VIRY.CZ

Zdravim, zrejme nejaky malware...? prevedli se mi skoro vsechny wrod docs do pdf.
Log frst
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 07-06-2025
Ran by Köket (administrator) on DESKTOP-MDT6U91 (LENOVO 20FR004PMS) (07-06-2025 21:27:28)
Running from C:\Users\Köket\OneDrive\Desktop\FRST64.exe
Loaded Profiles: Köket
Platform: Microsoft Windows 10 Pro Version 22H2 19045.5854 (X64) Language: Swedish (Sweden) -> English (United States)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(C:\Program Files\Bitdefender Agent\ProductAgentService.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\27.1.1.13\DiscoverySrv.exe
(C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\bdagent.exe
(C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe
(C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bduserhost.exe <2>
(C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe ->) (S.C. BITDEFENDER S.R.L. -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\wsccommunicator.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ->) (Synaptics Incorporated -> Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(C:\Program Files\WindowsApps\MSTeams_25094.310.3616.953_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.92\msedgewebview2.exe <26>
(C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2025.153.0_x64__2p2nqsd0c76g0\app\ChatGPT.exe ->) (Dexcom Inc. -> Dexcom Inc.) C:\Program Files (x86)\Dexcom\Uploader\Dexcom.Agent.Uploader.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxEM.exe
(explorer.exe ->) (50BDFD77-8903-4850-9FFE-6E8522F64D5B -> OpenAI) C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2025.153.0_x64__2p2nqsd0c76g0\app\ChatGPT.exe <5>
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(explorer.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnapp.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <11>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\25.091.0512.0001\Microsoft.SharePoint.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe <2>
(Grammarly, Inc. -> Grammarly) C:\Users\Köket\AppData\Local\Grammarly\DesktopIntegrations\Grammarly.Desktop.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_25094.310.3616.953_x64__8wekyb3d8bbwe\ms-teams.exe <2>
(Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(services.exe ->) () [File not signed] C:\Program Files (x86)\Dexcom\Updater\Dexcom.Agent.UpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (AnyDesk Software GmbH -> AnyDesk Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe <2>
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\redline\bdredline.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\safepay\bdservicehost.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe <3>
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnService.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Program Files\CONEXANT\SAII\CxUtilSvc.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
(services.exe ->) (Get Aura Inc -> AnchorFree Inc.) C:\Program Files\Bitdefender\Bitdefender VPN\UnifiedSDK.Service\UnifiedSDK.Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_c2ac023763d5d3ad\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_d4f47df9c2216d4d\LMS.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\SysWOW64\Lenovo\PowerMgr\EasyResume.exe
(services.exe ->) (Lenovo -> Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(services.exe ->) (Logitech Inc -> ) C:\Program Files (x86)\Logitech\LogiSyncStub\LogiSyncStub.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MsMpEng.exe
(services.exe ->) (Sierra Wireless, Inc -> Sierra Wireless, Inc.) C:\Windows\Sierra Wireless Inc\bin\SwiService.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2522.2.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Adobe Systems Incorporated -> ) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(svchost.exe ->) (Lenovo -> Lenovo) C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security App\bdagent.exe [1088224 2025-06-04] (Bitdefender SRL -> Bitdefender)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] (Samsung Electronics CO., LTD. -> )
HKLM\...\Run: [BdVpnApp] => C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnApp.exe [501424 2025-03-20] (Bitdefender SRL -> Bitdefender)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [126328160 2021-11-23] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [DexcomUploader] => C:\Program Files (x86)\Dexcom\Uploader\Dexcom.Agent.Uploader.exe [575216 2023-12-26] (Dexcom Inc. -> Dexcom Inc.)
HKU\S-1-5-21-1759685886-848360775-207772720-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4967240 2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1759685886-848360775-207772720-1001\...\Run: [MicrosoftEdgeAutoLaunch_B6362D3D1E2D51B3BDF317BAE5AD01E8] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [4141096 2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1759685886-848360775-207772720-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Köket\AppData\Local\Microsoft\Teams\Update.exe [2593968 2024-06-17] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-1759685886-848360775-207772720-1001\...\Run: [Microsoft.Lists] => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\Microsoft.SharePoint.exe [1004352 2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1759685886-848360775-207772720-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [41352088 2025-04-24] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1759685886-848360775-207772720-1001\...\Run: [Grammarly] => C:\Users\Köket\AppData\Local\Grammarly\DesktopIntegrations\Grammarly.Desktop.exe [272472 2025-06-05] (Grammarly, Inc. -> Grammarly)
HKLM\...\Windows x64\Print Processors\shj2mPC: C:\Windows\System32\spool\prtprocs\x64\shj2mpc.dll [91216 2022-01-24] (联想图像(天津)科技有限公司 -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\EPSON SX440 Series 64MonitorBE: C:\WINDOWS\system32\E_ILMHBE.DLL [120320 2011-04-20] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\shj2m Langmon: C:\WINDOWS\system32\shj2mlm.dll [70224 2022-01-24] (联想图像(天津)科技有限公司 -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\137.0.7151.69\Installer\chrmstp.exe [2025-06-06] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2024-10-08]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {85F7A81F-76A9-4706-8D77-2CCCFD88F9B7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2025-03-21] (Adobe Inc. -> Adobe Inc.)
Task: {27B06E57-94D2-4DCF-8147-8CE2C777E4C1} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\27.1.1.13\WatchDog.exe [1158440 2025-05-12] (Bitdefender SRL -> Bitdefender) -> C:\Program Files\Bitdefender Agent\27.1.1.13\repair
Task: {99004331-4D1C-4D7B-A6C8-326FA51CA646} - System32\Tasks\EPM Preload => C:\Program Files (x86)\HP\Easy Printer Manager\EPM2DotNetHandler.exe [1339256 2021-12-16] (HP Inc. -> )
Task: {F045DD90-F789-4EF1-A83B-31D66DA09031} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem138.0.7194.0{ADB5CDC1-6556-4508-8B6C-240B860D479A} => C:\Program Files (x86)\Google\GoogleUpdater\138.0.7194.0\updater.exe [7080032 2025-05-22] (Google LLC -> Google LLC)
Task: {E03A1412-1900-413B-8E6B-4CDD0F993169} - System32\Tasks\Lenovo Power Management Driver PnP Task => C:\Windows\System32\ibmpmsvc.exe [949632 2019-12-11] (Lenovo -> Lenovo.)
Task: {D7089E66-FE9E-4F1F-8BF9-10A3FA100C69} - System32\Tasks\Lenovo\Power Manager\Background monitor => C:\WINDOWS\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe [129368 2024-06-26] (Lenovo -> Lenovo)
Task: {02739049-40A4-463D-AAB3-0A871F1CE921} - System32\Tasks\Lenovo\Power Manager\Uninstall task => C:\WINDOWS\SysWOW64\PowerMgrInst.exe [67424 2024-06-26] (Lenovo -> )
Task: {7667728B-EAB3-4502-83D6-49BADE6F6234} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28955376 2025-05-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {AE4E5D96-FBD9-4EED-8BDA-74CB2C20F948} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [68312 2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {7ECA976B-1C31-449D-AC9B-9B16040D068E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28955376 2025-05-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {C585DD47-F736-44DC-8652-53257D60D002} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309960 2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {FB7D9425-ADD5-4738-B84F-60D8541A7FC1} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309960 2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {73974384-6679-47AE-9D46-2FBADDB49C59} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [225992 2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {A503D9FD-7AEB-4533-97F7-422FB5132300} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4548528 2025-05-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {50BA8B71-9837-43C6-A13D-B57EF9F1B436} - System32\Tasks\Microsoft\Office\Office Startup Boost => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309960 2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {58994E70-E8D7-493E-BD25-BA9884F41788} - System32\Tasks\Microsoft\Office\Office Startup Boost Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309960 2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {97652850-4FAB-41E8-9987-FE5D15918F8B} - System32\Tasks\Microsoft\Windows\Conexant\AFA => C:\Program Files\CONEXANT\cAudioFilterAgent\SACpl.exe [1823232 2016-07-05] (Conexant Systems, Inc.) [File not signed] -> C:\Program Files\CONEXANT\cAudioFilterAgent\/uid:cAudioFilterAgent /delay:45
Task: {FF640DCA-6D0F-4485-AB02-1D0432D1FD80} - System32\Tasks\Microsoft\Windows\Conexant\SA2 => C:\Program Files\CONEXANT\SAII\SACpl.exe [1832280 2017-06-07] (Conexant Systems, Inc. -> Conexant Systems, Inc.) -> C:\Program Files\CONEXANT\SAII\/c /delay:45
Task: {897C32A1-3FE5-43C0-944C-75EC6EF821D1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MpCmdRun.exe [1753416 2025-05-22] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {41DC117B-B6CC-4118-9D35-0C23CCE8FEA2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MpCmdRun.exe [1753416 2025-05-22] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AE89E63C-DA5F-43B9-9B3A-3D8C1A0E22DD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MpCmdRun.exe [1753416 2025-05-22] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {90B2A7AF-1F24-42F7-837A-2C9CDDFB1D64} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MpCmdRun.exe [1753416 2025-05-22] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {96E5E14D-49C4-44AC-859B-DB26371A4C49} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34880 2025-05-30] (Mozilla Corporation -> Mozilla Foundation)
Task: {67E65830-C8AF-40CD-AD1D-2405E9575E19} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223808 2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {DB088606-C604-4DC8-993E-8AC2A634D431} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1759685886-848360775-207772720-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223808 2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {FABBA6AA-82D5-4462-9CC2-90BCA7467C29} - System32\Tasks\OneDrive Startup Task-S-1-5-21-1759685886-848360775-207772720-1001 => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\OneDriveLauncher.exe [684880 2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {BB13E5B2-AD0F-4F64-B257-B3B49B1FA6CA} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-1759685886-848360775-207772720-1001 => C:\Users\Köket\AppData\Roaming\Zoom\bin\Zoom.exe [441144 2025-05-27] (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 127.0.0.1 agent.mydiabetesdata.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8f87ee97-3ceb-44cf-a972-525533679e71}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{8f87ee97-3ceb-44cf-a972-525533679e71}: [DhcpDomain] Home
Tcpip\..\Interfaces\{8f87ee97-3ceb-44cf-a972-525533679e71}\D457A6F42394E6475627E65647F523E24374F5645453033363: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{8f87ee97-3ceb-44cf-a972-525533679e71}\D6F647F6025663370263431353: [DhcpNameServer] 192.168.43.190
Tcpip\..\Interfaces\{8f87ee97-3ceb-44cf-a972-525533679e71}\F423D294E6475627E65647D2134343D2537484A7: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{b9f87465-9259-47e2-9cd0-c6ba1c267745}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{b9f87465-9259-47e2-9cd0-c6ba1c267745}: [DhcpDomain] lan
Tcpip\..\Interfaces\{b9f87465-9259-47e2-9cd0-c6ba1c267745}\7416C6168797023523030264540264030313: [DhcpNameServer] 192.168.115.133

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Köket\AppData\Local\Microsoft\Edge\User Data\Default [2025-06-07]
Edge Extension: (Grammarly: AI Writing and Grammar Checker App) - C:\Users\Köket\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cnlefmmeadmemmdciolhbnfeacpdfbkd [2025-06-04]
Edge Extension: (BEW lite) - C:\Users\Köket\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fhbohimaelbohpjbbldcngcnapndodjp [2025-05-29]
Edge Extension: (Google Docs Offline) - C:\Users\Köket\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-06-07]
Edge Extension: (Edge relevant text changes) - C:\Users\Köket\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-28]
Edge Extension: (Speed Dial 2 New tab) - C:\Users\Köket\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ohpagamjnemfmmgildfkjgbnabhojcdj [2024-12-11]
Edge Profile: C:\Users\Köket\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2025-06-04]
Edge Notifications: Profile 1 -> hxxps://eu.my.glooko.com
Edge Extension: (Bitdefender Anti-tracker) - C:\Users\Köket\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\dbconhplchnbippmjabbcedokimacfjl [2024-07-24]
Edge Extension: (Google Docs Offline) - C:\Users\Köket\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-05-01]
Edge Extension: (Edge relevant text changes) - C:\Users\Köket\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-28]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [dbconhplchnbippmjabbcedokimacfjl]

FireFox:
========
FF DefaultProfile: 9ira9l6f.default
FF ProfilePath: C:\Users\Köket\AppData\Roaming\Mozilla\Firefox\Profiles\9ira9l6f.default [2025-01-23]
FF ProfilePath: C:\Users\Köket\AppData\Roaming\Mozilla\Firefox\Profiles\zlwlvyza.default-release [2025-06-07]
FF Extension: (Grammarly: AI Writing and Grammar Checker App) - C:\Users\Köket\AppData\Roaming\Mozilla\Firefox\Profiles\zlwlvyza.default-release\Extensions\87677a2c52b84ad3a151a4a72f5bd3c4@jetpack.xpi [2025-05-14]
FF Extension: (Language: Svenska (Swedish)) - C:\Users\Köket\AppData\Roaming\Mozilla\Firefox\Profiles\zlwlvyza.default-release\Extensions\langpack-sv-SE@firefox.mozilla.org.xpi [2025-06-02]
FF Extension: (MetaMask) - C:\Users\Köket\AppData\Roaming\Mozilla\Firefox\Profiles\zlwlvyza.default-release\Extensions\webextension@metamask.io.xpi [2025-05-22]
FF Extension: (BNB Chain Wallet) - C:\Users\Köket\AppData\Roaming\Mozilla\Firefox\Profiles\zlwlvyza.default-release\Extensions\{0a395005-c941-4030-83c9-018ee43e3414}.xpi [2025-01-26]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\Köket\AppData\Roaming\Mozilla\Firefox\Profiles\zlwlvyza.default-release\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2025-05-15]
FF HKLM\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi => not found
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-04-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-1759685886-848360775-207772720-1001: SkypeForBusinessPlugin-16.2 -> C:\Users\Köket\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-1759685886-848360775-207772720-1001: SkypeForBusinessPlugin64-16.2 -> C:\Users\Köket\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi-x64.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\bd_js_config.js [2025-01-23] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\bd_config.cfg [2025-01-23] <==== ATTENTION

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Köket\AppData\Local\Google\Chrome\User Data\Default [2025-06-07]
CHR Notifications: Default -> hxxps://meet.google.com; hxxps://web.whatsapp.com
CHR Extension: (Authenticator) - C:\Users\Köket\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhghoamapcdpbohphigoooaddinpkbai [2024-10-09]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Köket\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-06-04]
CHR Extension: (BEW lite) - C:\Users\Köket\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhbohimaelbohpjbbldcngcnapndodjp [2025-05-29]
CHR Extension: (Google Dokument Offline) - C:\Users\Köket\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-06-01]
CHR Extension: (Windscribe - Free Proxy and Ad Blocker) - C:\Users\Köket\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnmpcagpplmpfojmgmnngilcnanddlhb [2025-02-19]
CHR Extension: (Ad Blocker App) - C:\Users\Köket\AppData\Local\Google\Chrome\User Data\Default\Extensions\iamhhblhmpldjchjecmapgoikpjmmfoe [2024-05-07]
CHR Extension: (Speed Dial 3™(APP)) - C:\Users\Köket\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibfhiehdjpogpbdcicjnphklppinghjj [2022-04-22]
CHR Extension: (Speed Dial 2 New tab) - C:\Users\Köket\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpfpebmajhhopeonhlcgidhclcccjcik [2025-03-07]
CHR Extension: (Grammarly: AI Writing and Grammar Checker App) - C:\Users\Köket\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2025-06-04]
CHR Extension: (Betalning via Chrome Web Store) - C:\Users\Köket\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-12-22]
CHR Profile: C:\Users\Köket\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-06-22]
CHR Profile: C:\Users\Köket\AppData\Local\Google\Chrome\User Data\System Profile [2023-08-23]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKU\S-1-5-21-1759685886-848360775-207772720-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2025-03-21] (Adobe Inc. -> Adobe Inc.)
R3 AfVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\UnifiedSDK.Service\UnifiedSDK.Service.exe [69128688 2024-06-14] (Get Aura Inc -> AnchorFree Inc.)
R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [5631808 2025-04-24] (AnyDesk Software GmbH -> AnyDesk Software GmbH)
R2 BDAppSrv; C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe [851640 2025-03-19] (Bitdefender SRL -> Bitdefender)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [851640 2025-06-04] (Bitdefender SRL -> Bitdefender)
R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [851640 2025-06-04] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2946088 2023-08-31] (Bitdefender SRL -> Bitdefender)
R2 bdredline_agent; C:\Program Files\Bitdefender Agent\redline\bdredline.exe [2577184 2023-07-20] (Bitdefender SRL -> Bitdefender)
R2 BDSafepaySrv; C:\Program Files\Bitdefender\Bitdefender Security App\Safepay\bdservicehost.exe [851640 2025-06-04] (Bitdefender SRL -> Bitdefender)
R2 bdvpnservice; C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnservice.exe [516928 2025-03-20] (Bitdefender SRL -> Bitdefender)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13724376 2025-05-27] (Microsoft Corporation -> Microsoft Corporation)
R2 Dexcom Agent Update Service; C:\Program Files (x86)\Dexcom\Updater\Dexcom.Agent.UpdateService.exe [7680 2023-12-26] () [File not signed]
R2 Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [189464 2020-06-01] (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncHelper.exe [3622208 2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
R2 Lenovo Instant On; C:\WINDOWS\SysWOW64\Lenovo\PowerMgr\EasyResume.exe [2352392 2024-06-26] (Lenovo -> Lenovo Group Limited)
R2 LogiSyncStub; C:\Program Files (x86)\Logitech\LogiSyncStub\LogiSyncStub.exe [2257984 2022-02-08] (Logitech Inc -> )
S2 LPlatSvc; C:\WINDOWS\System32\LPlatSvc.exe [892288 2019-12-11] (Lenovo -> Lenovo.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9445832 2025-05-28] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-05-15] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MpDefenderCoreService.exe [2050904 2025-05-22] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.091.0512.0001\OneDriveUpdaterService.exe [3873608 2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [760160 2025-05-12] (Bitdefender SRL -> Bitdefender)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [559304 2025-04-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SwiService; C:\WINDOWS\Sierra Wireless Inc\bin\SwiService.exe [1801720 2020-08-18] (Sierra Wireless, Inc -> Sierra Wireless, Inc.)
S2 SynaHlp; C:\WINDOWS\System32\SynaHelperService.exe [254920 2022-01-18] (Synaptics Incorporated -> Synaptics Incorporated.)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [295872 2025-06-04] (Bitdefender SRL -> Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [851640 2025-06-04] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\NisSrv.exe [4525976 2025-05-22] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MsMpEng.exe [278304 2025-05-22] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [7786032 2025-05-16] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender S.R.L. Bucharest, ROMANIA)
R2 BdDci4; C:\WINDOWS\system32\DRIVERS\bddci4.sys [971312 2025-02-19] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [24568 2023-11-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
S3 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [49200 2023-08-21] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender SRL)
S3 bduefiscan; C:\WINDOWS\system32\DRIVERS\bduefiscan.sys [42432 2024-09-05] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R1 bdvpn_netfilter; C:\WINDOWS\System32\drivers\bdvpn_netfilter.sys [94600 2021-09-16] (Pango Inc. -> Pango Inc)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 dlcdcncm; C:\WINDOWS\System32\drivers\dlcdcncm660.sys [153248 2022-08-30] (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.)
R1 Gemma; C:\WINDOWS\System32\DRIVERS\gemma.sys [1791064 2025-02-06] (Microsoft Windows Hardware Compatibility Publisher -> BitDefender S.R.L. Bucharest, ROMANIA)
R2 Ignisv2; C:\WINDOWS\system32\DRIVERS\ignisv2.sys [848472 2025-02-26] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [331168 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [234072 2025-05-28] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-05-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [242752 2025-05-15] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R0 PMDRVS; C:\WINDOWS\System32\drivers\pmdrvs.sys [38160 2019-12-11] (Lenovo -> Lenovo.)
R2 SSPORT; C:\WINDOWS\system32\Drivers\SSPORT.sys [14224 2021-04-01] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 swmbbser01; C:\WINDOWS\system32\DRIVERS\swmbbser01.sys [297176 2020-08-18] (Sierra Wireless, Inc -> Sierra Wireless Incorporated)
R2 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [629184 2023-11-15] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S3 usbscan; C:\WINDOWS\System32\drivers\usbscan.sys [49664 2023-10-10] (Microsoft Corporation) [File not signed]
R0 vlflt; C:\WINDOWS\System32\DRIVERS\vlflt.sys [1438768 2025-05-16] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [19984 2025-05-22] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [606568 2025-05-22] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100736 2025-05-22] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-06-07 21:27 - 2025-06-07 21:29 - 000036797 _____ C:\Users\Köket\OneDrive\Desktop\FRST.txt
2025-06-07 21:13 - 2025-06-07 21:13 - 002406912 _____ (Farbar) C:\Users\Köket\OneDrive\Desktop\FRST64.exe
2025-06-01 18:06 - 2025-06-01 18:06 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-06-01 17:57 - 2025-06-01 18:07 - 002952556 _____ C:\WINDOWS\Minidump\060125-24187-01.dmp
2025-06-01 17:57 - 2025-06-01 17:57 - 1550019288 _____ C:\WINDOWS\MEMORY.DMP
2025-05-30 07:44 - 2025-06-04 14:27 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-05-29 18:00 - 2025-05-31 17:00 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2025-05-29 17:47 - 2025-05-29 17:51 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2025-05-27 20:55 - 2025-05-27 20:55 - 000000000 ___HD C:\OneDriveTemp
2025-05-27 09:43 - 2025-05-27 09:43 - 000000000 ____D C:\Users\Köket\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2025-05-22 17:30 - 2025-05-22 17:30 - 000115792 _____ C:\ProgramData\agent.update.1747927842.bdinstall.v2.bin
2025-05-15 19:48 - 2025-06-07 21:28 - 000000000 ____D C:\Users\Köket\AppData\Local\Malwarebytes
2025-05-15 19:47 - 2025-05-15 19:47 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2025-05-15 19:47 - 2025-05-15 19:47 - 000000000 ____D C:\ProgramData\Malwarebytes
2025-05-15 19:47 - 2025-05-15 19:47 - 000000000 ____D C:\Program Files\Malwarebytes
2025-05-14 18:25 - 2025-05-14 18:25 - 000022680 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-05-14 18:23 - 2025-05-14 18:23 - 000022680 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-05-14 18:06 - 2025-05-14 18:06 - 000000000 ___HD C:\$WinREAgent

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-06-07 21:28 - 2022-05-11 19:15 - 000000000 ____D C:\FRST
2025-06-07 21:26 - 2024-10-17 10:20 - 000000000 __SHD C:\Users\Köket\OneDriveCloudTemp
2025-06-07 21:21 - 2023-03-17 11:29 - 000000000 ____D C:\ProgramData\AnyDesk
2025-06-07 21:21 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-06-07 21:19 - 2022-09-05 12:00 - 000000000 ____D C:\Users\Köket\OneDrive\Documents\Skatteverket
2025-06-07 21:19 - 2022-04-23 14:51 - 000000000 ____D C:\Users\Köket\AppData\Roaming\Microsoft\Excel
2025-06-07 21:18 - 2022-04-12 20:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-06-07 21:04 - 2021-11-12 19:15 - 000000000 ___RD C:\Users\Köket\OneDrive
2025-06-07 21:02 - 2022-09-08 15:12 - 000000000 ___RD C:\Users\Köket\care.cz
2025-06-07 20:34 - 2022-04-18 14:43 - 000000000 ____D C:\Users\Köket\AppData\Roaming\Microsoft\Word
2025-06-07 20:30 - 2021-11-12 19:13 - 000000000 ____D C:\Users\Köket\AppData\Local\Packages
2025-06-07 20:08 - 2021-11-16 17:52 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-06-07 19:07 - 2022-11-03 15:26 - 000000000 ____D C:\Users\Köket\OneDrive\Documents\Crowdestor
2025-06-07 18:13 - 2021-11-16 18:01 - 000000000 ____D C:\Users\Köket\AppData\Local\D3DSCache
2025-06-07 15:50 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-06-07 15:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-06-06 20:28 - 2021-12-22 17:33 - 000002243 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-06-06 13:46 - 2025-01-23 08:13 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-06-06 10:35 - 2024-09-08 13:22 - 000001423 _____ C:\Users\Köket\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Grammarly.lnk
2025-06-06 10:35 - 2024-09-08 13:22 - 000001421 _____ C:\Users\Köket\OneDrive\Desktop\Grammarly.lnk
2025-06-06 10:35 - 2024-09-08 13:22 - 000000000 ____D C:\Users\Köket\AppData\Local\Grammarly
2025-06-05 08:10 - 2021-11-16 17:53 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-06-05 07:54 - 2023-03-14 13:35 - 000000000 ____D C:\Users\Köket\AppData\Roaming\AnyDesk
2025-06-05 07:54 - 2022-04-17 11:04 - 000000000 ____D C:\Users\Köket\AppData\Roaming\Microsoft\Teams
2025-06-05 07:53 - 2021-11-12 19:13 - 000000000 __SHD C:\Users\Köket\IntelGraphicsProfiles
2025-06-04 21:44 - 2025-01-29 17:08 - 000003540 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1759685886-848360775-207772720-1001
2025-06-04 21:44 - 2022-04-20 14:22 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-06-04 21:44 - 2022-04-18 10:14 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2025-06-04 21:44 - 2022-04-18 10:14 - 000002132 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-06-04 21:44 - 2021-12-22 17:27 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1759685886-848360775-207772720-1001
2025-06-04 14:35 - 2021-11-16 18:01 - 001690502 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-06-04 14:35 - 2019-12-07 16:43 - 000714812 _____ C:\WINDOWS\system32\perfh01D.dat
2025-06-04 14:35 - 2019-12-07 16:43 - 000145728 _____ C:\WINDOWS\system32\perfc01D.dat
2025-06-04 14:35 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2025-06-04 14:27 - 2025-01-23 08:13 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-06-04 14:27 - 2021-11-16 17:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-06-04 14:27 - 2021-11-16 17:52 - 000008192 ___SH C:\DumpStack.log.tmp
2025-06-04 14:27 - 2021-11-12 19:12 - 000000000 ____D C:\Intel
2025-06-04 14:27 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2025-06-04 14:26 - 2021-11-16 17:55 - 000000000 ____D C:\Users\Köket
2025-06-04 14:26 - 2019-12-07 11:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2025-06-04 14:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2025-06-04 14:15 - 2022-04-17 10:40 - 000000000 ____D C:\Program Files (x86)\HP
2025-06-02 08:02 - 2022-04-17 14:16 - 000000000 ____D C:\Users\Köket\OneDrive\Documents\CARE Czech
2025-06-02 07:49 - 2025-01-23 08:13 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-06-01 18:07 - 2023-11-21 18:05 - 000000000 ____D C:\WINDOWS\Minidump
2025-06-01 17:58 - 2022-04-18 10:09 - 000000000 ____D C:\Program Files\Microsoft Office
2025-06-01 17:58 - 2019-12-07 11:03 - 000131072 _____ C:\WINDOWS\system32\config\ELAM
2025-05-31 17:00 - 2022-05-26 18:02 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2025-05-30 15:33 - 2022-05-04 13:36 - 000000000 ____D C:\Users\Köket\AppData\Local\CrashDumps
2025-05-29 21:14 - 2022-05-26 17:57 - 000000000 ____D C:\Users\Köket\AppData\Local\Adobe
2025-05-29 17:59 - 2022-05-26 18:01 - 000000000 ____D C:\Program Files\Common Files\Adobe
2025-05-28 08:55 - 2022-04-17 11:16 - 000000000 ____D C:\Users\Köket\AppData\Roaming\Zoom
2025-05-27 15:13 - 2022-04-19 14:21 - 000000000 ____D C:\Users\Köket\AppData\Roaming\Microsoft\PowerPoint
2025-05-27 09:43 - 2024-10-22 18:01 - 000004244 _____ C:\WINDOWS\system32\Tasks\ZoomUpdateTaskUser-S-1-5-21-1759685886-848360775-207772720-1001
2025-05-27 09:43 - 2024-07-31 09:50 - 000001957 _____ C:\Users\Köket\OneDrive\Desktop\Zoom Workplace.lnk
2025-05-22 17:30 - 2022-04-17 09:51 - 000003842 _____ C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2025-05-22 17:30 - 2022-04-17 09:49 - 000000000 ____D C:\Program Files\Bitdefender Agent
2025-05-22 11:53 - 2021-11-13 05:49 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-05-20 11:36 - 2023-07-10 22:12 - 000000000 ____D C:\Users\Köket\AppData\Roaming\BankID
2025-05-19 20:39 - 2021-12-22 17:59 - 000003678 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-05-19 20:39 - 2021-12-22 17:59 - 000003582 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d7db02d471af08
2025-05-16 12:25 - 2024-09-19 22:42 - 001438768 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\vlflt.sys
2025-05-16 12:25 - 2022-04-17 09:52 - 007786032 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys
2025-05-15 19:47 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-05-15 00:45 - 2021-11-16 17:52 - 000440744 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-05-15 00:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-05-15 00:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-05-15 00:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-05-15 00:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-05-15 00:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-05-15 00:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-05-15 00:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-05-15 00:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-05-15 00:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-05-15 00:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-05-15 00:43 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2025-05-15 00:43 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-05-15 00:43 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-05-15 00:43 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-05-15 00:43 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-05-15 00:43 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-05-15 00:43 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2025-05-14 18:42 - 2021-11-12 19:40 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-05-14 18:38 - 2021-11-12 19:40 - 214836568 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-05-14 18:30 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-05-14 18:23 - 2021-11-16 17:55 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-05-14 16:43 - 2025-02-19 08:49 - 000000000 ____D C:\ProgramData\BDLogging

==================== Files in the root of some directories ========

2022-05-15 17:15 - 2022-05-15 17:15 - 000000017 _____ () C:\Users\Köket\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

dditional scan result of Farbar Recovery Scan Tool (x64) Version: 07-06-2025
Ran by Köket (07-06-2025 21:31:50)
Running from C:\Users\Köket\OneDrive\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.5854 (X64) (2021-11-16 15:59:36)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administratör (S-1-5-21-1759685886-848360775-207772720-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1759685886-848360775-207772720-503 - Limited - Disabled)
Gäst (S-1-5-21-1759685886-848360775-207772720-501 - Limited - Disabled)
Köket (S-1-5-21-1759685886-848360775-207772720-1001 - Administrator - Enabled) => C:\Users\Köket
WDAGUtilityAccount (S-1-5-21-1759685886-848360775-207772720-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Bitdefender Antivirus (Enabled - Up to date) {0F59B032-EA77-E3A8-2382-74A4346E5522}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Disabled) {37623117-A018-E2F0-08DD-DD91CABD1259}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1033-1033-7760-BC15014EA700}) (Version: 25.001.20474 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601110}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 9.0.6 - AnyDesk Software GmbH)
BankID Security Application (HKLM-x32\...\{77B5BCDC-5496-48DA-8B16-5EE2AF08CA31}) (Version: 7.14.0.16 - Finansiell ID-Teknik BID AB)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 27.1.1.13 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 26.0.14.65 - Bitdefender)
Bitdefender VPN (HKLM\...\Bitdefender VPN) (Version: 27.2.3.8 - Bitdefender)
Common Desktop Agent (HKLM\...\{031A0E14-0413-4C97-9772-2639B782F46F}) (Version: 1.62.0 - OEM) Hidden
Dexcom Uploader 4.5.1 (HKLM-x32\...\{E8B23B33-14BF-42FD-9B48-353CB1BFE656}) (Version: 4.5.1 - Dexcom, Inc.)
Dolby Audio X2 Windows API SDK (HKLM\...\{FA0735B6-9E18-437A-A1CD-9152650FC52B}) (Version: 0.8.8.90 - Dolby Laboratories, Inc.) Hidden
Dolby Audio X2 Windows APP (HKLM\...\{9806D15D-FCE9-4F5E-9934-97DD7B546195}) (Version: 0.8.5.74 - Dolby Laboratories, Inc.)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON SX440 Series Printer Uninstall (HKLM\...\EPSON SX440 Series) (Version: - SEIKO EPSON Corporation)
Glooko Uploader version 3.19.0_BuildR3t02 (HKLM\...\{560BABF3-65FD-4102-9669-5ECC2720EE0C}_is1) (Version: 3.19.0_BuildR3t02 - Glooko)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 137.0.7151.69 - Google LLC)
Grammarly for Windows (HKU\S-1-5-21-1759685886-848360775-207772720-1001\...\Grammarly Desktop Integrations) (Version: 1.2.165.1674 - Grammarly)
HP Easy Printer Manager (HKLM-x32\...\HP Easy Printer Manager) (Version: 2.0.1.65 - HP Inc.)
Installation av Handelsbankens kortläsare (HKLM-x32\...\{79FDF571-BBC9-4E6C-8297-91CCDC7B7023}) (Version: 1.01.0000 - Todos Data System AB)
Malwarebytes version 5.3.1.188 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.3.1.188 - Malwarebytes)
Microsoft 365 Apps for business - en-us (HKLM\...\O365BusinessRetail - en-us) (Version: 16.0.18827.20128 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 137.0.3296.62 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 136.0.3240.92 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2021 - en-us (HKLM\...\HomeStudent2021Retail - en-us) (Version: 16.0.18827.20128 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 25.091.0512.0001 - Microsoft Corporation)
Microsoft Teams classic (HKU\S-1-5-21-1759685886-848360775-207772720-1001\...\Teams) (Version: 1.7.00.15969 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.08601 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.34.31938 (HKLM-x32\...\{4f84f2dc-3f70-433a-8f50-8293e0089b0f}) (Version: 14.34.31938.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.34.31938 (HKLM-x32\...\{080D8397-60F4-44B3-BB95-FBB950CB0B4E}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.34.31938 (HKLM-x32\...\{8DE5B0D4-A6D8-4F72-B8EF-28776A2EE5D5}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 en-GB) (HKLM\...\Mozilla Firefox 139.0.1 (x64 en-GB)) (Version: 139.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 134.0.2 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18827.20102 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18827.20128 - Microsoft Corporation) Hidden
RoomSketcher (HKLM-x32\...\RoomSketcher 1.0) (Version: 1.0 - RoomSketcher)
Samsung Scan Process Machine (HKLM-x32\...\Samsung Scan Process Machine) (Version: 1.03.05.28 - Samsung Electronics Co., Ltd.) Hidden
Sierra Wireless Mobile Broadband Driver Package (HKLM\...\SWILenovoDrvInstaller) (Version: 7.77.5094.0103 - Sierra Wireless, Inc.)
Skype Meetings App (HKLM-x32\...\{BC1D9E47-8927-4AA1-A891-7763BC2475B7}) (Version: 16.2.0.511 - Microsoft Corporation)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.32771 - Microsoft Corporation)
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{0746492E-47B6-4251-940C-44462DFD74BB}) (Version: 2.55.0.0 - Microsoft Corporation)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM\...\{76A22428-2400-4521-96AF-7AC4A6174CA5}) (Version: 1.25.0.0 - Microsoft Corporation) Hidden
Windows datorhälsokontroll (HKLM\...\{816A4F4F-F8C5-4043-A90E-044F32394C1D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Zoom Workplace (HKU\S-1-5-21-1759685886-848360775-207772720-1001\...\ZoomUMX) (Version: 6.4.7 (64367) - Zoom Communications, Inc.)

Chrome apps:
============
Office (HKU\S-1-5-21-1759685886-848360775-207772720-1001\...\545fc07922eb9d9a90f7c8c912219f72) (Version: 1.0 - Google\Chrome)
Office (HKU\S-1-5-21-1759685886-848360775-207772720-1001\...\d68985bff3d8ed5af0a8160d308881e3) (Version: 1.0 - Google\Chrome)

Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC [2025-05-29] ()
ChatGPT -> C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2025.153.0_x64__2p2nqsd0c76g0 [2025-06-07] (OpenAI) [Startup Task]
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_2024.3.211.0_neutral__6rarf9sa4v8jt [2024-03-26] (Disney)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.27.1140.0_x64__rz1tebttyb220 [2025-05-15] (Dolby Laboratories)
Intel® Graphics Command Center -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-03-15] (INTEL CORP) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-11-14] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-11-14] (Microsoft Corporation) [MS Ad]
Microsoft Edge Game Assist -> C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.3336.0_x64__8wekyb3d8bbwe [2025-05-31] (Microsoft Corporation)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2025-06-01] ()
Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2025-01-14] (Microsoft Corporation)
Reader Notification Client -> C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2025-05-29] (Adobe Systems Incorporated)
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.150.3125.0_x64__kzf8qxf38zg5c [2025-05-06] (Skype)
Spotify - Music and Podcasts -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0 [2025-06-07] (Spotify AB) [Startup Task]
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2522.2.0_x64__cv1g1gvanyjgm [2025-06-07] (WhatsApp Inc.) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1759685886-848360775-207772720-1001_Classes\CLSID\{04271989-C4D2-FF7C-C5A4-97E99757104F} -> [care.cz] => C:\Users\Köket\care.cz [2022-09-08 15:12]
CustomCLSID: HKU\S-1-5-21-1759685886-848360775-207772720-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-1759685886-848360775-207772720-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-1759685886-848360775-207772720-1001_Classes\CLSID\{3E3AD4BD-346A-460A-80E8-90699B75C00B}\InprocServer32 -> C:\Users\Köket\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\GatewayActiveX-x64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1759685886-848360775-207772720-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\Köket\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1759685886-848360775-207772720-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\Köket\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.25.08601\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1759685886-848360775-207772720-1001_Classes\CLSID\{FE2EC208-BECF-4E83-8BF4-E35DBA4EB6A1}\localserver32 -> C:\Users\Köket\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\GatewayVersion-x64.exe (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-05-28] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.091.0512.0001\FileSyncShell64.dll [2025-06-04] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-05-28] (Malwarebytes Inc -> Malwarebytes)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Köket\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-appar\Office.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ocdlmjhbenodhlknglojajgokahchlkk
ShortcutWithArgument: C:\Users\Köket\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Office.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ocdlmjhbenodhlknglojajgokahchlkk
ShortcutWithArgument: C:\Users\Köket\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\188f5ec9d11ded56\Profile 1 - Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory="Profile 1"

==================== Loaded Modules (Whitelisted) =============


==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO: Bitdefender Anti-tracker -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security App\bdtrackerstbie.dll [2025-06-04] (Bitdefender SRL -> Bitdefender)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Bitdefender Anti-tracker -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security App\antispam32\bdtrackerstbie.dll [2025-06-04] (Bitdefender SRL -> Bitdefender)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-05-29] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-1759685886-848360775-207772720-1001\...\sharepoint.com -> hxxps://carecz-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-09-29 15:46 - 2024-04-20 13:19 - 000000040 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 agent.mydiabetesdata.com

2023-03-24 15:51 - 2024-05-20 13:00 - 000000445 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1759685886-848360775-207772720-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Köket\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\1881.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Intel(R) Ethernet Connection I219-LM -> e1d68x64.sys
Mobilnät 9: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät 14: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät 10: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Wi-Fi: Intel(R) Dual Band Wireless-AC 8260 -> Netwtw06.sys
Mobilnät 5: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät 13: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät 3: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät 6: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät 16: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät 2: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Bluetooth-nätverksanslutning: Bluetooth Device (Personal Area Network) -> bthpan.sys
Mobilnät 17: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät 11: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät 7: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät 8: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät 12: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät 15: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys
Mobilnät 4: Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A -> cxwmbclass.sys

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{2E951604-05BA-4E76-BE0E-7CA826B68A5D}] => (Allow) C:\Program Files (x86)\HP\Easy Printer Manager\EasyPrinterManagerV2.exe (HP Inc. -> HP)
FirewallRules: [{DE33CEB3-8F7E-4812-B0AD-E096D2125024}] => (Allow) C:\Program Files (x86)\HP\Easy Printer Manager\OrderSupplies.exe (HP Inc. -> HP)
FirewallRules: [{622CF706-F51D-45CC-9B22-31EB679BE27F}] => (Allow) C:\Program Files (x86)\HP\Easy Printer Manager\EPM2AlertList.exe (HP Inc. -> HP)
FirewallRules: [{98C0FED4-510F-42C1-9810-A4BDF01A9C47}] => (Allow) C:\Program Files (x86)\HP\Easy Printer Manager\EPM2Migrator.exe (HP Inc. -> )
FirewallRules: [{0C5B2F98-1709-40D1-98B6-915FD6106AEA}] => (Allow) C:\Program Files (x86)\HP\Easy Printer Manager\CDArecovery.exe (HP Inc. -> )
FirewallRules: [{F1C77819-A224-47D5-A45D-21FFD7FFC2C9}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{DAFEF8BF-0B7E-4898-A127-1D56680078AD}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{E10ACDB8-374F-4EC7-BD2C-150208D59872}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{058C0D78-DF16-4F74-98E4-6A2BF179864B}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{21BE82E0-6794-459F-9F98-B8720D18E70C}] => (Allow) C:\Users\Köket\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [TCP Query User{732E0991-DD93-49B7-904B-080F9131AA02}C:\users\köket\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\köket\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{DF14ACE9-F8DA-4F4B-A584-643C62158EA0}C:\users\köket\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\köket\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4F00AC29-913D-4E58-A8B1-1AC260076BC6}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{248B6E41-BFA0-4F46-9E3C-D26ECC84CF3C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{794A109B-0E02-4D4F-90C5-0A33454D8CFC}] => (Allow) C:\Users\Köket\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [{A90D9E08-7572-4C0F-A0A5-9AF131C81043}] => (Allow) C:\Users\Köket\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{70E5A5C6-82A1-4072-9C3C-74BE3DA19C04}] => (Allow) C:\Users\Köket\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [TCP Query User{58E47694-1E3B-4A62-8592-EE8425E732EF}C:\users\köket\downloads\anydesk.exe] => (Allow) C:\users\köket\downloads\anydesk.exe => No File
FirewallRules: [UDP Query User{F9D6BF12-4CF3-49BF-BF0E-D71F50C531DF}C:\users\köket\downloads\anydesk.exe] => (Allow) C:\users\köket\downloads\anydesk.exe => No File
FirewallRules: [TCP Query User{03A936E4-6BE7-440E-B0D7-E24A50D61C5C}C:\users\köket\downloads\anydesk (1).exe] => (Allow) C:\users\köket\downloads\anydesk (1).exe => No File
FirewallRules: [UDP Query User{9D828637-0457-4BFD-ABDC-067EA554D8FE}C:\users\köket\downloads\anydesk (1).exe] => (Allow) C:\users\köket\downloads\anydesk (1).exe => No File
FirewallRules: [TCP Query User{A8A222D9-6AEE-4587-AC30-41BFBFB07D23}C:\users\köket\downloads\anydesk (3).exe] => (Allow) C:\users\köket\downloads\anydesk (3).exe => No File
FirewallRules: [UDP Query User{9E8FEA1F-ABBD-4B80-86E0-B32F3979E713}C:\users\köket\downloads\anydesk (3).exe] => (Allow) C:\users\köket\downloads\anydesk (3).exe => No File
FirewallRules: [{D191C5E5-96A4-4399-8BBA-990E13A43AF9}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EA97F70D-175B-4EE3-9E19-D9B780BBBB3E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{836652B6-B984-4B98-B988-B05CE7DA89FF}] => (Allow) C:\Program Files (x86)\Dexcom\Uploader\Dexcom.Agent.Uploader.exe (Dexcom Inc. -> Dexcom Inc.)
FirewallRules: [TCP Query User{7EC49551-E808-4692-AA17-31885F9CAD26}C:\users\köket\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.511\pluginhost.exe] => (Allow) C:\users\köket\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.511\pluginhost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{0B29DA6C-A6D4-4607-BA3E-DA897F4FCD30}C:\users\köket\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.511\pluginhost.exe] => (Allow) C:\users\köket\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.511\pluginhost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{84FAD658-1EF4-43D7-A4C8-69472285B6EC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{1733778B-6BC3-432F-BCF6-C746CF48688D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{85ED735E-44EA-41A3-BB21-0554B32BE004}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25072.1611.3570.1995_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{89A82485-FC95-4FD6-A475-42F4D0E0ACE0}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25072.1611.3570.1995_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{29C43B00-1B30-4C50-B7C2-1288DB77A7A9}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D4C4EAA7-4A14-4F43-B820-6E8949B39D2E}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25094.310.3616.953_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{24347061-53FD-41BC-BEBA-DAF54392ACA5}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25094.310.3616.953_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8BAF7E45-DF53-4266-B6F9-EF06A5CF717F}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.92\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{973C2158-A98A-410A-9D62-BCBDC6DB3E5D}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{1C095BA4-8D8D-4A39-AB2A-3480DCF11AA1}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{C68EF1C3-7040-45BB-9A06-1AC1BB0A45AC}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{9AEB8646-708F-4FA8-A643-034476237AA7}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{2BAC6BA6-0B29-426F-A0F4-C22CD5CCAA97}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{16CC0F6B-1974-4012-BEC9-50171EDE9E44}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{CDB591AD-FF5F-4E81-965B-712BF4F70743}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{1ACC6392-C84F-450E-9BFC-E76FA4569EFE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{1C1F0EC1-6F32-49CE-B527-0DBCB680789C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{D44D2628-C628-4BB3-A417-E465B16235D3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{56DD004E-AEA3-4FD9-800F-4C20400BE02E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{4EB469DE-23E4-4A87-990F-8B983AAC87F5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{05DD1BD9-E722-45FD-9589-EE57CCD5C79C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{DF814FCC-337A-442A-ACAB-640497035511}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{04A0B54B-DE7A-4179-A6DF-671FA4637366}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{9A0078E8-0583-4A74-9BA4-0F6B8D2E825D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{16592656-4BA9-4C50-9E63-87A3BC08A193}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

==================== Restore Points =========================

23-05-2025 18:13:33 Schemalagd kontrollpunkt
01-06-2025 18:38:39 Schemalagd kontrollpunkt

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (06/07/2025 08:52:20 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80004005
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (06/07/2025 08:48:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LockApp.exe version 10.0.19041.5794 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 7694

Start Time: 01dbd7d72b3068df

Termination Time: 4294967295

Application Path: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe

Report Id: 01a80fb4-d199-41db-9ab2-4c33c2c3f66f

Faulting package full name: Microsoft.LockApp_10.0.19041.4239_neutral__cw5n1h2txyewy

Faulting package-relative application ID: WindowsDefaultLockScreen

Hang type: Navigation

Error: (06/07/2025 08:10:05 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80004005
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (06/07/2025 06:58:02 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LockApp.exe version 10.0.19041.5794 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 2ab0

Start Time: 01dbd632c09ab2f2

Termination Time: 4294967295

Application Path: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe

Report Id: 8a26ced4-d9d3-487e-89fb-6821c9cdef14

Faulting package full name: Microsoft.LockApp_10.0.19041.4239_neutral__cw5n1h2txyewy

Faulting package-relative application ID: WindowsDefaultLockScreen

Hang type: Navigation

Error: (06/07/2025 06:56:59 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80004005
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (06/07/2025 03:50:54 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program ChatGPT.exe version 1.2025.139.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 3b40

Start Time: 01dbd5e3a5f3d70a

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2025.139.0_x64__2p2nqsd0c76g0\app\ChatGPT.exe

Report Id: 04686e74-5f64-4a05-b443-9050000c6035

Faulting package full name: OpenAI.ChatGPT-Desktop_1.2025.139.0_x64__2p2nqsd0c76g0

Faulting package-relative application ID: ChatGPT

Hang type: Quiesce

Error: (06/07/2025 03:50:05 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80004005
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (06/07/2025 03:00:03 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80004005
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable


System errors:
=============
Error: (06/07/2025 06:55:40 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MDT6U91)
Description: The server Microsoft.WindowsFeedbackHub_1.2505.1101.0_x64__8wekyb3d8bbwe!App.AppX8a6w88secebzyje9nrqc47xt488tkbmc.mca did not register with DCOM within the required timeout.

Error: (06/05/2025 07:53:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The MessagingService_571ca2b service terminated with the following error:
The device is not ready.

Error: (06/05/2025 12:11:57 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MDT6U91)
Description: The server {389510B7-9E58-40D7-98BF-60B911CB0EA9} did not register with DCOM within the required timeout.

Error: (06/05/2025 12:11:57 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MDT6U91)
Description: The server {389510B7-9E58-40D7-98BF-60B911CB0EA9} did not register with DCOM within the required timeout.

Error: (06/05/2025 12:11:57 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MDT6U91)
Description: The server {389510B7-9E58-40D7-98BF-60B911CB0EA9} did not register with DCOM within the required timeout.

Error: (06/05/2025 12:11:57 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MDT6U91)
Description: The server {389510B7-9E58-40D7-98BF-60B911CB0EA9} did not register with DCOM within the required timeout.

Error: (06/05/2025 12:11:57 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MDT6U91)
Description: The server {389510B7-9E58-40D7-98BF-60B911CB0EA9} did not register with DCOM within the required timeout.

Error: (06/05/2025 12:11:57 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MDT6U91)
Description: The server {389510B7-9E58-40D7-98BF-60B911CB0EA9} did not register with DCOM within the required timeout.


Windows Defender:
================
Date: 2025-06-07 12:29:20
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Snabbsökning
Stop Reason: Śċћєδúļėď şċǻη шаş ŝќΐφρзð вěςªцşê тћє łãŝţ ѕüćςеššƒũļ şсαň щάѕ ωîŧћĩи ţħ℮ ļǻšт 7 δàўş

Date: 2025-06-06 13:07:50
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Snabbsökning
Stop Reason: Śċћєδúļėď şċǻη шаş ŝќΐφρзð вěςªцşê тћє łãŝţ ѕüćςеššƒũļ şсαň щάѕ ωîŧћĩи ţħ℮ ļǻšт 7 δàўş

Date: 2025-06-04 13:33:11
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Snabbsökning
Stop Reason: Śċћєδúļėď şċǻη шаş ŝќΐφρзð вěςªцşê тћє łãŝţ ѕüćςеššƒũļ şсαň щάѕ ωîŧћĩи ţħ℮ ļǻšт 7 δàўş

Date: 2025-06-03 16:05:36
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Snabbsökning
Stop Reason: Śċћєδúļėď şċǻη шаş ŝќΐφρзð вěςªцşê тћє łãŝţ ѕüćςеššƒũļ şсαň щάѕ ωîŧћĩи ţħ℮ ļǻšт 7 δàўş

Date: 2025-06-02 13:26:00
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Snabbsökning
Stop Reason: ҐРĈ ćŏййĕĉтìоʼn гüñđόẅň
Event[0]:

Date: 2025-02-15 23:13:29
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 1.421.1916.0
Previous security intelligence Version: 1.421.1901.0
Update Source: Användare
Security intelligence Type: AntiSpyware
Update Type: Förändring
Current Engine Version: 1.1.24090.11
Previous Engine Version: 1.1.24090.11
Error code: 0x80508007
Error description: Enheten har ont om minne. Stäng några program och försök igen eller sök i Hjälp och support efter information om hur du förebygger minnesproblem.

Date: 2025-02-15 23:13:29
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 1.421.1916.0
Previous security intelligence Version: 1.421.1901.0
Update Source: Användare
Security intelligence Type: AntiVirus
Update Type: Förändring
Current Engine Version: 1.1.24090.11
Previous Engine Version: 1.1.24090.11
Error code: 0x80508007
Error description: Enheten har ont om minne. Stäng några program och försök igen eller sök i Hjälp och support efter information om hur du förebygger minnesproblem.

Date: 2024-03-25 07:44:19
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.407.643.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Fullständig
Current Engine Version:
Previous Engine Version: 1.1.24020.9
Error code: 0x80072ee7
Error description: Okänt servernamn eller adress

Date: 2024-03-25 07:44:19
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.407.643.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiSpyware
Update Type: Fullständig
Current Engine Version:
Previous Engine Version: 1.1.24020.9
Error code: 0x80072ee7
Error description: Okänt servernamn eller adress

Date: 2024-03-25 07:44:19
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.407.643.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Fullständig
Current Engine Version:
Previous Engine Version: 1.1.24020.9
Error code: 0x80072ee7
Error description: Okänt servernamn eller adress

CodeIntegrity:
===============
Date: 2025-06-07 15:23:50
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.


==================== Memory info ===========================

BIOS: LENOVO N1FET43W (1.17 ) 08/02/2016
Motherboard: LENOVO 20FR004PMS
Processor: Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz
Percentage of memory in use: 68%
Total physical RAM: 8059.13 MB
Available physical RAM: 2558.04 MB
Total Virtual: 30587.13 MB
Available Virtual: 19006.88 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:237.32 GB) (Free:97.79 GB) (Model: SAMSUNG MZVPV256HDGL-000L7) (Protected) NTFS

\\?\Volume{cc01d7be-6313-4e87-b82c-a72228879b4e}\ (Återställning) (Fixed) (Total:0.49 GB) (Free:0.47 GB) NTFS
\\?\Volume{2ebc574a-674c-4faf-8709-faec7aa61aff}\ () (Fixed) (Total:0.55 GB) (Free:0.08 GB) NTFS
\\?\Volume{3b915f02-7c1e-43f5-8624-d9e30cb63fcc}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 6DB3BDB1)

Partition: GPT.

==================== End of Addition.txt =======================

Zdravím!
Tohle bude nějaká haluz, takový virus neznám. Převody*.doc, nebo *.docx do pdf se provádí pomocí webových aplikací. O jiném způsobu nevím. Na dálku asi nepomohu, musel bych do toho systému vidět. Odkaz: https://www.google.com/search?client=fi ... ord+do+pdf . Nikdy jsme tu něco podobného neřešili. Jediné, co můžete zkusit, smažte cache prohlížeče.

aha, dekuji, cache muzeme smazat, jinak jak vypada log z FRST? nic tam neni?

Nic závažného tam nevidím. Zbytečnosti vyčistěte CCleanerem: https://www.ccleaner.com/cs-cz/ccleaner ... gICfPD_BwE a mělo by to být v pořádku.