VIRY.CZ

Dobrý den prosím o kontrolu logů.
Počítač mi poslední dobou přijde trochu pomalejší, občas mi nepřipojuje správně bezdrátová sluchátka a pomůže až restart počítače.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 25-03-2026
Ran by sern (administrator) on KATANA (Micro-Star International Co., Ltd. Katana 15 B12VFK) (25-03-2026 16:08:11)
Running from D:\Stažené soubory\FRST64 (1).exe
Loaded Profiles: sern
Platform: Microsoft Windows 11 Pro Version 25H2 26200.8037 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(A225F3B5-240D-4EE9-BCF4-697A07F5E93E -> Micro-Star INT'L CO., LTD.) C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.MSICenter_2.0.67.0_x64__kzh8wxbdkxb8p\DCv2\DCv2.exe
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe
(C:\Program Files\Autodesk\AdODIS\V1\Access\AdskAccessCore.exe ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\AdODIS\V1\Setup\ui-launcher\AdskAccessUIHost.exe <4>
(C:\Program Files\Autodesk\AdODIS\V1\Access\AdskAccessCore.exe ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\AdskIdentityManager\1.16.5.1\AdskIdentityManager.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eServiceHost.exe <2>
(C:\Program Files\Google\Drive File Stream\122.0.1.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\122.0.1.0\crashpad_handler.exe
(C:\Program Files\Google\Chrome\Application\chrome.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA Overlay.exe <5>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA App\ShadowPlay\nvsphelper64.exe
(cmd.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\BrowserPrivacyAndSecurity.exe
(D:\CADKON\2024\icad.exe ->) (GRAITEC INNOVATION SAS -> Graitec) C:\Program Files (x86)\Common Files\Graitec\grflexwserver.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_09022c71eac15532\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_09022c71eac15532\ipf_helper.exe
(explorer.exe ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\AdODIS\V1\Access\AdskAccessCore.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <47>
(explorer.exe ->) (Google LLC -> Google LLC.) C:\Program Files\Google\Drive File Stream\122.0.1.0\GoogleDriveFS.exe <2>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE
(explorer.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Program Files\Wondershare\PDFelement11\PENotify.exe
(GRAITEC INNOVATION SAS -> Graitec) D:\CADKON\2024\icad.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\AI\aimgr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(NahimicService.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicAPO4Volume.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Proton AG -> ProtonVPN) C:\Program Files\Proton\VPN\v4.3.12\ProtonVPN.Client.exe
(services.exe ->) (Autodesk, Inc. -> ) C:\Program Files\Autodesk\Autodesk CER\service\cer_service.exe
(services.exe ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessServiceHost.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(services.exe ->) (Flexera Software LLC -> Flexera Software LLC) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_09022c71eac15532\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_adc76e77cd818de5\AS\IAS\IntelAudioService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MidiSrv.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_4e93878658043b21\OneApp.IGCC.WinService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_5b1252b3763da959\IntelCpHDCPSvc.exe
(services.exe ->) (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) C:\Windows\SysWOW64\MSIService.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe
(services.exe ->) (Native Instruments GmbH -> Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <4>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_5a00035b3c0dd9d1\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Proton AG -> ProtonVPN) C:\Program Files\Proton\VPN\v4.3.12\ProtonVPNService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_31dd95d009763f70\RtkAudUService64.exe <2>
(services.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicService.exe
(SteelSeries France SASU -> A-Volute) C:\Windows\System32\NhNotifSys.exe
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.229.1.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\prevhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\MSI NBFoundation Service\OmApSvcBroker.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_31dd95d009763f70\RtkAudUService64.exe [3282984 2025-12-10] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Autodesk Access] => C:\Program Files\Autodesk\AdODIS\V1\Access\AdskAccessCore.exe [21229344 2024-04-16] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [285616 2025-11-27] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [Autodesk Access Service] => C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessService.exe [18170648 2025-06-07] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752264 2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\122.0.1.0\GoogleDriveFS.exe [92414616 2026-03-10] (Google LLC -> Google LLC.)
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4742504 2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\122.0.1.0\GoogleDriveFS.exe [92414616 2026-03-10] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4742504 2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4742504 2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\122.0.1.0\GoogleDriveFS.exe [92414616 2026-03-10] (Google LLC -> Google LLC.)
HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\...\Run: [Microsoft.Lists] => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\OneDrive.Sync.Service.exe [951656 2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\...\Run: [Proton VPN] => C:\Program Files\Proton\VPN\ProtonVPN.Launcher.exe [18781032 2026-02-02] (Proton AG -> ProtonVPN)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\122.0.1.0\GoogleDriveFS.exe [92414616 2026-03-10] (Google LLC -> Google LLC.)
HKLM\...\Print\Monitors\EPSON PC-FAX Driver2 64Monitor: C:\WINDOWS\system32\EFXLM16A.DLL [182784 2023-07-20] (SEIKO EPSON CORPORATION) [File not signed]
HKLM\...\Print\Monitors\EPSON WF-7710 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBSBE.DLL [187392 2018-06-14] (Seiko Epson Corporation) [File not signed]
HKLM\...\Print\Monitors\Wondershare PDFelement Monitor: C:\WINDOWS\system32\PEPrinterMonitor.dll [420584 2025-05-12] (Wondershare Technology Group Co.,Ltd -> Wondershare Software)
HKLM\...\Print\Monitors\Wondershare PDFelement Toolbox Monitor: C:\WINDOWS\system32\PEToolboxMonitor.dll [420584 2025-05-12] (Wondershare Technology Group Co.,Ltd -> Wondershare Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [>OpenVPN_UserSetup] -> reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2026-03-18] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\146.0.7680.154\Installer\chrmstp.exe [2026-03-24] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEScreenshot.lnk [2025-06-12]
ShortcutTarget: Wondershare PEScreenshot.lnk -> C:\Program Files\Wondershare\PDFelement11\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEToolbox.lnk [2025-06-12]
ShortcutTarget: Wondershare PEToolbox.lnk -> C:\Program Files\Wondershare\PDFelement11\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {7CB51A97-69A6-45DF-B459-3D7D2A497D55} - System32\Tasks\CLToast => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2317064 2024-03-14] (CyberLink Corp. -> )
Task: {3693C901-93C8-4957-8D99-2BE75CF53E8F} - System32\Tasks\CLToastRun => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2317064 2024-03-14] (CyberLink Corp. -> )
Task: {9908A0CD-6EED-4932-BC60-3A2A91ED716A} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem148.0.7730.0{78EF7658-2F2C-4C46-A83A-61D664630D62} => C:\Program Files (x86)\Google\GoogleUpdater\148.0.7730.0\updater.exe [8459416 2026-03-12] (Google LLC -> Google LLC)
Task: {18E2DE64-641B-415B-89E5-38D93DF57ED0} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16300416 2026-03-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {E1986A30-127D-4DB2-8E65-DCFAAE6598F0} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28604736 2026-03-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {54E8E26B-32FF-4864-AC14-25550C768940} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [73568 2026-03-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {CB92A31F-9A1D-4593-A6E7-1312A4A92EA3} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28604736 2026-03-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {52D3BB88-09F8-42C3-A291-02CC1DE2AA63} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427800 2026-03-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {6CA30436-A334-48A3-92A3-428216FB6710} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427800 2026-03-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {977E7326-C023-4936-BE84-9A2C96FBD2A6} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [1349992 2026-03-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {5B16DA80-6FF1-46EC-80D4-3DA95C0580A5} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4448800 2026-03-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {7973F5EA-1AF0-45BF-B0E1-C47659C1430A} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16300416 2026-03-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {2F0A54DF-82E2-4E5E-85E8-A05DBDA1D571} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3324528 2025-10-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {967F8D7A-F8AB-4F7B-99D2-DB29C1714F1C} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1F35071E-526E-4635-AC51-C3F69F012F4E} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {0A218D70-D7D8-411F-BFE2-005562CD8456} - System32\Tasks\OmApSvcBroker => C:\Program Files (x86)\MSI\MSI NBFoundation Service\OmApSvcBroker.exe [1380456 2026-02-10] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
Task: {A668AE3F-7211-4BC8-8190-A31F281DF783} - System32\Tasks\OneDC_Updater => C:\Program Files (x86)\MSI\MSI_Center_Updater\OneDC_Updater.exe [657968 2025-08-07] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
Task: {606DD8A2-30FD-4904-8C3A-B6CE3706ABE2} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4380008 2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {DAAF67D8-5020-4F8F-88E0-02E1ED99E884} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2758214187-3853810005-2688088550-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4380008 2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {23A7E57E-0937-47E1-8CE9-610D32221FF0} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2758214187-3853810005-2688088550-1001 => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\OneDriveLauncher.exe [727440 2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {A89CDA43-AC42-4F74-85DA-B1E9E9961553} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-2758214187-3853810005-2688088550-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [5315192 2026-03-10] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {E53C4451-5A4F-446A-AF79-8840067B0665} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-2758214187-3853810005-2688088550-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [5315192 2026-03-10] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {A5C05250-ABA7-44FF-B173-3981BB92C9F8} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [6461560 2026-03-10] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {A0496464-AFA8-43B6-A0BB-7020C176AAB0} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [9274080 2026-01-19] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {1FA099D4-56A8-4B83-9948-D3CCECAC3F12} - System32\Tasks\PowerDirectorStyleAgent => C:\Program Files (x86)\CyberLink\Shared files\PDStyleAgent\PDStyleAgent.exe [97544 2024-03-14] (CyberLink Corp. -> CyberLink Corp.)
Task: {7C7AEC85-2BDD-4D1B-89E3-53C6FC264BE8} - System32\Tasks\Ubisoft\Ubisoft Connect Background Update => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe [17246392 2026-01-11] (UBISOFT ENTERTAINMENT INC. -> Ubisoft)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{21133100-e4b4-4af2-b642-52f3abb08058}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{21133100-e4b4-4af2-b642-52f3abb08058}\05F44414F523133353: [DhcpNameServer] 62.129.50.20 85.135.32.100
Tcpip\..\Interfaces\{21133100-e4b4-4af2-b642-52f3abb08058}\45556502355544027455543545: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{21133100-e4b4-4af2-b642-52f3abb08058}\7416C61687970207163737A31323334313233343: [DhcpNameServer] 10.67.105.152
Tcpip\..\Interfaces\{21133100-e4b4-4af2-b642-52f3abb08058}\E445B4D23596D607C656: [DhcpNameServer] 10.0.100.7
Tcpip\..\Interfaces\{21133100-e4b4-4af2-b642-52f3abb08058}\E445B4D23596D607C656: [DhcpDomain] ntkcz.cz
Tcpip\..\Interfaces\{444c531c-8e58-4e4f-8fe9-6ae83fad38d8}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF DefaultProfile: rsau2dmf.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\sern\AppData\Roaming\Mozilla\Firefox\Profiles\hqndhj3e.default [2025-06-12]
FF ProfilePath: C:\Users\sern\AppData\Roaming\Mozilla\Firefox\Profiles\rsau2dmf.default-release [2026-03-25]
FF Extension: (Print Friendly & PDF) - C:\Users\sern\AppData\Roaming\Mozilla\Firefox\Profiles\rsau2dmf.default-release\Extensions\jid0-YQz0l1jthOIz179ehuitYAOdBEs@jetpack.xpi [2025-06-12]
FF Extension: (Udělej printscreen celé webové stránky - FireShot) - C:\Users\sern\AppData\Roaming\Mozilla\Firefox\Profiles\rsau2dmf.default-release\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}.xpi [2025-06-12]
FF Plugin: @java.com/DTPlugin,version=11.471.0 -> C:\Program Files\Java\jre1.8.0_471\bin\dtplugin\npDeployJava1.dll [2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.471.0 -> C:\Program Files\Java\jre1.8.0_471\bin\plugin2\npjp2.dll [2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-01-16] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-12-08] (Microsoft Corporation -> Microsoft Corporation)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2025-06-12]

Edge:
=======
Edge Profile: C:\Users\sern\AppData\Local\Microsoft\Edge\User Data\Default [2025-06-14]
Edge Extension: (Google Docs Offline) - C:\Users\sern\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-09-16]
Edge Extension: (Edge relevant text changes) - C:\Users\sern\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge Extension: (ESET Browser Privacy & Security) - C:\Users\sern\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2024-09-22]
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default [2026-03-25]
Error reading preferences. Please check "Secure Preferences" file for possible corruption. <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\aahnibhpidkdaeaplfdogejgoajkjgob [2025-12-01] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\cicohiknlppcipjbfpoghjbncojncjgb [2024-12-20] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-03-22] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-03-19] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-02-02] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-11-20] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2025-11-13] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2025-10-13] [UpdateUrl:0] <==== ATTENTION
CHR Profile: C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1 [2026-03-25]
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-09-12] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-03-18] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fdpohaocaechififmbbbbbknoalclacl [2026-01-21] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-03-19] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-03-19] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-02-02] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-11-25] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2025-11-16] [UpdateUrl:0] <==== ATTENTION
CHR Profile: C:\Users\sern\AppData\Local\Google\Chrome\User Data\System Profile [2026-03-22]
CHR HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [oombnmpbbhbakfpfgdflaajkhicgfaam]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Autodesk Access Service Host; C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessServiceHost.exe [19981080 2025-06-07] (Autodesk, Inc. -> Autodesk, Inc.)
R2 Autodesk CER Service; C:\Program Files\Autodesk\Autodesk CER\service\cer_service.exe [24314480 2025-09-25] (Autodesk, Inc. -> )
R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [29465352 2026-03-10] (Gen Digital Inc. -> Gen Digital Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13270328 2026-03-14] (Microsoft Corporation -> Microsoft Corporation)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5543856 2025-11-27] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [4980040 2025-11-27] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [4980040 2025-11-27] (ESET, spol. s r.o. -> ESET)
S4 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncHelper.exe [3608936 2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
R2 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [385960 2026-03-09] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2023-12-14] (Intel Corporation -> Intel(R) Corporation)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_adc76e77cd818de5\AS\IAS\IntelAudioService.exe [532920 2025-08-15] (Intel Corporation -> Intel)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_09022c71eac15532\ipf_uf.exe [3333592 2025-09-03] (Intel Corporation -> Intel Corporation)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpDefenderCoreService.exe [1431160 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Micro Star SCM; C:\WINDOWS\SysWOW64\MSIService.exe [171544 2024-12-18] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
S4 MSI Foundation Service; C:\Program Files (x86)\MSI\MSI NBFoundation Service\MSIAPService.exe [105968 2025-03-24] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
S4 MSI Sendevsvc; C:\Program Files (x86)\MSI\MSI NBFoundation Service\Sendevsvc.exe [311536 2023-05-11] (Micro-Star International CO., LTD. -> )
R2 MSI_Center_Service; C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe [181776 2025-04-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 NahimicService; C:\WINDOWS\System32\NahimicService.exe [1910808 2025-06-30] (SteelSeries France SASU -> Nahimic)
S4 NTKDaemonService; C:\Program Files\Common Files\Native Instruments\NTK\NTKDaemon.exe [18193304 2025-10-09] (Native Instruments GmbH -> Native Instruments GmbH)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_5a00035b3c0dd9d1\Display.NvContainer\NVDisplay.Container.exe [1275608 2025-09-06] (NVIDIA Corporation -> NVIDIA Corporation)
S4 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.209.1026.0002\OneDriveUpdaterService.exe [3891560 2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [75136 2026-01-02] (Even Balance, Inc. -> )
R3 ProtonVPN Service; C:\Program Files\Proton\VPN\v4.3.12\ProtonVPNService.exe [477424 2026-02-02] (Proton AG -> ProtonVPN)
S3 ProtonVPN WireGuard; C:\Program Files\Proton\VPN\v4.3.12\ProtonVPN.WireGuardService.exe [476912 2026-02-02] (Proton AG -> ProtonVPN)
S4 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [625928 2024-03-14] (CyberLink Corp. -> CyberLink)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [811360 2026-03-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 UpcElevationService; C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher Core\UpcElevationService.exe [351928 2026-01-11] (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\NisSrv.exe [3199656 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MsMpEng.exe [133704 2024-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WondersharePDFelement11DispatchService; C:\Program Files\Common Files\Wondershare\PDFelement11\DispatchService\PEServiceProcess.exe [342784 2025-05-14] (Wondershare Technology Group Co.,Ltd -> Wondershare)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [232928 2025-11-03] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [139904 2025-11-03] (Microsoft Windows Hardware Compatibility Publisher -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [17840 2025-11-27] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [273768 2025-11-03] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [57368 2025-11-03] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [86800 2025-11-03] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [126552 2025-11-03] (ESET, spol. s r.o. -> ESET)
R2 googledrivefs31931; C:\Program Files\Google\Drive File Stream\Drivers\31931\googledrivefs31931.sys [386256 2025-05-12] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_2325b3303ea42f05\iaLPSS2_GPIO2_ADL.sys [160864 2024-07-03] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_faa1ee2d82393f4f\iaLPSS2_I2C_ADL.sys [231008 2024-07-03] (Intel Corporation -> Intel Corporation)
S0 iaStorVD; C:\WINDOWS\System32\drivers\iaStorVD.sys [1605296 2023-11-18] (Intel Corporation -> Intel Corporation)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_1c0211bf85dbecec\IntcUSB.sys [940984 2025-08-15] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_8e2f374849f1eba9\gna.sys [90208 2024-01-26] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_741faa404ec5212c\ipf_acpi.sys [90552 2025-09-03] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_09022c71eac15532\ipf_cpu.sys [542168 2025-09-03] (Intel Corporation -> Intel Corporation)
S3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_049e38a37c46edc4\ipf_lf.sys [504912 2025-06-30] (Intel Corporation -> Intel Corporation)
R3 NahimicBTLink; C:\WINDOWS\System32\drivers\NahimicBTLink.sys [86200 2022-08-18] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
S3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [95896 2024-05-16] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
R3 nvpcf; C:\WINDOWS\System32\drivers\nvpcf.sys [247000 2024-12-17] (NVIDIA Corporation -> NVIDIA Corporation)
S3 ProtonVPNCallout; C:\Program Files\Proton\VPN\v4.3.12\Resources\ProtonVPN.CalloutDriver.sys [41416 2025-12-05] (Proton AG -> Proton AG)
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_71e10b6ede8d55f8\rt68cx21x64.sys [905256 2025-07-28] (Realtek Semiconductor Corp. -> Realtek)
S3 rtu53cx22x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtu53cx22x64.inf_amd64_191dda4f2e7775ce\rtu53cx22x64.sys [1082344 2024-03-14] (Realtek Semiconductor Corp. -> Realtek Corporation)
R1 steamxbox; C:\WINDOWS\System32\drivers\steamxbox.sys [278208 2023-02-21] (Valve Corp. -> Valve Corporation)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S3 UsbNcm; C:\WINDOWS\System32\DriverStore\FileRepository\usbncm.inf_amd64_989230fcb4a5468f\UsbNcm.sys [208896 2026-03-10] (Microsoft Windows -> )
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [22080 2024-09-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [602392 2024-09-17] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2024-09-17] (Microsoft Windows -> Microsoft Corporation)
S3 wintun; C:\WINDOWS\System32\drivers\wintun.sys [29592 2026-01-06] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2024-02-29] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-03-25 14:31 - 2026-03-25 14:31 - 003636021 _____ C:\Users\sern\Downloads\Návod_OPTIMA-LV-R_201909_CZ_v2 (3).pdf
2026-03-25 14:31 - 2026-03-25 14:31 - 003636021 _____ C:\Users\sern\Downloads\Návod_OPTIMA-LV-R_201909_CZ_v2 (2).pdf
2026-03-25 14:31 - 2026-03-25 14:31 - 003636021 _____ C:\Users\sern\Downloads\Návod_OPTIMA-LV-R_201909_CZ_v2 (1).pdf
2026-03-25 10:28 - 2026-03-25 10:29 - 000505876 _____ C:\Users\sern\Downloads\CN_UCB_2025_PENB.pdf
2026-03-23 21:44 - 2026-03-23 21:44 - 000560564 _____ C:\Users\sern\OneDrive\Desktop\260322_SOS Turnov-3NP.pdf
2026-03-22 15:47 - 2026-03-22 15:47 - 000714490 _____ C:\WINDOWS\system32\perfh005.dat
2026-03-22 15:47 - 2026-03-22 15:47 - 000153652 _____ C:\WINDOWS\system32\perfc005.dat
2026-03-22 11:49 - 2026-03-25 10:36 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-03-22 03:04 - 2026-03-22 03:04 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-03-20 18:34 - 2026-03-20 18:34 - 000000000 ____D C:\Program Files\Microsoft GameInput
2026-03-19 11:19 - 2026-03-19 11:19 - 010545635 _____ C:\Users\sern\Downloads\Nepotvrzeno 451849.crdownload
2026-03-18 21:49 - 2026-03-18 21:49 - 000000000 ____D C:\Users\sern\Downloads\otazky
2026-03-18 18:16 - 2026-03-18 18:16 - 000000218 _____ C:\Users\sern\AppData\Local\recently-used.xbel
2026-03-18 14:37 - 2026-03-18 14:37 - 001655279 _____ C:\Users\sern\Downloads\otazky.zip
2026-03-16 07:46 - 2026-03-22 15:43 - 000000000 ____D C:\ProgramData\Realtek
2026-03-12 11:28 - 2026-03-12 19:03 - 000002890 _____ C:\WINDOWS\system32\Tasks\OneDC_Updater
2026-03-11 20:38 - 2026-03-11 20:38 - 000002974 _____ C:\WINDOWS\system32\Tasks\OmApSvcBroker
2026-03-10 23:31 - 2026-03-10 23:31 - 000083946 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-03-10 23:31 - 2026-03-10 23:31 - 000083946 _____ C:\WINDOWS\system32\ctac.json
2026-03-10 23:31 - 2026-03-10 23:31 - 000036382 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-03-10 23:31 - 2026-03-10 23:31 - 000036382 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-03-03 16:33 - 2026-03-21 19:30 - 000453064 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_d.dll.0
2026-02-27 23:46 - 2026-02-27 23:46 - 000071650 _____ C:\WINDOWS\system32\battery-report.html
2026-02-26 03:42 - 2026-02-26 03:42 - 000000000 ____D C:\Users\sern\AppData\Local\Robot Entertainment
2026-02-26 03:37 - 2026-02-26 03:37 - 000000223 _____ C:\Users\sern\OneDrive\Desktop\Orcs Must Die! 3.url
2026-02-26 01:11 - 2026-02-26 01:11 - 000000000 ____D C:\Users\sern\AppData\Roaming\Cuphead
2026-02-26 01:11 - 2026-02-26 01:11 - 000000000 ____D C:\Users\sern\AppData\LocalLow\Studio MDHR
2026-02-25 22:20 - 2026-02-25 22:20 - 000000222 _____ C:\Users\sern\OneDrive\Desktop\Cuphead.url
2026-02-25 22:20 - 2026-02-25 22:20 - 000000222 _____ C:\Users\sern\OneDrive\Desktop\Crawl.url

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-03-25 16:08 - 2024-07-08 19:50 - 000000000 ____D C:\FRST
2026-03-25 16:07 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-03-25 15:54 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-03-25 15:49 - 2024-12-23 09:06 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-03-25 15:49 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-03-25 15:49 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-03-25 15:49 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-03-25 15:49 - 2023-11-20 21:48 - 000000000 ____D C:\Users\sern\AppData\Local\Packages
2026-03-25 15:49 - 2023-11-20 21:45 - 000000000 ___SD C:\Users\sern\AppData\Roaming\Microsoft\Credentials
2026-03-25 15:49 - 2023-11-20 21:41 - 000000000 ____D C:\ProgramData\Packages
2026-03-25 14:22 - 2023-12-20 09:57 - 000000000 ____D C:\Users\sern\AppData\Roaming\Microsoft\Word
2026-03-25 03:03 - 2025-12-01 21:03 - 000000000 ____D C:\Users\sern\AppData\Local\Ubisoft Game Launcher
2026-03-24 03:20 - 2023-11-20 22:55 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-03-23 22:05 - 2023-12-20 10:17 - 000000000 ____D C:\Users\sern\AppData\Roaming\Microsoft\Excel
2026-03-23 11:46 - 2023-11-20 21:52 - 000000000 ____D C:\Users\sern\AppData\Local\D3DSCache
2026-03-22 15:52 - 2024-02-09 18:36 - 000000000 ____D C:\ProgramData\boost_interprocess
2026-03-22 15:52 - 2023-11-22 20:07 - 000000000 ____D C:\Users\sern\AppData\Local\CrashDumps
2026-03-22 15:47 - 2024-12-23 10:24 - 001692332 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-03-22 15:43 - 2024-12-23 10:29 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-03-22 15:43 - 2024-12-23 10:22 - 000014162 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-03-22 15:43 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-03-22 15:43 - 2023-11-20 21:51 - 000000000 ____D C:\ProgramData\NVIDIA
2026-03-22 15:43 - 2023-11-20 21:39 - 000012288 ___SH C:\DumpStack.log.tmp
2026-03-22 15:42 - 2024-04-01 08:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-03-21 19:30 - 2024-08-31 14:07 - 004590024 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2026-03-21 19:30 - 2024-08-31 14:07 - 000911816 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2026-03-21 19:30 - 2024-08-31 14:07 - 000289224 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2026-03-21 19:30 - 2024-08-31 14:07 - 000260552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2026-03-21 19:30 - 2024-08-31 14:07 - 000166344 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2026-03-21 19:30 - 2024-08-31 14:07 - 000154056 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2026-03-21 19:30 - 2024-08-31 14:07 - 000084424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2026-03-21 15:59 - 2024-09-24 10:18 - 000000000 ____D C:\Program Files\Microsoft Office
2026-03-16 22:27 - 2025-02-15 11:42 - 000000000 ____D C:\SteamLibrary
2026-03-12 19:06 - 2024-12-23 09:06 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-03-12 19:05 - 2024-12-23 09:06 - 000588920 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-03-12 19:04 - 2024-12-23 00:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\en-GB
2026-03-12 19:04 - 2024-04-01 17:31 - 000000000 ____D C:\WINDOWS\InboxApps
2026-03-12 19:04 - 2024-04-01 17:31 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-03-12 19:04 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-03-12 19:04 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\appcompat
2026-03-12 19:04 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2026-03-11 20:49 - 2024-04-01 08:26 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2026-03-11 20:49 - 2024-04-01 08:26 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2026-03-11 20:38 - 2023-11-20 21:48 - 000000000 ____D C:\Program Files (x86)\MSI
2026-03-10 23:30 - 2024-12-23 10:22 - 003270144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-03-10 23:08 - 2024-12-23 10:29 - 000003638 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-03-10 23:08 - 2024-12-23 10:29 - 000003512 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-03-10 23:08 - 2024-02-02 12:40 - 000002173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2026-03-10 23:08 - 2024-02-02 12:40 - 000002054 _____ C:\Users\sern\OneDrive\Desktop\Google Drive.lnk
2026-03-03 16:58 - 2025-03-13 08:55 - 000000374 _____ C:\Users\sern\OneDrive\Desktop\bio.txt
2026-02-26 03:37 - 2024-07-16 11:22 - 000000000 ____D C:\Users\sern\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

==================== Files in the root of some directories ========

2026-03-18 18:16 - 2026-03-18 18:16 - 000000218 _____ () C:\Users\sern\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-03-2026
Ran by sern (25-03-2026 16:09:32)
Running from D:\Stažené soubory
Microsoft Windows 11 Pro Version 25H2 26200.8037 (X64) (2024-12-23 09:29:24)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-2758214187-3853810005-2688088550-500 - Administrators - Disabled)
Alex (S-1-5-21-2758214187-3853810005-2688088550-1002 - Limited - Enabled)
DefaultAccount (S-1-5-21-2758214187-3853810005-2688088550-503 - Limited - Disabled)
Guest (S-1-5-21-2758214187-3853810005-2688088550-501 - Limited - Disabled)
sern (S-1-5-21-2758214187-3853810005-2688088550-1001 - Administrators - Enabled) => C:\Users\sern
WDAGUtilityAccount (S-1-5-21-2758214187-3853810005-2688088550-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {26E0861C-6FB9-CEF9-E4F0-531986211ACE}
FW: ESET Firewall (Enabled) {1EDB0739-25D6-CFA1-CFAF-FA2C78F25DB5}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AB Protect - AdvanceCAD 2024 x64 (HKLM\...\{E406239C-DDA8-443B-801F-D4188AD02A2E}) (Version: 24.01.0007 - AB Studio) Hidden
Assassin's Creed Brotherhood (HKLM-x32\...\Uplay Install 26) (Version: - Ubisoft)
Assassin's Creed Revelations (HKLM-x32\...\Uplay Install 40) (Version: - Ubisoft)
Audacity 3.7.5 (HKLM\...\Audacity_is1) (Version: 3.7.5 - Audacity Team)
Autodesk Access (HKLM\...\{A3158B3E-5F28-358A-BF1A-9532D8EBC811}) (Version: 2.6.0.118 - Autodesk, Inc.)
Autodesk CER (HKLM\...\{C2895666-EC78-4E43-A590-A744CEDD756A}) (Version: 7.2.2.923 - Autodesk Inc.) Hidden
Autodesk Identity Manager (HKLM\...\Autodesk Identity Manager) (Version: 1.12.0.7 - Autodesk)
BIMvision 3.0.2 (HKLM-x32\...\{EE63675D-6935-4797-A594-14F755975422}_is1) (Version: 3.0.2 - Datacomp IT Sp. z o.o.)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.79.1095 - AB Team, d.o.o.)
CADKON+ 2024 Database - Cz (HKLM\...\{6D06E854-1A36-4736-A7EB-1C9E36D71F85}) (Version: 24.2.0055 - Graitec) Hidden
CADKON+ 2024 Language Pack - Cz (HKLM\...\{6C493A15-CE76-44DC-9513-05A5EA1B695F}) (Version: 24.2.0055 - Graitec) Hidden
CADKON+ 2024 Root Pack (HKLM\...\{08B49DBB-67E7-48FC-A326-CB1D4E0021D9}) (Version: 24.2.0055 - Graitec) Hidden
CADKON+ 2024.2 (HKLM-x32\...\{1121ee7d-5d8a-4c92-8891-b98a82636f2d}) (Version: 24.2.55 - Graitec)
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.5.1255.1528 - Piriform)
CyberLink PowerDirector 365 (HKLM-x32\...\{678184FC-3343-4125-8098-01B6032F8BB2}) (Version: 22.2.2712.0 - CyberLink Corp.)
Energie 2025 LT CZ (HKLM-x32\...\Energie 2025 LT_is1) (Version: 2025 LT - Svoboda Software)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
ESET Security (HKLM\...\{F341024D-BE52-4CF7-83C1-9DA58DAB2970}) (Version: 19.0.14.0 - ESET, spol. s r.o.)
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 122.0.1.0 - Google LLC)
Google Chrome (HKLM\...\{66793499-0B07-380D-8FDE-467BB6263225}) (Version: 146.0.7680.154 - Google LLC)
Graitec - Advance CAD 2024 (HKLM\...\{E2402D86-4CC6-415F-BA1C-2EE567CB7D1A}) (Version: 14.0.0.7344 - Graitec) Hidden
GrVfkImport (HKLM\...\{892AE826-080B-4C24-89DE-888FBF883DD1}) (Version: 24.01.0011 - AB Studio) Hidden
Intel(R) Chipset Device Software (HKLM\...\{22987D97-5A46-4BD9-B1A5-2FFE44201081}) (Version: 10.1.19199.8340 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{e6ecf35a-b1bb-4e59-9d90-4c98fde2ffa8}) (Version: 10.1.19199.8340 - Intel(R) Corporation)
Java 8 Update 471 (64-bit) (HKLM\...\{77924AE4-039E-4CA4-87B4-2F64180471F0}) (Version: 8.0.4710.9 - Oracle Corporation)
Kompaktní jednotky DUPLEX - návrhový program (HKLM-x32\...\Atrea.Application_400) (Version: 9.59.274 - ATREA s.r.o.)
Kontrola stavu osobního počítače s Windows (HKLM\...\{4F81B8ED-D6B5-497F-AAEC-9DECD42CB03D}) (Version: 3.9.2402.14001 - Microsoft Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Lenovo USB Audio (HKLM\...\VID_17EF&PID_3063&MI_00) (Version: 1.31.38.50 - Synaptics Incorporated)
LYNX Trading (HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\...\5556-0007-2700-0000) (Version: latest (10.40.1c) 20251006 16:25:26 - LYNX)
Microsoft .NET Host - 6.0.36 (x64) (HKLM\...\{D6932D97-36F1-40B8-9CDC-CA8365B21000}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.36 (x64) (HKLM\...\{A9E32B25-994B-4856-A12B-0EBED3050410}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.36 (x64) (HKLM\...\{C912E33F-956A-4921-9F55-CC11AE8F09AF}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.36 - Shared Framework (x64) (HKLM-x32\...\{4b7c3d4f-051a-464c-aaa0-e7de6bc793de}) (Version: 6.0.36.24516 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.36 Shared Framework (x64) (HKLM\...\{215198BD-8EE1-385D-8194-0D3FF304296D}) (Version: 6.0.36.24516 - Microsoft Corporation) Hidden
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 146.0.3856.72 - Microsoft Corporation) Hidden
Microsoft GameInput (HKLM\...\{A9E31119-18D8-4BF7-8B63-3CFE78CA0ABD}) (Version: 3.3.163.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2021 - cs-cz (HKLM\...\ProPlus2021Retail - cs-cz) (Version: 16.0.19725.20190 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 25.209.1026.0002 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.24.23304 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.50.35719 (HKLM\...\{AECD4ED0-8A3B-41E9-92D1-6BEE0374CCAF}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.50.35719 (HKLM\...\{61B44572-8722-4DAF-8ACF-8E742D30BCC5}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719 (HKLM-x32\...\{91ee571b-0e8a-4c65-9eaf-2e2f5fc60c00}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM\...\{61D4736B-3325-4D4A-BD41-8BD206C6A86E}) (Version: 48.144.23186 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM-x32\...\{0532b8f2-12d7-43de-95fc-7b87006758a8}) (Version: 6.0.36.34217 - Microsoft Corporation)
MSI Center SDK (HKLM-x32\...\{15289038-41BE-48F8-B8B9-0B1021D3089E}}_is1) (Version: 3.2026.0211.01 - MSI)
MSI NBFoundation Service (HKLM-x32\...\{640EFA76-B899-476B-B2DF-D0CCF11D6083}}_is1) (Version: 2.0.2602.1102 - MSI)
Native Access 3.21.0 (HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\...\c410b7d2-8fce-53b3-8332-e98b6e89a16a) (Version: 3.21.0 - Native Instruments)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 2.8.2.0 - Native Instruments)
Native Instruments NTKDaemon (HKLM-x32\...\Native Instruments NTKDaemon) (Version: 1.26.0.0 - Native Instruments)
Native Instruments Traktor Audio 10 Driver (HKLM-x32\...\Native Instruments Traktor Audio 10 Driver) (Version: - Native Instruments)
Native Instruments Traktor Audio 2 MK2 Driver (HKLM-x32\...\Native Instruments Traktor Audio 2 MK2 Driver) (Version: - Native Instruments)
Native Instruments Traktor Audio 6 Driver (HKLM-x32\...\Native Instruments Traktor Audio 6 Driver) (Version: - Native Instruments)
Native Instruments Traktor Kontrol D2 Driver (HKLM-x32\...\Native Instruments Traktor Kontrol D2 Driver) (Version: - Native Instruments)
Native Instruments Traktor Kontrol F1 Driver (HKLM-x32\...\Native Instruments Traktor Kontrol F1 Driver) (Version: - Native Instruments)
Native Instruments Traktor Kontrol S2 MK2 Driver (HKLM-x32\...\Native Instruments Traktor Kontrol S2 MK2 Driver) (Version: - Native Instruments)
Native Instruments Traktor Kontrol S4 MK2 Driver (HKLM-x32\...\Native Instruments Traktor Kontrol S4 MK2 Driver) (Version: - Native Instruments)
Native Instruments Traktor Kontrol S5 Driver (HKLM-x32\...\Native Instruments Traktor Kontrol S5 Driver) (Version: - Native Instruments)
Native Instruments Traktor Kontrol S8 Driver (HKLM-x32\...\Native Instruments Traktor Kontrol S8 Driver) (Version: - Native Instruments)
Native Instruments Traktor Kontrol X1 MK2 Driver (HKLM-x32\...\Native Instruments Traktor Kontrol X1 MK2 Driver) (Version: - Native Instruments)
Native Instruments Traktor Kontrol X1 MK3 Driver (HKLM-x32\...\Native Instruments Traktor Kontrol X1 MK3 Driver) (Version: - Native Instruments)
Native Instruments Traktor Kontrol Z1 Driver (HKLM-x32\...\Native Instruments Traktor Kontrol Z1 Driver) (Version: - Native Instruments)
Native Instruments Traktor Kontrol Z2 Driver (HKLM-x32\...\Native Instruments Traktor Kontrol Z2 Driver) (Version: - Native Instruments)
Native Instruments Traktor Pro 4 (HKLM-x32\...\Native Instruments Traktor Pro 4) (Version: 4.4.0.192 - Native Instruments)
NVIDIA App 11.0.5.420 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.5.420 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.5.11504.36206172 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.5.11504.36206172 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 566.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 566.14 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.19725.20190 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.19029.20208 - Microsoft Corporation) Hidden
PDF Arranger (HKLM\...\{A87A3FB3-9B9B-44AC-9207-033D932B8D35}) (Version: 1.12.1 - The PDF Arranger team)
Pomocník s instalací Windows 11 (HKLM-x32\...\{115DF11E-4B4C-4EA9-9A79-00DB0C7EF02D}) (Version: 1.4.19041.5003 - Microsoft Corporation)
Proton VPN (HKLM\...\Proton VPN_is1) (Version: 4.3.12 - Proton AG)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
qBittorrent (HKLM-x32\...\qBittorrent) (Version: 5.1.4 - The qBittorrent project)
Serato DJ Lite (HKLM\...\{16CF805C-62E0-48E6-881D-E9BC59570894}) (Version: 3.2.4.532 - Serato Limited) Hidden
Serato DJ Lite (HKLM-x32\...\{78d8084e-771d-4e3c-b645-afeed641abba}) (Version: 3.2.4.532 - Serato Limited)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TagScanner (64bit) (HKLM\...\TagScanner_is1) (Version: 6.1.19 - Sergey Serkov)
ThinkPad Thunderbolt 3 Dock (HKLM-x32\...\ThinkPad Thunderbolt 3 Dock_is1) (Version: 1.001.9 - Lenovo Group Limited)
Thinkpad USB Ethernet Adapter Driver (HKLM-x32\...\{04201224-2B34-4EE7-862B-B7BBF89DB3AB}) (Version: 10.39.518.2020 - Lenovo)
TROX Easy Product Finder (HKLM\...\{F3350708-6C54-4DA6-8F3F-536C4B7839D3}) (Version: 2.16.4.1 - TROX GmbH)
TROX Easy Product Finder (HKLM-x32\...\{2079BF84-D740-479E-A01F-75E2BB763133}) (Version: 2.16.4.1 - TROX GmbH)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 169.3.12963 - Ubisoft)
Uložit do služby Autodesk Web and Mobile (HKLM\...\{AC9D2EAD-0DA0-4E0B-8672-546F5B1E6E73}) (Version: 3.0.31 - Autodesk)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)
Wondershare PDFelement ( Version 11.4.17 ) (HKLM\...\{66E8BEAD-6D95-434D-BD2B-FA6096C84291}_is1) (Version: 11.4.17 - Wondershare)

Chrome apps:
============
Trimble Connect Web (HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\...\2344a20429258ef38758c4600f14a2ff) (Version: 1.0 - Google\Chrome)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-05] ()
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC [2024-03-12] ()
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2024-11-10] (INTEL CORP) [Startup Task]
ESET Context Menu -> C:\Program Files\ESET\ESET Security [2026-03-24] (Sparse Package)
Intel® Rapid Storage Technology Application -> C:\Program Files\WindowsApps\AppUp.IntelOptaneMemoryandStorageManagement_20.0.1024.0_x64__8j3eq9eme6ctt [2026-02-11] (INTEL CORP)
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\AI [2026-03-21] ()
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-03-21] ()
Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_2.5.2.0_x64__8wekyb3d8bbwe [2025-12-10] (Microsoft Studios)
MSI Center -> C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.MSICenter_2.0.67.0_x64__kzh8wxbdkxb8p [2026-03-05] (MICRO-STAR INTERNATIONAL CO., LTD) [Startup Task]
MSI Common -> C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.MSICommon_1.1.5.0_x64__kzh8wxbdkxb8p [2024-03-28] (MICRO-STAR INTERNATIONAL CO., LTD)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-06] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-03-21] ()
PDFelement Shell Extension -> C:\Program Files\Wondershare\PDFelement11 [2025-06-12] (Wondershare Technology Group Co.,Ltd)
The Elder Scrolls IV: Oblivion Remastered -> C:\Program Files\WindowsApps\BethesdaSoftworks.ProjectAltar_1.0.12.0_x64__3275kfvn8vcwc [2025-09-22] (Bethesda Softworks)
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-01-21] (Microsoft Corp.)
WinAppRuntime.Main.1.8 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.8_8000.770.947.0_x64__8wekyb3d8bbwe [2026-03-17] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8000.806.2252.0_x64__8wekyb3d8bbwe [2026-03-20] (Microsoft Corp.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2758214187-3853810005-2688088550-1001_Classes\CLSID\{000D0E00-0000-0000-C000-000000000046}\localserver32 -> D:\CADKON\2024\ICAD.EXE (GRAITEC INNOVATION SAS -> Graitec)
CustomCLSID: HKU\S-1-5-21-2758214187-3853810005-2688088550-1001_Classes\CLSID\{314AC707-0C11-4B4C-8CB1-564B3EE6BE5F}\localserver32 -> D:\CADKON\2024\ICAD.EXE (GRAITEC INNOVATION SAS -> Graitec)
CustomCLSID: HKU\S-1-5-21-2758214187-3853810005-2688088550-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000}\localserver32 -> C:\Program Files\Proton\VPN\v4.3.12\ProtonVPN.Client.exe (Proton AG -> ProtonVPN)
CustomCLSID: HKU\S-1-5-21-2758214187-3853810005-2688088550-1001_Classes\CLSID\{6e1f4e4d-65f7-4c83-be2e-9e6683cda268}\localserver32 -> C:\Program Files\ESET\ESET Security\egui.exe (ESET, spol. s r.o. -> ESET)
CustomCLSID: HKU\S-1-5-21-2758214187-3853810005-2688088550-1001_Classes\CLSID\{bc49d5e2-91ab-411b-a09a-43d09a15bf59}\InprocServer32 -> C:\Program Files\Common Files\Wondershare\PDFelement11\AddIns\PEOfficeAddIn.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
CustomCLSID: HKU\S-1-5-21-2758214187-3853810005-2688088550-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-2758214187-3853810005-2688088550-1001_Classes\CLSID\{fb10f7d7-5374-d4e5-9687-dc17ff5a7324}\localserver32 -> C:\Program Files (x86)\MSI\MSI_Center_Updater\OneDC_Updater.exe (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\122.0.1.0\drivefsext.dll [2026-03-10] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\122.0.1.0\drivefsext.dll [2026-03-10] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\122.0.1.0\drivefsext.dll [2026-03-10] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\122.0.1.0\drivefsext.dll [2026-03-10] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\122.0.1.0\drivefsext.dll [2026-03-10] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\122.0.1.0\drivefsext.dll [2026-03-10] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\122.0.1.0\drivefsext.dll [2026-03-10] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\122.0.1.0\drivefsext.dll [2026-03-10] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\122.0.1.0\drivefsext.dll [2026-03-10] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-27] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-27] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\122.0.1.0\drivefsext.dll [2026-03-10] (Google LLC -> Google LLC.)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.209.1026.0002\FileSyncShell64.dll [2025-11-22] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\122.0.1.0\drivefsext.dll [2026-03-10] (Google LLC -> Google LLC.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_5a00035b3c0dd9d1\nvshext.dll [2025-09-06] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-27] (ESET, spol. s r.o. -> ESET)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [MidisrvTransferComplete] => 1
HKLM\...\Drivers32: [midi1] => C:\WINDOWS\system32\wdmaud2.drv [143360 2026-03-10] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Drivers32: [midi1] => C:\Windows\SysWOW64\wdmaud2.drv [91648 2026-03-10] (Microsoft Windows -> Microsoft Corporation)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Web Applications\_crx_iklipnlocgicakldbdjdneigmckalflk\Trimble Connect Web.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=iklipnlocgicakldbdjdneigmckalflk
ShortcutWithArgument: C:\Users\sern\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Trimble Connect Web.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=iklipnlocgicakldbdjdneigmckalflk
ShortcutWithArgument: C:\Users\sern\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\stepan - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"

==================== Loaded Modules (Whitelisted) =============

2024-06-04 15:06 - 2024-03-14 07:59 - 000925184 _____ () [File not signed] \\?\C:\Program Files\Autodesk\AdODIS\V1\Access\ui-plugins\ada\addons\adIPC.node
2024-06-04 15:06 - 2024-04-16 05:11 - 000371712 _____ () [File not signed] \\?\C:\Program Files\Autodesk\AdODIS\V1\Access\ui-plugins\ada\addons\adpUtil.node
2022-08-16 10:20 - 2022-08-16 10:20 - 000701440 _____ () [File not signed] C:\Program Files (x86)\Common Files\Graitec\sqlite3x86_lic.dll
2023-09-19 11:05 - 2023-09-19 11:05 - 003793408 _____ () [File not signed] C:\Program Files\Common Files\AB Studio Shared\CADLink\CADLinkDB_24_I764.dll
2023-09-19 11:05 - 2023-09-19 11:05 - 000389120 _____ () [File not signed] C:\Program Files\Common Files\AB Studio Shared\CADLink\CADLinkED_24_I764.dll
2023-09-19 11:05 - 2023-09-19 11:05 - 000731136 _____ () [File not signed] C:\Program Files\Common Files\AB Studio Shared\CADLink\CADLinkGE_24_I764.dll
2023-09-19 11:05 - 2023-09-19 11:05 - 000075264 _____ () [File not signed] C:\Program Files\Common Files\AB Studio Shared\CADLink\CADLinkGEX_24_I764.dll
2023-09-19 11:05 - 2023-09-19 11:05 - 000169984 _____ () [File not signed] C:\Program Files\Common Files\AB Studio Shared\CADLink\CADLinkMFC_24_I764.dll
2023-09-19 11:05 - 2023-09-19 11:05 - 000011776 _____ () [File not signed] C:\Program Files\Common Files\AB Studio Shared\CADLink\CADLinkROOT_24_I764.dll
2023-08-28 15:37 - 2023-08-28 15:37 - 001678336 _____ () [File not signed] C:\Program Files\Common Files\Graitec\IcGeometry_14x64.dll
2022-08-16 10:20 - 2022-08-16 10:20 - 000910336 _____ () [File not signed] C:\Program Files\Common Files\Graitec\sqlite3x64_lic.dll
2024-12-22 22:14 - 2023-12-14 16:16 - 000130048 _____ () [File not signed] D:\CADKON\2024\ExRxRasterServices_x64.tx
2024-12-22 22:14 - 2023-11-13 17:40 - 000429056 _____ () [File not signed] D:\CADKON\2024\GRCustomBlocks_x64.tx
2024-12-22 22:14 - 2023-12-14 16:17 - 000724992 _____ () [File not signed] D:\CADKON\2024\IcadGsMultiDevice.TXV
2024-12-22 22:14 - 2023-12-14 16:12 - 000323584 _____ () [File not signed] D:\CADKON\2024\IcadGsServerDevice.TXV
2024-12-22 22:14 - 2023-12-14 16:17 - 000627200 _____ () [File not signed] D:\CADKON\2024\IcadPrintDevice.TXV
2024-12-22 22:14 - 2023-11-13 17:40 - 002147840 _____ () [File not signed] D:\CADKON\2024\libcrypto.dll
2024-12-22 22:14 - 2023-03-14 16:36 - 000561664 _____ () [File not signed] D:\CADKON\2024\libharux64.dll
2024-12-22 22:14 - 2023-03-14 16:36 - 000093184 _____ () [File not signed] D:\CADKON\2024\LITEUNZIP.dll
2024-12-22 22:14 - 2023-03-14 16:36 - 000091648 _____ () [File not signed] D:\CADKON\2024\LiteZip.dll
2024-12-22 22:14 - 2023-12-14 16:16 - 000035328 _____ () [File not signed] D:\CADKON\2024\RasterImageDrawer.tx
2024-12-22 22:14 - 2023-11-13 17:40 - 001293312 _____ () [File not signed] D:\CADKON\2024\sisl_x64.dll
2024-12-22 22:14 - 2023-03-14 16:41 - 000393216 _____ () [File not signed] D:\CADKON\2024\stepcore.dll
2024-12-22 22:14 - 2023-03-14 16:41 - 000077312 _____ () [File not signed] D:\CADKON\2024\stepdai.dll
2024-12-22 22:14 - 2023-03-14 16:41 - 000148480 _____ () [File not signed] D:\CADKON\2024\stepeditor.dll
2024-12-22 22:14 - 2023-03-14 16:41 - 000057344 _____ () [File not signed] D:\CADKON\2024\steputils.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 000094720 _____ () [File not signed] D:\CADKON\2024\TD_Zlib_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 000099328 _____ () [File not signed] D:\CADKON\2024\ThreadPool_x64.TX
2024-12-22 22:14 - 2023-10-11 16:31 - 000016384 _____ () [File not signed] d:\cadkon\ck\CADKON2D.ARX
2024-12-22 22:14 - 2023-10-11 16:32 - 000203264 _____ () [File not signed] d:\cadkon\ck\ck2dautoirx_3.02_9.irx
2024-12-22 22:14 - 2022-04-13 13:29 - 000779264 _____ () [File not signed] D:\CADKON\CK\CkSQLite3_141_x64.dll
2024-12-22 22:14 - 2023-10-11 16:31 - 000032768 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\Ab2DLocalization.ckr
2024-12-22 22:14 - 2023-10-11 16:13 - 000093696 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\CADKON2D.RES
2024-12-22 22:14 - 2023-10-11 16:17 - 000228864 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\CADSET.CKR
2024-12-22 22:14 - 2023-10-11 16:17 - 000729600 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\CADSET.CRX
2024-12-22 22:14 - 2023-12-12 12:14 - 001030656 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\CK_9_MS.CKR
2024-12-22 22:14 - 2023-12-12 12:14 - 003617280 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\CK_9_MS.CRX
2024-12-22 22:14 - 2023-10-11 16:32 - 000166912 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] D:\CADKON\CK\Ck2dAutoServer.dll
2024-12-22 22:14 - 2023-10-11 16:13 - 000005632 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\Ck2DSupp.ckr
2024-12-22 22:14 - 2023-10-11 16:12 - 000306688 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\CkExternFnExp2d.crx
2024-12-22 22:14 - 2023-10-11 16:11 - 001405952 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\CkShared.dll
2024-12-22 22:14 - 2023-10-11 16:14 - 000167424 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] D:\CADKON\CK\ENTRY.CRX
2024-12-22 22:14 - 2023-10-11 16:26 - 000120832 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\tzb_budget.ckr
2024-12-22 22:14 - 2023-11-20 12:30 - 001236992 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\tzb_Budget.crx
2024-12-22 22:14 - 2023-10-11 16:27 - 000206336 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\TZB_INS.CKR
2024-12-22 22:14 - 2023-10-11 16:27 - 000773632 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\Tzb_Ins.crx
2024-12-22 22:14 - 2023-10-11 16:12 - 000609792 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] D:\CADKON\CK\tzbDBase.dll
2024-12-22 22:14 - 2023-10-11 16:30 - 000117248 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\Wizard.ckr
2024-12-22 22:14 - 2023-10-11 16:30 - 000926720 _____ (AB Studio Consulting+Engineering s.r.o.) [File not signed] d:\cadkon\ck\WIZARD.DLL
2024-12-22 22:14 - 2023-11-13 17:40 - 000947712 _____ (Autodesk, Inc.) [File not signed] D:\CADKON\2024\DwfCore_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 003595776 _____ (Autodesk, Inc.) [File not signed] D:\CADKON\2024\DwfToolkit_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 001310720 _____ (Autodesk, Inc.) [File not signed] D:\CADKON\2024\W3dTk_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 001041920 _____ (Autodesk, Inc.) [File not signed] D:\CADKON\2024\WhipTk_x64.dll
2024-12-22 22:14 - 2023-12-14 16:09 - 000027136 _____ (Graitec) [File not signed] D:\CADKON\2024\lang\ENU\ADekoRasterRes.dll
2024-12-22 22:14 - 2023-12-14 16:09 - 000029696 _____ (Graitec) [File not signed] D:\CADKON\2024\lang\ENU\bonusutilsRes.dll
2024-12-22 22:14 - 2023-12-14 16:09 - 000040960 _____ (Graitec) [File not signed] D:\CADKON\2024\lang\ENU\commands3dRes.dll
2024-12-22 22:14 - 2023-12-14 16:09 - 000013312 _____ (Graitec) [File not signed] D:\CADKON\2024\lang\ENU\commandsbasic3dRes.dll
2024-12-22 22:14 - 2023-12-14 16:09 - 000024064 _____ (Graitec) [File not signed] D:\CADKON\2024\lang\ENU\DCLRes.dll
2024-12-22 22:14 - 2023-12-14 16:09 - 000005120 _____ (Graitec) [File not signed] D:\CADKON\2024\lang\ENU\entpropRes.dll
2024-12-22 22:14 - 2023-12-14 16:09 - 000186368 _____ (Graitec) [File not signed] D:\CADKON\2024\lang\ENU\icadexplorerRes.dll
2024-12-22 22:14 - 2023-12-14 16:09 - 000097792 _____ (Graitec) [File not signed] D:\CADKON\2024\lang\ENU\icadpc3editorRes.dll
2024-12-22 22:14 - 2023-12-14 16:09 - 000064512 _____ (Graitec) [File not signed] D:\CADKON\2024\lang\ENU\icadplotstyleeditorRes.dll
2024-12-22 22:14 - 2023-12-14 16:09 - 010442240 _____ (Graitec) [File not signed] D:\CADKON\2024\lang\ENU\IcadRes.dll
2024-12-22 22:14 - 2023-12-14 16:09 - 000049152 _____ (Graitec) [File not signed] D:\CADKON\2024\lang\ENU\xrefmanagerRes.dll
2024-09-24 10:22 - 2024-09-24 10:22 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Client\AppVIsvSubsystems64.dll
2024-09-24 10:23 - 2024-09-24 10:23 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2024-09-24 10:22 - 2024-09-24 10:22 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Client\C2R64.dll
2024-09-24 10:23 - 2024-09-24 10:23 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
2026-01-02 18:16 - 2026-01-02 18:16 - 000000000 ____L (NVIDIA Corporation) [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\PlugIns\NVIDIA App\MessageBusRouter.dll] C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\plugins\NVIDIA Overlay\MessageBusRouter.dll
2026-01-02 18:15 - 2026-01-02 18:15 - 000000000 ____L (NVIDIA Corporation) [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 007602176 _____ (Open Design Alliance) [File not signed] [File is in use] D:\CADKON\2024\TD_Mgd_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 000154112 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\AcDgnLS_x64.tx
2024-12-22 22:14 - 2023-11-13 17:40 - 002698240 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\DbConstraints_x64.tx
2024-12-22 22:14 - 2023-11-13 17:40 - 000014336 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\GRTCInterfacex64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 000740864 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\ModelerGeometry_x64.tx
2024-12-22 22:14 - 2023-11-13 17:40 - 003185664 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\OdBrepModeler_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 000091136 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\olessx64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 000399872 _____ (Open Design Alliance) [File not signed] d:\cadkon\2024\pdfmodulevi_x64.tx
2024-12-22 22:14 - 2023-11-13 17:40 - 000122880 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\RasterProcessor_x64.TX
2024-12-22 22:14 - 2023-11-13 17:40 - 000412160 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\RecomputeDimBlock_x64.TX
2024-12-22 22:14 - 2023-11-13 17:40 - 006267904 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\RxRasterServices_x64.TX
2024-12-22 22:14 - 2023-11-13 17:40 - 000601600 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_3DSolidHistory_x64.tx
2024-12-22 22:14 - 2023-11-13 17:40 - 001548288 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_AcisBuilder_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 000015360 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_Alloc_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 000429056 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_Ave_x64.TX
2024-12-22 22:14 - 2023-11-13 17:40 - 000194048 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_Br_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 000187904 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_BrepBuilder_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 000206336 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_BrepBuilderFiller_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 000806912 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_BrepRenderer_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 015923712 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_Db_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 000764416 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_DbRoot_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 001397248 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_DgnImport_x64.tx
2024-12-22 22:14 - 2023-11-13 17:40 - 000765440 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_Dwf7Export_x64.tx
2024-12-22 22:14 - 2023-11-13 17:40 - 001068032 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_DynBlocks_x64.tx
2024-12-22 22:14 - 2023-11-13 17:40 - 006187008 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_Ge_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 002787328 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_Gi_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 002143232 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_Gs_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 001367040 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_Root_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 000647168 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_Sm_x64.tx
2024-12-22 22:14 - 2023-11-13 17:40 - 000072192 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TD_SpatialIndex_x64.dll
2024-12-22 22:14 - 2023-11-13 17:40 - 012910592 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\TG_Db_x64.tx
2024-12-22 22:14 - 2023-11-13 17:40 - 000795648 _____ (Open Design Alliance) [File not signed] D:\CADKON\2024\WinOpenGL_x64.txv
2024-12-22 22:14 - 2023-03-14 16:36 - 002186752 _____ (PoDoFo) [File not signed] D:\CADKON\2024\podofox64.dll
2023-12-27 12:35 - 2018-06-14 12:14 - 000187392 _____ (Seiko Epson Corporation) [File not signed] C:\WINDOWS\System32\E_YLMBSBE.DLL
2023-07-20 04:02 - 2023-07-20 04:02 - 000182784 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\EFXLM16A.DLL

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\Software\Classes\.scr: AutoCADLTScriptFile =>

==================== Internet Explorer (Whitelisted) =============

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_471\bin\ssv.dll [2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_471\bin\jp2ssv.dll [2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-02-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-03-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-03-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-03-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-03-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-03-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-03-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-03-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-03-03] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\...\sharepoint.com -> hxxps://atalianworld-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2022-05-07 06:24 - 2024-09-15 17:45 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost

2024-05-23 21:51 - 2025-07-27 09:25 - 000000502 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.0.1
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
Wi-Fi: Intel(R) Wi-Fi 6 AX201 160MHz -> Netwtw14.sys

steamxboxndi: Steam Xbox Controller Enhanced Features Driver

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Common Files\Graitec\;C:\Program Files (x86)\Common Files\Graitec\;C:\Program Files\NVIDIA Corporation\NVIDIA App\NvDLISR
HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\sern\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\5706994059716698589\134188407819513843.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller"
HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\...\StartupApproved\Run: => "Microsoft.Lists"
HKU\S-1-5-21-2758214187-3853810005-2688088550-1001\...\StartupApproved\Run: => "EpicGamesLauncher"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{B393D556-B760-42EB-8547-165DF5509A70}D:\stažené soubory\anydesk.exe] => (Allow) D:\stažené soubory\anydesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [TCP Query User{F6D11E63-836D-498A-BA41-C801333EEDD7}D:\stažené soubory\anydesk.exe] => (Allow) D:\stažené soubory\anydesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [UDP Query User{BA4FE2C5-9FED-4A25-8453-FE485C7B6DA7}D:\stažené soubory\anydesk (1).exe] => (Allow) D:\stažené soubory\anydesk (1).exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [TCP Query User{3346ED86-6111-4527-955B-E29B399319EC}D:\stažené soubory\anydesk (1).exe] => (Allow) D:\stažené soubory\anydesk (1).exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{E1797D77-6956-435D-BDFB-B5129342268B}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{F37BAF61-EDBB-4358-B6BB-CC71A573DB07}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{E49F654B-64FB-4154-8D05-4BB811D5E5F5}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{B5C4FE50-1F3D-4477-9632-07D72BF3E6CB}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{C73E5024-1B65-4B59-B813-37F6B483CA92}] => (Allow) D:\IQRC_Zbozinek\IQRC_Zbozinek\iqrc.exe (Amicus) [File not signed]
FirewallRules: [{58A43AF5-B85B-421A-AECE-52CBB95C5205}] => (Allow) D:\IQRC_Zbozinek\IQRC_Zbozinek\iqrc.exe (Amicus) [File not signed]
FirewallRules: [{8F5141F0-E356-4C3F-975C-5638CF0699B6}] => (Allow) D:\IQRC_Zbozinek\IQRC_Zbozinek\iqrc.exe (Amicus) [File not signed]
FirewallRules: [{0675EFC3-F184-4C16-BFBD-6FC6DEFCEC13}] => (Allow) D:\IQRC_Zbozinek\IQRC_Zbozinek\iqrc.exe (Amicus) [File not signed]
FirewallRules: [UDP Query User{C3214CD8-ACA8-49B6-B16A-2AE196941145}D:\stažené soubory\anydesk.exe] => (Allow) D:\stažené soubory\anydesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [TCP Query User{27BBEA0B-9867-49F6-ABDE-2B584AB01909}D:\stažené soubory\anydesk.exe] => (Allow) D:\stažené soubory\anydesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{64EC9E69-40BE-4F1B-B704-AF94284959C2}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{06D5E82A-3F88-4A0E-AEA9-9D420C108C6C}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{6C037B84-4FD4-49EA-B5A5-8C2B3C091154}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{86229055-6BF1-4C6A-A7E8-06022E37ABAB}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{98F119AE-B6B7-4A88-A793-827F2C82A23E}] => (Allow) F:\SteamLibrary\steamapps\common\Valheim\valheim.exe => No File
FirewallRules: [{A543FDB9-F2E3-4E3D-ABD4-B57BA9B91B6C}] => (Allow) F:\SteamLibrary\steamapps\common\Valheim\valheim.exe => No File
FirewallRules: [{50A6EF21-34E7-4018-AE83-2508E43ED3D1}] => (Allow) F:\SteamLibrary\steamapps\common\Warhammer 40,000 Space Marine\SpaceMarine.exe => No File
FirewallRules: [{F97DE981-ED20-403E-BEEC-C30B3E2AFD62}] => (Allow) F:\SteamLibrary\steamapps\common\Warhammer 40,000 Space Marine\SpaceMarine.exe => No File
FirewallRules: [{56B04015-8826-42E6-8D18-2FE3631E179A}] => (Allow) C:\SteamLibrary\steamapps\common\KingdomComeDeliverance2\Bin\Win64MasterMasterSteamPGO\KingdomCome.exe (Warhorse Studios sro) [File not signed]
FirewallRules: [{7E068281-C8BF-466F-96DB-5552882EEE76}] => (Allow) C:\SteamLibrary\steamapps\common\KingdomComeDeliverance2\Bin\Win64MasterMasterSteamPGO\KingdomCome.exe (Warhorse Studios sro) [File not signed]
FirewallRules: [{3BFC6CA6-41BA-41BB-8B5F-F84747AC8AA7}] => (Allow) C:\SteamLibrary\steamapps\common\Baldurs Gate 3\Launcher\LariLauncher.exe => No File
FirewallRules: [{886ECE8F-8168-4F44-BA27-D80A9752B56C}] => (Allow) C:\SteamLibrary\steamapps\common\Baldurs Gate 3\Launcher\LariLauncher.exe => No File
FirewallRules: [{1B40DCAF-5A1B-4965-9B46-5BBC5C17F258}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{CD22D2AB-D1B7-4360-B7B8-1E662A14A822}] => (Allow) C:\SteamLibrary\steamapps\common\Medieval Dynasty\Medieval_Dynasty.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{4D011DBC-1672-45A1-977F-A1E2C1DA2058}] => (Allow) C:\SteamLibrary\steamapps\common\Medieval Dynasty\Medieval_Dynasty.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{DC007A96-168B-409D-A668-B070D9A4196A}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{13E8379F-70F6-4A87-B077-0B9F39C184C6}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [{0268CD85-A78F-4ACD-9345-35E763FB89D3}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [{BFFE4322-FE64-40B0-ABC6-A8D33BC0C3E4}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed Revelations\ACRSP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{123DEC7F-5792-41E0-AC80-E77B50966D73}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed Revelations\ACRSP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{47F65889-CFA9-4046-9068-393F7BF167BE}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed Revelations\ACRPR.exe (Ubisoft Entertainment -> )
FirewallRules: [{E7EBB4F7-6D34-4AED-9E99-231F9EF3BB2A}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed Revelations\ACRPR.exe (Ubisoft Entertainment -> )
FirewallRules: [{A44E17DC-9836-4D6B-AC8A-B6BE8716081D}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{9E63FFFE-DEED-478B-863A-4C2530060CDB}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{A3FB10E9-40BB-461E-9ABC-1E45A8AF3B93}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{3C25D40E-A08D-4530-8F77-BF8145259F0C}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{0224579B-A27B-482E-8CE0-80B451444B12}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{19305DB6-15CB-4DD1-BD14-6D212930840E}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{970E9B65-A08C-4F64-AB0E-AD3C856AFED8}] => (Allow) C:\SteamLibrary\steamapps\common\Hogwarts Legacy\HogwartsLegacy.exe (Warner Bros. Interactive) [File not signed]
FirewallRules: [{1AC6C87B-8E3B-4E41-8609-C2E258DB0DCD}] => (Allow) C:\SteamLibrary\steamapps\common\Hogwarts Legacy\HogwartsLegacy.exe (Warner Bros. Interactive) [File not signed]
FirewallRules: [{F694F022-E856-4C61-9124-71819233FE0C}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Crawl\Crawl.exe () [File not signed]
FirewallRules: [{6D37B89B-F2F7-4FFA-B0EE-510A2C6B7C35}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Crawl\Crawl.exe () [File not signed]
FirewallRules: [{D511DF09-2CDF-4FC5-A61E-6B42CFC8968F}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Cuphead\Cuphead.exe () [File not signed]
FirewallRules: [{F77A70E1-6C51-4D36-AF48-5995BDCDD73C}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Cuphead\Cuphead.exe () [File not signed]
FirewallRules: [{6823BF92-9FC0-4991-A088-321BE694D618}] => (Allow) LPort=32683
FirewallRules: [{5BDECA92-68CB-434C-9A79-EAF28216FCEF}] => (Allow) LPort=33683
FirewallRules: [{A2CB5327-ACB1-4B26-B450-D623BAF1A81C}] => (Allow) LPort=26822
FirewallRules: [{1C18CF4C-208C-418D-8C84-46AF4825C79B}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:730.57 GB) (Free:156.27 GB) (21%)

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (03/25/2026 04:09:31 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 29500. ID zprávy: [0x2509].

Error: (03/25/2026 10:30:56 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 5900. ID zprávy: [0x2509].

Error: (03/25/2026 10:12:31 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 26808. ID zprávy: [0x2509].

Error: (03/23/2026 04:00:18 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 8428. ID zprávy: [0x2509].

Error: (03/22/2026 03:52:09 PM) (Source: Application Error) (EventID: 1000) (User: KATANA)
Description: Název chybující aplikace: GameInputRedistService.exe, verze: 3.3.163.0, časové razítko: 0x69af4c87
Název chybujícího modulu: GameInputRedistService.exe, verze: 3.3.163.0, časové razítko: 0x69af4c87
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000000d80f
ID chybujícího procesu: 0x1134
Čas spuštění chybující aplikace: 0x1dcba0b5dd9fc3c
Cesta k chybující aplikaci: C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
Cesta k chybujícímu modulu: C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
ID sestavy: 5c39cfc2-42f7-46d1-b213-1e689684c14f
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (03/22/2026 03:52:06 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Systém Windows nemůže načíst knihovnu DLL rozšiřitelných čítačů C:\WINDOWS\system32\sysmain.dll (kód chyby Win32 126).

Error: (03/22/2026 03:45:12 PM) (Source: Universal Print) (EventID: 1) (User: )
Description: Failed to GetUserSid. hr: 0x8001012d

Error: (03/22/2026 03:43:12 PM) (Source: NIHardwareService) (EventID: 259) (User: )
Description: MIDIDevice: Unable to unlock BMIDI DLL/driver


System errors:
=============
Error: (03/25/2026 10:08:55 AM) (Source: Microsoft-Windows-HAL) (EventID: 21) (User: NT AUTHORITY)
Description: Hardwarové hodiny v reálném čase nebyly nastaveny, protože selhalo vyhodnocení metody ACPI Time and Alarm Device. Stav: 3221225473.

Error: (03/25/2026 10:08:55 AM) (Source: Microsoft-Windows-HAL) (EventID: 21) (User: NT AUTHORITY)
Description: Hardwarové hodiny v reálném čase nebyly nastaveny, protože selhalo vyhodnocení metody ACPI Time and Alarm Device. Stav: 3221225473.

Error: (03/25/2026 10:08:55 AM) (Source: Microsoft-Windows-HAL) (EventID: 21) (User: NT AUTHORITY)
Description: Hardwarové hodiny v reálném čase nebyly nastaveny, protože selhalo vyhodnocení metody ACPI Time and Alarm Device. Stav: 3221225473.

Error: (03/24/2026 11:22:14 PM) (Source: DCOM) (EventID: 10010) (User: KATANA)
Description: Server {021E4F06-9DCC-49AD-88CF-ECC2DA314C8A} se v daném časovém limitu neregistroval u služby DCOM.

Error: (03/24/2026 11:19:42 PM) (Source: DCOM) (EventID: 10010) (User: KATANA)
Description: Server {021E4F06-9DCC-49AD-88CF-ECC2DA314C8A} se v daném časovém limitu neregistroval u služby DCOM.

Error: (03/24/2026 11:15:43 PM) (Source: DCOM) (EventID: 10010) (User: KATANA)
Description: Server {021E4F06-9DCC-49AD-88CF-ECC2DA314C8A} se v daném časovém limitu neregistroval u služby DCOM.

Error: (03/24/2026 11:11:46 PM) (Source: DCOM) (EventID: 10010) (User: KATANA)
Description: Server {021E4F06-9DCC-49AD-88CF-ECC2DA314C8A} se v daném časovém limitu neregistroval u služby DCOM.

Error: (03/24/2026 11:07:42 PM) (Source: DCOM) (EventID: 10010) (User: KATANA)
Description: Server {021E4F06-9DCC-49AD-88CF-ECC2DA314C8A} se v daném časovém limitu neregistroval u služby DCOM.


CodeIntegrity:
===============
Date: 2026-03-25 15:49:19
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\ESET\ESET Security\ekrn.exe) attempted to load \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

BIOS: American Megatrends International, LLC. E1585IMS.319 03/17/2025
Motherboard: Micro-Star International Co., Ltd. MS-1585
Processor: 12th Gen Intel(R) Core(TM) i7-12650H
Percentage of memory in use: 80%
Total physical RAM: 16085.13 MB
Available physical RAM: 3142.62 MB
Total Virtual: 21205.13 MB
Available Virtual: 1017.06 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:730.57 GB) (Free:156.27 GB) (Model: WD PC SN560 SDDPNQE-1T00-1032) NTFS
Drive d: () (Fixed) (Total:192.96 GB) (Free:53.18 GB) (Model: WD PC SN560 SDDPNQE-1T00-1032) NTFS
Drive e: () (Fixed) (Total:24.41 GB) (Free:1.28 GB) (Model: WD PC SN560 SDDPNQE-1T00-1032) NTFS
Drive g: (Google Drive) (Fixed) (Total:15 GB) (Free:1.07 GB) (Model: WD PC SN560 SDDPNQE-1T00-1032) FAT32

\\?\Volume{d17068ca-46b3-478b-bd50-8533626db0a8}\ () (Fixed) (Total:0.92 GB) (Free:0.07 GB) NTFS
\\?\Volume{bdbcbe06-a6d5-4494-b408-f34c36c4fca8}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 953.9 GB) (Disk ID: 20694DDF)

Partition: GPT.

==================== End of Addition.txt =======================

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
FirewallRules: [{64EC9E69-40BE-4F1B-B704-AF94284959C2}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{06D5E82A-3F88-4A0E-AEA9-9D420C108C6C}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{98F119AE-B6B7-4A88-A793-827F2C82A23E}] => (Allow) F:\SteamLibrary\steamapps\common\Valheim\valheim.exe => No File
FirewallRules: [{A543FDB9-F2E3-4E3D-ABD4-B57BA9B91B6C}] => (Allow) F:\SteamLibrary\steamapps\common\Valheim\valheim.exe => No File
FirewallRules: [{50A6EF21-34E7-4018-AE83-2508E43ED3D1}] => (Allow) F:\SteamLibrary\steamapps\common\Warhammer 40,000 Space Marine\SpaceMarine.exe => No File
FirewallRules: [{F97DE981-ED20-403E-BEEC-C30B3E2AFD62}] => (Allow) F:\SteamLibrary\steamapps\common\Warhammer 40,000 Space Marine\SpaceMarine.exe => No File
FirewallRules: [{3BFC6CA6-41BA-41BB-8B5F-F84747AC8AA7}] => (Allow) C:\SteamLibrary\steamapps\common\Baldurs Gate 3\Launcher\LariLauncher.exe => No File
FirewallRules: [{886ECE8F-8168-4F44-BA27-D80A9752B56C}] => (Allow) C:\SteamLibrary\steamapps\common\Baldurs Gate 3\Launcher\LariLauncher.exe => No File
FirewallRules: [{1B40DCAF-5A1B-4965-9B46-5BBC5C17F258}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{3BFC6CA6-41BA-41BB-8B5F-F84747AC8AA7}] => (Allow) C:\SteamLibrary\steamapps\common\Baldurs Gate 3\Launcher\LariLauncher.exe => No File
FirewallRules: [{886ECE8F-8168-4F44-BA27-D80A9752B56C}] => (Allow) C:\SteamLibrary\steamapps\common\Baldurs Gate 3\Launcher\LariLauncher.exe => No File
FirewallRules: [{1B40DCAF-5A1B-4965-9B46-5BBC5C17F258}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\aahnibhpidkdaeaplfdogejgoajkjgob [2025-12-01] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\cicohiknlppcipjbfpoghjbncojncjgb [2024-12-20] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-03-22] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-03-19] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-02-02] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-11-20] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2025-11-13] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2025-10-13] [UpdateUrl:0] <==== ATTENTION
Error reading preferences. Please check "Secure Preferences" file for possible corruption. <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-09-12] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-03-18] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fdpohaocaechififmbbbbbknoalclacl [2026-01-21] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-03-19] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-03-19] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-02-02] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-11-25] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\sern\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2025-11-16] [UpdateUrl:0] <==== ATTENTION
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2

EmptyTemp:
End

Uložte do D:\Stažené soubory jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.