prosím o kontrolu
Odeslal: 23 Říj 2026 14:12
Dobrý den, mám problém s výkonem notebooku. i při starých hrách je problém s fps a pomalým načítáním. a při testu na Can you run it mi dost často vypíše že většina spec je v pořádku, ale je problém s grafikou
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-10-2026
Ran by alett (administrator) on ALETTE-NTB (Acer Nitro AN515-43) (23-10-2026 14:52:15)
Running from C:\Users\alett\Downloads\FRST64.exe
Loaded Profiles: alett
Platform: Microsoft Windows 11 Home Version 26H2 26300.9711 (X64) Language: Čeština (Česko)
Default browser: Brave
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <13>
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices -> ) C:\Program Files\AMD\CNext\CNext\gpuup.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices -> ) C:\Program Files\AMD\CNext\CNext\PresentMon-x64.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2639.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\155.0.4283.62\msedgewebview2.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\DefenderAiPlatformHost.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\DefenderSessionHelper.exe
(C:\Users\alett\AppData\Local\Discord\app-1.0.9265\Discord.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
(C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\dotnet\PlariumPlay.NetHost.exe ->) (Plarium Global Ltd. -> Plarium Global Ltd.) C:\Users\alett\AppData\Local\PlariumPlay\StandAloneApps\raid-shadow-legends\build\Raid.exe
(C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\PlariumPlay.exe ->) (Plarium Global Ltd. -> Plarium) C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\dotnet\PlariumPlay.NetHost.exe
(C:\Users\alett\AppData\Local\PlariumPlay\StandAloneApps\raid-shadow-legends\build\Raid.exe ->) (Plarium Global LTD -> ) C:\Users\alett\AppData\Local\PlariumPlay\StandAloneApps\raid-shadow-legends\build\Raid_Data\Plugins\x86_64\VuplexWebViewChromium\Vuplex WebView.vuplex
(C:\Users\alett\AppData\Local\PlariumPlay\StandAloneApps\raid-shadow-legends\build\Raid.exe ->) (Unity Technologies SF -> Unity Technologies) C:\Users\alett\AppData\Local\PlariumPlay\StandAloneApps\raid-shadow-legends\build\UnityCrashHandler64.exe
(cmd.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Discord Inc. -> Discord Inc.) C:\Users\alett\AppData\Local\Discord\app-1.0.9265\Discord.exe <6>
(discord-code-sign-windows-admin -> Discord Inc.) C:\Users\alett\AppData\Local\Discord\app-1.0.9265\modules\discord_utils-1\discord_utils\DiscordSystemHelper.exe <2>
(DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\atieclxx.exe
(explorer.exe ->) (FxSound, LLC -> FxSound LLC) C:\Program Files\FxSound LLC\FxSound\FxSound.exe
(explorer.exe ->) (Now.gg, INC -> now.gg, Inc.) C:\Users\alett\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Paint_11.2605.81.0_x64__8wekyb3d8bbwe\PaintApp\mspaint.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\155.0.4283.62\msedgewebview2.exe <10>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Now.gg, INC -> now.gg, Inc.) C:\Users\alett\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe <3>
(Plarium Global LTD -> ) C:\Users\alett\AppData\Local\PlariumPlay\StandAloneApps\raid-shadow-legends\build\Raid_Data\Plugins\x86_64\VuplexWebViewChromium\Vuplex WebView.vuplex <3>
(Plarium Global Ltd. -> Plarium Global Ltd.) C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\PlariumPlay.exe <6>
(services.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_47725f5567f931ee\amdfendrsr.exe
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\atiesrxx.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\NisSrv.exe
(services.exe ->) (Plarium Global Ltd. -> Plarium) C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\dotnet\PlariumPlayClientService.exe
(services.exe ->) (Qualcomm Atheros, Inc. -> ) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(sihost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2639.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(svchost.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1081648 2020-06-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Run: [Microsoft.Lists] => C:\Users\alett\AppData\Local\Microsoft\OneDrive\26.183.0920.0005\OneDrive.Sync.Service.exe [969576 2026-10-20] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Run: [Discord] => C:\Users\alett\AppData\Local\Discord\Update.exe [1596344 2026-04-13] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5774488 2026-08-03] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Run: [PlariumPlay] => C:\Users\alett\AppData\Local\PlariumPlay\PlariumPlay.exe [529272 2026-10-23] (Plarium Global Ltd. -> Plarium Global Ltd.)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Run: [AMDNoiseSuppression] => "C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe" (No File)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Run: [electron.app.BlueStacks Services] => C:\Users\alett\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe [162219656 2024-05-08] (Now.gg, INC -> now.gg, Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Installer\chrmstp.exe [7639120 2026-10-22] (Brave Software, Inc. -> Brave Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FxSound.lnk [2026-09-04]
ShortcutTarget: FxSound.lnk -> C:\Program Files\FxSound LLC\FxSound\FxSound.exe (FxSound, LLC -> FxSound LLC)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {F5236C82-1A01-4DB5-B76B-DD4D34E6089D} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030920 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {CB3E01E1-E472-4B2C-96DE-A9274699573E} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [184080 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {B98AF33B-5B6F-49D2-AC31-7BC2D962A124} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [303024 2026-08-11] (Now.gg, INC -> BlueStack Systems, Inc.)
Task: {E7B40ED8-1805-489A-9798-44FD8115DD83} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{8C5BD45D-2FED-4AE0-BC8F-98D5D4FC4F12} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-19] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {9D9A70F5-D16A-4A08-B7ED-E1901D6E1FC4} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{EE715BFA-ECEE-4C65-8814-B7176FF1791A} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-19] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {6ECEF33B-E823-45B7-9C7B-7B2D79011D60} - System32\Tasks\GBT Task => "C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\Pub\smgbgbt.exe" -> C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\Pub\\/smgb
Task: {13A6FA81-3502-4526-8D07-C00088B92142} - System32\Tasks\Microsoft\Windows\NetFramework\Microsoft .NET Framework => C:\Windows\Microsoft.NET\Framework\v3.5\mscorsvw.exe [7885824 2026-05-18] (Microsoft Corporation) [File not signed] <==== ATTENTION
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {9254F0D7-196C-4E58-8589-A49ACA044EDC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B1111B9F-7D80-4B68-B0E8-DB4067F4E030} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {39C797A9-8346-4066-9583-1A74B23F7912} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7CFC53DC-0E1B-4B4A-BE73-54567A59BDD3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BC05F513-C6C8-494D-8D00-751DFA063193} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030920 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {28D676F1-0C00-4023-8F42-70EA28EC00C0} - System32\Tasks\PubPlatform Scheduler => "C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\Pub\iTopPubPlatform.exe" -> C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\Pub\\/SMGB
Task: {2A102EE4-83E9-44D5-9963-F9717075BF7C} - System32\Tasks\SoftLanding\S-1-5-21-4111807221-2010952352-404185002-1001\SoftLandingRefreshForExpirationTask-{e3b30893-490e-4b0c-b29f-59e1924ed2d1} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
Task: {5D7956EA-BC72-45AD-9192-8C61AE2393E2} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60680 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {570ADFC4-864C-4900-8435-2BCB9E201FE2} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [323848 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\..\Interfaces\{073e548a-d5f3-4432-b282-7516cb283739}: [DhcpNameServer] 100.100.100.100 100.100.100.100
Tcpip\..\Interfaces\{30cb9fdb-d2df-4f8b-8c06-96006d475432}\4416E6E69713: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{30cb9fdb-d2df-4f8b-8c06-96006d475432}\B4572616: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
Edge:
=======
Edge Profile: C:\Users\alett\AppData\Local\Microsoft\Edge\User Data\Default [2026-04-20]
Edge Extension: (Dokumenty Google offline) - C:\Users\alett\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-19]
Edge Extension: (Edge relevant text changes) - C:\Users\alett\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-04-19]
Brave:
=======
BRA Profile: C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2026-10-23]
BRA DefaultSearchKeyword: Default -> :g
BRA Extension: (Brave Ad Block Updater (Brave First Party Adblock Filters (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2026-10-18]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2026-10-21]
BRA Extension: (Brave NTP background images) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2026-09-22]
BRA Extension: (Brave Ad Block Updater (Mobile app promo blocker (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2026-10-16]
BRA Extension: (Brave Ad Block Updater (Cookie notice blocker (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2026-10-23]
BRA Extension: (Query Filter) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\cemdlagocoimleflkfkjoihojfainiho [2026-10-23]
BRA Extension: (Brave Ad Block Updater (Allow X/Twitter Embeds (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\dkpggglmbjhgjhachikgmohmecomjndo [2026-07-31]
BRA Extension: (Brave NTP sponsored images) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2026-10-23]
BRA Extension: (Brave WebMCP Tool Scripts) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\eingdhelnaolbpcdkgddekhifcjfkalf [2026-09-12]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2026-09-02]
BRA Extension: (Brave Ads Resources) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\iejekkikpddbbockoldagmfcdbffomfc [2026-06-29]
BRA Extension: (Brave Ad Block Updater (Brave Default Adblock Filters (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2026-10-23]
BRA Extension: (Brave Ad Block Updater (Allow Facebook Embeds (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\jmfhneobcdckobmonkfjkbknnjjnegoh [2026-07-31]
BRA Extension: (Brave Ad Block Updater (Brave Default Privacy Filters (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf [2026-10-23]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2026-09-18]
BRA Extension: (Brave User Agent) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe [2026-10-23]
BRA Extension: (Brave Ad Block Updater (Czech and Slovak website ad blocker (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\oegebjahecghlckbhkmojgnpcgdeajdi [2026-09-14]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-19] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\elevation_service.exe [5136976 2026-10-21] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-19] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 DiscordSystemHelper; C:\Program Files\Common Files\Discord\Discord\DiscordSystemHelper.exe [2247552 2026-09-03] (discord-code-sign-windows-admin -> Discord Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpDefenderCoreService.exe [2398680 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 Plarium Play Client Service; C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\dotnet\PlariumPlayClientService.exe [212344 2026-10-23] (Plarium Global Ltd. -> Plarium)
R2 QcomWlanSrv; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [189768 2022-09-08] (Qualcomm Atheros, Inc. -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\NisSrv.exe [5555528 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe [378168 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AcerAirplaneModeController; C:\WINDOWS\System32\DriverStore\FileRepository\acerairplanemodecontroller.inf_amd64_36869d4d52526b5b\AcerAirplaneModeController.sys [36200 2024-06-03] (Acer Incorporated -> Acer Incorporated)
R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_47725f5567f931ee\amdfendrmgr.sys [37232 2026-03-31] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriverV20; \??\C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [48328 2026-04-23] (Advanced Micro Devices Inc. -> )
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_960126269e89c62e\amdsafd.sys [114048 2025-09-15] (Advanced Micro Devices -> Advanced Micro Devices)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\amdkmdag.sys [106666512 2026-05-20] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [62856 2025-10-15] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R2 BlueStacksDrv_nxt; \??\C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [436360 2026-08-11] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [114688 2026-04-13] (Microsoft Corporation) [File not signed]
S3 Ccx01000; C:\WINDOWS\System32\drivers\Ccx01000.sys [692224 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
R3 FXVAD; C:\WINDOWS\system32\drivers\fxvad.sys [326656 2025-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 hidgamepad; C:\WINDOWS\System32\DriverStore\FileRepository\hidgamepad.inf_amd64_66e5eb14670e10ae\hidgamepad.sys [73728 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
S3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys [539648 2024-03-28] (Microsoft Windows -> Realtek)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-10-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [669712 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [138264 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2026-06-29] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 cpuz150; \??\C:\WINDOWS\temp\cpuz150\cpuz150_x64.sys (No File) <==== ATTENTION
S3 denuvo_denuvowo; \??\C:\Games\EA SPORTS FC 26\driver_amd\SimpleSvm.sys (No File)
S0 WinSetupMon; system32\DRIVERS\WinSetupMon.sys (No File)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-10-23 14:52 - 2026-10-23 14:53 - 000022711 _____ C:\Users\alett\Downloads\FRST.txt
2026-10-23 14:52 - 2026-10-23 14:52 - 000000000 ____D C:\FRST
2026-10-23 14:50 - 2026-10-23 14:51 - 002457088 _____ (Farbar) C:\Users\alett\Downloads\FRST64.exe
2026-10-21 16:16 - 2026-10-21 16:16 - 000678362 _____ C:\WINDOWS\system32\perfh005.dat
2026-10-21 16:16 - 2026-10-21 16:16 - 000145178 _____ C:\WINDOWS\system32\perfc005.dat
2026-10-21 05:35 - 2026-10-21 05:35 - 000510102 _____ C:\Users\alett\Downloads\warperia_Easy-Frames_2025-12-12_15-07-44.zip
2026-10-21 05:02 - 2026-10-21 05:02 - 000000608 _____ C:\Users\alett\Downloads\TinyTooltip.zip
2026-10-20 01:39 - 2026-10-20 01:39 - 002986249 _____ C:\Users\alett\Downloads\VID_20261020_013805.mp4
2026-10-19 15:17 - 2026-10-19 15:17 - 000001309 _____ C:\Users\Public\Desktop\Rapture VENOM V2.lnk
2026-10-19 15:17 - 2026-10-19 15:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rapture
2026-10-19 15:17 - 2026-10-19 15:17 - 000000000 ____D C:\Program Files (x86)\Rapture
2026-10-19 15:15 - 2026-10-19 15:15 - 003078334 _____ C:\Users\alett\Downloads\Rapture VENOM V2.zip
2026-10-19 00:58 - 2026-10-23 03:33 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-10-17 17:59 - 2026-10-17 18:27 - 000000000 ____D C:\Users\alett\Desktop\REDMI
2026-10-16 19:47 - 2026-10-16 19:47 - 000019675 _____ C:\Users\alett\Downloads\[SkT]Jackass__Nejlepší_a_poslední___Jackass__Best_and_Last_(2026)(CZ)[1080p][WEB-DL]__=_CSFD_52%.torrent
2026-10-16 19:47 - 2026-10-16 19:47 - 000019282 _____ C:\Users\alett\Downloads\[SkT]Šampión_(2026)[WEB-DL][1080p]_=_CSFD_63%.torrent
2026-10-16 19:46 - 2026-10-16 19:47 - 000004528 _____ C:\Users\alett\Downloads\[SkT]Vzpomínky_na_něj___Reminders_of_Him_(2026)(CZ)[720p][BDRip]_=_CSFD_67%.torrent
2026-10-16 19:46 - 2026-10-16 19:46 - 000023181 _____ C:\Users\alett\Downloads\[SkT]Unabomber_(2026)(CZ_EN)[1080p]_=_CSFD_50%.torrent
2026-10-16 19:45 - 2026-10-16 19:45 - 000021009 _____ C:\Users\alett\Downloads\[SkT]Mistrovský_plán___Masterplan_(2026)(CZ_EN)[1080p]_=_CSFD_50%.torrent
2026-10-16 19:45 - 2026-10-16 19:45 - 000004262 _____ C:\Users\alett\Downloads\[SkT]Bezohlední___Reckless_(2026)(CZ)[1080p][WEB-DL]_=_CSFD_54%.torrent
2026-10-16 19:44 - 2026-10-16 19:44 - 000065899 _____ C:\Users\alett\Downloads\[SkT]Spider-Man__Zbrusu_nový_den___Spider-Man__Brand_New_Day_(2026)[1080p][HEVC]_=_CSFD_82%.torrent
2026-10-16 19:33 - 2026-10-16 19:33 - 000014989 _____ C:\Users\alett\Downloads\[SkT]Protivníci_pod_ochranou___Drawn_Together_(2026)[WEB-DL][1080p][HEVC]_=_CSFD_50%.torrent
2026-10-16 19:31 - 2026-10-16 19:31 - 000011454 _____ C:\Users\alett\Downloads\[SkT]Zvířata___Animals_(2026)(CZ_EN)[1080p][WebRip][HEVC]_=_CSFD_52% (1).torrent
2026-10-16 05:00 - 2026-10-16 13:53 - 000000022 _____ C:\Users\alett\Downloads\AngryKeystones-v0.13.0.zip
2026-10-14 17:16 - 2026-10-14 17:16 - 000011454 _____ C:\Users\alett\Downloads\[SkT]Zvířata___Animals_(2026)(CZ_EN)[1080p][WebRip][HEVC]_=_CSFD_52%.torrent
2026-10-14 02:49 - 2026-10-14 02:49 - 000004985 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-10-14 02:47 - 2026-10-14 02:47 - 000091797 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-10-14 02:47 - 2026-10-14 02:47 - 000091797 _____ C:\WINDOWS\system32\ctac.json
2026-10-14 02:47 - 2026-10-14 02:47 - 000039736 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-10-14 02:47 - 2026-10-14 02:47 - 000039736 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-10-13 19:45 - 2026-10-13 19:45 - 000020215 _____ C:\Users\alett\Downloads\[SkT]Stari_neni_pro_sraby_(2022)(CZ)[WEB-DL][1080p]_=_CSFD_34%.torrent
2026-10-13 00:03 - 2026-10-13 00:04 - 000526319 _____ C:\Users\alett\Downloads\voice-message.ogg
2026-10-03 23:19 - 2026-10-15 16:52 - 000000000 ____D C:\ProgramData\ProductData
2026-10-03 23:19 - 2026-10-03 23:24 - 000000000 ____D C:\Users\alett\AppData\Roaming\instinfo
2026-10-03 23:18 - 2026-10-03 23:19 - 000000000 ____D C:\Users\alett\AppData\Roaming\IObit
2026-10-03 23:18 - 2026-10-03 23:19 - 000000000 ____D C:\Users\alett\AppData\LocalLow\IObit
2026-10-03 23:18 - 2026-10-03 23:18 - 000000000 ____D C:\ProgramData\{E0224FF9-7AE3-4F9E-991A-2F004F7E3952}
2026-09-24 22:46 - 2026-09-25 12:41 - 000000000 ____D C:\Users\alett\Desktop\Arty
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-10-23 14:53 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-10-23 14:27 - 2026-04-19 21:54 - 000000000 ____D C:\Users\alett\AppData\Local\Discord
2026-10-23 13:29 - 2026-04-19 21:43 - 000000000 ____D C:\Users\alett\AppData\Local\D3DSCache
2026-10-23 13:28 - 2026-04-19 21:59 - 000000000 ____D C:\Users\alett\AppData\Roaming\PlariumPlay
2026-10-23 13:27 - 2026-08-15 02:28 - 000000000 ____D C:\Users\alett\AppData\Roaming\bluestacks-services
2026-10-23 13:27 - 2026-05-07 12:41 - 000000000 ____D C:\Users\alett\AppData\Local\PlariumPlay
2026-10-23 13:27 - 2026-04-19 21:54 - 000000000 ____D C:\Users\alett\AppData\Roaming\discord
2026-10-23 13:27 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-10-23 13:26 - 2026-07-22 15:43 - 000003108 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher
2026-10-23 02:43 - 2026-09-13 22:15 - 000000000 ____D C:\Users\alett\AppData\Roaming\launcher
2026-10-23 02:43 - 2026-04-28 19:20 - 000000000 ____D C:\Users\alett\AppData\Roaming\vlc
2026-10-23 02:39 - 2026-09-13 22:15 - 000000000 ____D C:\Users\alett\AppData\Roaming\TauriLauncher
2026-10-23 02:39 - 2026-04-19 23:18 - 000000000 ____D C:\Users\alett\AppData\Roaming\FxSound
2026-10-23 01:51 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-10-22 21:48 - 2026-07-31 00:17 - 000001309 _____ C:\Users\alett\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-10-22 21:48 - 2026-04-19 21:55 - 000002248 _____ C:\Users\alett\Desktop\Discord.lnk
2026-10-22 15:49 - 2026-04-19 21:58 - 000000000 ____D C:\ProgramData\Package Cache
2026-10-22 15:48 - 2026-04-19 21:49 - 000002400 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2026-10-22 15:48 - 2026-04-19 21:49 - 000002353 _____ C:\Users\Public\Desktop\Brave.lnk
2026-10-21 16:16 - 2026-04-19 21:39 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-10-21 16:16 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-10-21 16:09 - 2026-04-19 21:45 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2026-10-21 16:09 - 2026-04-19 21:36 - 000008468 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-10-21 16:09 - 2026-04-19 21:29 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-10-21 16:09 - 2026-04-17 16:29 - 000012288 ___SH C:\DumpStack.log.tmp
2026-10-21 16:09 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-10-21 14:34 - 2026-05-14 00:38 - 000000000 ____D C:\Users\alett\AppData\Local\AMD_Common
2026-10-20 14:29 - 2026-07-06 19:36 - 000002377 _____ C:\Users\alett\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-10-20 14:29 - 2026-04-19 21:46 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4111807221-2010952352-404185002-1001
2026-10-20 14:29 - 2026-04-19 21:46 - 000003570 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-4111807221-2010952352-404185002-1001
2026-10-20 14:29 - 2026-04-19 21:46 - 000003368 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4111807221-2010952352-404185002-1001
2026-10-20 12:44 - 2026-04-19 21:29 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{A48B8D29-A792-4EA5-848B-43506B685D6C}
2026-10-20 12:44 - 2026-04-19 21:29 - 000003644 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{6F4ED474-5B60-450E-881F-2B8E36EE51D6}
2026-10-19 19:58 - 2026-04-20 00:27 - 000000000 ____D C:\Users\alett\Desktop\Alettík
2026-10-19 00:56 - 2026-04-19 21:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-10-17 22:43 - 2026-04-19 21:30 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-10-17 04:20 - 2026-04-19 23:31 - 000000000 ____D C:\Users\alett\AppData\Roaming\utorrent
2026-10-16 19:57 - 2026-04-20 00:34 - 000000000 ____D C:\Users\alett\AppData\Local\BitTorrentHelper
2026-10-15 13:04 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-10-15 04:34 - 2026-04-19 21:29 - 000324752 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-10-15 04:33 - 2026-04-13 09:55 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-10-15 04:33 - 2026-04-13 09:55 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-10-15 04:33 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-15 04:33 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-10-15 04:33 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-10-14 21:28 - 2026-04-20 15:09 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-14 21:25 - 2026-04-20 15:09 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-14 15:07 - 2026-04-19 21:29 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-10-14 02:45 - 2026-04-19 21:31 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-10-12 01:27 - 2026-04-19 23:19 - 000000000 ____D C:\Users\alett\AppData\Local\Comms
2026-10-12 01:21 - 2026-04-19 21:46 - 000000000 ____D C:\Users\alett\AppData\Local\PlaceholderTileLogoFolder
2026-10-12 01:21 - 2026-04-19 21:43 - 000000000 ____D C:\Users\alett\AppData\Local\Packages
2026-10-12 01:21 - 2026-04-19 21:35 - 000000000 ____D C:\ProgramData\Packages
2026-10-12 01:21 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-10-10 01:24 - 2026-08-17 19:03 - 000000000 ____D C:\Users\alett\AppData\Local\CrashDumps
2026-10-03 23:18 - 2026-05-14 04:15 - 000000000 ____D C:\ProgramData\IObit
2026-09-25 12:42 - 2026-08-15 02:28 - 000000000 ____D C:\ProgramData\BlueStacks_nxt
==================== Files in the root of some directories ========
2026-04-19 21:57 - 2026-05-07 12:42 - 000107492 _____ () C:\Users\alett\AppData\Local\PlariumPlay.log
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-10-2026
Ran by alett (23-10-2026 14:56:33)
Running from C:\Users\alett\Downloads
Microsoft Windows 11 Home Version 26H2 26300.9711 (X64) (2026-04-19 19:35:10)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-4111807221-2010952352-404185002-500 - Administrators - Disabled)
alett (S-1-5-21-4111807221-2010952352-404185002-1001 - Administrators - Enabled) [MS Account] => C:\Users\alett
DefaultAccount (S-1-5-21-4111807221-2010952352-404185002-503 - Limited - Disabled)
Guest (S-1-5-21-4111807221-2010952352-404185002-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-4111807221-2010952352-404185002-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\uTorrent) (Version: 3.6.0.47390 - BitTorrent Limited)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 26.5.2 - Advanced Micro Devices, Inc.)
BlueStacks (HKLM\...\BlueStacks_nxt) (Version: 5.22.256.1003 - now.gg, Inc.)
BlueStacks Services (HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\BlueStacksServices) (Version: 3.0.9 - now.gg, Inc.)
Branding64 (HKLM\...\{492AEFBE-1B81-4C20-A111-E6974BB98EC5}) (Version: 1.00.0009 - Advanced Micro Devices, Inc.) Hidden
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 156.1.98.60 - Autoři prohlížeče Brave)
Disciples II (HKLM-x32\...\{7028B58E-3D40-4EA8-B221-4EC364D433DD}_is1) (Version: 2.02/3.01 - Strategy First)
Discord (HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Discord) (Version: 1.0.9265 - Discord Inc.)
FxSound (HKLM\...\{88B23212-049A-4656-B978-8D1C5469B2D9}) (Version: 1.2.13.0 - FxSound LLC)
GTA IV: The Complete Edition (HKLM-x32\...\GTA IV: The Complete Edition_is1) (Version: - )
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.2.3.34 - PandoraTV)
Microsoft .NET Host - 10.0.6 (x64) (HKLM\...\{E1E2ACB5-F1FA-4217-B028-3F864353AA4E}) (Version: 80.24.50533 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.19 (x64) (HKLM\...\{B84443A1-BE1B-4C5E-B834-E12133604B12}) (Version: 64.76.37566 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 10.0.6 (x64) (HKLM\...\{6FE50292-47CC-4916-B5A1-A3070C71EB17}) (Version: 80.24.50533 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.19 (x64) (HKLM\...\{69A17DA9-300A-49B9-97F1-1EB7424570DE}) (Version: 64.76.37566 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 10.0.6 (x64) (HKLM\...\{EBF50DE0-6BA2-4020-B459-853CCA2C6266}) (Version: 80.24.50533 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.19 (x64) (HKLM\...\{B9F7A454-0CCD-410C-A3E0-D1AAC300F150}) (Version: 64.76.37566 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 155.0.4283.62 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 155.0.4283.62 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\OneDriveSetup.exe) (Version: 26.183.0920.0005 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.50.35719 (HKLM\...\{AECD4ED0-8A3B-41E9-92D1-6BEE0374CCAF}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.50.35719 (HKLM\...\{61B44572-8722-4DAF-8ACF-8E742D30BCC5}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.50.35719 (HKLM-x32\...\{773AD50D-AAE6-4BA1-AD01-B5A38874C840}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.50.35719 (HKLM-x32\...\{5A0DFA55-3851-45BC-8B20-95EA4BF5812D}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719 (HKLM-x32\...\{91ee571b-0e8a-4c65-9eaf-2e2f5fc60c00}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.50.35719 (HKLM-x32\...\{0e4ccf1b-d073-4cfe-8a24-e86185719b56}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Microsoft Windows Desktop Runtime - 10.0.6 (x64) (HKLM\...\{32BDDD2F-347E-41D8-AEB5-0809B7EC8598}) (Version: 80.24.50533 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.19 (x64) (HKLM\...\{A6EA542C-884C-4FE7-89E4-8C28E14B601C}) (Version: 64.76.37602 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.19 (x64) (HKLM-x32\...\{6b2575e2-0248-44c3-93f3-2eba040331ed}) (Version: 8.0.19.35118 - Microsoft Corporation)
Microsoft Windows Desktop Runtime 10.0.6 (x64) (HKLM-x32\...\{A4FB84EE-B9EF-4F5E-B39D-654C02FF7129}) (Version: 10.0.6.50000 - Microsoft Corporation)
Plarium Play (HKLM-x32\...\{5a1473d1-96a2-44b0-b2c6-4e2a8b6f8a1d}) (Version: 10.18.0 - Plarium)
PlariumPlay (HKLM-x32\...\{8D9E43D1-E66B-4751-8297-386C2F2BE38D}) (Version: 10.18.0 - Plarium) Hidden
Revo Uninstaller 2.6.8 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.6.8 - VS Revo Group, Ltd.)
RyzenMasterSDK (HKLM\...\{A28E667B-5AC6-4279-9E67-FD2C8D2C89AB}) (Version: 1.2.3.5 - Advanced Micro Devices, Inc.) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Tauri Launcher 3.3.1 (HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\9740d7d1-b643-5705-bab7-aa4199eaf30c) (Version: 3.3.1 - Tauri)
VENOM V2 (HKLM-x32\...\{97C5CCD0-32DD-4335-B678-832E57135B3A}_is1) (Version: 1.0 - VENOM V2)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.23 - VideoLAN)
WinRAR 7.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.20.0 - win.rar GmbH)
Packages:
=========
AMD Radeon Software -> C:\Program Files\AMD\CNext\CNext [2026-07-22] (Advanced Micro Devices Inc.)
APK 安装程序 -> C:\Program Files\WindowsApps\18184wherewhere.AndroidAppInstaller_0.1.28.0_x64__4v4sx105x6y4r [2026-08-15] (wherewhere)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2026-04-19] (Realtek Semiconductor Corp)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2639.100.0_x64__cv1g1gvanyjgm [2026-10-11] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.5.1.0_x64__8wekyb3d8bbwe [2026-10-11] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{29F23486-1C3D-4FBB-B5B7-B7FABF0BD943}\localserver32 -> C:\Users\alett\AppData\Local\Discord\app-1.0.9265\Discord.exe (Discord Inc. -> Discord Inc.)
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000}\localserver32 -> "C:\Program Files\Proton\VPN\v4.4.1\ProtonVPN.Client.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{5C4D8D77-5B87-40CA-884E-F56858227E5C}\localserver32 -> C:\Users\alett\AppData\Local\Programs\TeamSpeak\notification_helper.exe => No File
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{5d50ae61-fbb1-1c92-b915-a1774956b2c3}\localserver32 -> "C:\Users\alett\AppData\Local\PlariumPlay\10.15.5-0.0.0\dotnet\PlariumPlay.NetHost.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{61ca23c0-2e98-0d01-4fe2-019cca56a250}\localserver32 -> "C:\Users\alett\AppData\Local\PlariumPlay\10.17.0-0.0.0\dotnet\PlariumPlay.NetHost.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{765172aa-8316-54f7-6c00-37d058f9d1f9}\localserver32 -> "C:\Users\alett\AppData\Local\PlariumPlay\10.16.0-0.0.0\dotnet\PlariumPlay.NetHost.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{9eca7621-dc0c-aa14-0623-ff585e54fb0d}\localserver32 -> C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\dotnet\PlariumPlay.NetHost.exe (Plarium Global Ltd. -> Plarium)
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{a9b0c1c3-f1ed-b58a-6da6-50867ee71fda}\localserver32 -> "C:\Users\alett\AppData\Local\PlariumPlay\10.15.0-0.0.0\dotnet\PlariumPlay.NetHost.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{ab85aff0-357e-8028-e0f1-4e31bff0f091}\localserver32 -> C:\Users\alett\AppData\Local\PlariumPlay\10.17.0-0.0.1\dotnet\PlariumPlay.NetHost.exe (Plarium Global Ltd. -> Plarium)
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{b2fd8eec-b71c-81ec-2781-a46e6bd52088}\localserver32 -> "C:\Users\alett\AppData\Local\PlariumPlay\10.14.0-0.0.0\dotnet\PlariumPlay.NetHost.exe" -ToastActivated => No File
ContextMenuHandlers1: [SmartGameBoosterMenu] -> {96C86AD1-055D-457D-9C00-0D4A91ECF1B4} => C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\MenuExt64.dll -> No File
ContextMenuHandlers3: [SmartGameBoosterMenu] -> {96C86AD1-055D-457D-9C00-0D4A91ECF1B4} => C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\MenuExt64.dll -> No File
ContextMenuHandlers4: [SmartGameBoosterMenu] -> {96C86AD1-055D-457D-9C00-0D4A91ECF1B4} => C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\MenuExt64.dll -> No File
ContextMenuHandlers6: [SmartGameBoosterMenu] -> {96C86AD1-055D-457D-9C00-0D4A91ECF1B4} => C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\MenuExt64.dll -> No File
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2026-10-23 13:27 - 2026-10-23 13:27 - 000110080 _____ () [File not signed] \\?\C:\Users\alett\AppData\Local\Temp\e181f064-7bbe-4e94-8894-fd6ff8542580.tmp.node
2026-10-23 13:27 - 2026-10-23 13:27 - 002338304 _____ () [File not signed] \\?\C:\Users\alett\AppData\Local\Temp\f50c72fa-e637-4c11-bb87-9ac08ea2972f.tmp.node
2026-08-15 02:28 - 2024-05-08 10:18 - 002862080 _____ () [File not signed] C:\Users\alett\AppData\Local\Programs\bluestacks-services\ffmpeg.dll
2026-08-15 02:28 - 2024-05-08 10:18 - 000479232 _____ () [File not signed] C:\Users\alett\AppData\Local\Programs\bluestacks-services\libegl.dll
2026-08-15 02:28 - 2024-05-08 10:18 - 007513600 _____ () [File not signed] C:\Users\alett\AppData\Local\Programs\bluestacks-services\libglesv2.dll
2026-08-15 02:28 - 2024-05-08 10:18 - 005209088 _____ () [File not signed] C:\Users\alett\AppData\Local\Programs\bluestacks-services\vk_swiftshader.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000035840 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qgif.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000044032 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qicns.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000033792 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qico.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000564736 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qjpeg.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000029696 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qpdf.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000026624 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qsvg.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000026112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qtga.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000024064 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwbmp.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000540672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwebp.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000890368 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\platforms\qwindows.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 001964544 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\sqldrivers\qsqlite.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000210432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\styles\qmodernwindowsstyle.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000299520 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\Qt5Compat\GraphicalEffects\private\qtgraphicaleffectsprivateplugin.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000556032 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\Qt5Compat\GraphicalEffects\qtgraphicaleffectsplugin.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000020480 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtMultimedia\quickmultimediaplugin.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Basic\qtquickcontrols2basicstyleplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Fusion\impl\qtquickcontrols2fusionstyleimplplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Fusion\qtquickcontrols2fusionstyleplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000028160 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\qtquickcontrols2plugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Windows\impl\qtquickcontrols2windowsstyleimplplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000468992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Windows\qtquickcontrols2windowsstyleplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Dialogs\qtquickdialogsplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Effects\effectsplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Layouts\qquicklayoutsplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000767488 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\NativeStyle\qtquickcontrols2nativestyleplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Templates\qtquicktemplates2plugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Window\quickwindowplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000022016 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtWebEngine\qtwebenginequickplugin.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 006071296 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Core.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 008933376 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Gui.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000972288 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Multimedia.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000250368 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6MultimediaQuick.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 001725952 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Network.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 001964544 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6OpenGL.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 005337600 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Pdf.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000500224 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Positioning.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 005204992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Qml.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000137728 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QmlMeta.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000721920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QmlModels.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000062976 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QmlWorkerScript.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 006282752 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Quick.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000084992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 001313280 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2Basic.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 001131008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2Fusion.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000195584 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2FusionStyleImpl.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000276480 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2Impl.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000058368 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2WindowsStyleImpl.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000142336 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickDialogs2.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 001992704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickDialogs2QuickImpl.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000035328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickDialogs2Utils.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000389120 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickEffects.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000192512 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickLayouts.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 001864192 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickTemplates2.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 004028416 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6ShaderTools.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000303616 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Sql.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000513024 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Svg.dll
2025-06-17 04:46 - 2025-06-17 04:46 - 154372608 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6WebEngineCore.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000580096 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6WebEngineQuick.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000228352 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6WebChannel.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000050176 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6WebChannelQuick.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 006447616 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Widgets.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000141824 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Xml.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2024-04-01 09:26 - 2024-04-01 09:24 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 100.100.100.100
Windows Firewall is enabled.
Network Binding:
=============
Wi-Fi: Qualcomm Atheros QCA61x4A Wireless Network Adapter -> Qcamain10x64.sys
Ethernet: Realtek Gaming GbE Family Controller -> rt640x64.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\alett\Downloads\Dark-Souls-III-PS4-Wallpapers-21.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\StartupApproved\Run: => "PlariumPlay"
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\StartupApproved\Run: => "Steam"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{7268C6EB-F1BE-4B39-8C90-F613340F6854}] => (Allow) C:\Users\alett\AppData\Roaming\uTorrent\uTorrent.exe (RainCo HK Limited -> BitTorrent Limited)
FirewallRules: [{FDC5F163-ED0F-4DB9-A5B2-32C1550E38A6}] => (Allow) C:\Users\alett\AppData\Roaming\uTorrent\uTorrent.exe (RainCo HK Limited -> BitTorrent Limited)
FirewallRules: [{B3A13ED1-AAD5-4C73-ACF6-C94530F0887C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{C1A294A2-7062-42C2-BB90-9BB1CEE8FC11}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{7463A2C5-83BC-435E-9F99-23B02D8996A2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{9FEED56E-B0F1-45C6-9095-4F7CF259C617}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{F8300E12-3014-4A82-9D73-9126A2A7F741}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Definitive Edition\Stronghold Crusader Definitive Edition.exe () [File not signed]
FirewallRules: [{5C791335-8655-4462-B143-E0A696403D67}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Definitive Edition\Stronghold Crusader Definitive Edition.exe () [File not signed]
FirewallRules: [TCP Query User{E3485F10-1609-4695-983D-CFD3F8F24444}C:\users\alett\appdata\roaming\utorrent\updates\utorrent.exe] => (Block) C:\users\alett\appdata\roaming\utorrent\updates\utorrent.exe (RainCo HK Limited -> BitTorrent Limited)
FirewallRules: [UDP Query User{18D9193B-F623-4F98-A873-50D983B5A941}C:\users\alett\appdata\roaming\utorrent\updates\utorrent.exe] => (Block) C:\users\alett\appdata\roaming\utorrent\updates\utorrent.exe (RainCo HK Limited -> BitTorrent Limited)
FirewallRules: [{8B643BE1-66E2-4334-8DFF-40C909E6E527}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Guild Wars\Gw.exe (ArenaNet, LLc -> ArenaNet)
FirewallRules: [{EC8CD8F3-F25E-40A3-AABD-58C9B908D8D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Guild Wars\Gw.exe (ArenaNet, LLc -> ArenaNet)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{84B09C5F-3CA0-43B4-9EF6-27393A74441B}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe => No File
FirewallRules: [UDP Query User{1E4D62AA-F7A6-4F6B-8340-950218B15951}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe => No File
FirewallRules: [TCP Query User{3E91DE76-7A88-4D0B-9B0F-0D84BAF5BD91}C:\program files (x86)\strategy first\disciples ii\gallean's return\discipl2.exe] => (Allow) C:\program files (x86)\strategy first\disciples ii\gallean's return\discipl2.exe (Strategy First) [File not signed]
FirewallRules: [UDP Query User{000737AF-486A-4F97-849E-21D4B22A780F}C:\program files (x86)\strategy first\disciples ii\gallean's return\discipl2.exe] => (Allow) C:\program files (x86)\strategy first\disciples ii\gallean's return\discipl2.exe (Strategy First) [File not signed]
FirewallRules: [{85BBA5DA-98AC-472D-A203-E16B24C67D2A}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe (Now.gg, INC -> Bluestack Systems, Inc.)
FirewallRules: [{5AF10B5E-FEB7-4485-9C69-0BA40E1DA53D}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe => No File
FirewallRules: [{52BBC2C5-180E-4F3B-86AC-63A83CE5EF18}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Now.gg, INC -> BlueStack Systems)
FirewallRules: [{B00CDFEA-856F-4F2F-B517-AE70ADC5DC47}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe (Now.gg, INC -> The Qt Company Ltd.)
FirewallRules: [{774FF910-FC8F-427B-8E80-20EBD6D8DB8F}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAIRun.exe (Now.gg, INC -> BlueStack Systems)
FirewallRules: [TCP Query User{BD13C8A2-1D78-4D08-9365-10BD679B6108}C:\users\alett\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\alett\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{4B7FCEE5-BAF9-4135-91A3-89F52C1E94CB}C:\users\alett\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\alett\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
FirewallRules: [TCP Query User{372B69A7-E624-4D26-AB26-B2E17698901F}C:\users\alett\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\alett\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe (Microsoft) [File not signed]
FirewallRules: [UDP Query User{3CC37F5A-2262-464A-BFDC-481281B593BF}C:\users\alett\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\alett\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe (Microsoft) [File not signed]
FirewallRules: [{ED567D37-B780-48D0-A9CF-E84F525A3FE8}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
==================== Restore Points =========================
22-10-2026 15:48:53 Windows Update
==================== Faulty Device Manager Devices ============
Name: Waves Audio Effects Component
Description: Waves Audio Effects Component
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (10/17/2026 11:17:11 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: Verze 7.3.5.26972 programu Wow-64.exe ukončila interakci se systémem Windows a byla ukončena. Pokud chcete zjistit, zda jsou k dispozici další informace o problému, zkontrolujte historii problémů v ovládacím panelu Zabezpečení a údržba.
Error: (10/17/2026 06:40:58 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: Verze 10.0.26100.9711 programu explorer.exe ukončila interakci se systémem Windows a byla ukončena. Pokud chcete zjistit, zda jsou k dispozici další informace o problému, zkontrolujte historii problémů v ovládacím panelu Zabezpečení a údržba.
Error: (10/10/2026 01:24:37 AM) (Source: Application Error) (EventID: 1000) (User: ALETTE-NTB)
Description: Název chybující aplikace: Explorer.EXE, verze: 10.0.26100.9444, časové razítko: 0x03f6c974
Název chybujícího modulu: FileExplorerExtensions.dll, verze: 2607.29001.0.0, časové razítko: 0x6a6a604c
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000e72f4
ID chybujícího procesu: 0x34f0
Čas spuštění chybující aplikace: 0x1dd57e5e6407669
Cesta k chybující aplikaci: C:\WINDOWS\Explorer.EXE
Cesta k chybujícímu modulu: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy\FileExplorerExtensions.dll
ID sestavy: b7c6c82b-db2b-4e0d-9521-635d977f1542
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (09/17/2026 09:22:02 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x80070006, Neplatný popisovač..
Operace:
Spouštění asynchronní operace
Kontext:
Aktuální stav: DoSnapshotSet
Error: (09/01/2026 12:21:16 AM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Název chybující aplikace: mscorsvw.exe, verze: 4.7.2558.0, časové razítko: 0x5edde1cc
Název chybujícího modulu: mscorsvw.exe, verze: 4.7.2558.0, časové razítko: 0x5edde1cc
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000003388d8
ID chybujícího procesu: 0x3eb0
Čas spuštění chybující aplikace: 0x1dd3955e72dca61
Cesta k chybující aplikaci: C:\Windows\Microsoft.NET\Framework\v3.5\mscorsvw.exe
Cesta k chybujícímu modulu: C:\Windows\Microsoft.NET\Framework\v3.5\mscorsvw.exe
ID sestavy: c1b88574-c5ff-4749-817d-636164b6fe81
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (08/25/2026 08:52:05 PM) (Source: Application Error) (EventID: 1000) (User: ALETTE-NTB)
Description: Název chybující aplikace: java.exe, verze: 21.0.11.0, časové razítko: 0x851e555b
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.26100.8875, časové razítko: 0x303b538a
Kód výjimky: 0xc0000409
Posun chyby: 0x00000000000a527e
ID chybujícího procesu: 0x1b24
Čas spuštění chybující aplikace: 0x1dd34b8d1075722
Cesta k chybující aplikaci: C:\Users\alett\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\ucrtbase.dll
ID sestavy: d556c442-04dd-4943-9a68-b2cff65fa0dd
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (08/23/2026 02:36:53 PM) (Source: Application Error) (EventID: 1000) (User: ALETTE-NTB)
Description: Název chybující aplikace: Ascension.exe, verze: 3.3.5.12340, časové razítko: 0x4c2452fe
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000
ID chybujícího procesu: 0x206c
Čas spuštění chybující aplikace: 0x1dd32f5723917ea
Cesta k chybující aplikaci: C:\Games\Ascension\resources\ascension-live\Ascension.exe
Cesta k chybujícímu modulu: unknown
ID sestavy: e082a598-5f5c-4d3c-b14e-f7370e2fca83
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (08/23/2026 02:36:52 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: Ascension.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: kód výjimky c0000005, adresa výjimky 00000000
Zásobník:
System errors:
=============
Error: (10/23/2026 01:26:28 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: Při pokusu o načtení hlavního klíče svazku nástroje BitLocker během restartování došlo k neočekávané chybě.
Error: (10/23/2026 01:26:28 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: Při pokusu o načtení hlavního klíče svazku nástroje BitLocker během restartování došlo k neočekávané chybě.
Error: (10/23/2026 04:14:50 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1803) (User: NT AUTHORITY)
Description: A PK-signed Key Exchange Key (KEK) cannot be found for this device. Check with the device manufacturer for proper key provisioning.
This device signature information is included here.
DeviceAttributes: FirmwareManufacturer:Insyde Corp.;FirmwareVersion:V1.12;OEMModelNumber:Nitro AN515-43;OEMModelBaseBoard:Octavia_PKS;OEMManufacturerName:Acer;OSArchitecture:amd64;
BucketId: ba619335bc29d351e0b7b73b9c0af78906ab013a61ced98f9c8c577696cb4b06
BucketConfidenceLevel: High Confidence.
For more information, please see https://go.microsoft.com/fwlink/?linkid=2339472
Error: (10/22/2026 04:14:51 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1803) (User: NT AUTHORITY)
Description: A PK-signed Key Exchange Key (KEK) cannot be found for this device. Check with the device manufacturer for proper key provisioning.
This device signature information is included here.
DeviceAttributes: FirmwareManufacturer:Insyde Corp.;FirmwareVersion:V1.12;OEMModelNumber:Nitro AN515-43;OEMModelBaseBoard:Octavia_PKS;OEMManufacturerName:Acer;OSArchitecture:amd64;
BucketId: ba619335bc29d351e0b7b73b9c0af78906ab013a61ced98f9c8c577696cb4b06
BucketConfidenceLevel: High Confidence.
For more information, please see https://go.microsoft.com/fwlink/?linkid=2339472
Error: (10/22/2026 04:07:00 PM) (Source: DCOM) (EventID: 10010) (User: ALETTE-NTB)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (10/22/2026 03:47:34 PM) (Source: DCOM) (EventID: 10029) (User: ALETTE-NTB)
Description: U aktivace identifikátoru CLSID Windows.Media.Capture.Internal.AppCaptureShell vypršel časový limit během čekání na zastavení služby BcastDVRUserService_5e63b.
Error: (10/22/2026 03:47:16 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: Při pokusu o načtení hlavního klíče svazku nástroje BitLocker během restartování došlo k neočekávané chybě.
Error: (10/22/2026 03:47:16 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: Při pokusu o načtení hlavního klíče svazku nástroje BitLocker během restartování došlo k neočekávané chybě.
Windows Defender:
================
TimeCreated : 23.10.2026 13:41:44
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
8DC08A70-2153-4EFC-89EB-F9301F07F6E7}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьЅçђēđμĺēđ ѕćàń ẃäś ѕкіρφ℮ď вεćāùŝ℮ тћě łáŝ
ť ѕμç¢℮śşƒύľ šćąη ẅāѕ шΐτђιп ťђэ łαѕτ 7 δąýѕ
TimeCreated : 23.10.2026 3:35:08
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
A787E251-A1D6-4278-9148-3A39A8AAA94E}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
TimeCreated : 23.10.2026 3:11:44
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
44154D60-A7EC-4B83-8BB6-10D691F04CDB}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
TimeCreated : 21.10.2026 15:46:28
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
5A6283EF-E618-4421-82E7-4738E28CAC5B}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьЅçђēđμĺēđ ѕćàń ẃäś ѕкіρφ℮ď вεćāùŝ℮ тћě łáŝ
ť ѕμç¢℮śşƒύľ šćąη ẅāѕ шΐτђιп ťђэ łαѕτ 7 δąýѕ
TimeCreated : 20.10.2026 12:55:43
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
4DAACDCC-C1DF-4ABF-9775-67E94925A0D9}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьЅçђēđμĺēđ ѕćàń ẃäś ѕкіρφ℮ď вεćāùŝ℮ тћě łáŝ
ť ѕμç¢℮śşƒύľ šćąη ẅāѕ шΐτђιп ťђэ łαѕτ 7 δąýѕ
TimeCreated : 19.10.2026 16:41:44
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
E3220897-F620-4D38-B567-7101172E5C3F}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
TimeCreated : 19.10.2026 16:30:12
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
C6880D1B-F17D-4C6C-8595-0C164E09B53E}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
TimeCreated : 15.10.2026 19:46:45
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
501CD38E-76F6-4135-BCCD-2B7D2854B20A}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
CodeIntegrity:
===============
Date: 2026-10-14 14:51:27
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2026-10-08 03:59:34
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe) attempted to load \Device\HarddiskVolume3\Program Files\BraveSoftware\Brave-Browser\Application\154.1.96.61\vulkan-1.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: Insyde Corp. V1.12 11/05/2020
Motherboard: PK Octavia_PKS
Processor: AMD Ryzen 5 3550H with Radeon Vega Mobile Gfx
Percentage of memory in use: 87%
Total physical RAM: 6082.64 MB
Available physical RAM: 732.46 MB
Total Virtual: 17858.64 MB
Available Virtual: 6288.59 MB
==================== Drives ================================
Disk 0 - Drive c: () (Fixed) (Total:475.08 GB) (Free:97.69 GB) (Model: HFM512GDJTNG-8310A) NTFS
Disk 0 - \\?\Volume{83f41788-d537-4638-8756-d3214b85d434}\ () (Fixed) (Total:888 MB) (Free:85.12 MB) NTFS
Disk 0 - \\?\Volume{9f5cd4b2-8435-4283-bed3-d6094a43bbc5}\ () (Fixed) (Total:795 MB) (Free:115.16 MB) NTFS
Disk 0 - \\?\Volume{bafb5a3c-a1d1-4483-940e-e94a733542f1}\ () (Fixed) (Total:196 MB) (Free:161.27 MB) FAT32
==================== MBR & Partition Table ====================
============================================================
Disk: 0 (Size: 476.94 GB) (Disk ID: CC5CCCB4)
Partitions:
===========
Partition Style : GPT
Partition Count : 5
Disk ID : {E0A36CFA-3DEF-42FB-95DA-20F180841BB0}
Usable Offset : 0.02 MB
Usable Length : 476.94 GB
Max Partitions : 128
Partition 1
Type : EFI System Partition
Size : 200 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {BAFB5A3C-A1D1-4483-940E-E94A733542F1}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 201 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {5C97909E-57E9-428E-9A69-4BE3CAE7690F}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 475.08 GB
Offset : 217 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {D284ADE3-6F3C-49BD-8FA6-897DA0BBB6F1}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 888 MB
Offset : 486701 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {83F41788-D537-4638-8756-D3214B85D434}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
Partition 5
Type : Windows Recovery
Size : 795 MB
Offset : 487590 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {9F5CD4B2-8435-4283-BED3-D6094A43BBC5}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
============================================================
==================== End of Addition.txt =======================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-10-2026
Ran by alett (administrator) on ALETTE-NTB (Acer Nitro AN515-43) (23-10-2026 14:52:15)
Running from C:\Users\alett\Downloads\FRST64.exe
Loaded Profiles: alett
Platform: Microsoft Windows 11 Home Version 26H2 26300.9711 (X64) Language: Čeština (Česko)
Default browser: Brave
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <13>
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices -> ) C:\Program Files\AMD\CNext\CNext\gpuup.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices -> ) C:\Program Files\AMD\CNext\CNext\PresentMon-x64.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2639.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\155.0.4283.62\msedgewebview2.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\DefenderAiPlatformHost.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\DefenderSessionHelper.exe
(C:\Users\alett\AppData\Local\Discord\app-1.0.9265\Discord.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
(C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\dotnet\PlariumPlay.NetHost.exe ->) (Plarium Global Ltd. -> Plarium Global Ltd.) C:\Users\alett\AppData\Local\PlariumPlay\StandAloneApps\raid-shadow-legends\build\Raid.exe
(C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\PlariumPlay.exe ->) (Plarium Global Ltd. -> Plarium) C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\dotnet\PlariumPlay.NetHost.exe
(C:\Users\alett\AppData\Local\PlariumPlay\StandAloneApps\raid-shadow-legends\build\Raid.exe ->) (Plarium Global LTD -> ) C:\Users\alett\AppData\Local\PlariumPlay\StandAloneApps\raid-shadow-legends\build\Raid_Data\Plugins\x86_64\VuplexWebViewChromium\Vuplex WebView.vuplex
(C:\Users\alett\AppData\Local\PlariumPlay\StandAloneApps\raid-shadow-legends\build\Raid.exe ->) (Unity Technologies SF -> Unity Technologies) C:\Users\alett\AppData\Local\PlariumPlay\StandAloneApps\raid-shadow-legends\build\UnityCrashHandler64.exe
(cmd.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Discord Inc. -> Discord Inc.) C:\Users\alett\AppData\Local\Discord\app-1.0.9265\Discord.exe <6>
(discord-code-sign-windows-admin -> Discord Inc.) C:\Users\alett\AppData\Local\Discord\app-1.0.9265\modules\discord_utils-1\discord_utils\DiscordSystemHelper.exe <2>
(DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\atieclxx.exe
(explorer.exe ->) (FxSound, LLC -> FxSound LLC) C:\Program Files\FxSound LLC\FxSound\FxSound.exe
(explorer.exe ->) (Now.gg, INC -> now.gg, Inc.) C:\Users\alett\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Paint_11.2605.81.0_x64__8wekyb3d8bbwe\PaintApp\mspaint.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\155.0.4283.62\msedgewebview2.exe <10>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Now.gg, INC -> now.gg, Inc.) C:\Users\alett\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe <3>
(Plarium Global LTD -> ) C:\Users\alett\AppData\Local\PlariumPlay\StandAloneApps\raid-shadow-legends\build\Raid_Data\Plugins\x86_64\VuplexWebViewChromium\Vuplex WebView.vuplex <3>
(Plarium Global Ltd. -> Plarium Global Ltd.) C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\PlariumPlay.exe <6>
(services.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_47725f5567f931ee\amdfendrsr.exe
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\atiesrxx.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\NisSrv.exe
(services.exe ->) (Plarium Global Ltd. -> Plarium) C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\dotnet\PlariumPlayClientService.exe
(services.exe ->) (Qualcomm Atheros, Inc. -> ) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(sihost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2639.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(svchost.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1081648 2020-06-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Run: [Microsoft.Lists] => C:\Users\alett\AppData\Local\Microsoft\OneDrive\26.183.0920.0005\OneDrive.Sync.Service.exe [969576 2026-10-20] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Run: [Discord] => C:\Users\alett\AppData\Local\Discord\Update.exe [1596344 2026-04-13] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5774488 2026-08-03] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Run: [PlariumPlay] => C:\Users\alett\AppData\Local\PlariumPlay\PlariumPlay.exe [529272 2026-10-23] (Plarium Global Ltd. -> Plarium Global Ltd.)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Run: [AMDNoiseSuppression] => "C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe" (No File)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Run: [electron.app.BlueStacks Services] => C:\Users\alett\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe [162219656 2024-05-08] (Now.gg, INC -> now.gg, Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Installer\chrmstp.exe [7639120 2026-10-22] (Brave Software, Inc. -> Brave Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FxSound.lnk [2026-09-04]
ShortcutTarget: FxSound.lnk -> C:\Program Files\FxSound LLC\FxSound\FxSound.exe (FxSound, LLC -> FxSound LLC)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {F5236C82-1A01-4DB5-B76B-DD4D34E6089D} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030920 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {CB3E01E1-E472-4B2C-96DE-A9274699573E} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [184080 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {B98AF33B-5B6F-49D2-AC31-7BC2D962A124} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [303024 2026-08-11] (Now.gg, INC -> BlueStack Systems, Inc.)
Task: {E7B40ED8-1805-489A-9798-44FD8115DD83} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{8C5BD45D-2FED-4AE0-BC8F-98D5D4FC4F12} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-19] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {9D9A70F5-D16A-4A08-B7ED-E1901D6E1FC4} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{EE715BFA-ECEE-4C65-8814-B7176FF1791A} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-19] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {6ECEF33B-E823-45B7-9C7B-7B2D79011D60} - System32\Tasks\GBT Task => "C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\Pub\smgbgbt.exe" -> C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\Pub\\/smgb
Task: {13A6FA81-3502-4526-8D07-C00088B92142} - System32\Tasks\Microsoft\Windows\NetFramework\Microsoft .NET Framework => C:\Windows\Microsoft.NET\Framework\v3.5\mscorsvw.exe [7885824 2026-05-18] (Microsoft Corporation) [File not signed] <==== ATTENTION
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {9254F0D7-196C-4E58-8589-A49ACA044EDC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B1111B9F-7D80-4B68-B0E8-DB4067F4E030} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {39C797A9-8346-4066-9583-1A74B23F7912} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7CFC53DC-0E1B-4B4A-BE73-54567A59BDD3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BC05F513-C6C8-494D-8D00-751DFA063193} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030920 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {28D676F1-0C00-4023-8F42-70EA28EC00C0} - System32\Tasks\PubPlatform Scheduler => "C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\Pub\iTopPubPlatform.exe" -> C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\Pub\\/SMGB
Task: {2A102EE4-83E9-44D5-9963-F9717075BF7C} - System32\Tasks\SoftLanding\S-1-5-21-4111807221-2010952352-404185002-1001\SoftLandingRefreshForExpirationTask-{e3b30893-490e-4b0c-b29f-59e1924ed2d1} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
Task: {5D7956EA-BC72-45AD-9192-8C61AE2393E2} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60680 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {570ADFC4-864C-4900-8435-2BCB9E201FE2} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [323848 2026-04-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\..\Interfaces\{073e548a-d5f3-4432-b282-7516cb283739}: [DhcpNameServer] 100.100.100.100 100.100.100.100
Tcpip\..\Interfaces\{30cb9fdb-d2df-4f8b-8c06-96006d475432}\4416E6E69713: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{30cb9fdb-d2df-4f8b-8c06-96006d475432}\B4572616: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
Edge:
=======
Edge Profile: C:\Users\alett\AppData\Local\Microsoft\Edge\User Data\Default [2026-04-20]
Edge Extension: (Dokumenty Google offline) - C:\Users\alett\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-19]
Edge Extension: (Edge relevant text changes) - C:\Users\alett\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-04-19]
Brave:
=======
BRA Profile: C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2026-10-23]
BRA DefaultSearchKeyword: Default -> :g
BRA Extension: (Brave Ad Block Updater (Brave First Party Adblock Filters (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2026-10-18]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2026-10-21]
BRA Extension: (Brave NTP background images) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2026-09-22]
BRA Extension: (Brave Ad Block Updater (Mobile app promo blocker (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2026-10-16]
BRA Extension: (Brave Ad Block Updater (Cookie notice blocker (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2026-10-23]
BRA Extension: (Query Filter) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\cemdlagocoimleflkfkjoihojfainiho [2026-10-23]
BRA Extension: (Brave Ad Block Updater (Allow X/Twitter Embeds (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\dkpggglmbjhgjhachikgmohmecomjndo [2026-07-31]
BRA Extension: (Brave NTP sponsored images) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2026-10-23]
BRA Extension: (Brave WebMCP Tool Scripts) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\eingdhelnaolbpcdkgddekhifcjfkalf [2026-09-12]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2026-09-02]
BRA Extension: (Brave Ads Resources) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\iejekkikpddbbockoldagmfcdbffomfc [2026-06-29]
BRA Extension: (Brave Ad Block Updater (Brave Default Adblock Filters (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2026-10-23]
BRA Extension: (Brave Ad Block Updater (Allow Facebook Embeds (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\jmfhneobcdckobmonkfjkbknnjjnegoh [2026-07-31]
BRA Extension: (Brave Ad Block Updater (Brave Default Privacy Filters (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf [2026-10-23]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2026-09-18]
BRA Extension: (Brave User Agent) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe [2026-10-23]
BRA Extension: (Brave Ad Block Updater (Czech and Slovak website ad blocker (plaintext))) - C:\Users\alett\AppData\Local\BraveSoftware\Brave-Browser\User Data\oegebjahecghlckbhkmojgnpcgdeajdi [2026-09-14]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-19] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\elevation_service.exe [5136976 2026-10-21] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-04-19] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 DiscordSystemHelper; C:\Program Files\Common Files\Discord\Discord\DiscordSystemHelper.exe [2247552 2026-09-03] (discord-code-sign-windows-admin -> Discord Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpDefenderCoreService.exe [2398680 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 Plarium Play Client Service; C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\dotnet\PlariumPlayClientService.exe [212344 2026-10-23] (Plarium Global Ltd. -> Plarium)
R2 QcomWlanSrv; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [189768 2022-09-08] (Qualcomm Atheros, Inc. -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\NisSrv.exe [5555528 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe [378168 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AcerAirplaneModeController; C:\WINDOWS\System32\DriverStore\FileRepository\acerairplanemodecontroller.inf_amd64_36869d4d52526b5b\AcerAirplaneModeController.sys [36200 2024-06-03] (Acer Incorporated -> Acer Incorporated)
R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_47725f5567f931ee\amdfendrmgr.sys [37232 2026-03-31] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriverV20; \??\C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [48328 2026-04-23] (Advanced Micro Devices Inc. -> )
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_960126269e89c62e\amdsafd.sys [114048 2025-09-15] (Advanced Micro Devices -> Advanced Micro Devices)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0201039.inf_amd64_89c3272f19eab06b\B025980\amdkmdag.sys [106666512 2026-05-20] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [62856 2025-10-15] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R2 BlueStacksDrv_nxt; \??\C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [436360 2026-08-11] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [114688 2026-04-13] (Microsoft Corporation) [File not signed]
S3 Ccx01000; C:\WINDOWS\System32\drivers\Ccx01000.sys [692224 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
R3 FXVAD; C:\WINDOWS\system32\drivers\fxvad.sys [326656 2025-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 hidgamepad; C:\WINDOWS\System32\DriverStore\FileRepository\hidgamepad.inf_amd64_66e5eb14670e10ae\hidgamepad.sys [73728 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
S3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys [539648 2024-03-28] (Microsoft Windows -> Realtek)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-10-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [669712 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [138264 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2026-06-29] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 cpuz150; \??\C:\WINDOWS\temp\cpuz150\cpuz150_x64.sys (No File) <==== ATTENTION
S3 denuvo_denuvowo; \??\C:\Games\EA SPORTS FC 26\driver_amd\SimpleSvm.sys (No File)
S0 WinSetupMon; system32\DRIVERS\WinSetupMon.sys (No File)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-10-23 14:52 - 2026-10-23 14:53 - 000022711 _____ C:\Users\alett\Downloads\FRST.txt
2026-10-23 14:52 - 2026-10-23 14:52 - 000000000 ____D C:\FRST
2026-10-23 14:50 - 2026-10-23 14:51 - 002457088 _____ (Farbar) C:\Users\alett\Downloads\FRST64.exe
2026-10-21 16:16 - 2026-10-21 16:16 - 000678362 _____ C:\WINDOWS\system32\perfh005.dat
2026-10-21 16:16 - 2026-10-21 16:16 - 000145178 _____ C:\WINDOWS\system32\perfc005.dat
2026-10-21 05:35 - 2026-10-21 05:35 - 000510102 _____ C:\Users\alett\Downloads\warperia_Easy-Frames_2025-12-12_15-07-44.zip
2026-10-21 05:02 - 2026-10-21 05:02 - 000000608 _____ C:\Users\alett\Downloads\TinyTooltip.zip
2026-10-20 01:39 - 2026-10-20 01:39 - 002986249 _____ C:\Users\alett\Downloads\VID_20261020_013805.mp4
2026-10-19 15:17 - 2026-10-19 15:17 - 000001309 _____ C:\Users\Public\Desktop\Rapture VENOM V2.lnk
2026-10-19 15:17 - 2026-10-19 15:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rapture
2026-10-19 15:17 - 2026-10-19 15:17 - 000000000 ____D C:\Program Files (x86)\Rapture
2026-10-19 15:15 - 2026-10-19 15:15 - 003078334 _____ C:\Users\alett\Downloads\Rapture VENOM V2.zip
2026-10-19 00:58 - 2026-10-23 03:33 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-10-17 17:59 - 2026-10-17 18:27 - 000000000 ____D C:\Users\alett\Desktop\REDMI
2026-10-16 19:47 - 2026-10-16 19:47 - 000019675 _____ C:\Users\alett\Downloads\[SkT]Jackass__Nejlepší_a_poslední___Jackass__Best_and_Last_(2026)(CZ)[1080p][WEB-DL]__=_CSFD_52%.torrent
2026-10-16 19:47 - 2026-10-16 19:47 - 000019282 _____ C:\Users\alett\Downloads\[SkT]Šampión_(2026)[WEB-DL][1080p]_=_CSFD_63%.torrent
2026-10-16 19:46 - 2026-10-16 19:47 - 000004528 _____ C:\Users\alett\Downloads\[SkT]Vzpomínky_na_něj___Reminders_of_Him_(2026)(CZ)[720p][BDRip]_=_CSFD_67%.torrent
2026-10-16 19:46 - 2026-10-16 19:46 - 000023181 _____ C:\Users\alett\Downloads\[SkT]Unabomber_(2026)(CZ_EN)[1080p]_=_CSFD_50%.torrent
2026-10-16 19:45 - 2026-10-16 19:45 - 000021009 _____ C:\Users\alett\Downloads\[SkT]Mistrovský_plán___Masterplan_(2026)(CZ_EN)[1080p]_=_CSFD_50%.torrent
2026-10-16 19:45 - 2026-10-16 19:45 - 000004262 _____ C:\Users\alett\Downloads\[SkT]Bezohlední___Reckless_(2026)(CZ)[1080p][WEB-DL]_=_CSFD_54%.torrent
2026-10-16 19:44 - 2026-10-16 19:44 - 000065899 _____ C:\Users\alett\Downloads\[SkT]Spider-Man__Zbrusu_nový_den___Spider-Man__Brand_New_Day_(2026)[1080p][HEVC]_=_CSFD_82%.torrent
2026-10-16 19:33 - 2026-10-16 19:33 - 000014989 _____ C:\Users\alett\Downloads\[SkT]Protivníci_pod_ochranou___Drawn_Together_(2026)[WEB-DL][1080p][HEVC]_=_CSFD_50%.torrent
2026-10-16 19:31 - 2026-10-16 19:31 - 000011454 _____ C:\Users\alett\Downloads\[SkT]Zvířata___Animals_(2026)(CZ_EN)[1080p][WebRip][HEVC]_=_CSFD_52% (1).torrent
2026-10-16 05:00 - 2026-10-16 13:53 - 000000022 _____ C:\Users\alett\Downloads\AngryKeystones-v0.13.0.zip
2026-10-14 17:16 - 2026-10-14 17:16 - 000011454 _____ C:\Users\alett\Downloads\[SkT]Zvířata___Animals_(2026)(CZ_EN)[1080p][WebRip][HEVC]_=_CSFD_52%.torrent
2026-10-14 02:49 - 2026-10-14 02:49 - 000004985 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-10-14 02:47 - 2026-10-14 02:47 - 000091797 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-10-14 02:47 - 2026-10-14 02:47 - 000091797 _____ C:\WINDOWS\system32\ctac.json
2026-10-14 02:47 - 2026-10-14 02:47 - 000039736 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-10-14 02:47 - 2026-10-14 02:47 - 000039736 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-10-13 19:45 - 2026-10-13 19:45 - 000020215 _____ C:\Users\alett\Downloads\[SkT]Stari_neni_pro_sraby_(2022)(CZ)[WEB-DL][1080p]_=_CSFD_34%.torrent
2026-10-13 00:03 - 2026-10-13 00:04 - 000526319 _____ C:\Users\alett\Downloads\voice-message.ogg
2026-10-03 23:19 - 2026-10-15 16:52 - 000000000 ____D C:\ProgramData\ProductData
2026-10-03 23:19 - 2026-10-03 23:24 - 000000000 ____D C:\Users\alett\AppData\Roaming\instinfo
2026-10-03 23:18 - 2026-10-03 23:19 - 000000000 ____D C:\Users\alett\AppData\Roaming\IObit
2026-10-03 23:18 - 2026-10-03 23:19 - 000000000 ____D C:\Users\alett\AppData\LocalLow\IObit
2026-10-03 23:18 - 2026-10-03 23:18 - 000000000 ____D C:\ProgramData\{E0224FF9-7AE3-4F9E-991A-2F004F7E3952}
2026-09-24 22:46 - 2026-09-25 12:41 - 000000000 ____D C:\Users\alett\Desktop\Arty
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-10-23 14:53 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-10-23 14:27 - 2026-04-19 21:54 - 000000000 ____D C:\Users\alett\AppData\Local\Discord
2026-10-23 13:29 - 2026-04-19 21:43 - 000000000 ____D C:\Users\alett\AppData\Local\D3DSCache
2026-10-23 13:28 - 2026-04-19 21:59 - 000000000 ____D C:\Users\alett\AppData\Roaming\PlariumPlay
2026-10-23 13:27 - 2026-08-15 02:28 - 000000000 ____D C:\Users\alett\AppData\Roaming\bluestacks-services
2026-10-23 13:27 - 2026-05-07 12:41 - 000000000 ____D C:\Users\alett\AppData\Local\PlariumPlay
2026-10-23 13:27 - 2026-04-19 21:54 - 000000000 ____D C:\Users\alett\AppData\Roaming\discord
2026-10-23 13:27 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-10-23 13:26 - 2026-07-22 15:43 - 000003108 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher
2026-10-23 02:43 - 2026-09-13 22:15 - 000000000 ____D C:\Users\alett\AppData\Roaming\launcher
2026-10-23 02:43 - 2026-04-28 19:20 - 000000000 ____D C:\Users\alett\AppData\Roaming\vlc
2026-10-23 02:39 - 2026-09-13 22:15 - 000000000 ____D C:\Users\alett\AppData\Roaming\TauriLauncher
2026-10-23 02:39 - 2026-04-19 23:18 - 000000000 ____D C:\Users\alett\AppData\Roaming\FxSound
2026-10-23 01:51 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-10-22 21:48 - 2026-07-31 00:17 - 000001309 _____ C:\Users\alett\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-10-22 21:48 - 2026-04-19 21:55 - 000002248 _____ C:\Users\alett\Desktop\Discord.lnk
2026-10-22 15:49 - 2026-04-19 21:58 - 000000000 ____D C:\ProgramData\Package Cache
2026-10-22 15:48 - 2026-04-19 21:49 - 000002400 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2026-10-22 15:48 - 2026-04-19 21:49 - 000002353 _____ C:\Users\Public\Desktop\Brave.lnk
2026-10-21 16:16 - 2026-04-19 21:39 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-10-21 16:16 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-10-21 16:09 - 2026-04-19 21:45 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2026-10-21 16:09 - 2026-04-19 21:36 - 000008468 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-10-21 16:09 - 2026-04-19 21:29 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-10-21 16:09 - 2026-04-17 16:29 - 000012288 ___SH C:\DumpStack.log.tmp
2026-10-21 16:09 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-10-21 14:34 - 2026-05-14 00:38 - 000000000 ____D C:\Users\alett\AppData\Local\AMD_Common
2026-10-20 14:29 - 2026-07-06 19:36 - 000002377 _____ C:\Users\alett\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-10-20 14:29 - 2026-04-19 21:46 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4111807221-2010952352-404185002-1001
2026-10-20 14:29 - 2026-04-19 21:46 - 000003570 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-4111807221-2010952352-404185002-1001
2026-10-20 14:29 - 2026-04-19 21:46 - 000003368 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4111807221-2010952352-404185002-1001
2026-10-20 12:44 - 2026-04-19 21:29 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{A48B8D29-A792-4EA5-848B-43506B685D6C}
2026-10-20 12:44 - 2026-04-19 21:29 - 000003644 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{6F4ED474-5B60-450E-881F-2B8E36EE51D6}
2026-10-19 19:58 - 2026-04-20 00:27 - 000000000 ____D C:\Users\alett\Desktop\Alettík
2026-10-19 00:56 - 2026-04-19 21:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-10-17 22:43 - 2026-04-19 21:30 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-10-17 04:20 - 2026-04-19 23:31 - 000000000 ____D C:\Users\alett\AppData\Roaming\utorrent
2026-10-16 19:57 - 2026-04-20 00:34 - 000000000 ____D C:\Users\alett\AppData\Local\BitTorrentHelper
2026-10-15 13:04 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-10-15 04:34 - 2026-04-19 21:29 - 000324752 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-10-15 04:33 - 2026-04-13 09:55 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-10-15 04:33 - 2026-04-13 09:55 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-10-15 04:33 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-15 04:33 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-10-15 04:33 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-10-15 04:33 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-10-14 21:28 - 2026-04-20 15:09 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-14 21:25 - 2026-04-20 15:09 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-14 15:07 - 2026-04-19 21:29 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-10-14 02:45 - 2026-04-19 21:31 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-10-12 01:27 - 2026-04-19 23:19 - 000000000 ____D C:\Users\alett\AppData\Local\Comms
2026-10-12 01:21 - 2026-04-19 21:46 - 000000000 ____D C:\Users\alett\AppData\Local\PlaceholderTileLogoFolder
2026-10-12 01:21 - 2026-04-19 21:43 - 000000000 ____D C:\Users\alett\AppData\Local\Packages
2026-10-12 01:21 - 2026-04-19 21:35 - 000000000 ____D C:\ProgramData\Packages
2026-10-12 01:21 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-10-10 01:24 - 2026-08-17 19:03 - 000000000 ____D C:\Users\alett\AppData\Local\CrashDumps
2026-10-03 23:18 - 2026-05-14 04:15 - 000000000 ____D C:\ProgramData\IObit
2026-09-25 12:42 - 2026-08-15 02:28 - 000000000 ____D C:\ProgramData\BlueStacks_nxt
==================== Files in the root of some directories ========
2026-04-19 21:57 - 2026-05-07 12:42 - 000107492 _____ () C:\Users\alett\AppData\Local\PlariumPlay.log
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-10-2026
Ran by alett (23-10-2026 14:56:33)
Running from C:\Users\alett\Downloads
Microsoft Windows 11 Home Version 26H2 26300.9711 (X64) (2026-04-19 19:35:10)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-4111807221-2010952352-404185002-500 - Administrators - Disabled)
alett (S-1-5-21-4111807221-2010952352-404185002-1001 - Administrators - Enabled) [MS Account] => C:\Users\alett
DefaultAccount (S-1-5-21-4111807221-2010952352-404185002-503 - Limited - Disabled)
Guest (S-1-5-21-4111807221-2010952352-404185002-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-4111807221-2010952352-404185002-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\uTorrent) (Version: 3.6.0.47390 - BitTorrent Limited)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 26.5.2 - Advanced Micro Devices, Inc.)
BlueStacks (HKLM\...\BlueStacks_nxt) (Version: 5.22.256.1003 - now.gg, Inc.)
BlueStacks Services (HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\BlueStacksServices) (Version: 3.0.9 - now.gg, Inc.)
Branding64 (HKLM\...\{492AEFBE-1B81-4C20-A111-E6974BB98EC5}) (Version: 1.00.0009 - Advanced Micro Devices, Inc.) Hidden
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 156.1.98.60 - Autoři prohlížeče Brave)
Disciples II (HKLM-x32\...\{7028B58E-3D40-4EA8-B221-4EC364D433DD}_is1) (Version: 2.02/3.01 - Strategy First)
Discord (HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\Discord) (Version: 1.0.9265 - Discord Inc.)
FxSound (HKLM\...\{88B23212-049A-4656-B978-8D1C5469B2D9}) (Version: 1.2.13.0 - FxSound LLC)
GTA IV: The Complete Edition (HKLM-x32\...\GTA IV: The Complete Edition_is1) (Version: - )
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.2.3.34 - PandoraTV)
Microsoft .NET Host - 10.0.6 (x64) (HKLM\...\{E1E2ACB5-F1FA-4217-B028-3F864353AA4E}) (Version: 80.24.50533 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.19 (x64) (HKLM\...\{B84443A1-BE1B-4C5E-B834-E12133604B12}) (Version: 64.76.37566 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 10.0.6 (x64) (HKLM\...\{6FE50292-47CC-4916-B5A1-A3070C71EB17}) (Version: 80.24.50533 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.19 (x64) (HKLM\...\{69A17DA9-300A-49B9-97F1-1EB7424570DE}) (Version: 64.76.37566 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 10.0.6 (x64) (HKLM\...\{EBF50DE0-6BA2-4020-B459-853CCA2C6266}) (Version: 80.24.50533 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.19 (x64) (HKLM\...\{B9F7A454-0CCD-410C-A3E0-D1AAC300F150}) (Version: 64.76.37566 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 155.0.4283.62 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 155.0.4283.62 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\OneDriveSetup.exe) (Version: 26.183.0920.0005 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.50.35719 (HKLM\...\{AECD4ED0-8A3B-41E9-92D1-6BEE0374CCAF}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.50.35719 (HKLM\...\{61B44572-8722-4DAF-8ACF-8E742D30BCC5}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.50.35719 (HKLM-x32\...\{773AD50D-AAE6-4BA1-AD01-B5A38874C840}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.50.35719 (HKLM-x32\...\{5A0DFA55-3851-45BC-8B20-95EA4BF5812D}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719 (HKLM-x32\...\{91ee571b-0e8a-4c65-9eaf-2e2f5fc60c00}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.50.35719 (HKLM-x32\...\{0e4ccf1b-d073-4cfe-8a24-e86185719b56}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Microsoft Windows Desktop Runtime - 10.0.6 (x64) (HKLM\...\{32BDDD2F-347E-41D8-AEB5-0809B7EC8598}) (Version: 80.24.50533 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.19 (x64) (HKLM\...\{A6EA542C-884C-4FE7-89E4-8C28E14B601C}) (Version: 64.76.37602 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.19 (x64) (HKLM-x32\...\{6b2575e2-0248-44c3-93f3-2eba040331ed}) (Version: 8.0.19.35118 - Microsoft Corporation)
Microsoft Windows Desktop Runtime 10.0.6 (x64) (HKLM-x32\...\{A4FB84EE-B9EF-4F5E-B39D-654C02FF7129}) (Version: 10.0.6.50000 - Microsoft Corporation)
Plarium Play (HKLM-x32\...\{5a1473d1-96a2-44b0-b2c6-4e2a8b6f8a1d}) (Version: 10.18.0 - Plarium)
PlariumPlay (HKLM-x32\...\{8D9E43D1-E66B-4751-8297-386C2F2BE38D}) (Version: 10.18.0 - Plarium) Hidden
Revo Uninstaller 2.6.8 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.6.8 - VS Revo Group, Ltd.)
RyzenMasterSDK (HKLM\...\{A28E667B-5AC6-4279-9E67-FD2C8D2C89AB}) (Version: 1.2.3.5 - Advanced Micro Devices, Inc.) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Tauri Launcher 3.3.1 (HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\9740d7d1-b643-5705-bab7-aa4199eaf30c) (Version: 3.3.1 - Tauri)
VENOM V2 (HKLM-x32\...\{97C5CCD0-32DD-4335-B678-832E57135B3A}_is1) (Version: 1.0 - VENOM V2)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.23 - VideoLAN)
WinRAR 7.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.20.0 - win.rar GmbH)
Packages:
=========
AMD Radeon Software -> C:\Program Files\AMD\CNext\CNext [2026-07-22] (Advanced Micro Devices Inc.)
APK 安装程序 -> C:\Program Files\WindowsApps\18184wherewhere.AndroidAppInstaller_0.1.28.0_x64__4v4sx105x6y4r [2026-08-15] (wherewhere)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2026-04-19] (Realtek Semiconductor Corp)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2639.100.0_x64__cv1g1gvanyjgm [2026-10-11] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.5.1.0_x64__8wekyb3d8bbwe [2026-10-11] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{29F23486-1C3D-4FBB-B5B7-B7FABF0BD943}\localserver32 -> C:\Users\alett\AppData\Local\Discord\app-1.0.9265\Discord.exe (Discord Inc. -> Discord Inc.)
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000}\localserver32 -> "C:\Program Files\Proton\VPN\v4.4.1\ProtonVPN.Client.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{5C4D8D77-5B87-40CA-884E-F56858227E5C}\localserver32 -> C:\Users\alett\AppData\Local\Programs\TeamSpeak\notification_helper.exe => No File
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{5d50ae61-fbb1-1c92-b915-a1774956b2c3}\localserver32 -> "C:\Users\alett\AppData\Local\PlariumPlay\10.15.5-0.0.0\dotnet\PlariumPlay.NetHost.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{61ca23c0-2e98-0d01-4fe2-019cca56a250}\localserver32 -> "C:\Users\alett\AppData\Local\PlariumPlay\10.17.0-0.0.0\dotnet\PlariumPlay.NetHost.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{765172aa-8316-54f7-6c00-37d058f9d1f9}\localserver32 -> "C:\Users\alett\AppData\Local\PlariumPlay\10.16.0-0.0.0\dotnet\PlariumPlay.NetHost.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{9eca7621-dc0c-aa14-0623-ff585e54fb0d}\localserver32 -> C:\Users\alett\AppData\Local\PlariumPlay\10.18.0-0.0.0\dotnet\PlariumPlay.NetHost.exe (Plarium Global Ltd. -> Plarium)
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{a9b0c1c3-f1ed-b58a-6da6-50867ee71fda}\localserver32 -> "C:\Users\alett\AppData\Local\PlariumPlay\10.15.0-0.0.0\dotnet\PlariumPlay.NetHost.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{ab85aff0-357e-8028-e0f1-4e31bff0f091}\localserver32 -> C:\Users\alett\AppData\Local\PlariumPlay\10.17.0-0.0.1\dotnet\PlariumPlay.NetHost.exe (Plarium Global Ltd. -> Plarium)
CustomCLSID: HKU\S-1-5-21-4111807221-2010952352-404185002-1001_Classes\CLSID\{b2fd8eec-b71c-81ec-2781-a46e6bd52088}\localserver32 -> "C:\Users\alett\AppData\Local\PlariumPlay\10.14.0-0.0.0\dotnet\PlariumPlay.NetHost.exe" -ToastActivated => No File
ContextMenuHandlers1: [SmartGameBoosterMenu] -> {96C86AD1-055D-457D-9C00-0D4A91ECF1B4} => C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\MenuExt64.dll -> No File
ContextMenuHandlers3: [SmartGameBoosterMenu] -> {96C86AD1-055D-457D-9C00-0D4A91ECF1B4} => C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\MenuExt64.dll -> No File
ContextMenuHandlers4: [SmartGameBoosterMenu] -> {96C86AD1-055D-457D-9C00-0D4A91ECF1B4} => C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\MenuExt64.dll -> No File
ContextMenuHandlers6: [SmartGameBoosterMenu] -> {96C86AD1-055D-457D-9C00-0D4A91ECF1B4} => C:\Program Files (x86)\PCGameBoost\Smart Game Booster\5.3.1\MenuExt64.dll -> No File
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2026-10-23 13:27 - 2026-10-23 13:27 - 000110080 _____ () [File not signed] \\?\C:\Users\alett\AppData\Local\Temp\e181f064-7bbe-4e94-8894-fd6ff8542580.tmp.node
2026-10-23 13:27 - 2026-10-23 13:27 - 002338304 _____ () [File not signed] \\?\C:\Users\alett\AppData\Local\Temp\f50c72fa-e637-4c11-bb87-9ac08ea2972f.tmp.node
2026-08-15 02:28 - 2024-05-08 10:18 - 002862080 _____ () [File not signed] C:\Users\alett\AppData\Local\Programs\bluestacks-services\ffmpeg.dll
2026-08-15 02:28 - 2024-05-08 10:18 - 000479232 _____ () [File not signed] C:\Users\alett\AppData\Local\Programs\bluestacks-services\libegl.dll
2026-08-15 02:28 - 2024-05-08 10:18 - 007513600 _____ () [File not signed] C:\Users\alett\AppData\Local\Programs\bluestacks-services\libglesv2.dll
2026-08-15 02:28 - 2024-05-08 10:18 - 005209088 _____ () [File not signed] C:\Users\alett\AppData\Local\Programs\bluestacks-services\vk_swiftshader.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000035840 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qgif.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000044032 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qicns.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000033792 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qico.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000564736 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qjpeg.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000029696 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qpdf.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000026624 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qsvg.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000026112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qtga.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000024064 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwbmp.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000540672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwebp.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000890368 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\platforms\qwindows.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 001964544 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\sqldrivers\qsqlite.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000210432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\styles\qmodernwindowsstyle.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000299520 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\Qt5Compat\GraphicalEffects\private\qtgraphicaleffectsprivateplugin.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000556032 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\Qt5Compat\GraphicalEffects\qtgraphicaleffectsplugin.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000020480 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtMultimedia\quickmultimediaplugin.dll
2025-05-14 14:45 - 2025-05-14 14:45 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Basic\qtquickcontrols2basicstyleplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Fusion\impl\qtquickcontrols2fusionstyleimplplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Fusion\qtquickcontrols2fusionstyleplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000028160 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\qtquickcontrols2plugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Windows\impl\qtquickcontrols2windowsstyleimplplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000468992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Windows\qtquickcontrols2windowsstyleplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Dialogs\qtquickdialogsplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Effects\effectsplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Layouts\qquicklayoutsplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000767488 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\NativeStyle\qtquickcontrols2nativestyleplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Templates\qtquicktemplates2plugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Window\quickwindowplugin.dll
2025-05-14 14:46 - 2025-05-14 14:46 - 000022016 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtWebEngine\qtwebenginequickplugin.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 006071296 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Core.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 008933376 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Gui.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000972288 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Multimedia.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000250368 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6MultimediaQuick.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 001725952 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Network.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 001964544 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6OpenGL.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 005337600 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Pdf.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000500224 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Positioning.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 005204992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Qml.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000137728 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QmlMeta.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000721920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QmlModels.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000062976 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QmlWorkerScript.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 006282752 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Quick.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000084992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 001313280 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2Basic.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 001131008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2Fusion.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000195584 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2FusionStyleImpl.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000276480 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2Impl.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000058368 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2WindowsStyleImpl.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000142336 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickDialogs2.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 001992704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickDialogs2QuickImpl.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000035328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickDialogs2Utils.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000389120 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickEffects.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000192512 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickLayouts.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 001864192 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickTemplates2.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 004028416 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6ShaderTools.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000303616 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Sql.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000513024 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Svg.dll
2025-06-17 04:46 - 2025-06-17 04:46 - 154372608 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6WebEngineCore.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000580096 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6WebEngineQuick.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000228352 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6WebChannel.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000050176 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6WebChannelQuick.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 006447616 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Widgets.dll
2025-05-14 14:44 - 2025-05-14 14:44 - 000141824 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Xml.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2024-04-01 09:26 - 2024-04-01 09:24 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 100.100.100.100
Windows Firewall is enabled.
Network Binding:
=============
Wi-Fi: Qualcomm Atheros QCA61x4A Wireless Network Adapter -> Qcamain10x64.sys
Ethernet: Realtek Gaming GbE Family Controller -> rt640x64.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\alett\Downloads\Dark-Souls-III-PS4-Wallpapers-21.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\StartupApproved\Run: => "PlariumPlay"
HKU\S-1-5-21-4111807221-2010952352-404185002-1001\...\StartupApproved\Run: => "Steam"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{7268C6EB-F1BE-4B39-8C90-F613340F6854}] => (Allow) C:\Users\alett\AppData\Roaming\uTorrent\uTorrent.exe (RainCo HK Limited -> BitTorrent Limited)
FirewallRules: [{FDC5F163-ED0F-4DB9-A5B2-32C1550E38A6}] => (Allow) C:\Users\alett\AppData\Roaming\uTorrent\uTorrent.exe (RainCo HK Limited -> BitTorrent Limited)
FirewallRules: [{B3A13ED1-AAD5-4C73-ACF6-C94530F0887C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{C1A294A2-7062-42C2-BB90-9BB1CEE8FC11}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{7463A2C5-83BC-435E-9F99-23B02D8996A2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{9FEED56E-B0F1-45C6-9095-4F7CF259C617}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{F8300E12-3014-4A82-9D73-9126A2A7F741}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Definitive Edition\Stronghold Crusader Definitive Edition.exe () [File not signed]
FirewallRules: [{5C791335-8655-4462-B143-E0A696403D67}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Definitive Edition\Stronghold Crusader Definitive Edition.exe () [File not signed]
FirewallRules: [TCP Query User{E3485F10-1609-4695-983D-CFD3F8F24444}C:\users\alett\appdata\roaming\utorrent\updates\utorrent.exe] => (Block) C:\users\alett\appdata\roaming\utorrent\updates\utorrent.exe (RainCo HK Limited -> BitTorrent Limited)
FirewallRules: [UDP Query User{18D9193B-F623-4F98-A873-50D983B5A941}C:\users\alett\appdata\roaming\utorrent\updates\utorrent.exe] => (Block) C:\users\alett\appdata\roaming\utorrent\updates\utorrent.exe (RainCo HK Limited -> BitTorrent Limited)
FirewallRules: [{8B643BE1-66E2-4334-8DFF-40C909E6E527}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Guild Wars\Gw.exe (ArenaNet, LLc -> ArenaNet)
FirewallRules: [{EC8CD8F3-F25E-40A3-AABD-58C9B908D8D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Guild Wars\Gw.exe (ArenaNet, LLc -> ArenaNet)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{84B09C5F-3CA0-43B4-9EF6-27393A74441B}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe => No File
FirewallRules: [UDP Query User{1E4D62AA-F7A6-4F6B-8340-950218B15951}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe => No File
FirewallRules: [TCP Query User{3E91DE76-7A88-4D0B-9B0F-0D84BAF5BD91}C:\program files (x86)\strategy first\disciples ii\gallean's return\discipl2.exe] => (Allow) C:\program files (x86)\strategy first\disciples ii\gallean's return\discipl2.exe (Strategy First) [File not signed]
FirewallRules: [UDP Query User{000737AF-486A-4F97-849E-21D4B22A780F}C:\program files (x86)\strategy first\disciples ii\gallean's return\discipl2.exe] => (Allow) C:\program files (x86)\strategy first\disciples ii\gallean's return\discipl2.exe (Strategy First) [File not signed]
FirewallRules: [{85BBA5DA-98AC-472D-A203-E16B24C67D2A}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe (Now.gg, INC -> Bluestack Systems, Inc.)
FirewallRules: [{5AF10B5E-FEB7-4485-9C69-0BA40E1DA53D}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe => No File
FirewallRules: [{52BBC2C5-180E-4F3B-86AC-63A83CE5EF18}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Now.gg, INC -> BlueStack Systems)
FirewallRules: [{B00CDFEA-856F-4F2F-B517-AE70ADC5DC47}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe (Now.gg, INC -> The Qt Company Ltd.)
FirewallRules: [{774FF910-FC8F-427B-8E80-20EBD6D8DB8F}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAIRun.exe (Now.gg, INC -> BlueStack Systems)
FirewallRules: [TCP Query User{BD13C8A2-1D78-4D08-9365-10BD679B6108}C:\users\alett\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\alett\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{4B7FCEE5-BAF9-4135-91A3-89F52C1E94CB}C:\users\alett\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\alett\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
FirewallRules: [TCP Query User{372B69A7-E624-4D26-AB26-B2E17698901F}C:\users\alett\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\alett\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe (Microsoft) [File not signed]
FirewallRules: [UDP Query User{3CC37F5A-2262-464A-BFDC-481281B593BF}C:\users\alett\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\alett\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe (Microsoft) [File not signed]
FirewallRules: [{ED567D37-B780-48D0-A9CF-E84F525A3FE8}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
==================== Restore Points =========================
22-10-2026 15:48:53 Windows Update
==================== Faulty Device Manager Devices ============
Name: Waves Audio Effects Component
Description: Waves Audio Effects Component
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (10/17/2026 11:17:11 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: Verze 7.3.5.26972 programu Wow-64.exe ukončila interakci se systémem Windows a byla ukončena. Pokud chcete zjistit, zda jsou k dispozici další informace o problému, zkontrolujte historii problémů v ovládacím panelu Zabezpečení a údržba.
Error: (10/17/2026 06:40:58 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: Verze 10.0.26100.9711 programu explorer.exe ukončila interakci se systémem Windows a byla ukončena. Pokud chcete zjistit, zda jsou k dispozici další informace o problému, zkontrolujte historii problémů v ovládacím panelu Zabezpečení a údržba.
Error: (10/10/2026 01:24:37 AM) (Source: Application Error) (EventID: 1000) (User: ALETTE-NTB)
Description: Název chybující aplikace: Explorer.EXE, verze: 10.0.26100.9444, časové razítko: 0x03f6c974
Název chybujícího modulu: FileExplorerExtensions.dll, verze: 2607.29001.0.0, časové razítko: 0x6a6a604c
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000e72f4
ID chybujícího procesu: 0x34f0
Čas spuštění chybující aplikace: 0x1dd57e5e6407669
Cesta k chybující aplikaci: C:\WINDOWS\Explorer.EXE
Cesta k chybujícímu modulu: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy\FileExplorerExtensions.dll
ID sestavy: b7c6c82b-db2b-4e0d-9521-635d977f1542
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (09/17/2026 09:22:02 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x80070006, Neplatný popisovač..
Operace:
Spouštění asynchronní operace
Kontext:
Aktuální stav: DoSnapshotSet
Error: (09/01/2026 12:21:16 AM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Název chybující aplikace: mscorsvw.exe, verze: 4.7.2558.0, časové razítko: 0x5edde1cc
Název chybujícího modulu: mscorsvw.exe, verze: 4.7.2558.0, časové razítko: 0x5edde1cc
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000003388d8
ID chybujícího procesu: 0x3eb0
Čas spuštění chybující aplikace: 0x1dd3955e72dca61
Cesta k chybující aplikaci: C:\Windows\Microsoft.NET\Framework\v3.5\mscorsvw.exe
Cesta k chybujícímu modulu: C:\Windows\Microsoft.NET\Framework\v3.5\mscorsvw.exe
ID sestavy: c1b88574-c5ff-4749-817d-636164b6fe81
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (08/25/2026 08:52:05 PM) (Source: Application Error) (EventID: 1000) (User: ALETTE-NTB)
Description: Název chybující aplikace: java.exe, verze: 21.0.11.0, časové razítko: 0x851e555b
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.26100.8875, časové razítko: 0x303b538a
Kód výjimky: 0xc0000409
Posun chyby: 0x00000000000a527e
ID chybujícího procesu: 0x1b24
Čas spuštění chybující aplikace: 0x1dd34b8d1075722
Cesta k chybující aplikaci: C:\Users\alett\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\ucrtbase.dll
ID sestavy: d556c442-04dd-4943-9a68-b2cff65fa0dd
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (08/23/2026 02:36:53 PM) (Source: Application Error) (EventID: 1000) (User: ALETTE-NTB)
Description: Název chybující aplikace: Ascension.exe, verze: 3.3.5.12340, časové razítko: 0x4c2452fe
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000
ID chybujícího procesu: 0x206c
Čas spuštění chybující aplikace: 0x1dd32f5723917ea
Cesta k chybující aplikaci: C:\Games\Ascension\resources\ascension-live\Ascension.exe
Cesta k chybujícímu modulu: unknown
ID sestavy: e082a598-5f5c-4d3c-b14e-f7370e2fca83
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (08/23/2026 02:36:52 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: Ascension.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: kód výjimky c0000005, adresa výjimky 00000000
Zásobník:
System errors:
=============
Error: (10/23/2026 01:26:28 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: Při pokusu o načtení hlavního klíče svazku nástroje BitLocker během restartování došlo k neočekávané chybě.
Error: (10/23/2026 01:26:28 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: Při pokusu o načtení hlavního klíče svazku nástroje BitLocker během restartování došlo k neočekávané chybě.
Error: (10/23/2026 04:14:50 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1803) (User: NT AUTHORITY)
Description: A PK-signed Key Exchange Key (KEK) cannot be found for this device. Check with the device manufacturer for proper key provisioning.
This device signature information is included here.
DeviceAttributes: FirmwareManufacturer:Insyde Corp.;FirmwareVersion:V1.12;OEMModelNumber:Nitro AN515-43;OEMModelBaseBoard:Octavia_PKS;OEMManufacturerName:Acer;OSArchitecture:amd64;
BucketId: ba619335bc29d351e0b7b73b9c0af78906ab013a61ced98f9c8c577696cb4b06
BucketConfidenceLevel: High Confidence.
For more information, please see https://go.microsoft.com/fwlink/?linkid=2339472
Error: (10/22/2026 04:14:51 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1803) (User: NT AUTHORITY)
Description: A PK-signed Key Exchange Key (KEK) cannot be found for this device. Check with the device manufacturer for proper key provisioning.
This device signature information is included here.
DeviceAttributes: FirmwareManufacturer:Insyde Corp.;FirmwareVersion:V1.12;OEMModelNumber:Nitro AN515-43;OEMModelBaseBoard:Octavia_PKS;OEMManufacturerName:Acer;OSArchitecture:amd64;
BucketId: ba619335bc29d351e0b7b73b9c0af78906ab013a61ced98f9c8c577696cb4b06
BucketConfidenceLevel: High Confidence.
For more information, please see https://go.microsoft.com/fwlink/?linkid=2339472
Error: (10/22/2026 04:07:00 PM) (Source: DCOM) (EventID: 10010) (User: ALETTE-NTB)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (10/22/2026 03:47:34 PM) (Source: DCOM) (EventID: 10029) (User: ALETTE-NTB)
Description: U aktivace identifikátoru CLSID Windows.Media.Capture.Internal.AppCaptureShell vypršel časový limit během čekání na zastavení služby BcastDVRUserService_5e63b.
Error: (10/22/2026 03:47:16 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: Při pokusu o načtení hlavního klíče svazku nástroje BitLocker během restartování došlo k neočekávané chybě.
Error: (10/22/2026 03:47:16 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: Při pokusu o načtení hlavního klíče svazku nástroje BitLocker během restartování došlo k neočekávané chybě.
Windows Defender:
================
TimeCreated : 23.10.2026 13:41:44
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
8DC08A70-2153-4EFC-89EB-F9301F07F6E7}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьЅçђēđμĺēđ ѕćàń ẃäś ѕкіρφ℮ď вεćāùŝ℮ тћě łáŝ
ť ѕμç¢℮śşƒύľ šćąη ẅāѕ шΐτђιп ťђэ łαѕτ 7 δąýѕ
TimeCreated : 23.10.2026 3:35:08
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
A787E251-A1D6-4278-9148-3A39A8AAA94E}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
TimeCreated : 23.10.2026 3:11:44
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
44154D60-A7EC-4B83-8BB6-10D691F04CDB}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
TimeCreated : 21.10.2026 15:46:28
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
5A6283EF-E618-4421-82E7-4738E28CAC5B}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьЅçђēđμĺēđ ѕćàń ẃäś ѕкіρφ℮ď вεćāùŝ℮ тћě łáŝ
ť ѕμç¢℮śşƒύľ šćąη ẅāѕ шΐτђιп ťђэ łαѕτ 7 δąýѕ
TimeCreated : 20.10.2026 12:55:43
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
4DAACDCC-C1DF-4ABF-9775-67E94925A0D9}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьЅçђēđμĺēđ ѕćàń ẃäś ѕкіρφ℮ď вεćāùŝ℮ тћě łáŝ
ť ѕμç¢℮śşƒύľ šćąη ẅāѕ шΐτђιп ťђэ łαѕτ 7 δąýѕ
TimeCreated : 19.10.2026 16:41:44
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
E3220897-F620-4D38-B567-7101172E5C3F}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
TimeCreated : 19.10.2026 16:30:12
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
C6880D1B-F17D-4C6C-8595-0C164E09B53E}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
TimeCreated : 15.10.2026 19:46:45
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
501CD38E-76F6-4135-BCCD-2B7D2854B20A}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
CodeIntegrity:
===============
Date: 2026-10-14 14:51:27
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2026-10-08 03:59:34
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe) attempted to load \Device\HarddiskVolume3\Program Files\BraveSoftware\Brave-Browser\Application\154.1.96.61\vulkan-1.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: Insyde Corp. V1.12 11/05/2020
Motherboard: PK Octavia_PKS
Processor: AMD Ryzen 5 3550H with Radeon Vega Mobile Gfx
Percentage of memory in use: 87%
Total physical RAM: 6082.64 MB
Available physical RAM: 732.46 MB
Total Virtual: 17858.64 MB
Available Virtual: 6288.59 MB
==================== Drives ================================
Disk 0 - Drive c: () (Fixed) (Total:475.08 GB) (Free:97.69 GB) (Model: HFM512GDJTNG-8310A) NTFS
Disk 0 - \\?\Volume{83f41788-d537-4638-8756-d3214b85d434}\ () (Fixed) (Total:888 MB) (Free:85.12 MB) NTFS
Disk 0 - \\?\Volume{9f5cd4b2-8435-4283-bed3-d6094a43bbc5}\ () (Fixed) (Total:795 MB) (Free:115.16 MB) NTFS
Disk 0 - \\?\Volume{bafb5a3c-a1d1-4483-940e-e94a733542f1}\ () (Fixed) (Total:196 MB) (Free:161.27 MB) FAT32
==================== MBR & Partition Table ====================
============================================================
Disk: 0 (Size: 476.94 GB) (Disk ID: CC5CCCB4)
Partitions:
===========
Partition Style : GPT
Partition Count : 5
Disk ID : {E0A36CFA-3DEF-42FB-95DA-20F180841BB0}
Usable Offset : 0.02 MB
Usable Length : 476.94 GB
Max Partitions : 128
Partition 1
Type : EFI System Partition
Size : 200 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {BAFB5A3C-A1D1-4483-940E-E94A733542F1}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 201 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {5C97909E-57E9-428E-9A69-4BE3CAE7690F}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 475.08 GB
Offset : 217 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {D284ADE3-6F3C-49BD-8FA6-897DA0BBB6F1}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 888 MB
Offset : 486701 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {83F41788-D537-4638-8756-D3214B85D434}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
Partition 5
Type : Windows Recovery
Size : 795 MB
Offset : 487590 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {9F5CD4B2-8435-4283-BED3-D6094A43BBC5}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
============================================================
==================== End of Addition.txt =======================