Prosím o prevenci. Děkuji.
Odeslal: 03 Říj 2026 15:12
Dobrý den,
prosím o preventivní kontrolu. Děkuji. M.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-10-2026
Ran by L0kim (administrator) on DESKTOP-1RCI1EP (ASUS System Product Name) (03-10-2026 16:09:57)
Running from C:\Users\L0kim\Desktop\FRST64.exe
Loaded Profiles: L0kim
Platform: Microsoft Windows 11 Pro Version 26H2 26300.9550 (X64) Language: Čeština (Česko)
Default browser: Vivaldi
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> ) C:\Program Files\NVIDIA Corporation\FrameViewSDK\bin\nvrla.exe
(C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\FrameViewSDK\FvContainer\FvContainer.exe
(C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\FrameViewSDK\FvContainer\FvContainer.System.exe
(C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> NVIDIA) C:\Program Files\NVIDIA Corporation\FrameViewSDK\bin\PresentMon_x64.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA Overlay.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA App\ShadowPlay\nvsphelper64.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe
(Discord Inc. -> Discord Inc.) C:\Users\L0kim\AppData\Local\Discord\app-1.0.9260\Discord.exe <6>
(discord-code-sign-windows-admin -> Discord Inc.) C:\Users\L0kim\AppData\Local\Discord\app-1.0.9260\modules\discord_utils-1\discord_utils\DiscordSystemHelper.exe <2>
(explorer.exe ->) (Abbingdon Global Limited -> ) C:\Program Files\iFi\USB Audio Device Driver\x64\iFiUsbAudioCpl.exe
(explorer.exe ->) (Vivaldi Technologies AS -> Vivaldi Technologies AS) C:\Users\L0kim\AppData\Local\Vivaldi\Application\vivaldi.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\154.0.4258.53\msedgewebview2.exe <5>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA Overlay.exe <4>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj\nvcplui.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_3990df11758b8744\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc) C:\Windows\System32\DriverStore\FileRepository\amdppkg.inf_amd64_27762fb4b4d122d3\AmdPpkgSvc.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Windows\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray_service.AMD64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_3990df11758b8744\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA) C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2638.102.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2609.1001.16.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Vivaldi Technologies AS -> Vivaldi Technologies AS) C:\Users\L0kim\AppData\Local\Vivaldi\Application\vivaldi.exe <16>
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [7334880 2026-07-21] (Riot Games, Inc. -> Riot Games, Inc.)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [Discord] => C:\Users\L0kim\AppData\Local\Discord\Update.exe [1596344 2026-01-26] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5773976 2026-06-25] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [Navigraph Hub] => C:\Users\L0kim\AppData\Local\Programs\navigraph-hub\Navigraph Hub.exe [176372304 2025-11-21] (Navigraph Kommanditbolag -> Navigraph)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [Navigraph Simlink] => C:\Program Files\Navigraph\Simlink\NavigraphSimlink.exe [1795296 2025-10-14] (Navigraph Kommanditbolag -> Navigraph) [File not signed]
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [G-Menu] => C:\G-Menu\G-Menu.exe --openAsHidden (No File)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [RiotClient] => C:\Riot Games\Riot Client\RiotClientServices.exe [75652904 2026-07-25] (Riot Games, Inc. -> Riot Games, Inc.)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [2125640 2026-09-28] (Overwolf Ltd -> Overwolf Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iFi USB Audio Device Control Panel Autostart.lnk [2026-04-11]
ShortcutTarget: iFi USB Audio Device Control Panel Autostart.lnk -> C:\Program Files\iFi\USB Audio Device Driver\x64\iFiUsbAudioCpl.exe (Abbingdon Global Limited -> )
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {A6AD51E3-4290-4CC0-A093-9166F08B72BD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A9F6058E-BC48-427A-98A5-6DBF14051605} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B65C0B7D-4F11-4506-8C73-A053AE3E6CF9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {ADCFDB12-1CE5-47F7-B1A9-09EE071FC642} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FE944CEA-8DB8-4A12-9179-DCB7FB884BED} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3656304 2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {600A8253-6A87-448D-9829-F48DAED23E75} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2408264 2026-09-28] (Overwolf Ltd -> Overwolf LTD) -> C:\Program Files (x86)\Overwolf\/RunningFrom Schedule
Task: {F71FD2AC-4A51-469A-9131-D05DC72CB0B0} - System32\Tasks\VivaldiUpdateCheck-f00352efdc7dd851 => C:\Users\L0kim\AppData\Local\Vivaldi\Application\update_notifier.exe [16608680 2026-09-29] (Vivaldi Technologies AS -> Vivaldi Technologies AS) -> C:\Users\L0kim\AppData\Local\Vivaldi\Application\--from-scheduler
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{13ae06f8-df0d-4f69-8a34-361cf934622f}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Profile: C:\Users\L0kim\AppData\Local\Microsoft\Edge\User Data\Default [2026-02-06]
Edge Extension: (Dokumenty Google offline) - C:\Users\L0kim\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-02-05]
Edge Extension: (Edge relevant text changes) - C:\Users\L0kim\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-02-05]
Vivaldi:
=======
VIV Profile: C:\Users\L0kim\AppData\Local\Vivaldi\User Data\Default [2026-10-03]
VIV Notifications: Default -> hxxps://csfloat.com
VIV DefaultSearchKeyword: Default -> g
VIV DefaultSuggestURL: Default -> hxxps://www.google.com/complete/search?client=c ... earchTerms}
VIV Extension: (Blokátor reklam AdGuard) - C:\Users\L0kim\AppData\Local\Vivaldi\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2026-10-03]
VIV Extension: (CSFloat Market Checker) - C:\Users\L0kim\AppData\Local\Vivaldi\User Data\Default\Extensions\jjicbefpemnphinccgikpdaagjebbnhg [2026-10-01]
VIV Extension: (Ghostery AdBlocker for Privacy) - C:\Users\L0kim\AppData\Local\Vivaldi\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2026-10-03]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 amd3dvcacheSvc; C:\WINDOWS\System32\DriverStore\FileRepository\amd3dvcache.inf_amd64_0ee9fc510270aa43\amd3dvcacheSvc.exe [188528 2025-09-29] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc)
R2 AmdPpkgSvc; C:\WINDOWS\System32\DriverStore\FileRepository\amdppkg.inf_amd64_27762fb4b4d122d3\AmdPpkgSvc.exe [515480 2025-11-19] (Advanced Micro Devices -> Advanced Micro Devices, Inc)
S3 ArmouryCrateDownloadTool; C:\WINDOWS\System32\DriverStore\FileRepository\rogms.inf_amd64_fe781846488bb435\ArmouryLiveUpdate.exe [577440 2026-08-20] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [3386064 2026-02-16] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [29053672 2026-10-03] (BattlEye Innovations e.K. -> )
S3 DiscordSystemHelper; C:\Program Files\Common Files\Discord\Discord\DiscordSystemHelper.exe [2247552 2026-09-03] (discord-code-sign-windows-admin -> Discord Inc.)
S3 IsoSessionCore; C:\WINDOWS\System32\IsoSessionCoreServer.dll [184320 2026-09-23] (Microsoft Windows -> Microsoft Corporation)
R2 logi_lamparray_service; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray_service.AMD64.exe [11567496 2026-04-14] (Logitech Inc -> Logitech, Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe [2307776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_3990df11758b8744\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2408264 2026-09-28] (Overwolf Ltd -> Overwolf LTD)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-09-01] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [85207176 2026-07-21] (Riot Games, Inc. -> Riot Games, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe [5311776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe [291360 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [26193816 2026-05-03] (KRAFTON, Inc. -> KRAFTON, Inc.)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amd3dvcache; C:\WINDOWS\System32\DriverStore\FileRepository\amd3dvcache.inf_amd64_0ee9fc510270aa43\amd3dvcache.sys [43384 2025-09-29] (Advanced Micro Devices -> Advanced Micro Devices, Inc)
R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [43400 2025-09-10] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
R3 AmdPpkg; C:\WINDOWS\System32\DriverStore\FileRepository\amdppkg.inf_amd64_27762fb4b4d122d3\AmdPpkg.sys [35224 2025-11-19] (Advanced Micro Devices -> Advanced Micro Devices)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [114688 2026-01-09] (Microsoft Corporation) [File not signed]
S3 Ccx01000; C:\WINDOWS\System32\drivers\Ccx01000.sys [692224 2026-09-23] (Microsoft Windows -> Microsoft Corporation)
R3 e2fnexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e2fn.inf_amd64_5075999c7c415a1d\e2fn.sys [1471576 2025-10-06] (Intel Corporation -> Intel Corporation)
R3 FvKMDSvc; \??\C:\WINDOWS\system32\VRFCAT-Plugins\FrameViewKM_x64.sys [29248 2026-07-28] (NVIDIA Corporation -> )
R3 iFiUsbAudio; C:\WINDOWS\System32\drivers\iFiUsbAudio.sys [428712 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 iFiUsbAudioks; C:\WINDOWS\System32\drivers\iFiUsbAudioks.sys [55456 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 ITEUcmCxClient; C:\WINDOWS\System32\drivers\ITEUcmCxClient.sys [105296 2020-09-16] (ITE Tech. Inc. -> ITE Tech. Inc.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [83008 2026-09-03] (Microsoft Windows -> Microsoft Corporation)
R3 logi_lamparray; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray.AMD64.sys [89480 2026-04-14] (Logitech Inc -> Logitech, Inc.)
R3 ROGMS; C:\WINDOWS\System32\DriverStore\FileRepository\rogms.inf_amd64_fe781846488bb435\ROGMS.sys [41464 2026-08-20] (ASUSTeK COMPUTER INC. -> Windows (R) Win 7 DDK provider)
R1 vgk; \??\C:\Program Files\Riot Vanguard\vgk.sys [63834064 2026-07-21] (Riot Games, Inc. -> )
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51264 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-09-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [664592 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [137240 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-10-03 16:09 - 2026-10-03 16:10 - 000016983 _____ C:\Users\L0kim\Desktop\FRST.txt
2026-10-03 16:09 - 2026-10-03 16:10 - 000000000 ____D C:\FRST
2026-10-03 16:09 - 2026-10-03 16:09 - 002456064 _____ (Farbar) C:\Users\L0kim\Desktop\FRST64.exe
2026-10-03 10:17 - 2026-10-03 10:17 - 000711764 _____ C:\WINDOWS\system32\perfh005.dat
2026-10-03 10:17 - 2026-10-03 10:17 - 000152978 _____ C:\WINDOWS\system32\perfc005.dat
2026-09-30 14:53 - 2026-10-03 12:10 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-09-23 14:42 - 2026-09-23 14:42 - 000091797 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-09-23 14:42 - 2026-09-23 14:42 - 000091797 _____ C:\WINDOWS\system32\ctac.json
2026-09-23 14:42 - 2026-09-23 14:42 - 000039736 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-09-23 14:42 - 2026-09-23 14:42 - 000039736 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-09-23 14:42 - 2026-09-23 14:42 - 000004985 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-09-23 14:37 - 2026-09-19 03:55 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-09-23 14:37 - 2026-09-19 03:55 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-09-23 14:37 - 2026-09-19 03:55 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-09-23 14:37 - 2026-09-19 03:55 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-09-23 14:37 - 2026-09-19 03:55 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-09-23 14:37 - 2026-09-19 03:55 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-09-23 14:37 - 2026-09-19 03:55 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-09-23 14:37 - 2026-09-19 03:55 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-09-23 14:37 - 2026-09-19 03:55 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-09-23 14:37 - 2026-09-19 03:55 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-09-23 14:37 - 2026-09-19 03:51 - 001701608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-09-23 14:37 - 2026-09-19 03:51 - 001594600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-09-23 14:37 - 2026-09-19 03:51 - 001499368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-09-23 14:37 - 2026-09-19 03:51 - 001240808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-09-23 14:37 - 2026-09-19 03:51 - 000685800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-09-23 14:37 - 2026-09-19 03:51 - 000513768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-09-23 14:37 - 2026-09-19 03:50 - 028185320 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-09-23 14:37 - 2026-09-19 03:50 - 002343144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-09-23 14:37 - 2026-09-19 03:50 - 001734888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-09-23 14:37 - 2026-09-19 03:50 - 001077992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-09-23 14:37 - 2026-09-19 03:50 - 000828136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-09-23 14:37 - 2026-09-19 03:50 - 000470760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-09-23 14:37 - 2026-09-19 03:49 - 032279784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 020934376 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 006052584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 005926120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 004790504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-09-23 14:37 - 2026-09-19 03:49 - 000574040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 000442640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-09-23 14:37 - 2026-09-18 06:49 - 000176631 _____ C:\WINDOWS\system32\nvinfo.pb
2026-09-21 18:15 - 2026-09-21 18:15 - 000013370 _____ C:\Users\L0kim\Downloads\Kopie - Oka_ku-0_TOP_30l_FINAL.xlsx
2026-09-14 13:59 - 2026-09-14 13:59 - 000094562 _____ C:\Users\L0kim\Downloads\Seznam změn od 1.10.2026.xlsx
2026-09-07 14:36 - 2026-09-07 14:36 - 000052240 _____ C:\Users\L0kim\Downloads\CP_SEZ_BOHEMIA_Vestec_20260907.xlsx
2026-09-03 17:48 - 2026-08-31 12:16 - 000062696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-10-03 15:15 - 2026-02-05 21:21 - 000000000 ____D C:\Users\L0kim\AppData\Local\Discord
2026-10-03 15:12 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-10-03 15:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-10-03 11:31 - 2026-02-05 20:09 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-10-03 10:17 - 2026-02-05 21:21 - 000000000 ____D C:\Users\L0kim\AppData\Roaming\discord
2026-10-03 10:17 - 2026-02-05 20:15 - 001692324 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-10-03 10:17 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-10-03 10:13 - 2026-06-24 20:35 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2026-10-03 10:10 - 2026-06-29 10:08 - 000000000 ____D C:\WINDOWS\Minidump
2026-10-03 10:10 - 2026-02-05 20:36 - 000000000 ____D C:\ProgramData\NVIDIA
2026-10-03 10:10 - 2026-02-05 20:33 - 000039420 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-10-03 10:10 - 2026-02-05 20:20 - 000000000 ____D C:\Users\L0kim
2026-10-03 10:10 - 2026-02-05 20:09 - 003010191 ____N C:\WINDOWS\Minidump\100326-23468-01.dmp
2026-10-03 10:10 - 2026-02-05 20:09 - 000012288 ___SH C:\DumpStack.log.tmp
2026-10-03 10:10 - 2026-02-05 20:09 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-10-03 10:10 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-10-02 23:13 - 2024-04-01 09:21 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2026-10-02 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-10-02 14:39 - 2026-06-24 20:39 - 000000000 ____D C:\Program Files (x86)\Overwolf
2026-10-02 08:07 - 2026-02-05 20:09 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{7ABD8FE4-4474-4C35-BE80-239090778DA7}
2026-10-02 08:07 - 2026-02-05 20:09 - 000003644 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{119794AA-F921-4B6D-9597-94381C970F83}
2026-10-01 22:28 - 2026-02-05 20:20 - 000000000 ____D C:\Users\L0kim\AppData\Local\D3DSCache
2026-10-01 17:02 - 2026-07-31 16:54 - 000001309 _____ C:\Users\L0kim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-10-01 17:02 - 2026-02-05 21:21 - 000002248 _____ C:\Users\L0kim\Desktop\Discord.lnk
2026-10-01 12:22 - 2026-02-05 20:49 - 000000000 ____D C:\Users\L0kim\AppData\Local\NVIDIA Corporation
2026-10-01 08:06 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-09-30 15:11 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-09-30 14:58 - 2026-02-05 20:34 - 000000000 ____D C:\Users\L0kim\AppData\Local\Vivaldi
2026-09-30 14:52 - 2026-02-05 20:35 - 000002385 _____ C:\Users\L0kim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2026-09-30 14:52 - 2026-02-05 20:35 - 000002348 _____ C:\Users\L0kim\Desktop\Vivaldi.lnk
2026-09-29 21:46 - 2026-02-05 20:20 - 000000000 ____D C:\Users\L0kim\AppData\Local\Packages
2026-09-28 20:34 - 2026-02-05 20:22 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1829291575-2169484756-387248613-1001
2026-09-28 20:34 - 2026-02-05 20:22 - 000003570 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1829291575-2169484756-387248613-1001
2026-09-28 20:34 - 2026-02-05 20:22 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1829291575-2169484756-387248613-1001
2026-09-28 20:34 - 2026-02-05 20:22 - 000002377 _____ C:\Users\L0kim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-09-23 14:48 - 2026-02-05 20:09 - 000297192 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-09-23 14:47 - 2026-01-09 19:28 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-09-23 14:47 - 2026-01-09 19:28 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-09-23 14:47 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-09-23 14:47 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-09-23 14:42 - 2026-02-05 20:13 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-09-18 13:03 - 2026-02-05 20:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-09-18 12:59 - 2026-02-05 21:10 - 000000877 _____ C:\Users\Public\Desktop\Battlestate Games Launcher.lnk
2026-09-18 12:59 - 2026-02-05 21:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlestate Games
2026-09-10 12:12 - 2026-02-05 20:49 - 000000000 ____D C:\Users\L0kim\AppData\Local\NVIDIA
2026-09-09 08:03 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-09-09 07:53 - 2026-02-05 20:51 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-09-09 07:52 - 2026-02-05 20:51 - 230964456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-09-08 21:56 - 2026-02-05 21:00 - 000000000 ____D C:\Users\L0kim\AppData\Local\CrashDumps
2026-09-04 15:35 - 2026-02-10 12:55 - 000000000 ____D C:\Program Files (x86)\Steam
2026-09-03 17:48 - 2026-02-05 20:49 - 000003834 _____ C:\WINDOWS\system32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2026-09-03 17:48 - 2026-02-05 20:49 - 000001430 _____ C:\Users\Public\Desktop\NVIDIA App.lnk
2026-09-03 17:48 - 2026-02-05 20:49 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
==================== Files in the root of some directories ========
2026-02-12 21:55 - 2026-02-12 22:01 - 000024576 _____ () C:\Users\L0kim\AppData\Roaming\EFB.db
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-10-2026
Ran by L0kim (03-10-2026 16:10:35)
Running from C:\Users\L0kim\Desktop
Microsoft Windows 11 Pro Version 26H2 26300.9550 (X64) (2026-02-05 18:11:21)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-1829291575-2169484756-387248613-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-1829291575-2169484756-387248613-503 - Limited - Disabled)
Guest (S-1-5-21-1829291575-2169484756-387248613-501 - Limited - Disabled)
L0kim (S-1-5-21-1829291575-2169484756-387248613-1001 - Administrators - Enabled) => C:\Users\L0kim
WDAGUtilityAccount (S-1-5-21-1829291575-2169484756-387248613-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AMD 3D V-Cache Performance Optimizer Driver (HKLM-x32\...\{4537278A-8E70-4021-A866-38CE644D92F8}) (Version: 1.0.0.12 - Advanced Micro Devices, Inc.) Hidden
AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.134 - Advanced Micro Devices, Inc.) Hidden
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 7.11.26.2142 - Advanced Micro Devices, Inc.)
AMD I2C Driver (HKLM-x32\...\{B31D92D9-2914-46B0-9738-F668A563DE73}) (Version: 1.2.0.126 - Advanced Micro Devices, Inc.) Hidden
AMD Interface Driver (HKLM-x32\...\{6118E908-9B3B-4258-B7C2-7DEEA5A65A85}) (Version: 2.0.0.23 - Advanced Micro Devices, Inc.) Hidden
AMD PPM Provisioning File Driver (HKLM-x32\...\{3665A5DE-D07C-46D7-9207-713E8E9FEF32}) (Version: 8.0.0.59 - Advanced Micro Devices, Inc.) Hidden
AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.40.0.0 - Advanced Micro Devices, Inc.) Hidden
AMD_Chipset_Drivers (HKLM-x32\...\{a2c5e97a-dd0d-4a8c-b1fc-dfcaf9a0a4a2}) (Version: 7.11.26.2142 - Advanced Micro Devices, Inc.) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlestate Games Launcher 15.0.0.4607 (HKLM-x32\...\{B0FDA062-7581-4D67-B085-C4E7C358037F}_is1) (Version: 15.0.0.4607 - Battlestate Games)
Discord (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Discord) (Version: 1.0.9260 - Discord Inc.)
ELEVATEX (HKLM\...\4db69ca1-32ae-5c8e-b6b4-9bfb166f6210) (Version: 2026.6.90305 - ELEVATEX Simulations LLC)
Escape from Tarkov (HKLM-x32\...\EscapeFromTarkov) (Version: 1.1.5.1.47510 - Battlestate Games)
Escape from Tarkov: Arena (HKLM-x32\...\EscapeFromTarkovArena_live) (Version: 0.6.0.0.47588 - Battlestate Games)
Fenix Installer (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\FenixApp) (Version: 1.0.286 - FenixSim Ltd.)
FenixSim A320 (HKLM\...\{49120c8f-c92c-47c4-ba07-e99057c45d3d}) (Version: 2.4.0.4720 - FenixSim Ltd.)
FSDreamTeam Universal Installer version 1.2.8 (HKLM-x32\...\FSDreamTeam Universal Installer_is1) (Version: 1.2.8 - VIRTUALI Sagl)
FSLabs Control Center 2.0.1.152 (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\FSLabs_ControlCenter_is1) (Version: 2.0.1.152 - FlightSimLabs Ltd)
FSUIPC7 v7.5.7 (HKLM-x32\...\FSUIPC72024) (Version: v7.5.7 - John L. Dowson)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
iFi USB Audio Device Driver v5.57.0 (HKLM\...\{D2F1F29D-6136-48A8-A3AE-8952E24C65B5}) (Version: 5.57.0 - iFi)
League of Legends (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
MetaTFT (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Overwolf_aheglebeeekjdnkljmpngplhpedgejncjhojnndh) (Version: 0.2.734 - Overwolf app)
Microsoft .NET Host - 10.0.9 (x64) (HKLM\...\{1BE0093C-57AD-46B8-9781-8437664E9957}) (Version: 80.36.53633 - Microsoft Corporation) Hidden
Microsoft .NET Host - 6.0.36 (x64) (HKLM\...\{D6932D97-36F1-40B8-9CDC-CA8365B21000}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.24 (x64) (HKLM\...\{A96D010F-E130-4929-B445-414E7AE4F04B}) (Version: 64.96.47242 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 10.0.9 (x64) (HKLM\...\{946BA18E-2919-4151-B0AF-54F42D8515A3}) (Version: 80.36.53633 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.36 (x64) (HKLM\...\{A9E32B25-994B-4856-A12B-0EBED3050410}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.24 (x64) (HKLM\...\{66D8D2C3-B7A9-4F32-8FE4-42FE64B8422D}) (Version: 64.96.47242 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 10.0.9 (x64) (HKLM\...\{39F1106B-DDD4-4912-9069-D6491D1142BE}) (Version: 80.36.53633 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.36 (x64) (HKLM\...\{C912E33F-956A-4921-9F55-CC11AE8F09AF}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.36 (x64) (HKLM-x32\...\{9d3fc73f-1cf4-412c-a1c9-d2ad28ccbd62}) (Version: 6.0.36.34214 - Microsoft Corporation)
Microsoft .NET Runtime - 8.0.24 (x64) (HKLM\...\{774E3EF4-74C6-460B-BEED-FC1D0E3014D7}) (Version: 64.96.47242 - Microsoft Corporation) Hidden
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 154.0.4258.53 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\OneDriveSetup.exe) (Version: 26.168.0830.0006 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Microsoft Windows Desktop Runtime - 10.0.9 (x64) (HKLM\...\{B7AC6B1E-81BF-44EB-B1DA-D9F4A255984B}) (Version: 80.36.53633 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM\...\{61D4736B-3325-4D4A-BD41-8BD206C6A86E}) (Version: 48.144.23186 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM-x32\...\{0532b8f2-12d7-43de-95fc-7b87006758a8}) (Version: 6.0.36.34217 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.24 (x64) (HKLM\...\{0E6ACF40-9CC5-4B9E-96DE-AC039380D70D}) (Version: 64.96.47265 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.24 (x64) (HKLM-x32\...\{a2467e34-8d77-4d67-ae7e-5edbbafbeb16}) (Version: 8.0.24.35722 - Microsoft Corporation)
Microsoft Windows Desktop Runtime 10.0.9 (x64) (HKLM-x32\...\{0B1257AA-9D34-46E7-B27B-07DF8CD5B92C}) (Version: 10.0.9.50000 - Microsoft Corporation)
Navigraph Hub 1.2.24 (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\55f042a9-1285-5a7a-abcd-4e2044c5b51b) (Version: 1.2.24 - Navigraph)
Navigraph Simlink 1.1.40.1707 (HKLM\...\{E5431A0D-8735-4E89-9E41-D820334B2909}}_is1) (Version: 1.1.40.1707 - Navigraph)
NVIDIA App 11.0.9.251 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.9.251 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.9.12728.38614306 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.9.12728.38614306 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 617.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 617.14 - NVIDIA Corporation)
Orbx Central 4.5.42 (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\7cf15176-b7c3-5704-8319-ddca84b92c9a) (Version: 4.5.42 - Orbx Simulation Systems Pty Ltd)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.311.0.6 - Overwolf Ltd.)
Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 3.0.3.0 - Advanced Micro Devices, Inc.) Hidden
Riot Client (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Riot Game Riot_Client.) (Version: - Riot Games, Inc)
Riot Vanguard (HKLM\...\Riot Vanguard) (Version: - Riot Games, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Vivaldi (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Vivaldi) (Version: 8.2.4133.80 - Vivaldi Technologies AS.)
Packages:
=========
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2026-02-05] (NVIDIA Corp.)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2638.102.0_x64__cv1g1gvanyjgm [2026-09-30] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.5.1.0_x64__8wekyb3d8bbwe [2026-09-24] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1829291575-2169484756-387248613-1001_Classes\CLSID\{2D2D7C85-D7C9-43CA-ADCC-80A293F8CA92}\localserver32 -> C:\Users\L0kim\AppData\Local\Discord\app-1.0.9260\Discord.exe (Discord Inc. -> Discord Inc.)
CustomCLSID: HKU\S-1-5-21-1829291575-2169484756-387248613-1001_Classes\CLSID\{39564B30-4EB7-456D-8F5D-8534AAF7AEFA}\localserver32 -> C:\Users\L0kim\AppData\Local\Vivaldi\Application\8.2.4133.80\notification_helper.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_3990df11758b8744\nvshext.dll [2026-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\L0kim\Desktop\MSFS24.lnk -> C:\FSUIPC7\MSFS24.bat ()
==================== Loaded Modules (Whitelisted) =============
2026-09-03 17:48 - 2026-09-03 17:48 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\PlugIns\NVIDIA App\MessageBusRouter.dll] C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\plugins\NVIDIA Overlay\MessageBusRouter.dll
2026-02-05 20:49 - 2026-09-03 17:48 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2024-04-01 09:26 - 2024-04-01 09:24 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.1.1
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Intel(R) Ethernet Controller I226-V -> e2fn.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\L0kim\Pictures\wallpaper.png
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files\ELEVATEX
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files\FenixSim A320
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files (x86)\Addon Manager
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files (x86)\Steam\steamapps\common\MSFS2024
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\L0kim\AppData\Roaming\Microsoft Flight Simulator 2024
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\ELEVATEX\ELEVATEX.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\ELEVATEX\plugins\elevatex-connect-x64\elevatex-connect-x64.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\ELEVATEX\plugins\elevatex-connect-x86\elevatex-connect-x86.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\Fenix.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\FenixBootstrapper.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\FenixCDU.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\FenixDisplay.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\FenixSystem.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\GqlGateway\Fenix.GqlGateway.exe
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "Riot Vanguard"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_35B12B1591ED5799FD451ECAEA58408F"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "Navigraph Hub"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "Navigraph Simlink"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "RiotClient"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "Overwolf"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{8B541D83-A4E8-43C4-90E6-EA741815BCDA}C:\users\l0kim\appdata\local\vivaldi\application\vivaldi.exe] => (Allow) C:\users\l0kim\appdata\local\vivaldi\application\vivaldi.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
FirewallRules: [UDP Query User{EA27F2C1-38FE-462D-B842-733327B8A673}C:\users\l0kim\appdata\local\vivaldi\application\vivaldi.exe] => (Allow) C:\users\l0kim\appdata\local\vivaldi\application\vivaldi.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
FirewallRules: [{F4091751-42B7-4DA5-9153-F19A1E13131B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{ADD599B3-B8D8-4708-A72B-6DF90BCFBB0A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{BC9175DD-C948-42E7-9C49-155501553873}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{846AB94C-8731-4446-A7FF-821EF6C2D1E5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{998F44AE-DC22-488C-862A-4128AC122187}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MSFS2024\FlightSimulator2024.exe (Asobo Studio) [File not signed]
FirewallRules: [{842A7FAB-00F4-4548-810A-DF54D0E21226}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MSFS2024\FlightSimulator2024.exe (Asobo Studio) [File not signed]
FirewallRules: [TCP Query User{FC770D3D-8E16-4BD3-8656-B5E4C8CD0135}C:\program files\elevatex\elevatex.exe] => (Allow) C:\program files\elevatex\elevatex.exe (ELEVATEX Simulations LLC -> ELEVATEX Simulations LLC)
FirewallRules: [UDP Query User{473EA093-878C-411B-AE36-1B71A1F5543E}C:\program files\elevatex\elevatex.exe] => (Allow) C:\program files\elevatex\elevatex.exe (ELEVATEX Simulations LLC -> ELEVATEX Simulations LLC)
FirewallRules: [TCP Query User{3D5AB1F2-4403-43F8-96BC-A2A0C87E23C3}C:\program files\fenixsim a320\deps\fenixsystem.exe] => (Allow) C:\program files\fenixsim a320\deps\fenixsystem.exe (FenixSim Limited -> FenixSim Ltd.)
FirewallRules: [UDP Query User{6A83A302-E5FC-4CA9-AF5B-788C0CE29ADE}C:\program files\fenixsim a320\deps\fenixsystem.exe] => (Allow) C:\program files\fenixsim a320\deps\fenixsystem.exe (FenixSim Limited -> FenixSim Ltd.)
FirewallRules: [TCP Query User{C6BD2471-5E3E-4228-97E9-2F522608B183}C:\program files\fenixsim a320\deps\gqlgateway\fenix.gqlgateway.exe] => (Allow) C:\program files\fenixsim a320\deps\gqlgateway\fenix.gqlgateway.exe (FenixSim Limited -> FenixSim Ltd.)
FirewallRules: [UDP Query User{C5931EEE-F1AC-44B2-9563-74A5EBC79477}C:\program files\fenixsim a320\deps\gqlgateway\fenix.gqlgateway.exe] => (Allow) C:\program files\fenixsim a320\deps\gqlgateway\fenix.gqlgateway.exe (FenixSim Limited -> FenixSim Ltd.)
FirewallRules: [{3AB8C23F-82F3-497F-BA00-09E817ED582F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [{8BCF2965-2B31-476D-9C06-427B5E2C95A3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [TCP Query User{FD98AF9C-C2E3-4DBD-ACBA-DF3B58D1111B}C:\program files (x86)\heroes of the storm\versions\base96370\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base96370\heroesofthestorm_x64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment, Inc.)
FirewallRules: [UDP Query User{B7B8A31D-F5FF-4182-8601-5BD158BABC22}C:\program files (x86)\heroes of the storm\versions\base96370\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base96370\heroesofthestorm_x64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment, Inc.)
FirewallRules: [TCP Query User{B429F364-03BF-4F9D-AB4A-3FE52D9CABDB}C:\g-menu\g-menu.exe] => (Allow) C:\g-menu\g-menu.exe => No File
FirewallRules: [UDP Query User{45C5999B-592D-4466-9175-8EB5B447F8E1}C:\g-menu\g-menu.exe] => (Allow) C:\g-menu\g-menu.exe => No File
FirewallRules: [TCP Query User{7A2322F9-D1CD-4368-A2CA-75D227A34C51}C:\g-menu\resources\bin\g_menu.exe] => (Allow) C:\g-menu\resources\bin\g_menu.exe => No File
FirewallRules: [UDP Query User{EDE63ADA-E7DB-43D2-8FE7-C17E148B3164}C:\g-menu\resources\bin\g_menu.exe] => (Allow) C:\g-menu\resources\bin\g_menu.exe => No File
FirewallRules: [TCP Query User{91E24A6C-44B1-4FC9-8BA5-4D6EC8CC6CAC}C:\users\l0kim\downloads\anydesk.exe] => (Allow) C:\users\l0kim\downloads\anydesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [UDP Query User{A1A8637F-7436-4006-AA78-5D5E51A120AE}C:\users\l0kim\downloads\anydesk.exe] => (Allow) C:\users\l0kim\downloads\anydesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [TCP Query User{46164F3C-BD81-4555-BB2C-33F130C5D2B7}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => No File
FirewallRules: [UDP Query User{25757F72-C042-45FC-B725-D00401AF7143}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => No File
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{7D7F05F5-DB7C-46F2-852A-6627527642EB}C:\users\l0kim\appdata\local\discord\app-1.0.9242\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [UDP Query User{358532BD-51F0-4412-973E-72A07290AC6A}C:\users\l0kim\appdata\local\discord\app-1.0.9242\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [TCP Query User{5DA87814-1015-4F96-A957-841B03F4E36E}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{FA02C9E3-24E9-446E-A4F4-3F70D7B05977}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{8841BE6B-DA2E-4840-8A79-032EC957F5C8}C:\users\l0kim\appdata\local\discord\app-1.0.9243\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9243\discord.exe => No File
FirewallRules: [UDP Query User{48091A94-13F8-401E-9F30-24562E196309}C:\users\l0kim\appdata\local\discord\app-1.0.9243\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9243\discord.exe => No File
FirewallRules: [TCP Query User{E3DD3C8E-5B39-44A4-A505-6BB43DC86201}C:\users\l0kim\appdata\local\discord\app-1.0.9256\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9256\discord.exe => No File
FirewallRules: [UDP Query User{C8330836-C559-44D3-BFE9-13C3428D7224}C:\users\l0kim\appdata\local\discord\app-1.0.9256\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9256\discord.exe => No File
FirewallRules: [{50736021-CFC6-40F6-90A4-1CC388A6CBF1}] => (Allow) C:\Battlestate Games\BsgLauncher\BsgLauncher.exe (BATTLESTATE GAMES LIMITED -> Battlestate Games)
FirewallRules: [{4D0D27B0-29FF-431D-A5EE-24E16FC2DAFA}] => (Allow) C:\Battlestate Games\BsgLauncher\BsgLauncher.exe (BATTLESTATE GAMES LIMITED -> Battlestate Games)
FirewallRules: [{3FB4F817-0D14-4F03-9617-E3DC6E705B82}] => (Allow) C:\Battlestate Games\Escape from Tarkov\escapefromtarkov_data\plugins\x86_64\vuplexwebviewchromium\vuplex webview.vuplex (BATTLESTATE GAMES LIMITED -> Vuplex)
FirewallRules: [TCP Query User{931FA04F-5676-4F6F-BD4C-A1E78DEF1877}C:\users\l0kim\appdata\local\discord\app-1.0.9259\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9259\discord.exe => No File
FirewallRules: [UDP Query User{3E2405EA-F439-48B1-A30D-D5F003FCCB38}C:\users\l0kim\appdata\local\discord\app-1.0.9259\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9259\discord.exe => No File
FirewallRules: [{576D9BF5-B163-4F6A-ADB7-BFFB9E70D18A}] => (Allow) C:\Program Files (x86)\Overwolf\0.310.1.1\OverwolfBrowser.exe => No File
FirewallRules: [{9CD8CEE9-F0EE-49A0-BCCF-04479A3F83FC}] => (Allow) C:\Program Files (x86)\Overwolf\0.310.1.1\OverwolfBrowser.exe => No File
FirewallRules: [{BA6D0E4E-810D-4281-ABE1-A8F611E959D4}] => (Block) C:\Program Files (x86)\Overwolf\0.310.1.1\OverwolfBrowser.exe => No File
FirewallRules: [{321F9DA0-959B-44E2-9107-E86DC8D38598}] => (Block) C:\Program Files (x86)\Overwolf\0.310.1.1\OverwolfBrowser.exe => No File
FirewallRules: [{EB9BED64-64C8-4D63-B409-5622C63CF3C3}] => (Allow) C:\Program Files (x86)\Overwolf\0.305.0.9\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{03A8547D-E523-43A0-9F4E-69F4EBFFEB7F}] => (Allow) C:\Program Files (x86)\Overwolf\0.305.0.9\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{D97D55FC-6655-493B-AA2F-736E416E6843}] => (Block) C:\Program Files (x86)\Overwolf\0.305.0.9\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{071AD8B8-DA4A-42C5-A614-8F5BE021C29C}] => (Block) C:\Program Files (x86)\Overwolf\0.305.0.9\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{24A18926-5C1B-40E7-BEEA-5C80537DA35B}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{46A3B135-C29F-4220-82A6-D6738D16FCC4}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
==================== Restore Points =========================
30-09-2026 14:53:09 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Generic Bluetooth Adapter
Description: Generic Bluetooth Adapter
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: GenericAdapter
Service: BTHUSB
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.
Name: Kořenový port sběrnice PCI Express
Description: Kořenový port sběrnice PCI Express
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service: pci
Problem: : This device cannot find enough free resources that it can use. If you want to use this device, you will need to disable one of the other devices on this system. (Code12)
Resolution: Two devices have been assigned the same input/output (I/O) ports, the same interrupt, or the same Direct Memory Access channel (either by the BIOS, the operating system, or a combination of the two). This error message can also appear if the BIOS did not allocate enough resources to the device (for example, if a universal serial bus (USB) controller does not get an interrupt from the BIOS because of a corrupt Multiprocessor System (MPS) table).
You can use Device Manager to determine where the conflict is and disable the conflicting device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (10/02/2026 03:06:23 PM) (Source: Application Error) (EventID: 1000) (User: Window Manager)
Description: Název chybující aplikace: dwm.exe, verze: 10.0.26100.9549, časové razítko: 0x653fab24
Název chybujícího modulu: ntdll.dll, verze: 10.0.26100.9549, časové razítko: 0xb396c142
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000001181f5
ID chybujícího procesu: 0x734
Čas spuštění chybující aplikace: 0x1dd524f8ea3deb3
Cesta k chybující aplikaci: C:\WINDOWS\system32\dwm.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID sestavy: 2f248c71-0b7e-41b0-8421-d6c044d47c7e
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (09/08/2026 09:56:13 PM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-1RCI1EP)
Description: Název chybující aplikace: EscapeFromTarkov.exe, verze: 0.0.0.0, časové razítko: 0x00000000
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x00007ffcbcd49bef
ID chybujícího procesu: 0x4338
Čas spuštění chybující aplikace: 0x1dd3fcc1320ce11
Cesta k chybující aplikaci: C:\Battlestate Games\Escape from Tarkov\EscapeFromTarkov.exe
Cesta k chybujícímu modulu: unknown
ID sestavy: 39fde745-5202-4ffa-8bae-4c6846dc3112
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (09/01/2026 03:59:47 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generování kontextu aktivace pro C:\Users\L0kim\AppData\Local\Discord\app-1.0.9255\Discord.exe se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Users\L0kim\AppData\Local\Discord\app-1.0.9255\Discord.exe na řádku 0.
Neplatná syntaxe XML.
Error: (07/30/2026 10:57:07 AM) (Source: CertEnroll) (EventID: 87) (User: NT AUTHORITY)
Description: Registrace certifikátu SCEP pro Místní systém přes https://AMD-KeyId-3f3e4f1ac024f29b041ef ... s/Aik/scep se nepovedla:
PkiStatus(11): SCEPDispositionPendingChallenge
EnrollStatus(32): EnrollUnknown
Operace byla dokončena úspěšně. 0x0 (WIN32: 0)
SubmitDone
SubmitV2Attestation: Bad Request
{"Message":"V2 Protocol AIK certificate requests with P-256 ECC public keys are not supported. Public key algorithm: 1.2.840.10045.2.1, Key length: 256."}
HTTP/1.1 400 Bad Request
Date: Thu, 30 Jul 2026 08:57:06 GMT
Content-Length: 154
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 48ee6053-1779-4a76-9411-040b1d4bdb3a
Metoda: POST(1500ms)
Fáze: SubmitDone
Chybná žádost (400) 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)
Error: (07/30/2026 08:20:34 AM) (Source: CertEnroll) (EventID: 87) (User: NT AUTHORITY)
Description: Registrace certifikátu SCEP pro Místní systém přes https://AMD-KeyId-3f3e4f1ac024f29b041ef ... s/Aik/scep se nepovedla:
PkiStatus(11): SCEPDispositionPendingChallenge
EnrollStatus(32): EnrollUnknown
Operace byla dokončena úspěšně. 0x0 (WIN32: 0)
SubmitDone
SubmitV2Attestation: Bad Request
{"Message":"V2 Protocol AIK certificate requests with P-256 ECC public keys are not supported. Public key algorithm: 1.2.840.10045.2.1, Key length: 256."}
HTTP/1.1 400 Bad Request
Date: Thu, 30 Jul 2026 06:20:32 GMT
Content-Length: 154
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: b301be4b-ca09-4e5a-80d9-befae0b38449
Metoda: POST(1500ms)
Fáze: SubmitDone
Chybná žádost (400) 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)
Error: (07/26/2026 09:21:14 AM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-1RCI1EP)
Description: Název chybující aplikace: WidgetBoard.exe, verze: 526.17301.10.0, časové razítko: 0x6a4762c9
Název chybujícího modulu: WidgetBoardView.dll, verze: 526.17301.10.0, časové razítko: 0x6a4762b0
Kód výjimky: 0xc000001d
Posun chyby: 0x000000000023df3a
ID chybujícího procesu: 0x28d4
Čas spuštění chybující aplikace: 0x1dd1ccf57cd535a
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe
Cesta k chybujícímu modulu: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy\WidgetBoardView.dll
ID sestavy: 8f5346c4-e3ed-48d3-abd3-6b8a944180b7
Celý název chybujícího balíčku: MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy
ID chybující aplikace relativní vzhledem k balíčku: Global.WidgetBoard
Error: (07/26/2026 09:06:15 AM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-1RCI1EP)
Description: Název chybující aplikace: WidgetBoard.exe, verze: 526.17301.10.0, časové razítko: 0x6a4762c9
Název chybujícího modulu: WidgetBoardView.dll, verze: 526.17301.10.0, časové razítko: 0x6a4762b0
Kód výjimky: 0xc000001d
Posun chyby: 0x000000000023df3a
ID chybujícího procesu: 0x2490
Čas spuštění chybující aplikace: 0x1dd1ccd3f5bab16
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe
Cesta k chybujícímu modulu: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy\WidgetBoardView.dll
ID sestavy: 8d033a38-45c9-4b00-81e5-571fc521cd15
Celý název chybujícího balíčku: MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy
ID chybující aplikace relativní vzhledem k balíčku: Global.WidgetBoard
Error: (07/26/2026 08:51:15 AM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-1RCI1EP)
Description: Název chybující aplikace: WidgetBoard.exe, verze: 526.17301.10.0, časové razítko: 0x6a4762c9
Název chybujícího modulu: WidgetBoardView.dll, verze: 526.17301.10.0, časové razítko: 0x6a4762b0
Kód výjimky: 0xc000001d
Posun chyby: 0x000000000023df3a
ID chybujícího procesu: 0x1fcc
Čas spuštění chybující aplikace: 0x1dd1ccb26ea13ac
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe
Cesta k chybujícímu modulu: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy\WidgetBoardView.dll
ID sestavy: 9fc4962c-073c-4c5c-b04e-06b2086b27fe
Celý název chybujícího balíčku: MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy
ID chybující aplikace relativní vzhledem k balíčku: Global.WidgetBoard
System errors:
=============
Error: (10/03/2026 10:10:35 AM) (Source: Microsoft-Windows-WER-SystemErrorReporting) (EventID: 1019) (User: NT AUTHORITY)
Description: BEDaisy.sys
Error: (10/03/2026 10:10:35 AM) (Source: Microsoft-Windows-WER-SystemErrorReporting) (EventID: 1001) (User: NT AUTHORITY)
Description: 0x0000007e (0xffffffffc0000005, 0xfffff803c5575991, 0xffff8605ad5263b8, 0xffff8605ad525bd0)C:\WINDOWS\Minidump\100326-23468-01.dmp7584e16e-7057-4cab-9339-f465c26e5c26
Error: (10/03/2026 10:10:32 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: Místní adaptér Bluetooth selhal. Důvod selhaní nebylo možno určit a adaptér nebude používán. Ovladač vysílače byl vyjmut z paměti.
Error: (10/03/2026 10:10:25 AM) (Source: volmgr) (EventID: 162) (User: )
Description: Soubor se stavem systému byl úspěšně vygenerován.
Error: (10/03/2026 10:10:36 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (10:02:59, 03.10.2026) bylo neočekávané.
Error: (10/03/2026 10:02:55 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: Místní adaptér Bluetooth selhal. Důvod selhaní nebylo možno určit a adaptér nebude používán. Ovladač vysílače byl vyjmut z paměti.
Error: (10/02/2026 11:13:22 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1RCI1EP)
Description: Server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} se v daném časovém limitu neregistroval u služby DCOM.
Error: (10/02/2026 09:06:10 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: Místní adaptér Bluetooth selhal. Důvod selhaní nebylo možno určit a adaptér nebude používán. Ovladač vysílače byl vyjmut z paměti.
Windows Defender:
================
TimeCreated : 30.09.2026 15:44:20
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
D150AEEB-E12F-44E2-BA95-A4CDFC7D9A18}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъҐРĈ ċōηʼnëстĭøи яúñðöŵй
CodeIntegrity:
===============
Date: 2026-10-03 10:10:44
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2026-09-30 14:51:37
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\UUS\amd64\WaaSMedicAgent.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. 1804 11/12/2025
Motherboard: ASUSTeK COMPUTER INC. ROG STRIX X870-F GAMING WIFI
Processor: AMD Ryzen 7 9800X3D 8-Core Processor
Percentage of memory in use: 15%
Total physical RAM: 65178.09 MB
Available physical RAM: 55159.26 MB
Total Virtual: 69274.09 MB
Available Virtual: 57482.79 MB
==================== Drives ================================
Disk 1 - Drive c: () (Fixed) (Total:1861.93 GB) (Free:1372.41 GB) (Model: WD Blue SN580 2TB) NTFS
Disk 0 - Drive d: (Nový svazek) (Fixed) (Total:931.51 GB) (Free:931.38 GB) (Model: Seagate FireCuda 520 SSD ZP1000GM30002) NTFS
Disk 1 - \\?\Volume{a4362ad7-9f60-4a10-b8cd-ffca4c24b64c}\ () (Fixed) (Total:890 MB) (Free:106.71 MB) NTFS
Disk 1 - \\?\Volume{eece0a5d-41ec-4990-9f64-5e5b0e5fdf05}\ () (Fixed) (Total:196 MB) (Free:161.34 MB) FAT32
==================== MBR & Partition Table ====================
============================================================
Disk: 0 (Protective MBR) (Size: 931.51 GB)
Partitions:
===========
Partition Style : GPT
Partition Count : 1
Disk ID : {649458FB-35D6-4E49-8C8F-740A2F80DC53}
Usable Offset : 0.02 MB
Usable Length : 931.51 GB
Max Partitions : 128
Partition 1
Type : Basic Data Partition
Size : 931.51 GB
Offset : 1 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {B2407E68-2AAB-4323-8A9E-F068193514BF}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
============================================================
Disk: 1 (Protective MBR) (Size: 1863.02 GB)
Partitions:
===========
Partition Style : GPT
Partition Count : 4
Disk ID : {E857CD75-BB1D-41A6-8AB7-1335A77E8716}
Usable Offset : 0.02 MB
Usable Length : 1863.02 GB
Max Partitions : 128
Partition 1
Type : EFI System Partition
Size : 200 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {EECE0A5D-41EC-4990-9F64-5E5B0E5FDF05}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 201 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {E3BFBF13-4A28-4532-A930-F6D088627B1A}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 1861.93 GB
Offset : 217 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {950B7577-A17F-4C27-8B3B-38D4CC5C6DD0}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 890 MB
Offset : 1906838 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {A4362AD7-9F60-4A10-B8CD-FFCA4C24B64C}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
============================================================
==================== End of Addition.txt =======================
prosím o preventivní kontrolu. Děkuji. M.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-10-2026
Ran by L0kim (administrator) on DESKTOP-1RCI1EP (ASUS System Product Name) (03-10-2026 16:09:57)
Running from C:\Users\L0kim\Desktop\FRST64.exe
Loaded Profiles: L0kim
Platform: Microsoft Windows 11 Pro Version 26H2 26300.9550 (X64) Language: Čeština (Česko)
Default browser: Vivaldi
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> ) C:\Program Files\NVIDIA Corporation\FrameViewSDK\bin\nvrla.exe
(C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\FrameViewSDK\FvContainer\FvContainer.exe
(C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\FrameViewSDK\FvContainer\FvContainer.System.exe
(C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> NVIDIA) C:\Program Files\NVIDIA Corporation\FrameViewSDK\bin\PresentMon_x64.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA Overlay.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA App\ShadowPlay\nvsphelper64.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe
(Discord Inc. -> Discord Inc.) C:\Users\L0kim\AppData\Local\Discord\app-1.0.9260\Discord.exe <6>
(discord-code-sign-windows-admin -> Discord Inc.) C:\Users\L0kim\AppData\Local\Discord\app-1.0.9260\modules\discord_utils-1\discord_utils\DiscordSystemHelper.exe <2>
(explorer.exe ->) (Abbingdon Global Limited -> ) C:\Program Files\iFi\USB Audio Device Driver\x64\iFiUsbAudioCpl.exe
(explorer.exe ->) (Vivaldi Technologies AS -> Vivaldi Technologies AS) C:\Users\L0kim\AppData\Local\Vivaldi\Application\vivaldi.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\154.0.4258.53\msedgewebview2.exe <5>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA Overlay.exe <4>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj\nvcplui.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_3990df11758b8744\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc) C:\Windows\System32\DriverStore\FileRepository\amdppkg.inf_amd64_27762fb4b4d122d3\AmdPpkgSvc.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Windows\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray_service.AMD64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_3990df11758b8744\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA) C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2638.102.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2609.1001.16.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Vivaldi Technologies AS -> Vivaldi Technologies AS) C:\Users\L0kim\AppData\Local\Vivaldi\Application\vivaldi.exe <16>
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [7334880 2026-07-21] (Riot Games, Inc. -> Riot Games, Inc.)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [Discord] => C:\Users\L0kim\AppData\Local\Discord\Update.exe [1596344 2026-01-26] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5773976 2026-06-25] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [Navigraph Hub] => C:\Users\L0kim\AppData\Local\Programs\navigraph-hub\Navigraph Hub.exe [176372304 2025-11-21] (Navigraph Kommanditbolag -> Navigraph)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [Navigraph Simlink] => C:\Program Files\Navigraph\Simlink\NavigraphSimlink.exe [1795296 2025-10-14] (Navigraph Kommanditbolag -> Navigraph) [File not signed]
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [G-Menu] => C:\G-Menu\G-Menu.exe --openAsHidden (No File)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [RiotClient] => C:\Riot Games\Riot Client\RiotClientServices.exe [75652904 2026-07-25] (Riot Games, Inc. -> Riot Games, Inc.)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [2125640 2026-09-28] (Overwolf Ltd -> Overwolf Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iFi USB Audio Device Control Panel Autostart.lnk [2026-04-11]
ShortcutTarget: iFi USB Audio Device Control Panel Autostart.lnk -> C:\Program Files\iFi\USB Audio Device Driver\x64\iFiUsbAudioCpl.exe (Abbingdon Global Limited -> )
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {A6AD51E3-4290-4CC0-A093-9166F08B72BD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A9F6058E-BC48-427A-98A5-6DBF14051605} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B65C0B7D-4F11-4506-8C73-A053AE3E6CF9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {ADCFDB12-1CE5-47F7-B1A9-09EE071FC642} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FE944CEA-8DB8-4A12-9179-DCB7FB884BED} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3656304 2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {600A8253-6A87-448D-9829-F48DAED23E75} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2408264 2026-09-28] (Overwolf Ltd -> Overwolf LTD) -> C:\Program Files (x86)\Overwolf\/RunningFrom Schedule
Task: {F71FD2AC-4A51-469A-9131-D05DC72CB0B0} - System32\Tasks\VivaldiUpdateCheck-f00352efdc7dd851 => C:\Users\L0kim\AppData\Local\Vivaldi\Application\update_notifier.exe [16608680 2026-09-29] (Vivaldi Technologies AS -> Vivaldi Technologies AS) -> C:\Users\L0kim\AppData\Local\Vivaldi\Application\--from-scheduler
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{13ae06f8-df0d-4f69-8a34-361cf934622f}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Profile: C:\Users\L0kim\AppData\Local\Microsoft\Edge\User Data\Default [2026-02-06]
Edge Extension: (Dokumenty Google offline) - C:\Users\L0kim\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-02-05]
Edge Extension: (Edge relevant text changes) - C:\Users\L0kim\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-02-05]
Vivaldi:
=======
VIV Profile: C:\Users\L0kim\AppData\Local\Vivaldi\User Data\Default [2026-10-03]
VIV Notifications: Default -> hxxps://csfloat.com
VIV DefaultSearchKeyword: Default -> g
VIV DefaultSuggestURL: Default -> hxxps://www.google.com/complete/search?client=c ... earchTerms}
VIV Extension: (Blokátor reklam AdGuard) - C:\Users\L0kim\AppData\Local\Vivaldi\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2026-10-03]
VIV Extension: (CSFloat Market Checker) - C:\Users\L0kim\AppData\Local\Vivaldi\User Data\Default\Extensions\jjicbefpemnphinccgikpdaagjebbnhg [2026-10-01]
VIV Extension: (Ghostery AdBlocker for Privacy) - C:\Users\L0kim\AppData\Local\Vivaldi\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2026-10-03]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 amd3dvcacheSvc; C:\WINDOWS\System32\DriverStore\FileRepository\amd3dvcache.inf_amd64_0ee9fc510270aa43\amd3dvcacheSvc.exe [188528 2025-09-29] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc)
R2 AmdPpkgSvc; C:\WINDOWS\System32\DriverStore\FileRepository\amdppkg.inf_amd64_27762fb4b4d122d3\AmdPpkgSvc.exe [515480 2025-11-19] (Advanced Micro Devices -> Advanced Micro Devices, Inc)
S3 ArmouryCrateDownloadTool; C:\WINDOWS\System32\DriverStore\FileRepository\rogms.inf_amd64_fe781846488bb435\ArmouryLiveUpdate.exe [577440 2026-08-20] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [3386064 2026-02-16] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [29053672 2026-10-03] (BattlEye Innovations e.K. -> )
S3 DiscordSystemHelper; C:\Program Files\Common Files\Discord\Discord\DiscordSystemHelper.exe [2247552 2026-09-03] (discord-code-sign-windows-admin -> Discord Inc.)
S3 IsoSessionCore; C:\WINDOWS\System32\IsoSessionCoreServer.dll [184320 2026-09-23] (Microsoft Windows -> Microsoft Corporation)
R2 logi_lamparray_service; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray_service.AMD64.exe [11567496 2026-04-14] (Logitech Inc -> Logitech, Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe [2307776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_3990df11758b8744\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2408264 2026-09-28] (Overwolf Ltd -> Overwolf LTD)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-09-01] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [85207176 2026-07-21] (Riot Games, Inc. -> Riot Games, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe [5311776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe [291360 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [26193816 2026-05-03] (KRAFTON, Inc. -> KRAFTON, Inc.)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amd3dvcache; C:\WINDOWS\System32\DriverStore\FileRepository\amd3dvcache.inf_amd64_0ee9fc510270aa43\amd3dvcache.sys [43384 2025-09-29] (Advanced Micro Devices -> Advanced Micro Devices, Inc)
R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [43400 2025-09-10] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
R3 AmdPpkg; C:\WINDOWS\System32\DriverStore\FileRepository\amdppkg.inf_amd64_27762fb4b4d122d3\AmdPpkg.sys [35224 2025-11-19] (Advanced Micro Devices -> Advanced Micro Devices)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [114688 2026-01-09] (Microsoft Corporation) [File not signed]
S3 Ccx01000; C:\WINDOWS\System32\drivers\Ccx01000.sys [692224 2026-09-23] (Microsoft Windows -> Microsoft Corporation)
R3 e2fnexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e2fn.inf_amd64_5075999c7c415a1d\e2fn.sys [1471576 2025-10-06] (Intel Corporation -> Intel Corporation)
R3 FvKMDSvc; \??\C:\WINDOWS\system32\VRFCAT-Plugins\FrameViewKM_x64.sys [29248 2026-07-28] (NVIDIA Corporation -> )
R3 iFiUsbAudio; C:\WINDOWS\System32\drivers\iFiUsbAudio.sys [428712 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 iFiUsbAudioks; C:\WINDOWS\System32\drivers\iFiUsbAudioks.sys [55456 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 ITEUcmCxClient; C:\WINDOWS\System32\drivers\ITEUcmCxClient.sys [105296 2020-09-16] (ITE Tech. Inc. -> ITE Tech. Inc.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [83008 2026-09-03] (Microsoft Windows -> Microsoft Corporation)
R3 logi_lamparray; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray.AMD64.sys [89480 2026-04-14] (Logitech Inc -> Logitech, Inc.)
R3 ROGMS; C:\WINDOWS\System32\DriverStore\FileRepository\rogms.inf_amd64_fe781846488bb435\ROGMS.sys [41464 2026-08-20] (ASUSTeK COMPUTER INC. -> Windows (R) Win 7 DDK provider)
R1 vgk; \??\C:\Program Files\Riot Vanguard\vgk.sys [63834064 2026-07-21] (Riot Games, Inc. -> )
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51264 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-09-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [664592 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [137240 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-10-03 16:09 - 2026-10-03 16:10 - 000016983 _____ C:\Users\L0kim\Desktop\FRST.txt
2026-10-03 16:09 - 2026-10-03 16:10 - 000000000 ____D C:\FRST
2026-10-03 16:09 - 2026-10-03 16:09 - 002456064 _____ (Farbar) C:\Users\L0kim\Desktop\FRST64.exe
2026-10-03 10:17 - 2026-10-03 10:17 - 000711764 _____ C:\WINDOWS\system32\perfh005.dat
2026-10-03 10:17 - 2026-10-03 10:17 - 000152978 _____ C:\WINDOWS\system32\perfc005.dat
2026-09-30 14:53 - 2026-10-03 12:10 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-09-23 14:42 - 2026-09-23 14:42 - 000091797 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-09-23 14:42 - 2026-09-23 14:42 - 000091797 _____ C:\WINDOWS\system32\ctac.json
2026-09-23 14:42 - 2026-09-23 14:42 - 000039736 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-09-23 14:42 - 2026-09-23 14:42 - 000039736 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-09-23 14:42 - 2026-09-23 14:42 - 000004985 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-09-23 14:37 - 2026-09-19 03:55 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-09-23 14:37 - 2026-09-19 03:55 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-09-23 14:37 - 2026-09-19 03:55 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-09-23 14:37 - 2026-09-19 03:55 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-09-23 14:37 - 2026-09-19 03:55 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-09-23 14:37 - 2026-09-19 03:55 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-09-23 14:37 - 2026-09-19 03:55 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-09-23 14:37 - 2026-09-19 03:55 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-09-23 14:37 - 2026-09-19 03:55 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-09-23 14:37 - 2026-09-19 03:55 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-09-23 14:37 - 2026-09-19 03:51 - 001701608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-09-23 14:37 - 2026-09-19 03:51 - 001594600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-09-23 14:37 - 2026-09-19 03:51 - 001499368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-09-23 14:37 - 2026-09-19 03:51 - 001240808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-09-23 14:37 - 2026-09-19 03:51 - 000685800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-09-23 14:37 - 2026-09-19 03:51 - 000513768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-09-23 14:37 - 2026-09-19 03:50 - 028185320 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-09-23 14:37 - 2026-09-19 03:50 - 002343144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-09-23 14:37 - 2026-09-19 03:50 - 001734888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-09-23 14:37 - 2026-09-19 03:50 - 001077992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-09-23 14:37 - 2026-09-19 03:50 - 000828136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-09-23 14:37 - 2026-09-19 03:50 - 000470760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-09-23 14:37 - 2026-09-19 03:49 - 032279784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 020934376 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 006052584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 005926120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 004790504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-09-23 14:37 - 2026-09-19 03:49 - 000574040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-09-23 14:37 - 2026-09-19 03:49 - 000442640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-09-23 14:37 - 2026-09-18 06:49 - 000176631 _____ C:\WINDOWS\system32\nvinfo.pb
2026-09-21 18:15 - 2026-09-21 18:15 - 000013370 _____ C:\Users\L0kim\Downloads\Kopie - Oka_ku-0_TOP_30l_FINAL.xlsx
2026-09-14 13:59 - 2026-09-14 13:59 - 000094562 _____ C:\Users\L0kim\Downloads\Seznam změn od 1.10.2026.xlsx
2026-09-07 14:36 - 2026-09-07 14:36 - 000052240 _____ C:\Users\L0kim\Downloads\CP_SEZ_BOHEMIA_Vestec_20260907.xlsx
2026-09-03 17:48 - 2026-08-31 12:16 - 000062696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-10-03 15:15 - 2026-02-05 21:21 - 000000000 ____D C:\Users\L0kim\AppData\Local\Discord
2026-10-03 15:12 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-10-03 15:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-10-03 11:31 - 2026-02-05 20:09 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-10-03 10:17 - 2026-02-05 21:21 - 000000000 ____D C:\Users\L0kim\AppData\Roaming\discord
2026-10-03 10:17 - 2026-02-05 20:15 - 001692324 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-10-03 10:17 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-10-03 10:13 - 2026-06-24 20:35 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2026-10-03 10:10 - 2026-06-29 10:08 - 000000000 ____D C:\WINDOWS\Minidump
2026-10-03 10:10 - 2026-02-05 20:36 - 000000000 ____D C:\ProgramData\NVIDIA
2026-10-03 10:10 - 2026-02-05 20:33 - 000039420 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-10-03 10:10 - 2026-02-05 20:20 - 000000000 ____D C:\Users\L0kim
2026-10-03 10:10 - 2026-02-05 20:09 - 003010191 ____N C:\WINDOWS\Minidump\100326-23468-01.dmp
2026-10-03 10:10 - 2026-02-05 20:09 - 000012288 ___SH C:\DumpStack.log.tmp
2026-10-03 10:10 - 2026-02-05 20:09 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-10-03 10:10 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-10-02 23:13 - 2024-04-01 09:21 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2026-10-02 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-10-02 14:39 - 2026-06-24 20:39 - 000000000 ____D C:\Program Files (x86)\Overwolf
2026-10-02 08:07 - 2026-02-05 20:09 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{7ABD8FE4-4474-4C35-BE80-239090778DA7}
2026-10-02 08:07 - 2026-02-05 20:09 - 000003644 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{119794AA-F921-4B6D-9597-94381C970F83}
2026-10-01 22:28 - 2026-02-05 20:20 - 000000000 ____D C:\Users\L0kim\AppData\Local\D3DSCache
2026-10-01 17:02 - 2026-07-31 16:54 - 000001309 _____ C:\Users\L0kim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-10-01 17:02 - 2026-02-05 21:21 - 000002248 _____ C:\Users\L0kim\Desktop\Discord.lnk
2026-10-01 12:22 - 2026-02-05 20:49 - 000000000 ____D C:\Users\L0kim\AppData\Local\NVIDIA Corporation
2026-10-01 08:06 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-09-30 15:11 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-09-30 14:58 - 2026-02-05 20:34 - 000000000 ____D C:\Users\L0kim\AppData\Local\Vivaldi
2026-09-30 14:52 - 2026-02-05 20:35 - 000002385 _____ C:\Users\L0kim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2026-09-30 14:52 - 2026-02-05 20:35 - 000002348 _____ C:\Users\L0kim\Desktop\Vivaldi.lnk
2026-09-29 21:46 - 2026-02-05 20:20 - 000000000 ____D C:\Users\L0kim\AppData\Local\Packages
2026-09-28 20:34 - 2026-02-05 20:22 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1829291575-2169484756-387248613-1001
2026-09-28 20:34 - 2026-02-05 20:22 - 000003570 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1829291575-2169484756-387248613-1001
2026-09-28 20:34 - 2026-02-05 20:22 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1829291575-2169484756-387248613-1001
2026-09-28 20:34 - 2026-02-05 20:22 - 000002377 _____ C:\Users\L0kim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-09-23 14:48 - 2026-02-05 20:09 - 000297192 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-09-23 14:47 - 2026-01-09 19:28 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-09-23 14:47 - 2026-01-09 19:28 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-09-23 14:47 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-09-23 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-09-23 14:47 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-09-23 14:42 - 2026-02-05 20:13 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-09-18 13:03 - 2026-02-05 20:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-09-18 12:59 - 2026-02-05 21:10 - 000000877 _____ C:\Users\Public\Desktop\Battlestate Games Launcher.lnk
2026-09-18 12:59 - 2026-02-05 21:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlestate Games
2026-09-10 12:12 - 2026-02-05 20:49 - 000000000 ____D C:\Users\L0kim\AppData\Local\NVIDIA
2026-09-09 08:03 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-09-09 07:53 - 2026-02-05 20:51 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-09-09 07:52 - 2026-02-05 20:51 - 230964456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-09-08 21:56 - 2026-02-05 21:00 - 000000000 ____D C:\Users\L0kim\AppData\Local\CrashDumps
2026-09-04 15:35 - 2026-02-10 12:55 - 000000000 ____D C:\Program Files (x86)\Steam
2026-09-03 17:48 - 2026-02-05 20:49 - 000003834 _____ C:\WINDOWS\system32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2026-09-03 17:48 - 2026-02-05 20:49 - 000001430 _____ C:\Users\Public\Desktop\NVIDIA App.lnk
2026-09-03 17:48 - 2026-02-05 20:49 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
==================== Files in the root of some directories ========
2026-02-12 21:55 - 2026-02-12 22:01 - 000024576 _____ () C:\Users\L0kim\AppData\Roaming\EFB.db
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-10-2026
Ran by L0kim (03-10-2026 16:10:35)
Running from C:\Users\L0kim\Desktop
Microsoft Windows 11 Pro Version 26H2 26300.9550 (X64) (2026-02-05 18:11:21)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-1829291575-2169484756-387248613-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-1829291575-2169484756-387248613-503 - Limited - Disabled)
Guest (S-1-5-21-1829291575-2169484756-387248613-501 - Limited - Disabled)
L0kim (S-1-5-21-1829291575-2169484756-387248613-1001 - Administrators - Enabled) => C:\Users\L0kim
WDAGUtilityAccount (S-1-5-21-1829291575-2169484756-387248613-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AMD 3D V-Cache Performance Optimizer Driver (HKLM-x32\...\{4537278A-8E70-4021-A866-38CE644D92F8}) (Version: 1.0.0.12 - Advanced Micro Devices, Inc.) Hidden
AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.134 - Advanced Micro Devices, Inc.) Hidden
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 7.11.26.2142 - Advanced Micro Devices, Inc.)
AMD I2C Driver (HKLM-x32\...\{B31D92D9-2914-46B0-9738-F668A563DE73}) (Version: 1.2.0.126 - Advanced Micro Devices, Inc.) Hidden
AMD Interface Driver (HKLM-x32\...\{6118E908-9B3B-4258-B7C2-7DEEA5A65A85}) (Version: 2.0.0.23 - Advanced Micro Devices, Inc.) Hidden
AMD PPM Provisioning File Driver (HKLM-x32\...\{3665A5DE-D07C-46D7-9207-713E8E9FEF32}) (Version: 8.0.0.59 - Advanced Micro Devices, Inc.) Hidden
AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.40.0.0 - Advanced Micro Devices, Inc.) Hidden
AMD_Chipset_Drivers (HKLM-x32\...\{a2c5e97a-dd0d-4a8c-b1fc-dfcaf9a0a4a2}) (Version: 7.11.26.2142 - Advanced Micro Devices, Inc.) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlestate Games Launcher 15.0.0.4607 (HKLM-x32\...\{B0FDA062-7581-4D67-B085-C4E7C358037F}_is1) (Version: 15.0.0.4607 - Battlestate Games)
Discord (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Discord) (Version: 1.0.9260 - Discord Inc.)
ELEVATEX (HKLM\...\4db69ca1-32ae-5c8e-b6b4-9bfb166f6210) (Version: 2026.6.90305 - ELEVATEX Simulations LLC)
Escape from Tarkov (HKLM-x32\...\EscapeFromTarkov) (Version: 1.1.5.1.47510 - Battlestate Games)
Escape from Tarkov: Arena (HKLM-x32\...\EscapeFromTarkovArena_live) (Version: 0.6.0.0.47588 - Battlestate Games)
Fenix Installer (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\FenixApp) (Version: 1.0.286 - FenixSim Ltd.)
FenixSim A320 (HKLM\...\{49120c8f-c92c-47c4-ba07-e99057c45d3d}) (Version: 2.4.0.4720 - FenixSim Ltd.)
FSDreamTeam Universal Installer version 1.2.8 (HKLM-x32\...\FSDreamTeam Universal Installer_is1) (Version: 1.2.8 - VIRTUALI Sagl)
FSLabs Control Center 2.0.1.152 (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\FSLabs_ControlCenter_is1) (Version: 2.0.1.152 - FlightSimLabs Ltd)
FSUIPC7 v7.5.7 (HKLM-x32\...\FSUIPC72024) (Version: v7.5.7 - John L. Dowson)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
iFi USB Audio Device Driver v5.57.0 (HKLM\...\{D2F1F29D-6136-48A8-A3AE-8952E24C65B5}) (Version: 5.57.0 - iFi)
League of Legends (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
MetaTFT (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Overwolf_aheglebeeekjdnkljmpngplhpedgejncjhojnndh) (Version: 0.2.734 - Overwolf app)
Microsoft .NET Host - 10.0.9 (x64) (HKLM\...\{1BE0093C-57AD-46B8-9781-8437664E9957}) (Version: 80.36.53633 - Microsoft Corporation) Hidden
Microsoft .NET Host - 6.0.36 (x64) (HKLM\...\{D6932D97-36F1-40B8-9CDC-CA8365B21000}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.24 (x64) (HKLM\...\{A96D010F-E130-4929-B445-414E7AE4F04B}) (Version: 64.96.47242 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 10.0.9 (x64) (HKLM\...\{946BA18E-2919-4151-B0AF-54F42D8515A3}) (Version: 80.36.53633 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.36 (x64) (HKLM\...\{A9E32B25-994B-4856-A12B-0EBED3050410}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.24 (x64) (HKLM\...\{66D8D2C3-B7A9-4F32-8FE4-42FE64B8422D}) (Version: 64.96.47242 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 10.0.9 (x64) (HKLM\...\{39F1106B-DDD4-4912-9069-D6491D1142BE}) (Version: 80.36.53633 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.36 (x64) (HKLM\...\{C912E33F-956A-4921-9F55-CC11AE8F09AF}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.36 (x64) (HKLM-x32\...\{9d3fc73f-1cf4-412c-a1c9-d2ad28ccbd62}) (Version: 6.0.36.34214 - Microsoft Corporation)
Microsoft .NET Runtime - 8.0.24 (x64) (HKLM\...\{774E3EF4-74C6-460B-BEED-FC1D0E3014D7}) (Version: 64.96.47242 - Microsoft Corporation) Hidden
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 154.0.4258.53 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\OneDriveSetup.exe) (Version: 26.168.0830.0006 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Microsoft Windows Desktop Runtime - 10.0.9 (x64) (HKLM\...\{B7AC6B1E-81BF-44EB-B1DA-D9F4A255984B}) (Version: 80.36.53633 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM\...\{61D4736B-3325-4D4A-BD41-8BD206C6A86E}) (Version: 48.144.23186 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM-x32\...\{0532b8f2-12d7-43de-95fc-7b87006758a8}) (Version: 6.0.36.34217 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.24 (x64) (HKLM\...\{0E6ACF40-9CC5-4B9E-96DE-AC039380D70D}) (Version: 64.96.47265 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.24 (x64) (HKLM-x32\...\{a2467e34-8d77-4d67-ae7e-5edbbafbeb16}) (Version: 8.0.24.35722 - Microsoft Corporation)
Microsoft Windows Desktop Runtime 10.0.9 (x64) (HKLM-x32\...\{0B1257AA-9D34-46E7-B27B-07DF8CD5B92C}) (Version: 10.0.9.50000 - Microsoft Corporation)
Navigraph Hub 1.2.24 (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\55f042a9-1285-5a7a-abcd-4e2044c5b51b) (Version: 1.2.24 - Navigraph)
Navigraph Simlink 1.1.40.1707 (HKLM\...\{E5431A0D-8735-4E89-9E41-D820334B2909}}_is1) (Version: 1.1.40.1707 - Navigraph)
NVIDIA App 11.0.9.251 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.9.251 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.9.12728.38614306 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.9.12728.38614306 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 617.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 617.14 - NVIDIA Corporation)
Orbx Central 4.5.42 (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\7cf15176-b7c3-5704-8319-ddca84b92c9a) (Version: 4.5.42 - Orbx Simulation Systems Pty Ltd)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.311.0.6 - Overwolf Ltd.)
Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 3.0.3.0 - Advanced Micro Devices, Inc.) Hidden
Riot Client (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Riot Game Riot_Client.) (Version: - Riot Games, Inc)
Riot Vanguard (HKLM\...\Riot Vanguard) (Version: - Riot Games, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Vivaldi (HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\Vivaldi) (Version: 8.2.4133.80 - Vivaldi Technologies AS.)
Packages:
=========
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2026-02-05] (NVIDIA Corp.)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2638.102.0_x64__cv1g1gvanyjgm [2026-09-30] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.5.1.0_x64__8wekyb3d8bbwe [2026-09-24] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1829291575-2169484756-387248613-1001_Classes\CLSID\{2D2D7C85-D7C9-43CA-ADCC-80A293F8CA92}\localserver32 -> C:\Users\L0kim\AppData\Local\Discord\app-1.0.9260\Discord.exe (Discord Inc. -> Discord Inc.)
CustomCLSID: HKU\S-1-5-21-1829291575-2169484756-387248613-1001_Classes\CLSID\{39564B30-4EB7-456D-8F5D-8534AAF7AEFA}\localserver32 -> C:\Users\L0kim\AppData\Local\Vivaldi\Application\8.2.4133.80\notification_helper.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_3990df11758b8744\nvshext.dll [2026-09-19] (NVIDIA Corporation -> NVIDIA Corporation)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\L0kim\Desktop\MSFS24.lnk -> C:\FSUIPC7\MSFS24.bat ()
==================== Loaded Modules (Whitelisted) =============
2026-09-03 17:48 - 2026-09-03 17:48 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\PlugIns\NVIDIA App\MessageBusRouter.dll] C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\plugins\NVIDIA Overlay\MessageBusRouter.dll
2026-02-05 20:49 - 2026-09-03 17:48 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2024-04-01 09:26 - 2024-04-01 09:24 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.1.1
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Intel(R) Ethernet Controller I226-V -> e2fn.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\L0kim\Pictures\wallpaper.png
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files\ELEVATEX
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files\FenixSim A320
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files (x86)\Addon Manager
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files (x86)\Steam\steamapps\common\MSFS2024
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\L0kim\AppData\Roaming\Microsoft Flight Simulator 2024
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\ELEVATEX\ELEVATEX.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\ELEVATEX\plugins\elevatex-connect-x64\elevatex-connect-x64.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\ELEVATEX\plugins\elevatex-connect-x86\elevatex-connect-x86.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\Fenix.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\FenixBootstrapper.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\FenixCDU.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\FenixDisplay.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\FenixSystem.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\GqlGateway\Fenix.GqlGateway.exe
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "Riot Vanguard"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_35B12B1591ED5799FD451ECAEA58408F"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "Navigraph Hub"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "Navigraph Simlink"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "RiotClient"
HKU\S-1-5-21-1829291575-2169484756-387248613-1001\...\StartupApproved\Run: => "Overwolf"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{8B541D83-A4E8-43C4-90E6-EA741815BCDA}C:\users\l0kim\appdata\local\vivaldi\application\vivaldi.exe] => (Allow) C:\users\l0kim\appdata\local\vivaldi\application\vivaldi.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
FirewallRules: [UDP Query User{EA27F2C1-38FE-462D-B842-733327B8A673}C:\users\l0kim\appdata\local\vivaldi\application\vivaldi.exe] => (Allow) C:\users\l0kim\appdata\local\vivaldi\application\vivaldi.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
FirewallRules: [{F4091751-42B7-4DA5-9153-F19A1E13131B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{ADD599B3-B8D8-4708-A72B-6DF90BCFBB0A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{BC9175DD-C948-42E7-9C49-155501553873}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{846AB94C-8731-4446-A7FF-821EF6C2D1E5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{998F44AE-DC22-488C-862A-4128AC122187}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MSFS2024\FlightSimulator2024.exe (Asobo Studio) [File not signed]
FirewallRules: [{842A7FAB-00F4-4548-810A-DF54D0E21226}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MSFS2024\FlightSimulator2024.exe (Asobo Studio) [File not signed]
FirewallRules: [TCP Query User{FC770D3D-8E16-4BD3-8656-B5E4C8CD0135}C:\program files\elevatex\elevatex.exe] => (Allow) C:\program files\elevatex\elevatex.exe (ELEVATEX Simulations LLC -> ELEVATEX Simulations LLC)
FirewallRules: [UDP Query User{473EA093-878C-411B-AE36-1B71A1F5543E}C:\program files\elevatex\elevatex.exe] => (Allow) C:\program files\elevatex\elevatex.exe (ELEVATEX Simulations LLC -> ELEVATEX Simulations LLC)
FirewallRules: [TCP Query User{3D5AB1F2-4403-43F8-96BC-A2A0C87E23C3}C:\program files\fenixsim a320\deps\fenixsystem.exe] => (Allow) C:\program files\fenixsim a320\deps\fenixsystem.exe (FenixSim Limited -> FenixSim Ltd.)
FirewallRules: [UDP Query User{6A83A302-E5FC-4CA9-AF5B-788C0CE29ADE}C:\program files\fenixsim a320\deps\fenixsystem.exe] => (Allow) C:\program files\fenixsim a320\deps\fenixsystem.exe (FenixSim Limited -> FenixSim Ltd.)
FirewallRules: [TCP Query User{C6BD2471-5E3E-4228-97E9-2F522608B183}C:\program files\fenixsim a320\deps\gqlgateway\fenix.gqlgateway.exe] => (Allow) C:\program files\fenixsim a320\deps\gqlgateway\fenix.gqlgateway.exe (FenixSim Limited -> FenixSim Ltd.)
FirewallRules: [UDP Query User{C5931EEE-F1AC-44B2-9563-74A5EBC79477}C:\program files\fenixsim a320\deps\gqlgateway\fenix.gqlgateway.exe] => (Allow) C:\program files\fenixsim a320\deps\gqlgateway\fenix.gqlgateway.exe (FenixSim Limited -> FenixSim Ltd.)
FirewallRules: [{3AB8C23F-82F3-497F-BA00-09E817ED582F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [{8BCF2965-2B31-476D-9C06-427B5E2C95A3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [TCP Query User{FD98AF9C-C2E3-4DBD-ACBA-DF3B58D1111B}C:\program files (x86)\heroes of the storm\versions\base96370\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base96370\heroesofthestorm_x64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment, Inc.)
FirewallRules: [UDP Query User{B7B8A31D-F5FF-4182-8601-5BD158BABC22}C:\program files (x86)\heroes of the storm\versions\base96370\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base96370\heroesofthestorm_x64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment, Inc.)
FirewallRules: [TCP Query User{B429F364-03BF-4F9D-AB4A-3FE52D9CABDB}C:\g-menu\g-menu.exe] => (Allow) C:\g-menu\g-menu.exe => No File
FirewallRules: [UDP Query User{45C5999B-592D-4466-9175-8EB5B447F8E1}C:\g-menu\g-menu.exe] => (Allow) C:\g-menu\g-menu.exe => No File
FirewallRules: [TCP Query User{7A2322F9-D1CD-4368-A2CA-75D227A34C51}C:\g-menu\resources\bin\g_menu.exe] => (Allow) C:\g-menu\resources\bin\g_menu.exe => No File
FirewallRules: [UDP Query User{EDE63ADA-E7DB-43D2-8FE7-C17E148B3164}C:\g-menu\resources\bin\g_menu.exe] => (Allow) C:\g-menu\resources\bin\g_menu.exe => No File
FirewallRules: [TCP Query User{91E24A6C-44B1-4FC9-8BA5-4D6EC8CC6CAC}C:\users\l0kim\downloads\anydesk.exe] => (Allow) C:\users\l0kim\downloads\anydesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [UDP Query User{A1A8637F-7436-4006-AA78-5D5E51A120AE}C:\users\l0kim\downloads\anydesk.exe] => (Allow) C:\users\l0kim\downloads\anydesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [TCP Query User{46164F3C-BD81-4555-BB2C-33F130C5D2B7}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => No File
FirewallRules: [UDP Query User{25757F72-C042-45FC-B725-D00401AF7143}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => No File
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{7D7F05F5-DB7C-46F2-852A-6627527642EB}C:\users\l0kim\appdata\local\discord\app-1.0.9242\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [UDP Query User{358532BD-51F0-4412-973E-72A07290AC6A}C:\users\l0kim\appdata\local\discord\app-1.0.9242\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [TCP Query User{5DA87814-1015-4F96-A957-841B03F4E36E}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{FA02C9E3-24E9-446E-A4F4-3F70D7B05977}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{8841BE6B-DA2E-4840-8A79-032EC957F5C8}C:\users\l0kim\appdata\local\discord\app-1.0.9243\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9243\discord.exe => No File
FirewallRules: [UDP Query User{48091A94-13F8-401E-9F30-24562E196309}C:\users\l0kim\appdata\local\discord\app-1.0.9243\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9243\discord.exe => No File
FirewallRules: [TCP Query User{E3DD3C8E-5B39-44A4-A505-6BB43DC86201}C:\users\l0kim\appdata\local\discord\app-1.0.9256\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9256\discord.exe => No File
FirewallRules: [UDP Query User{C8330836-C559-44D3-BFE9-13C3428D7224}C:\users\l0kim\appdata\local\discord\app-1.0.9256\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9256\discord.exe => No File
FirewallRules: [{50736021-CFC6-40F6-90A4-1CC388A6CBF1}] => (Allow) C:\Battlestate Games\BsgLauncher\BsgLauncher.exe (BATTLESTATE GAMES LIMITED -> Battlestate Games)
FirewallRules: [{4D0D27B0-29FF-431D-A5EE-24E16FC2DAFA}] => (Allow) C:\Battlestate Games\BsgLauncher\BsgLauncher.exe (BATTLESTATE GAMES LIMITED -> Battlestate Games)
FirewallRules: [{3FB4F817-0D14-4F03-9617-E3DC6E705B82}] => (Allow) C:\Battlestate Games\Escape from Tarkov\escapefromtarkov_data\plugins\x86_64\vuplexwebviewchromium\vuplex webview.vuplex (BATTLESTATE GAMES LIMITED -> Vuplex)
FirewallRules: [TCP Query User{931FA04F-5676-4F6F-BD4C-A1E78DEF1877}C:\users\l0kim\appdata\local\discord\app-1.0.9259\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9259\discord.exe => No File
FirewallRules: [UDP Query User{3E2405EA-F439-48B1-A30D-D5F003FCCB38}C:\users\l0kim\appdata\local\discord\app-1.0.9259\discord.exe] => (Block) C:\users\l0kim\appdata\local\discord\app-1.0.9259\discord.exe => No File
FirewallRules: [{576D9BF5-B163-4F6A-ADB7-BFFB9E70D18A}] => (Allow) C:\Program Files (x86)\Overwolf\0.310.1.1\OverwolfBrowser.exe => No File
FirewallRules: [{9CD8CEE9-F0EE-49A0-BCCF-04479A3F83FC}] => (Allow) C:\Program Files (x86)\Overwolf\0.310.1.1\OverwolfBrowser.exe => No File
FirewallRules: [{BA6D0E4E-810D-4281-ABE1-A8F611E959D4}] => (Block) C:\Program Files (x86)\Overwolf\0.310.1.1\OverwolfBrowser.exe => No File
FirewallRules: [{321F9DA0-959B-44E2-9107-E86DC8D38598}] => (Block) C:\Program Files (x86)\Overwolf\0.310.1.1\OverwolfBrowser.exe => No File
FirewallRules: [{EB9BED64-64C8-4D63-B409-5622C63CF3C3}] => (Allow) C:\Program Files (x86)\Overwolf\0.305.0.9\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{03A8547D-E523-43A0-9F4E-69F4EBFFEB7F}] => (Allow) C:\Program Files (x86)\Overwolf\0.305.0.9\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{D97D55FC-6655-493B-AA2F-736E416E6843}] => (Block) C:\Program Files (x86)\Overwolf\0.305.0.9\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{071AD8B8-DA4A-42C5-A614-8F5BE021C29C}] => (Block) C:\Program Files (x86)\Overwolf\0.305.0.9\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{24A18926-5C1B-40E7-BEEA-5C80537DA35B}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{46A3B135-C29F-4220-82A6-D6738D16FCC4}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
==================== Restore Points =========================
30-09-2026 14:53:09 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Generic Bluetooth Adapter
Description: Generic Bluetooth Adapter
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: GenericAdapter
Service: BTHUSB
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.
Name: Kořenový port sběrnice PCI Express
Description: Kořenový port sběrnice PCI Express
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní systémová zařízení)
Service: pci
Problem: : This device cannot find enough free resources that it can use. If you want to use this device, you will need to disable one of the other devices on this system. (Code12)
Resolution: Two devices have been assigned the same input/output (I/O) ports, the same interrupt, or the same Direct Memory Access channel (either by the BIOS, the operating system, or a combination of the two). This error message can also appear if the BIOS did not allocate enough resources to the device (for example, if a universal serial bus (USB) controller does not get an interrupt from the BIOS because of a corrupt Multiprocessor System (MPS) table).
You can use Device Manager to determine where the conflict is and disable the conflicting device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (10/02/2026 03:06:23 PM) (Source: Application Error) (EventID: 1000) (User: Window Manager)
Description: Název chybující aplikace: dwm.exe, verze: 10.0.26100.9549, časové razítko: 0x653fab24
Název chybujícího modulu: ntdll.dll, verze: 10.0.26100.9549, časové razítko: 0xb396c142
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000001181f5
ID chybujícího procesu: 0x734
Čas spuštění chybující aplikace: 0x1dd524f8ea3deb3
Cesta k chybující aplikaci: C:\WINDOWS\system32\dwm.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID sestavy: 2f248c71-0b7e-41b0-8421-d6c044d47c7e
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (09/08/2026 09:56:13 PM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-1RCI1EP)
Description: Název chybující aplikace: EscapeFromTarkov.exe, verze: 0.0.0.0, časové razítko: 0x00000000
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x00007ffcbcd49bef
ID chybujícího procesu: 0x4338
Čas spuštění chybující aplikace: 0x1dd3fcc1320ce11
Cesta k chybující aplikaci: C:\Battlestate Games\Escape from Tarkov\EscapeFromTarkov.exe
Cesta k chybujícímu modulu: unknown
ID sestavy: 39fde745-5202-4ffa-8bae-4c6846dc3112
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (09/01/2026 03:59:47 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generování kontextu aktivace pro C:\Users\L0kim\AppData\Local\Discord\app-1.0.9255\Discord.exe se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Users\L0kim\AppData\Local\Discord\app-1.0.9255\Discord.exe na řádku 0.
Neplatná syntaxe XML.
Error: (07/30/2026 10:57:07 AM) (Source: CertEnroll) (EventID: 87) (User: NT AUTHORITY)
Description: Registrace certifikátu SCEP pro Místní systém přes https://AMD-KeyId-3f3e4f1ac024f29b041ef ... s/Aik/scep se nepovedla:
PkiStatus(11): SCEPDispositionPendingChallenge
EnrollStatus(32): EnrollUnknown
Operace byla dokončena úspěšně. 0x0 (WIN32: 0)
SubmitDone
SubmitV2Attestation: Bad Request
{"Message":"V2 Protocol AIK certificate requests with P-256 ECC public keys are not supported. Public key algorithm: 1.2.840.10045.2.1, Key length: 256."}
HTTP/1.1 400 Bad Request
Date: Thu, 30 Jul 2026 08:57:06 GMT
Content-Length: 154
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 48ee6053-1779-4a76-9411-040b1d4bdb3a
Metoda: POST(1500ms)
Fáze: SubmitDone
Chybná žádost (400) 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)
Error: (07/30/2026 08:20:34 AM) (Source: CertEnroll) (EventID: 87) (User: NT AUTHORITY)
Description: Registrace certifikátu SCEP pro Místní systém přes https://AMD-KeyId-3f3e4f1ac024f29b041ef ... s/Aik/scep se nepovedla:
PkiStatus(11): SCEPDispositionPendingChallenge
EnrollStatus(32): EnrollUnknown
Operace byla dokončena úspěšně. 0x0 (WIN32: 0)
SubmitDone
SubmitV2Attestation: Bad Request
{"Message":"V2 Protocol AIK certificate requests with P-256 ECC public keys are not supported. Public key algorithm: 1.2.840.10045.2.1, Key length: 256."}
HTTP/1.1 400 Bad Request
Date: Thu, 30 Jul 2026 06:20:32 GMT
Content-Length: 154
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: b301be4b-ca09-4e5a-80d9-befae0b38449
Metoda: POST(1500ms)
Fáze: SubmitDone
Chybná žádost (400) 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)
Error: (07/26/2026 09:21:14 AM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-1RCI1EP)
Description: Název chybující aplikace: WidgetBoard.exe, verze: 526.17301.10.0, časové razítko: 0x6a4762c9
Název chybujícího modulu: WidgetBoardView.dll, verze: 526.17301.10.0, časové razítko: 0x6a4762b0
Kód výjimky: 0xc000001d
Posun chyby: 0x000000000023df3a
ID chybujícího procesu: 0x28d4
Čas spuštění chybující aplikace: 0x1dd1ccf57cd535a
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe
Cesta k chybujícímu modulu: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy\WidgetBoardView.dll
ID sestavy: 8f5346c4-e3ed-48d3-abd3-6b8a944180b7
Celý název chybujícího balíčku: MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy
ID chybující aplikace relativní vzhledem k balíčku: Global.WidgetBoard
Error: (07/26/2026 09:06:15 AM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-1RCI1EP)
Description: Název chybující aplikace: WidgetBoard.exe, verze: 526.17301.10.0, časové razítko: 0x6a4762c9
Název chybujícího modulu: WidgetBoardView.dll, verze: 526.17301.10.0, časové razítko: 0x6a4762b0
Kód výjimky: 0xc000001d
Posun chyby: 0x000000000023df3a
ID chybujícího procesu: 0x2490
Čas spuštění chybující aplikace: 0x1dd1ccd3f5bab16
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe
Cesta k chybujícímu modulu: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy\WidgetBoardView.dll
ID sestavy: 8d033a38-45c9-4b00-81e5-571fc521cd15
Celý název chybujícího balíčku: MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy
ID chybující aplikace relativní vzhledem k balíčku: Global.WidgetBoard
Error: (07/26/2026 08:51:15 AM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-1RCI1EP)
Description: Název chybující aplikace: WidgetBoard.exe, verze: 526.17301.10.0, časové razítko: 0x6a4762c9
Název chybujícího modulu: WidgetBoardView.dll, verze: 526.17301.10.0, časové razítko: 0x6a4762b0
Kód výjimky: 0xc000001d
Posun chyby: 0x000000000023df3a
ID chybujícího procesu: 0x1fcc
Čas spuštění chybující aplikace: 0x1dd1ccb26ea13ac
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe
Cesta k chybujícímu modulu: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy\WidgetBoardView.dll
ID sestavy: 9fc4962c-073c-4c5c-b04e-06b2086b27fe
Celý název chybujícího balíčku: MicrosoftWindows.Client.WebExperience_526.17301.40.0_x64__cw5n1h2txyewy
ID chybující aplikace relativní vzhledem k balíčku: Global.WidgetBoard
System errors:
=============
Error: (10/03/2026 10:10:35 AM) (Source: Microsoft-Windows-WER-SystemErrorReporting) (EventID: 1019) (User: NT AUTHORITY)
Description: BEDaisy.sys
Error: (10/03/2026 10:10:35 AM) (Source: Microsoft-Windows-WER-SystemErrorReporting) (EventID: 1001) (User: NT AUTHORITY)
Description: 0x0000007e (0xffffffffc0000005, 0xfffff803c5575991, 0xffff8605ad5263b8, 0xffff8605ad525bd0)C:\WINDOWS\Minidump\100326-23468-01.dmp7584e16e-7057-4cab-9339-f465c26e5c26
Error: (10/03/2026 10:10:32 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: Místní adaptér Bluetooth selhal. Důvod selhaní nebylo možno určit a adaptér nebude používán. Ovladač vysílače byl vyjmut z paměti.
Error: (10/03/2026 10:10:25 AM) (Source: volmgr) (EventID: 162) (User: )
Description: Soubor se stavem systému byl úspěšně vygenerován.
Error: (10/03/2026 10:10:36 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (10:02:59, 03.10.2026) bylo neočekávané.
Error: (10/03/2026 10:02:55 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: Místní adaptér Bluetooth selhal. Důvod selhaní nebylo možno určit a adaptér nebude používán. Ovladač vysílače byl vyjmut z paměti.
Error: (10/02/2026 11:13:22 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1RCI1EP)
Description: Server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} se v daném časovém limitu neregistroval u služby DCOM.
Error: (10/02/2026 09:06:10 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: Místní adaptér Bluetooth selhal. Důvod selhaní nebylo možno určit a adaptér nebude používán. Ovladač vysílače byl vyjmut z paměti.
Windows Defender:
================
TimeCreated : 30.09.2026 15:44:20
Message : Antivirová ochrana v programu Microsoft Defender ş¢αⁿ ĥąş вêėη śţóрφёđ ьέƒóяе ¢òmφŀéтīбñ.%η %τŜ¢аή ĬĐ:%ъ{
D150AEEB-E12F-44E2-BA95-A4CDFC7D9A18}%и %ťŚĉάñ Ťуρё:%ьAntimalwarový program%ñ %ŧЅçâл Ρãѓªмêţêѓŝ:%ъRychlé
prohledávání%ņ %тЏśèŗ:%ьNT AUTHORITY\SYSTEM%π %тŞŧôφ Ŗëąşòй:%ъҐРĈ ċōηʼnëстĭøи яúñðöŵй
CodeIntegrity:
===============
Date: 2026-10-03 10:10:44
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2026-09-30 14:51:37
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\UUS\amd64\WaaSMedicAgent.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. 1804 11/12/2025
Motherboard: ASUSTeK COMPUTER INC. ROG STRIX X870-F GAMING WIFI
Processor: AMD Ryzen 7 9800X3D 8-Core Processor
Percentage of memory in use: 15%
Total physical RAM: 65178.09 MB
Available physical RAM: 55159.26 MB
Total Virtual: 69274.09 MB
Available Virtual: 57482.79 MB
==================== Drives ================================
Disk 1 - Drive c: () (Fixed) (Total:1861.93 GB) (Free:1372.41 GB) (Model: WD Blue SN580 2TB) NTFS
Disk 0 - Drive d: (Nový svazek) (Fixed) (Total:931.51 GB) (Free:931.38 GB) (Model: Seagate FireCuda 520 SSD ZP1000GM30002) NTFS
Disk 1 - \\?\Volume{a4362ad7-9f60-4a10-b8cd-ffca4c24b64c}\ () (Fixed) (Total:890 MB) (Free:106.71 MB) NTFS
Disk 1 - \\?\Volume{eece0a5d-41ec-4990-9f64-5e5b0e5fdf05}\ () (Fixed) (Total:196 MB) (Free:161.34 MB) FAT32
==================== MBR & Partition Table ====================
============================================================
Disk: 0 (Protective MBR) (Size: 931.51 GB)
Partitions:
===========
Partition Style : GPT
Partition Count : 1
Disk ID : {649458FB-35D6-4E49-8C8F-740A2F80DC53}
Usable Offset : 0.02 MB
Usable Length : 931.51 GB
Max Partitions : 128
Partition 1
Type : Basic Data Partition
Size : 931.51 GB
Offset : 1 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {B2407E68-2AAB-4323-8A9E-F068193514BF}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
============================================================
Disk: 1 (Protective MBR) (Size: 1863.02 GB)
Partitions:
===========
Partition Style : GPT
Partition Count : 4
Disk ID : {E857CD75-BB1D-41A6-8AB7-1335A77E8716}
Usable Offset : 0.02 MB
Usable Length : 1863.02 GB
Max Partitions : 128
Partition 1
Type : EFI System Partition
Size : 200 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {EECE0A5D-41EC-4990-9F64-5E5B0E5FDF05}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 201 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {E3BFBF13-4A28-4532-A930-F6D088627B1A}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 1861.93 GB
Offset : 217 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {950B7577-A17F-4C27-8B3B-38D4CC5C6DD0}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 890 MB
Offset : 1906838 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {A4362AD7-9F60-4A10-B8CD-FFCA4C24B64C}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
============================================================
==================== End of Addition.txt =======================
