Prevenčka
Napsal: 20 lis 2025 11:43
Dík za zkouknutí.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-11-2025
Ran by Lenovo (administrator) on LENOVO-PC (MSI MS-7715) (20-11-2025 09:30:35)
Running from C:\Users\Lenovo\Desktop\Documents\Downloads\FRST64 (1).exe
Loaded Profiles: Lenovo
Platform: Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) Language: Čeština (Česko)
Default browser: "C:\Users\Lenovo\AppData\Local\Programs\Opera\opera.exe" -noautoupdate -- "%1"
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe ->) (Nokia -> Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe
(C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe ->) (Nokia -> Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\wa_3rd_party_host_32.exe
(C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\wa_3rd_party_host_64.exe
(C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\wpscloudsvr.exe ->) (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\wpscenter.exe
(C:\Users\Lenovo\MediaGet2\mediaget.exe ->) (Global Microtrading PTE. LTD -> ) C:\Users\Lenovo\MediaGet2\mediaget_crashpad_handler.exe
(C:\Users\Lenovo\MediaGet2\mediaget.exe ->) (The Qt Company Oy -> The Qt Company Ltd.) C:\Users\Lenovo\MediaGet2\QtWebEngineProcess.exe
(explorer.exe ->) (Adguard Software Limited -> Adguard Software Limited) C:\Program Files\AdGuard\Adguard.exe
(explorer.exe ->) (Global Microtrading PTE. LTD -> MediaGet) C:\Users\Lenovo\MediaGet2\mediaget.exe
(explorer.exe ->) (Infatica Pte. Ltd. -> ) C:\Users\Lenovo\AppData\Local\Infatica-m\infatica-service-app.exe
(explorer.exe ->) (Nokia -> Nokia) C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <11>
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\25.209.1026.0002\OneDrive.Sync.Service.exe
(Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
(services.exe ->) (Adguard Software Limited -> Adguard Software Limited) C:\Program Files\AdGuard\AdguardSvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (Hewlett-Packard Company) [File not signed] C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\NisSrv.exe
(services.exe ->) (Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(services.exe ->) (Nokia -> Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\wpscloudsvr.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11663976 2010-12-09] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [Adguard] => C:\Program Files\AdGuard\Adguard.exe [7439448 2025-11-06] (Adguard Software Limited -> Adguard Software Limited)
HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [OpwareSE4] => C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4742504 2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Run: [Opera Browser Assistant] => C:\Users\Lenovo\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3996064 2024-03-04] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Run: [MediaGet2] => C:\Users\Lenovo\MediaGet2\mediaget.exe [12460832 2025-02-14] (Global Microtrading PTE. LTD -> MediaGet)
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Run: [Infatica-m] => C:\Users\Lenovo\AppData\Local\Infatica-m\infatica-service-app.exe [7635008 2025-02-14] (Infatica Pte. Ltd. -> )
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Run: [PC Suite Tray] => C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [1516632 2012-06-26] (Nokia -> Nokia)
HKLM\...\Windows x64\Print Processors\BJ Print Processor3: C:\Windows\System32\spool\prtprocs\x64\CNBPP3.DLL [83968 2009-07-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MP140 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD8R.DLL [27648 2007-03-19] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\SXP3MPC: C:\Windows\System32\spool\prtprocs\x64\sxp3mpc.dll [33792 2009-04-07] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Server 2003 DDK provider)
HKLM\...\Print\Monitors\BJ Language Monitor3_2: C:\WINDOWS\system32\CNBLM3_2.DLL [211456 2009-07-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP140 series: C:\WINDOWS\system32\CNMLM8R.DLL [259584 2008-02-06] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HP D811 Status Monitor: C:\WINDOWS\system32\hpinkstsD811LM.dll [393352 2017-04-05] (Hewlett Packard -> HP Inc.)
HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\WINDOWS\system32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [File not signed]
HKLM\...\Print\Monitors\SXP3M Langmon: C:\WINDOWS\system32\sxp3ml6.dll [34304 2012-11-05] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2025-11-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\142.0.7444.135\Installer\chrmstp.exe [2025-11-11] (Google LLC -> Google LLC)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {39AB4F37-D89A-4BE8-9609-639B2E72129E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1581568 2025-08-24] (Adobe Inc. -> Adobe Inc.)
Task: {A299D11A-F66B-4007-8FE9-3E8150671D5C} - System32\Tasks\DriverDoc automatic scan and new device notifications => "C:\Program Files (x86)\DriverDoc\DriverDoc.exe" -> C:\Program Files (x86)\DriverDoc\/TRAY
Task: {80878FCC-FDE3-4082-BE9A-4AE14333CE2C} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem143.0.7482.0{9A084E1A-CCFA-4148-A4EB-DD91C89CFF7A} => C:\Program Files (x86)\Google\GoogleUpdater\143.0.7482.0\updater.exe [6933656 2025-10-19] (Google LLC -> Google LLC)
Task: {9EF41F19-122C-4997-B57C-966E6BB717EA} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {6050D49F-17DE-45C1-8A5C-21D11EBBA024} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {07B96812-63BB-4877-A34C-CC5AB48E7D0F} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {FD440D88-5057-4325-8664-AEB10EDCFF52} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {E7AC415B-182A-48E8-B522-0BD1BF2E25B5} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {4A45B593-DE29-4C44-AC31-007FED3B2463} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MpCmdRun.exe [1790656 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A00AFFA3-9321-4272-99A5-F18A450E7A07} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MpCmdRun.exe [1790656 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5FD1AFD1-8D28-4F06-A7F6-23A9C4D46E73} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MpCmdRun.exe [1790656 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {496AF9CD-A5F4-4049-8D82-8BC8F300D99F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MpCmdRun.exe [1790656 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {239596E7-9B86-443D-B9F5-360D8B615365} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4380008 2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {FDEBFE22-7E3E-4936-9C92-78387044E36F} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2823961219-2258955507-3959890628-1000 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4380008 2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {899195BD-6D5E-4502-BF56-3E6B3C1550ED} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2823961219-2258955507-3959890628-1000 => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\OneDriveLauncher.exe [727440 2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {34AC13C1-E8A8-4349-A045-637C0E712774} - System32\Tasks\Opera scheduled assistant Autoupdate 1643891105 => C:\Users\Lenovo\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Lenovo\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {A856B234-0976-47EC-991E-463BFEF749A9} - System32\Tasks\Opera scheduled Autoupdate 1643891091 => C:\Users\Lenovo\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5078488 2025-11-04] (Opera Norway AS -> Opera Software)
Task: {7620A4FA-0FA7-4AE0-9EE9-EC56186934A7} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-2823961219-2258955507-3959890628-1000 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [4771960 2025-11-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {914C54AF-4A9B-41D3-8BDD-35F69F482361} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [6274680 2025-11-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {769915E5-92DA-46BE-826E-4DF8FA064164} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [9173216 2025-11-14] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {74F0BDCD-9CC8-4FCC-B133-141E45EBB905} - System32\Tasks\WpsExternal_Lenovo_20250214162103 => C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\wpscloudsvr.exe [936832 2025-02-14] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) -> /wpscloudlaunch /run_plugin /plugin_name=ktaskschdtool /plugin_entry=ktaskschdtool.dll /task=wpsexternal /launchtask /ver=1.0 /start_from=task_external
Task: {7B33A0B5-8026-4275-B59E-7F1318770EF4} - System32\Tasks\WpsUpdateTask_Lenovo => C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\wpsupdate.exe [1681792 2025-02-14] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.1.0.3 8.8.8.8
Tcpip\..\Interfaces\{d081df5c-85b2-4c5f-8ee5-3048165e77bb}: [DhcpNameServer] 10.1.0.3 8.8.8.8
Tcpip\..\Interfaces\{d3358969-571c-448e-9359-65060b2e9eb9}: [DhcpNameServer] 10.1.0.3 8.8.8.8
Edge:
=======
Edge Profile: C:\Users\Lenovo\AppData\Local\Microsoft\Edge\User Data\Default [2025-09-15]
Edge Extension: (Dokumenty Google offline) - C:\Users\Lenovo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-17]
Edge Extension: (Music New Tab) - C:\Users\Lenovo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hfamgdphmadpbopjpnjeclijgabhmeml [2023-12-19]
Edge Extension: (Edge relevant text changes) - C:\Users\Lenovo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
FireFox:
========
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-10-31] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
Chrome:
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Guest Profile [2025-09-15]
CHR Profile: C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-11-20]
CHR Notifications: Profile 1 -> hxxps://10stastnych.kontrola-tiketu.com; hxxps://aukro.cz; hxxps://cs.kentoya-club.com; hxxps://cs.soringpcrepair.com; hxxps://cz.gearbest.com; hxxps://cz.sputniknews.com; hxxps://cz10.herozerogame.com; hxxps://cz2.forgeofempires.com; hxxps://cz4.forgeofempires.com; hxxps://de-film.com; hxxps://epohledavky.cz; hxxps://etechblog.cz; hxxps://gijonmotoweekend.com; hxxps://greattypecaptcha.top; hxxps://krkonossky.denik.cz; hxxps://larcoancillarae.com; hxxps://notify-master.net; hxxps://octaviaclub.cz; hxxps://paratmagazine.com; hxxps://personal-video.live; hxxps://pixers.cz; hxxps://taksidomodedovo.com; hxxps://upcr.cz; hxxps://www.amateri.com; hxxps://www.bandsintown.com; hxxps://www.benaughty.com; hxxps://www.ceske-kurvicky.cz; hxxps://www.chance.cz; hxxps://www.conrad.cz; hxxps://www.csai.canon.com; hxxps://www.em.muni.cz; hxxps://www.heavengifts.com; hxxps://www.ireport.cz; hxxps://www.kalhotkomat.cz; hxxps://www.kosik.cz; hxxps://www.kupi.cz; hxxps://www.lui.cz; hxxps://www.megaknihy.cz; hxxps://www.mesec.cz; hxxps://www.tomtom.com; hxxps://www.usa.canon.com; hxxps://www.viry.cz; hxxps://www.vitalia.cz; hxxps://www.vivantis.cz; hxxps://www.wps.com; hxxps://www2.thefastpush.com; hxxps://y2down.cc
CHR DefaultSearchURL: Profile 1 -> hxxps://search.seznam.cz/?q={searchTerms}
CHR DefaultSearchKeyword: Profile 1 -> seznam.cz
CHR DefaultNewTabURL: Profile 1 -> hxxps://search.seznam.cz/?sourceid=chromechoice
CHR DefaultSuggestURL: Profile 1 -> hxxps://suggest.seznam.cz/fulltext_ff?phrase={searchTerms}
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-01]
CHR Profile: C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\System Profile [2025-09-15]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR DefaultProfile: Default
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 Adguard Service; C:\Program Files\AdGuard\AdguardSvc.exe [804952 2025-11-06] (Adguard Software Limited -> Adguard Software Limited)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174584 2025-08-24] (Adobe Inc. -> Adobe Inc.)
R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [28256888 2025-11-18] (Gen Digital Inc. -> Gen Digital Inc.)
R2 CIJSRegister; C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe [144784 2018-04-18] (Canon Inc. -> CANON INC.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncHelper.exe [3608936 2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
R2 HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [13824 2011-10-17] (Hewlett-Packard Company) [File not signed]
S2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [174592 2012-12-04] (HP) [File not signed]
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243720 2025-08-29] (HP Inc. -> HP Inc.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [446328 2023-09-13] (Canon Inc. -> )
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MpDefenderCoreService.exe [2026184 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.209.1026.0002\OneDriveUpdaterService.exe [3891560 2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803064 2025-10-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\NisSrv.exe [4414480 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MsMpEng.exe [282440 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [115928 2025-08-14] (Microsoft Windows Hardware Compatibility Publisher -> Adguard Software Limited)
R2 ASInsHelp; C:\WINDOWS\SysWow64\drivers\AsInsHelp64.sys [11832 2008-01-04] (ASUSTeK Computer Inc. -> )
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [File not signed]
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [333192 2025-11-07] (Microsoft Windows -> Microsoft Corporation)
R3 nmwcd; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [19968 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R3 nmwcdc; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [27136 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 nmwcdnsucx64; C:\WINDOWS\system32\drivers\nmwcdnsucx64.sys [12800 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 nmwcdnsux64; C:\WINDOWS\system32\drivers\nmwcdnsux64.sys [171008 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S2 SecDrv; C:\WINDOWS\SysWOW64\drivers\SECDRV.SYS [163644 2021-03-22] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]
R3 upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys [9216 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R3 UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltjx64.sys [9216 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20904 2025-11-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [629168 2025-11-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102792 2025-11-18] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
Error Reading file: "C:\ProgramData\Desktop\Nokia PC Suite.lnk"
Error Reading file: "C:\ProgramData\Desktop\desktop.ini"
Error Reading file: "C:\ProgramData\Desktop\CCleaner 7.lnk"
2025-11-08 13:02 - 2025-11-08 13:02 - 000000000 ____D C:\Users\Lenovo\AppData\Roaming\Adguard Software Limited
2025-10-22 04:34 - 2025-10-22 04:37 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-11-20 09:32 - 2024-03-18 06:00 - 000000000 ____D C:\FRST
2025-11-20 09:30 - 2025-06-03 16:14 - 000000000 ____D C:\ProgramData\Adguard
2025-11-20 09:04 - 2021-12-16 21:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-11-20 08:57 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-11-20 08:56 - 2020-01-14 20:32 - 000000000 ___RD C:\Users\Lenovo\OneDrive
2025-11-20 08:54 - 2025-05-18 17:07 - 000000000 ____D C:\ProgramData\NVIDIA
2025-11-20 08:54 - 2020-11-11 21:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-11-20 08:54 - 2020-11-11 20:56 - 000008192 ___SH C:\DumpStack.log.tmp
2025-11-20 08:53 - 2020-11-11 10:35 - 000000000 ____D C:\Users\Lenovo
2025-11-20 08:53 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2025-11-20 08:51 - 2020-04-15 14:15 - 000000000 ____D C:\Users\Lenovo\AppData\Local\CrashDumps
2025-11-20 08:12 - 2020-11-11 20:56 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-11-20 06:20 - 2021-04-14 20:35 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-11-20 06:00 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-11-20 06:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-11-19 06:18 - 2025-06-03 16:14 - 000000000 ____D C:\Program Files\AdGuard
2025-11-18 13:34 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-11-18 13:26 - 2020-01-14 19:01 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-11-17 16:19 - 2021-09-13 16:55 - 000000000 ____D C:\Users\Lenovo\AppData\Local\ElevatedDiagnostics
2025-11-17 16:01 - 2021-09-21 09:21 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-11-17 16:00 - 2025-01-13 16:02 - 000003552 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2823961219-2258955507-3959890628-1000
2025-11-17 16:00 - 2021-12-12 19:37 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2823961219-2258955507-3959890628-1000
2025-11-17 16:00 - 2021-09-21 09:21 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2025-11-17 16:00 - 2021-09-21 09:21 - 000002132 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-11-17 15:56 - 2020-11-11 21:11 - 001842280 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-11-17 15:56 - 2019-12-07 15:43 - 000750982 _____ C:\WINDOWS\system32\perfh005.dat
2025-11-17 15:56 - 2019-12-07 15:43 - 000162556 _____ C:\WINDOWS\system32\perfc005.dat
2025-11-17 15:56 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2025-11-12 16:57 - 2019-01-05 03:33 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-11-12 16:16 - 2019-01-05 03:33 - 215625816 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-11-12 16:06 - 2025-10-10 15:27 - 000056128 _____ (Gen Digital Inc.) C:\WINDOWS\system32\icarus_rvrt.exe
2025-11-11 10:48 - 2019-01-04 17:25 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-11-10 10:02 - 2024-02-05 09:18 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2025-11-08 13:01 - 2025-06-03 16:15 - 000001985 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdGuard.lnk
2025-11-08 13:01 - 2021-10-13 10:42 - 000000000 ____D C:\ProgramData\Package Cache
2025-11-08 08:49 - 2020-01-14 20:04 - 000000000 ____D C:\ProgramData\Packages
2025-11-08 08:49 - 2020-01-14 19:02 - 000000000 ____D C:\Users\Lenovo\AppData\Local\Packages
2025-11-08 08:47 - 2020-01-14 20:03 - 000000000 ____D C:\Users\Lenovo\AppData\Local\PlaceholderTileLogoFolder
2025-11-07 15:55 - 2024-07-29 15:26 - 000001450 _____ C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2025-11-07 15:55 - 2022-02-03 13:25 - 000004204 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1643891091
2025-11-03 16:13 - 2025-02-14 16:21 - 000000970 _____ C:\Users\Lenovo\infatica-service-app.dat
2025-11-03 16:10 - 2020-11-11 21:13 - 000003638 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-11-03 16:10 - 2020-11-11 21:13 - 000003512 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-10-27 19:06 - 2019-02-13 17:59 - 000000138 ____H C:\Users\Lenovo\Desktop\fssort.ini
2025-10-25 20:54 - 2023-10-09 15:12 - 000000000 ____D C:\Program Files\RUXIM
==================== Files in the root of some directories ========
2024-07-05 03:18 - 2024-07-05 03:18 - 000000259 _____ () C:\ProgramData\fontcacheev1.dat
2025-02-14 16:21 - 2025-11-03 16:13 - 000000970 _____ () C:\Users\Lenovo\infatica-service-app.dat
2024-10-28 14:36 - 2024-10-28 14:36 - 000000040 _____ () C:\Users\Lenovo\AppData\Roaming\cdr.ini
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-11-2025
Ran by Lenovo (20-11-2025 09:39:27)
Running from C:\Users\Lenovo\Desktop\Documents\Downloads
Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) (2020-11-11 20:14:14)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2823961219-2258955507-3959890628-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2823961219-2258955507-3959890628-503 - Limited - Disabled)
Guest (S-1-5-21-2823961219-2258955507-3959890628-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2823961219-2258955507-3959890628-1002 - Limited - Enabled)
Lenovo (S-1-5-21-2823961219-2258955507-3959890628-1000 - Administrator - Enabled) => C:\Users\Lenovo
WDAGUtilityAccount (S-1-5-21-2823961219-2258955507-3959890628-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AdGuard (HKLM\...\{F7E7F6C0-052C-4290-927B-97B6A6314405}) (Version: 7.22.5226.0 - Adguard Software Limited) Hidden
AdGuard (HKLM-x32\...\{14f1659b-0542-48bd-b599-05af0a72ce1e}) (Version: 7.20.4994.0 - Adguard Software Limited)
AdGuard (HKLM-x32\...\{87fe4172-04cd-4346-9260-e8acf7deeae2}) (Version: 7.22.5226.0 - Adguard Software Limited)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 25.001.20844 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601120}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Balíček ovladače systému Windows - Nokia Modem (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia)
Balíček ovladače systému Windows - Nokia Modem (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia)
Balíček ovladače systému Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.5.0.69 - Canon Inc.)
Canon Inkjet Printer Driver Add-On Module (HKLM\...\CANONIJINBOXADDON100) (Version: - )
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 6.5.2 - Canon Inc.)
Canon MP Navigator 3.1 (HKLM-x32\...\MP Navigator 3.1) (Version: - )
Canon MP140 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP140_series) (Version: - )
Canon Utilities Easy-LayoutPrint (HKLM-x32\...\Easy-LayoutPrint) (Version: - )
CanoScan LiDE 220 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4811) (Version: 1.04 - Canon Inc.)
CanoScan LiDE 300 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ2417S) (Version: 1.00 - Canon Inc.)
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.1.1066.1276 - Piriform)
CPUID HWMonitor 1.56 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.56 - CPUID, Inc.)
Express Burn Disc Burning Software (HKLM-x32\...\ExpressBurn) (Version: 12.00 - NCH Software)
FastStone Image Viewer 7.5 (HKLM-x32\...\FastStone Image Viewer) (Version: 7.5 - FastStone Soft)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 142.0.7444.135 - Google LLC)
Hardware-Editor v1.19.06.23 (HKLM-x32\...\{A4308941-42CD-4535-8320-FF71179289F4}_is1) (Version: 1.19.06.23 - Hardware Read & Write)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
HP Unified IO (HKLM\...\{30E20E5D-5E4E-4874-A35A-952DB3582C29}) (Version: 2.0.0.477 - HP) Hidden
HP Unified IO (HKLM-x32\...\{B1CB7E99-4685-45CB-867E-2FB58EDA0A39}) (Version: 2.0.0.477 - HP) Hidden
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
hppM125LaserJetService (HKLM-x32\...\{18D5B189-DBDD-4E57-A84B-58C7700E9BB0}) (Version: 001.032.00682 - Hewlett-Packard) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
MediaGet (HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\MediaGet) (Version: 3.01.4333 - Global Microtrading PTE. LTD)
Microsoft .NET Framework 4.7.2 (CSY) (HKLM\...\{F4C44834-E4FA-3DA9-B999-A30EC54E95B0}) (Version: 4.7.03062 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 (HKLM\...\{16735AF7-1D8D-3681-94A5-C578A61EC832}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 142.0.3595.90 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 142.0.3595.80 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 25.209.1026.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33135 (HKLM-x32\...\{c649ede4-f16a-4486-a117-dcc2f2a35165}) (Version: 14.38.33135.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35208 (HKLM-x32\...\{e90abaf0-d749-437b-ba99-cda1c84b6754}) (Version: 14.44.35208.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.38.33135 (HKLM\...\{19AFE054-CA83-45D5-A9DB-4108EF4BD391}) (Version: 14.38.33135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.38.33135 (HKLM\...\{AA0C8AB5-7297-4D46-A0D9-08096FE59E46}) (Version: 14.38.33135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35208 (HKLM-x32\...\{5A76FFAE-36C5-4648-80BD-4BB5B6E971F0}) (Version: 14.44.35208 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35208 (HKLM-x32\...\{491C67BA-2F2F-4A90-B9DD-4C76BFDBEA02}) (Version: 14.44.35208 - Microsoft Corporation) Hidden
Microsoft_VC100_CRT_SP1_x64 (HKLM\...\{680EDA59-9266-44B4-949E-0C24F65DFF82}) (Version: 10.0.40219.1 - Nokia) Hidden
Microsoft_VC100_CRT_SP1_x86 (HKLM-x32\...\{E3B64CC5-C011-40C0-92BC-7316CD5E5688}) (Version: 10.0.40219.1 - Nokia) Hidden
MixPad Multitrack Recording Software (HKLM-x32\...\MixPad) (Version: 12.15 - NCH Software)
MSVC80_x64_v2 (HKLM\...\{4D668D4F-FAA2-4726-834C-31F4614F312E}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (HKLM-x32\...\{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (HKLM\...\{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}) (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (HKLM-x32\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero BurnLite 10 (HKLM-x32\...\{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}) (Version: 10.0.10600 - Nero AG)
Nero BurnLite 10 (HKLM-x32\...\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}) (Version: 10.0.10500.5.100 - Nero AG)
Nero Control Center 10 (HKLM-x32\...\{6DFB899F-17A2-48F0-A533-ED8D6866CF38}) (Version: 10.0.13100.3.1 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (HKLM-x32\...\{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}) (Version: 1.0.10700 - Nero AG) Hidden
Nero Core Components 10 (HKLM-x32\...\{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}) (Version: 2.0.15100.0.1 - Nero AG) Hidden
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia PC Suite (HKLM-x32\...\{866C4563-ED53-43F3-A29D-8BEE2BD1BA3C}) (Version: 7.1.180.94 - Nokia) Hidden
Nokia PC Suite (HKLM-x32\...\Nokia PC Suite) (Version: 7.1.180.94 - Nokia)
NVIDIA Ovladač 3D Vision 388.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.13 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.35.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.35.1 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 388.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.13 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.17.13.7500 - NVIDIA Corporation) Hidden
OpenOffice 4.1.6 (HKLM-x32\...\{8DADDDBF-EB36-4D00-9291-8C281F1755A6}) (Version: 4.16.9790 - Apache Software Foundation)
Opera Stable 123.0.5669.47 (HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Opera 123.0.5669.47) (Version: 123.0.5669.47 - Opera Software)
PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 1.12.0016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6265 - Realtek Semiconductor Corp.)
Scan Navigator version 1.0.1 (HKLM-x32\...\{E5A06FCA-22F3-4CB8-9B85-B4CD3DFCC264}_is1) (Version: 1.0.1 - Dmitrijs Volkovs, Esmistudio)
ScanSoft OmniPage SE 4 (HKLM-x32\...\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}) (Version: 15.2.0020 - Nuance Communications, Inc.)
TomTom MyDrive Connect 4.5.0.5086 (HKLM-x32\...\MyDriveConnect) (Version: 4.5.0.5086 - TomTom)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VueScan x32 (HKLM-x32\...\VueScan x32) (Version: 9.8.29 - Hamrick Software)
VueScan x64 (HKLM\...\VueScan x64) (Version: 9.8.31 - Hamrick Software)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
WinRAR 5.61 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH)
WPS Office (12.2.0.19805) (HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Kingsoft Office) (Version: 12.2.0.19805 - Kingsoft Corp.)
Xerox Phaser 3140 and 3155 (HKLM-x32\...\Xerox Phaser 3140 and 3155) (Version: - )
Základní software zařízení HP DeskJet 4530 series (HKLM\...\{BC36C273-E8B5-4673-826C-13D8CA9458F6}) (Version: 40.11.1122.1796 - HP Inc.)
Zoner Photo Studio 11 (HKLM-x32\...\ZonerPhotoStudio11_CZ_is1) (Version: - ZONER software)
Packages:
=========
Adobe Acrobat Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC [2024-02-05] ()
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2023-05-11] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_161.1.1087.0_x64__v10z8vjag6ke6 [2025-08-29] (HP Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-11-25] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-11-25] (Microsoft Corporation) [MS Ad]
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_7.0.8.0_neutral__mcm4njqhnhss8 [2024-07-24] (Netflix, Inc.)
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-05-18] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8000.642.119.0_x64__8wekyb3d8bbwe [2025-10-20] (Microsoft Corp.)
Windows App Runtime DDLM 5001.373.1736.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.5001.373.1736.0-x6_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-05-18] (Microsoft Corporation)
Windows App Runtime DDLM 5001.373.1736.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.5001.373.1736.0-x8_5001.373.1736.0_x86__8wekyb3d8bbwe [2025-05-18] (Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000_Classes\CLSID\{28A80003-18FD-411D-B0A3-3C81F618E22B}\InprocServer32 -> C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\kwpsmenushellext64.dll (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)
CustomCLSID: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000_Classes\CLSID\{BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B}\InprocServer32 -> C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL (ZONER software) [File not signed]
CustomCLSID: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2025-09-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-10-27] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-2823961219-2258955507-3959890628-1000: [ kwpsshellext] -> {28A80003-18FD-411D-B0A3-3C81F618E22B} => C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\kwpsmenushellext64.dll [2025-02-14] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)
ContextMenuHandlers1_S-1-5-21-2823961219-2258955507-3959890628-1000: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL [2008-10-22] (ZONER software) [File not signed]
ContextMenuHandlers2_S-1-5-21-2823961219-2258955507-3959890628-1000: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL [2008-10-22] (ZONER software) [File not signed]
ContextMenuHandlers4_S-1-5-21-2823961219-2258955507-3959890628-1000: [ kwpsshellext] -> {28A80003-18FD-411D-B0A3-3C81F618E22B} => C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\kwpsmenushellext64.dll [2025-02-14] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)
ContextMenuHandlers4_S-1-5-21-2823961219-2258955507-3959890628-1000: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL [2008-10-22] (ZONER software) [File not signed]
ContextMenuHandlers6_S-1-5-21-2823961219-2258955507-3959890628-1000: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL [2008-10-22] (ZONER software) [File not signed]
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
ShortcutWithArgument: C:\Users\Lenovo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
==================== Loaded Modules (Whitelisted) =============
2025-02-14 16:20 - 2025-02-14 16:20 - 009400320 _____ () [File not signed] C:\Users\Lenovo\MediaGet2\opencv_core320.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000186880 _____ () [File not signed] C:\Users\Lenovo\MediaGet2\opencv_img_hash320.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 002482688 _____ () [File not signed] C:\Users\Lenovo\MediaGet2\opencv_imgcodecs320.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 019027456 _____ () [File not signed] C:\Users\Lenovo\MediaGet2\opencv_imgproc320.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000252416 _____ () [File not signed] C:\Users\Lenovo\MediaGet2\opencv_videoio320.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000384000 _____ () [File not signed] C:\Users\Lenovo\MediaGet2\sentry.dll
2019-01-04 17:15 - 2011-01-03 13:33 - 001892352 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 005635072 _____ (FFmpeg Project) [File not signed] C:\Users\Lenovo\MediaGet2\avcodec-58.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 001106432 _____ (FFmpeg Project) [File not signed] C:\Users\Lenovo\MediaGet2\avformat-58.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000356352 _____ (FFmpeg Project) [File not signed] C:\Users\Lenovo\MediaGet2\avutil-56.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000101376 _____ (FFmpeg Project) [File not signed] C:\Users\Lenovo\MediaGet2\swresample-3.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000412672 _____ (FFmpeg Project) [File not signed] C:\Users\Lenovo\MediaGet2\swscale-5.dll
2009-09-16 18:44 - 2009-09-16 18:44 - 000153088 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\hptcpmib.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000331264 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\HpTcpMon.dll
2009-09-16 11:44 - 2009-09-16 11:44 - 000132096 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\hpzjrd01.dll
2019-01-04 17:15 - 2011-01-03 13:27 - 000069632 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\StatusStrings.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000317440 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\System32\HPTcpMUI.dll
2012-06-26 12:08 - 2012-06-26 12:08 - 000026624 _____ (Nokia) [File not signed] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
2012-06-26 10:58 - 2012-06-26 10:58 - 001262592 _____ (Nokia) [File not signed] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\NGSCM64.DLL
2012-06-26 12:08 - 2012-06-26 12:08 - 000572928 _____ (Nokia) [File not signed] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
2007-02-05 09:29 - 2007-02-05 09:29 - 000139264 _____ (Nuance Communications, Inc.) [File not signed] C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpHookSE4.dll
2025-05-18 17:07 - 2017-10-27 17:06 - 000874368 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
2025-05-18 17:08 - 2017-10-27 17:06 - 000339256 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvStereo\_nvstapisvr64.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 002507264 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Users\Lenovo\MediaGet2\libcrypto-1_1.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000530432 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Users\Lenovo\MediaGet2\libssl-1_1.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 076519424 _____ (The Qt Company Ltd.) [File not signed] C:\Users\Lenovo\MediaGet2\Qt5WebEngineCore.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {1155093D-28E3-4655-916A-067D21C1732E} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {1D79FECB-177B-474E-9C57-B5B94795722C} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {2DE3638D-0624-43AE-96E8-A18B653B1574} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {3D5982EA-1FF5-4600-94A9-0B03B43E828A} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {712FB5B0-3020-4D5E-9D05-FE78FE966601} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {75C7BD75-C432-4D88-BDF6-E5A529FDE99B} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {8C94B53D-98D1-4E4C-B534-EEB3BAB82A3C} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {8F76201C-6C45-4E54-92FF-757C2F4EA9A2} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {E5144121-9728-4A84-B827-847E69448894} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_37180
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 10.1.0.3 - 8.8.8.8
Windows Firewall is enabled.
Network Binding:
=============
Ethernet 2: Realtek PCIe GBE Family Controller #2 -> Rt64win7.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lenovo\Desktop\Banished-By-Sin-Deicide.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{FAD3FE37-8B1E-496F-B89F-06408514DF05}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{9EA86F62-07DF-4624-816B-05BF73CBB701}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{36706A92-05DB-487C-BF51-AD958450C94A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{12EC4EBA-4E31-426B-935C-3915A2C95F41}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{3E282DC8-669C-4D70-9399-75C36DC50325}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{0FFEBD8C-1954-4FE3-B0B7-AF474E772D73}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{EBB33629-34EF-4DEF-9A3A-D0059AA2F4CE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{CAC713E0-422D-4EA8-BB34-AFEF8F8FE15A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{CAD3E29C-EFDE-4C1B-BD89-AE44C3A866BE}] => (Allow) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe (TomTom International B.V. -> TomTom)
FirewallRules: [TCP Query User{0C898222-C058-4D2D-8B5E-D5A689E6C900}C:\users\lenovo\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\lenovo\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{4D6CBB6F-4163-409E-9FD2-2585DC69122D}C:\users\lenovo\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\lenovo\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{7C9C14A8-74A3-42A7-9E94-0420BD7F9438}] => (Allow) C:\Program Files\HP\HP DeskJet 4530 series\Bin\DeviceSetup.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{85AD64A8-5D98-4570-9D50-6DE50999B4C3}] => (Allow) LPort=5357
FirewallRules: [{191F044C-F064-4FF9-89A6-C2A208E0773A}] => (Allow) C:\Program Files\HP\HP DeskJet 4530 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [TCP Query User{E23BB6B7-7F0E-4827-BB7A-CCAD188EB180}C:\users\lenovo\appdata\local\programs\opera\opera.exe] => (Block) C:\users\lenovo\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{BFE03276-7E9A-49BA-8A11-BC73CBCA4D4D}C:\users\lenovo\appdata\local\programs\opera\opera.exe] => (Block) C:\users\lenovo\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{5ADF4BEB-5084-496E-8A2F-1F888667167F}] => (Allow) C:\Program Files\VueScan\vuescan.exe (Hamrick Software -> Hamrick Software)
FirewallRules: [{3CCD5389-CF85-4959-92AF-7EBFF1A62A32}] => (Allow) C:\Program Files\VueScan\vuescan.exe (Hamrick Software -> Hamrick Software)
FirewallRules: [{8970D6E0-987C-48D5-853C-F14C8C1B26EF}] => (Allow) C:\Users\Lenovo\MediaGet2\mediaget.exe (Global Microtrading PTE. LTD -> MediaGet)
FirewallRules: [{A7EF330D-D04B-4CD3-A32A-F8128C805D98}] => (Allow) C:\Users\Lenovo\MediaGet2\mediaget.exe (Global Microtrading PTE. LTD -> MediaGet)
FirewallRules: [{E0CC2039-B5EB-4D22-BCC2-1A809180C81C}] => (Allow) C:\Users\Lenovo\MediaGet2\QtWebEngineProcess.exe (The Qt Company Oy -> The Qt Company Ltd.)
FirewallRules: [{E586C503-42A6-44CD-9283-02D995EE2D41}] => (Allow) C:\Users\Lenovo\MediaGet2\QtWebEngineProcess.exe (The Qt Company Oy -> The Qt Company Ltd.)
FirewallRules: [{B22AFF0D-C655-480E-B0F8-B7E26B24635D}] => (Allow) C:\Program Files\AdGuard\AdguardSvc.exe (Adguard Software Limited -> Adguard Software Limited)
FirewallRules: [{E3001AA5-FDFF-42A0-874C-B62326F522FA}] => (Allow) C:\Program Files\AdGuard\Adguard.Launcher.exe (Adguard Software Limited -> Adguard Software Limited)
FirewallRules: [{D308AE20-CB30-4C89-BD45-1BDBA5480A80}] => (Allow) C:\Program Files\AdGuard\Adguard.Launcher.Arm64.exe (Adguard Software Limited -> Adguard Software Limited)
FirewallRules: [{F95D894F-5F45-42F5-97FB-6A183D27C71C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Restore Points =========================
03-11-2025 17:33:59 Naplánovaný kontrolní bod
08-11-2025 13:10:02 Installed Sys Information.
08-11-2025 13:29:30 Removed Sys Information.
12-11-2025 17:29:49 Instalační služba modulů systému Windows
12-11-2025 18:05:42 Instalační služba modulů systému Windows
18-11-2025 13:32:29 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (11/17/2025 05:16:21 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na (C:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/17/2025 04:56:29 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Rezervováno systémem, protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/17/2025 04:38:20 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Rezervováno systémem, protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/17/2025 04:19:09 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Rezervováno systémem, protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/12/2025 10:01:35 PM) (Source: WAS-LA) (EventID: 7005) (User: )
Description: Protokol adaptéru naslouchání net.pipe se pokusil komunikovat s aktivační službou procesů systému Windows, ale komunikace se nezdařila. Adaptér naslouchání se nyní nachází ve špatném stavu. Příčina: Důvodem jsou potíže s nedostatkem paměti nebo selhání aktivační služby procesů systému Windows či adaptéru naslouchání. Oprava: Chcete-li tuto podmínku opravit, ukončete adaptér naslouchání, následně zastavte aktivační službu procesů systému Windows, restartujte aktivační službu a nakonec znovu spusťte adaptér naslouchání.
Error: (11/12/2025 09:58:49 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
Error: (11/12/2025 09:58:49 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (11/12/2025 09:58:49 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
System errors:
=============
Error: (11/20/2025 08:59:19 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
Description: Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:MSI;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:V10.7;OEMModelBaseBoard:870S-C45(FX) (MS-7715);OEMManufacturerName:MSI;OSArchitecture:amd64;
BucketId: fe1a67de1c6888eba224fc195d576e4d95ad3eec822aee2f1b1707cfea173962
BucketConfidenceLevel:
UpdateType: 0
HResult: 0
Error: (11/20/2025 08:57:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (11/20/2025 08:57:13 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (120000 ms).
Error: (11/20/2025 08:54:19 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba SecDrv neuspěla při spuštění v důsledku následující chyby:
Načtení tohoto ovladače je blokováno.
Error: (11/20/2025 08:54:19 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\WINDOWS\SysWow64\drivers\SECDRV.SYS
Error: (11/20/2025 05:58:20 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
Description: Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:MSI;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:V10.7;OEMModelBaseBoard:870S-C45(FX) (MS-7715);OEMManufacturerName:MSI;OSArchitecture:amd64;
BucketId: fe1a67de1c6888eba224fc195d576e4d95ad3eec822aee2f1b1707cfea173962
BucketConfidenceLevel:
UpdateType: 0
HResult: 0
Error: (11/20/2025 05:56:44 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (11/20/2025 05:56:44 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (120000 ms).
Windows Defender:
================
Date: 2025-11-19 13:57:03
Description:
Antivirová ochrana v programu Microsoft Defender šċąή ħаѕ ъёёи ѕťθрρёð ьеƒθяė ĉõмρļěťīθή.%ŋ %тŜċăи ΪÐ:%в{2591313E-CE00-4B42-AFBA-0968622A08E1}%й %ťŠ¢ąņ Ťŷрέ:%ьAntimalwarový program%й %ţŚćдл Ρдгâmεтзřš:%вRychlé prohledávání%й %ŧŪšёг:%вNT AUTHORITY\SYSTEM%и %ŧŚтθр Ŗēαŝøŋ:%ъŠčђёďûľзδ śćªŋ шâš şќïрφėð ьє¢аűšέ ŧħë ŀåşŧ śцčċεśšƒцļ ѕčαη щăś ώίŧнΐп ťћз ļąšт 7 ďдỳş
Date: 2025-11-18 14:30:59
Description:
Antivirová ochrana v programu Microsoft Defender šċąή ħаѕ ъёёи ѕťθрρёð ьеƒθяė ĉõмρļěťīθή.%ŋ %тŜċăи ΪÐ:%в{24E05CC0-96C8-46CC-BCA9-99A843009970}%й %ťŠ¢ąņ Ťŷрέ:%ьAntimalwarový program%й %ţŚćдл Ρдгâmεтзřš:%вRychlé prohledávání%й %ŧŪšёг:%вNT AUTHORITY\SYSTEM%и %ŧŚтθр Ŗēαŝøŋ:%ъŠčђёďûľзδ śćªŋ шâš şќïрφėð ьє¢аűšέ ŧħë ŀåşŧ śцčċεśšƒцļ ѕčαη щăś ώίŧнΐп ťћз ļąšт 7 ďдỳş
Date: 2025-11-18 13:41:52
Description:
Antivirová ochrana v programu Microsoft Defender šċąή ħаѕ ъёёи ѕťθрρёð ьеƒθяė ĉõмρļěťīθή.%ŋ %тŜċăи ΪÐ:%в{676D1306-6D79-4C7B-83B8-861E52B69161}%й %ťŠ¢ąņ Ťŷрέ:%ьAntimalwarový program%й %ţŚćдл Ρдгâmεтзřš:%вRychlé prohledávání%й %ŧŪšёг:%вNT AUTHORITY\SYSTEM%и %ŧŚтθр Ŗēαŝøŋ:%ъŖΡС ćǿñη℮¢тїôл гύиďǿẃη
Date: 2025-11-17 16:56:27
Description:
Antivirová ochrana v programu Microsoft Defender šċąή ħаѕ ъёёи ѕťθрρёð ьеƒθяė ĉõмρļěťīθή.%ŋ %тŜċăи ΪÐ:%в{CB45062B-DB97-46AC-8A3F-127BCA5C8C3B}%й %ťŠ¢ąņ Ťŷрέ:%ьAntimalwarový program%й %ţŚćдл Ρдгâmεтзřš:%вRychlé prohledávání%й %ŧŪšёг:%вNT AUTHORITY\SYSTEM%и %ŧŚтθр Ŗēαŝøŋ:%ъŠсн℮ďŭŀèď šςàñ ωāŝ šќïφρéď ъёċαϋѕė τнĕ ľαŝт śμċ¢ěşśƒůŀ śςаʼn ẅāŝ ŵϊŧћíň ŧћē ĺàşτ 7 ďãŷŝ
Date: 2025-11-12 17:29:45
Description:
Antivirová ochrana v programu Microsoft Defender šċąή ħаѕ ъёёи ѕťθрρёð ьеƒθяė ĉõмρļěťīθή.%ŋ %тŜċăи ΪÐ:%в{F56B14D3-38EB-47B4-8B4E-182F07FF795F}%й %ťŠ¢ąņ Ťŷрέ:%ьAntimalwarový program%й %ţŚćдл Ρдгâmεтзřš:%вRychlé prohledávání%й %ŧŪšёг:%вNT AUTHORITY\SYSTEM%и %ŧŚтθр Ŗēαŝøŋ:%ъŠсн℮ďŭŀèď šςàñ ωāŝ šќïφρéď ъёċαϋѕė τнĕ ľαŝт śμċ¢ěşśƒůŀ śςаʼn ẅāŝ ŵϊŧћíň ŧћē ĺàşτ 7 ďãŷŝ
Event[0]:
Date: 2025-07-13 09:00:12
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.431.489.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25050.6
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Date: 2025-07-13 09:00:12
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.431.489.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25050.6
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Date: 2025-07-13 09:00:12
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.431.489.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25050.6
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Date: 2025-05-20 13:39:45
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.429.67.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25040.1
Kód chyby: 0x80070643
Popis chyby: Při instalaci došlo k závažné chybě.
Date: 2025-05-19 17:16:06
Description:
Microsoft Defender Antivirus narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.421.1958.0
Zdroj aktualizace: Microsoft Malware Protection Center
Typ bezpečnostních informací: AntiVirus
Typ aktualizace: Full
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25010.7
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
CodeIntegrity:
===============
Date: 2025-02-18 17:43:04
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\360\Total Security\safemon\SafeWrapper.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. V10.7 03/23/2012
Motherboard: MSI 870S-C45(FX) (MS-7715)
Processor: AMD Phenom(tm) II X4 955 Processor
Percentage of memory in use: 56%
Total physical RAM: 6143.18 MB
Available physical RAM: 2699.2 MB
Total Virtual: 12287.18 MB
Available Virtual: 8048.91 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:930.87 GB) (Free:842.71 GB) (Model: WDC WD10EZEX-08WN4A0 ATA Device) NTFS
Drive e: (EOS_DIGITAL) (Removable) (Total:14.92 GB) (Free:14.89 GB) FAT32
\\?\Volume{08e6c5c3-103a-11e9-9df1-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{4006168b-0000-0000-0000-d0bde8000000}\ () (Fixed) (Total:0.54 GB) (Free:0.12 GB) NTFS
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 4006168B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=558 MB) - (Type=27)
==========================================================
Disk: 1 (Protective MBR) (Size: 14.9 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-11-2025
Ran by Lenovo (administrator) on LENOVO-PC (MSI MS-7715) (20-11-2025 09:30:35)
Running from C:\Users\Lenovo\Desktop\Documents\Downloads\FRST64 (1).exe
Loaded Profiles: Lenovo
Platform: Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) Language: Čeština (Česko)
Default browser: "C:\Users\Lenovo\AppData\Local\Programs\Opera\opera.exe" -noautoupdate -- "%1"
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe ->) (Nokia -> Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe
(C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe ->) (Nokia -> Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\wa_3rd_party_host_32.exe
(C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\wa_3rd_party_host_64.exe
(C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\wpscloudsvr.exe ->) (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\wpscenter.exe
(C:\Users\Lenovo\MediaGet2\mediaget.exe ->) (Global Microtrading PTE. LTD -> ) C:\Users\Lenovo\MediaGet2\mediaget_crashpad_handler.exe
(C:\Users\Lenovo\MediaGet2\mediaget.exe ->) (The Qt Company Oy -> The Qt Company Ltd.) C:\Users\Lenovo\MediaGet2\QtWebEngineProcess.exe
(explorer.exe ->) (Adguard Software Limited -> Adguard Software Limited) C:\Program Files\AdGuard\Adguard.exe
(explorer.exe ->) (Global Microtrading PTE. LTD -> MediaGet) C:\Users\Lenovo\MediaGet2\mediaget.exe
(explorer.exe ->) (Infatica Pte. Ltd. -> ) C:\Users\Lenovo\AppData\Local\Infatica-m\infatica-service-app.exe
(explorer.exe ->) (Nokia -> Nokia) C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <11>
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\25.209.1026.0002\OneDrive.Sync.Service.exe
(Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
(services.exe ->) (Adguard Software Limited -> Adguard Software Limited) C:\Program Files\AdGuard\AdguardSvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (Hewlett-Packard Company) [File not signed] C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\NisSrv.exe
(services.exe ->) (Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(services.exe ->) (Nokia -> Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\wpscloudsvr.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11663976 2010-12-09] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [Adguard] => C:\Program Files\AdGuard\Adguard.exe [7439448 2025-11-06] (Adguard Software Limited -> Adguard Software Limited)
HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [OpwareSE4] => C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4742504 2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Run: [Opera Browser Assistant] => C:\Users\Lenovo\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3996064 2024-03-04] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Run: [MediaGet2] => C:\Users\Lenovo\MediaGet2\mediaget.exe [12460832 2025-02-14] (Global Microtrading PTE. LTD -> MediaGet)
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Run: [Infatica-m] => C:\Users\Lenovo\AppData\Local\Infatica-m\infatica-service-app.exe [7635008 2025-02-14] (Infatica Pte. Ltd. -> )
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Run: [PC Suite Tray] => C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [1516632 2012-06-26] (Nokia -> Nokia)
HKLM\...\Windows x64\Print Processors\BJ Print Processor3: C:\Windows\System32\spool\prtprocs\x64\CNBPP3.DLL [83968 2009-07-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MP140 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD8R.DLL [27648 2007-03-19] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\SXP3MPC: C:\Windows\System32\spool\prtprocs\x64\sxp3mpc.dll [33792 2009-04-07] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Server 2003 DDK provider)
HKLM\...\Print\Monitors\BJ Language Monitor3_2: C:\WINDOWS\system32\CNBLM3_2.DLL [211456 2009-07-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP140 series: C:\WINDOWS\system32\CNMLM8R.DLL [259584 2008-02-06] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HP D811 Status Monitor: C:\WINDOWS\system32\hpinkstsD811LM.dll [393352 2017-04-05] (Hewlett Packard -> HP Inc.)
HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\WINDOWS\system32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [File not signed]
HKLM\...\Print\Monitors\SXP3M Langmon: C:\WINDOWS\system32\sxp3ml6.dll [34304 2012-11-05] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2025-11-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\142.0.7444.135\Installer\chrmstp.exe [2025-11-11] (Google LLC -> Google LLC)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {39AB4F37-D89A-4BE8-9609-639B2E72129E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1581568 2025-08-24] (Adobe Inc. -> Adobe Inc.)
Task: {A299D11A-F66B-4007-8FE9-3E8150671D5C} - System32\Tasks\DriverDoc automatic scan and new device notifications => "C:\Program Files (x86)\DriverDoc\DriverDoc.exe" -> C:\Program Files (x86)\DriverDoc\/TRAY
Task: {80878FCC-FDE3-4082-BE9A-4AE14333CE2C} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem143.0.7482.0{9A084E1A-CCFA-4148-A4EB-DD91C89CFF7A} => C:\Program Files (x86)\Google\GoogleUpdater\143.0.7482.0\updater.exe [6933656 2025-10-19] (Google LLC -> Google LLC)
Task: {9EF41F19-122C-4997-B57C-966E6BB717EA} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {6050D49F-17DE-45C1-8A5C-21D11EBBA024} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {07B96812-63BB-4877-A34C-CC5AB48E7D0F} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {FD440D88-5057-4325-8664-AEB10EDCFF52} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {E7AC415B-182A-48E8-B522-0BD1BF2E25B5} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {4A45B593-DE29-4C44-AC31-007FED3B2463} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MpCmdRun.exe [1790656 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A00AFFA3-9321-4272-99A5-F18A450E7A07} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MpCmdRun.exe [1790656 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5FD1AFD1-8D28-4F06-A7F6-23A9C4D46E73} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MpCmdRun.exe [1790656 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {496AF9CD-A5F4-4049-8D82-8BC8F300D99F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MpCmdRun.exe [1790656 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {239596E7-9B86-443D-B9F5-360D8B615365} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4380008 2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {FDEBFE22-7E3E-4936-9C92-78387044E36F} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2823961219-2258955507-3959890628-1000 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4380008 2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {899195BD-6D5E-4502-BF56-3E6B3C1550ED} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2823961219-2258955507-3959890628-1000 => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\OneDriveLauncher.exe [727440 2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {34AC13C1-E8A8-4349-A045-637C0E712774} - System32\Tasks\Opera scheduled assistant Autoupdate 1643891105 => C:\Users\Lenovo\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Lenovo\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {A856B234-0976-47EC-991E-463BFEF749A9} - System32\Tasks\Opera scheduled Autoupdate 1643891091 => C:\Users\Lenovo\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5078488 2025-11-04] (Opera Norway AS -> Opera Software)
Task: {7620A4FA-0FA7-4AE0-9EE9-EC56186934A7} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-2823961219-2258955507-3959890628-1000 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [4771960 2025-11-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {914C54AF-4A9B-41D3-8BDD-35F69F482361} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [6274680 2025-11-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {769915E5-92DA-46BE-826E-4DF8FA064164} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [9173216 2025-11-14] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {74F0BDCD-9CC8-4FCC-B133-141E45EBB905} - System32\Tasks\WpsExternal_Lenovo_20250214162103 => C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\wpscloudsvr.exe [936832 2025-02-14] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) -> /wpscloudlaunch /run_plugin /plugin_name=ktaskschdtool /plugin_entry=ktaskschdtool.dll /task=wpsexternal /launchtask /ver=1.0 /start_from=task_external
Task: {7B33A0B5-8026-4275-B59E-7F1318770EF4} - System32\Tasks\WpsUpdateTask_Lenovo => C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\wpsupdate.exe [1681792 2025-02-14] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.1.0.3 8.8.8.8
Tcpip\..\Interfaces\{d081df5c-85b2-4c5f-8ee5-3048165e77bb}: [DhcpNameServer] 10.1.0.3 8.8.8.8
Tcpip\..\Interfaces\{d3358969-571c-448e-9359-65060b2e9eb9}: [DhcpNameServer] 10.1.0.3 8.8.8.8
Edge:
=======
Edge Profile: C:\Users\Lenovo\AppData\Local\Microsoft\Edge\User Data\Default [2025-09-15]
Edge Extension: (Dokumenty Google offline) - C:\Users\Lenovo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-17]
Edge Extension: (Music New Tab) - C:\Users\Lenovo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hfamgdphmadpbopjpnjeclijgabhmeml [2023-12-19]
Edge Extension: (Edge relevant text changes) - C:\Users\Lenovo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
FireFox:
========
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-10-31] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
Chrome:
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Guest Profile [2025-09-15]
CHR Profile: C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-11-20]
CHR Notifications: Profile 1 -> hxxps://10stastnych.kontrola-tiketu.com; hxxps://aukro.cz; hxxps://cs.kentoya-club.com; hxxps://cs.soringpcrepair.com; hxxps://cz.gearbest.com; hxxps://cz.sputniknews.com; hxxps://cz10.herozerogame.com; hxxps://cz2.forgeofempires.com; hxxps://cz4.forgeofempires.com; hxxps://de-film.com; hxxps://epohledavky.cz; hxxps://etechblog.cz; hxxps://gijonmotoweekend.com; hxxps://greattypecaptcha.top; hxxps://krkonossky.denik.cz; hxxps://larcoancillarae.com; hxxps://notify-master.net; hxxps://octaviaclub.cz; hxxps://paratmagazine.com; hxxps://personal-video.live; hxxps://pixers.cz; hxxps://taksidomodedovo.com; hxxps://upcr.cz; hxxps://www.amateri.com; hxxps://www.bandsintown.com; hxxps://www.benaughty.com; hxxps://www.ceske-kurvicky.cz; hxxps://www.chance.cz; hxxps://www.conrad.cz; hxxps://www.csai.canon.com; hxxps://www.em.muni.cz; hxxps://www.heavengifts.com; hxxps://www.ireport.cz; hxxps://www.kalhotkomat.cz; hxxps://www.kosik.cz; hxxps://www.kupi.cz; hxxps://www.lui.cz; hxxps://www.megaknihy.cz; hxxps://www.mesec.cz; hxxps://www.tomtom.com; hxxps://www.usa.canon.com; hxxps://www.viry.cz; hxxps://www.vitalia.cz; hxxps://www.vivantis.cz; hxxps://www.wps.com; hxxps://www2.thefastpush.com; hxxps://y2down.cc
CHR DefaultSearchURL: Profile 1 -> hxxps://search.seznam.cz/?q={searchTerms}
CHR DefaultSearchKeyword: Profile 1 -> seznam.cz
CHR DefaultNewTabURL: Profile 1 -> hxxps://search.seznam.cz/?sourceid=chromechoice
CHR DefaultSuggestURL: Profile 1 -> hxxps://suggest.seznam.cz/fulltext_ff?phrase={searchTerms}
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-01]
CHR Profile: C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\System Profile [2025-09-15]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR DefaultProfile: Default
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 Adguard Service; C:\Program Files\AdGuard\AdguardSvc.exe [804952 2025-11-06] (Adguard Software Limited -> Adguard Software Limited)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174584 2025-08-24] (Adobe Inc. -> Adobe Inc.)
R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [28256888 2025-11-18] (Gen Digital Inc. -> Gen Digital Inc.)
R2 CIJSRegister; C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe [144784 2018-04-18] (Canon Inc. -> CANON INC.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncHelper.exe [3608936 2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
R2 HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [13824 2011-10-17] (Hewlett-Packard Company) [File not signed]
S2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [174592 2012-12-04] (HP) [File not signed]
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243720 2025-08-29] (HP Inc. -> HP Inc.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [446328 2023-09-13] (Canon Inc. -> )
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MpDefenderCoreService.exe [2026184 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.209.1026.0002\OneDriveUpdaterService.exe [3891560 2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803064 2025-10-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\NisSrv.exe [4414480 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25100.9008-0\MsMpEng.exe [282440 2025-11-18] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [115928 2025-08-14] (Microsoft Windows Hardware Compatibility Publisher -> Adguard Software Limited)
R2 ASInsHelp; C:\WINDOWS\SysWow64\drivers\AsInsHelp64.sys [11832 2008-01-04] (ASUSTeK Computer Inc. -> )
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [File not signed]
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [333192 2025-11-07] (Microsoft Windows -> Microsoft Corporation)
R3 nmwcd; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [19968 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R3 nmwcdc; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [27136 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 nmwcdnsucx64; C:\WINDOWS\system32\drivers\nmwcdnsucx64.sys [12800 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 nmwcdnsux64; C:\WINDOWS\system32\drivers\nmwcdnsux64.sys [171008 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S2 SecDrv; C:\WINDOWS\SysWOW64\drivers\SECDRV.SYS [163644 2021-03-22] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]
R3 upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys [9216 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R3 UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltjx64.sys [9216 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20904 2025-11-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [629168 2025-11-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102792 2025-11-18] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
Error Reading file: "C:\ProgramData\Desktop\Nokia PC Suite.lnk"
Error Reading file: "C:\ProgramData\Desktop\desktop.ini"
Error Reading file: "C:\ProgramData\Desktop\CCleaner 7.lnk"
2025-11-08 13:02 - 2025-11-08 13:02 - 000000000 ____D C:\Users\Lenovo\AppData\Roaming\Adguard Software Limited
2025-10-22 04:34 - 2025-10-22 04:37 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-11-20 09:32 - 2024-03-18 06:00 - 000000000 ____D C:\FRST
2025-11-20 09:30 - 2025-06-03 16:14 - 000000000 ____D C:\ProgramData\Adguard
2025-11-20 09:04 - 2021-12-16 21:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-11-20 08:57 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-11-20 08:56 - 2020-01-14 20:32 - 000000000 ___RD C:\Users\Lenovo\OneDrive
2025-11-20 08:54 - 2025-05-18 17:07 - 000000000 ____D C:\ProgramData\NVIDIA
2025-11-20 08:54 - 2020-11-11 21:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-11-20 08:54 - 2020-11-11 20:56 - 000008192 ___SH C:\DumpStack.log.tmp
2025-11-20 08:53 - 2020-11-11 10:35 - 000000000 ____D C:\Users\Lenovo
2025-11-20 08:53 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2025-11-20 08:51 - 2020-04-15 14:15 - 000000000 ____D C:\Users\Lenovo\AppData\Local\CrashDumps
2025-11-20 08:12 - 2020-11-11 20:56 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-11-20 06:20 - 2021-04-14 20:35 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-11-20 06:00 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-11-20 06:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-11-19 06:18 - 2025-06-03 16:14 - 000000000 ____D C:\Program Files\AdGuard
2025-11-18 13:34 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-11-18 13:26 - 2020-01-14 19:01 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-11-17 16:19 - 2021-09-13 16:55 - 000000000 ____D C:\Users\Lenovo\AppData\Local\ElevatedDiagnostics
2025-11-17 16:01 - 2021-09-21 09:21 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-11-17 16:00 - 2025-01-13 16:02 - 000003552 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2823961219-2258955507-3959890628-1000
2025-11-17 16:00 - 2021-12-12 19:37 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2823961219-2258955507-3959890628-1000
2025-11-17 16:00 - 2021-09-21 09:21 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2025-11-17 16:00 - 2021-09-21 09:21 - 000002132 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-11-17 15:56 - 2020-11-11 21:11 - 001842280 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-11-17 15:56 - 2019-12-07 15:43 - 000750982 _____ C:\WINDOWS\system32\perfh005.dat
2025-11-17 15:56 - 2019-12-07 15:43 - 000162556 _____ C:\WINDOWS\system32\perfc005.dat
2025-11-17 15:56 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2025-11-12 16:57 - 2019-01-05 03:33 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-11-12 16:16 - 2019-01-05 03:33 - 215625816 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-11-12 16:06 - 2025-10-10 15:27 - 000056128 _____ (Gen Digital Inc.) C:\WINDOWS\system32\icarus_rvrt.exe
2025-11-11 10:48 - 2019-01-04 17:25 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-11-10 10:02 - 2024-02-05 09:18 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2025-11-08 13:01 - 2025-06-03 16:15 - 000001985 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdGuard.lnk
2025-11-08 13:01 - 2021-10-13 10:42 - 000000000 ____D C:\ProgramData\Package Cache
2025-11-08 08:49 - 2020-01-14 20:04 - 000000000 ____D C:\ProgramData\Packages
2025-11-08 08:49 - 2020-01-14 19:02 - 000000000 ____D C:\Users\Lenovo\AppData\Local\Packages
2025-11-08 08:47 - 2020-01-14 20:03 - 000000000 ____D C:\Users\Lenovo\AppData\Local\PlaceholderTileLogoFolder
2025-11-07 15:55 - 2024-07-29 15:26 - 000001450 _____ C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2025-11-07 15:55 - 2022-02-03 13:25 - 000004204 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1643891091
2025-11-03 16:13 - 2025-02-14 16:21 - 000000970 _____ C:\Users\Lenovo\infatica-service-app.dat
2025-11-03 16:10 - 2020-11-11 21:13 - 000003638 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-11-03 16:10 - 2020-11-11 21:13 - 000003512 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-10-27 19:06 - 2019-02-13 17:59 - 000000138 ____H C:\Users\Lenovo\Desktop\fssort.ini
2025-10-25 20:54 - 2023-10-09 15:12 - 000000000 ____D C:\Program Files\RUXIM
==================== Files in the root of some directories ========
2024-07-05 03:18 - 2024-07-05 03:18 - 000000259 _____ () C:\ProgramData\fontcacheev1.dat
2025-02-14 16:21 - 2025-11-03 16:13 - 000000970 _____ () C:\Users\Lenovo\infatica-service-app.dat
2024-10-28 14:36 - 2024-10-28 14:36 - 000000040 _____ () C:\Users\Lenovo\AppData\Roaming\cdr.ini
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-11-2025
Ran by Lenovo (20-11-2025 09:39:27)
Running from C:\Users\Lenovo\Desktop\Documents\Downloads
Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) (2020-11-11 20:14:14)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2823961219-2258955507-3959890628-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2823961219-2258955507-3959890628-503 - Limited - Disabled)
Guest (S-1-5-21-2823961219-2258955507-3959890628-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2823961219-2258955507-3959890628-1002 - Limited - Enabled)
Lenovo (S-1-5-21-2823961219-2258955507-3959890628-1000 - Administrator - Enabled) => C:\Users\Lenovo
WDAGUtilityAccount (S-1-5-21-2823961219-2258955507-3959890628-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AdGuard (HKLM\...\{F7E7F6C0-052C-4290-927B-97B6A6314405}) (Version: 7.22.5226.0 - Adguard Software Limited) Hidden
AdGuard (HKLM-x32\...\{14f1659b-0542-48bd-b599-05af0a72ce1e}) (Version: 7.20.4994.0 - Adguard Software Limited)
AdGuard (HKLM-x32\...\{87fe4172-04cd-4346-9260-e8acf7deeae2}) (Version: 7.22.5226.0 - Adguard Software Limited)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 25.001.20844 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601120}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Balíček ovladače systému Windows - Nokia Modem (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia)
Balíček ovladače systému Windows - Nokia Modem (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia)
Balíček ovladače systému Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.5.0.69 - Canon Inc.)
Canon Inkjet Printer Driver Add-On Module (HKLM\...\CANONIJINBOXADDON100) (Version: - )
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 6.5.2 - Canon Inc.)
Canon MP Navigator 3.1 (HKLM-x32\...\MP Navigator 3.1) (Version: - )
Canon MP140 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP140_series) (Version: - )
Canon Utilities Easy-LayoutPrint (HKLM-x32\...\Easy-LayoutPrint) (Version: - )
CanoScan LiDE 220 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4811) (Version: 1.04 - Canon Inc.)
CanoScan LiDE 300 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ2417S) (Version: 1.00 - Canon Inc.)
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.1.1066.1276 - Piriform)
CPUID HWMonitor 1.56 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.56 - CPUID, Inc.)
Express Burn Disc Burning Software (HKLM-x32\...\ExpressBurn) (Version: 12.00 - NCH Software)
FastStone Image Viewer 7.5 (HKLM-x32\...\FastStone Image Viewer) (Version: 7.5 - FastStone Soft)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 142.0.7444.135 - Google LLC)
Hardware-Editor v1.19.06.23 (HKLM-x32\...\{A4308941-42CD-4535-8320-FF71179289F4}_is1) (Version: 1.19.06.23 - Hardware Read & Write)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
HP Unified IO (HKLM\...\{30E20E5D-5E4E-4874-A35A-952DB3582C29}) (Version: 2.0.0.477 - HP) Hidden
HP Unified IO (HKLM-x32\...\{B1CB7E99-4685-45CB-867E-2FB58EDA0A39}) (Version: 2.0.0.477 - HP) Hidden
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
hppM125LaserJetService (HKLM-x32\...\{18D5B189-DBDD-4E57-A84B-58C7700E9BB0}) (Version: 001.032.00682 - Hewlett-Packard) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
MediaGet (HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\MediaGet) (Version: 3.01.4333 - Global Microtrading PTE. LTD)
Microsoft .NET Framework 4.7.2 (CSY) (HKLM\...\{F4C44834-E4FA-3DA9-B999-A30EC54E95B0}) (Version: 4.7.03062 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 (HKLM\...\{16735AF7-1D8D-3681-94A5-C578A61EC832}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 142.0.3595.90 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 142.0.3595.80 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 25.209.1026.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33135 (HKLM-x32\...\{c649ede4-f16a-4486-a117-dcc2f2a35165}) (Version: 14.38.33135.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35208 (HKLM-x32\...\{e90abaf0-d749-437b-ba99-cda1c84b6754}) (Version: 14.44.35208.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.38.33135 (HKLM\...\{19AFE054-CA83-45D5-A9DB-4108EF4BD391}) (Version: 14.38.33135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.38.33135 (HKLM\...\{AA0C8AB5-7297-4D46-A0D9-08096FE59E46}) (Version: 14.38.33135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35208 (HKLM-x32\...\{5A76FFAE-36C5-4648-80BD-4BB5B6E971F0}) (Version: 14.44.35208 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35208 (HKLM-x32\...\{491C67BA-2F2F-4A90-B9DD-4C76BFDBEA02}) (Version: 14.44.35208 - Microsoft Corporation) Hidden
Microsoft_VC100_CRT_SP1_x64 (HKLM\...\{680EDA59-9266-44B4-949E-0C24F65DFF82}) (Version: 10.0.40219.1 - Nokia) Hidden
Microsoft_VC100_CRT_SP1_x86 (HKLM-x32\...\{E3B64CC5-C011-40C0-92BC-7316CD5E5688}) (Version: 10.0.40219.1 - Nokia) Hidden
MixPad Multitrack Recording Software (HKLM-x32\...\MixPad) (Version: 12.15 - NCH Software)
MSVC80_x64_v2 (HKLM\...\{4D668D4F-FAA2-4726-834C-31F4614F312E}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (HKLM-x32\...\{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (HKLM\...\{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}) (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (HKLM-x32\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero BurnLite 10 (HKLM-x32\...\{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}) (Version: 10.0.10600 - Nero AG)
Nero BurnLite 10 (HKLM-x32\...\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}) (Version: 10.0.10500.5.100 - Nero AG)
Nero Control Center 10 (HKLM-x32\...\{6DFB899F-17A2-48F0-A533-ED8D6866CF38}) (Version: 10.0.13100.3.1 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (HKLM-x32\...\{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}) (Version: 1.0.10700 - Nero AG) Hidden
Nero Core Components 10 (HKLM-x32\...\{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}) (Version: 2.0.15100.0.1 - Nero AG) Hidden
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia PC Suite (HKLM-x32\...\{866C4563-ED53-43F3-A29D-8BEE2BD1BA3C}) (Version: 7.1.180.94 - Nokia) Hidden
Nokia PC Suite (HKLM-x32\...\Nokia PC Suite) (Version: 7.1.180.94 - Nokia)
NVIDIA Ovladač 3D Vision 388.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.13 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.35.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.35.1 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 388.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.13 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.17.13.7500 - NVIDIA Corporation) Hidden
OpenOffice 4.1.6 (HKLM-x32\...\{8DADDDBF-EB36-4D00-9291-8C281F1755A6}) (Version: 4.16.9790 - Apache Software Foundation)
Opera Stable 123.0.5669.47 (HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Opera 123.0.5669.47) (Version: 123.0.5669.47 - Opera Software)
PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 1.12.0016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6265 - Realtek Semiconductor Corp.)
Scan Navigator version 1.0.1 (HKLM-x32\...\{E5A06FCA-22F3-4CB8-9B85-B4CD3DFCC264}_is1) (Version: 1.0.1 - Dmitrijs Volkovs, Esmistudio)
ScanSoft OmniPage SE 4 (HKLM-x32\...\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}) (Version: 15.2.0020 - Nuance Communications, Inc.)
TomTom MyDrive Connect 4.5.0.5086 (HKLM-x32\...\MyDriveConnect) (Version: 4.5.0.5086 - TomTom)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VueScan x32 (HKLM-x32\...\VueScan x32) (Version: 9.8.29 - Hamrick Software)
VueScan x64 (HKLM\...\VueScan x64) (Version: 9.8.31 - Hamrick Software)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
WinRAR 5.61 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH)
WPS Office (12.2.0.19805) (HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\...\Kingsoft Office) (Version: 12.2.0.19805 - Kingsoft Corp.)
Xerox Phaser 3140 and 3155 (HKLM-x32\...\Xerox Phaser 3140 and 3155) (Version: - )
Základní software zařízení HP DeskJet 4530 series (HKLM\...\{BC36C273-E8B5-4673-826C-13D8CA9458F6}) (Version: 40.11.1122.1796 - HP Inc.)
Zoner Photo Studio 11 (HKLM-x32\...\ZonerPhotoStudio11_CZ_is1) (Version: - ZONER software)
Packages:
=========
Adobe Acrobat Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC [2024-02-05] ()
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2023-05-11] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_161.1.1087.0_x64__v10z8vjag6ke6 [2025-08-29] (HP Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-11-25] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-11-25] (Microsoft Corporation) [MS Ad]
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_7.0.8.0_neutral__mcm4njqhnhss8 [2024-07-24] (Netflix, Inc.)
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-05-18] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8000.642.119.0_x64__8wekyb3d8bbwe [2025-10-20] (Microsoft Corp.)
Windows App Runtime DDLM 5001.373.1736.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.5001.373.1736.0-x6_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-05-18] (Microsoft Corporation)
Windows App Runtime DDLM 5001.373.1736.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.5001.373.1736.0-x8_5001.373.1736.0_x86__8wekyb3d8bbwe [2025-05-18] (Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000_Classes\CLSID\{28A80003-18FD-411D-B0A3-3C81F618E22B}\InprocServer32 -> C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\kwpsmenushellext64.dll (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)
CustomCLSID: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000_Classes\CLSID\{BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B}\InprocServer32 -> C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL (ZONER software) [File not signed]
CustomCLSID: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2025-09-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-17] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-10-27] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-2823961219-2258955507-3959890628-1000: [ kwpsshellext] -> {28A80003-18FD-411D-B0A3-3C81F618E22B} => C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\kwpsmenushellext64.dll [2025-02-14] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)
ContextMenuHandlers1_S-1-5-21-2823961219-2258955507-3959890628-1000: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL [2008-10-22] (ZONER software) [File not signed]
ContextMenuHandlers2_S-1-5-21-2823961219-2258955507-3959890628-1000: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL [2008-10-22] (ZONER software) [File not signed]
ContextMenuHandlers4_S-1-5-21-2823961219-2258955507-3959890628-1000: [ kwpsshellext] -> {28A80003-18FD-411D-B0A3-3C81F618E22B} => C:\Users\Lenovo\AppData\Local\Kingsoft\WPS Office\12.2.0.19805\office6\kwpsmenushellext64.dll [2025-02-14] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)
ContextMenuHandlers4_S-1-5-21-2823961219-2258955507-3959890628-1000: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL [2008-10-22] (ZONER software) [File not signed]
ContextMenuHandlers6_S-1-5-21-2823961219-2258955507-3959890628-1000: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL [2008-10-22] (ZONER software) [File not signed]
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
ShortcutWithArgument: C:\Users\Lenovo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
==================== Loaded Modules (Whitelisted) =============
2025-02-14 16:20 - 2025-02-14 16:20 - 009400320 _____ () [File not signed] C:\Users\Lenovo\MediaGet2\opencv_core320.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000186880 _____ () [File not signed] C:\Users\Lenovo\MediaGet2\opencv_img_hash320.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 002482688 _____ () [File not signed] C:\Users\Lenovo\MediaGet2\opencv_imgcodecs320.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 019027456 _____ () [File not signed] C:\Users\Lenovo\MediaGet2\opencv_imgproc320.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000252416 _____ () [File not signed] C:\Users\Lenovo\MediaGet2\opencv_videoio320.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000384000 _____ () [File not signed] C:\Users\Lenovo\MediaGet2\sentry.dll
2019-01-04 17:15 - 2011-01-03 13:33 - 001892352 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 005635072 _____ (FFmpeg Project) [File not signed] C:\Users\Lenovo\MediaGet2\avcodec-58.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 001106432 _____ (FFmpeg Project) [File not signed] C:\Users\Lenovo\MediaGet2\avformat-58.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000356352 _____ (FFmpeg Project) [File not signed] C:\Users\Lenovo\MediaGet2\avutil-56.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000101376 _____ (FFmpeg Project) [File not signed] C:\Users\Lenovo\MediaGet2\swresample-3.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000412672 _____ (FFmpeg Project) [File not signed] C:\Users\Lenovo\MediaGet2\swscale-5.dll
2009-09-16 18:44 - 2009-09-16 18:44 - 000153088 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\hptcpmib.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000331264 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\HpTcpMon.dll
2009-09-16 11:44 - 2009-09-16 11:44 - 000132096 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\hpzjrd01.dll
2019-01-04 17:15 - 2011-01-03 13:27 - 000069632 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\StatusStrings.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000317440 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\System32\HPTcpMUI.dll
2012-06-26 12:08 - 2012-06-26 12:08 - 000026624 _____ (Nokia) [File not signed] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
2012-06-26 10:58 - 2012-06-26 10:58 - 001262592 _____ (Nokia) [File not signed] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\NGSCM64.DLL
2012-06-26 12:08 - 2012-06-26 12:08 - 000572928 _____ (Nokia) [File not signed] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
2007-02-05 09:29 - 2007-02-05 09:29 - 000139264 _____ (Nuance Communications, Inc.) [File not signed] C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpHookSE4.dll
2025-05-18 17:07 - 2017-10-27 17:06 - 000874368 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
2025-05-18 17:08 - 2017-10-27 17:06 - 000339256 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvStereo\_nvstapisvr64.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 002507264 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Users\Lenovo\MediaGet2\libcrypto-1_1.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 000530432 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Users\Lenovo\MediaGet2\libssl-1_1.dll
2025-02-14 16:20 - 2025-02-14 16:20 - 076519424 _____ (The Qt Company Ltd.) [File not signed] C:\Users\Lenovo\MediaGet2\Qt5WebEngineCore.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {1155093D-28E3-4655-916A-067D21C1732E} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {1D79FECB-177B-474E-9C57-B5B94795722C} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {2DE3638D-0624-43AE-96E8-A18B653B1574} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {3D5982EA-1FF5-4600-94A9-0B03B43E828A} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {712FB5B0-3020-4D5E-9D05-FE78FE966601} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {75C7BD75-C432-4D88-BDF6-E5A529FDE99B} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {8C94B53D-98D1-4E4C-B534-EEB3BAB82A3C} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {8F76201C-6C45-4E54-92FF-757C2F4EA9A2} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_37180
SearchScopes: HKU\S-1-5-21-2823961219-2258955507-3959890628-1000 -> {E5144121-9728-4A84-B827-847E69448894} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_37180
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 10.1.0.3 - 8.8.8.8
Windows Firewall is enabled.
Network Binding:
=============
Ethernet 2: Realtek PCIe GBE Family Controller #2 -> Rt64win7.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2823961219-2258955507-3959890628-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lenovo\Desktop\Banished-By-Sin-Deicide.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{FAD3FE37-8B1E-496F-B89F-06408514DF05}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{9EA86F62-07DF-4624-816B-05BF73CBB701}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{36706A92-05DB-487C-BF51-AD958450C94A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{12EC4EBA-4E31-426B-935C-3915A2C95F41}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{3E282DC8-669C-4D70-9399-75C36DC50325}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{0FFEBD8C-1954-4FE3-B0B7-AF474E772D73}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{EBB33629-34EF-4DEF-9A3A-D0059AA2F4CE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{CAC713E0-422D-4EA8-BB34-AFEF8F8FE15A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.122.633.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{CAD3E29C-EFDE-4C1B-BD89-AE44C3A866BE}] => (Allow) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe (TomTom International B.V. -> TomTom)
FirewallRules: [TCP Query User{0C898222-C058-4D2D-8B5E-D5A689E6C900}C:\users\lenovo\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\lenovo\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{4D6CBB6F-4163-409E-9FD2-2585DC69122D}C:\users\lenovo\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\lenovo\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{7C9C14A8-74A3-42A7-9E94-0420BD7F9438}] => (Allow) C:\Program Files\HP\HP DeskJet 4530 series\Bin\DeviceSetup.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{85AD64A8-5D98-4570-9D50-6DE50999B4C3}] => (Allow) LPort=5357
FirewallRules: [{191F044C-F064-4FF9-89A6-C2A208E0773A}] => (Allow) C:\Program Files\HP\HP DeskJet 4530 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [TCP Query User{E23BB6B7-7F0E-4827-BB7A-CCAD188EB180}C:\users\lenovo\appdata\local\programs\opera\opera.exe] => (Block) C:\users\lenovo\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{BFE03276-7E9A-49BA-8A11-BC73CBCA4D4D}C:\users\lenovo\appdata\local\programs\opera\opera.exe] => (Block) C:\users\lenovo\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{5ADF4BEB-5084-496E-8A2F-1F888667167F}] => (Allow) C:\Program Files\VueScan\vuescan.exe (Hamrick Software -> Hamrick Software)
FirewallRules: [{3CCD5389-CF85-4959-92AF-7EBFF1A62A32}] => (Allow) C:\Program Files\VueScan\vuescan.exe (Hamrick Software -> Hamrick Software)
FirewallRules: [{8970D6E0-987C-48D5-853C-F14C8C1B26EF}] => (Allow) C:\Users\Lenovo\MediaGet2\mediaget.exe (Global Microtrading PTE. LTD -> MediaGet)
FirewallRules: [{A7EF330D-D04B-4CD3-A32A-F8128C805D98}] => (Allow) C:\Users\Lenovo\MediaGet2\mediaget.exe (Global Microtrading PTE. LTD -> MediaGet)
FirewallRules: [{E0CC2039-B5EB-4D22-BCC2-1A809180C81C}] => (Allow) C:\Users\Lenovo\MediaGet2\QtWebEngineProcess.exe (The Qt Company Oy -> The Qt Company Ltd.)
FirewallRules: [{E586C503-42A6-44CD-9283-02D995EE2D41}] => (Allow) C:\Users\Lenovo\MediaGet2\QtWebEngineProcess.exe (The Qt Company Oy -> The Qt Company Ltd.)
FirewallRules: [{B22AFF0D-C655-480E-B0F8-B7E26B24635D}] => (Allow) C:\Program Files\AdGuard\AdguardSvc.exe (Adguard Software Limited -> Adguard Software Limited)
FirewallRules: [{E3001AA5-FDFF-42A0-874C-B62326F522FA}] => (Allow) C:\Program Files\AdGuard\Adguard.Launcher.exe (Adguard Software Limited -> Adguard Software Limited)
FirewallRules: [{D308AE20-CB30-4C89-BD45-1BDBA5480A80}] => (Allow) C:\Program Files\AdGuard\Adguard.Launcher.Arm64.exe (Adguard Software Limited -> Adguard Software Limited)
FirewallRules: [{F95D894F-5F45-42F5-97FB-6A183D27C71C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Restore Points =========================
03-11-2025 17:33:59 Naplánovaný kontrolní bod
08-11-2025 13:10:02 Installed Sys Information.
08-11-2025 13:29:30 Removed Sys Information.
12-11-2025 17:29:49 Instalační služba modulů systému Windows
12-11-2025 18:05:42 Instalační služba modulů systému Windows
18-11-2025 13:32:29 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (11/17/2025 05:16:21 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na (C:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/17/2025 04:56:29 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Rezervováno systémem, protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/17/2025 04:38:20 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Rezervováno systémem, protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/17/2025 04:19:09 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Rezervováno systémem, protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/12/2025 10:01:35 PM) (Source: WAS-LA) (EventID: 7005) (User: )
Description: Protokol adaptéru naslouchání net.pipe se pokusil komunikovat s aktivační službou procesů systému Windows, ale komunikace se nezdařila. Adaptér naslouchání se nyní nachází ve špatném stavu. Příčina: Důvodem jsou potíže s nedostatkem paměti nebo selhání aktivační služby procesů systému Windows či adaptéru naslouchání. Oprava: Chcete-li tuto podmínku opravit, ukončete adaptér naslouchání, následně zastavte aktivační službu procesů systému Windows, restartujte aktivační službu a nakonec znovu spusťte adaptér naslouchání.
Error: (11/12/2025 09:58:49 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
Error: (11/12/2025 09:58:49 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (11/12/2025 09:58:49 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
System errors:
=============
Error: (11/20/2025 08:59:19 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
Description: Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:MSI;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:V10.7;OEMModelBaseBoard:870S-C45(FX) (MS-7715);OEMManufacturerName:MSI;OSArchitecture:amd64;
BucketId: fe1a67de1c6888eba224fc195d576e4d95ad3eec822aee2f1b1707cfea173962
BucketConfidenceLevel:
UpdateType: 0
HResult: 0
Error: (11/20/2025 08:57:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (11/20/2025 08:57:13 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (120000 ms).
Error: (11/20/2025 08:54:19 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba SecDrv neuspěla při spuštění v důsledku následující chyby:
Načtení tohoto ovladače je blokováno.
Error: (11/20/2025 08:54:19 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\WINDOWS\SysWow64\drivers\SECDRV.SYS
Error: (11/20/2025 05:58:20 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
Description: Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:MSI;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:V10.7;OEMModelBaseBoard:870S-C45(FX) (MS-7715);OEMManufacturerName:MSI;OSArchitecture:amd64;
BucketId: fe1a67de1c6888eba224fc195d576e4d95ad3eec822aee2f1b1707cfea173962
BucketConfidenceLevel:
UpdateType: 0
HResult: 0
Error: (11/20/2025 05:56:44 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (11/20/2025 05:56:44 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (120000 ms).
Windows Defender:
================
Date: 2025-11-19 13:57:03
Description:
Antivirová ochrana v programu Microsoft Defender šċąή ħаѕ ъёёи ѕťθрρёð ьеƒθяė ĉõмρļěťīθή.%ŋ %тŜċăи ΪÐ:%в{2591313E-CE00-4B42-AFBA-0968622A08E1}%й %ťŠ¢ąņ Ťŷрέ:%ьAntimalwarový program%й %ţŚćдл Ρдгâmεтзřš:%вRychlé prohledávání%й %ŧŪšёг:%вNT AUTHORITY\SYSTEM%и %ŧŚтθр Ŗēαŝøŋ:%ъŠčђёďûľзδ śćªŋ шâš şќïрφėð ьє¢аűšέ ŧħë ŀåşŧ śцčċεśšƒцļ ѕčαη щăś ώίŧнΐп ťћз ļąšт 7 ďдỳş
Date: 2025-11-18 14:30:59
Description:
Antivirová ochrana v programu Microsoft Defender šċąή ħаѕ ъёёи ѕťθрρёð ьеƒθяė ĉõмρļěťīθή.%ŋ %тŜċăи ΪÐ:%в{24E05CC0-96C8-46CC-BCA9-99A843009970}%й %ťŠ¢ąņ Ťŷрέ:%ьAntimalwarový program%й %ţŚćдл Ρдгâmεтзřš:%вRychlé prohledávání%й %ŧŪšёг:%вNT AUTHORITY\SYSTEM%и %ŧŚтθр Ŗēαŝøŋ:%ъŠčђёďûľзδ śćªŋ шâš şќïрφėð ьє¢аűšέ ŧħë ŀåşŧ śцčċεśšƒцļ ѕčαη щăś ώίŧнΐп ťћз ļąšт 7 ďдỳş
Date: 2025-11-18 13:41:52
Description:
Antivirová ochrana v programu Microsoft Defender šċąή ħаѕ ъёёи ѕťθрρёð ьеƒθяė ĉõмρļěťīθή.%ŋ %тŜċăи ΪÐ:%в{676D1306-6D79-4C7B-83B8-861E52B69161}%й %ťŠ¢ąņ Ťŷрέ:%ьAntimalwarový program%й %ţŚćдл Ρдгâmεтзřš:%вRychlé prohledávání%й %ŧŪšёг:%вNT AUTHORITY\SYSTEM%и %ŧŚтθр Ŗēαŝøŋ:%ъŖΡС ćǿñη℮¢тїôл гύиďǿẃη
Date: 2025-11-17 16:56:27
Description:
Antivirová ochrana v programu Microsoft Defender šċąή ħаѕ ъёёи ѕťθрρёð ьеƒθяė ĉõмρļěťīθή.%ŋ %тŜċăи ΪÐ:%в{CB45062B-DB97-46AC-8A3F-127BCA5C8C3B}%й %ťŠ¢ąņ Ťŷрέ:%ьAntimalwarový program%й %ţŚćдл Ρдгâmεтзřš:%вRychlé prohledávání%й %ŧŪšёг:%вNT AUTHORITY\SYSTEM%и %ŧŚтθр Ŗēαŝøŋ:%ъŠсн℮ďŭŀèď šςàñ ωāŝ šќïφρéď ъёċαϋѕė τнĕ ľαŝт śμċ¢ěşśƒůŀ śςаʼn ẅāŝ ŵϊŧћíň ŧћē ĺàşτ 7 ďãŷŝ
Date: 2025-11-12 17:29:45
Description:
Antivirová ochrana v programu Microsoft Defender šċąή ħаѕ ъёёи ѕťθрρёð ьеƒθяė ĉõмρļěťīθή.%ŋ %тŜċăи ΪÐ:%в{F56B14D3-38EB-47B4-8B4E-182F07FF795F}%й %ťŠ¢ąņ Ťŷрέ:%ьAntimalwarový program%й %ţŚćдл Ρдгâmεтзřš:%вRychlé prohledávání%й %ŧŪšёг:%вNT AUTHORITY\SYSTEM%и %ŧŚтθр Ŗēαŝøŋ:%ъŠсн℮ďŭŀèď šςàñ ωāŝ šќïφρéď ъёċαϋѕė τнĕ ľαŝт śμċ¢ěşśƒůŀ śςаʼn ẅāŝ ŵϊŧћíň ŧћē ĺàşτ 7 ďãŷŝ
Event[0]:
Date: 2025-07-13 09:00:12
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.431.489.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25050.6
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Date: 2025-07-13 09:00:12
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.431.489.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25050.6
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Date: 2025-07-13 09:00:12
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.431.489.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25050.6
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Date: 2025-05-20 13:39:45
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.429.67.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25040.1
Kód chyby: 0x80070643
Popis chyby: Při instalaci došlo k závažné chybě.
Date: 2025-05-19 17:16:06
Description:
Microsoft Defender Antivirus narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.421.1958.0
Zdroj aktualizace: Microsoft Malware Protection Center
Typ bezpečnostních informací: AntiVirus
Typ aktualizace: Full
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25010.7
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
CodeIntegrity:
===============
Date: 2025-02-18 17:43:04
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\360\Total Security\safemon\SafeWrapper.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. V10.7 03/23/2012
Motherboard: MSI 870S-C45(FX) (MS-7715)
Processor: AMD Phenom(tm) II X4 955 Processor
Percentage of memory in use: 56%
Total physical RAM: 6143.18 MB
Available physical RAM: 2699.2 MB
Total Virtual: 12287.18 MB
Available Virtual: 8048.91 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:930.87 GB) (Free:842.71 GB) (Model: WDC WD10EZEX-08WN4A0 ATA Device) NTFS
Drive e: (EOS_DIGITAL) (Removable) (Total:14.92 GB) (Free:14.89 GB) FAT32
\\?\Volume{08e6c5c3-103a-11e9-9df1-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{4006168b-0000-0000-0000-d0bde8000000}\ () (Fixed) (Total:0.54 GB) (Free:0.12 GB) NTFS
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 4006168B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=558 MB) - (Type=27)
==========================================================
Disk: 1 (Protective MBR) (Size: 14.9 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================
