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-04-28] (Microsoft Windows)
HP Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.HPAudioControl_2.51.331.0_x64__dt26b99r8h8gj [2024-09-27] (Realtek Semiconductor Corp)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_2.7.2.0_x64__v10z8vjag6ke6 [2025-03-13] (HP Inc.)
HP Power Manager -> C:\Program Files\WindowsApps\AD2F1837.HPPowerManager_3.1.3.0_x64__v10z8vjag6ke6 [2024-03-04] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.3.7.0_x64__v10z8vjag6ke6 [2024-09-27] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.43.12.0_x64__v10z8vjag6ke6 [2025-04-01] (HP Inc.)
HP System Information -> C:\Program Files\WindowsApps\AD2F1837.HPSystemInformation_8.10.44.0_x64__v10z8vjag6ke6 [2024-12-04] (HP Inc.)
Kahoot! Create -> C:\Program Files\WindowsApps\37790ProgressiveAppsAuto-.KahootCreator_2.0.0.0_neutral__khvkecjt9945r [2025-02-20] (Kahoot! AS)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-03-13] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_55.20331.573.0_x64__8wekyb3d8bbwe [2025-04-16] (Microsoft Corporation)
Microsoft.StartExperiencesApp -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.296.0_x64__8wekyb3d8bbwe [2025-03-30] (Microsoft Corporation)
myHP -> C:\Program Files\WindowsApps\AD2F1837.myHP_43.52513.1706.0_x64__v10z8vjag6ke6 [2025-04-03] (HP Inc.) [Startup Task]
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-01-23] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_7000.456.1632.0_x64__8wekyb3d8bbwe [2025-04-10] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [ BromiumOverlay_4_4_24_3257] -> {6CDCC3E8-D8FF-46EF-B8BE-63A0593E7798} => C:\Program Files\HP\Sure Click\4.4.24.3257\servers\HostShellExtension.dll [2025-03-30] (Bromium UK Limited -> HP)
ShellIconOverlayIdentifiers-x32: [ BromiumOverlay_4_4_24_3257] -> {6CDCC3E8-D8FF-46EF-B8BE-63A0593E7798} => C:\Program Files\HP\Sure Click\4.4.24.3257\servers\HostShellExtension.dll [2025-03-30] (Bromium UK Limited -> HP)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.056.0324.0003\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers2: [Bromium TrustDrive Context Menu_4_4_24_3257] -> {5F4F5529-DD35-4B9F-812F-A5B0B3FD5D44} => C:\Program Files\HP\Sure Click\4.4.24.3257\servers\HostShellExtension.dll [2025-03-30] (Bromium UK Limited -> HP)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-04-24] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers3: [SureSense_ScanFile_4_4_24_3257] -> {1003406D-B16C-4A93-B2F0-13CCAAD05934} => C:\Program Files\HP\Sure Click\ApplicationSupport\sure_sense\4.4.24.3257\SureSenseShellExt.dll [2025-03-30] (Bromium UK Limited -> HP)
ContextMenuHandlers3: [vSentry_TrustFile_4_4_24_3257] -> {833378FE-1986-46BA-9B4E-F8F1D9B094D6} => C:\Program Files\HP\Sure Click\4.4.24.3257\servers\HostShellExtension.dll [2025-03-30] (Bromium UK Limited -> HP)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.056.0324.0003\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.056.0324.0003\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-04-24] (Malwarebytes Inc. -> Malwarebytes)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon.com.lnk -> C:\Program Files (x86)\Online Services\Amazon\WizLink.exe () -> hxxp://www.amazon.com/gp/ubp/oneButton/config/ ... inesspc-hp
==================== Loaded Modules (Whitelisted) =============
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\zskop\Desktop\adwcleaner (4).exe:MBAM.Zone.Identifier [141]
AlternateDataStreams: C:\Users\zskop\Downloads\adwcleaner (3).exe:MBAM.Zone.Identifier [141]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2022-05-07 07:24 - 2022-05-07 07:22 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
2024-08-26 12:21 - 2024-09-04 08:10 - 000000515 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
10 25 47 926
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2459763727-713270161-2395763681-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img19.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
Network Binding:
=============
Sieťové pripojenie Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
Wi-Fi: MediaTek Wi-Fi 6E MT7922 (RZ616) 160MHz PCIe Adapter -> mtkwl6ex.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
vms_vsf: Hyper-V Virtual Switch Extension Filter
ms_l1vhlwf: Nested Network Virtualization
vms_vsp: Hyper-V Virtual Switch Extension Protocol
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{C67A519A-5C1D-4523-91B7-F91E7C367FD4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{69A1970A-9753-44DC-9EA8-924CBC424716}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24215.1105.3082.1600_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{72E51F05-6EE8-46D3-844A-496446AF4456}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24215.1105.3082.1600_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0BE92A41-48F0-4EA5-9795-C7E1C27DBBD8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{85D2A575-9308-4488-B3D0-42E5E21F9BBB}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2DDA8291-5E87-4BF6-B3BA-E79017C05C31}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8BE654F3-AC24-487B-994B-782C686FD0A3}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-V2] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-NoScope] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{F900CBCF-E1BF-4A03-A42E-BCC75520B4A6}] => (Allow) C:\Program Files\HP\Sure Click\ApplicationSupport\chrome\4.4.24.3261\brchromium\134.0.6998.178\BrChrome.exe (Bromium UK Limited -> HP)
FirewallRules: [{1767B235-58BB-4358-BB8C-1BBFF8A424A1}] => (Allow) C:\Program Files\HP\Sure Click\4.4.24.3257\servers\manifests\chrome\brchromium\132.0.6834.210\BrChrome.exe (Bromium UK Limited -> HP)
FirewallRules: [{4AD3D27A-E5E2-46C4-9652-8F4F897725E3}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25072.1611.3570.1995_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2ED3CA2C-9227-4365-83FA-83A6CDE52C3D}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25072.1611.3570.1995_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{21091B11-34D7-4AC3-9EC0-BEECB45F2EBA}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\135.0.3179.98\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
22-04-2025 07:49:01 Windows Update
22-04-2025 07:49:03 Windows Update
24-04-2025 12:35:30 Grab_MSIExecute
24-04-2025 16:57:24 AdwCleaner_BeforeCleaning_24/04/2025_16:57:24
24-04-2025 17:41:56 AdwCleaner_BeforeCleaning_24/04/2025_17:41:55
27-04-2025 20:08:56 Windows Update
27-04-2025 20:09:03 Windows Update
28-04-2025 08:12:40 AdwCleaner_BeforeCleaning_28/04/2025_08:12:38
28-04-2025 08:48:05 AdwCleaner_BeforeCleaning_28/04/2025_08:48:03
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (04/28/2025 09:08:22 AM) (Source: Application) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/28/2025 08:17:55 AM) (Source: Application) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/28/2025 08:14:06 AM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.]
Error: (04/28/2025 07:59:24 AM) (Source: Application) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/24/2025 10:35:13 PM) (Source: Application) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/24/2025 10:31:18 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: HotKeyServiceUWP.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 00007FFB257108FD
Error: (04/24/2025 10:28:24 PM) (Source: Application) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/24/2025 05:46:51 PM) (Source: Application) (EventID: 0) (User: )
Description: Event-ID 0
System errors:
=============
Error: (04/28/2025 09:03:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby HP Comm Recover zlyhalo kvôli nasledujúcej chybe:
The system cannot find the file specified.
Error: (04/28/2025 09:03:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby l1vhlwf zlyhalo kvôli nasledujúcej chybe:
A hypervisor feature is not available to the user.
Error: (04/28/2025 09:03:00 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Modul WLAN Extensibility Module sa neočakávane zastavil.
Cesta k modulu: C:\WINDOWS\system32\mtkihvx.dll
Error: (04/28/2025 09:03:00 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Modul WLAN Extensibility Module sa neočakávane zastavil.
Cesta k modulu: C:\WINDOWS\system32\mtkihvx.dll
Error: (04/28/2025 09:02:59 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Microsoft Defender Antivirus Service bola ukončená s nasledujúcou chybou:
%%(2147943515 = A system shutdown is in progress.)
Error: (04/28/2025 09:02:59 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Device Association Service detected an endpoint discovery failure.
Error: (04/28/2025 09:02:59 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Device Association Service detected an endpoint discovery failure.
Error: (04/28/2025 09:02:59 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Device Association Service detected an endpoint discovery failure.
Windows Defender:
================
Date: 2025-04-23 22:02:29
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-17 11:55:03
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-16 16:13:23
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-15 20:05:20
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-14 11:32:33
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Event[0]
Date: 2025-04-28 07:55:29
Description:
Microsoft Defender Antivirus service seemed to be hung during shutdown.
Timout (seconds): 0
Component: UninitializeServiceWppTracing
Self-terminated: 0
Date: 2025-04-24 22:24:43
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.
Security intelligence Attempted: Current
Error Code: 0x80501102
Error description: An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support.
Security intelligence Version: 1.427.422.0;1.427.422.0
Engine Version: 1.1.25030.1
CodeIntegrity:
===============
Date: 2025-04-28 09:07:41
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.
Date: 2025-04-28 09:06:48
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Microsoft signing level requirements.
Date: 2025-04-28 09:05:48
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: HP V78 Ver. 01.09.00 01/14/2025
Motherboard: HP 8B5C
Processor: AMD Ryzen 3 7330U with Radeon Graphics
Percentage of memory in use: 85%
Total physical RAM: 7489.07 MB
Available physical RAM: 1086.85 MB
Total Virtual: 20801.07 MB
Available Virtual: 10807.27 MB
==================== Drives ================================
Drive c: (Windows ) (Fixed) (Total:237.37 GB) (Free:130.55 GB) (Model: KBG50ZNV256G KIOXIA) (Protected) NTFS
\\?\Volume{022fa154-9f13-416e-8c7c-4544d0c9e643}\ (Windows RE Tools) (Fixed) (Total:0.83 GB) (Free:0.21 GB) NTFS
\\?\Volume{34cd2a02-f7be-45a9-8085-daccd0bc3135}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.09 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: D06C7837)
Partition: GPT.
==================== End of Addition.txt =======================
FRST:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-04-2025
Ran by ZSkopcany (administrator) on ZSKOPCANY (HP HP ProBook 455 15.6 inch G10 Notebook PC) (28-04-2025 09:06:04)
Running from C:\Users\zskop\Downloads\FRST64 (1).exe
Loaded Profiles: ZSkopcany
Platform: Microsoft Windows 11 Pro Education Version 24H2 26100.3915 (X64) Language: Čeština (Česká republika) -> Slovenčina (Slovensko)
Default browser: Edge
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19010.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19010.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(C:\Program Files\HP\Sure Click\servers\BrService.exe ->) (Bromium UK Limited -> HP) C:\Program Files\HP\Sure Click\bin\Br-uxendm.exe <2>
(C:\Program Files\HP\Sure Click\servers\BrService.exe ->) (Bromium UK Limited -> HP) C:\Program Files\HP\Sure Click\servers\BrHostSvr.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19010.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19010.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Program Files\WindowsApps\MSTeams_25072.1611.3570.1995_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\135.0.3179.98\msedgewebview2.exe <6>
(cmd.exe ->) (Bromium UK Limited -> ) C:\Program Files\HP\Sure Click\servers\BrHostHelper\BrHostHelper.exe <2>
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\HPDCSetup.exe ->) (Portrait Displays, Inc. -> Portrait Displays, Inc) C:\Program Files\Portrait Displays\HP Display Control Service\DeviceCheck.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\SysInfoCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\BridgeCommunication.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\SysInfoCap.exe ->) (Portrait Displays, Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\HPDCSetup.exe
(DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOMN64.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sonitude, Inc.) C:\Windows\System32\DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOCL64.exe
(DriverStore\FileRepository\u0408580.inf_amd64_8c845c7af98953b1\B408487\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0408580.inf_amd64_8c845c7af98953b1\B408487\atieclxx.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <10>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_25072.1611.3570.1995_x64__8wekyb3d8bbwe\ms-teams.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2>
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0408580.inf_amd64_8c845c7af98953b1\B408487\atiesrxx.exe
(services.exe ->) (Bromium UK Limited -> HP) C:\Program Files\HP\Security Update Service\4.4.24.3257\SecurityUpdateService.exe
(services.exe ->) (Bromium UK Limited -> HP) C:\Program Files\HP\Sure Click\servers\BemSvc.exe
(services.exe ->) (Bromium UK Limited -> HP) C:\Program Files\HP\Sure Click\servers\BrService.exe
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ELAN_MOC_Service.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_67bcefabacf2a385\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dba1fdfaedf1c498\HotKeyServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dba1fdfaedf1c498\HPAudioAnalytics.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dba1fdfaedf1c498\LanWlanWwanSwitchingServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpsvcsscancomp.inf_amd64_2358c22cfce9af22\x64\hpsvcsscan.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sonitude, Inc.) C:\Windows\System32\DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOMN64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_a42d9de41f05fa49\RtkAudUService64.exe <3>
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> DesktopExtension) C:\Program Files\WindowsApps\AD2F1837.myHP_43.52513.1706.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2504.1001.26.0_x64__8wekyb3d8bbwe\XboxPcTray.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25032.52.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(svchost.exe ->) (Bromium UK Limited -> HP) C:\Program Files\HP\Sure Click\servers\BrConsole.exe
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_43.52513.1706.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Client Security Manager\HP.ClientSecurityManager.exe
(svchost.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\HP ICS\ICS.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2504.1001.26.0_x64__8wekyb3d8bbwe\XboxGameBarWidgets.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2504.1001.26.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.296.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.225.4081.0_x64__8wekyb3d8bbwe\GameBar.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.225.4081.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.8401.30.0_x64__cw5n1h2txyewy\WidgetBoard.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_a42d9de41f05fa49\RtkAudUService64.exe [2119512 2024-07-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2459763727-713270161-2395763681-1001\...\Run: [MicrosoftEdgeAutoLaunch_99403A969D43EB0E14EB990E68793760] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4419624 2025-04-24] (Microsoft Corporation -> Microsoft Corporation)
GroupPolicy: Restriction - Chrome <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {919C57FF-8160-43B3-845D-291793147596} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [1003528 2025-02-18] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {72C986FC-014D-4761-8268-8647FDC33254} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [479984 2025-02-18] (HP Inc. -> HP Inc.)
Task: {A9239CEB-92C9-47E3-8972-4D581A6D6296} - System32\Tasks\HP\Consent Manager Launcher => C:\WINDOWS\system32\sc.exe [102400 2024-12-18] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {DB09576F-3804-4E87-B57D-C04B591EAD0B} - System32\Tasks\HP\HP ICS\ICS => C:\Program Files (x86)\HP\HP ICS\ICS.exe [76870640 2023-03-02] (HP Inc. -> HP)
Task: {18E73235-CEA2-4BA8-8885-003226A42632} - System32\Tasks\HP\HP Wolf Security\Launch Console => C:\Program Files\HP\HP Client Security Manager\HP.ClientSecurityManager.exe [262664 2024-12-12] (HP Inc. -> HP Inc.)
Task: {8772D18C-05AB-4017-B243-0151B99527E6} - System32\Tasks\HP\Sure Click\Sure Click 4.4.24.3257 => C:\Program Files\HP\Sure Click\servers\BrLauncher.exe [2792200 2025-03-30] (Bromium UK Limited -> HP)
Task: {790FF585-5C4E-4DB0-A1DA-A421F7DA6C2A} - System32\Tasks\HP\Sure Click\Sure Click UI 4.4.24.3257 => C:\Program Files\HP\Sure Click\servers\BrConsole.exe [185608 2025-03-30] (Bromium UK Limited -> HP)
Task: {1A1B8D73-7643-4900-A630-2C0DD87910F3} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28660920 2024-12-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {4735F1B1-F089-4445-9B9B-F50DDDD7EA48} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28660920 2024-12-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {572DA350-049A-4CB2-BE19-DD3C0C9A38C2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [222352 2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {417E0277-7302-4714-95DA-B8ACD3805436} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [222352 2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {6B2863C0-F7E8-4568-8B68-C852772D8C19} - System32\Tasks\Microsoft\Windows\WindowsAI\Recall\InitialConfiguration => {709FD5EF-7296-4154-BD3A-E9830FCFA60A} C:\WINDOWS\system32\ShellConfigTask.dll [274432 2025-04-27] (Microsoft Windows -> Microsoft Corporation)
Task: {99E4D407-4FED-492A-BB86-6DB6D3041FE6} - System32\Tasks\Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration => {0BE6820D-B667-4CB6-931B-C153A77DA895} C:\WINDOWS\system32\ShellConfigTask.dll [274432 2025-04-27] (Microsoft Windows -> Microsoft Corporation)
Task: {22C713DC-4475-4A61-AD70-CBA744DD0C23} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [954808 2022-12-20] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {33CF2256-C5C0-4BA6-BA96-31019B0BBCA8} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {777EBE79-92C7-42F4-A0DB-675200538951} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2459763727-713270161-2395763681-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {25FE8810-BE6C-485B-B0ED-FD492DA7BF4C} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2459763727-713270161-2395763681-1001 => C:\Program Files\Microsoft OneDrive\25.056.0324.0003\OneDriveLauncher.exe [676680 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {B3BE12E7-0F96-4B25-AB89-E2FCFEB08EBC} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-2459763727-713270161-2395763681-1001 => C:\Users\zskop\AppData\Roaming\Zoom\bin\Zoom.exe [436024 2025-03-20] (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{7fd6ae9d-6f1d-4fca-aba8-eef3445937ae}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{7fd6ae9d-6f1d-4fca-aba8-eef3445937ae}: [DhcpDomain] home
Tcpip\..\Interfaces\{968f8823-c4c9-4ccd-844e-d12ac33f9571}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{968f8823-c4c9-4ccd-844e-d12ac33f9571}: [DhcpDomain] home
Tcpip\..\Interfaces\{968f8823-c4c9-4ccd-844e-d12ac33f9571}\45D2532383131393: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{968f8823-c4c9-4ccd-844e-d12ac33f9571}\45D2532383131393: [DhcpDomain] home
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\zskop\AppData\Local\Microsoft\Edge\User Data\Default [2025-04-28]
Edge Notifications: Default -> hxxps://7l261d6bamv47o.steadychainconnection.co.in; hxxps://cvvbj86071bc73a6ia7g.steadychainconnection.co.in; hxxps://prwcv8bm23fqtm.steadychainconnection.co.in; hxxps://www.messenger.com
Edge Extension: (HP Wolf Security Extension) - C:\Users\zskop\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\aoganjpeihhkhippgnniaclfocnihgln [2025-04-24]
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\zskop\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-24]
Edge Extension: (Edge relevant text changes) - C:\Users\zskop\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-04-24]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
FireFox:
========
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 BrAmSvc; C:\Program Files\HP\Sure Click\servers\BrAmSvc.exe [2077088 2025-03-30] (HP Inc -> HP)
R2 BrEndpointSvc; c:\Program Files\HP\Sure Click\servers\BemSvc.exe [4912904 2025-03-30] (Bromium UK Limited -> HP)
R2 BrService; c:\Program Files\HP\Sure Click\servers\BrService.exe [10899208 2025-03-30] (Bromium UK Limited -> HP)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13512888 2024-12-07] (Microsoft Corporation -> Microsoft Corporation)
R2 ELAN_MOC_Service; C:\WINDOWS\System32\ELAN_MOC_Service.exe [240032 2024-06-12] (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.056.0324.0003\FileSyncHelper.exe [3545416 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [1028024 2024-05-17] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 HotKeyServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dba1fdfaedf1c498\HotKeyServiceUWP.exe [1510464 2025-01-02] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\AppHelperCap.exe [889976 2025-02-23] (HP Inc. -> HP Inc.)
R2 HPAudioAnalytics; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dba1fdfaedf1c498\HPAudioAnalytics.exe [516160 2025-01-02] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\DiagsCap.exe [888928 2025-02-23] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\NetworkCap.exe [885344 2025-02-23] (HP Inc. -> HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1149448 2020-07-23] (HP Inc. -> HP)
R2 hpsvcsscan; C:\WINDOWS\System32\DriverStore\FileRepository\hpsvcsscancomp.inf_amd64_2358c22cfce9af22\x64\hpsvcsscan.exe [7039168 2024-09-24] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_99df39518a95d370\x64\SysInfoCap.exe [889464 2025-02-23] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_67bcefabacf2a385\x64\TouchpointAnalyticsClientService.exe [631472 2025-03-26] (HP Inc. -> HP Inc.)
R2 LanWlanWwanSwitchingServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_dba1fdfaedf1c498\LanWlanWwanSwitchingServiceUWP.exe [605248 2025-01-02] (HP Inc. -> HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9406208 2025-04-24] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-04-24] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe [2009608 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.056.0324.0003\OneDriveUpdaterService.exe [3892568 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
R2 SECOMNService; C:\WINDOWS\System32\DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOMN64.exe [1087496 2024-07-08] (Microsoft Windows Hardware Compatibility Publisher -> Sonitude, Inc.)
R2 SecurityUpdateService; C:\Program Files\HP\Security Update Service\4.4.24.3257\SecurityUpdateService.exe [5608200 2025-03-30] (Bromium UK Limited -> HP)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [559320 2025-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\NisSrv.exe [4538400 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe [278320 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ZTHELPER; C:\WINDOWS\System32\zthelper.dll [146096 2025-04-27] (Microsoft Windows -> Microsoft Corporation)
S2 HP Comm Recover; "C:\Program Files\HPCommRecovery\HPCommRecovery.exe" [X]
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrmgr.sys [25672 2024-04-23] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0408580.inf_amd64_8c845c7af98953b1\B408487\amdkmdag.sys [106591144 2024-10-21] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 amdwirelessbutton; C:\WINDOWS\System32\drivers\amdwirelessbutton.sys [39032 2024-03-27] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc)
S3 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [7643696 2025-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender S.R.L. Bucharest, ROMANIA)
S3 BdDci4; C:\WINDOWS\system32\DRIVERS\bddci4.sys [969776 2025-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R0 BrCow_4_4_24_3257; C:\WINDOWS\System32\DRIVERS\BrCow_4_4_24_3257.sys [71120 2025-03-30] (Bromium UK Limited -> HP)
R2 BrFilter_4_4_24_3257; C:\WINDOWS\System32\DRIVERS\BrFilter_4_4_24_3257.sys [238544 2025-03-30] (Bromium UK Limited -> HP)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2025-04-24] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [222528 2024-12-18] (Microsoft Windows -> Microsoft Corporation)
S1 Gemma; C:\WINDOWS\System32\DRIVERS\gemma.sys [1791064 2025-03-30] (Microsoft Windows Hardware Compatibility Publisher -> BitDefender S.R.L. Bucharest, ROMANIA)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1421dec2010cc057\x64\hpcustomcapdriver.sys [18984 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [331168 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [144840 2025-04-08] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [234072 2025-04-24] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-04-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt11.sys [241112 2025-04-28] (Malwarebytes Inc. -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\System32\Drivers\mbam.sys [80448 2025-04-28] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239568 2025-04-24] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [189776 2025-04-28] (Malwarebytes Inc. -> Malwarebytes)
R3 MTKBTFilterX64; C:\WINDOWS\System32\DriverStore\FileRepository\mtkbtfilter.inf_amd64_bee0043985624487\mtkbtfilterx.sys [550072 2025-02-15] (MEDIATEK INC. -> MediaTek Inc.)
R3 mtkwlex; C:\WINDOWS\System32\DriverStore\FileRepository\mtkwl6ex.inf_amd64_28fe41aefe6dd8d1\mtkwl6ex.sys [2011304 2025-02-20] (MEDIATEK INC. -> MediaTek Inc.)
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_d1a236ce16a4bbb1\rt68cx21x64.sys [845256 2024-12-25] (Realtek Semiconductor Corp. -> Realtek)
S0 sselam_4_4_19_828; C:\WINDOWS\System32\DRIVERS\sselam_4_4_19_828.sys [19528 2025-03-30] (Microsoft Windows Early Launch Anti-malware Publisher -> HP)
S3 ThermalFilter; C:\WINDOWS\System32\DriverStore\FileRepository\c_thermal.inf_amd64_732a53ed1662b707\ThermalFilter.sys [75376 2025-04-08] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
R3 uxen; C:\Program Files\HP\Sure Click\bin\uxen.sys [2053056 2025-02-19] (Bromium UK Limited -> HP)
R3 vlflt; C:\WINDOWS\System32\DRIVERS\vlflt.sys [1403456 2025-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2024-12-18] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20016 2025-04-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [605576 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100744 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
S3 wini3ctarget; C:\WINDOWS\System32\DriverStore\FileRepository\wini3ctarget.inf_amd64_8d863c975b4367df\wini3ctarget.sys [79288 2025-04-27] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2024-12-18] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_971c769b103df369\WSDScan.sys [61440 2024-12-18] (Microsoft Windows -> Microsoft Corporation)
S3 ax_pvi; \??\C:\Program Files\HP\Sure Click\bin\ax_pvi.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
Error Reading file: "C:\ProgramData\Desktop\MindMaple Lite.lnk"
Error Reading file: "C:\ProgramData\Desktop\desktop.ini"
Error Reading file: "C:\ProgramData\Desktop\AvalonIT Board.lnk"
2025-04-28 09:09 - 2025-04-28 09:09 - 000668026 _____ C:\WINDOWS\system32\perfh005.dat
2025-04-28 09:09 - 2025-04-28 09:09 - 000145048 _____ C:\WINDOWS\system32\perfc005.dat
2025-04-28 09:03 - 2025-04-28 09:03 - 000241112 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt11.sys
2025-04-28 09:03 - 2025-04-28 09:03 - 000189776 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2025-04-28 09:03 - 2025-04-28 09:03 - 000000000 ____D C:\Users\zskop\AppData\LocalLow\IGDump
2025-04-28 08:48 - 2025-04-28 08:48 - 000010372 __RSH C:\ProgramData\ntuser.pol
2025-04-28 08:47 - 2025-04-28 08:47 - 009568256 _____ (Malwarebytes) C:\Users\zskop\Downloads\adwcleaner (4).exe
2025-04-28 08:47 - 2025-04-28 08:47 - 009568256 _____ (Malwarebytes) C:\Users\zskop\Desktop\adwcleaner (4).exe
2025-04-28 08:31 - 2025-04-28 08:31 - 000000000 ____D C:\Users\zskop\Downloads\FRST-OlderVersion
2025-04-28 08:11 - 2025-04-28 08:11 - 009568256 _____ (Malwarebytes) C:\Users\zskop\Downloads\adwcleaner (3).exe
2025-04-27 21:08 - 2025-04-28 08:05 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-04-27 20:39 - 2025-04-27 20:39 - 000152434 _____ C:\Users\zskop\Downloads\cestovný príkaz tlačivo (1) (1).xlsx
2025-04-27 20:30 - 2025-04-27 20:30 - 000030998 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-04-27 20:30 - 2025-04-27 20:30 - 000030998 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-04-27 20:24 - 2025-04-27 20:24 - 001839616 _____ C:\Users\zskop\Downloads\využitie elektromagnetizmu.ppt.ppt
2025-04-27 20:23 - 2025-04-27 20:23 - 001616053 _____ C:\Users\zskop\Downloads\Využitie elektromagnetov.pptx
2025-04-27 20:22 - 2025-04-27 20:22 - 007080131 _____ C:\Users\zskop\Downloads\2.13 Elektromagnet a jeho využitie.pptx
2025-04-27 20:20 - 2025-04-27 20:20 - 001765812 _____ C:\Users\zskop\Downloads\Elektromagnet.pptx
2025-04-25 11:25 - 2025-04-25 11:25 - 000229772 _____ C:\Users\zskop\Desktop\Dodatok č. 2 ŠTANDARDY DORŽIAVANIA ZÁKAZU SEGREGÁCIE.pdf
2025-04-24 22:32 - 2025-04-28 09:03 - 000000876 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-04-24 22:28 - 2025-04-28 08:36 - 000002906 _____ C:\Users\zskop\Downloads\Fixlog.txt
2025-04-24 18:10 - 2025-04-24 18:10 - 009568256 _____ (Malwarebytes) C:\Users\zskop\Downloads\adwcleaner (2).exe
2025-04-24 17:39 - 2025-04-24 17:39 - 009566696 _____ (Malwarebytes) C:\Users\zskop\Downloads\AdwCleaner (1).exe
2025-04-24 17:03 - 2025-04-28 09:04 - 000000000 ____D C:\Users\zskop\AppData\Local\Malwarebytes
2025-04-24 17:03 - 2025-04-24 17:03 - 000002101 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2025-04-24 17:02 - 2025-04-24 17:02 - 000000000 ____D C:\ProgramData\Malwarebytes
2025-04-24 17:02 - 2025-04-24 17:02 - 000000000 ____D C:\Program Files\Malwarebytes
2025-04-24 17:01 - 2025-04-24 17:01 - 002834160 _____ (Malwarebytes) C:\Users\zskop\Downloads\MBSetup.exe
2025-04-24 16:56 - 2025-04-24 16:58 - 000000000 ____D C:\AdwCleaner
2025-04-24 16:56 - 2025-04-24 16:56 - 009568256 _____ (Malwarebytes) C:\Users\zskop\Downloads\adwcleaner.exe
2025-04-24 13:14 - 2025-04-24 21:15 - 000024542 _____ C:\Users\zskop\Downloads\Addition.txt
2025-04-24 13:08 - 2025-04-28 09:10 - 000027662 _____ C:\Users\zskop\Downloads\FRST.txt
2025-04-24 13:08 - 2025-04-28 09:09 - 000000000 ____D C:\FRST
2025-04-24 13:07 - 2025-04-28 08:31 - 002405376 _____ (Farbar) C:\Users\zskop\Downloads\FRST64 (1).exe
2025-04-24 10:47 - 2025-04-24 10:48 - 000000000 ____D C:\Users\zskop\Desktop\Záloha pracovná plocha
2025-04-23 21:22 - 2025-04-23 21:22 - 000217724 _____ C:\Users\zskop\Downloads\Spoločenstvo lúk - previerka.pdf
2025-04-22 21:58 - 2025-04-22 21:58 - 000589258 _____ C:\Users\zskop\Downloads\Správanie sa telies v kvapalinách s rôznou hustotou.pptx
2025-04-22 21:56 - 2025-04-22 21:56 - 001531926 _____ C:\Users\zskop\Downloads\Správanie telies v kvapalinách s rôznou hustotou.pptx.pptx
2025-04-22 21:53 - 2025-04-22 21:54 - 154567658 _____ C:\Users\zskop\Downloads\ARCHIMEDOV ZÁKON V PRAXI.mp4
2025-04-22 21:51 - 2025-04-22 21:51 - 001014272 _____ C:\Users\zskop\Downloads\Vplyv hmotnosti, objemu a tvaru telies na ich správanie vo vode.ppt
2025-04-22 21:50 - 2025-04-22 21:50 - 001930752 _____ C:\Users\zskop\Downloads\Vplyv objemu a tvaru telies na ich spravanie vo vode.ppt
2025-04-16 21:57 - 2025-04-16 21:57 - 000617928 _____ C:\Users\zskop\Downloads\8. ročník - Biológia.pdf
2025-04-16 20:48 - 2025-03-30 16:20 - 000238544 _____ (HP) C:\WINDOWS\system32\Drivers\BrFilter_4_4_24_3257.sys
2025-04-16 20:48 - 2025-03-30 16:20 - 000071120 _____ (HP) C:\WINDOWS\system32\Drivers\BrCow_4_4_24_3257.sys
2025-04-16 15:47 - 2025-04-16 15:47 - 041457429 _____ C:\Users\zskop\Downloads\Svet-Dinosaurov-Fascinujuci-Prehistoricki-Obri (1).pptx.pptx
2025-04-14 21:47 - 2025-04-14 21:47 - 002294511 _____ C:\Users\zskop\Downloads\Šifra - písmená.zip
2025-04-14 21:37 - 2025-04-14 21:37 - 000238277 _____ C:\Users\zskop\Downloads\Meranie vlastného výkonu.pdf
2025-04-08 23:32 - 2025-04-08 23:32 - 000000000 ____D C:\WINDOWS\system32\AccountHealthAssets
2025-04-08 23:32 - 2025-04-08 23:32 - 000000000 ____D C:\inetpub
2025-04-08 12:19 - 2025-04-08 12:19 - 000000710 _____ C:\Users\zskop\Documents\Zachránený dokument 1.txt
2025-04-07 09:11 - 2025-04-07 09:11 - 013654769 _____ C:\Users\zskop\Downloads\Fascinujuci-svet-dinosaurov.pptx.pdf
2025-04-06 21:41 - 2025-04-06 21:41 - 001566720 _____ C:\Users\zskop\Downloads\Bunková stavba organizmov.ppt
2025-04-06 21:33 - 2024-10-21 08:54 - 000737704 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-04-06 21:33 - 2024-10-21 08:54 - 000737704 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2025-04-06 21:33 - 2024-10-21 08:54 - 000668008 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2025-04-06 21:33 - 2024-10-21 08:54 - 000149392 _____ C:\WINDOWS\SysWOW64\mantleaxl32.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 002100160 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 001617832 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 001617832 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 000978344 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2025-04-06 21:33 - 2024-10-21 08:53 - 000464304 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 000406440 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2025-04-06 21:33 - 2024-10-21 08:53 - 000229296 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 000175072 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 000165784 _____ C:\WINDOWS\SysWOW64\mantle32.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 000148904 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2025-04-06 21:33 - 2024-10-21 08:53 - 000142760 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 004179880 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdadlx32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 002245552 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsasrv64.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 001074800 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdsacli32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000771496 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000678832 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000434088 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000232808 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdihk64.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000187976 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdihk32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000118696 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000115136 _____ C:\WINDOWS\SysWOW64\amdxc32.dll
2025-04-06 21:33 - 2024-10-21 08:52 - 000048560 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2025-04-06 21:33 - 2024-10-21 08:51 - 088606656 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll
2025-04-06 21:33 - 2024-10-21 08:51 - 001412088 _____ (AMD) C:\WINDOWS\SysWOW64\amf-mft-mjpeg-decoder32.dll
2025-04-06 21:33 - 2024-10-21 08:51 - 000152616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2025-04-06 21:33 - 2024-10-21 08:51 - 000138608 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2025-04-06 21:33 - 2024-10-21 08:51 - 000138600 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2025-04-06 21:33 - 2024-10-21 08:51 - 000131192 _____ C:\WINDOWS\SysWOW64\atidxx32.dll
2025-04-06 21:04 - 2025-04-06 21:04 - 000124925 _____ C:\Users\zskop\Downloads\Magnetické pole cievky s prúdom (1).pptx
2025-04-06 21:01 - 2025-04-06 21:01 - 015419419 _____ C:\Users\zskop\Downloads\2.12 Magnetické pole v okolí vodiča s prúdom. Magnetické pole cievky s prúdom.pptx
2025-04-06 21:00 - 2025-04-06 21:00 - 001490300 _____ C:\Users\zskop\Downloads\Magnetické pole cievky s prúdom.pptx
2025-04-06 20:58 - 2025-04-06 20:58 - 001220756 _____ C:\Users\zskop\Downloads\Simulácia mag. poľa v okolí magnet, cievky s prúdom... (1).jar
2025-04-06 20:58 - 2025-04-06 20:58 - 000155156 _____ C:\Users\zskop\Downloads\cievka v poli.pptx.pptx
2025-04-06 20:57 - 2025-04-06 20:57 - 001220756 _____ C:\Users\zskop\Downloads\Simulácia mag. poľa v okolí magnet, cievky s prúdom....jar
2025-04-06 20:55 - 2025-04-06 20:55 - 001534976 _____ C:\Users\zskop\Downloads\Magnetické pole v okolí vodiča s prúdom.ppt
2025-04-06 20:54 - 2025-04-06 20:54 - 000455680 _____ C:\Users\zskop\Downloads\Magnetické pole elektrického prúdu.ppt.ppt
2025-04-04 09:26 - 2025-04-04 09:26 - 014772973 _____ C:\Users\zskop\Downloads\SPOLOČENSTVO LÚK.pptx
2025-04-04 09:24 - 2025-04-04 09:24 - 004696415 _____ C:\Users\zskop\Downloads\RASTLINY SPOLOČENSTVA LÚK - 1.pptx
2025-04-04 08:05 - 2025-04-04 08:05 - 013068666 _____ C:\Users\zskop\Downloads\Svet-Dinosaurov-Fascinujuci-Prehistoricki-Obri (1).pptx
2025-04-03 18:27 - 2025-04-03 18:27 - 012080271 _____ C:\Users\zskop\Downloads\Fascinujuci-svet-dinosaurov.pptx
2025-04-03 18:20 - 2025-04-03 18:20 - 013068666 _____ C:\Users\zskop\Downloads\Svet-Dinosaurov-Fascinujuci-Prehistoricki-Obri.pptx
2025-04-02 20:55 - 2025-04-02 20:55 - 000573644 _____ C:\Users\zskop\Downloads\OPAKOVANIE - LESNÉ SPOLOČENSTVO - SK. B.pdf
2025-04-02 20:52 - 2025-04-02 20:52 - 003085937 _____ C:\Users\zskop\Downloads\Prírodoveda4- PU str. 68-69 Lesné spoločenstvo.pptx
2025-04-02 20:52 - 2025-04-02 20:52 - 000116602 _____ C:\Users\zskop\Downloads\PRI 4.roč._ Malá písomka Medveď a buk Pravda-nepravda.pdf
2025-04-02 20:48 - 2025-04-02 20:48 - 000629027 _____ C:\Users\zskop\Downloads\Prírodné spoločenstvá.pdf
2025-04-01 13:10 - 2025-04-01 13:10 - 004191468 _____ C:\Users\zskop\Downloads\Biela ružová zelená Kvetinový Deň matiek Príspevok na Instagram.pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-04-28 09:09 - 2024-12-18 04:35 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-04-28 09:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-04-28 09:09 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2025-04-28 09:03 - 2024-12-18 04:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-04-28 09:03 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2025-04-28 09:03 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-04-28 09:03 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-04-28 09:03 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-04-28 09:03 - 2023-05-15 13:29 - 000012288 ___SH C:\DumpStack.log.tmp
2025-04-28 08:49 - 2023-05-15 13:36 - 000000000 ____D C:\ProgramData\HP
2025-04-28 08:14 - 2024-12-18 04:27 - 000000000 ____D C:\Users\zskop
2025-04-28 08:14 - 2024-12-18 04:26 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2025-04-28 08:13 - 2023-05-15 13:36 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2025-04-28 08:01 - 2024-03-04 20:53 - 000000000 ____D C:\Users\zskop\AppData\Local\D3DSCache
2025-04-28 07:57 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-04-28 07:56 - 2024-03-04 20:50 - 000000000 ____D C:\Users\zskop\AppData\Local\Packages
2025-04-28 07:56 - 2023-05-15 13:38 - 000000000 ____D C:\ProgramData\Packages
2025-04-28 07:51 - 2024-12-18 04:26 - 000622176 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-04-28 07:49 - 2024-12-18 04:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-04-28 07:49 - 2024-04-01 18:31 - 000000000 ____D C:\WINDOWS\InboxApps
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-04-28 07:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-04-27 22:26 - 2024-03-04 21:26 - 000000000 ____D C:\Users\zskop\AppData\Roaming\Microsoft\Word
2025-04-27 21:37 - 2024-03-04 21:27 - 000000000 ____D C:\Users\zskop\AppData\Roaming\Microsoft\Excel
2025-04-27 20:30 - 2024-12-18 04:30 - 003369984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-04-27 20:02 - 2023-05-15 13:29 - 000002452 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-04-24 22:29 - 2024-03-12 20:14 - 000000000 ____D C:\Users\zskop\AppData\LocalLow\Temp
2025-04-24 22:29 - 2022-05-07 07:24 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2025-04-24 22:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2025-04-24 17:02 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-04-24 16:58 - 2023-06-01 03:27 - 000000000 _RSHD C:\hp
2025-04-24 16:58 - 2023-05-15 13:36 - 000000000 ____D C:\Program Files (x86)\HP
2025-04-24 12:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2025-04-24 12:42 - 2023-07-29 22:15 - 000000000 ____D C:\ProgramData\Bromium
2025-04-24 12:35 - 2023-07-29 22:10 - 000000000 ____D C:\Program Files\AMD
2025-04-24 12:34 - 2024-03-12 16:11 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-04-23 20:42 - 2025-03-18 05:32 - 000378432 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_8.dll
2025-04-23 20:42 - 2024-06-10 07:31 - 002901544 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2025-04-23 20:42 - 2024-06-10 07:31 - 000796224 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2025-04-23 20:42 - 2024-06-10 07:31 - 000267840 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2025-04-23 20:42 - 2024-06-10 07:31 - 000243240 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2025-04-23 20:42 - 2024-06-10 07:31 - 000153152 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2025-04-23 20:42 - 2024-06-10 07:31 - 000124480 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2025-04-23 20:42 - 2024-06-10 07:31 - 000075304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2025-04-22 07:48 - 2025-02-07 10:14 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2459763727-713270161-2395763681-1001
2025-04-22 07:48 - 2024-12-18 04:30 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2459763727-713270161-2395763681-1001
2025-04-22 07:48 - 2024-12-18 04:30 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2025-04-22 07:48 - 2024-03-04 21:26 - 000002128 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-04-16 20:48 - 2023-07-29 22:15 - 000006571 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog
2025-04-16 20:31 - 2023-05-15 13:36 - 000000000 ____D C:\Program Files\HP
2025-04-10 10:42 - 2023-05-15 13:29 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-04-10 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2025-04-10 02:03 - 2024-03-14 13:07 - 000000000 ____D C:\Users\zskop\AppData\Local\CrashDumps
2025-04-08 23:56 - 2024-03-04 21:29 - 000000000 ____D C:\Users\zskop\AppData\Roaming\Microsoft\PowerPoint
2025-04-08 23:32 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2025-04-08 23:32 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2025-04-08 23:32 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2025-04-08 23:32 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-04-08 23:32 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\UNP
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-04-08 23:32 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2025-04-08 23:32 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2025-04-06 20:40 - 2024-12-18 04:30 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-04-06 20:40 - 2024-12-18 04:30 - 000003508 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-03-31 00:03 - 2024-12-13 11:02 - 000019528 _____ (HP) C:\WINDOWS\system32\Drivers\sselam_4_4_19_828.sys
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
ADDITION:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-04-2025
Ran by ZSkopcany (28-04-2025 09:14:20)
Running from C:\Users\zskop\Downloads
Microsoft Windows 11 Pro Education Version 24H2 26100.3915 (X64) (2024-12-18 02:30:32)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2459763727-713270161-2395763681-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2459763727-713270161-2395763681-503 - Limited - Disabled)
Guest (S-1-5-21-2459763727-713270161-2395763681-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2459763727-713270161-2395763681-504 - Limited - Disabled)
ZSkopcany (S-1-5-21-2459763727-713270161-2395763681-1001 - Administrator - Enabled) => C:\Users\zskop
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Enabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 22.20.44.10 - Advanced Micro Devices, Inc.)
AvalonIT Board 4.0.1 (HKLM-x32\...\AvalonIT Board) (Version: - )
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP Notifications (HKLM-x32\...\{84937F28-9CB4-49E7-A2CF-E32D97E6DAE6}) (Version: 1.1.28.1 - HP)
HP Security Update Service (HKLM\...\{BA61DF3F-BE8F-4785-AC56-D30049E35A7D}) (Version: 4.4.24.3257 - HP Inc.)
HP Sure Recover (HKLM\...\{7DC79887-72FA-4688-BBB9-2968BA80F61B}) (Version: 10.1.26.255 - HP Inc.)
HP Sure Run Module (HKLM\...\{3A089261-A5F9-4312-ABF0-9564F47A5AB8}) (Version: 5.0.5.81 - HP Inc.)
HP System Default Settings (HKLM-x32\...\{29C20505-3240-4B32-93B7-09BECA8CEF36}) (Version: 1.4.16.17 - HP Inc.) Hidden
HP System Default Settings (HKLM-x32\...\{5C1C084D-1DB7-4CAB-840F-E5DD386C2A50}) (Version: 1.4.16.22 - HP Inc.) Hidden
HP System Default Settings (HKLM-x32\...\{E551DF5A-C791-4466-8049-FEF18C68C2B6}) (Version: 1.4.16.10 - HP Inc.) Hidden
HP Wolf Security - Console (HKLM\...\{8D6BF9FF-C0ED-49E6-970D-9EA7CAB3C7C0}) (Version: 11.1.3.817 - HP Inc.)
HP Wolf Security (HKLM\...\{408F5C0F-0DC9-11F0-A6D9-000C29910851}) (Version: 4.4.24.3257 - HP Inc.)
HP Wolf Security Application Support for Chrome 134.0.6998.178 (HKLM\...\{1DE23EA0-7E93-4166-AADE-55B9F23B7D43}) (Version: 4.4.24.3261 - HP Inc.) Hidden
HP Wolf Security Application Support for Sure Sense (HKLM\...\{2AF2F895-6B1E-48AC-83FB-15CD4DA7A47F}) (Version: 4.4.24.3257 - HP Inc.) Hidden
ICS (HKLM-x32\...\{5CD25FCD-D218-46D0-B405-E5A488969BDF}) (Version: 3.1.1.10 - HP Inc.)
Malwarebytes version 5.2.11.183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.2.11.183 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 135.0.3179.98 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 135.0.3179.98 - Microsoft Corporation) Hidden
Microsoft Office 2019 Professional Plus - sk-sk (HKLM\...\ProPlus2019Retail - sk-sk) (Version: 16.0.18227.20162 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 25.056.0324.0003 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.06502 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
MindMaple Lite 1.71 (HKLM-x32\...\MindMaple_is1) (Version: v1.71 - MindMaple Inc.)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.18227.20082 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.18227.20082 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.18227.20162 - Microsoft Corporation) Hidden
Windows Driver Package - HP Inc. BrCow_4_4_24_3257 ActivityMonitor (03/30/2025 4.4.24.3257) (HKLM\...\10A61BE7E9076E790D19ABF2124E363C8CEE32A8) (Version: 03/30/2025 4.4.24.3257 - HP Inc.) Hidden
Windows Driver Package - HP Inc. BrFilter_4_4_24_3257 ActivityMonitor (03/30/2025 4.4.24.3257) (HKLM\...\5C9C494F96ED5A5E722956420FBF6000FC17D08E) (Version: 03/30/2025 4.4.24.3257 - HP Inc.) Hidden
Windows Driver Package - HP Inc. sselam_4_4_19_828 AntiVirus (08/09/2024 4.4.19.828) (HKLM\...\FB93285F183DE6985F684AEE5F637905935D05BF) (Version: 08/09/2024 4.4.19.828 - HP Inc.) Hidden
Zoom Workplace (HKU\S-1-5-21-2459763727-713270161-2395763681-1001\...\ZoomUMX) (Version: 6.4.0 (62047) - Zoom Communications, Inc.)
Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-04-28] (Microsoft Windows)
Akčné kliknutie (ukážka) -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy [2025-04-28] (Microsoft Windows)
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19010.0_x64__0a9344xs7nr4m [2024-11-11] (Advanced Micro Devices Inc.) [Startup Task]
Balík pre prostredie funkcií Windowsu -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-04-28] (Microsoft Windows)
HP Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.HPAudioControl_2.51.331.0_x64__dt26b99r8h8gj [2024-09-27] (Realtek Semiconductor Corp)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_2.7.2.0_x64__v10z8vjag6ke6 [2025-03-13] (HP Inc.)
HP Power Manager -> C:\Program Files\WindowsApps\AD2F1837.HPPowerManager_3.1.3.0_x64__v10z8vjag6ke6 [2024-03-04] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.3.7.0_x64__v10z8vjag6ke6 [2024-09-27] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.43.12.0_x64__v10z8vjag6ke6 [2025-04-01] (HP Inc.)
HP System Information -> C:\Program Files\WindowsApps\AD2F1837.HPSystemInformation_8.10.44.0_x64__v10z8vjag6ke6 [2024-12-04] (HP Inc.)
Kahoot! Create -> C:\Program Files\WindowsApps\37790ProgressiveAppsAuto-.KahootCreator_2.0.0.0_neutral__khvkecjt9945r [2025-02-20] (Kahoot! AS)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-03-13] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_55.20331.573.0_x64__8wekyb3d8bbwe [2025-04-16] (Microsoft Corporation)
Microsoft.StartExperiencesApp -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.296.0_x64__8wekyb3d8bbwe [2025-03-30] (Microsoft Corporation)
myHP -> C:\Program Files\WindowsApps\AD2F1837.myHP_43.52513.1706.0_x64__v10z8vjag6ke6 [2025-04-03] (HP Inc.) [Startup Task]
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-01-23] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_7000.456.1632.0_x64__8wekyb3d8bbwe [2025-04-10] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [ BromiumOverlay_4_4_24_3257] -> {6CDCC3E8-D8FF-46EF-B8BE-63A0593E7798} => C:\Program Files\HP\Sure Click\4.4.24.3257\servers\HostShellExtension.dll [2025-03-30] (Bromium UK Limited -> HP)
ShellIconOverlayIdentifiers-x32: [ BromiumOverlay_4_4_24_3257] -> {6CDCC3E8-D8FF-46EF-B8BE-63A0593E7798} => C:\Program Files\HP\Sure Click\4.4.24.3257\servers\HostShellExtension.dll [2025-03-30] (Bromium UK Limited -> HP)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.056.0324.0003\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers2: [Bromium TrustDrive Context Menu_4_4_24_3257] -> {5F4F5529-DD35-4B9F-812F-A5B0B3FD5D44} => C:\Program Files\HP\Sure Click\4.4.24.3257\servers\HostShellExtension.dll [2025-03-30] (Bromium UK Limited -> HP)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-04-24] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers3: [SureSense_ScanFile_4_4_24_3257] -> {1003406D-B16C-4A93-B2F0-13CCAAD05934} => C:\Program Files\HP\Sure Click\ApplicationSupport\sure_sense\4.4.24.3257\SureSenseShellExt.dll [2025-03-30] (Bromium UK Limited -> HP)
ContextMenuHandlers3: [vSentry_TrustFile_4_4_24_3257] -> {833378FE-1986-46BA-9B4E-F8F1D9B094D6} => C:\Program Files\HP\Sure Click\4.4.24.3257\servers\HostShellExtension.dll [2025-03-30] (Bromium UK Limited -> HP)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.056.0324.0003\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.056.0324.0003\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-04-24] (Malwarebytes Inc. -> Malwarebytes)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon.com.lnk -> C:\Program Files (x86)\Online Services\Amazon\WizLink.exe () -> hxxp://www.amazon.com/gp/ubp/oneButton/config/ ... inesspc-hp
==================== Loaded Modules (Whitelisted) =============
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\zskop\Desktop\adwcleaner (4).exe:MBAM.Zone.Identifier [141]
AlternateDataStreams: C:\Users\zskop\Downloads\adwcleaner (3).exe:MBAM.Zone.Identifier [141]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2022-05-07 07:24 - 2022-05-07 07:22 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
2024-08-26 12:21 - 2024-09-04 08:10 - 000000515 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
10 25 47 926
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2459763727-713270161-2395763681-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img19.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
Network Binding:
=============
Sieťové pripojenie Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
Wi-Fi: MediaTek Wi-Fi 6E MT7922 (RZ616) 160MHz PCIe Adapter -> mtkwl6ex.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
vms_vsf: Hyper-V Virtual Switch Extension Filter
ms_l1vhlwf: Nested Network Virtualization
vms_vsp: Hyper-V Virtual Switch Extension Protocol
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{C67A519A-5C1D-4523-91B7-F91E7C367FD4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{69A1970A-9753-44DC-9EA8-924CBC424716}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24215.1105.3082.1600_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{72E51F05-6EE8-46D3-844A-496446AF4456}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24215.1105.3082.1600_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0BE92A41-48F0-4EA5-9795-C7E1C27DBBD8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{85D2A575-9308-4488-B3D0-42E5E21F9BBB}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2DDA8291-5E87-4BF6-B3BA-E79017C05C31}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8BE654F3-AC24-487B-994B-782C686FD0A3}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-V2] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-NoScope] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{F900CBCF-E1BF-4A03-A42E-BCC75520B4A6}] => (Allow) C:\Program Files\HP\Sure Click\ApplicationSupport\chrome\4.4.24.3261\brchromium\134.0.6998.178\BrChrome.exe (Bromium UK Limited -> HP)
FirewallRules: [{1767B235-58BB-4358-BB8C-1BBFF8A424A1}] => (Allow) C:\Program Files\HP\Sure Click\4.4.24.3257\servers\manifests\chrome\brchromium\132.0.6834.210\BrChrome.exe (Bromium UK Limited -> HP)
FirewallRules: [{4AD3D27A-E5E2-46C4-9652-8F4F897725E3}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25072.1611.3570.1995_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2ED3CA2C-9227-4365-83FA-83A6CDE52C3D}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25072.1611.3570.1995_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{21091B11-34D7-4AC3-9EC0-BEECB45F2EBA}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\135.0.3179.98\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
22-04-2025 07:49:01 Windows Update
22-04-2025 07:49:03 Windows Update
24-04-2025 12:35:30 Grab_MSIExecute
24-04-2025 16:57:24 AdwCleaner_BeforeCleaning_24/04/2025_16:57:24
24-04-2025 17:41:56 AdwCleaner_BeforeCleaning_24/04/2025_17:41:55
27-04-2025 20:08:56 Windows Update
27-04-2025 20:09:03 Windows Update
28-04-2025 08:12:40 AdwCleaner_BeforeCleaning_28/04/2025_08:12:38
28-04-2025 08:48:05 AdwCleaner_BeforeCleaning_28/04/2025_08:48:03
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (04/28/2025 09:08:22 AM) (Source: Application) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/28/2025 08:17:55 AM) (Source: Application) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/28/2025 08:14:06 AM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.]
Error: (04/28/2025 07:59:24 AM) (Source: Application) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/24/2025 10:35:13 PM) (Source: Application) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/24/2025 10:31:18 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: HotKeyServiceUWP.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 00007FFB257108FD
Error: (04/24/2025 10:28:24 PM) (Source: Application) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/24/2025 05:46:51 PM) (Source: Application) (EventID: 0) (User: )
Description: Event-ID 0
System errors:
=============
Error: (04/28/2025 09:03:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby HP Comm Recover zlyhalo kvôli nasledujúcej chybe:
The system cannot find the file specified.
Error: (04/28/2025 09:03:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby l1vhlwf zlyhalo kvôli nasledujúcej chybe:
A hypervisor feature is not available to the user.
Error: (04/28/2025 09:03:00 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Modul WLAN Extensibility Module sa neočakávane zastavil.
Cesta k modulu: C:\WINDOWS\system32\mtkihvx.dll
Error: (04/28/2025 09:03:00 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Modul WLAN Extensibility Module sa neočakávane zastavil.
Cesta k modulu: C:\WINDOWS\system32\mtkihvx.dll
Error: (04/28/2025 09:02:59 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Microsoft Defender Antivirus Service bola ukončená s nasledujúcou chybou:
%%(2147943515 = A system shutdown is in progress.)
Error: (04/28/2025 09:02:59 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Device Association Service detected an endpoint discovery failure.
Error: (04/28/2025 09:02:59 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Device Association Service detected an endpoint discovery failure.
Error: (04/28/2025 09:02:59 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Device Association Service detected an endpoint discovery failure.
Windows Defender:
================
Date: 2025-04-23 22:02:29
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-17 11:55:03
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-16 16:13:23
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-15 20:05:20
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-14 11:32:33
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Event[0]
Date: 2025-04-28 07:55:29
Description:
Microsoft Defender Antivirus service seemed to be hung during shutdown.
Timout (seconds): 0
Component: UninitializeServiceWppTracing
Self-terminated: 0
Date: 2025-04-24 22:24:43
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.
Security intelligence Attempted: Current
Error Code: 0x80501102
Error description: An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support.
Security intelligence Version: 1.427.422.0;1.427.422.0
Engine Version: 1.1.25030.1
CodeIntegrity:
===============
Date: 2025-04-28 09:07:41
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.
Date: 2025-04-28 09:06:48
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Microsoft signing level requirements.
Date: 2025-04-28 09:05:48
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: HP V78 Ver. 01.09.00 01/14/2025
Motherboard: HP 8B5C
Processor: AMD Ryzen 3 7330U with Radeon Graphics
Percentage of memory in use: 85%
Total physical RAM: 7489.07 MB
Available physical RAM: 1086.85 MB
Total Virtual: 20801.07 MB
Available Virtual: 10807.27 MB
==================== Drives ================================
Drive c: (Windows ) (Fixed) (Total:237.37 GB) (Free:130.55 GB) (Model: KBG50ZNV256G KIOXIA) (Protected) NTFS
\\?\Volume{022fa154-9f13-416e-8c7c-4544d0c9e643}\ (Windows RE Tools) (Fixed) (Total:0.83 GB) (Free:0.21 GB) NTFS
\\?\Volume{34cd2a02-f7be-45a9-8085-daccd0bc3135}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.09 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: D06C7837)
Partition: GPT.
==================== End of Addition.txt =======================