VIRY.CZ

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-10-2025
Ran by richa (20-10-2025 18:03:21)
Running from E:\
Microsoft Windows 11 Home Version 25H2 26200.6899 (X64) (2025-10-19 20:19:17)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-571482552-2726754193-3155429114-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-571482552-2726754193-3155429114-503 - Limited - Disabled)
Guest (S-1-5-21-571482552-2726754193-3155429114-501 - Limited - Disabled)
richa (S-1-5-21-571482552-2726754193-3155429114-1001 - Administrator - Enabled) => C:\Users\richa
WDAGUtilityAccount (S-1-5-21-571482552-2726754193-3155429114-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 141.0.7390.108 - Google LLC)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 141.0.3537.85 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 141.0.3537.85 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-571482552-2726754193-3155429114-1001\...\OneDriveSetup.exe) (Version: 25.184.0921.0004 - Microsoft Corporation)

Packages:
=========
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-10-20] (INTEL CORP) [Startup Task]
Balíček prostředí funkcí systému Windows -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.58683691.InpApp_cw5n1h2txyewy [2025-10-20] (Microsoft Windows)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.103.0_x64__8wekyb3d8bbwe [2025-10-19] (Microsoft Corp.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-571482552-2726754193-3155429114-1001_Classes\CLSID\{47E6DCAF-41F8-441C-BD0E-A50D5FE6C4D1}\localserver32 -> C:\Users\richa\AppData\Local\Microsoft\OneDrive\25.184.0921.0004\OneDrive.Sync.Service.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-571482552-2726754193-3155429114-1001_Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}\localserver32 -> C:\Users\richa\AppData\Local\Microsoft\OneDrive\25.184.0921.0004\OneDrive.Sync.Service.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [MidisrvTransferComplete] => 0

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============


==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2024-04-01 09:26 - 2024-04-01 09:24 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 10.0.1.138
Windows Firewall is enabled.

Network Binding:
=============
Wi-Fi: Intel(R) Dual Band Wireless-AC 7265 -> Netwtw04.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-571482552-2726754193-3155429114-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\DesktopSpotlight\Assets\Images\image_2.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{A27D2A23-074A-4670-B745-6BCBC34674E0}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25255.703.3978.7153_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B656B9DF-C9F1-4E57-A384-FF042E8828B9}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25255.703.3978.7153_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9A506FB1-F63C-4C43-8C10-4F3506C5C99A}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25255.703.3978.7153_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{140F195B-5BCA-4865-B369-78F7AB4C4AC5}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25255.703.3978.7153_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D9856EC7-440F-4917-BC87-040417D9C191}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

20-10-2025 06:59:12 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices ============
Name: Základní systémové zařízení
Description: Základní systémové zařízení
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Řadič paměti na sběrnici PCI
Description: Řadič paměti na sběrnici PCI
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Řadič sběrnice SM
Description: Řadič sběrnice SM
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Řadič PCI pro získávání dat a zpracování signálu
Description: Řadič PCI pro získávání dat a zpracování signálu
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Řadič PCI pro získávání dat a zpracování signálu
Description: Řadič PCI pro získávání dat a zpracování signálu
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Řadič jednoduché komunikace pro sběrnici PCI
Description: Řadič jednoduché komunikace pro sběrnici PCI
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: ========================

Application errors:
==================
Error: (10/20/2025 05:48:12 PM) (Source: Application Error) (EventID: 1000) (User: MATKA)
Description: Název chybující aplikace: Microsoft.Lightbox.exe, verze: 0.0.0.0, časové razítko: 0x66a00502
Název chybujícího modulu: twinapi.appcore.dll, verze: 10.0.26100.6725, časové razítko: 0xac9d6402
Kód výjimky: 0xc000027b
Posun chyby: 0x0000000000071183
ID chybujícího procesu: 0x2898
Čas spuštění chybující aplikace: 0x1dc41d6b6495bcf
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe\Microsoft.Lightbox.exe
Cesta k chybujícímu modulu: C:\Windows\System32\twinapi.appcore.dll
ID sestavy: d053437b-1e55-487a-9424-89c74ac43cd0
Celý název chybujícího balíčku: Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe
ID chybující aplikace relativní vzhledem k balíčku: App

Error: (10/19/2025 08:10:37 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Při aktualizaci stavu Windows Defender na SECURITY_PRODUCT_STATE_ON došlo k chybě.

Error: (10/19/2025 08:08:02 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro WORKGROUP\WIN-8EDD36NTA0B$ přes https://INTC-KeyId-6ca9df62a1aae23e0feb ... s/Aik/scep se nepovedla:

GetCACaps

Metoda: GET(547ms)
Fáze: GetCACaps
Nelze rozpoznat název nebo adresu serveru. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (10/19/2025 08:08:01 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro Místní systém přes https://INTC-KeyId-6ca9df62a1aae23e0feb ... s/Aik/scep se nepovedla:

GetCACaps

Metoda: GET(1156ms)
Fáze: GetCACaps
Nelze rozpoznat název nebo adresu serveru. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)


System errors:
=============
Error: (10/20/2025 05:18:13 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Intel(R) Content Protection HECI Service byla ukončena s následující chybou:
Nespecifikovaná chyba

Error: (10/20/2025 04:50:28 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9PC1H9VN18CM-Microsoft.StartExperiencesApp.

Error: (10/20/2025 04:41:33 PM) (Source: DCOM) (EventID: 10010) (User: MATKA)
Description: Server {94269C4E-071A-4116-90E6-52E557067E4E} se v daném časovém limitu neregistroval u služby DCOM.

Error: (10/20/2025 04:39:33 PM) (Source: DCOM) (EventID: 10010) (User: MATKA)
Description: Server {94269C4E-071A-4116-90E6-52E557067E4E} se v daném časovém limitu neregistroval u služby DCOM.

Error: (10/20/2025 04:38:59 PM) (Source: DCOM) (EventID: 10010) (User: MATKA)
Description: Server {F4DF18B4-A2CF-4B0A-8D62-954CD6AD2E33} se v daném časovém limitu neregistroval u služby DCOM.

Error: (10/20/2025 04:35:39 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x8024200b): Aktualizace pro Microsoft Defender Antivirus antimalwarovou platformu – KB4052623 (verze 4.18.25080.5) – Aktuální kanál (široká distribuce).

Error: (10/20/2025 04:26:23 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Intel(R) Content Protection HECI Service byla ukončena s následující chybou:
Nespecifikovaná chyba

Error: (10/20/2025 04:02:21 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba cphs byla ukončena s následující chybou:
Nespecifikovaná chyba


Windows Defender:
================
Date: 2025-10-20 07:37:35
Description:
Antivirová ochrana v programu Microsoft Defender šĉàŋ ђåŝ ъėëп şţǿрρєđ ъεƒõŕė ςόмφℓеŧιοл.%ñ %ŧЅċǻⁿ ĨĎ:%ъ{867EF914-AAA0-4AA1-BF89-F6E209DC03D4}%и %ţŠ¢åή Ŧγρэ:%ьAntimalwarový program%ñ %τŜčдⁿ Рâŕǻмет℮гş:%ъRychlé prohledávání%л %тŮŝέя:%ъNT AUTHORITY\SYSTEM%ⁿ %ţŞťορ Ŗèǻśõп:%в%12

CodeIntegrity:
===============
Date: 2025-10-20 16:07:02
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

BIOS: American Megatrends Inc. R01-A4 10/16/2017
Motherboard: Acer Aspire U27-880
Processor: Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
Percentage of memory in use: 32%
Total physical RAM: 16297.54 MB
Available physical RAM: 10982.28 MB
Total Virtual: 19241.54 MB
Available Virtual: 14104.36 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:930.95 GB) (Free:873.06 GB) (Model: Intel Optane+1.8TBHDD) (Protected) NTFS
Drive d: (Data) (Fixed) (Total:930.95 GB) (Free:930.74 GB) (Model: Intel Optane+1.8TBHDD) (Protected) NTFS
Drive e: (Powerbank) (Fixed) (Total:465.76 GB) (Free:453.39 GB) (Model: Samsung Portable SSD T5 SCSI Disk Device) NTFS

\\?\Volume{7f97095f-339d-4406-98f4-37099ceb1ff9}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.36 GB) NTFS
\\?\Volume{f544aee5-dec3-4524-aad2-221ed0002977}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 1863 GB) (Disk ID: 980F310D)

Partition: GPT.

==========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: DDE7751E)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

Zdravím!
Toto je pouze log Addition. K celkové kontrole potřebuji ještě vidět log FRST. Je v souboru E:\ frst.txt. Děkuji. Pravděpodobně to nebude SW problém, když ván čistá instalace běží pomalu. Uvidíme.

Díky posílám ZIP

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2

EmptyTemp:
End

Uložte do E:\ jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 11-10-2025
Ran by richa (20-10-2025 20:01:48) Run:2
Running from C:\
Loaded Profiles: richa
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
Could not move "C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2" => Scheduled to move on reboot.

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 12674823 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 99810 B
Edge => 0 B
Chrome => 84919416 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 1102 B
richa => 290307090 B

RecycleBin => 0 B
EmptyTemp: => 371.3 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 20-10-2025 20:05:17)

C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 => Could not move

==== End of Fixlog 20:05:17 ====

Vše smazáno. Nastala nějaká změna?

Díky moc...sice to není jako dřív, ale funguje. Ještě jednou díky:))))

Rádo se stalo!