VIRY.CZ

Zdravím,
začal jsem mít záseky při přehrávání videí a některé stránky se načítají neúměrně dlouho

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-09-2026
Ran by robin (administrator) on PC (Gigabyte Technology Co., Ltd. A620M GAMING X) (18-09-2026 19:18:03)
Running from C:\Users\robin\Desktop\FRST64.exe
Loaded Profiles: robin
Platform: Microsoft Windows 11 Home Version 25H2 26200.9457 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\Logi\LogiPluginService\LogiPluginService.exe ->) (Logitech Inc -> ) C:\Program Files\Logi\LogiPluginService\LogiPluginServiceExt.exe
(C:\Program Files\Logi\LogiPluginService\LogiPluginServiceExt.exe ->) (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe
(C:\Program Files\Logi\LogiPluginService\LogiPluginServiceExt.exe ->) (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech) C:\Program Files\Logi\LogiPluginService\LogiPluginService.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_appbroker.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe
(DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\atieclxx.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <8>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\153.0.4234.32\msedgewebview2.exe <5>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a3944b54ff18b284\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\atiesrxx.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a3944b54ff18b284\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.4019.0_x64__8wekyb3d8bbwe\EdgeGameAssist.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4401706d277a86e0\RtkAudUService64.exe [1886616 2023-12-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2535400 2026-06-17] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\Run: [MicrosoftEdgeAutoLaunch_939C7F4108421878674BE382227CD57D] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5417288 2026-09-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2287906516-366990468-377022076-1010\...\Run: [MicrosoftEdgeAutoLaunch_C29AEE9D78A5497880E4815AC2DDEBDB] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5417288 2026-09-10] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\153.0.8010.48\Installer\chrmstp.exe [8034968 2026-09-16] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\153.1.95.102\Installer\chrmstp.exe [6556240 2026-09-16] (Brave Software, Inc. -> Brave Software, Inc.)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {A5D58C2B-4A75-4964-B64D-F32A7EC098BE} - System32\Tasks\AMDAutoUpdate => C:\Program Files\AMD\AutoUpdate\AMDAutoUpdate.exe [671440 2024-07-24] (Advanced Micro Devices -> )
Task: {2C39F93D-F39C-44A3-A7EF-63FD1D413BE9} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{455EF7B8-31F4-4770-9639-ED5CF1DBD44A} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-23] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {2DD8547B-734B-483B-9FA0-E49DD826EA2D} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{B586457F-36C9-4E79-9271-993B4F509936} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-23] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {69D48454-F7C8-40BC-BC71-C1DD283AC1EB} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{322C6614-12AF-4D4E-8CF8-4138E5C7FABB} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {11C5E73A-A783-4664-999F-BB7DCF1C270F} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {75FD89B9-0B43-401B-96F3-5C32069199B7} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {828F69BF-5666-47AA-911C-34EB0BA57812} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B67426A1-9695-432D-9DCA-98879EC72AD1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7D6A7D3E-9749-47C5-8BA8-0BDF32E8C2DB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {26EC0917-D0F6-4485-837A-9D644FF8F892} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0B9D0484-EAF4-4336-947E-01EE8BE7FCD8} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2287906516-366990468-377022076-1003 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-15] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {F8F65027-3387-4189-BEBC-09AD65BAE6FB} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-09-15] (Mozilla Corporation -> Mozilla Foundation)
Task: {E3FBF04B-CC08-49BF-A9A8-6422BF6C61E2} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3598960 2026-07-02] (NVIDIA Corporation -> NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{61898aea-927b-4d01-86d9-80f8fc2267b7}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: gmivswa4.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\aj5uxgbm.default [2026-04-24]
FF ProfilePath: C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release [2026-09-18]
FF DownloadDir: D:\stažené soubory
FF Homepage: Mozilla\Firefox\Profiles\gmivswa4.default-release -> hxxps://www.seznam.cz/
FF Notifications: Mozilla\Firefox\Profiles\gmivswa4.default-release -> hxxps://www.facebook.com; hxxps://www.youtube.com
FF Extension: (Ghostery AdBlocker for Privacy) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\firefox@ghostery.com.xpi [2026-09-16]
FF Extension: (Awesome Screenshot: Screen capture, Annotate) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2025-11-25]
FF Extension: (uBlock Origin) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\uBlock0@raymondhill.net.xpi [2026-09-17]
FF Extension: (TWP - Translate Web Pages) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\{036a55b4-5e72-4d05-a06c-cba2dfcc134a}.xpi [2026-08-17]
FF Extension: (Photon Colors) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\{2c6c94f3-c656-41e9-aa4b-1edba5be9c21}.xpi [2024-02-25]
FF Extension: (Search on Google Lens) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\{56b8308e-566b-4dc0-9957-f6341ceb8552}.xpi [2025-12-12]
FF Extension: (DownThemAll!) - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\gmivswa4.default-release\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2026-06-16]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2026-06-17] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2026-06-17] (Adobe Inc. -> Adobe Systems)

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\robin\AppData\Local\Microsoft\Edge\User Data\Default [2026-09-18]
Edge Extension: (Dokumenty Google offline) - C:\Users\robin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-20]
Edge Extension: (Edge relevant text changes) - C:\Users\robin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-11-01]
Edge Profile: C:\Users\robin\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2026-04-21]

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\robin\AppData\Local\Google\Chrome\User Data\Default [2026-08-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-04-12]
CHR Extension: (Kagane Downloader) - C:\chrome-kagane\dist [2026-07-19] [UpdateUrl:0] <==== ATTENTION

Brave:
=======
BRA DefaultProfile: Profile 1
BRA Profile: C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Profile 1 [2026-09-14]
BRA Profile: C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\System Profile [2026-04-23]
BRA Extension: (Brave Ad Block Updater (Brave First Party Adblock Filters (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2026-09-14]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2026-09-14]
BRA Extension: (Brave NTP background images) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Mobile app promo blocker (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Cookie notice blocker (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2026-09-14]
BRA Extension: (Query Filter) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cemdlagocoimleflkfkjoihojfainiho [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Allow X/Twitter Embeds (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\dkpggglmbjhgjhachikgmohmecomjndo [2026-09-14]
BRA Extension: (Brave NTP sponsored images) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2026-09-14]
BRA Extension: (Brave WebMCP Tool Scripts) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\eingdhelnaolbpcdkgddekhifcjfkalf [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2026-09-14]
BRA Extension: (Brave Ads Resources) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iejekkikpddbbockoldagmfcdbffomfc [2026-04-23]
BRA Extension: (Brave Ad Block Updater (Brave Default Adblock Filters (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Allow Facebook Embeds (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\jmfhneobcdckobmonkfjkbknnjjnegoh [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Brave Default Privacy Filters (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2026-09-14]
BRA Extension: (Brave User Agent) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe [2026-09-14]
BRA Extension: (Brave Ad Block Updater (Czech and Slovak website ad blocker (plaintext))) - C:\Users\robin\AppData\Local\BraveSoftware\Brave-Browser\User Data\oegebjahecghlckbhkmojgnpcgdeajdi [2026-09-14]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [948704 2026-06-17] (Adobe Inc. -> Adobe Inc.)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-23] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\153.1.95.102\elevation_service.exe [5113424 2026-09-16] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-23] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe [2307776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a3944b54ff18b284\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-08-22] (NVIDIA Corporation -> NVIDIA Corporation)
R2 OptionsPlusUpdaterService; C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe [22855832 2026-09-02] (Logitech Inc -> Logitech, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe [5311776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe [291360 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 GigabyteUpdateService; C:\WINDOWS\system32\GigabyteUpdateService.exe [878840 2026-09-16] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrmgr.sys [55456 2024-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriverV27; \??\C:\Program Files\AMD\RyzenMaster\bin\AMDRyzenMasterDriver.sys [61248 2024-10-01] (Advanced Micro Devices -> )
R3 amduw23g; C:\WINDOWS\System32\DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\amdkmdag.sys [106144848 2024-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [573440 2025-01-17] (Microsoft Corporation) [File not signed]
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [83008 2026-09-03] (Microsoft Windows -> Microsoft Corporation)
S3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [32080 2024-06-25] (Logitech Inc -> Logitech)
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_92b2eef9fcc25565\rt68cx21x64.sys [779752 2023-12-18] (Realtek Semiconductor Corp. -> Realtek)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51264 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-09-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [664592 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [137240 2026-09-18] (Microsoft Windows -> Microsoft Corporation)

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-09-18 19:18 - 2026-09-18 19:18 - 000022109 _____ C:\Users\robin\Desktop\FRST.txt
2026-09-18 19:17 - 2026-09-18 19:18 - 000000000 ____D C:\FRST
2026-09-18 19:12 - 2026-09-18 19:12 - 002455552 _____ (Farbar) C:\Users\robin\Desktop\FRST64.exe
2026-09-16 18:12 - 2026-09-16 18:12 - 000711764 _____ C:\WINDOWS\system32\perfh005.dat
2026-09-16 18:12 - 2026-09-16 18:12 - 000152978 _____ C:\WINDOWS\system32\perfc005.dat
2026-09-15 15:39 - 2026-09-16 18:05 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-09-14 16:08 - 2026-09-18 18:06 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-09-09 16:13 - 2026-09-09 16:13 - 000004646 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-09-09 16:13 - 2026-09-09 16:13 - 000004646 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-09-09 16:13 - 2026-09-09 16:13 - 000004646 _____ C:\WINDOWS\system32\ResPriImageList
2026-09-09 16:13 - 2026-09-09 16:13 - 000004646 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-09-09 16:13 - 2026-09-09 16:13 - 000004555 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-09-09 16:13 - 2026-09-09 16:13 - 000004555 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-09-09 16:12 - 2026-09-09 16:12 - 000039215 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-09-09 16:12 - 2026-09-09 16:12 - 000039215 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-09-09 16:12 - 2026-09-09 16:12 - 000014689 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-09-03 16:37 - 2026-09-03 16:37 - 000000859 _____ C:\Users\Public\Desktop\Logi Options+.lnk
2026-09-03 16:37 - 2026-09-03 16:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2026-09-03 16:37 - 2026-09-03 16:37 - 000000000 ____D C:\Program Files\LogiOptionsPlus
2026-08-30 18:59 - 2026-08-30 18:59 - 000003584 _____ C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2026-08-26 15:44 - 2026-08-22 15:08 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-08-26 15:44 - 2026-08-22 15:08 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-08-26 15:44 - 2026-08-22 15:08 - 002626600 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-08-26 15:44 - 2026-08-22 15:08 - 002626600 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-08-26 15:44 - 2026-08-22 15:08 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-08-26 15:44 - 2026-08-22 15:08 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 001702120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-08-26 15:44 - 2026-08-22 15:04 - 001594600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 001499368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 001240808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 000685800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-08-26 15:44 - 2026-08-22 15:04 - 000513768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 028185320 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-08-26 15:44 - 2026-08-22 15:03 - 002343144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 001734888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 001077992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 000828136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-08-26 15:44 - 2026-08-22 15:03 - 000470760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-08-26 15:44 - 2026-08-22 15:02 - 032227048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 021026024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 006052584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 005926120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 004790504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-08-26 15:44 - 2026-08-22 15:02 - 000574032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-08-26 15:44 - 2026-08-22 15:02 - 000442640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-08-26 15:44 - 2026-08-20 22:56 - 000176631 _____ C:\WINDOWS\system32\nvinfo.pb
2026-08-26 15:44 - 2026-08-20 22:56 - 000134376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2026-08-20 16:04 - 2026-09-16 16:00 - 000002100 _____ C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-08-20 16:04 - 2026-09-07 15:37 - 000002584 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-08-19 18:55 - 2026-09-11 01:51 - 000000000 ____D C:\Program Files\Mozilla Thunderbird

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-09-18 19:17 - 2024-02-25 09:20 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-09-18 18:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-09-18 18:28 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-18 15:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-09-18 15:38 - 2024-02-09 18:30 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-09-18 15:21 - 2025-01-18 01:21 - 000003638 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-09-18 15:21 - 2025-01-18 01:21 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-09-18 15:21 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-09-18 15:20 - 2026-03-18 01:27 - 000000000 ____D C:\Users\robin\AppData\Local\LogiOptionsPlus
2026-09-18 01:30 - 2024-02-22 11:05 - 000000000 ____D C:\ProgramData\NVIDIA
2026-09-17 19:53 - 2025-01-18 01:19 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-09-17 19:34 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-09-16 23:55 - 2025-01-17 17:25 - 000000000 ____D C:\Users\robin
2026-09-16 21:34 - 2026-04-23 18:28 - 000002331 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2026-09-16 21:34 - 2026-04-23 18:28 - 000002290 _____ C:\Users\Public\Desktop\Brave.lnk
2026-09-16 19:00 - 2024-02-25 08:53 - 000000000 ____D C:\Users\robin\AppData\Local\D3DSCache
2026-09-16 18:12 - 2025-01-18 09:24 - 001692332 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-09-16 18:10 - 2026-03-18 01:28 - 000000000 ____D C:\Users\robin\AppData\Roaming\logioptionsplus
2026-09-16 18:05 - 2025-01-18 01:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-09-16 18:05 - 2025-01-18 01:20 - 000005110 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-09-16 18:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-09-16 18:05 - 2024-02-25 09:20 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-09-16 18:05 - 2024-02-09 18:33 - 000089336 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteDownloadAssistant.exe
2026-09-16 18:05 - 2024-02-09 18:30 - 000906528 _____ C:\WINDOWS\system32\wpbbin.exe
2026-09-16 18:05 - 2024-02-09 18:30 - 000878840 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteUpdateService.exe
2026-09-16 18:05 - 2024-02-09 18:30 - 000012288 ___SH C:\DumpStack.log.tmp
2026-09-16 16:17 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-09-16 16:00 - 2026-04-24 21:20 - 000001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-16 16:00 - 2026-04-12 06:46 - 000002214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-09-16 00:33 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-09-16 00:32 - 2025-01-18 01:19 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-09-16 00:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-09-15 15:55 - 2025-01-18 09:20 - 003381760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-09-15 15:39 - 2026-04-24 21:20 - 000402048 _____ (Mozilla Foundation) C:\Users\robin\Desktop\Firefox.exe
2026-09-12 12:06 - 2024-02-09 18:31 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-09-11 01:51 - 2025-01-18 01:19 - 000506312 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-09-11 01:50 - 2025-12-12 01:53 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-09-11 01:50 - 2025-07-21 07:42 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-09-11 01:50 - 2025-01-17 17:24 - 000000000 ____D C:\WINDOWS\InboxApps
2026-09-11 01:50 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-09-11 01:50 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\L2Schemas
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-09-11 01:50 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-09-11 01:50 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-09-10 15:57 - 2024-02-25 16:24 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-09-10 15:56 - 2024-02-25 16:24 - 230964456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-09-07 15:55 - 2026-05-02 19:53 - 000010640 _____ C:\Users\robin\Desktop\edit.xlsx
2026-09-06 10:05 - 2024-11-14 17:01 - 000000000 ___HD C:\adobeTemp
2026-09-06 10:05 - 2024-02-28 20:27 - 000000000 ____D C:\Program Files\Common Files\Adobe
2026-09-06 10:04 - 2024-02-28 20:27 - 000000000 ____D C:\Program Files\Adobe
2026-09-06 10:04 - 2024-02-25 08:52 - 000000000 ____D C:\Users\robin\AppData\Local\Packages
2026-09-06 10:04 - 2024-02-09 18:32 - 000000000 ____D C:\ProgramData\Packages
2026-09-03 20:41 - 2024-02-25 15:24 - 000001062 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-09-03 16:37 - 2024-06-25 17:17 - 000000000 ____D C:\Program Files\Logi
2026-09-02 20:30 - 2025-05-21 21:22 - 000000985 _____ C:\Users\Public\Desktop\PotPlayer 64 bit.lnk
2026-08-27 12:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\appcompat
2026-08-26 15:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2026-08-26 15:46 - 2024-02-25 09:15 - 000000000 ____D C:\Users\robin\AppData\Local\NVIDIA
2026-08-26 15:46 - 2024-02-22 11:05 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2026-08-26 15:45 - 2024-02-25 08:52 - 000000000 ____D C:\Users\robin\AppData\LocalLow\NVIDIA
2026-08-26 15:43 - 2024-02-25 08:53 - 000000000 ____D C:\Users\robin\AppData\Local\NVIDIA Corporation
2026-08-21 01:01 - 2024-02-25 08:53 - 000000000 ____D C:\Users\robin\AppData\Local\CrashDumps
2026-08-19 19:29 - 2024-02-29 18:00 - 000000000 ____D C:\Users\robin\AppData\Roaming\XnConvert

==================== Files in the root of some directories ========

2026-08-30 18:59 - 2026-08-30 18:59 - 000003584 _____ () C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-09-2026
Ran by robin (18-09-2026 19:19:02)
Running from C:\Users\robin\Desktop
Microsoft Windows 11 Home Version 25H2 26200.9457 (X64) (2025-01-18 07:19:27)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-2287906516-366990468-377022076-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-2287906516-366990468-377022076-503 - Limited - Disabled)
Guest (S-1-5-21-2287906516-366990468-377022076-501 - Limited - Disabled)
Rob (S-1-5-21-2287906516-366990468-377022076-1010 - Limited - Enabled) => C:\Users\Rob
robin (DisplayName: R**** G) (S-1-5-21-2287906516-366990468-377022076-1003 - Administrators - Enabled) [MS Account] => C:\Users\robin
WDAGUtilityAccount (S-1-5-21-2287906516-366990468-377022076-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 26.00 (x64) (HKLM\...\7-Zip) (Version: 26.00 - Igor Pavlov)
Adobe Bridge 2026 (HKLM-x32\...\KBRG_16_0_6) (Version: 16.0.6 - Adobe Inc.)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 6.10.0.252.3 - Adobe Inc.)
Adobe Photoshop 2026 (HKLM-x32\...\PHSP_27_8) (Version: 27.8.0.13 - Adobe Inc.)
AMD Ryzen Master (HKLM\...\{02247819-03CD-414E-AC8D-FD518BFBA445}) (Version: 2.14.1.3286 - Advanced Micro Devices, Inc.) Hidden
AMD Ryzen Master (HKLM\...\AMD Ryzen Master) (Version: 2.14.1.3286 - Advanced Micro Devices, Inc.)
Ant Renamer (HKLM-x32\...\Ant Renamer 2_is1) (Version: 2.12.0 - Ant Software)
Baldurs Gate 3 MULTi13 - ElAmigos version 5849914 (HKLM-x32\...\{11F1C23F-D931-4A8F-8E21-8119485681A9}_is1) (Version: 5849914 - Larian Studios)
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 153.1.95.102 - Autoři prohlížeče Brave)
CPUID CPU-Z 2.09 (HKLM\...\CPUID CPU-Z_is1) (Version: 2.09 - CPUID, Inc.)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 153.0.8010.48 - Google LLC)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0.1 - AppWork GmbH)
Logi Options+ (HKLM\...\{850cdc16-85df-4052-b06e-4e3e9e83c5c6}) (Version: 2.7.961922 - Logitech)
Logi Plugin Service (HKLM\...\{8AFB30E7-8172-472A-BE7A-B2367DED2FD5}) (Version: 6.4.1.3246 - Logitech)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 153.0.4234.32 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 153.0.4234.32 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Czech) 2007 (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Excel MUI (Czech) 2007 (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Czech) 2007 (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Czech) 2007 (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2007 (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (HKLM-x32\...\{90120000-002C-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Czech) 2007 (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Czech) 2007 (HKLM\...\{90120000-002A-0405-1000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2007 (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-2287906516-366990468-377022076-1010\...\OneDriveSetup.exe) (Version: 24.166.0818.0003 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x64 8.0.50727.4053 False (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.50727.42 False (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.51011 False (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.56336 False (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.57102 False (HKLM\...\{f0cbd694-71ce-4391-9690-5da93b2f0445}) (Version: 8.0.57102 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.58298 False (HKLM\...\{f45b48a7-f616-4211-b927-17cab6a96613}) (Version: 8.0.58298 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.59192 False (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x64 8.0.61000 (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.50727.4053 False (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.50727.42 False (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.51011 False (HKLM-x32\...\{a0fe116e-9a8a-466f-aee0-625cb7c207e3}) (Version: 8.0.51011 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.56336 False (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.57103 False (HKLM-x32\...\{d8fea624-4f2c-432d-9a54-6eee9cd1a77e}) (Version: 8.0.57103 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.58299 False (HKLM-x32\...\{052bac4a-6f79-46d4-a024-1ce1b4f73cd4}) (Version: 8.0.58299 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.59193 False (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 False (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.0 False (HKLM\...\{D04659D1-EB2D-3DE5-A833-837A623CCCF7}) (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.218 False (HKLM\...\{BBBE35B2-9349-3C48-BD3D-F574B17C7924}) (Version: 9.0.21022.218 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30411 False (HKLM\...\{D93AC9C8-B6CF-391E-BD2F-48AF4727476C}) (Version: 9.0.30411 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 False (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.0 False (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 False (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4048 False (HKLM\...\{91415F19-4C22-3609-A105-92ED3522D83C}) (Version: 9.0.30729.4048 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 False (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148.0 False (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.5570 False (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 False (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.0 False (HKLM-x32\...\{DCB46B42-723F-350E-B18A-449BC6C21636}) (Version: 9.0.21022 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 False (HKLM-x32\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 False (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 False (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.0 False (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 False (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 False (HKLM-x32\...\{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}) (Version: 9.0.30729.4048 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 False (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148.0 False (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.5570 False (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.30319 False (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.30319 False (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{a2199617-3609-410f-a8e8-e8806c73545b}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 False Eng (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 False Eng (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 False (HKLM\...\{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 False (HKLM\...\{3C28BFD4-90C7-3138-87EF-418DC16E9598}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 False (HKLM\...\{764384C5-BCA9-307C-9AAC-FD443662686A}) (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 False (HKLM\...\{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 False (HKLM\...\{5AF4E09F-5C9B-3AAF-B731-544D3DC821DD}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 False (HKLM\...\{2EDC2FA3-1F34-34E5-9085-588C9EFD1CC6}) (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 False (HKLM-x32\...\{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 False (HKLM-x32\...\{6C772996-BFF3-3C8C-860B-B3D48FF05D65}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 False (HKLM-x32\...\{3D6AD258-61EA-35F5-812C-B7A02152996E}) (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 False (HKLM-x32\...\{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 False (HKLM-x32\...\{E824E81C-80A4-3DFF-B5F9-4842A9FF5F7F}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 False (HKLM-x32\...\{E7D4E834-93EB-351F-B8FB-82CDAE623003}) (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 False (HKLM-x32\...\{51adbf11-493f-431c-a862-967a0fae2944}) (Version: 12.0.21005.1 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 False Eng (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 False (HKLM-x32\...\{1a63c099-febd-4eaf-83ad-a82ea4fdac49}) (Version: 12.0.30501.0 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 False Eng (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{49e969a1-2990-464d-92b5-25f6f34573c6}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 False Eng (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 False (HKLM-x32\...\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}) (Version: 12.0.21005.1 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 False Eng (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 False (HKLM-x32\...\{b55f7208-e02b-4828-ac78-59c73ddf5bc7}) (Version: 12.0.30501.0 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 False Eng (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40649 False (HKLM-x32\...\{78142960-066b-4581-b984-0bdcf560c4be}) (Version: 12.0.40649.5 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40649 False Eng (HKLM-x32\...\{35b83883-40fa-423c-ae73-2aff7e1ea820}) (Version: 12.0.40649.5 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 False (HKLM-x32\...\{10dc8dbf-d3d7-4e23-be07-120fe5c66b78}) (Version: 12.0.40660.0 - Корпорация Майкрософт) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 False Eng (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 False Eng (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 False (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40649 False (HKLM\...\{20C1086D-C843-36B1-B678-990089D1BD44}) (Version: 12.0.40649 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40660 False (HKLM\...\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 False (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40649 False (HKLM\...\{ABB19BB4-838D-3082-BDA4-87C6604181A2}) (Version: 12.0.40649 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40660 False (HKLM\...\{CB0836EC-B072-368D-82B2-D3470BF95707}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 False (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40649 False (HKLM-x32\...\{A8589745-51BC-3963-B4E9-201CF8693538}) (Version: 12.0.40649 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40660 False (HKLM-x32\...\{7DAD0258-515C-3DD4-8964-BD714199E0F7}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 False (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40649 False (HKLM-x32\...\{DEA7F8E3-B7B9-3C3C-945B-7F8CE9041748}) (Version: 12.0.40649 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40660 False (HKLM-x32\...\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33810 (HKLM-x32\...\{5af95fd8-a22e-458f-acee-c61bd787178e}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.40.33810 (HKLM-x32\...\{47109d57-d746-4f8b-9618-ed6a17cc922b}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{C931A1C6-A7BF-3737-874A-818881A37E1B}) (Version: 10.0.60915 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.60910 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 156.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 150.0 - Mozilla)
Mozilla Thunderbird (x64 cs) (HKLM\...\Mozilla Thunderbird 154.0 (x64 cs)) (Version: 154.0 - Mozilla)
NVIDIA App 11.0.8.299 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.8.299 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.8.12612.38276700 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.8.12612.38276700 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.4.6.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.6.3 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 616.56 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 616.56 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.26.0703 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.26.0703 - NVIDIA Corporation)
Paradox Launcher v2 (HKLM\...\{BCBAAF27-1C19-48A5-8DEF-258E46D93FE0}) (Version: 2.4.0 - Paradox Interactive)
PhotoImpact X3 (HKLM-x32\...\InstallShield_{15803703-25FA-4C01-A062-3F4A59937E87}) (Version: 13.0 - Corel)
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
Pillars.Of.Eternity.II.Deadfire.OE.REPACK-KaOs (HKLM\...\Pillars.Of.Eternity.II.Deadfire.OE.REPACK-KaOs_is1) (Version: - ..::[KaOs]::..)
PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 26.08.19.0 - Kakao Corp.)
Python 3.14.4 (64-bit) (HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\{21bd423a-1cbb-41b4-b464-5e7c059ec5a4}) (Version: 3.14.4150.0 - Python Software Foundation)
Python 3.14.4 Add to Path (64-bit) (HKLM\...\{8D190621-B91A-4664-8506-C21DEEF6690A}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Core Interpreter (64-bit) (HKLM\...\{C72ADAF1-CF64-4C34-9485-2EE63BF0EA8B}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Development Libraries (64-bit) (HKLM\...\{7C0B1F9F-EF7E-4CCF-BF13-84B2B9EC0272}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Documentation (64-bit) (HKLM\...\{A69DA17D-3DBA-4A57-B9AF-7ED9696E3EF6}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Executables (64-bit) (HKLM\...\{2269A76D-370C-462C-B5AB-56758AABB756}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 pip Bootstrap (64-bit) (HKLM\...\{E841439F-9F10-4B58-BA75-7B6A71565A28}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Standard Library (64-bit) (HKLM\...\{6C0E5B22-995D-4D14-94D2-9F556CF4812E}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Tcl/Tk Support (64-bit) (HKLM\...\{19AB4ED7-05CC-4497-9935-AF829093B5CE}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python 3.14.4 Test Suite (64-bit) (HKLM\...\{E67B3149-FEEE-4623-A24B-9C096A09D789}) (Version: 3.14.4150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{CF2C2B82-E540-4ACE-B007-DF0C216EFC40}) (Version: 3.14.4150.0 - Python Software Foundation)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9618.1 - Realtek Semiconductor Corp.)
Shareaza 2.7.10.2 (HKLM\...\Shareaza_is1) (Version: 2.7.10.2 - Shareaza Development Team)
Stellaris (HKLM-x32\...\1508702879_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Ancient Relics (HKLM-x32\...\2106739867_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Anniversary Portraits (HKLM-x32\...\1619776270_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Apocalypse (HKLM-x32\...\1988097366_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Aquatics Species Pack (HKLM-x32\...\1253915653_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Arachnoid Portrait Pack (HKLM-x32\...\1897107160_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Astral Planes (HKLM-x32\...\1558204482_is1) (Version: 4.4.6 - GOG.com)
Stellaris: BioGenesis (HKLM-x32\...\1161571108_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Complete Soundtrack (HKLM-x32\...\1892453534_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Cosmic Storms (HKLM-x32\...\1554166669_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Distant Stars Story Pack (HKLM-x32\...\1209094315_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Federations (HKLM-x32\...\1790030450_is1) (Version: 4.4.6 - GOG.com)
Stellaris: First Contact Story Pack (HKLM-x32\...\1210745577_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Galactic Paragons (HKLM-x32\...\2048809075_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Grand Archive (HKLM-x32\...\1197675719_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Horizon Signal (HKLM-x32\...\1490429179_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Humanoids Species Pack (HKLM-x32\...\2062279897_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Infernals Species Pack (HKLM-x32\...\1839971018_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Infinite Frontiers eBook (HKLM-x32\...\1439311238_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Leviathans Story Pack (HKLM-x32\...\1122806862_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Lithoids Species Pack (HKLM-x32\...\1420212493_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Megacorp (HKLM-x32\...\1316465607_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Necroids Species Pack (HKLM-x32\...\2112845659_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Nemesis (HKLM-x32\...\1488827509_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Nomads (HKLM-x32\...\2071004157_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Overlord (HKLM-x32\...\1863527056_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Plantoids Species Pack (HKLM-x32\...\1999794856_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Shadows of the Shroud (HKLM-x32\...\1404109174_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Synthetic Dawn Story Pack (HKLM-x32\...\1292954230_is1) (Version: 4.4.6 - GOG.com)
Stellaris: The Machine Age (HKLM-x32\...\1775099226_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Toxoids Species Pack (HKLM-x32\...\1414149508_is1) (Version: 4.4.6 - GOG.com)
Stellaris: Utopia (HKLM-x32\...\1978231244_is1) (Version: 4.4.6 - GOG.com)
SumatraPDF (HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\SumatraPDF) (Version: 3.5.2 - Krzysztof Kowalczyk)
The Witcher 3: Wild Hunt - Game of the Year Edition (HKLM-x32\...\1495134320_is1) (Version: 4.04a - GOG.com)
UE4 Prerequisites (x64) (HKLM\...\{36EAD5CF-44EF-4FCF-8BE1-D96C4835D7A4}) (Version: 1.0.11.0 - Epic Games, Inc.) Hidden
UE4 Prerequisites (x64) (HKLM-x32\...\{2890ae6b-90e9-448d-b3e6-97e43c21e2fd}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden
UXP WebView Support (HKLM-x32\...\UXPW_1_6_1) (Version: 1.6.1 - Adobe Inc.)
WinRAR 7.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.11.0 - win.rar GmbH)
XnConvert (x64) (HKLM\...\XnConvert (x64)_is1) (Version: 1.105.0.0 - Pierre-e Gougelet)
XnView 2.51.6 (HKLM-x32\...\XnView_is1) (Version: 2.51.6 - Gougelet Pierre-e)

Packages:
=========
Adobe Native Client -> C:\Program Files\Common Files\Adobe\Adobe OS Extension [2026-09-06] ()
Microsoft.D3DMappingLayers -> C:\Program Files\WindowsApps\Microsoft.D3DMappingLayers_1.2608.3.0_x64__8wekyb3d8bbwe [2026-09-03] (Microsoft Corporation)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-11] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.48.315.0_x64__dt26b99r8h8gj [2025-07-20] (Realtek Semiconductor Corp)
WinRAR -> C:\Program Files\WinRAR [2025-07-21] (win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{04CC76C7-1ED7-4CAE-9762-B8664ED008ED}\localserver32 -> C:\Program Files\Shareaza\MediaImageServices.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{0EEA2A0F-AD1F-4555-9827-0DD9335611A4}\localserver32 -> C:\Program Files\Shareaza\WindowsThumbnail.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{0F74BA53-C842-4CB5-B388-DD5663F62479}\InprocServer32 -> C:\Program Files\Shareaza\Preview.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{18D11ED9-1264-48A1-9E14-20F2C633242B}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{21CBAAF2-E3D4-455A-B4E6-223467B53D1A}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{2EE9D739-7726-41cf-8F18-4B1B8763BC63}\InprocServer32 -> C:\Program Files\Shareaza\ImageViewer.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{2F74AA28-2498-4805-911A-04C39858D529}\InprocServer32 -> C:\Program Files\Shareaza\ZIPBuilder.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{30FC662A-D72A-4F79-B63A-ACD4FBFE68A3}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{34791E02-51DC-4CF4-9E34-018166D91D0E}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{3DC28AA6-A597-4E03-96DF-ADA19155B0BE}\localserver32 -> C:\Program Files\Shareaza\MediaPlayer.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{570C197C-FE9C-4D1F-B6E0-EFA44D36399F}\localserver32 -> C:\Program Files\Shareaza\MediaLibraryBuilder.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{61700EEC-D5D3-4793-BD1F-514896D67F44}\InprocServer32 -> C:\Program Files\Shareaza\RatDVDReader.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{6C9E61BE-E58F-4AE1-A304-6FF1D183804C}\InprocServer32 -> C:\Program Files\Shareaza\GFLLibraryBuilder.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{76F13243-9F62-4241-AC07-3B359BBE4EC5}\InprocServer32 -> C:\Program Files\Shareaza\VirusTotal.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{76F13243-9F62-4241-AC07-3B359BBE4EC6}\InprocServer32 -> C:\Program Files\Shareaza\ShortURL.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{A4F1E383-B493-4580-8DB6-5CC89CBAAC53}\InprocServer32 -> C:\Program Files\Shareaza\SkinScanSKS.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{B69F80CD-FB15-45E8-B359-92A41CC571A7}\InprocServer32 -> C:\Program Files\Shareaza\7ZipBuilder.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{B978F591-5137-4612-873A-DC2081BAD6CD}\InprocServer32 -> C:\Program Files\Shareaza\SWFPlugin.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{BEA218D2-6950-497B-9434-61683EC065FE}\InprocServer32 -> C:\Users\robin\AppData\Local\Programs\Python\Launcher\pyshellext.amd64.dll (Python Software Foundation -> Python Software Foundation)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{D73ABD28-3A2A-4E36-AD6F-2AA8F011FBE3}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{E1A67AE5-7041-4AE1-94F7-DE03EF759E27}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{E9B2EF9B-4A0C-451E-801F-257861B87FAD}\localserver32 -> C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{E9F51B1E-DB0F-4EEE-9B36-46151994C715}\InprocServer32 -> C:\Program Files\Shareaza\DocumentReader.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{F801DAD7-F08D-48EF-B0DF-6B120377E835}\InprocServer32 -> C:\Program Files\Shareaza\RARBuilder.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{FC4D8F69-0B18-49BB-8AB7-87EB77AA1A9D}\InprocServer32 -> C:\Program Files\Shareaza\SWFPlugin.dll (Shareaza Development Team) [File not signed]
CustomCLSID: HKU\S-1-5-21-2287906516-366990468-377022076-1003_Classes\CLSID\{FF5FCD00-2C20-49D8-84F6-888D2E2C95DA}\InprocServer32 -> C:\Program Files\Shareaza\GFLImageServices.dll (Shareaza Development Team) [File not signed]
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-02-12] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-02-12] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-07-02] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a3944b54ff18b284\nvshext.dll [2026-08-22] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-02-12] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> )

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2026-08-10 13:47 - 2026-08-10 13:47 - 001368064 _____ () [File not signed] C:\Program Files\Logi\LogiPluginService\win\LogiEventTracingNativeLibrary.dll
2026-08-10 13:47 - 2026-08-10 13:47 - 000178688 _____ () [File not signed] C:\Program Files\Logi\LogiPluginService\win\LogiLocalConnectionNativeLibrary.dll
2024-11-23 13:26 - 2026-07-09 22:29 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll
2026-04-05 11:04 - 2026-02-12 12:00 - 000101888 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\robin\Downloads:Shareaza.GUID [16]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============


==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2022-05-07 07:24 - 2026-04-16 19:30 - 000000735 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.0.1
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKCU\Environment\\Path -> C:\Users\robin\AppData\Local\Programs\Python\Python314\Scripts\;C:\Users\robin\AppData\Local\Programs\Python\Python314\;C:\Users\robin\AppData\Local\Programs\Python\Launcher\;%USERPROFILE%\AppData\Local\Microsoft\WindowsApps
HKU\S-1-5-21-2287906516-366990468-377022076-1003\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\themea\img20.jpg
HKU\S-1-5-21-2287906516-366990468-377022076-1010\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\themea\img20.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run32: => "CzcScript"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{6219F238-14E3-4D2F-AFAA-79AB74138C7D}C:\hry\baldurs gate 3\bin\bg3.exe] => (Block) C:\hry\baldurs gate 3\bin\bg3.exe (Larian Studios Games Ltd. -> )
FirewallRules: [TCP Query User{222B68AD-991F-4AE3-B878-25702F8FBDB3}C:\hry\baldurs gate 3\bin\bg3.exe] => (Block) C:\hry\baldurs gate 3\bin\bg3.exe (Larian Studios Games Ltd. -> )
FirewallRules: [UDP Query User{3C5D80BD-74F9-48B9-BDB6-A82FE900CF36}C:\hry\phoenixpoint\phoenixpointwin64.exe] => (Block) C:\hry\phoenixpoint\phoenixpointwin64.exe (Snapshot Games Inc. -> )
FirewallRules: [TCP Query User{0C9B7B7C-D6AE-4F3F-AD96-76DACBB16765}C:\hry\phoenixpoint\phoenixpointwin64.exe] => (Block) C:\hry\phoenixpoint\phoenixpointwin64.exe (Snapshot Games Inc. -> )
FirewallRules: [{324404DA-ECFE-4594-9DB6-6180391BCAA3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.21.500.0_x64__8wekyb3d8bbwe\Minecraft.Windows.exe (Microsoft Corporation -> )
FirewallRules: [{0CDD3622-18BD-439F-941A-0FBB1580B082}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.21.500.0_x64__8wekyb3d8bbwe\Minecraft.Windows.exe (Microsoft Corporation -> )
FirewallRules: [{E8EE1609-9685-4904-8BB9-2345FE912E66}] => (Allow) C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
FirewallRules: [{5DE50F62-F644-40EE-9277-9E2C2174124F}] => (Allow) C:\Program Files\Shareaza\Shareaza.exe (Shareaza Development Team) [File not signed]
FirewallRules: [{E37639F5-5A21-4603-B005-170EBFEB9D95}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{D8F2BBB1-B67C-4E59-BC39-406171C7F0A6}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [UDP Query User{766746DF-8B3A-4FB1-97D2-870774962567}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [TCP Query User{772A916A-5A09-4567-B999-05520077AF18}C:\hry\terra.invicta.build.23709269\terrainvicta.exe] => (Block) C:\hry\terra.invicta.build.23709269\terrainvicta.exe () [File not signed]
FirewallRules: [UDP Query User{751C3342-79AA-49DC-B6D9-F2B0EF0A1EAE}C:\hry\terra.invicta.build.23709269\terrainvicta.exe] => (Block) C:\hry\terra.invicta.build.23709269\terrainvicta.exe () [File not signed]
FirewallRules: [{A02FCDB2-75EF-453B-98ED-E036AE846361}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{4FA52B79-09FE-4B17-8E96-E22D1C9C9C0C}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{05D4B2FE-ACDC-40F5-8D86-31454921BAC6}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
FirewallRules: [{E4257B56-B3A6-40ED-A6AE-6C64B6A476DE}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
FirewallRules: [{8B2F2355-6DB3-4752-8340-B55DF0B3ABD0}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{B0C88D95-760E-4D3B-A34B-A4A7066570BB}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{180CB9BC-4A83-44AC-8FDB-78E3951B3981}] => (Allow) C:\Program Files\Logi\LogiPluginService\LogiPluginService.exe (Logitech Inc -> Logitech)
FirewallRules: [{00D9F388-FBF9-472A-88B6-1439A1CA01C0}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{1A6ECF60-4CC5-4956-ABDE-02A1CD084E17}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)

==================== Restore Points =========================

12-09-2026 21:21:24 Windows Update
16-09-2026 00:32:17 Windows Update

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (09/17/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155

Error: (09/16/2026 09:28:40 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155

Error: (09/16/2026 04:00:29 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5

Error: (09/16/2026 12:34:05 AM) (Source: CertEnroll) (EventID: 57) (User: NT AUTHORITY)
Description: Zprostředkovatel Microsoft Passport Key Storage Provider nebyl načten, protože se nezdařila inicializace.

Error: (09/15/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155

Error: (09/14/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155

Error: (09/13/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155

Error: (09/12/2026 09:28:39 PM) (Source: Firefox Default Browser Agent) (EventID: 1155) (User: )
Description: Event-ID 1155


System errors:
=============
Error: (09/18/2026 06:23:56 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.

Error: (09/18/2026 06:23:53 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.

Error: (09/17/2026 08:17:53 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.

Error: (09/17/2026 08:17:51 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.

Error: (09/17/2026 07:29:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.

Error: (09/16/2026 06:05:38 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (18:00:06, ‎16.‎09.‎2026) bylo neočekávané.

Error: (09/16/2026 12:32:15 AM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} se v daném časovém limitu neregistroval u služby DCOM.

Error: (09/14/2026 09:26:17 PM) (Source: DCOM) (EventID: 10010) (User: PC)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.


Windows Defender:
================
TimeCreated : 16.09.2026 18:01:22
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
454AD351-5DDA-4B54-BD48-61243CBA9ACC}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή

TimeCreated : 13.09.2026 18:16:06
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
A03016A8-2408-414C-B053-954924D462AF}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъЅćђęđμĺēδ ѕčªη ωáŝ şĸΐррėď ьê¢āúşє ţнё ľãŝ
τ šūçсëśşƒüℓ şсāņ ωąş щĩţнïņ ŧђё ĺǻŝť 7 ðαỳş

TimeCreated : 12.09.2026 15:18:47
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
5C56AD42-7164-42E1-B8A4-E7D80303DB02}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή

TimeCreated : 12.09.2026 11:19:47
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
18B4B2FB-2A20-4471-8917-08B3B9944918}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή

TimeCreated : 12.09.2026 7:43:27
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
F3FE96C0-BAC5-400C-B3EF-74929B2C2488}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή

TimeCreated : 11.09.2026 20:49:58
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
4B8160C5-76CE-4024-8931-F32593C37B51}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъΓРĆ ¢ôŋήэçťïŏń řυлđοώή

TimeCreated : 10.09.2026 21:03:38
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
37B1B7F9-80ED-47A6-9E5C-95B130BC958E}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъЅćђęđμĺēδ ѕčªη ωáŝ şĸΐррėď ьê¢āúşє ţнё ľãŝ
τ šūçсëśşƒüℓ şсāņ ωąş щĩţнïņ ŧђё ĺǻŝť 7 ðαỳş

TimeCreated : 10.09.2026 0:26:47
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
A3F9677A-AB08-45BB-8DBB-60C6886CA947}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъЅćђęđμĺēδ ѕčªη ωáŝ şĸΐррėď ьê¢āúşє ţнё ľãŝ
τ šūçсëśşƒüℓ şсāņ ωąş щĩţнïņ ŧђё ĺǻŝť 7 ðαỳş


CodeIntegrity:
===============
Date: 2026-09-18 15:20:48
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\DefenderSessionHelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2026-09-15 15:38:21
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\UUS\amd64\WaaSMedicAgent.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.


==================== Memory info ===========================

BIOS: American Megatrends International, LLC. F22b 02/06/2024
Motherboard: Gigabyte Technology Co., Ltd. A620M GAMING X
Processor: AMD Ryzen 5 7600X 6-Core Processor
Percentage of memory in use: 21%
Total physical RAM: 31893.9 MB
Available physical RAM: 24969.96 MB
Total Virtual: 33941.9 MB
Available Virtual: 26852.38 MB

==================== Drives ================================

Disk 1 - Drive c: (Windows) (Fixed) (Total:952.29 GB GB) (Free:418.67 GB GB) (Model: ADATA SX8200PNP) NTFS
Disk 0 - Drive d: () (Fixed) (Total:976.56 GB GB) (Free:131.09 GB GB) (Model: Samsung SSD 870 QVO 4TB) NTFS
Disk 0 - Drive e: (filmy) (Fixed) (Total:2749.46 GB GB) (Free:318.42 GB GB) (Model: Samsung SSD 870 QVO 4TB) NTFS

Disk 1 - \\?\Volume{034c53f1-8244-48fd-a60e-518bf74a14ba}\ () (Fixed) (Total:0.88 GB) (Free:0.11 GB) NTFS
Disk 1 - \\?\Volume{90cba374-ae74-4937-8c1c-d913159142eb}\ (Recovery) (Fixed) (Total:0.59 GB) (Free:0.57 GB) NTFS
Disk 1 - \\?\Volume{7b948908-ac83-4b25-885c-bf73cd57240d}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32

==================== MBR & Partition Table ====================

============================================================
Disk: 0 (Size: 3726.02 GB) (Disk ID: 83EB098B)

Partitions:
===========
Partition Style : GPT
Partition Count : 2
Disk ID : {E9CADECD-9AD0-47FF-B2F1-16BECE55D803}
Usable Offset : 0.02 MB
Usable Length : 3726.02 GB
Max Partitions : 128

Partition 1
Type : Basic Data Partition
Size : 976.56 GB
Offset : 1 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {D77E7FD3-DA24-4614-B51E-2E866FB7D0C5}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Basic Data Partition
Size : 2749.46 GB
Offset : 1000001 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {0D9BAFE2-C3B7-4F52-8C40-99130ED3C9EA}
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------


============================================================
Disk: 1 (Size: 953.87 GB) (Disk ID: 83EB09B9)

Partitions:
===========
Partition Style : GPT
Partition Count : 5
Disk ID : {2B783E0A-1E64-4765-BCBA-5B9955CD1E3B}
Usable Offset : 0.02 MB
Usable Length : 953.87 GB
Max Partitions : 128

Partition 1
Type : EFI System Partition
Size : 100 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {7B948908-AC83-4B25-885C-BF73CD57240D}
GPT Name : EFI system partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 101 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {A0088448-CBD3-45A6-A4B4-9D5A946011AC}
GPT Name : Microsoft reserved partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 952.29 GB
Offset : 117 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {120BE8A3-B893-46C7-B387-40967021EDA2}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 903 MB
Offset : 975258 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {034C53F1-8244-48FD-A60E-518BF74A14BA}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
Partition 5
Type : Windows Recovery
Size : 600 MB
Offset : 976162 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {90CBA374-AE74-4937-8C1C-D913159142EB}
GPT Name : Basic data partition
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------

============================================================

==================== End of Addition.txt =======================

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\Run: [AdobeBridge] => [X]
CHR Extension: (Kagane Downloader) - C:\chrome-kagane\dist [2026-07-19] [UpdateUrl:0] <==== ATTENTION
C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
AlternateDataStreams: C:\Users\robin\Downloads:Shareaza.GUID [16]
FirewallRules: [TCP Query User{D8F2BBB1-B67C-4E59-BC39-406171C7F0A6}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [UDP Query User{766746DF-8B3A-4FB1-97D2-870774962567}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [{05D4B2FE-ACDC-40F5-8D86-31454921BAC6}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
FirewallRules: [{E4257B56-B3A6-40ED-A6AE-6C64B6A476DE}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 17-09-2026
Ran by robin (18-09-2026 20:29:24) Run:3
Running from C:\Users\robin\Desktop
Loaded Profiles: robin & Rob
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKU\S-1-5-21-2287906516-366990468-377022076-1003\...\Run: [AdobeBridge] => [X]
CHR Extension: (Kagane Downloader) - C:\chrome-kagane\dist [2026-07-19] [UpdateUrl:0] <==== ATTENTION
C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
AlternateDataStreams: C:\Users\robin\Downloads:Shareaza.GUID [16]
FirewallRules: [TCP Query User{D8F2BBB1-B67C-4E59-BC39-406171C7F0A6}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [UDP Query User{766746DF-8B3A-4FB1-97D2-870774962567}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe] => (Block) D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe => No File
FirewallRules: [{05D4B2FE-ACDC-40F5-8D86-31454921BAC6}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File
FirewallRules: [{E4257B56-B3A6-40ED-A6AE-6C64B6A476DE}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice.exe => No File

EmptyTemp:
End
*****************

Processes closed successfully.
"HKU\S-1-5-21-2287906516-366990468-377022076-1003\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge" => removed successfully
CHR Extension: (Kagane Downloader) - C:\chrome-kagane\dist [2026-07-19] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
C:\Users\robin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
C:\Users\robin\Downloads => ":Shareaza.GUID" ADS could not remove.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D8F2BBB1-B67C-4E59-BC39-406171C7F0A6}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{766746DF-8B3A-4FB1-97D2-870774962567}D:\_instalačky\terra.invicta.build.23709269\terrainvicta.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{05D4B2FE-ACDC-40F5-8D86-31454921BAC6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E4257B56-B3A6-40ED-A6AE-6C64B6A476DE}" => removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 25567792 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 13636018 B
Edge => 48008518 B
Chrome => 491404979 B
Brave => 215681325 B
Firefox => 1268046997 B
Opera => 0 B

Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 5 B
ProgramData => 988257 B
Public => 0 B
systemprofile => 469523 B
systemprofile32 => 0 B
LocalService => 470281 B
NetworkService => 161891 B
robin => 64149926 B
Rob => 5 B

RecycleBin => 21781283354 B
EmptyTemp: => 22.27 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 20:30:34 ====

Smazáno. Nastala změna k lepšímu?

ne

Ještě vyčistíme prohlížeče.
Stahnete Zoek.exe https://sdilej.cz/29519076/zoek.rar, https://sdilej.cz/29519076/zoek.rar a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.

je to moc velký, tak jsem to zabalil
https://forum.viry.cz/download/file.php ... w&id=23045

jinak se nic nezměnilo

OK, bylo smazáno. Děje se to ve včech prohlížečích?

děje
otestoval jsem rychlost netu a byla třetinová...tohle vypadá na problém u providera

Tak to určitě. Kontaktujte ho a zeptejte se, proč je tomu tak. Chtěl jsem se na to zeptat po této vaší odpovědi. Mějte se!

aspoň mám vyčištěný pc...díky

OK as nemáte zač!