Pády amdkmdag.sys (nejspíše) při spuštění HW akcelerace

To, co se nehodí jinam..

Moderátor: Moderátoři

Odpovědět
Zpráva
Autor
Sirius
Návštěvník
Návštěvník
Příspěvky: 178
Registrován: 18 Zář 2014 17:21

Pády amdkmdag.sys (nejspíše) při spuštění HW akcelerace

#1 Příspěvek od Sirius »

Zdravím,

než popíšu problém, se kterým se v práci (škola) potýkáme... Už jsem zkoušel kontaktovat servis prodejce PC. Jejich jedinou radou však byla čistá instalace OS, což je v celé PC učebně dost problematické řešení, když už začal školní rok. Já i školní IT jsme již s rozumem v koncích, tak zkoušíme vše možné, než k přeinstalování opravdu přistoupíme.

Od přípravného týdne se u celé jedné učebny s identickými prebuildy (Lenovo ThinkCentre M75T Gen 2) potýkáme s pády AMD driverů. Projevují se zamrznutím obrazu, pak černou obrazovkou a následně buď obraz naběhne s chybovou hláškou AMD, nebo se zobrazí zběsilé zrnění a je potřeba systém natvrdo restartovat.
Z dmp file jsem vyčetl, že selhává amdkmdag.sys kvůli VIDEO_ENGINE_TIMEOUT_DETECTED. Historie spolehlivosti pak hlásí LiveKernelEvent ID 141. Postupným testováním jsem zjistil, že driver selže pravděpodobně ve chvíli, kdy si jakákoli aplikace vyžádá HW akceleraci. Teorii jsem pak otestoval v Edge a Chrome - při přístupu na web který si vyžádal HW akceleraci (například Adobe) driver selhal, když byla v prohlížeči zapnutá HW akcelerace. Po vypnutí v obou prohlížečích lze však takové weby bez problémů otevřít. Stejně tak tomu je i u aplikací, jako například Adobe Creative Cloud. Z nějakého důvodu si login screen vyžádá HW akceleraci, což opět vede k pádu. Pokud se přes prvotní pády podaří do CC přihlásit, pády ustanou (samotné Adobe aplikace zřejmě akceleraci nežádají, ačkoli je zapnutá animovaná GPU lupa).

Jelikož na konci minulého školního roku jsme tyto problémy neměli, zde je seznam změn provedených přes prázdniny:
- Aktualizace Win 11
- Aktualizace aplikací (Adobe, CAD, Veyon...)
- Aktualizace AMD ovladačů
- Kalibrace monitorů kalibrační sondou

Ve škole máme ještě 2 další AMD prebuildy. Na jednom se sice pád amdkmdag.sys objevuje v historii spolehlivosti, ale obraz zatím nikomu nezamrzl. Na třetím prebuildu se pak chyba neobjevuje vůbec. Všechny systémy mají AMD CPU s iGPU, ovšem vždy s jiným modelem. Ve škole máme i několik Intel sestav, které jsou však tímto problémem absolutně netknuté, ačkoli je na všech totožný SW. Na nejvíce dotčené sestavě (již zmíněný Lenovo prebuild) je nejstarší CPU, Ryzen 5 PRO 5650G, na který již od května nevyšla žádná aktualizace. Nemůžu však potvrdit, jestli to je hlavní důvod, proč na novějším prebuildu (s driverem ze srpna) obraz nezamrzá úplně.

Co jsme již zkoušeli:
- Instalace AMD driverů po DDU (ať už celého Adrenalin balíčku, tak pouze ovladače)
- Ponechat výběr driveru na Windows (nainstaloval verzi z roku 2025)
- Aktualizovat BIOS přes Lenovo Vantage
- Nainstalovat OEM ovladače přes Lenovo Vantage - nehledě na verzi AMD ovladače, driver vždy selže. PC je stabilní pouze s defaultním Microsoft GPU ovladačem.
- Odinstalovat kalibrační SW (Spyder a DisplayCAL) pro potencionální kolize ICC profilů s AMD driverem
- Odinstalovat kalibrovaný ICC profil a znovu nastavit používání výchozího profilu
- Přeinstalovat Creative Cloud po použití Creative Cloud Cleaneru
- Vypnout HVCI (izolace jádra byla však již všude vypnutá)
- Vypnout MPO
- Vypnout HW akceleraci přes Regedit, což ovšem neudělalo nejspíš vůbec nic (údajně má být možnost HW akceleraci vypnout i v pokročilém nastavení displeje, zde však není)
- Odinstalovat všechny aktualizace nainstalované v srpnu, včetně KB5121003, která je údajně problematická
- Odeslat chybové hlášení po pádu přes AMD Adrenalin

Další možnosti které jsem dohledal na internetu pak zmiňovaly zkusit vypnout EXPO a fTPM 2.0, ale BIOS na tomto prebuildu je dost osekaný a tyhle možnosti úplně chybí. Možná za zmínku stojí i to, že když jsem chtěl aktualizovat AMD ovladače přes již nainstalovaný Adrenalin, dostal jsem chybovou hlášku o tom, že je nainstalovaná nekompatibilní verze s nabídkou stažení nové verze. To však vůbec nefungovalo, tak jsem stáhl balík přímo ze stránek AMD.

Jelikož nic z výše uvedeného nepomohlo a systém stále padá, nedokážu ani tipnout, jaká změna mohla pády odstartovat. Přikládám log z FRST (těžko říct, jestli v tomto případě bude vůbec k něčemu dobrý) a Addition. Z logů jsem záměrně smazal záznamy o studentských účtech, které obsahují jejich jména. I tak jsou jejich účty irelevantní, protože nejen že nemají přístup k nastavení systému a instalacím, ale chyby se objevily už před jejich příchodem do školy. V případě potřeby můžu zkusit další testy a logy (s menším zpožděním - můžu je provádět jen když v učebně není žádná výuka). Vím, že je tento dotaz "trochu" mimo dotazy zde běžně pokládané, ale došly nám nápady i možnosti.

Za jakékoli případné rady a tipy budeme vděční.

Edit: Přehlédl jsem pár řádků se jmény studentů - smazáno.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 09-09-2026
Ran by L (administrator) on EM001D15 (LENOVO 11RC0001CK) (09-09-2026 15:11:29)
Running from C:\Users\l\Desktop\FRST64.exe
Loaded Profiles: L
Platform: Microsoft Windows 11 Pro Version 25H2 26200.9445 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe
(Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(C:\Program Files (x86)\Datacolor\Spyder\Utility\SpyderUtility.exe ->) (SpyderEngage) [File not signed] [File is in use] C:\Program Files (x86)\Datacolor\Spyder\Utility\SpyderEngage.exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantage-(GenericTelemetryAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantage-(LenovoSystemUpdateAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe ->) (Adobe Inc. -> Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat DC\Acrobat\acrotray.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\Program Files\Common Files\Esko\Cloud Resource Syncer\EskoCloudResourceSyncerWatchdog.exe ->) (Esko Software -> Esko) C:\Program Files\Common Files\Esko\Cloud Resource Syncer\EskoCloudResourceSyncer.exe
(C:\Program Files\Tablet\Wacom\WacomHost.exe ->) (Wacom Co., Ltd. -> Wacom Co. Ltd.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(C:\Program Files\Tablet\Wacom\WTabletServicePro.exe ->) (Wacom Co., Ltd. -> ) C:\Program Files\Tablet\Wacom\Wacom_UpdateUtil.exe
(C:\Program Files\Tablet\Wacom\WTabletServicePro.exe ->) (Wacom Co., Ltd. -> Wacom Co. Ltd.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(C:\Program Files\Tablet\Wacom\WTabletServicePro.exe ->) (Wacom Co., Ltd. -> Wacom Co. Ltd.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(C:\Program Files\Tablet\Wacom\WTabletServicePro.exe ->) (Wacom Technology Corp. -> Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(C:\Program Files\Veyon\veyon-service.exe ->) (Tobias Junghans -> Veyon Solutions) C:\Program Files\Veyon\veyon-server.exe
(C:\Program Files\WindowsApps\MSTeams_26198.304.4946.9672_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.92\msedgewebview2.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MsMpEng.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\DefenderSessionHelper.exe
(C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\Microsoft-Edge-WebView\msedgewebview2.exe
(cmd.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(cmd.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\AppProvisioningPlugin.exe
(DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\atieclxx.exe
(explorer.exe ->) ((c)2026 Datacolor) [File not signed] C:\Program Files (x86)\Datacolor\Spyder\Utility\SpyderUtility.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe
(explorer.exe ->) (Esko Software -> Esko BV) C:\Program Files\Common Files\Esko\SubscriptionService\SubscriptionService\EskoSubscriptionNotifier.exe
(explorer.exe ->) (Esko Software -> Esko) C:\Program Files\Common Files\Esko\Cloud Resource Syncer\EskoCloudResourceSyncerWatchdog.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_26f0df01c9da165d\RtkAudUService64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <4>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.92\msedgewebview2.exe <5>
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\Microsoft-Edge-WebView\msedgewebview2.exe <6>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2>
(Open Source Developer, Florian Höch -> ) C:\Program Files (x86)\DisplayCAL\DisplayCAL-apply-profiles.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_fbce97352464e3d7\amdfendrsr.exe
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\atiesrxx.exe
(services.exe ->) (Esko Software -> ) C:\Esko\bg_prog_egsis_v010\bin_ix64\egsissrv.exe
(services.exe ->) (Esko Software -> Esko BV) C:\Program Files\Common Files\Esko\SubscriptionService\SubscriptionService\SubscriptionService.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_26f0df01c9da165d\RtkAudUService64.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Tobias Junghans -> Veyon Solutions) C:\Program Files\Veyon\veyon-service.exe
(services.exe ->) (Wacom Co., Ltd. -> Wacom Co. Ltd.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(svchost.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_26f0df01c9da165d\RtkAudUService64.exe [3119616 2026-01-19] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrotray.exe [9426904 2026-09-07] (Adobe Inc. -> Adobe Systems Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Esko Subscription Notifier] => C:\Program Files\Common Files\Esko\SubscriptionService\SubscriptionService\EskoSubscriptionNotifier.exe [1051568 2024-05-23] (Esko Software -> Esko BV)
HKLM\...\Run: [Esko Cloud Resource Syncer Watchdog] => C:\Program Files\Common Files\Esko\Cloud Resource Syncer\EskoCloudResourceSyncerWatchdog.exe [990760 2025-02-26] (Esko Software -> Esko)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [133128 2025-06-02] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2535400 2026-08-17] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-3957471180-2817585343-1191361983-1320\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [45610456 2026-09-07] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3957471180-2817585343-1191361983-1320\...\Run: [AMDNoiseSuppression] => "C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe" (No File)
HKU\S-1-5-21-3957471180-2817585343-1191361983-1320\...\Run: [MicrosoftEdgeAutoLaunch_8DB98180EEB796AFF12FA19D410DB912] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4141096 2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Run: [MicrosoftEdgeAutoLaunch_5F884550F72B0757E2620CBE9B45D387] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4141096 2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\system: [DisableRegistryTools] 2
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\system: [NoDispSettingsPage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\system: [NoDispBackgroundPage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\system: [NoDispScrSavPage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\system: [NoVisualStyleChoice] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\system: [NoColorChoice] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\system: [NoDispAppearancePage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\Explorer: [NoRun] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\Explorer: [NoFolderOptions] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\Explorer: [NoThemesTab] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\Explorer: [NoSearchFilesInStartMenu] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\Explorer: [NoSearchProgramsInStartMenu] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\Explorer: [NoStartMenuMyGames] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\Explorer: [NoSetFolders] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\Explorer: [NoWelcomeScreen] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\...\Policies\Explorer: [NoComputersNearMe] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1465\Software\Policies\...\system: [DisableCMD] 2
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Run: [MicrosoftEdgeAutoLaunch_B22D6C556D0C46E7339A6C4E15C93058] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4141096 2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\system: [DisableRegistryTools] 2
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\system: [NoDispSettingsPage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\system: [NoDispBackgroundPage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\system: [NoDispScrSavPage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\system: [NoVisualStyleChoice] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\system: [NoColorChoice] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\system: [NoDispAppearancePage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\Explorer: [NoRun] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\Explorer: [NoFolderOptions] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\Explorer: [NoThemesTab] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\Explorer: [NoSearchFilesInStartMenu] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\Explorer: [NoSearchProgramsInStartMenu] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\Explorer: [NoStartMenuMyGames] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\Explorer: [NoSetFolders] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\Explorer: [NoWelcomeScreen] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\...\Policies\Explorer: [NoComputersNearMe] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1478\Software\Policies\...\system: [DisableCMD] 2
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Run: [MicrosoftEdgeAutoLaunch_1199211B6795BE54F241EA9541709C53] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4141096 2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\system: [DisableRegistryTools] 2
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\system: [NoDispSettingsPage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\system: [NoDispBackgroundPage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\system: [NoDispScrSavPage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\system: [NoVisualStyleChoice] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\system: [NoColorChoice] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\system: [NoDispAppearancePage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\Explorer: [NoRun] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\Explorer: [NoFolderOptions] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\Explorer: [NoThemesTab] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\Explorer: [NoSearchFilesInStartMenu] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\Explorer: [NoSearchProgramsInStartMenu] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\Explorer: [NoStartMenuMyGames] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\Explorer: [NoSetFolders] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\Explorer: [NoWelcomeScreen] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\...\Policies\Explorer: [NoComputersNearMe] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1600\Software\Policies\...\system: [DisableCMD] 2
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Run: [MicrosoftEdgeAutoLaunch_718A5FD9EE5156382A005392B6E628AE] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4141096 2025-05-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\system: [DisableRegistryTools] 2
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\system: [NoDispSettingsPage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\system: [NoDispBackgroundPage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\system: [NoDispScrSavPage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\system: [NoVisualStyleChoice] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\system: [NoColorChoice] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\system: [NoDispAppearancePage] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\Explorer: [NoRun] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\Explorer: [NoFolderOptions] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\Explorer: [NoThemesTab] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\Explorer: [NoSearchFilesInStartMenu] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\Explorer: [NoSearchProgramsInStartMenu] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\Explorer: [NoStartMenuMyGames] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\Explorer: [NoSetFolders] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\Explorer: [NoWelcomeScreen] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\...\Policies\Explorer: [NoComputersNearMe] 1
HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\Software\Policies\...\system: [DisableCMD] 2
HKLM\...\Windows x64\Print Processors\XeroxV5Print: C:\Windows\System32\spool\prtprocs\x64\x5print.dll [118872 2025-01-15] (Microsoft Windows Hardware Compatibility Publisher -> Xerox Corporation)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [203936 2025-07-15] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\KM Language Monitor: C:\WINDOWS\system32\KMPJL64.DLL [159952 2022-08-22] (Microsoft Windows Hardware Compatibility Publisher -> KYOCERA Document Solutions Inc.)
HKLM\...\Print\Monitors\KX Language Monitor: C:\WINDOWS\system32\KXPLM64.DLL [123912 2024-12-09] (KYOCERA Document Solutions Inc. -> KYOCERA Document Solutions Inc.)
HKLM\...\Print\Monitors\Port pro virtualizaci Xerox: C:\WINDOWS\system32\x5lrsl.dll [156736 2025-01-15] (Microsoft Windows Hardware Compatibility Publisher -> Xerox Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\152.0.7977.83\Installer\chrmstp.exe [7936664 2026-09-09] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk [2026-08-31]
ShortcutTarget: SpyderUtility.lnk -> C:\Program Files (x86)\Datacolor\Spyder\Utility\SpyderUtility.exe ((c)2026 Datacolor) [File not signed]
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

"C:\Windows\System32\Tasks\Microsoft\Windows\GroupPolicy\{3E0A038B-D834-4930-9981-E89C9BFF83AA}" Access Denied. <==== ATTENTION
"C:\Windows\System32\Tasks\Microsoft\Windows\GroupPolicy\{A7719E0F-10DB-4640-AD8C-490CC6AD5202}" Access Denied. <==== ATTENTION
Task: {6D67AC22-D59F-4CF6-91A4-D15C1CF195CA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1617408 2026-08-03] (Adobe Inc. -> Adobe Inc.)
Task: {CDF0C456-43CD-4A4C-B522-D4D2890D54E8} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030920 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {1F31E2A8-ACB3-4337-A3F8-71345FA234BA} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [184080 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {9E463493-418F-4A13-AF24-C9DF8658019E} - System32\Tasks\AMDScoSupportTypeUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030920 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {F6B55271-280C-47CF-A04E-F1A9F2974249} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [3389784 2026-09-09] (Microsoft Windows -> Microsoft Corporation)
Task: {198C16CA-09E0-43D2-BB4F-E25532D4434A} - System32\Tasks\DisplayCAL Profile Loader Launcher => C:\Program Files (x86)\DisplayCAL\DisplayCAL-apply-profiles-launcher.exe [178120 2019-12-14] (Open Source Developer, Florian Höch -> )
Task: {470B00EE-C10C-4090-A128-7D1D48DB2EBF} - System32\Tasks\DisplayCAL Profile Loader Launcher - Daily Restart => C:\Program Files (x86)\DisplayCAL\DisplayCAL-apply-profiles-launcher.exe [178120 2019-12-14] (Open Source Developer, Florian Höch -> )
Task: {C4736BF1-50E4-46AD-9AC7-D185F616BEEE} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{B0A0D4DC-78C0-4174-963E-55ECFBEA2FF5} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {F21D9C5F-8AFC-4E48-BC95-FB2AA6FE20E4} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [94496 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {E210FFC1-CD17-4A7D-BAA3-234A010D0B07} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\WINDOWS\system32\sc.exe [102400 2025-07-31] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService
Task: {8646A921-F56F-485F-A9ED-21C74BD683F3} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => C:\WINDOWS\System32\reg.exe [110592 2026-08-17] (Microsoft Windows -> Microsoft Corporation) -> add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {4411E3BD-13E8-45D8-A1DF-FED75A9255F3} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\3e916a8c-f2a9-4b22-aa61-da061f5e1d1d => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {4858FC6F-2CC7-4F4D-980A-BEF6C7DE87FB} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\4f4a40e2-6c67-4382-bdff-28ebc0795aca => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {0C75EBDF-4FD0-4DA6-9D74-3A50FA67799D} - System32\Tasks\Lenovo\UDC\Lenovo UDC Diagnostic Scan => C:\WINDOWS\system32\sc.exe [102400 2025-07-31] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 210
Task: {4F201337-671C-49A0-8555-14D7FBF3ACFA} - System32\Tasks\Lenovo\UDC\Lenovo UDC Lazy Deployment => C:\WINDOWS\system32\sc.exe [102400 2025-07-31] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 221
Task: {BA9F4D76-359C-4A12-A085-F750EE5FE90F} - System32\Tasks\Lenovo\UDC\Lenovo UDC Maintainance Task => C:\WINDOWS\system32\sc.exe [102400 2025-07-31] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 220
Task: {77A65832-B43A-4B32-9BEF-561E8227662D} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [257976 2026-06-23] (Lenovo -> Lenovo Group Ltd.)
Task: {233D2CD5-C15E-4CF1-8D3A-D9C22C03217C} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [102400 2025-07-31] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {08C86786-486A-48B3-A1F9-4D8229CA0587} - System32\Tasks\Lenovo\Vantage\Schedule\CommercialAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-08-25] (Lenovo -> Lenovo)
Task: {1F773ECB-2F24-4EEC-94A7-4DF936C1E55E} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-08-25] (Lenovo -> Lenovo)
Task: {947F7E51-FB46-4F67-831A-32DFB31B0968} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-08-25] (Lenovo -> Lenovo)
Task: {7C1FC216-E7C4-4765-8CEE-81F3C0894EB4} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin_Pulsation => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-08-25] (Lenovo -> Lenovo)
Task: {B81E59B4-B5EF-4C3D-802E-69C29E3FA651} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-08-25] (Lenovo -> Lenovo)
Task: {75913B77-27B0-4D43-AD70-E04F01DF622E} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSupportHealthReportSchedule => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-08-25] (Lenovo -> Lenovo)
Task: {90F51EA1-2AB5-432E-956C-6F8208B15E38} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-08-25] (Lenovo -> Lenovo)
Task: {C51FC7F9-8BBB-4936-AC82-840FF6D773B4} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-08-25] (Lenovo -> Lenovo)
Task: {F1F75671-9B2C-46F5-865D-D4AF4649A817} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.1.0.51\x86\IdleScheduleEventAction.exe [173536 2026-08-17] (Lenovo -> )
Task: {C8EB1698-3559-405D-ADC0-F71F71E7C4FF} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-08-25] (Lenovo -> Lenovo)
Task: {9AA1EB3A-72C2-4D58-B94B-ED2A13B981E4} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\\uninstall.exe /repair (No File)
Task: {4D2F4064-B7A3-4E22-A9CA-19A2027AD11A} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [336104 2024-11-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {19A942A0-C898-4839-9B29-ACDDB90C1DAC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {D55969B2-2721-4E07-9DF6-2FB39F3EA4B6} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {CAB76809-EDC0-40D2-A888-AD9BEDF4E88A} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (No File)
Task: {CBD8AFCF-23D1-4312-91B2-35449E73D494} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {3F45DCA0-AF4F-4416-BC3C-78C061B6B019} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {220BAD12-442A-4D75-A55E-40827BBA67B7} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {FFC73707-B929-4654-A7D5-8A0B0546DEFF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpCmdRun.exe [1902840 2026-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {23CF63F8-127E-4976-925F-2134CE10C895} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpCmdRun.exe [1902840 2026-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8C873979-9D6C-426E-8D66-872B53EBC4FE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpCmdRun.exe [1902840 2026-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D3758DE0-7B90-4AE0-999F-3265CABFED87} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpCmdRun.exe [1902840 2026-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F50F2F2E-74CD-4B80-98E1-540C300D3748} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030920 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {3B2DAA72-5FE5-4C64-8746-30DE44516D8D} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60680 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {5A2212F9-8786-4D26-B28E-C700144EB1D1} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [323848 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.5
Tcpip\..\Interfaces\{e26ed5ff-1df8-4b28-b9df-dd08a7405951}: [DhcpNameServer] 192.168.0.5
Tcpip\..\Interfaces\{e26ed5ff-1df8-4b28-b9df-dd08a7405951}: [DhcpDomain] litegra.cz

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-09-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2026-08-17] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-01-16] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2026-08-17] (Adobe Inc. -> Adobe Systems)

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\l\AppData\Local\Microsoft\Edge\User Data\Default [2026-09-09]
Edge Extension: (Dokumenty Google offline) - C:\Users\l\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-10]
Edge Extension: (Edge relevant text changes) - C:\Users\l\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-21]

Chrome:
=======
CHR Profile: C:\Users\l\AppData\Local\Google\Chrome\User Data\Default [2026-09-09]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\l\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-03-10]
CHR Extension: (Dokumenty Google offline) - C:\Users\l\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-10]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\l\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-12-06]
CHR HKU\S-1-5-21-3957471180-2817585343-1191361983-1320\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-3957471180-2817585343-1191361983-1734\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [182776 2026-08-03] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [948704 2026-08-17] (Adobe Inc. -> Adobe Inc.)
R2 EG Station Information Service; C:\Esko\bg_prog_egsis_v010\bin_ix64\egsissrv.exe [63920 2024-05-24] (Esko Software -> )
R2 Esko Subscription Service; C:\Program Files\Common Files\Esko\SubscriptionService\SubscriptionService\SubscriptionService.exe [1212848 2024-05-23] (Esko Software -> Esko BV)
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe [44096 2026-08-25] (Lenovo -> Lenovo)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpDefenderCoreService.exe [2307816 2026-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [21047096 2024-01-05] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [72632 2026-06-23] (Lenovo -> Lenovo Group Ltd.)
R2 VeyonService; C:\Program Files\Veyon\veyon-service.exe [28136 2025-02-14] (Tobias Junghans -> Veyon Solutions)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\NisSrv.exe [5311736 2026-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MsMpEng.exe [291360 2026-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_fbce97352464e3d7\amdfendrmgr.sys [37256 2025-10-15] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [43400 2025-09-10] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
R2 AMDRyzenMasterDriverV20; \??\C:\Windows\system32\AMDRyzenMasterDriver.sys [48328 2026-04-23] (Advanced Micro Devices Inc. -> )
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_960126269e89c62e\amdsafd.sys [114048 2025-09-15] (Advanced Micro Devices -> Advanced Micro Devices)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\amdkmdag.sys [106666512 2026-05-20] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [62856 2025-10-15] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 keyboard; C:\Windows\System32\Drivers\keyboard.sys [18536 2026-08-18] (Francisco Lopes da Silva -> Oblita)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [83008 2026-09-09] (Microsoft Windows -> Microsoft Corporation)
R3 mouse; C:\Windows\System32\Drivers\mouse.sys [18536 2026-08-18] (Francisco Lopes da Silva -> Oblita)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-09-09] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21672 2026-09-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [660504 2026-09-09] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [137240 2026-09-09] (Microsoft Windows -> Microsoft Corporation)

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-09-09 15:11 - 2026-09-09 15:12 - 000045715 _____ C:\Users\l\Desktop\FRST.txt
2026-09-09 15:10 - 2026-09-09 15:12 - 000000000 ____D C:\FRST
2026-09-09 15:10 - 2026-09-09 15:02 - 002455552 _____ (Farbar) C:\Users\l\Desktop\FRST64.exe
2026-09-09 14:07 - 2026-09-09 14:07 - 000677108 _____ C:\WINDOWS\system32\perfh005.dat
2026-09-09 14:07 - 2026-09-09 14:07 - 000144960 _____ C:\WINDOWS\system32\perfc005.dat
2026-09-09 13:53 - 2026-09-09 13:53 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-09-09 13:44 - 2026-09-09 13:45 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-09-09 13:44 - 2026-09-09 13:44 - 000000000 ____D C:\WINDOWS\system32\braille-tables
2026-09-09 13:44 - 2026-09-09 13:44 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-09-09 13:40 - 2026-09-09 13:40 - 000000000 ____D C:\Users\l\AppData\Local\AWSToolkit
2026-09-09 13:27 - 2026-09-09 13:29 - 000000000 ___HD C:\$WinREAgent
2026-09-09 13:21 - 2026-09-09 13:21 - 000039215 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-09-09 13:21 - 2026-09-09 13:21 - 000039215 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-09-09 13:21 - 2026-09-09 13:21 - 000014689 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-09-09 13:21 - 2026-09-09 13:21 - 000004646 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-09-09 13:21 - 2026-09-09 13:21 - 000004646 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-09-09 13:21 - 2026-09-09 13:21 - 000004646 _____ C:\WINDOWS\system32\ResPriImageList
2026-09-09 13:21 - 2026-09-09 13:21 - 000004646 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-09-09 13:21 - 2026-09-09 13:21 - 000004555 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-09-09 13:21 - 2026-09-09 13:21 - 000004555 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-09-09 10:57 - 2026-09-09 10:57 - 000000000 ____D C:\Users\Illesova.klara\Documents\Adobe
2026-09-09 10:56 - 2026-09-09 10:57 - 000000000 ____D C:\Users\Illesova.klara\AppData\Roaming\com.adobe.dunamis
2026-09-09 10:56 - 2026-09-09 10:57 - 000000000 ____D C:\Users\Illesova.klara\AppData\Local\Adobe
2026-09-09 10:56 - 2026-09-09 10:56 - 000003594 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3957471180-2817585343-1191361983-1600
2026-09-09 10:56 - 2026-09-09 10:56 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3957471180-2817585343-1191361983-1600
2026-09-09 10:56 - 2026-09-09 10:56 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3957471180-2817585343-1191361983-1600
2026-09-09 08:29 - 2026-09-09 08:29 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3957471180-2817585343-1191361983-1734
2026-09-09 08:29 - 2026-09-09 08:29 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3957471180-2817585343-1191361983-1734
2026-09-09 08:29 - 2026-09-09 08:29 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3957471180-2817585343-1191361983-1734
2026-09-07 12:53 - 2026-09-07 12:53 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3957471180-2817585343-1191361983-1465
2026-09-07 12:53 - 2026-09-07 12:53 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3957471180-2817585343-1191361983-1465
2026-09-07 12:53 - 2026-09-07 12:53 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3957471180-2817585343-1191361983-1465
2026-08-31 13:31 - 2026-09-09 12:39 - 000000000 ____D C:\Users\l\AppData\LocalLow\AMD
2026-08-31 13:19 - 2026-08-31 13:19 - 000000000 ____D C:\Users\l\AppData\LocalLow\com.adobe.crashreporter
2026-08-31 12:04 - 2026-08-31 12:04 - 000002053 _____ C:\Users\Public\Desktop\Spyder 6.4.4.lnk
2026-08-31 12:04 - 2026-08-31 12:04 - 000000000 ____D C:\Users\l\AppData\Local\Datacolor
2026-08-31 12:04 - 2026-08-31 12:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Datacolor
2026-08-31 12:04 - 2026-08-31 12:04 - 000000000 ____D C:\Program Files (x86)\Datacolor
2026-08-31 12:01 - 2026-09-09 15:09 - 000003094 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher
2026-08-31 11:37 - 2026-08-31 11:37 - 000003518 _____ C:\WINDOWS\system32\Tasks\AMDScoSupportTypeUpdate
2026-08-31 11:37 - 2026-08-31 11:37 - 000003484 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate
2026-08-31 11:37 - 2026-08-31 11:37 - 000003072 _____ C:\WINDOWS\system32\Tasks\StartDVR
2026-08-31 11:37 - 2026-08-31 11:37 - 000002622 _____ C:\WINDOWS\system32\Tasks\AMDRyzenMasterSDKTask
2026-08-31 11:37 - 2026-08-31 11:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Bug Report Tool
2026-08-31 11:36 - 2026-08-31 11:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Software꞉ Adrenalin Edition
2026-08-31 11:35 - 2026-05-20 12:02 - 000857104 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-08-31 11:35 - 2026-05-20 12:02 - 000857104 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-08-31 11:35 - 2026-05-20 12:02 - 000737808 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-08-31 11:35 - 2026-05-20 12:02 - 000737808 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-08-31 11:35 - 2026-05-20 12:02 - 000207888 _____ C:\WINDOWS\system32\mantle64.dll
2026-08-31 11:35 - 2026-05-20 12:02 - 000186896 _____ C:\WINDOWS\system32\mantleaxl64.dll
2026-08-31 11:35 - 2026-05-20 12:02 - 000165904 _____ C:\WINDOWS\SysWOW64\mantle32.dll
2026-08-31 11:35 - 2026-05-20 12:02 - 000149520 _____ C:\WINDOWS\SysWOW64\mantleaxl32.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 002245648 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsasrv64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 002100240 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 001717800 _____ (AMD) C:\WINDOWS\system32\amf-mft-mjpeg-decoder64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 001617936 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 001617936 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 001395256 _____ (AMD) C:\WINDOWS\SysWOW64\amf-mft-mjpeg-decoder32.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 001362416 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsacli64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 001059856 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdsacli32.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000978448 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2026-08-31 11:35 - 2026-05-20 12:01 - 000944144 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000771600 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000610832 _____ C:\WINDOWS\system32\GameManager64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000570384 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000560480 _____ C:\WINDOWS\system32\amdmiracast.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000537616 _____ C:\WINDOWS\system32\atieah64.exe
2026-08-31 11:35 - 2026-05-20 12:01 - 000504336 _____ C:\WINDOWS\system32\EEURestart.exe
2026-08-31 11:35 - 2026-05-20 12:01 - 000473616 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000464400 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000434184 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000406544 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2026-08-31 11:35 - 2026-05-20 12:01 - 000267280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000229392 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000226608 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdihk64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000201232 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000196624 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000184848 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000178192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdihk32.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000168248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000165392 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000157864 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000157864 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000149008 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000142864 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000141640 _____ C:\WINDOWS\system32\amdxc64.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000129136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000129136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000118800 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000117136 _____ C:\WINDOWS\SysWOW64\amdxc32.dll
2026-08-31 11:35 - 2026-05-20 12:01 - 000075280 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2026-08-31 11:35 - 2026-05-20 12:00 - 105410576 _____ C:\WINDOWS\system32\amd_comgr.dll
2026-08-31 11:35 - 2026-05-20 12:00 - 088606736 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll
2026-08-31 11:35 - 2026-05-20 12:00 - 019435536 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdhip64.dll
2026-08-31 11:35 - 2026-05-20 12:00 - 004374544 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdadlx64.dll
2026-08-31 11:35 - 2026-05-20 12:00 - 004179984 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdadlx32.dll
2026-08-31 11:35 - 2026-05-20 12:00 - 000801808 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2026-08-31 11:35 - 2026-05-20 12:00 - 000678928 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2026-08-31 11:35 - 2026-05-20 12:00 - 000545800 _____ C:\WINDOWS\system32\dgtrayicon.exe
2026-08-31 11:35 - 2026-05-20 12:00 - 000471560 _____ C:\WINDOWS\system32\amdlogum.exe
2026-08-31 11:35 - 2026-05-20 12:00 - 000177168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2026-08-31 11:35 - 2026-05-20 12:00 - 000145928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl.dll
2026-08-31 11:35 - 2026-05-20 12:00 - 000143104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2026-08-31 11:35 - 2026-05-20 12:00 - 000103440 _____ C:\WINDOWS\system32\clinfo.exe
2026-08-31 11:35 - 2026-05-20 12:00 - 000051728 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2026-08-31 11:35 - 2026-05-20 12:00 - 000048656 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2026-08-31 11:35 - 2026-05-20 11:35 - 109628208 _____ C:\WINDOWS\system32\amdxc64.so
2026-08-31 11:35 - 2025-10-15 22:28 - 000062856 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\amdxe.sys
2026-08-31 11:33 - 2026-08-31 11:33 - 000000000 ____D C:\Users\l\AppData\Local\AMDSoftwareInstaller
2026-08-25 12:40 - 2026-08-25 12:40 - 000002133 _____ C:\Users\Public\Desktop\Project Organizer.lnk
2026-08-25 12:40 - 2026-08-25 12:40 - 000002131 _____ C:\Users\Public\Desktop\EngView Package & Display Designer.lnk
2026-08-25 12:40 - 2026-08-25 12:40 - 000001864 _____ C:\Users\Public\Desktop\EngView Work.lnk
2026-08-25 12:40 - 2026-08-25 12:40 - 000000000 ____D C:\Users\l\AppData\Roaming\EngView
2026-08-25 12:40 - 2026-08-25 12:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EngView
2026-08-25 12:38 - 2026-08-25 12:39 - 000000000 ____D C:\Program Files\Common Files\EngViewShared
2026-08-25 12:38 - 2026-08-25 12:38 - 000000000 ____D C:\Program Files\EngView
2026-08-25 12:32 - 2026-08-25 12:38 - 000000000 ____D C:\ProgramData\EngView
2026-08-18 09:31 - 2026-08-18 09:31 - 000000000 ____D C:\WINDOWS\Minidump
2026-08-18 08:39 - 2026-08-18 08:39 - 000000000 ____D C:\SWTOOLS
2026-08-18 08:36 - 2026-08-18 08:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Veyon
2026-08-18 08:36 - 2026-08-18 08:36 - 000000000 ____D C:\Program Files\Veyon
2026-08-17 20:32 - 2026-08-17 20:32 - 000001057 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk
2026-08-17 20:32 - 2026-08-17 20:32 - 000001045 _____ C:\Users\l\Desktop\Lightroom.lnk
2026-08-17 20:23 - 2026-08-17 20:23 - 000001059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign 2026.lnk
2026-08-17 20:18 - 2026-08-17 20:18 - 000002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator 2026.lnk
2026-08-17 20:10 - 2026-08-17 20:10 - 000001071 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2026.lnk
2026-08-17 15:14 - 2026-08-18 09:36 - 000000000 ____D C:\ProgramData\Whesvc
2026-08-17 14:41 - 2026-09-09 10:55 - 000000000 ____D C:\WINDOWS\system32\Tasks\SoftLanding
2026-08-17 14:21 - 2026-08-17 14:21 - 000087226 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-08-17 14:21 - 2026-08-17 14:21 - 000087226 _____ C:\WINDOWS\system32\ctac.json
2026-08-17 14:21 - 2026-08-17 14:21 - 000004977 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-08-17 14:08 - 2026-08-17 14:08 - 000000000 ____D C:\WINDOWS\PCHEALTH
2026-08-17 12:18 - 2026-08-17 12:18 - 000001393 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2026-08-17 12:18 - 2026-08-17 12:18 - 000001363 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-09-09 15:12 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-09-09 15:09 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-09-09 15:09 - 2023-02-06 14:34 - 000000000 ____D C:\Users\l\AppData\Roaming\WTablet
2026-09-09 15:09 - 2023-01-15 13:33 - 000000120 _____ C:\WINDOWS\system32\config\netlogon.ftl
2026-09-09 14:07 - 2025-07-31 22:39 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-09-09 14:06 - 2023-02-05 16:45 - 000000000 ____D C:\Users\l\AppData\Local\D3DSCache
2026-09-09 14:05 - 2023-02-05 17:27 - 000000000 ____D C:\Users\l\AppData\Roaming\com.adobe.dunamis
2026-09-09 14:04 - 2023-02-05 17:27 - 000000000 ____D C:\Users\l\AppData\Local\Adobe
2026-09-09 14:04 - 2023-02-05 16:45 - 000000000 ____D C:\Users\l\AppData\Roaming\Adobe
2026-09-09 14:00 - 2026-05-25 11:19 - 000000000 ____D C:\Users\l\AppData\Roaming\DisplayCAL
2026-09-09 14:00 - 2025-07-31 22:39 - 000007884 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-09-09 14:00 - 2025-07-31 22:39 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-09-09 14:00 - 2025-07-31 22:37 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-09-09 14:00 - 2024-08-28 13:29 - 000000000 ____D C:\ProgramData\boost_interprocess
2026-09-09 14:00 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-09-09 14:00 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-09-09 14:00 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-09 14:00 - 2024-04-01 09:21 - 001572864 _____ C:\WINDOWS\system32\config\BBI
2026-09-09 14:00 - 2024-01-12 15:29 - 000000000 ____D C:\Program Files\TeamViewer
2026-09-09 14:00 - 2020-05-06 20:33 - 000012288 ___SH C:\DumpStack.log.tmp
2026-09-09 13:56 - 2020-05-06 20:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-09-09 13:46 - 2025-07-31 22:36 - 003349040 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-09-09 13:45 - 2025-07-31 22:23 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-09-09 13:45 - 2024-04-01 18:31 - 000000000 ____D C:\WINDOWS\InboxApps
2026-09-09 13:45 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-09-09 13:45 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-09-09 13:45 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-09-09 13:45 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-09-09 13:45 - 2024-04-01 18:28 - 000000000 ____D C:\WINDOWS\SysWOW64\cs
2026-09-09 13:45 - 2024-04-01 18:28 - 000000000 ____D C:\WINDOWS\system32\cs
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\WUModels
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\L2Schemas
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\DiagTrack
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-09-09 13:45 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-09-09 13:45 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-09-09 13:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\appcompat
2026-09-09 13:44 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-09-09 13:34 - 2026-05-25 11:20 - 000000000 ____D C:\Users\l\AppData\Roaming\FontForge
2026-09-09 13:34 - 2024-04-01 09:26 - 001416664 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-09-09 13:34 - 2024-04-01 09:26 - 001266136 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-09-09 13:34 - 2024-04-01 09:26 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2026-09-09 13:34 - 2024-04-01 09:26 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2026-09-09 13:23 - 2019-12-07 11:14 - 000000167 _____ C:\WINDOWS\win.ini
2026-09-09 13:21 - 2025-07-31 22:37 - 003381760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-09-09 13:13 - 2023-01-15 11:24 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-09-09 13:10 - 2023-01-15 11:24 - 230964456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-09-09 12:56 - 2023-02-05 16:45 - 000000000 ____D C:\Users\l\AppData\Local\AMD
2026-09-09 12:46 - 2025-07-31 22:26 - 000000000 ____D C:\Users\l
2026-09-09 12:42 - 2025-07-31 22:36 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-09-09 12:24 - 2023-02-05 16:45 - 000000000 ____D C:\Users\l\AppData\Local\Packages
2026-09-09 12:11 - 2024-05-29 10:57 - 000000000 ___HD C:\adobeTemp
2026-09-09 12:10 - 2025-07-31 22:39 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3957471180-2817585343-1191361983-1320
2026-09-09 12:10 - 2025-07-31 22:39 - 000003568 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3957471180-2817585343-1191361983-1320
2026-09-09 12:10 - 2025-07-31 22:39 - 000003356 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3957471180-2817585343-1191361983-1320
2026-09-09 12:10 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-09-09 12:10 - 2023-02-05 16:45 - 000002378 _____ C:\Users\l\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-09-09 10:55 - 2020-05-06 20:38 - 000000000 __RHD C:\Users\Public\AccountPictures
2026-09-09 10:41 - 2025-07-31 22:39 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2026-09-09 10:41 - 2025-07-31 21:23 - 000002153 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-09-09 10:41 - 2025-07-31 21:23 - 000002091 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller.lnk
2026-09-09 10:41 - 2025-07-31 21:23 - 000002068 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2026-09-09 10:41 - 2023-01-15 11:20 - 000000000 ____D C:\ProgramData\Packages
2026-09-09 08:07 - 2023-01-15 12:28 - 000002254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-09-09 08:07 - 2023-01-15 12:28 - 000002213 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2026-09-07 08:41 - 2023-02-05 17:27 - 000000000 ____D C:\Program Files\Common Files\Adobe
2026-09-07 08:41 - 2023-02-05 17:27 - 000000000 ____D C:\Program Files\Adobe
2026-09-07 08:40 - 2025-07-31 22:39 - 000003604 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3957471180-2817585343-1191361983-1478
2026-09-07 08:40 - 2025-07-31 22:39 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3957471180-2817585343-1191361983-1478
2026-09-07 08:40 - 2025-07-31 22:39 - 000003392 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3957471180-2817585343-1191361983-1478
2026-09-07 08:38 - 2025-07-31 22:39 - 000003638 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-09-07 08:38 - 2025-07-31 22:39 - 000003512 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-08-31 12:03 - 2024-01-08 17:27 - 000000000 ____D C:\Users\l\AppData\Local\AMD_Common
2026-08-31 11:37 - 2021-10-22 01:04 - 000000000 ____D C:\Program Files\AMD
2026-08-31 11:36 - 2025-07-31 22:39 - 000003152 _____ C:\WINDOWS\system32\Tasks\StartCN
2026-08-31 11:35 - 2021-10-22 01:01 - 000000000 ___HD C:\AMD
2026-08-25 12:40 - 2024-10-24 18:59 - 000000000 ____D C:\Users\l\AppData\Roaming\Microsoft\Šablony
2026-08-25 12:38 - 2021-10-22 01:05 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2026-08-25 12:27 - 2025-05-19 08:46 - 000000082 _____ C:\WINDOWS\SysWOW64\newloglocation.txt
2026-08-25 12:27 - 2023-01-15 13:29 - 000000191 _____ C:\WINDOWS\ODBCINST.INI
2026-08-25 12:27 - 2023-01-15 13:29 - 000000145 _____ C:\WINDOWS\ODBC.INI
2026-08-18 08:39 - 2021-10-22 01:03 - 000000000 ____D C:\WINDOWS\TempInst
2026-08-18 08:37 - 2025-02-23 10:48 - 000018536 _____ (Oblita) C:\WINDOWS\system32\Drivers\mouse.sys
2026-08-18 08:37 - 2025-02-23 10:48 - 000018536 _____ (Oblita) C:\WINDOWS\system32\Drivers\keyboard.sys
2026-08-17 20:10 - 2023-02-05 17:27 - 000000000 ____D C:\ProgramData\Adobe
2026-08-17 14:41 - 2021-10-22 00:54 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-08-17 14:37 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2026-08-17 14:25 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-08-17 12:18 - 2023-02-05 17:27 - 000000000 ____D C:\Program Files (x86)\Adobe

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================
Přílohy
Addition.zip
(16.47 KiB) Staženo 4 x
Nahoru
Avatar uživatele
Rudy
Site Admin
Site Admin
Příspěvky: 120103
Registrován: 30 Říj 2003 13:42
Místo/Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pády amdkmdag.sys (nejspíše) při spuštění HW akcelerace

#2 Příspěvek od Rudy »

Zdravím!
Jelikož toto je problém pravděpodobně ovladačů, případně nějaké aktualizace systému a jsme antivirové fórum, mohu zodpovědně dát jen odkaz na možné řešení: https://www-partitionwizard-com.transla ... _tr_pto=sc . Je to zcela specální otázka pro zkušené znalce hardwaru od AMD a jeho ovladačů. PC vyřčistíme.

Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
"C:\Windows\System32\Tasks\Microsoft\Windows\GroupPolicy\{3E0A038B-D834-4930-9981-E89C9BFF83AA}" Access Denied. <==== ATTENTION
"C:\Windows\System32\Tasks\Microsoft\Windows\GroupPolicy\{A7719E0F-10DB-4640-AD8C-490CC6AD5202}" Access Denied. <==== ATTENTION
Task: {9AA1EB3A-72C2-4D58-B94B-ED2A13B981E4} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\\uninstall.exe /repair (No File)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {CAB76809-EDC0-40D2-A888-AD9BEDF4E88A} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (No File)
Task: {CBD8AFCF-23D1-4312-91B2-35449E73D494} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {3F45DCA0-AF4F-4416-BC3C-78C061B6B019} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {220BAD12-442A-4D75-A55E-40827BBA67B7} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
C:\DumpStack.log.tmp
FirewallRules: [{573313DC-CC44-44E9-B8ED-AAE5D4FA9AD5}] => (Allow) C:\Program Files\EngView Systems\Package & Display Designer Suite\Project Organizer\EVPO.exe => No File
FirewallRules: [{D5706727-E3CD-4C6F-B850-453A92E0099A}] => (Allow) C:\Program Files\EngView Systems\Package & Display Designer Suite\Project Organizer\EVPO.exe => No File
FirewallRules: [{A29D3418-E849-493E-85EA-D26BF6380E7C}] => (Allow) C:\Program Files\EngView Systems\Package & Display Designer Suite\Package Designer\EVPDD.exe => No File
FirewallRules: [{C388B256-0A04-449B-BC19-162333FF5E1A}] => (Allow) C:\Program Files\EngView Systems\Package & Display Designer Suite\Package Designer\EVPDD.exe => No File
FirewallRules: [{D5E8EDE6-2B43-4865-9768-1B0D4551AD11}] => (Allow) C:\Esko\bg_prog_egsis_v010\bin_ix64\egsysteminfotool.exe => No File
FirewallRules: [{E46B8140-A12D-4BE2-AF4C-10749CEC8C1D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{CA924672-877F-4D3C-AAA1-1A15F1396AEE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{720A6194-44D6-439B-B977-883B65DBF158}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{A2EE8A21-2DD8-48F0-B9A8-E48EDDDB9A9E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{52FFF923-D2EE-4776-8C59-C36D2666902C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.113.3210.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{A3926D05-3DC9-447E-BE83-697455553DE0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.113.3210.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{206AE6D6-00A8-459F-838A-7643877DA2D6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.113.3210.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{51CDD30E-8011-40FD-AD99-06E3EFCE8385}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.113.3210.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{9E374F5A-9BFC-495C-A272-974DB30B238F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.106.3210.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{15977F60-9BB8-4240-9833-B802FE23D1E9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.106.3210.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{246336DC-B534-44C8-8A77-83DCC551E495}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.106.3210.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{D550ABDE-11D3-4556-8512-60E830C88CE5}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.106.3210.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{F831CEE6-BD8C-4B8D-B12E-2D6C557AA8AC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.104.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{306016CE-435B-4F7F-932A-61FC5C56DF20}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.104.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{B4236530-C649-479C-B37C-BFD2CF5BC768}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.104.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{A46DA1B5-CFE1-4D2E-B580-91E7A87211EC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.104.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{9C977D58-1D21-43BE-9263-D29247C23BE8}] => (Allow) C:\Esko\bg_prog_egsis_v010\bin_ix64\egsysteminfotool.exe => No File
FirewallRules: [{B2DF9C82-6DB3-42A6-96A5-045ED55324EA}] => (Allow) C:\Program Files\EngView Systems\Package & Display Designer Suite\Project Organizer\EVPO.exe => No File
FirewallRules: [{9C6F5737-A7CA-46E7-80E4-BC5133420F95}] => (Allow) C:\Program Files\EngView Systems\Package & Display Designer Suite\Project Organizer\EVPO.exe => No File
FirewallRules: [{BDC01C3A-9595-4BE7-8CDD-6F943B9202DA}] => (Allow) C:\Program Files\EngView Systems\Package & Display Designer Suite\Package Designer\EVPDD.exe => No File
FirewallRules: [{8001888C-AC83-4CDA-9229-881F631C5A6E}] => (Allow) C:\Program Files\EngView Systems\Package & Display Designer Suite\Package Designer\EVPDD.exe => No File
FirewallRules: [{1122A4C6-66CA-427D-A341-6E6B27DBBB63}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{4C137154-EC9E-4384-ABF8-688EACF8364F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{8CF7B1C4-CCF8-4A74-82CD-A31310A1A02D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{6763E577-27A3-4BE8-8E26-704FD81566FC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{727E09CA-A02C-4C48-BFCA-29F4C3F4FF8C}] => (Allow) C:\Esko\bg_prog_egsis_v010\bin_ix86\egsysteminfotool.exe => No File
FirewallRules: [{0D69BD0A-EBB7-474C-94B9-3218BDFFAF04}] => (Allow) C:\Esko\bg_prog_egsis_v010\bin_ix86\egsissrv.exe => No File

EmptyTemp:
End
ložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Vrátit se na „Všehochuť“