VIRY.CZ

Dobry den, poslednych par dni zacal byt pocitac spomaleny, mohol by som poprosit o kontrolu logu, ci som tam nieco nechytil? Dakujem


FRST:


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 25-07-2025
Ran by Michal (administrator) on CHROSTIK (ASUSTeK COMPUTER INC. Vivobook_ASUSLaptop X1505ZA_X1505ZA) (25-07-2025 20:58:43)
Running from C:\Users\Michal\Desktop\FRST64.exe
Loaded Profiles: Michal
Platform: Microsoft Windows 11 Home Version 24H2 26100.4652 (X64) Language: Slovenčina (Slovensko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.42.0_x64__qmba6cd70vzyy\ModuleDll\HWSettings\AsusOLEDShifter.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusOSD.exe
(Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\js\node_modules\adobe-cr\build\Release\Adobe Crash Processor.exe
(C:\Program Files\Adobe\Adobe Photoshop 2021\Photoshop.exe ->) (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(C:\Program Files\Adobe\Adobe Photoshop 2021\Photoshop.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusOptimization.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusOptimizationStartupTask.exe
(DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSoftwareManager\AsusSoftwareManager.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.​) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSoftwareManager\AsusSoftwareManagerAgent.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_helper.exe
(explorer.exe ->) (Adobe Inc. -> Adobe) [File not signed] C:\Program Files\Adobe\Adobe Photoshop 2021\Photoshop.exe <2>
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <19>
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\AsusAppService\AsusAppService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusOptimization.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSoftwareManager\AsusSoftwareManager.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSwitch\AsusSwitch.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSystemAnalysis\AsusSystemAnalysis.exe <2>
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (DTS, Inc. -> DTS Inc.) C:\Windows\System32\DTS\PC\APO4x\DtsApo4Service.exe
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ELANFPService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_d6f52e3fdecf287d\ipfsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_346bd04e375689ec\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_6f0a892deb241071\AS\IAS\IntelAudioService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_4e93878658043b21\OneApp.IGCC.WinService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_9741ef1f4093481f\IntelCpHDCPSvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.73.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe <3>

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [798456 2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3959664 2021-12-07] (Microsoft Windows Hardware Compatibility Publisher -> Logitech, Inc.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [133128 2024-11-15] (Adobe Inc. -> Adobe Inc.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-816273166-2319128817-3269457040-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45741280 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\138.0.7204.168\Installer\chrmstp.exe [2025-07-24] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {A867C9FB-3169-4849-89F6-96179D70D399} - System32\Tasks\ASUS Optimization 36D18D69AFC3 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusHotkey.exe [343496 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {38A58FF2-A33B-46DD-B907-C7CFBD9C2E50} - System32\Tasks\ASUS Update Checker 2.0 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSoftwareManager\AsusUpdateChecker.exe [838088 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {FE1F65BD-AB32-4F5C-8F1E-C0BC80671C84} - System32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSystemAnalysis\AsusSystemAnalysis.exe [4416480 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {ED576FD8-184E-4E9D-AEC1-857954234423} - System32\Tasks\Avast Software\Avast Antivirus Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-av\icarus.exe [8930096 2025-06-17] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {79A36674-B70E-4866-960C-0B1EFDE28ACA} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5499128 2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {814DA660-0356-473B-8D37-FA191B2470E4} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2564904 2024-11-19] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {2473E6E3-4770-4381-B904-761581001D17} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {79F73B0B-E363-4B7F-BB1A-F49554ACA69F} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "d0bc5a6b-2656-45dc-92f0-cc3d4cdcd884" --version "6.38.0.11537" --silent
Task: {4386AC13-0661-4FC1-9E2E-455E1777D5C7} - System32\Tasks\CCleanerSkipUAC - Michal => C:\Program Files\CCleaner\CCleaner.exe [39575776 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {167907E0-B09E-4ED9-85E8-42A1BD9399E6} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem140.0.7273.0{18EB1E03-F3F1-49C7-A7D3-67AF90616028} => C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\updater.exe [6836832 2025-07-02] (Google LLC -> Google LLC)
Task: {5DDF19D3-2049-41E9-A2E7-A1D234D66F91} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [15515976 2025-07-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {FE2F564C-DE81-4099-BD12-9B608F26BDBA} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28583832 2025-07-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {7166325E-B7FB-47BD-BD52-4CC7BFEB60DB} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [70000 2025-07-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {E1EEFCDB-D856-4149-A6A7-DB204CEFF096} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28583832 2025-07-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {4654A991-3D35-4373-9133-51EDBB67430C} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [311560 2025-07-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {B9B16623-7404-4000-88C2-3949F4230FE9} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [311560 2025-07-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {0FD21A4D-7337-43E5-99E8-D70003C97E25} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [229176 2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {CE8E8DD3-3076-45CF-9C0A-5E1BA87F6735} - System32\Tasks\Microsoft\Office\Office Startup Boost => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [311560 2025-07-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {98B7FA11-B518-4BE1-9CDC-CACC453FB615} - System32\Tasks\Microsoft\Office\Office Startup Boost Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [311560 2025-07-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {6A470B26-9714-425D-BAD3-C0E65B6B6E01} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [694912 2025-07-22] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {58F8C632-348D-4405-99B3-96BF6D51D0C6} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-816273166-2319128817-3269457040-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [694912 2025-07-22] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {597464C7-A194-498F-93D7-F4487D49E812} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34944 2025-07-22] (Mozilla Corporation -> Mozilla Foundation)
Task: {9C3AC4DB-3119-453F-B610-E71E11176EE2} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-816273166-2319128817-3269457040-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (No File) <==== ATTENTION
Task: {DCEC6671-2A3A-4F4B-A55B-42F01D05CF0E} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-816273166-2319128817-3269457040-1001 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [65536 2025-01-30] (Microsoft Windows -> Microsoft Corporation)
Task: {09468A27-833E-4E9D-9576-135D1CA5B02D} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe [1961360 2023-11-01] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.9.1
Tcpip\..\Interfaces\{1e871d3c-148b-49b6-a4ee-7f4f37951217}: [DhcpNameServer] 192.168.9.1
Tcpip\..\Interfaces\{1e871d3c-148b-49b6-a4ee-7f4f37951217}\14355535F59334: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1e871d3c-148b-49b6-a4ee-7f4f37951217}\357514E4F5F46464943454: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1e871d3c-148b-49b6-a4ee-7f4f37951217}\D454253455359535: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{1e871d3c-148b-49b6-a4ee-7f4f37951217}\F445E435: [DhcpNameServer] 192.168.0.1 0.0.0.0

Edge:
=======
Edge Profile: C:\Users\Michal\AppData\Local\Microsoft\Edge\User Data\Default [2025-07-21]
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\Michal\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-12]
Edge Extension: (Edge relevant text changes) - C:\Users\Michal\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]

FireFox:
========
FF DefaultProfile: scwlywnk.default
FF ProfilePath: C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\scwlywnk.default [2024-03-12]
FF ProfilePath: C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\5sgw1db1.default-release [2025-07-25]
FF Extension: (AdBlocker Ultimate) - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\5sgw1db1.default-release\Extensions\adblockultimate@adblockultimate.net.xpi [2025-07-05]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-07-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-07-22] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR Profile: C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default [2025-07-25]
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-16]
CHR Extension: (AdBlock - najlepší blokovač reklám) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2025-07-25]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-01-05]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AsusAppService; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\AsusAppService\AsusAppService.exe [1176552 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSOptimization; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusOptimization.exe [596424 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSoftwareManager; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSoftwareManager\AsusSoftwareManager.exe [1412104 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSwitch; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSwitch\AsusSwitch.exe [652768 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemAnalysis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSystemAnalysis\AsusSystemAnalysis.exe [4416480 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemDiagnosis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe [1403872 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [7412984 2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [1032440 2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [1084664 2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2024-01-05] (Avast Software s.r.o. -> AVAST Software)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1080544 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13045088 2025-07-10] (Microsoft Corporation -> Microsoft Corporation)
R2 dptftcs; C:\WINDOWS\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_d6f52e3fdecf287d\ipfsvc.exe [546416 2022-12-02] (Intel Corporation -> Intel Corporation)
R2 DtsApo4Service; C:\WINDOWS\System32\DTS\PC\APO4x\DtsApo4Service.exe [434000 2023-02-22] (DTS, Inc. -> DTS Inc.)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_b4ad878dc01a7e41\lib\PlatformLicenseManagerService.exe [741600 2024-03-13] (Intel Corporation -> Intel(R) Corporation)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_6f0a892deb241071\AS\IAS\IntelAudioService.exe [530424 2023-08-31] (Intel Corporation -> Intel)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe [2781336 2022-12-02] (Intel Corporation -> Intel Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2024-01-06] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2024-01-06] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AcxHdAudio; C:\WINDOWS\System32\drivers\AcxHdAudio.sys [581632 2025-01-30] (Microsoft Windows -> Microsoft Corporation)
R3 AsusPTPDrv; C:\WINDOWS\System32\DriverStore\FileRepository\asusptpfilter.inf_amd64_93fc123351137141\AsusPTPFilter.sys [155568 2023-01-04] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R3 AsusSAIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSystemAnalysis\AsusSAIO.sys [51272 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [245344 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [391264 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [299616 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [85568 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [28280 2024-11-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [29768 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [281160 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [572000 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [92256 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [72288 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [884288 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1272928 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [202336 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [392288 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 ATKWMIACPIIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusWmiAcpi.sys [49064 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [222528 2025-01-30] (Microsoft Windows -> Microsoft Corporation)
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\iaLPSS2_GPIO2_ADL.sys [150616 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys [220224 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_SPI_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_spi_adl.inf_amd64_334c460fea9b11a4\iaLPSS2_SPI_ADL.sys [171608 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_UART2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_adl.inf_amd64_43d5df63d19fde70\iaLPSS2_UART2_ADL.sys [329320 2022-10-18] (Intel Corporation -> Intel Corporation)
R0 iaStorVD; C:\WINDOWS\System32\drivers\iaStorVD.sys [1605296 2022-09-16] (Intel Corporation -> Intel Corporation)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_c2a06a639869c7cd\IntcUSB.sys [923128 2023-08-31] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_04d4eecc5838a558\gna.sys [88776 2022-06-22] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_f2084be6bb835256\ipf_acpi.sys [87192 2022-12-02] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_cpu.sys [80536 2022-12-02] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_lf.sys [445080 2022-12-02] (Intel Corporation -> Intel Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [140688 2025-07-08] (Microsoft Windows -> Microsoft Corporation)
S3 rtu53cx21x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtu53cx21x64sta.inf_amd64_9a89b296dced10dd\rtu53cx21x64.sys [849712 2021-07-29] (Realtek Semiconductor Corp. -> Realtek Corporation)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2025-06-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [55856 2024-01-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [594304 2024-01-06] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2024-01-06] (Microsoft Windows -> Microsoft Corporation)
U3 aswBcc; no ImagePath
U3 Avast Business Console Client Antivirus Service; no ImagePath
U3 avast! Firewall; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-07-25 20:58 - 2025-07-25 20:59 - 000029931 _____ C:\Users\Michal\Desktop\FRST.txt
2025-07-25 20:58 - 2025-07-25 20:59 - 000000000 ____D C:\FRST
2025-07-25 20:56 - 2025-07-25 20:56 - 002409472 _____ (Farbar) C:\Users\Michal\Desktop\FRST64.exe
2025-07-22 17:58 - 2025-07-22 17:58 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-07-22 17:12 - 2025-07-22 17:12 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-07-21 21:42 - 2025-07-21 21:42 - 000000000 ____D C:\Users\Michal\AppData\Local\OneDrive
2025-07-15 20:12 - 2025-07-15 20:12 - 000000000 ____D C:\WINDOWS\LastGood
2025-07-15 13:18 - 2025-07-15 13:18 - 000119910 _____ C:\Users\Michal\Downloads\kupony_7350131.pdf
2025-07-14 21:09 - 2025-07-14 21:09 - 000163502 _____ C:\Users\Michal\Downloads\cast_A_zoznam_DP_k_01_07_2025.xlsx
2025-07-08 21:49 - 2025-07-08 21:49 - 000000000 ____D C:\WINDOWS\system32\ruxim
2025-07-08 21:34 - 2025-07-08 21:34 - 000426904 _____ C:\Users\Michal\Downloads\Tickets_202507082134113453.pdf
2025-07-08 20:22 - 2025-07-25 19:25 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-07-08 20:13 - 2025-07-08 20:13 - 000073956 _____ C:\WINDOWS\SysWOW64\ctac.json
2025-07-08 20:13 - 2025-07-08 20:13 - 000073956 _____ C:\WINDOWS\system32\ctac.json
2025-07-08 20:13 - 2025-07-08 20:13 - 000033519 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-07-08 20:13 - 2025-07-08 20:13 - 000033519 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-07-04 14:51 - 2025-07-04 14:51 - 002755344 _____ C:\Users\Michal\Downloads\Peter_Budaj_Card_Front_Final_Size_Retry.tiff
2025-07-04 14:50 - 2025-07-04 14:50 - 000020567 _____ C:\Users\Michal\Downloads\peter_budaj_card_layers.zip
2025-07-04 14:50 - 2025-07-04 14:50 - 000000000 ____D C:\Users\Michal\Downloads\peter_budaj_card_layers
2025-07-04 14:32 - 2025-07-04 14:32 - 005271032 _____ C:\Users\Michal\Downloads\Peter_Budaj_Card_with_bleed(1).psd
2025-07-04 14:31 - 2025-07-04 14:31 - 005271032 _____ C:\Users\Michal\Downloads\Peter_Budaj_Card_with_bleed.psd
2025-07-04 12:16 - 2025-07-04 12:19 - 000000000 ____D C:\Users\Michal\Downloads\Audioknihy - Andy Weir - Artemis
2025-07-04 12:12 - 2025-07-04 12:14 - 650690518 _____ C:\Users\Michal\Downloads\Audioknihy - Andy Weir - Artemis.rar
2025-06-30 05:35 - 2025-06-30 05:34 - 000320248 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2025-06-26 13:08 - 2025-06-26 13:09 - 308565504 _____ C:\Users\Michal\Downloads\1748328933-bol-raz-jeden-zivot_4020.bnl

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-07-25 20:54 - 2025-01-30 14:10 - 000003560 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-07-25 20:54 - 2025-01-30 14:10 - 000003334 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-07-25 20:54 - 2025-01-30 14:10 - 000003116 _____ C:\WINDOWS\system32\Tasks\ASUS Update Checker 2.0
2025-07-25 20:54 - 2025-01-30 14:10 - 000003034 _____ C:\WINDOWS\system32\Tasks\ASUS Optimization 36D18D69AFC3
2025-07-25 20:54 - 2025-01-30 14:10 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2025-07-25 20:54 - 2025-01-30 14:10 - 000002956 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2025-07-25 20:54 - 2025-01-30 14:10 - 000002854 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-816273166-2319128817-3269457040-500
2025-07-25 20:54 - 2025-01-30 14:10 - 000002820 _____ C:\WINDOWS\system32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474
2025-07-25 20:54 - 2025-01-30 14:10 - 000002452 _____ C:\WINDOWS\system32\Tasks\RtkAudUService64_BG
2025-07-25 20:54 - 2025-01-30 14:10 - 000002254 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Michal
2025-07-25 20:54 - 2025-01-30 14:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2025-07-25 20:54 - 2024-03-11 15:53 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2025-07-25 20:44 - 2024-08-30 19:58 - 000000000 ____D C:\Users\Michal\Downloads\Movies
2025-07-25 20:42 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-07-25 20:21 - 2024-01-05 08:55 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-07-25 19:25 - 2025-01-30 14:02 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-07-25 18:36 - 2024-01-05 16:37 - 000000000 ____D C:\Users\Michal\AppData\Roaming\Microsoft\Excel
2025-07-25 17:36 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-07-25 17:24 - 2024-03-11 15:53 - 000000000 ____D C:\Program Files\CCleaner
2025-07-25 09:50 - 2024-03-28 15:57 - 000000000 ____D C:\Users\Michal\Downloads\mp3
2025-07-25 09:48 - 2024-01-05 15:53 - 000000000 ____D C:\Users\Michal\AppData\Roaming\vlc
2025-07-25 08:28 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-07-25 08:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-07-24 09:23 - 2024-01-05 09:00 - 000002261 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-07-24 09:23 - 2024-01-05 09:00 - 000002220 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-07-22 18:23 - 2025-01-30 14:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2025-07-22 18:23 - 2024-01-05 08:54 - 000001079 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-07-22 17:44 - 2024-01-05 10:14 - 000000000 ____D C:\Michal
2025-07-22 17:11 - 2022-06-03 15:52 - 000000000 ____D C:\Program Files\Microsoft Office
2025-07-22 16:14 - 2024-01-05 08:50 - 000000000 ____D C:\Users\Michal\AppData\Local\D3DSCache
2025-07-21 21:41 - 2024-01-05 08:50 - 000000000 ____D C:\Users\Michal\AppData\Local\Packages
2025-07-21 21:41 - 2022-06-03 15:52 - 000000000 ____D C:\ProgramData\Packages
2025-07-21 21:40 - 2024-11-23 21:06 - 000000000 ____D C:\Users\Michal\AppData\Roaming\utorrent
2025-07-21 21:40 - 2024-03-02 11:37 - 000000000 ____D C:\Users\Michal\AppData\Local\CrashDumps
2025-07-20 20:59 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2025-07-20 09:23 - 2024-01-05 08:59 - 000000000 ____D C:\Users\Michal\AppData\Local\Avast Software
2025-07-19 07:43 - 2024-01-05 16:21 - 000000000 ____D C:\Users\Michal\Downloads\Michal
2025-07-18 18:25 - 2022-06-03 15:49 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-07-14 07:40 - 2024-01-05 16:22 - 000000000 ___RD C:\Users\Michal\Downloads\Nový priečinok (2)
2025-07-09 07:36 - 2025-01-30 14:12 - 000791274 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-07-09 07:35 - 2024-01-05 08:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-07-08 21:52 - 2025-01-30 14:10 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-07-08 21:52 - 2025-01-30 14:05 - 000004380 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-07-08 21:52 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2025-07-08 21:52 - 2024-01-05 08:57 - 000000000 ____D C:\ProgramData\Avast Software
2025-07-08 21:52 - 2022-06-03 15:49 - 000012288 ___SH C:\DumpStack.log.tmp
2025-07-08 21:51 - 2025-01-30 14:02 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2025-07-08 21:51 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-07-08 21:50 - 2025-01-30 14:02 - 000473440 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-07-08 21:49 - 2024-04-01 18:34 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\schemas
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-07-08 21:49 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2025-07-08 20:13 - 2025-01-30 14:07 - 003384320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-06-30 10:35 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-06-30 05:35 - 2024-01-05 08:58 - 001272928 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSP.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000572000 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000392288 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswVmm.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000299616 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000281160 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000092256 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000085568 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000072288 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000029768 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2025-06-30 05:34 - 2024-01-05 08:58 - 000884288 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2025-06-30 05:34 - 2024-01-05 08:58 - 000391264 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2025-06-30 05:34 - 2024-01-05 08:58 - 000245344 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArPot.sys
2025-06-30 05:34 - 2024-01-05 08:58 - 000021088 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArDisk.sys

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Addition:


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-07-2025
Ran by Michal (25-07-2025 20:59:50)
Running from C:\Users\Michal\Desktop
Microsoft Windows 11 Home Version 24H2 26100.4652 (X64) (2025-01-30 12:10:23)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-816273166-2319128817-3269457040-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-816273166-2319128817-3269457040-503 - Limited - Disabled)
Guest (S-1-5-21-816273166-2319128817-3269457040-501 - Limited - Disabled)
Michal (S-1-5-21-816273166-2319128817-3269457040-1001 - Administrator - Enabled) => C:\Users\Michal
WDAGUtilityAccount (S-1-5-21-816273166-2319128817-3269457040-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-816273166-2319128817-3269457040-1001\...\uTorrent) (Version: 3.6.0.47196 - BitTorrent Limited)
Adobe InDesign 2022 (HKLM-x32\...\IDSN_17_3) (Version: 17.3 - Adobe Inc.)
Adobe Photoshop 2021 (HKLM-x32\...\PHSP_22_4_1) (Version: 22.4.1.211 - Adobe Inc.)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 25.6.10221.2878 - Gen Digital Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 6.38 - Piriform)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1651.5 - Piriform Software) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 138.0.7204.168 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.13 - Google LLC) Hidden
Microsoft 365 - sk-sk (HKLM\...\O365HomePremRetail - sk-sk) (Version: 16.0.18925.20168 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 138.0.3351.95 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 138.0.3351.95 - Microsoft Corporation) Hidden
Microsoft Office 2019 Professional Plus - sk-sk (HKLM\...\ProPlus2019Retail - sk-sk) (Version: 16.0.18925.20168 - Microsoft Corporation)
Microsoft OneNote - sk-sk (HKLM\...\OneNoteFreeRetail - sk-sk) (Version: 16.0.18925.20168 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.14602 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.32.31326 (HKLM-x32\...\{2d507699-404c-4c8b-a54a-38e352f32cdd}) (Version: 14.32.31326.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31326 (HKLM-x32\...\{817e21c1-6b3a-4bc1-8c49-67e4e1887b3a}) (Version: 14.32.31326.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.32.31326 (HKLM\...\{38624EB5-356D-4B08-8357-C33D89A5C0C5}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.32.31326 (HKLM\...\{C96241EA-9900-4FE8-85B3-1E238D509DF6}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31326 (HKLM-x32\...\{A250E750-DB3F-40C1-8460-8EF77C7582DA}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31326 (HKLM-x32\...\{46E11E7F-01E1-44D0-BB86-C67342D253DD}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
MKVToolNix 92.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 92.0.0 - Moritz Bunkus)
Mozilla Firefox (x64 sk) (HKLM\...\Mozilla Firefox 141.0 (x64 sk)) (Version: 141.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 121.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18925.20168 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18925.20168 - Microsoft Corporation) Hidden
Sid Meier's Civilization V The Complete Edition repack Mr DJ version 1.0.3.279 (HKLM-x32\...\Sid Meier's Civilization V The Complete Edition ~01EC3566_is1) (Version: 1.0.3.279 - Mr DJ)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
WinRAR 6.24 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.24.0 - win.rar GmbH)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-11] ()
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2024-12-08] (INTEL CORP) [Startup Task]
B9ECED6F.ScreenPadMaster -> C:\Program Files\WindowsApps\B9ECED6F.ScreenPadMaster_4.0.5.0_x64__qmba6cd70vzyy [2025-07-01] (ASUSTeK COMPUTER INC.)
Balík pre prostredie funkcií Windowsu -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074904.InpApp_cw5n1h2txyewy [2025-07-08] (Microsoft Windows)
DTS Audio Processing -> C:\Program Files\WindowsApps\DTSInc.DTSAudioProcessing_1.10.15.0_x64__t5j2fzbtdg37r [2024-01-05] (DTS, Inc.)
MyASUS -> C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.42.0_x64__qmba6cd70vzyy [2025-06-29] (ASUSTeK COMPUTER INC.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2025-07-22] ()
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.48.312.0_x64__dt26b99r8h8gj [2024-06-10] (Realtek Semiconductor Corp)
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-01-22] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_7000.522.1444.0_x64__8wekyb3d8bbwe [2025-06-25] (Microsoft Corp.)
WinRAR -> C:\Program Files\WinRAR [2024-01-05] (win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-816273166-2319128817-3269457040-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\Michal\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.25.14602\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-11-15] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-11-15] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-11-15] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-11-15] (Adobe Inc. -> )
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-11-15] (Adobe Inc. -> )
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2022-05-07 07:24 - 2022-05-07 07:22 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.9.1
Windows Firewall is enabled.

Network Binding:
=============
Wi-Fi: Realtek 8821CE Wireless LAN 802.11ac PCI-E NIC -> rtwlane.sys
Sieťové pripojenie Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys

vms_vsf: Hyper-V Virtual Switch Extension Filter
ms_l1vhlwf: Nested Network Virtualization
vms_vsp: Hyper-V Virtual Switch Extension Protocol

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-816273166-2319128817-3269457040-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{CE069A03-0ECF-4AD3-A000-041E683395D9}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24334.1103.3302.5694_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B7B6BD9C-FD81-458C-B75C-7CFF94EF54C1}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24334.1103.3302.5694_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{B6871B37-C1A6-4B21-8F82-27680C79508E}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{48D35397-D9DD-4E67-94B7-F6119056F149}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{406CC079-EF51-4853-AD61-9CD767296477}C:\users\michal\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\michal\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [TCP Query User{F83BBE30-5737-4BEF-9476-3A58116BC392}C:\users\michal\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\michal\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [UDP Query User{78695157-5615-47AF-9C04-DA776A9C8CC2}C:\users\michal\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\michal\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [TCP Query User{7F83DF3D-8081-4E2B-98AF-401A0A2A3C3D}C:\users\michal\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\michal\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [{D140588E-3512-4D4A-803D-3EC2C4BC49AE}] => (Allow) C:\Program Files (x86)\Mr DJ\Sid Meier's Civilization V The Complete Edition repack Mr DJ\Launcher.exe (Firaxis Games) [File not signed]
FirewallRules: [{034709A5-0904-4DEC-9364-10ED8166A666}] => (Allow) C:\Program Files (x86)\Mr DJ\Sid Meier's Civilization V The Complete Edition repack Mr DJ\Launcher.exe (Firaxis Games) [File not signed]
FirewallRules: [UDP Query User{42BA1C40-8C40-4E8D-BA0B-F226F6FBA4AF}C:\users\michal\downloads\winbox64.exe] => (Allow) C:\users\michal\downloads\winbox64.exe (SIA "Mikrotīkls" -> )
FirewallRules: [TCP Query User{A5C85429-BDCC-4AF1-A792-9FCB20195F44}C:\users\michal\downloads\winbox64.exe] => (Allow) C:\users\michal\downloads\winbox64.exe (SIA "Mikrotīkls" -> )
FirewallRules: [{7BE8DA3C-E807-4D0A-B932-23218864BB12}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{B788C1BD-9FE7-49F1-900E-70D7C8023BB3}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{AA19BF3C-52FE-40F0-B6C2-3F708E55F444}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{81A23F76-3EB8-4B7F-9A10-1CC573E0340C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3C8DEE21-A963-43B8-BFBE-542FA326976C}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.42.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{5EB12D8C-9FA5-4454-A8DF-739AE3A871E8}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.42.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{B8D9A38D-79D8-414A-BBC6-C08952DB55C6}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.42.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{4BDB5350-2197-493C-BF3A-2A2D2BDEB95E}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.42.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{6AF1E11A-739D-4F54-BBE1-2D97024D1956}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{12B58FB3-5E42-4203-B14C-0FCA0AAF7435}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSwitch\AsusSwitchNet.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{8D66438B-A592-4A31-B495-2251F9B870E6}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSwitch\AsusSwitchNetMDNS.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{4D0D6AB3-016E-4768-A51B-599A58F92389}] => (Allow) C:\Program Files\ASUS\GlideX\GlideXRemote\GlideXRemoteAgent.exe => No File
FirewallRules: [{C0AFA089-D374-4F90-8C17-406727D72E0E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

21-07-2025 21:41:53 Removed GlideX Service Installer
25-07-2025 08:27:04 Windows Update
25-07-2025 08:27:04 Windows Update
25-07-2025 08:27:27 Windows Update

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (07/21/2025 09:37:41 PM) (Source: Application Error) (EventID: 1000) (User: Chrostik)
Description: Názov chybnej aplikácie: Photoshop.exe, verzia: 22.4.1.211, časová značka: 0x60a44ee6
Názov modulu s poruchou: ntdll.dll, verzia: 10.0.26100.4652, časová značka: 0x6c6bd922
Kód výnimky: 0xc0000374
Odchýlka poruchy: 0x000000000011dc15
Id poruchového procesu: 0x348c
Čas spustenia poruchovej aplikácie: 0x1dbfa7359c9defd
Cesta k poruchovej aplikácii: C:\Program Files\Adobe\Adobe Photoshop 2021\Photoshop.exe
Cesta k poruchovému modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
Id správy: c1a6c2f7-d8f6-4d90-81ef-1c33c50065dd
Plný názov chybného balíka:
Identifikátor poruchovej aplikácie vzťahujúci sa na balík:

Error: (07/08/2025 09:52:23 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: SCEP Certificate enrollment initialization for WORKGROUP\CHROSTIK$ via https://INTC-KeyId-134d03d6581dabea3bf8 ... s/Aik/scep failed:

GetCACaps

Method: GET(296ms)
Stage: GetCACaps
The server name or address could not be resolved 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (07/08/2025 09:50:48 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: SCEP Certificate enrollment initialization for WORKGROUP\CHROSTIK$ via https://INTC-KeyId-134d03d6581dabea3bf8 ... s/Aik/scep failed:

GetCACaps

Method: GET(79ms)
Stage: GetCACaps
The server name or address could not be resolved 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (06/25/2025 03:33:26 PM) (Source: Application Error) (EventID: 1000) (User: Chrostik)
Description: Názov chybnej aplikácie: Photoshop.exe, verzia: 22.4.1.211, časová značka: 0x60a44ee6
Názov modulu s poruchou: ntdll.dll, verzia: 10.0.26100.4202, časová značka: 0x9194561f
Kód výnimky: 0xc0000374
Odchýlka poruchy: 0x000000000011dcc5
Id poruchového procesu: 0x35e0
Čas spustenia poruchovej aplikácie: 0x1dbe5d3402ce8c0
Cesta k poruchovej aplikácii: C:\Program Files\Adobe\Adobe Photoshop 2021\Photoshop.exe
Cesta k poruchovému modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
Id správy: 2aff8580-2d18-43bb-8abd-99f38e333beb
Plný názov chybného balíka:
Identifikátor poruchovej aplikácie vzťahujúci sa na balík:

Error: (06/18/2025 10:11:16 PM) (Source: Application Error) (EventID: 1000) (User: Chrostik)
Description: Názov chybnej aplikácie: Photoshop.exe, verzia: 22.4.1.211, časová značka: 0x60a44ee6
Názov modulu s poruchou: ntdll.dll, verzia: 10.0.26100.4202, časová značka: 0x9194561f
Kód výnimky: 0xc0000374
Odchýlka poruchy: 0x000000000011dcc5
Id poruchového procesu: 0x34a8
Čas spustenia poruchovej aplikácie: 0x1dbe088d7a3262b
Cesta k poruchovej aplikácii: C:\Program Files\Adobe\Adobe Photoshop 2021\Photoshop.exe
Cesta k poruchovému modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
Id správy: 49f97870-57eb-4316-a931-2304494b7db0
Plný názov chybného balíka:
Identifikátor poruchovej aplikácie vzťahujúci sa na balík:

Error: (06/14/2025 06:08:18 AM) (Source: ESENT) (EventID: 489) (User: )
Description: CCleaner64 (18420,G,0,0) An attempt to open the file "C:\Users\Michal\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).

Error: (06/13/2025 02:22:12 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: SCEP Certificate enrollment initialization for WORKGROUP\CHROSTIK$ via https://INTC-KeyId-134d03d6581dabea3bf8 ... s/Aik/scep failed:

GetCACaps

Method: GET(31ms)
Stage: GetCACaps
The server name or address could not be resolved 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (06/11/2025 09:55:57 PM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17


System errors:
=============
Error: (07/25/2025 05:24:38 PM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: )
Description: Miniport Microsoft Wi-Fi Direct Virtual Adapter #2, {102a296e-c858-4efc-82ac-a3ed5158a1aa}, had event 74

Error: (07/25/2025 08:09:50 AM) (Source: Microsoft-Windows-HAL) (EventID: 21) (User: NT AUTHORITY)
Description: The hardware real-time clock was not set because evaluation of the ACPI Time and Alarm Device method failed. Status: 3221225473.

Error: (07/25/2025 08:09:50 AM) (Source: Microsoft-Windows-HAL) (EventID: 21) (User: NT AUTHORITY)
Description: The hardware real-time clock was not set because evaluation of the ACPI Time and Alarm Device method failed. Status: 3221225473.

Error: (07/25/2025 08:09:49 AM) (Source: Microsoft-Windows-HAL) (EventID: 21) (User: NT AUTHORITY)
Description: The hardware real-time clock was not set because evaluation of the ACPI Time and Alarm Device method failed. Status: 3221225473.

Error: (07/25/2025 08:08:55 AM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: )
Description: Miniport Microsoft Wi-Fi Direct Virtual Adapter #2, {102a296e-c858-4efc-82ac-a3ed5158a1aa}, had event 74

Error: (07/24/2025 09:23:57 AM) (Source: Microsoft-Windows-HAL) (EventID: 21) (User: NT AUTHORITY)
Description: The hardware real-time clock was not set because evaluation of the ACPI Time and Alarm Device method failed. Status: 3221225473.

Error: (07/24/2025 09:23:00 AM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: )
Description: Miniport Microsoft Wi-Fi Direct Virtual Adapter #2, {102a296e-c858-4efc-82ac-a3ed5158a1aa}, had event 74

Error: (07/23/2025 04:56:45 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Zlyhanie inštalácie: Systému Windows sa nepodarilo nainštalovať nasledujúcu aktualizáciu. Vyskytla sa chyba (0x80073d02 = The package could not be installed because resources it modifies are currently in use.): 9NMPJ99VJBWV-Microsoft.YourPhone.


CodeIntegrity:
===============
Date: 2025-07-09 07:31:23
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Avast Software\Avast\AvastSvc.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

BIOS: American Megatrends International, LLC. X1505ZA.309 03/15/2023
Motherboard: ASUSTeK COMPUTER INC. X1505ZA
Processor: 12th Gen Intel(R) Core(TM) i5-1235U
Percentage of memory in use: 83%
Total physical RAM: 16077.93 MB
Available physical RAM: 2583.25 MB
Total Virtual: 34552.22 MB
Available Virtual: 3138.37 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:475.41 GB) (Free:99.62 GB) (Model: NVMe Micron_2400_MTFDKBA512QFM) NTFS

\\?\Volume{0785b97e-933e-4282-ac54-52d3b01c2337}\ () (Fixed) (Total:1 GB) (Free:0.19 GB) NTFS
\\?\Volume{b9dffcfe-782f-4fae-b170-b67c2e2e978c}\ (MYASUS) (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32
\\?\Volume{0c4c20c6-0273-4438-9b43-02652bc963d8}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.2 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 9FA6E338)

Partition: GPT.

==================== End of Addition.txt =======================

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
FirewallRules: [{4D0D6AB3-016E-4768-A51B-599A58F92389}] => (Allow) C:\Program Files\ASUS\GlideX\GlideXRemote\GlideXRemoteAgent.exe => No File
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {9C3AC4DB-3119-453F-B610-E71E11176EE2} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-816273166-2319128817-3269457040-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (No File) <==== ATTENTION
U3 avast! Firewall; no ImagePath
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Snad to preslo, lebo pocas fixovania program FRST prestal reagovat... ale fixlog spravilo, tak snad...


Fix result of Farbar Recovery Scan Tool (x64) Version: 25-07-2025
Ran by Michal (26-07-2025 07:39:39) Run:1
Running from C:\Users\Michal\Desktop
Loaded Profiles: Michal
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
FirewallRules: [{4D0D6AB3-016E-4768-A51B-599A58F92389}] => (Allow) C:\Program Files\ASUS\GlideX\GlideXRemote\GlideXRemoteAgent.exe => No File
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {9C3AC4DB-3119-453F-B610-E71E11176EE2} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-816273166-2319128817-3269457040-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (No File) <==== ATTENTION
U3 avast! Firewall; no ImagePath
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4D0D6AB3-016E-4768-A51B-599A58F92389}" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9C3AC4DB-3119-453F-B610-E71E11176EE2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9C3AC4DB-3119-453F-B610-E71E11176EE2}" => removed successfully
C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-816273166-2319128817-3269457040-500 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OneDrive Standalone Update Task-S-1-5-21-816273166-2319128817-3269457040-500" => removed successfully
HKLM\System\CurrentControlSet\Services\avast! Firewall => could not remove, key could be protected
Could not move "C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2" => Scheduled to move on reboot.

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 140867959 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 14768790 B
Edge => 0 B
Chrome => 254396326 B

Ahoj,
vloz Rudymu aktualne logy FRST

FRST:


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 25-07-2025
Ran by Michal (administrator) on CHROSTIK (ASUSTeK COMPUTER INC. Vivobook_ASUSLaptop X1505ZA_X1505ZA) (26-07-2025 14:17:18)
Running from C:\Users\Michal\Desktop\FRST64.exe
Loaded Profiles: Michal
Platform: Microsoft Windows 11 Home Version 24H2 26100.4652 (X64) Language: Slovenčina (Slovensko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.42.0_x64__qmba6cd70vzyy\ModuleDll\HWSettings\AsusOLEDShifter.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusOSD.exe
(Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\js\node_modules\adobe-cr\build\Release\Adobe Crash Processor.exe
(C:\Program Files\Adobe\Adobe Photoshop 2021\Photoshop.exe ->) (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusOptimization.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusOptimizationStartupTask.exe
(DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSoftwareManager\AsusSoftwareManager.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.​) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSoftwareManager\AsusSoftwareManagerAgent.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_helper.exe
(explorer.exe ->) (Adobe Inc. -> Adobe) [File not signed] C:\Program Files\Adobe\Adobe Photoshop 2021\Photoshop.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\CCleaner\CCleaner64.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <11>
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\AsusAppService\AsusAppService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusOptimization.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSoftwareManager\AsusSoftwareManager.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSwitch\AsusSwitch.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSystemAnalysis\AsusSystemAnalysis.exe <2>
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (DTS, Inc. -> DTS Inc.) C:\Windows\System32\DTS\PC\APO4x\DtsApo4Service.exe
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ELANFPService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_d6f52e3fdecf287d\ipfsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_346bd04e375689ec\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_6f0a892deb241071\AS\IAS\IntelAudioService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_4e93878658043b21\OneApp.IGCC.WinService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_9741ef1f4093481f\IntelCpHDCPSvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.73.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe <3>

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [798456 2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3959664 2021-12-07] (Microsoft Windows Hardware Compatibility Publisher -> Logitech, Inc.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [133128 2024-11-15] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-816273166-2319128817-3269457040-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45741280 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\138.0.7204.169\Installer\chrmstp.exe [2025-07-26] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {A867C9FB-3169-4849-89F6-96179D70D399} - System32\Tasks\ASUS Optimization 36D18D69AFC3 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusHotkey.exe [343496 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {38A58FF2-A33B-46DD-B907-C7CFBD9C2E50} - System32\Tasks\ASUS Update Checker 2.0 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSoftwareManager\AsusUpdateChecker.exe [838088 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {FE1F65BD-AB32-4F5C-8F1E-C0BC80671C84} - System32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSystemAnalysis\AsusSystemAnalysis.exe [4416480 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {ED576FD8-184E-4E9D-AEC1-857954234423} - System32\Tasks\Avast Software\Avast Antivirus Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-av\icarus.exe [8930096 2025-06-17] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {79A36674-B70E-4866-960C-0B1EFDE28ACA} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5499128 2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {814DA660-0356-473B-8D37-FA191B2470E4} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2564904 2024-11-19] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {2473E6E3-4770-4381-B904-761581001D17} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {F9488687-CEC2-422D-9FF9-7E0F8ADD7326} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "d0bc5a6b-2656-45dc-92f0-cc3d4cdcd884" --version "6.38.0.11537" --silent
Task: {4386AC13-0661-4FC1-9E2E-455E1777D5C7} - System32\Tasks\CCleanerSkipUAC - Michal => C:\Program Files\CCleaner\CCleaner.exe [39575776 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {167907E0-B09E-4ED9-85E8-42A1BD9399E6} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem140.0.7273.0{18EB1E03-F3F1-49C7-A7D3-67AF90616028} => C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\updater.exe [6836832 2025-07-02] (Google LLC -> Google LLC)
Task: {8A9F781A-4872-4CED-98A7-7A5DAC37EC6B} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [15515984 2025-07-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {19068855-2056-4755-AE89-03295DF7F98C} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28583864 2025-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {7166325E-B7FB-47BD-BD52-4CC7BFEB60DB} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [69984 2025-07-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {59B92A82-55E8-4381-A902-1FED810F9DA9} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28583864 2025-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {01573E75-A26D-4B36-A712-7434B02888EA} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [310048 2025-07-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {060A289F-1C73-4D7D-AA67-15B9EAE0397B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [310048 2025-07-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {673AC28E-79D6-4704-95A6-96A4D6B16BD9} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [229176 2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {6A470B26-9714-425D-BAD3-C0E65B6B6E01} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [694912 2025-07-22] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {58F8C632-348D-4405-99B3-96BF6D51D0C6} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-816273166-2319128817-3269457040-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [694912 2025-07-22] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {597464C7-A194-498F-93D7-F4487D49E812} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34944 2025-07-22] (Mozilla Corporation -> Mozilla Foundation)
Task: {DCEC6671-2A3A-4F4B-A55B-42F01D05CF0E} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-816273166-2319128817-3269457040-1001 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [65536 2025-01-30] (Microsoft Windows -> Microsoft Corporation)
Task: {09468A27-833E-4E9D-9576-135D1CA5B02D} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe [1961360 2023-11-01] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.9.1
Tcpip\..\Interfaces\{1e871d3c-148b-49b6-a4ee-7f4f37951217}: [DhcpNameServer] 192.168.9.1
Tcpip\..\Interfaces\{1e871d3c-148b-49b6-a4ee-7f4f37951217}\14355535F59334: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1e871d3c-148b-49b6-a4ee-7f4f37951217}\357514E4F5F46464943454: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1e871d3c-148b-49b6-a4ee-7f4f37951217}\D454253455359535: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{1e871d3c-148b-49b6-a4ee-7f4f37951217}\F445E435: [DhcpNameServer] 192.168.0.1 0.0.0.0

Edge:
=======
Edge Profile: C:\Users\Michal\AppData\Local\Microsoft\Edge\User Data\Default [2025-07-21]
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\Michal\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-12]
Edge Extension: (Edge relevant text changes) - C:\Users\Michal\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]

FireFox:
========
FF DefaultProfile: scwlywnk.default
FF ProfilePath: C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\scwlywnk.default [2024-03-12]
FF ProfilePath: C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\5sgw1db1.default-release [2025-07-26]
FF Extension: (AdBlocker Ultimate) - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\5sgw1db1.default-release\Extensions\adblockultimate@adblockultimate.net.xpi [2025-07-05]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-07-26] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-07-26] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR Profile: C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default [2025-07-26]
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-16]
CHR Extension: (AdBlock - najlepší blokovač reklám) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2025-07-25]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-01-05]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AsusAppService; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\AsusAppService\AsusAppService.exe [1176552 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSOptimization; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusOptimization.exe [596424 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSoftwareManager; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSoftwareManager\AsusSoftwareManager.exe [1412104 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSwitch; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSwitch\AsusSwitch.exe [652768 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemAnalysis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSystemAnalysis\AsusSystemAnalysis.exe [4416480 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemDiagnosis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe [1403872 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [7412984 2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [1032440 2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [1084664 2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2024-01-05] (Avast Software s.r.o. -> AVAST Software)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1080544 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13045120 2025-07-18] (Microsoft Corporation -> Microsoft Corporation)
R2 dptftcs; C:\WINDOWS\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_d6f52e3fdecf287d\ipfsvc.exe [546416 2022-12-02] (Intel Corporation -> Intel Corporation)
R2 DtsApo4Service; C:\WINDOWS\System32\DTS\PC\APO4x\DtsApo4Service.exe [434000 2023-02-22] (DTS, Inc. -> DTS Inc.)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_b4ad878dc01a7e41\lib\PlatformLicenseManagerService.exe [741600 2024-03-13] (Intel Corporation -> Intel(R) Corporation)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_6f0a892deb241071\AS\IAS\IntelAudioService.exe [530424 2023-08-31] (Intel Corporation -> Intel)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe [2781336 2022-12-02] (Intel Corporation -> Intel Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2024-01-06] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2024-01-06] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AcxHdAudio; C:\WINDOWS\System32\drivers\AcxHdAudio.sys [581632 2025-01-30] (Microsoft Windows -> Microsoft Corporation)
R3 AsusPTPDrv; C:\WINDOWS\System32\DriverStore\FileRepository\asusptpfilter.inf_amd64_93fc123351137141\AsusPTPFilter.sys [155568 2023-01-04] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R3 AsusSAIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSystemAnalysis\AsusSAIO.sys [51272 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [245344 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [391264 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [299616 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [85568 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [28280 2024-11-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [29768 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [281160 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [572000 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [92256 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [72288 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [884288 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1272928 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [202336 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [392288 2025-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 ATKWMIACPIIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSOptimization\AsusWmiAcpi.sys [49064 2025-06-16] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [222528 2025-01-30] (Microsoft Windows -> Microsoft Corporation)
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\iaLPSS2_GPIO2_ADL.sys [150616 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys [220224 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_SPI_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_spi_adl.inf_amd64_334c460fea9b11a4\iaLPSS2_SPI_ADL.sys [171608 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_UART2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_adl.inf_amd64_43d5df63d19fde70\iaLPSS2_UART2_ADL.sys [329320 2022-10-18] (Intel Corporation -> Intel Corporation)
R0 iaStorVD; C:\WINDOWS\System32\drivers\iaStorVD.sys [1605296 2022-09-16] (Intel Corporation -> Intel Corporation)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_c2a06a639869c7cd\IntcUSB.sys [923128 2023-08-31] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_04d4eecc5838a558\gna.sys [88776 2022-06-22] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_f2084be6bb835256\ipf_acpi.sys [87192 2022-12-02] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_cpu.sys [80536 2022-12-02] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_lf.sys [445080 2022-12-02] (Intel Corporation -> Intel Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [140688 2025-07-08] (Microsoft Windows -> Microsoft Corporation)
S3 rtu53cx21x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtu53cx21x64sta.inf_amd64_9a89b296dced10dd\rtu53cx21x64.sys [849712 2021-07-29] (Realtek Semiconductor Corp. -> Realtek Corporation)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2025-06-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [55856 2024-01-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [594304 2024-01-06] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2024-01-06] (Microsoft Windows -> Microsoft Corporation)
U3 aswBcc; no ImagePath
U3 Avast Business Console Client Antivirus Service; no ImagePath
U3 avast! Firewall; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-07-26 12:42 - 2025-07-26 12:42 - 178517638 _____ C:\Users\Michal\Downloads\drive-download-20250726T104204Z-1-001.zip
2025-07-26 09:59 - 2025-07-26 09:59 - 000000146 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-07-26 08:21 - 2025-07-26 08:21 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-07-25 20:58 - 2025-07-26 14:17 - 000027871 _____ C:\Users\Michal\Desktop\FRST.txt
2025-07-25 20:58 - 2025-07-26 14:17 - 000000000 ____D C:\FRST
2025-07-25 20:56 - 2025-07-25 20:56 - 002409472 _____ (Farbar) C:\Users\Michal\Desktop\FRST64.exe
2025-07-22 17:58 - 2025-07-26 09:59 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-07-21 21:42 - 2025-07-21 21:42 - 000000000 ____D C:\Users\Michal\AppData\Local\OneDrive
2025-07-15 20:12 - 2025-07-15 20:12 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2025-07-15 13:18 - 2025-07-15 13:18 - 000119910 _____ C:\Users\Michal\Downloads\kupony_7350131.pdf
2025-07-14 21:09 - 2025-07-14 21:09 - 000163502 _____ C:\Users\Michal\Downloads\cast_A_zoznam_DP_k_01_07_2025.xlsx
2025-07-08 21:49 - 2025-07-08 21:49 - 000000000 ____D C:\WINDOWS\system32\ruxim
2025-07-08 21:34 - 2025-07-08 21:34 - 000426904 _____ C:\Users\Michal\Downloads\Tickets_202507082134113453.pdf
2025-07-08 20:22 - 2025-07-26 11:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-07-08 20:13 - 2025-07-08 20:13 - 000073956 _____ C:\WINDOWS\SysWOW64\ctac.json
2025-07-08 20:13 - 2025-07-08 20:13 - 000073956 _____ C:\WINDOWS\system32\ctac.json
2025-07-08 20:13 - 2025-07-08 20:13 - 000033519 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-07-08 20:13 - 2025-07-08 20:13 - 000033519 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-07-04 14:51 - 2025-07-04 14:51 - 002755344 _____ C:\Users\Michal\Downloads\Peter_Budaj_Card_Front_Final_Size_Retry.tiff
2025-07-04 14:50 - 2025-07-04 14:50 - 000020567 _____ C:\Users\Michal\Downloads\peter_budaj_card_layers.zip
2025-07-04 14:50 - 2025-07-04 14:50 - 000000000 ____D C:\Users\Michal\Downloads\peter_budaj_card_layers
2025-07-04 14:32 - 2025-07-04 14:32 - 005271032 _____ C:\Users\Michal\Downloads\Peter_Budaj_Card_with_bleed(1).psd
2025-07-04 14:31 - 2025-07-04 14:31 - 005271032 _____ C:\Users\Michal\Downloads\Peter_Budaj_Card_with_bleed.psd
2025-07-04 12:16 - 2025-07-04 12:19 - 000000000 ____D C:\Users\Michal\Downloads\Audioknihy - Andy Weir - Artemis
2025-07-04 12:12 - 2025-07-04 12:14 - 650690518 _____ C:\Users\Michal\Downloads\Audioknihy - Andy Weir - Artemis.rar
2025-06-30 05:35 - 2025-06-30 05:34 - 000320248 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2025-06-26 13:08 - 2025-06-26 13:09 - 308565504 _____ C:\Users\Michal\Downloads\1748328933-bol-raz-jeden-zivot_4020.bnl

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-07-26 14:17 - 2024-01-05 08:55 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-07-26 14:16 - 2025-01-30 14:02 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-07-26 14:16 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-07-26 14:00 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-07-26 14:00 - 2024-01-05 09:00 - 000002261 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-07-26 14:00 - 2024-01-05 09:00 - 000002220 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-07-26 13:45 - 2024-01-05 16:37 - 000000000 ____D C:\Users\Michal\AppData\Roaming\Microsoft\Excel
2025-07-26 13:15 - 2025-01-30 14:10 - 000003560 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-07-26 13:15 - 2025-01-30 14:10 - 000003334 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-07-26 13:15 - 2025-01-30 14:10 - 000003116 _____ C:\WINDOWS\system32\Tasks\ASUS Update Checker 2.0
2025-07-26 13:15 - 2025-01-30 14:10 - 000003034 _____ C:\WINDOWS\system32\Tasks\ASUS Optimization 36D18D69AFC3
2025-07-26 13:15 - 2025-01-30 14:10 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2025-07-26 13:15 - 2025-01-30 14:10 - 000002820 _____ C:\WINDOWS\system32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474
2025-07-26 13:15 - 2025-01-30 14:10 - 000002788 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2025-07-26 13:15 - 2025-01-30 14:10 - 000002452 _____ C:\WINDOWS\system32\Tasks\RtkAudUService64_BG
2025-07-26 13:15 - 2025-01-30 14:10 - 000002254 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Michal
2025-07-26 13:15 - 2025-01-30 14:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2025-07-26 13:15 - 2024-03-11 15:53 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2025-07-26 12:50 - 2024-01-05 15:53 - 000000000 ____D C:\Users\Michal\AppData\Roaming\vlc
2025-07-26 10:58 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-07-26 10:03 - 2025-01-30 14:12 - 000791274 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-07-26 10:03 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2025-07-26 09:59 - 2025-01-30 14:10 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-07-26 09:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2025-07-26 09:59 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-07-26 09:59 - 2024-03-11 15:53 - 000000000 ____D C:\Program Files\CCleaner
2025-07-26 09:59 - 2024-01-05 08:57 - 000000000 ____D C:\ProgramData\Avast Software
2025-07-26 09:59 - 2024-01-05 08:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-07-26 09:59 - 2022-06-03 15:49 - 000012288 ___SH C:\DumpStack.log.tmp
2025-07-26 08:20 - 2022-06-03 15:52 - 000000000 ____D C:\Program Files\Microsoft Office
2025-07-25 20:44 - 2024-08-30 19:58 - 000000000 ____D C:\Users\Michal\Downloads\Movies
2025-07-25 09:50 - 2024-03-28 15:57 - 000000000 ____D C:\Users\Michal\Downloads\mp3
2025-07-25 08:28 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-07-22 18:23 - 2025-01-30 14:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2025-07-22 18:23 - 2024-01-05 08:54 - 000001079 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-07-22 17:44 - 2024-01-05 10:14 - 000000000 ____D C:\Michal
2025-07-22 16:14 - 2024-01-05 08:50 - 000000000 ____D C:\Users\Michal\AppData\Local\D3DSCache
2025-07-21 21:41 - 2024-01-05 08:50 - 000000000 ____D C:\Users\Michal\AppData\Local\Packages
2025-07-21 21:41 - 2022-06-03 15:52 - 000000000 ____D C:\ProgramData\Packages
2025-07-21 21:40 - 2024-11-23 21:06 - 000000000 ____D C:\Users\Michal\AppData\Roaming\utorrent
2025-07-21 21:40 - 2024-03-02 11:37 - 000000000 ____D C:\Users\Michal\AppData\Local\CrashDumps
2025-07-20 09:23 - 2024-01-05 08:59 - 000000000 ____D C:\Users\Michal\AppData\Local\Avast Software
2025-07-19 07:43 - 2024-01-05 16:21 - 000000000 ____D C:\Users\Michal\Downloads\Michal
2025-07-18 18:25 - 2022-06-03 15:49 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-07-14 07:40 - 2024-01-05 16:22 - 000000000 ___RD C:\Users\Michal\Downloads\Nový priečinok (2)
2025-07-08 21:51 - 2025-01-30 14:02 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2025-07-08 21:50 - 2025-01-30 14:02 - 000473440 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-07-08 21:49 - 2024-04-01 18:34 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\schemas
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-07-08 21:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-07-08 21:49 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2025-07-08 20:13 - 2025-01-30 14:07 - 003384320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-06-30 10:35 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-06-30 05:35 - 2024-01-05 08:58 - 001272928 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSP.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000572000 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000392288 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswVmm.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000299616 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000281160 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000092256 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000085568 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000072288 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2025-06-30 05:35 - 2024-01-05 08:58 - 000029768 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2025-06-30 05:34 - 2024-01-05 08:58 - 000884288 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2025-06-30 05:34 - 2024-01-05 08:58 - 000391264 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2025-06-30 05:34 - 2024-01-05 08:58 - 000245344 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArPot.sys
2025-06-30 05:34 - 2024-01-05 08:58 - 000021088 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArDisk.sys

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================






Addition:


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-07-2025
Ran by Michal (26-07-2025 14:18:01)
Running from C:\Users\Michal\Desktop
Microsoft Windows 11 Home Version 24H2 26100.4652 (X64) (2025-01-30 12:10:23)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-816273166-2319128817-3269457040-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-816273166-2319128817-3269457040-503 - Limited - Disabled)
Guest (S-1-5-21-816273166-2319128817-3269457040-501 - Limited - Disabled)
Michal (S-1-5-21-816273166-2319128817-3269457040-1001 - Administrator - Enabled) => C:\Users\Michal
WDAGUtilityAccount (S-1-5-21-816273166-2319128817-3269457040-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-816273166-2319128817-3269457040-1001\...\uTorrent) (Version: 3.6.0.47196 - BitTorrent Limited)
Adobe InDesign 2022 (HKLM-x32\...\IDSN_17_3) (Version: 17.3 - Adobe Inc.)
Adobe Photoshop 2021 (HKLM-x32\...\PHSP_22_4_1) (Version: 22.4.1.211 - Adobe Inc.)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 25.6.10221.2878 - Gen Digital Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 6.38 - Piriform)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1651.5 - Piriform Software) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 138.0.7204.169 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.13 - Google LLC) Hidden
Microsoft 365 - sk-sk (HKLM\...\O365HomePremRetail - sk-sk) (Version: 16.0.18925.20184 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 138.0.3351.95 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 138.0.3351.95 - Microsoft Corporation) Hidden
Microsoft Office 2019 Professional Plus - sk-sk (HKLM\...\ProPlus2019Retail - sk-sk) (Version: 16.0.18925.20184 - Microsoft Corporation)
Microsoft OneNote - sk-sk (HKLM\...\OneNoteFreeRetail - sk-sk) (Version: 16.0.18925.20184 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.14602 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.32.31326 (HKLM-x32\...\{2d507699-404c-4c8b-a54a-38e352f32cdd}) (Version: 14.32.31326.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31326 (HKLM-x32\...\{817e21c1-6b3a-4bc1-8c49-67e4e1887b3a}) (Version: 14.32.31326.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.32.31326 (HKLM\...\{38624EB5-356D-4B08-8357-C33D89A5C0C5}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.32.31326 (HKLM\...\{C96241EA-9900-4FE8-85B3-1E238D509DF6}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31326 (HKLM-x32\...\{A250E750-DB3F-40C1-8460-8EF77C7582DA}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31326 (HKLM-x32\...\{46E11E7F-01E1-44D0-BB86-C67342D253DD}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
MKVToolNix 92.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 92.0.0 - Moritz Bunkus)
Mozilla Firefox (x64 sk) (HKLM\...\Mozilla Firefox 141.0 (x64 sk)) (Version: 141.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 121.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18925.20184 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18925.20184 - Microsoft Corporation) Hidden
Sid Meier's Civilization V The Complete Edition repack Mr DJ version 1.0.3.279 (HKLM-x32\...\Sid Meier's Civilization V The Complete Edition ~01EC3566_is1) (Version: 1.0.3.279 - Mr DJ)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
WinRAR 6.24 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.24.0 - win.rar GmbH)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-11] ()
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2024-12-08] (INTEL CORP) [Startup Task]
B9ECED6F.ScreenPadMaster -> C:\Program Files\WindowsApps\B9ECED6F.ScreenPadMaster_4.0.5.0_x64__qmba6cd70vzyy [2025-07-01] (ASUSTeK COMPUTER INC.)
Balík pre prostredie funkcií Windowsu -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074904.InpApp_cw5n1h2txyewy [2025-07-08] (Microsoft Windows)
DTS Audio Processing -> C:\Program Files\WindowsApps\DTSInc.DTSAudioProcessing_1.10.15.0_x64__t5j2fzbtdg37r [2024-01-05] (DTS, Inc.)
MyASUS -> C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.42.0_x64__qmba6cd70vzyy [2025-06-29] (ASUSTeK COMPUTER INC.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2025-07-26] ()
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.48.312.0_x64__dt26b99r8h8gj [2024-06-10] (Realtek Semiconductor Corp)
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-01-22] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_7000.522.1444.0_x64__8wekyb3d8bbwe [2025-06-25] (Microsoft Corp.)
WinRAR -> C:\Program Files\WinRAR [2024-01-05] (win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-816273166-2319128817-3269457040-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\Michal\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.25.14602\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-11-15] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-11-15] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-11-15] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-11-15] (Adobe Inc. -> )
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-11-15] (Adobe Inc. -> )
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-30] (Avast Software s.r.o. -> Gen Digital Inc.)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-07-06] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2022-05-07 07:24 - 2022-05-07 07:22 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.9.1
Windows Firewall is enabled.

Network Binding:
=============
Wi-Fi: Realtek 8821CE Wireless LAN 802.11ac PCI-E NIC -> rtwlane.sys
Sieťové pripojenie Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys

vms_vsf: Hyper-V Virtual Switch Extension Filter
ms_l1vhlwf: Nested Network Virtualization
vms_vsp: Hyper-V Virtual Switch Extension Protocol

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-816273166-2319128817-3269457040-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{CE069A03-0ECF-4AD3-A000-041E683395D9}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24334.1103.3302.5694_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B7B6BD9C-FD81-458C-B75C-7CFF94EF54C1}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24334.1103.3302.5694_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{B6871B37-C1A6-4B21-8F82-27680C79508E}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{48D35397-D9DD-4E67-94B7-F6119056F149}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{406CC079-EF51-4853-AD61-9CD767296477}C:\users\michal\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\michal\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [TCP Query User{F83BBE30-5737-4BEF-9476-3A58116BC392}C:\users\michal\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\michal\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [UDP Query User{78695157-5615-47AF-9C04-DA776A9C8CC2}C:\users\michal\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\michal\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [TCP Query User{7F83DF3D-8081-4E2B-98AF-401A0A2A3C3D}C:\users\michal\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\michal\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [{D140588E-3512-4D4A-803D-3EC2C4BC49AE}] => (Allow) C:\Program Files (x86)\Mr DJ\Sid Meier's Civilization V The Complete Edition repack Mr DJ\Launcher.exe (Firaxis Games) [File not signed]
FirewallRules: [{034709A5-0904-4DEC-9364-10ED8166A666}] => (Allow) C:\Program Files (x86)\Mr DJ\Sid Meier's Civilization V The Complete Edition repack Mr DJ\Launcher.exe (Firaxis Games) [File not signed]
FirewallRules: [UDP Query User{42BA1C40-8C40-4E8D-BA0B-F226F6FBA4AF}C:\users\michal\downloads\winbox64.exe] => (Allow) C:\users\michal\downloads\winbox64.exe (SIA "Mikrotīkls" -> )
FirewallRules: [TCP Query User{A5C85429-BDCC-4AF1-A792-9FCB20195F44}C:\users\michal\downloads\winbox64.exe] => (Allow) C:\users\michal\downloads\winbox64.exe (SIA "Mikrotīkls" -> )
FirewallRules: [{7BE8DA3C-E807-4D0A-B932-23218864BB12}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{B788C1BD-9FE7-49F1-900E-70D7C8023BB3}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{AA19BF3C-52FE-40F0-B6C2-3F708E55F444}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{81A23F76-3EB8-4B7F-9A10-1CC573E0340C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3C8DEE21-A963-43B8-BFBE-542FA326976C}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.42.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{5EB12D8C-9FA5-4454-A8DF-739AE3A871E8}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.42.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{B8D9A38D-79D8-414A-BBC6-C08952DB55C6}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.42.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{4BDB5350-2197-493C-BF3A-2A2D2BDEB95E}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.42.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{6AF1E11A-739D-4F54-BBE1-2D97024D1956}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F4C74A3A-0E51-4CD6-BABA-D68A54F69E5D}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSwitch\AsusSwitchNet.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{E2DF1A75-C06F-4BA2-B92F-86939484AC43}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_cceffaf9805aa134\ASUSSwitch\AsusSwitchNetMDNS.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{D03486B8-0248-4F62-A1DF-F4047D29A33E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

21-07-2025 21:41:53 Removed GlideX Service Installer
25-07-2025 08:27:04 Windows Update
25-07-2025 08:27:04 Windows Update
25-07-2025 08:27:27 Windows Update

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (07/26/2025 09:59:35 AM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: SCEP Certificate enrollment initialization for WORKGROUP\CHROSTIK$ via https://INTC-KeyId-134d03d6581dabea3bf8 ... s/Aik/scep failed:

GetCACaps

Method: GET(47ms)
Stage: GetCACaps
The server name or address could not be resolved 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (07/26/2025 07:41:43 AM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: The program FRST64.exe version 25.7.2025.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Error: (07/21/2025 09:37:41 PM) (Source: Application Error) (EventID: 1000) (User: Chrostik)
Description: Názov chybnej aplikácie: Photoshop.exe, verzia: 22.4.1.211, časová značka: 0x60a44ee6
Názov modulu s poruchou: ntdll.dll, verzia: 10.0.26100.4652, časová značka: 0x6c6bd922
Kód výnimky: 0xc0000374
Odchýlka poruchy: 0x000000000011dc15
Id poruchového procesu: 0x348c
Čas spustenia poruchovej aplikácie: 0x1dbfa7359c9defd
Cesta k poruchovej aplikácii: C:\Program Files\Adobe\Adobe Photoshop 2021\Photoshop.exe
Cesta k poruchovému modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
Id správy: c1a6c2f7-d8f6-4d90-81ef-1c33c50065dd
Plný názov chybného balíka:
Identifikátor poruchovej aplikácie vzťahujúci sa na balík:

Error: (07/08/2025 09:52:23 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: SCEP Certificate enrollment initialization for WORKGROUP\CHROSTIK$ via https://INTC-KeyId-134d03d6581dabea3bf8 ... s/Aik/scep failed:

GetCACaps

Method: GET(296ms)
Stage: GetCACaps
The server name or address could not be resolved 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (07/08/2025 09:50:48 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: SCEP Certificate enrollment initialization for WORKGROUP\CHROSTIK$ via https://INTC-KeyId-134d03d6581dabea3bf8 ... s/Aik/scep failed:

GetCACaps

Method: GET(79ms)
Stage: GetCACaps
The server name or address could not be resolved 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (06/25/2025 03:33:26 PM) (Source: Application Error) (EventID: 1000) (User: Chrostik)
Description: Názov chybnej aplikácie: Photoshop.exe, verzia: 22.4.1.211, časová značka: 0x60a44ee6
Názov modulu s poruchou: ntdll.dll, verzia: 10.0.26100.4202, časová značka: 0x9194561f
Kód výnimky: 0xc0000374
Odchýlka poruchy: 0x000000000011dcc5
Id poruchového procesu: 0x35e0
Čas spustenia poruchovej aplikácie: 0x1dbe5d3402ce8c0
Cesta k poruchovej aplikácii: C:\Program Files\Adobe\Adobe Photoshop 2021\Photoshop.exe
Cesta k poruchovému modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
Id správy: 2aff8580-2d18-43bb-8abd-99f38e333beb
Plný názov chybného balíka:
Identifikátor poruchovej aplikácie vzťahujúci sa na balík:

Error: (06/18/2025 10:11:16 PM) (Source: Application Error) (EventID: 1000) (User: Chrostik)
Description: Názov chybnej aplikácie: Photoshop.exe, verzia: 22.4.1.211, časová značka: 0x60a44ee6
Názov modulu s poruchou: ntdll.dll, verzia: 10.0.26100.4202, časová značka: 0x9194561f
Kód výnimky: 0xc0000374
Odchýlka poruchy: 0x000000000011dcc5
Id poruchového procesu: 0x34a8
Čas spustenia poruchovej aplikácie: 0x1dbe088d7a3262b
Cesta k poruchovej aplikácii: C:\Program Files\Adobe\Adobe Photoshop 2021\Photoshop.exe
Cesta k poruchovému modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
Id správy: 49f97870-57eb-4316-a931-2304494b7db0
Plný názov chybného balíka:
Identifikátor poruchovej aplikácie vzťahujúci sa na balík:

Error: (06/14/2025 06:08:18 AM) (Source: ESENT) (EventID: 489) (User: )
Description: CCleaner64 (18420,G,0,0) An attempt to open the file "C:\Users\Michal\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).


System errors:
=============
Error: (07/26/2025 10:01:34 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby Služba Google Update (gupdate) zlyhalo kvôli nasledujúcej chybe:
The service did not respond to the start or control request in a timely fashion.

Error: (07/26/2025 10:01:34 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Počas čakania na pripojenie služby Služba Google Update (gupdate) bol dosiahnutý časový limit (30000 ms).

Error: (07/26/2025 09:59:30 AM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024662

Error: (07/26/2025 09:59:22 AM) (Source: Microsoft-Windows-Eventlog) (EventID: 22) (User: NT AUTHORITY)
Description: The event logging service encountered an error while initializing publishing resources for channel Microsoft-Windows-USBVideo/Analytic. If channel type is Analytic or Debug, then this could mean there was an error initializing logging resources as well.

Error: (07/26/2025 07:39:41 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Storage Middleware Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (07/26/2025 07:39:41 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Management Engine WMI Provider Registration sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (07/26/2025 07:39:41 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Windows Zabezpečenie sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 60000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (07/26/2025 07:39:41 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Microsoft Office Click-to-Run Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 0 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.


CodeIntegrity:
===============
Date: 2025-07-26 09:59:41
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Avast Software\Avast\AvastSvc.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

BIOS: American Megatrends International, LLC. X1505ZA.309 03/15/2023
Motherboard: ASUSTeK COMPUTER INC. X1505ZA
Processor: 12th Gen Intel(R) Core(TM) i5-1235U
Percentage of memory in use: 55%
Total physical RAM: 16077.93 MB
Available physical RAM: 7167.58 MB
Total Virtual: 37581.93 MB
Available Virtual: 19860.91 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:475.41 GB) (Free:87.83 GB) (Model: NVMe Micron_2400_MTFDKBA512QFM) NTFS

\\?\Volume{0785b97e-933e-4282-ac54-52d3b01c2337}\ () (Fixed) (Total:1 GB) (Free:0.19 GB) NTFS
\\?\Volume{b9dffcfe-782f-4fae-b170-b67c2e2e978c}\ (MYASUS) (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32
\\?\Volume{0c4c20c6-0273-4438-9b43-02652bc963d8}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.2 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 9FA6E338)

Partition: GPT.

==================== End of Addition.txt =======================

OK. Zrychlil se cod PC?

Nieco malo ano, ale stale to nie je take svizne ako predtym...

OK Dejte tedy ještě log z ADW:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Your scan is complete

No items were detected on your system.


pise mi toto, nemam tam ani moznost "Clean and Repair"


Log:

# -------------------------------
# Malwarebytes AdwCleaner 8.5.1.601
# -------------------------------
# Build: 03-26-2025
# Database: 2025-04-04.3 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 07-26-2025
# Duration: 00:00:05
# OS: Windows 11 (Build 26100.4652)
# Scanned: 32099
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.


AdwCleaner[S00].txt - [1422 octets] - [26/07/2025 18:11:36]
AdwCleaner[S01].txt - [1483 octets] - [26/07/2025 18:12:10]
AdwCleaner[C01].txt - [1673 octets] - [26/07/2025 18:12:20]
AdwCleaner[S02].txt - [1605 octets] - [26/07/2025 18:13:02]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S03].txt ##########

OK, byl to nejspíš omyl WinDefu. PC je čistý. Pokud jste stáhl FRST v námi doporučeném odkazu, je vše v pořádku. Pokud ne, ověřte soubor na www.virustotal.com.

Stahoval som ho podla pokynov. Aktualne je to celkom fajn, nie je to uplne tip top, ale o dost lepsie Dakujem

Ještě lze defragmentovat disk. Možná se to o něco zlepší.

Tomu som sa chcel zatial vyhnut zatial je to v poriadku, keby sa zhorsilo, budem vediet co dalej mozme povazovat za vyriesene, dakujem

Nevím sice proč, defragmentace je pouhé seřazení clusterů za sebou, ale když nechcete, nebudu nutit. V tom přípedě je vyřešeno. Nemáte zač!