můžu poprosit o kontrolu
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-10-2026
Ran by rossu (administrator) on MIXA (Acer Aspire ES1-731G) (28-10-2026 16:58:37)
Running from C:\Users\rossu\Desktop\FRST64.exe
Loaded Profiles: rossu
Platform: Microsoft Windows 11 Home Version 24H2 26100.9711 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files\Google\Drive File Stream\133.0.2.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\133.0.2.0\crashpad_handler.exe
(C:\Program Files\Google\Drive File Stream\133.0.2.0\GoogleDriveFS.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.50\msedgewebview2.exe
(C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderAiPlatformHost.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderSessionHelper.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe
(explorer.exe ->) (Google LLC -> Google LLC.) C:\Program Files\Google\Drive File Stream\133.0.2.0\GoogleDriveFS.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <18>
(Google LLC -> Google LLC.) C:\Program Files\Google\Drive File Stream\133.0.2.0\GoogleDriveFS.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <9>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.50\msedgewebview2.exe <10>
(services.exe ->) (2BrightSparks Pte. Ltd. -> 2BrightSparks Pte Ltd) D:\program\SyncBackFree\SchedulesMonitor.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_6.1.4.0_x64__8wekyb3d8bbwe\Microsoft.Notes.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.398.4.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe
(svchost.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Trend Micro, Inc. -> Trend Micro Inc.) C:\Users\rossu\AppData\Local\Temp\HouseCall\HouseCallX_x64\HouseCallX.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16405744 2015-08-23] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\Software\Policies\...\system: [AllowClipboardHistory] 0
HKLM\Software\Policies\...\system: [EnableCloudClipboard] 0
HKLM\Software\Policies\...\system: [CloudClipboardAutomaticUpload] 0
HKLM\Software\Policies\...\system: [EnableActivityFeed] 0
HKLM\Software\Policies\...\system: [PublishUserActivities] 0
HKLM\Software\Policies\...\system: [UploadUserActivities] 0
HKLM\Software\Policies\...\system: [DisableAcrylicBackgroundOnLogon] 1
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\133.0.2.0\GoogleDriveFS.exe [104055960 2026-10-20] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\133.0.2.0\GoogleDriveFS.exe [104055960 2026-10-20] (Google LLC -> Google LLC.)
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\Run: [qBittorrent] => D:\program\qBittorrent\qbittorrent.exe [41671168 2025-04-27] (The qBittorrent Project) [File not signed]
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\Run: [] => [X]
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\133.0.2.0\GoogleDriveFS.exe [104055960 2026-10-20] (Google LLC -> Google LLC.)
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\Run: [MicrosoftEdgeAutoLaunch_7434B22AF5F101868BBBB0D3FE00BC41] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5452616 2026-10-25] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\PhotoScreensaver.scr [565248 2026-07-31] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\133.0.2.0\GoogleDriveFS.exe [104055960 2026-10-20] (Google LLC -> Google LLC.)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\133.0.2.0\GoogleDriveFS.exe [104055960 2026-10-20] (Google LLC -> Google LLC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\156.0.8078.48\Installer\chrmstp.exe [8373912 2026-10-27] (Google LLC -> Google LLC)
IFEO\eucloneserver.exe: [GlobalFlag]
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {DBF28140-54C8-4D76-B7FB-977E1EBB82D5} - System32\Tasks\ASC_SkipUac_rossu => "D:\portable\Advanced SystemCare Pro 19.2.0.188 CZ+SK (x64) portable\App\AdvancedSystemCare\ASC.exe" -> D:\portable\Advanced SystemCare Pro 19.2.0.188 CZ+SK (x64) portable\App\AdvancedSystemCare\\/SkipUac
Task: {37A73863-1D9B-43BD-BCC6-B458A852FA16} - System32\Tasks\DelayedItemsByChemtableSoftware\qBittorrent => D:\program\qBittorrent\qbittorrent.exe [41671168 2025-04-27] (The qBittorrent Project) [File not signed]
Task: {DA027DF5-7AAC-4BDC-BC12-24045BD201CA} - System32\Tasks\DelayedItemsByChemtableSoftware\RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16405744 2015-08-23] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {790653F2-BF45-459E-9B13-990438EC096D} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem157.0.8089.0{61D1E89E-36F0-4A92-9195-DDE278A12886} => C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe [9958552 2026-10-06] (Google LLC -> Google LLC)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {B7F5C1CE-2025-48BC-B08E-E0F88A08C8F9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B0DC0DE6-2E6F-4F9E-BC29-928D710652A2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2DE474FE-B8FF-4F9D-B293-0C3FB06A9830} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {12495E56-D12F-4921-822C-97D9EE28EE10} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EC695B95-A07A-4C93-9B20-8F13E395B63E} - System32\Tasks\Reg Organizer => C:\Program Files\Reg Organizer\RegOrganizer.exe [41700896 2026-10-20] (Software Solutions 365 LLC -> Chemtable Software) -> -Minimize -SystemStart
Task: {BD1F6656-3A7F-4CA6-AE5E-7B3782CEFBBF} - System32\Tasks\Reg Organizer Applications Updates Check => D:\program\Reg Organizer\RegOrganizer.exe [40725560 2025-08-07] (Software Solutions 365 LLC -> Chemtable Software) -> -SilentUpdatesCheck -Minimize
Task: {94189826-9808-4A04-8F2B-0D7763189B7A} - System32\Tasks\Reg Organizer Scheduled Cleaning => D:\program\Reg Organizer\RegOrganizer.exe [40725560 2025-08-07] (Software Solutions 365 LLC -> Chemtable Software) -> -BackgroundCleaning -Minimize
Task: {14A2D7EE-C688-4FF9-8E1B-EA374CE21A08} - System32\Tasks\Reg Organizer Update => D:\program\Reg Organizer\RegOrganizer.exe [40725560 2025-08-07] (Software Solutions 365 LLC -> Chemtable Software) -> -UpdateCheck -Minimize
Task: {991D819B-38A3-4B01-B59B-FCFA651DF771} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [5339512 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {CA6C1645-E7CE-49D1-906D-DB7CDEC1BD22} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5659512 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {8E04BF4F-0B5A-4D69-A692-8165B1708375} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [5839224 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{44c02594-2b15-4f6a-a1fc-ee5ea3f810a8}: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{5ecd08db-82d6-4b76-bb35-896b75313344}: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{5ecd08db-82d6-4b76-bb35-896b75313344}\D696875627023686164716: [DhcpNameServer] 192.168.31.1
FireFox:
========
FF DefaultProfile: 63copdco.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\rossu\AppData\Roaming\Mozilla\Firefox\Profiles\ipommgvf.default [2026-05-22]
FF user.js: detected! => C:\Users\rossu\AppData\Roaming\Mozilla\Firefox\Profiles\ipommgvf.default\user.js [2026-02-01]
FF ProfilePath: C:\Users\rossu\AppData\Roaming\Mozilla\Firefox\Profiles\63copdco.default-release [2026-07-31]
FF user.js: detected! => C:\Users\rossu\AppData\Roaming\Mozilla\Firefox\Profiles\63copdco.default-release\user.js [2026-02-01]
FF Extension: (Language: Čeština (Czech)) - C:\Users\rossu\AppData\Roaming\Mozilla\Firefox\Profiles\63copdco.default-release\Extensions\langpack-cs@firefox.mozilla.org.xpi [2026-01-28]
FF Extension: (New Tab) - C:\Users\rossu\AppData\Roaming\Mozilla\Firefox\Profiles\63copdco.default-release\Extensions\newtab@mozilla.org.xpi [2026-01-28]
FF Extension: (Cookie-Editor) - C:\Users\rossu\AppData\Roaming\Mozilla\Firefox\Profiles\63copdco.default-release\Extensions\{c3c10168-4186-445c-9c5b-63f12b8e2c87}.xpi [2026-01-28]
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default [2026-10-28]
Edge Notifications: Default -> hxxps://www.facebook.com
Edge HomePage: Default -> hxxp://www.seznam.cz/
Edge StartupUrls: Default -> "hxxps://www.seznam.cz/"
Edge Extension: (Pomocník pro Google Calendar ™) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bmjejnfomomknbjkohfhekplmndpannk [2025-06-16]
Edge Extension: (Avira Safe Shopping) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\caiblelclndcckfafdaggpephhgfpoip [2026-10-22]
Edge Extension: (Plasma Integration) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cimiefiiaegbelhefglklhhakcgmhkai [2026-04-03]
Edge Extension: (Ochrana procházení internetu) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cpikpibllpjmpnchjajlibnmmomnnhnm [2026-10-20]
Edge Extension: (Avira Password Manager) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\emgfgdclgfeldebanedpihppahgngnle [2026-10-22]
Edge Extension: (AddToAny: Share Anywhere) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ffpgijchhhkhnokafdeklpllijgnbche [2025-06-16]
Edge Extension: (Dokumenty Google offline) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-28]
Edge Extension: (Edge relevant text changes) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-06-08]
Edge Extension: (Ochrana procházení internetu) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjjnhpacphpjmnnlnccpfmhkcloaade [2026-10-15]
Edge Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2026-02-09]
Edge Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2026-10-28]
Edge Extension: (SearchGPT - ChatGPT for Chrome) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ninecedhhpccjifamhafbdelibdjibgd [2025-06-16]
Edge Extension: (Nástroj pro obnovení zařízení) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pocpnlppkickgojjlmhdmidojbmbodfm [2026-10-15]
Edge Profile: C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2026-10-20]
Edge Extension: (Dokumenty Google offline) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-08-15]
Edge Extension: (Edge relevant text changes) - C:\Users\rossu\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-08-15]
Edge HKLM-x32\...\Edge\Extension: [caiblelclndcckfafdaggpephhgfpoip]
Edge HKLM-x32\...\Edge\Extension: [emgfgdclgfeldebanedpihppahgngnle]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\rossu\AppData\Local\Google\Chrome\User Data\Default [2026-10-28]
CHR Notifications: Default -> hxxps://aukro.cz; hxxps://calendar.google.com; hxxps://cz.imyfone.com; hxxps://drive.google.com; hxxps://mapio.cz; hxxps://military.eu; hxxps://tuvhradistu.cz; hxxps://www.facebook.com; hxxps://www.kupi.cz; hxxps://www.megaknihy.cz
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxps://www.seznam.cz/","hxxp://www.sanctuary.c ... &u=1583002"
CHR Extension: (Překladač Google) - C:\Users\rossu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2026-10-16]
CHR Extension: (uBlock Origin Lite) - C:\Users\rossu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddkjiahejlhfcafbddmgiahcphecmpfh [2026-10-27]
CHR Extension: (AddToAny: Share Anywhere) - C:\Users\rossu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffpgijchhhkhnokafdeklpllijgnbche [2026-04-01]
CHR Extension: (Dokumenty Google offline) - C:\Users\rossu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-15]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\rossu\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2026-08-29]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\rossu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-04-01]
CHR Profile: C:\Users\rossu\AppData\Local\Google\Chrome\User Data\System Profile [2026-10-20]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 Chemtable Startup Checking; C:\Program Files\Reg Organizer\StartupCheckingService.exe [ ]
S3 EPMVssEaseusProvider; C:\WINDOWS\system32\dllhost.exe /Processid:{2D307685-95BB-4CC4-A9F0-E05C7021E728} [93536 2026-09-23] (Microsoft Windows -> Microsoft Corporation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe [2386280 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 ONLYOFFICE Update Service; C:\Program Files\ONLYOFFICE\DesktopEditors\updatesvc.exe [630256 2026-10-11] (Ascensio System SIA -> Ascensio System SIA)
S4 PuranDefrag; C:\WINDOWS\SYSTEM32\PuranDefragS.exe [289792 2025-11-02] (Puran Software) [File not signed]
S4 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2737016 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
S4 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4588408 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
R2 SyncBackFreeSchedulesMonitor; D:\program\SyncBackFree\SchedulesMonitor.exe [3481536 2026-06-23] (2BrightSparks Pte. Ltd. -> 2BrightSparks Pte Ltd)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe [5609240 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe [378128 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 MBAMService; no ImagePath
S3 MBVpnTunnelService; no ImagePath
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 AscFileFilter; no ImagePath
S3 AscRegistryFilter; no ImagePath
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [114688 2026-05-03] (Microsoft Corporation) [File not signed]
S3 Ccx01000; C:\WINDOWS\System32\drivers\Ccx01000.sys [692224 2026-09-23] (Microsoft Windows -> Microsoft Corporation)
S3 cpuz154; no ImagePath
S3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [33336 2026-07-24] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 DPMDriver; C:\WINDOWS\System32\drivers\DPMDriver.sys [142272 2024-10-30] (IndiLogic LLC -> Dell Inc.)
S3 ebrntdrv; C:\WINDOWS\system32\ebrntdrv.sys [27728 2023-06-19] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 epmdkdrv; C:\WINDOWS\system32\epmdkdrv.sys [57512 2025-05-26] (CHENGDU YIWO Tech Development Co., Ltd. -> )
R0 EPMVolFl; C:\WINDOWS\System32\drivers\EPMVolFl.sys [30136 2022-12-29] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Codename Longhorn DDK provider)
R0 EUDCPEPM; C:\WINDOWS\System32\drivers\EUDCPEPM.sys [76344 2025-01-16] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
R1 EUEDKEPM; \??\C:\WINDOWS\system32\drivers\EUEDKEPM.sys [24656 2025-01-16] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 googledrivefs31931; \??\C:\Program Files\Google\Drive File Stream\Drivers\31931\googledrivefs31931.sys [386256 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 googledrivefs32452; \??\C:\Program Files\Google\Drive File Stream\Drivers\32452\googledrivefs32452.sys [405216 2026-10-20] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 iobit_monitor_server2021; no ImagePath
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [155000 2026-09-23] (Microsoft Windows -> Microsoft Corporation)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-06-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [246376 2026-08-29] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 PfbCdRom; no ImagePath
S3 pwdrvio; no ImagePath
S3 pwdspio; no ImagePath
S3 Revoflt; C:\WINDOWS\System32\DRIVERS\revoflt.sys [38400 2021-11-17] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64sta.inf_amd64_110055e261f6997d\rt68cx21x64.sys [921088 2025-12-10] (Realtek Semiconductor Corp. -> Realtek)
U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [752856 2026-06-18] (Realtek Semiconductor Corp -> Realsil Semiconductor Corporation)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-10-28] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [677952 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [144408 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
U4 npcap_wifi; no ImagePath
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-10-28 17:02 - 2026-10-28 17:02 - 004973788 _____ C:\Users\rossu\Downloads\Image+2+Wallpaper_2.1.3_APKPure.apk
2026-10-28 16:58 - 2026-10-28 17:02 - 000024646 _____ C:\Users\rossu\Desktop\FRST.txt
2026-10-28 16:23 - 2026-10-28 17:00 - 000000000 ____D C:\FRST
2026-10-28 16:21 - 2026-10-28 16:21 - 001790024 _____ (Malwarebytes) C:\Users\rossu\Downloads\JRT (1).exe
2026-10-28 16:21 - 2026-10-28 16:21 - 001790024 _____ (Malwarebytes) C:\Users\rossu\Desktop\JRT.exe
2026-10-28 16:20 - 2026-10-28 16:21 - 002457088 _____ (Farbar) C:\Users\rossu\Desktop\FRST64.exe
2026-10-28 15:57 - 2026-10-28 15:57 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2026-10-28 14:32 - 2026-10-28 14:32 - 000713018 _____ C:\WINDOWS\system32\perfh005.dat
2026-10-28 14:32 - 2026-10-28 14:32 - 000153196 _____ C:\WINDOWS\system32\perfc005.dat
2026-10-28 11:46 - 2026-10-28 16:56 - 001067250 _____ C:\Users\rossu\AppData\Local\census.cache
2026-10-28 11:45 - 2026-10-28 16:55 - 000382369 _____ C:\Users\rossu\AppData\Local\ars.cache
2026-10-28 11:06 - 2026-10-28 11:06 - 000000036 _____ C:\Users\rossu\AppData\Local\housecall.guid.cache
2026-10-28 10:52 - 2026-10-28 10:52 - 003333936 _____ (Trend Micro Inc.) C:\Users\rossu\Downloads\HousecallLauncher64 (1).exe
2026-10-28 10:50 - 2026-10-28 10:50 - 000000950 _____ C:\Users\Public\Desktop\Reg Organizer.lnk
2026-10-28 10:49 - 2026-10-28 10:49 - 003333936 _____ (Trend Micro Inc.) C:\Users\rossu\Desktop\HousecallLauncher64.exe
2026-10-27 20:52 - 2026-10-28 15:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-10-25 18:43 - 2026-10-25 18:43 - 000000270 __RSH C:\ProgramData\ntuser.pol
2026-10-25 18:14 - 2026-10-25 18:14 - 000000000 ____D C:\Users\rossu\Downloads\TROM-Jaro
2026-10-25 17:46 - 2026-10-25 17:55 - 2993966389 _____ C:\Users\rossu\Downloads\TROM-Jaro.zip
2026-10-25 16:07 - 2026-10-25 16:07 - 000000723 _____ C:\Users\rossu\Desktop\Folder Size.lnk
2026-10-25 16:07 - 2026-10-25 16:07 - 000000000 ____D C:\ProgramData\MindGems
2026-10-25 13:31 - 2026-10-25 13:47 - 000000000 ____D C:\Program Files\Xiaomi Driver
2026-10-22 17:45 - 2026-10-22 17:45 - 000091770 _____ C:\Users\rossu\Desktop\Vyuctovani_59937576_2610.pdf
2026-10-22 17:37 - 2026-10-22 17:37 - 000000000 _____ C:\Users\rossu\Desktop\rohlik.txt
2026-10-22 17:35 - 2026-10-22 17:35 - 000000000 ____D C:\ProgramData\Avast Software
2026-10-21 16:26 - 2026-10-21 16:26 - 000159719 _____ C:\Users\rossu\Desktop\mykyn-uherske-hradiste-2026-10-15-95744-psi-detektiv.pdf
2026-10-20 20:25 - 2026-10-20 20:25 - 000000000 _____ C:\Users\rossu\Desktop\canal+.txt
2026-10-18 21:32 - 2026-06-29 14:46 - 000455619 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20261018-223201.backup
2026-10-17 22:11 - 2026-10-17 22:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\ClockworkMod
2026-10-17 22:11 - 2026-10-17 22:11 - 000000000 ____D C:\Program Files (x86)\ClockworkMod
2026-10-17 21:58 - 2026-10-17 21:58 - 000000000 ____D C:\Users\rossu\AppData\Roaming\AdbAppControl
2026-10-17 21:57 - 2026-10-17 21:57 - 000000753 _____ C:\Users\Public\Desktop\ADB AppControl.lnk
2026-10-17 21:08 - 2026-10-17 21:10 - 000000000 ____D C:\Users\rossu\AppData\Local\Mediatek
2026-10-17 20:10 - 2026-10-17 21:14 - 000001113 _____ C:\Users\Public\Desktop\MiFlashPro.lnk
2026-10-17 20:10 - 2026-10-17 20:10 - 000001125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiFlashPro.lnk
2026-10-17 20:08 - 2026-10-17 20:10 - 000000000 ____D C:\Program Files (x86)\MiFlashPro
2026-10-17 14:37 - 2026-10-17 14:38 - 001917435 _____ C:\Users\rossu\Desktop\modem chata xaomi.pdf
2026-10-17 13:43 - 2026-10-17 13:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2026-10-16 12:45 - 2026-10-16 12:45 - 000001100 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2026-10-15 16:08 - 2026-10-15 16:08 - 000541100 _____ C:\Users\rossu\Downloads\Aktualizace Vaseho pojisteni cislo 3161543819.pdf
2026-10-15 16:08 - 2026-10-15 16:08 - 000092410 _____ C:\Users\rossu\Downloads\Rocni prehled o pojisteni ke smlouve 4087399149.pdf
2026-10-15 13:56 - 2026-10-15 13:56 - 000000766 _____ C:\Users\rossu\Desktop\Puran Utilities.lnk
2026-10-15 13:56 - 2026-10-15 13:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Puran Utilities
2026-10-15 13:56 - 2025-11-02 14:10 - 000576512 _____ (Puran Software) C:\WINDOWS\system32\PuranFD.exe
2026-10-15 13:56 - 2025-11-02 14:10 - 000289792 _____ (Puran Software) C:\WINDOWS\system32\PuranDefragS.exe
2026-10-15 13:56 - 2025-11-02 14:10 - 000284672 _____ (Puran Software) C:\WINDOWS\system32\PuranDC.exe
2026-10-15 13:56 - 2025-11-02 14:10 - 000129536 _____ (Puran Software) C:\WINDOWS\system32\PuranDefragBT.exe
2026-10-15 13:56 - 2012-08-11 15:23 - 000253952 _____ (Puran Software) C:\WINDOWS\system32\PuranDefrag.dll
2026-10-15 13:45 - 2026-10-15 13:45 - 000001666 _____ C:\Users\rossu\Desktop\dupeGuru.lnk
2026-10-15 13:45 - 2026-10-15 13:45 - 000000000 ____D C:\Users\rossu\AppData\Roaming\Hardcoded Software
2026-10-15 13:43 - 2026-10-15 13:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru
2026-10-15 13:28 - 2026-10-15 13:28 - 000000000 ____D C:\Users\rossu\AppData\Roaming\Qarmin
2026-10-15 13:28 - 2026-10-15 13:28 - 000000000 ____D C:\Users\rossu\AppData\Local\Qarmin
2026-10-15 13:28 - 2026-10-15 13:28 - 000000000 ____D C:\Users\rossu\AppData\Local\gtk-4.0
2026-10-15 13:28 - 2026-10-15 13:28 - 000000000 ____D C:\Users\rossu\.dbus-keyrings
2026-10-15 13:01 - 2026-10-16 12:52 - 000003324 _____ C:\WINDOWS\system32\Tasks\Reg Organizer
2026-10-15 12:05 - 2026-10-16 14:05 - 000000000 ____D C:\Users\rossu\Downloads\Zaznam z jednani k pojistne smlouve cislo 4087399149
2026-10-15 12:05 - 2026-10-15 12:10 - 000000000 ____D C:\Users\rossu\Downloads\Pojistna smlouva cislo 4087399149
2026-10-15 10:04 - 2026-10-16 12:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2026-10-15 10:04 - 2026-10-15 10:04 - 000000000 ____D C:\Program Files\VS Revo Group
2026-10-14 07:17 - 2026-10-15 14:37 - 000000000 ___HD C:\$WinREAgent
2026-10-14 06:34 - 2026-10-14 06:34 - 000000000 ____D C:\Users\rossu\AppData\Local\ONLYOFFICE
2026-10-14 06:33 - 2026-10-14 06:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ONLYOFFICE
2026-10-14 06:27 - 2026-10-14 06:27 - 000000000 ____D C:\Program Files\ONLYOFFICE
2026-10-13 13:57 - 2026-10-13 13:57 - 000000000 ____D C:\ProgramData\Samsung
2026-10-03 14:58 - 2026-10-03 15:33 - 000000000 ____D C:\Program Files (x86)\Dell
2026-10-03 14:52 - 2026-10-03 16:37 - 000000000 ____D C:\Program Files\Dell
2026-10-02 18:09 - 2026-06-29 14:46 - 000455619 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20261002-190949.backup
2026-10-02 14:47 - 2026-10-02 14:47 - 000000000 ____D C:\Users\rossu\AppData\Local\Microsoft_Corporation
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-10-28 17:05 - 2025-06-08 20:29 - 000000000 ___SD C:\Users\rossu\AppData\Roaming\Microsoft\Credentials
2026-10-28 16:58 - 2025-06-08 20:58 - 000000000 ____D C:\Users\rossu\AppData\Roaming\qBittorrent
2026-10-28 16:09 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-10-28 16:06 - 2026-04-12 16:00 - 000003704 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{F65740F1-183B-4B62-91C0-DCF7E1C1FEEC}
2026-10-28 16:06 - 2026-04-12 16:00 - 000003570 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{F8AFF03C-61B6-42D0-888A-6D2C64BE1132}
2026-10-28 16:05 - 2025-06-13 08:13 - 000000000 ____D C:\Users\rossu\AppData\Local\CrashDumps
2026-10-28 16:02 - 2025-06-08 19:55 - 000081906 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-10-28 15:58 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-10-28 15:57 - 2025-06-08 20:34 - 000000000 __SHD C:\Users\rossu\IntelGraphicsProfiles
2026-10-28 15:57 - 2025-06-08 20:22 - 000000000 ____D C:\ProgramData\NVIDIA
2026-10-28 15:57 - 2025-06-08 19:52 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-10-28 15:57 - 2024-08-28 19:29 - 000012288 ___SH C:\DumpStack.log.tmp
2026-10-28 15:57 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-10-28 14:55 - 2024-04-01 08:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-10-28 14:39 - 2025-06-08 19:46 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-10-28 14:32 - 2025-06-08 19:57 - 001692324 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-10-28 14:32 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-10-28 14:25 - 2025-06-08 20:34 - 000000000 ____D C:\Users\rossu\AppData\Local\Packages
2026-10-28 14:25 - 2025-06-08 20:08 - 000000000 ____D C:\ProgramData\Packages
2026-10-28 14:25 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-10-28 14:22 - 2026-06-10 19:59 - 000000000 ____D C:\Program Files\Reg Organizer
2026-10-28 11:27 - 2025-09-17 13:01 - 000002512 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-10-28 11:27 - 2025-09-17 13:01 - 000002344 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-10-28 10:50 - 2026-06-10 19:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reg Organizer
2026-10-27 20:25 - 2026-08-29 15:08 - 000002285 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-10-27 19:07 - 2025-08-25 06:26 - 000001276 _____ C:\Users\rossu\Desktop\ESET Online Scanner.lnk
2026-10-27 19:07 - 2025-06-13 08:48 - 000001382 _____ C:\Users\rossu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2026-10-25 11:02 - 2025-06-08 20:29 - 000000000 ____D C:\Users\rossu
2026-10-22 14:56 - 2026-07-17 07:55 - 000000000 ____D C:\Users\rossu\Desktop\tapety
2026-10-22 14:48 - 2025-06-08 21:28 - 000000000 ____D C:\Users\rossu\AppData\Local\D3DSCache
2026-10-20 19:19 - 2026-08-29 15:13 - 000002304 _____ C:\Users\rossu\Desktop\Google Chrome.lnk
2026-10-20 09:23 - 2026-07-27 13:09 - 000002137 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2026-10-20 09:23 - 2026-07-27 13:09 - 000002008 _____ C:\Users\rossu\Desktop\Google Drive.lnk
2026-10-17 22:14 - 2024-08-28 19:55 - 000000000 ____D C:\Intel
2026-10-17 21:14 - 2026-06-24 17:36 - 000000000 ____D C:\ProgramData\SP_FT_Logs
2026-10-17 20:54 - 2026-06-24 17:40 - 000000000 ____D C:\ProgramData\SP_FT_V6_Logs
2026-10-17 20:13 - 2026-01-17 21:18 - 000000000 ____D C:\Users\rossu\AppData\Roaming\Xiaomi
2026-10-17 19:57 - 2025-06-08 20:20 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2026-10-16 13:25 - 2025-06-08 20:38 - 000000000 ____D C:\Users\rossu\AppData\Local\PlaceholderTileLogoFolder
2026-10-15 10:04 - 2026-07-28 08:36 - 000000000 ____D C:\Users\rossu\AppData\Local\VS Revo Group
2026-10-14 23:12 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-10-14 22:40 - 2025-06-08 19:46 - 000342360 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-10-14 22:38 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-14 22:38 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-14 22:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-10-14 14:39 - 2026-02-17 19:25 - 000000000 ____D C:\Users\rossu\AppData\Roaming\audacity
2026-10-14 14:39 - 2025-06-28 12:46 - 000000000 ____D C:\Users\rossu\AppData\Roaming\Adobe
2026-10-14 14:38 - 2025-08-12 09:28 - 000000000 ____D C:\Users\rossu\AppData\LocalLow\Adobe
2026-10-14 14:37 - 2025-08-06 10:34 - 000000000 ____D C:\ProgramData\Zoner
2026-10-14 07:11 - 2025-09-07 18:25 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2026-10-14 07:11 - 2025-06-08 19:55 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-10-14 07:02 - 2025-06-09 15:26 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-14 06:53 - 2025-06-09 15:26 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-13 19:11 - 2026-07-02 18:28 - 000000000 ____D C:\Users\rossu\AppData\Local\Downloaded Installations
2026-10-03 18:47 - 2025-09-30 20:38 - 000000000 ____D C:\Users\rossu\AppData\Roaming\Microsoft\Excel
2026-10-03 15:18 - 2025-09-30 21:40 - 000000000 ____D C:\Users\rossu\AppData\Roaming\Microsoft\Word
2026-10-03 14:54 - 2026-01-03 22:49 - 000000000 ____D C:\Program Files\dotnet
2026-10-03 14:54 - 2025-06-23 17:52 - 000000000 ____D C:\ProgramData\Package Cache
==================== Files in the root of some directories ========
2025-10-24 16:29 - 2025-10-24 16:29 - 000000044 _____ () C:\Users\rossu\AppData\Roaming\epm_user.ini
2025-09-09 15:27 - 2026-05-10 16:23 - 000028444 _____ () C:\Users\rossu\AppData\Roaming\Safer-Networking.log
2026-10-28 11:45 - 2026-10-28 16:55 - 000382369 _____ () C:\Users\rossu\AppData\Local\ars.cache
2026-10-28 11:46 - 2026-10-28 16:56 - 001067250 _____ () C:\Users\rossu\AppData\Local\census.cache
2025-08-29 17:23 - 2025-08-29 17:23 - 000000038 _____ () C:\Users\rossu\AppData\Local\cloudready_installer_uuid
2026-10-28 11:06 - 2026-10-28 11:06 - 000000036 _____ () C:\Users\rossu\AppData\Local\housecall.guid.cache
2026-07-28 08:32 - 2026-07-28 08:35 - 018267048 _____ (VS Revo Group ) C:\Users\rossu\AppData\Local\RevoUninProSetup.exe
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-10-2026
Ran by rossu (28-10-2026 17:09:23)
Running from C:\Users\rossu\Desktop
Microsoft Windows 11 Home Version 24H2 26100.9711 (X64) (2025-06-08 19:07:47)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-1081260729-2285470396-3751614904-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-1081260729-2285470396-3751614904-503 - Limited - Disabled)
Guest (S-1-5-21-1081260729-2285470396-3751614904-501 - Limited - Disabled)
rossu (DisplayName: m**í* m) (S-1-5-21-1081260729-2285470396-3751614904-1001 - Administrators - Enabled) [MS Account] => C:\Users\rossu
WDAGUtilityAccount (S-1-5-21-1081260729-2285470396-3751614904-504 - Limited - Disabled)
WsiAccount (S-1-5-21-1081260729-2285470396-3751614904-1002 - Limited - Disabled) => C:\Users\WsiAccount
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Disabled - Up to date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Malwarebytes (Disabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
4K Video Downloader (HKLM\...\{44E23473-28B4-47E2-BD69-46E9307294DB}) (Version: 4.33.5.0172 - Open Media LLC) Hidden
7-Zip 26.04 (x64) (HKLM\...\7-Zip) (Version: 26.04 - Igor Pavlov)
ADB AppControl verze 1.8.6 (HKLM-x32\...\{64A8B963-4FB2-49B5-B2B1-35A333497319}_is1) (Version: 1.8.6 - Cyber.Cat)
Audacity 3.7.8 (HKLM\...\Audacity_is1) (Version: 3.7.8 - Audacity Team)
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 156.0.4314.50 - Microsoft Corporation)
dupeGuru 4.3.1 (HKLM\...\dupeGuru) (Version: 4.3.1 - Hardcoded Software)
Folder Size 5.9.0.6 (HKLM-x32\...\{2DFA85ED-588F-4CE3-A175-29E52C3804A8}_is1) (Version: 5.9.0.6 - MindGems)
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 133.0.2.0 - Google LLC)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 156.0.8078.48 - Google LLC)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4352 - Intel Corporation)
MediaTek SP Driver version 5.16.32.04 (HKLM\...\MediaTek SP Driver_is1) (Version: 5.16.32.04 - MediaTek.Inc.)
Microsoft .NET Host - 10.0.10 (x64) (HKLM\...\{8A8CC49F-7D1E-45DC-B7B5-35FF61A2C25E}) (Version: 80.40.55332 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.22 (x64) (HKLM\...\{872CDB4B-5DDE-4297-BD19-C93B6C93E386}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 10.0.10 (x64) (HKLM\...\{DA493AF2-5A21-4D85-BB57-757D7525EB73}) (Version: 80.40.55332 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.22 (x64) (HKLM\...\{7A046DD7-9D61-4C5D-8F5E-24EE192B1B6A}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 10.0.10 (x64) (HKLM\...\{441FCDB0-A03A-4130-A1D5-FFD8C53CFF6B}) (Version: 80.40.55332 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.22 (x64) (HKLM\...\{C43A1A89-0CA5-43FD-BDC4-3B85DAD06A41}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 156.0.4314.50 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 156.0.4314.50 - Microsoft Corporation) Hidden
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.08601 - Microsoft)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.50.35719 (HKLM\...\{AECD4ED0-8A3B-41E9-92D1-6BEE0374CCAF}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.50.35719 (HKLM\...\{61B44572-8722-4DAF-8ACF-8E742D30BCC5}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.50.35719 (HKLM-x32\...\{773AD50D-AAE6-4BA1-AD01-B5A38874C840}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.50.35719 (HKLM-x32\...\{5A0DFA55-3851-45BC-8B20-95EA4BF5812D}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719 (HKLM-x32\...\{91ee571b-0e8a-4c65-9eaf-2e2f5fc60c00}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.50.35719 (HKLM-x32\...\{0e4ccf1b-d073-4cfe-8a24-e86185719b56}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Microsoft Windows Desktop Runtime - 10.0.10 (x64) (HKLM\...\{F0BCFB2E-4878-4F6E-BD5D-3ABFF264829E}) (Version: 80.40.55332 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.22 (x64) (HKLM\...\{4CCC1CCD-6FA3-4DD5-A06B-E94EA90094CF}) (Version: 64.88.42561 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.22 (x64) (HKLM-x32\...\{a3899eef-6164-4d42-b8c3-95ae6a844821}) (Version: 8.0.22.35428 - Microsoft Corporation)
Microsoft Windows Desktop Runtime 10.0.10 (x64) (HKLM-x32\...\{866BECDA-F284-473A-9E84-0CCE816BF06F}) (Version: 10.0.10.50000 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
MiFlashPro version 7.3.706.21 (HKLM-x32\...\{3618BC41-BC4C-4B60-8B52-8A24F4D61EC1}_is1) (Version: 7.3.706.21 - Xiaomi, Inc.)
NVIDIA PhysX (HKLM-x32\...\{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}) (Version: 9.12.0213 - NVIDIA Corporation)
ONLYOFFICE 10.0.0 (x64) (HKLM\...\ONLYOFFICE Desktop Editors_is1) (Version: 10.0.0.169 - Ascensio System SIA)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Puran Utilities 3.2.1 (HKLM\...\Puran Utilities_is1) (Version: - Puran Software)
Python 3.14.2 (HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\pymanager-pythoncore-3.14-64) (Version: 3.14-64 - Python Software Foundation)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.370.102 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7589 - Realtek Semiconductor Corp.)
Reg Organizer verze 9.96 (HKLM\...\Reg Organizer_is1) (Version: 9.96 - ChemTable Software)
Revo Uninstaller Pro 5.5.4 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 5.5.4 - VS Revo Group, Ltd.)
SlimPDF Reader 1.0 (HKLM-x32\...\{7E1FEE27-F869-4D4B-8AA3-64C7FD99BD7C}_is1) (Version: 1.0 - Investintech.com Inc.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.9.85.5 - Safer-Networking Ltd.)
SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 12.0.17.0 - 2BrightSparks)
TreeSize Free V4.8.1 (HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\TreeSize Free_is1) (Version: 4.8.1 - JAM Software)
Universal Adb Driver (HKLM-x32\...\{C0E08D8D-6076-4117-B644-2AF34F35B757}) (Version: 1.0.4 - ClockworkMod)
Universal Adb Driver (HKLM-x32\...\{D9C4202E-6D51-4B06-A8F1-22316E654BCA}) (Version: 1.0.0 - ClockworkMod)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Xiaomi Driver (HKLM\...\{61EC6C70-EF24-4C88-A619-4BA943308A13}) (Version: 2.0.0 - xiaomidriver.com)
Zoner Photo Studio 17 (HKLM\...\ZonerPhotoStudio17_CZ_is1) (Version: 17.0.1.12 - ZONER software)
Chrome apps:
============
OneNet samoobsluha - Vodafone.cz (HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\7083f3a4c1407952cbbc19ee90d3bf2e) (Version: 1.0 - Google\Chrome)
Packages:
=========
Facebook -> C:\Program Files\WindowsApps\FACEBOOK.FACEBOOK_2023.531.1.0_x64__8xx8rvfyw5nnt [2026-07-06] (Meta)
iCollect Everything -> C:\Program Files\WindowsApps\iCollectEverythingLLC.iCollectEverything_1.0.58.0_x64__2jmvm2aprenqg [2026-02-27] (iCollect Everything, LLC)
JAMSoftware.TreeSizeFreeContextMenu -> C:\Users\rossu\AppData\Local\Programs\JAM Software\TreeSize Free [2026-10-25] (JAM Software)
Python Install Manager -> C:\Program Files\WindowsApps\PythonSoftwareFoundation.PythonManager_25.2.240.0_x64__3847v3x7pw1km [2026-01-28] (Python Software Foundation)
Reg Organizer Shell Integration -> C:\Program Files\Reg Organizer\Shell [2026-10-28] (Chemtable Software)
shellmenua -> C:\Program Files (x86)\NCH Software\Components\Shared\shellmenu [2026-02-17] ()
shellmenub -> C:\Program Files (x86)\NCH Software\Components\Shared\shellmenu [2026-02-17] ()
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.5.1.0_x64__8wekyb3d8bbwe [2026-10-01] (Microsoft Corp.)
Windows App Runtime DDLM 5001.373.1736.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.5001.373.1736.0-x6_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-12-25] (Microsoft Corporation)
Windows App Runtime DDLM 5001.373.1736.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.5001.373.1736.0-x8_5001.373.1736.0_x86__8wekyb3d8bbwe [2025-12-25] (Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001_Classes\CLSID\{72F6A03F-7B17-4E65-AE37-666FC9024FA2}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001_Classes\CLSID\{c209f6d0-a21b-8e02-972a-0a3019dc98ce}\localserver32 -> no filepath
CustomCLSID: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001_Classes\CLSID\{D5C4136A-93E5-4678-A6F8-0B2D9BB10999}\localserver32 -> C:\WINDOWS\System32\RunDll32.exe "C:\Program Files\Reg Organizer\Notifications.dll",Activate -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\rossu\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.25.08601\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001_Classes\CLSID\{fe7cdd54-b469-17e4-7f8e-a92442f0c8e6}\localserver32 -> no filepath
ShellIconOverlayIdentifiers: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\133.0.2.0\drivefsext.dll [2026-10-20] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\133.0.2.0\drivefsext.dll [2026-10-20] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\133.0.2.0\drivefsext.dll [2026-10-20] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\133.0.2.0\drivefsext.dll [2026-10-20] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\133.0.2.0\drivefsext.dll [2026-10-20] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\133.0.2.0\drivefsext.dll [2026-10-20] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\133.0.2.0\drivefsext.dll [2026-10-20] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\133.0.2.0\drivefsext.dll [2026-10-20] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\program\7-Zip\7-zip.dll [2026-10-05] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\133.0.2.0\drivefsext.dll [2026-10-20] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> No File
ContextMenuHandlers2: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers2: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> No File
ContextMenuHandlers3: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers3: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\program\7-Zip\7-zip.dll [2026-10-05] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\133.0.2.0\drivefsext.dll [2026-10-20] (Google LLC -> Google LLC.)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\133.0.2.0\drivefsext.dll [2026-10-20] (Google LLC -> Google LLC.)
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\System32\igfxDTCM.dll [2025-06-13] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\program\7-Zip\7-zip.dll [2026-10-05] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2022-04-03] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers1_S-1-5-21-1081260729-2285470396-3751614904-1001: [!!KuShellExtension-{72F6A03F-7B17-4E65-AE37-666FC9024FA2}] -> {72F6A03F-7B17-4E65-AE37-666FC9024FA2} => -> No File
ContextMenuHandlers2_S-1-5-21-1081260729-2285470396-3751614904-1001: [!!KuShellExtension-{72F6A03F-7B17-4E65-AE37-666FC9024FA2}] -> {72F6A03F-7B17-4E65-AE37-666FC9024FA2} => -> No File
ContextMenuHandlers4_S-1-5-21-1081260729-2285470396-3751614904-1001: [!!KuShellExtension-{72F6A03F-7B17-4E65-AE37-666FC9024FA2}] -> {72F6A03F-7B17-4E65-AE37-666FC9024FA2} => -> No File
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\rossu\Desktop\Google Drive.lnk -> C:\Program Files\Google\Drive File Stream\launch.bat ()
ShortcutWithArgument: C:\Users\rossu\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Default"
ShortcutWithArgument: C:\Users\rossu\Desktop\OneNet samoobsluha - Vodafone.cz.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Default" --ignore-profile-directory-if-not-exists hxxps://onenetsamoobsluha.vodafone.cz/onsc/billing/billing-overview/smart-overview
ShortcutWithArgument: C:\Users\rossu\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_lpfhjfipbfpdiipkfgkfkadmfihmlmpo\OneNet samoobsluha - Vodafone.cz.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=lpfhjfipbfpdiipkfgkfkadmfihmlmpo
ShortcutWithArgument: C:\Users\rossu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\OneNet samoobsluha - Vodafone.cz.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=lpfhjfipbfpdiipkfgkfkadmfihmlmpo
==================== Loaded Modules (Whitelisted) =============
2025-06-01 20:10 - 2026-10-05 15:00 - 000101888 _____ (Igor Pavlov) [File not signed] D:\program\7-Zip\7-zip.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\Software\Classes\regfile: <==== ATTENTION
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\Software\Classes\.reg: => <==== ATTENTION
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\Software\Classes\.bat: => <==== ATTENTION
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\Software\Classes\.cmd: => <==== ATTENTION
==================== Internet Explorer (Whitelisted) =============
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
There are 7940 more sites.
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\123simsen.com -> www.123simsen.com
There are 7940 more sites.
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\...\123simsen.com -> www.123simsen.com
There are 7942 more sites.
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2026-03-27 18:26 - 2026-10-18 21:32 - 000455619 ____R C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com
There are 15636 more lines.
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.0.1
Windows Firewall is enabled.
Network Binding:
=============
Wi-Fi: Qualcomm Atheros AR956x Wireless Network Adapter -> athw10x.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
vms_vsf: Hyper-V Virtual Switch Extension Filter
ms_l1vhlwf: Nested Network Virtualization
vms_vsp: Hyper-V Virtual Switch Extension Protocol
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\rossu\Desktop\tapety\thehandwallpaperfixedlogo.png
HKU\S-1-5-21-1081260729-2285470396-3751614904-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|D:\program\TFTUnlock Tool
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files (x86)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\rossu\AppData\Roaming
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\rossu\AppData\Local
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "DriverUpdUI.exe"
HKLM\...\StartupApproved\Run: => "msedge_cleanup_{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run32: => "SDTray"
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\StartupApproved\StartupFolder: => "Google Drive.lnk"
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\StartupApproved\Run: => "OneDriveSetup"
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\StartupApproved\Run: => "qBittorrent"
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_7434B22AF5F101868BBBB0D3FE00BC41"
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-1081260729-2285470396-3751614904-1001\...\StartupApproved\Run: => "Zoner Photo Studio Autoupdate"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{EFE5B582-2174-4F33-BBEE-E1E88840DB9E}D:\program\qbittorrent\qbittorrent.exe] => (Allow) D:\program\qbittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [UDP Query User{CE8AD95C-DC42-45E6-95BD-712022E371DD}D:\program\qbittorrent\qbittorrent.exe] => (Allow) D:\program\qbittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [{14489787-3B6E-496D-895F-1F47EF726580}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{B7E483AD-1452-48EA-9D06-0D1E9281BE2B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{DB99F756-39A0-44CC-A8D2-451E73882BC0}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{E95BAF8F-66D6-4074-9B38-AC7DDAA595EA}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{BB81538A-2D7C-4994-B824-B95410FC949E}] => (Allow) LPort=57209
FirewallRules: [{53DB1B92-9FDF-4D32-860C-DC184D7AC23D}] => (Allow) LPort=57210
FirewallRules: [{36AB5F56-833C-4D2C-B362-41F90675566C}] => (Allow) LPort=57211
FirewallRules: [{92CA9EAE-D5A6-40C1-A36A-A2F3EAA730F0}] => (Allow) LPort=57212
FirewallRules: [{9C0F266D-1AAE-4FCF-9671-1F9B94ABC496}] => (Allow) LPort=57213
FirewallRules: [{000C491F-D2FF-4A61-B9FC-8CCA82666059}] => (Allow) LPort=57214
FirewallRules: [{83A9CB4C-04C7-4373-9657-246CD3FA6774}] => (Allow) LPort=57215
FirewallRules: [{DC979251-CCC1-413E-ABDD-4732839ADEF0}] => (Allow) LPort=57216
FirewallRules: [{334C912B-B868-4FEE-9D99-19109A318350}] => (Allow) LPort=57217
FirewallRules: [{67165BEC-E6E8-47F1-8361-BC5480B9EB45}] => (Allow) LPort=57218
FirewallRules: [{675376B0-BF83-4CC7-BD7E-C881446EB1BE}] => (Allow) LPort=57209
FirewallRules: [{8741DD10-1A10-42EC-A125-D5177066706C}] => (Allow) LPort=57210
FirewallRules: [{6140F7CB-FBB9-43DD-BFC8-C1EF5C1BEE43}] => (Allow) LPort=57211
FirewallRules: [{E0C19D5C-0289-461A-9628-A7384D15E109}] => (Allow) LPort=57212
FirewallRules: [{11F8BF9D-95DE-4B5E-8DEB-640FCF74F057}] => (Allow) LPort=57213
FirewallRules: [{F37EF0A3-1AAE-4BCE-B203-3C55C9CD2B3A}] => (Allow) LPort=57214
FirewallRules: [{092301A7-9F0A-439D-BDF7-0A499188E9D1}] => (Allow) LPort=57215
FirewallRules: [{211B4FAB-0938-4AC1-B20C-83693C40C7F7}] => (Allow) LPort=57216
FirewallRules: [{BBCC5477-54F1-4E67-80F3-B595EADAD912}] => (Allow) LPort=57217
FirewallRules: [{BADC8D6F-7164-4D48-87D8-B927CD7F0E34}] => (Allow) LPort=57218
FirewallRules: [{8223F76A-B574-4D2F-92D3-957DCAE5455D}] => (Allow) LPort=23007
FirewallRules: [{BF316500-44AD-4BF9-B8F4-243C5CFDD529}] => (Allow) LPort=23008
FirewallRules: [{80ADDFAE-C8BB-410F-81F1-6DD60A6A9C73}] => (Allow) LPort=33009
FirewallRules: [{3C5F1E7F-6FE3-4CEA-8782-9CAF0C60D793}] => (Allow) LPort=33010
FirewallRules: [{4537B8C4-7A7F-4BA4-86AF-089F87786445}] => (Allow) LPort=33011
FirewallRules: [{7B9BE149-E91B-4043-AE5D-FB6821F8BFFF}] => (Allow) LPort=43012
FirewallRules: [{1C0AFFC5-3F31-4C62-B508-2369BDC32CE8}] => (Allow) LPort=43013
FirewallRules: [{6C1EA11F-2259-4168-94B9-677AB80D5A26}] => (Allow) LPort=53014
FirewallRules: [{27BA839A-D924-4A06-953A-8CD31FF36EC3}] => (Allow) LPort=53015
FirewallRules: [{075C0727-2888-43FD-82B7-7A6616C95787}] => (Allow) LPort=53016
FirewallRules: [{09FE7EF1-70C4-4B89-ADD8-B3B38B10150A}] => (Allow) LPort=23007
FirewallRules: [{B594E2E8-A95D-4E97-A1A9-8D31327DF9E1}] => (Allow) LPort=23008
FirewallRules: [{8130D579-9008-4685-B3B1-6E3CA3BDFEED}] => (Allow) LPort=33009
FirewallRules: [{F36711DC-AFA6-44C0-9E5F-83C97BD6BBCE}] => (Allow) LPort=33010
FirewallRules: [{FB385CFD-0BBE-4576-921B-6B2D48DBAFEF}] => (Allow) LPort=33011
FirewallRules: [{75F2604E-02F3-4A2E-933C-2D1EE763CAEA}] => (Allow) LPort=43012
FirewallRules: [{EA25C18B-6197-4BE4-8957-CFE7B18EFDAA}] => (Allow) LPort=43013
FirewallRules: [{6C1188B6-6232-4CB7-B931-A7D0B2169C28}] => (Allow) LPort=53014
FirewallRules: [{094EFA6D-9945-49E2-A79F-B0E9592FDCA0}] => (Allow) LPort=53015
FirewallRules: [{0B84950B-DB66-46D5-AB92-452EF1069E29}] => (Allow) LPort=53016
FirewallRules: [{917CCB24-11BD-4783-B0D8-63E977DF7DD3}] => (Allow) LPort=50053
FirewallRules: [{5032F6E1-285A-4378-83D9-7316F131BD02}] => (Allow) LPort=50053
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{695D9C26-4B19-49C5-BFB0-BBD965FB6163}] => (Allow) D:\program\Photo Studio 17\Program32\MediaServer.exe (ZONER software, a.s. -> ZONER software)
FirewallRules: [TCP Query User{848E76A9-A630-44A3-98CE-32C34D91EEEC}C:\program files (x86)\miflashpro\xldl\download\minithunderplatform.exe] => (Allow) C:\program files (x86)\miflashpro\xldl\download\minithunderplatform.exe (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
FirewallRules: [UDP Query User{0484C49C-96F2-4D6B-9DD5-30D6F6013974}C:\program files (x86)\miflashpro\xldl\download\minithunderplatform.exe] => (Allow) C:\program files (x86)\miflashpro\xldl\download\minithunderplatform.exe (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
FirewallRules: [TCP Query User{CD1AC819-E4C9-4B98-B728-43E7A08164C1}D:\program\adb_appcontrol\adb\adb.exe] => (Allow) D:\program\adb_appcontrol\adb\adb.exe (Google LLC -> )
FirewallRules: [UDP Query User{833949E3-BC83-49A9-9C81-CA259F8EF4E2}D:\program\adb_appcontrol\adb\adb.exe] => (Allow) D:\program\adb_appcontrol\adb\adb.exe (Google LLC -> )
FirewallRules: [{1A28F4BC-2273-42D8-9EAD-6008262B1577}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{9AA05400-5E8E-441C-B81C-E1EA4E8D25FB}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\copilotapp.exe (Microsoft Corporation -> Microsoft Corporation)
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
==================== Restore Points =========================
25-10-2026 13:24:07 Installed Xiaomi Driver
==================== Faulty Device Manager Devices ============
Name: Android ADB Interface
Description: Android ADB Interface
Class Guid: {3f966bd9-fa04-4ec5-991c-d326973b5128}
Manufacturer: Xiaomi Technology, Inc.
Service: WinUSB
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (10/28/2026 05:00:31 PM) (Source: VSS) (EventID: 12292) (User: )
Description: Chyba služby Stínová kopie svazků: Při vytváření třídy zprostředkovatele stínové kopie modelu COM s identifikátorem CLSID {e5b50e88-1fd9-4123-bdad-d0e79026fa55} [0x80110802] došlo k chybě.
Operace:
Získat rozhraní umožňující volání pro tohoto zprostředkovatele
Zobrazit seznam rozhraní pro všechny zprostředkovatele podporující tento kontext
Odstranit stínové kopie
Kontext:
ID zprostředkovatele: {02029a6e-d74a-4ecd-ba26-c12be9323128}
ID třídy: {e5b50e88-1fd9-4123-bdad-d0e79026fa55}
Kontext snímku: -1
Kontext snímku: -1
Kontext spuštění: Coordinator
Error: (10/28/2026 05:00:31 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {e5b50e88-1fd9-4123-bdad-d0e79026fa55} a názvem SW_PROV nelze spustit. [0x80110802]
Operace:
Získat rozhraní umožňující volání pro tohoto zprostředkovatele
Zobrazit seznam rozhraní pro všechny zprostředkovatele podporující tento kontext
Odstranit stínové kopie
Kontext:
ID zprostředkovatele: {02029a6e-d74a-4ecd-ba26-c12be9323128}
ID třídy: {e5b50e88-1fd9-4123-bdad-d0e79026fa55}
Kontext snímku: -1
Kontext snímku: -1
Kontext spuštění: Coordinator
Error: (10/28/2026 05:00:31 PM) (Source: VSS) (EventID: 12292) (User: )
Description: Chyba služby Stínová kopie svazků: Při vytváření třídy zprostředkovatele stínové kopie modelu COM s identifikátorem CLSID {e5b50e88-1fd9-4123-bdad-d0e79026fa55} [0x80110802] došlo k chybě.
Operace:
Získat rozhraní umožňující volání pro tohoto zprostředkovatele
Zobrazit seznam rozhraní pro všechny zprostředkovatele podporující tento kontext
Získat vlastnosti stínových kopií
Odstranit stínové kopie
Kontext:
ID zprostředkovatele: {02029a6e-d74a-4ecd-ba26-c12be9323128}
ID třídy: {e5b50e88-1fd9-4123-bdad-d0e79026fa55}
Kontext snímku: -1
Kontext snímku: -1
Kontext spuštění: Coordinator
Kontext spuštění: Coordinator
Error: (10/28/2026 05:00:31 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {e5b50e88-1fd9-4123-bdad-d0e79026fa55} a názvem SW_PROV nelze spustit. [0x80110802]
Operace:
Získat rozhraní umožňující volání pro tohoto zprostředkovatele
Zobrazit seznam rozhraní pro všechny zprostředkovatele podporující tento kontext
Získat vlastnosti stínových kopií
Odstranit stínové kopie
Kontext:
ID zprostředkovatele: {02029a6e-d74a-4ecd-ba26-c12be9323128}
ID třídy: {e5b50e88-1fd9-4123-bdad-d0e79026fa55}
Kontext snímku: -1
Kontext snímku: -1
Kontext spuštění: Coordinator
Kontext spuštění: Coordinator
Error: (10/28/2026 05:00:31 PM) (Source: VSS) (EventID: 12292) (User: )
Description: Chyba služby Stínová kopie svazků: Při vytváření třídy zprostředkovatele stínové kopie modelu COM s identifikátorem CLSID {e5b50e88-1fd9-4123-bdad-d0e79026fa55} [0x80110802] došlo k chybě.
Operace:
Získat rozhraní umožňující volání pro tohoto zprostředkovatele
Zobrazit seznam rozhraní pro všechny zprostředkovatele podporující tento kontext
Dotaz na stínové kopie
Kontext:
ID zprostředkovatele: {02029a6e-d74a-4ecd-ba26-c12be9323128}
ID třídy: {e5b50e88-1fd9-4123-bdad-d0e79026fa55}
Kontext snímku: -1
Kontext snímku: -1
Kontext spuštění: Coordinator
Error: (10/28/2026 05:00:31 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {e5b50e88-1fd9-4123-bdad-d0e79026fa55} a názvem SW_PROV nelze spustit. [0x80110802]
Operace:
Získat rozhraní umožňující volání pro tohoto zprostředkovatele
Zobrazit seznam rozhraní pro všechny zprostředkovatele podporující tento kontext
Dotaz na stínové kopie
Kontext:
ID zprostředkovatele: {02029a6e-d74a-4ecd-ba26-c12be9323128}
ID třídy: {e5b50e88-1fd9-4123-bdad-d0e79026fa55}
Kontext snímku: -1
Kontext snímku: -1
Kontext spuštění: Coordinator
Error: (10/28/2026 05:00:29 PM) (Source: VSS) (EventID: 12292) (User: )
Description: Chyba služby Stínová kopie svazků: Při vytváření třídy zprostředkovatele stínové kopie modelu COM s identifikátorem CLSID {e5b50e88-1fd9-4123-bdad-d0e79026fa55} [0x80110802] došlo k chybě.
Operace:
Získat rozhraní umožňující volání pro tohoto zprostředkovatele
Zobrazit seznam rozhraní pro všechny zprostředkovatele podporující tento kontext
Dotaz na stínové kopie
Kontext:
ID zprostředkovatele: {02029a6e-d74a-4ecd-ba26-c12be9323128}
ID třídy: {e5b50e88-1fd9-4123-bdad-d0e79026fa55}
Kontext snímku: -1
Kontext snímku: -1
Kontext spuštění: Coordinator
Error: (10/28/2026 05:00:29 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {e5b50e88-1fd9-4123-bdad-d0e79026fa55} a názvem SW_PROV nelze spustit. [0x80110802]
Operace:
Získat rozhraní umožňující volání pro tohoto zprostředkovatele
Zobrazit seznam rozhraní pro všechny zprostředkovatele podporující tento kontext
Dotaz na stínové kopie
Kontext:
ID zprostředkovatele: {02029a6e-d74a-4ecd-ba26-c12be9323128}
ID třídy: {e5b50e88-1fd9-4123-bdad-d0e79026fa55}
Kontext snímku: -1
Kontext snímku: -1
Kontext spuštění: Coordinator
System errors:
=============
Error: (10/28/2026 04:06:25 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
Description: Updated Secure Boot certificates are available on this device but have not yet been applied to the firmware. Review the published guidance to complete the update and maintain full protection. This device signature information is included here.
DeviceAttributes: FirmwareManufacturer:Insyde Corp.;FirmwareVersion:V1.03;OEMModelNumber:Aspire ES1-731G;OEMModelBaseBoard:Tashigi_BA;OEMManufacturerName:Acer;OSArchitecture:amd64;
BucketId: 75ec579b2a489503bdf7d76dfa9fd8b3ee292ecee39fd8ab10f30ddde9c8aa7a
BucketConfidenceLevel: High Confidence
UpdateType: Windows UEFI CA 2023 (DB), Option ROM CA 2023 (DB), 3P UEFI CA 2023 (DB), KEK 2023, Boot Manager (2023)
For more information, please see https://go.microsoft.com/fwlink/?linkid=2301018.
Error: (10/28/2026 04:06:25 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1803) (User: NT AUTHORITY)
Description: A PK-signed Key Exchange Key (KEK) cannot be found for this device. Check with the device manufacturer for proper key provisioning.
This device signature information is included here.
DeviceAttributes: FirmwareManufacturer:Insyde Corp.;FirmwareVersion:V1.03;OEMModelNumber:Aspire ES1-731G;OEMModelBaseBoard:Tashigi_BA;OEMManufacturerName:Acer;OSArchitecture:amd64;
BucketId: 75ec579b2a489503bdf7d76dfa9fd8b3ee292ecee39fd8ab10f30ddde9c8aa7a
BucketConfidenceLevel: High Confidence.
For more information, please see https://go.microsoft.com/fwlink/?linkid=2339472
Error: (10/28/2026 04:03:30 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby Dnscache bylo dosaženo časového limitu (30000 ms).
Error: (10/28/2026 04:03:00 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby Dnscache bylo dosaženo časového limitu (30000 ms).
Error: (10/28/2026 04:02:30 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby Dnscache bylo dosaženo časového limitu (30000 ms).
Error: (10/28/2026 04:02:00 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby Dnscache bylo dosaženo časového limitu (30000 ms).
Error: (10/28/2026 04:01:30 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby Dnscache bylo dosaženo časového limitu (30000 ms).
Error: (10/28/2026 04:01:00 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby Dnscache bylo dosaženo časového limitu (30000 ms).
Windows Defender:
================
TimeCreated : 28.10.2026 13:16:20
Message : Antivirová ochrana v programu Microsoft Defender ŝсáñ ђāś вёęń šťŏρρёδ ьзƒōяэ ĉõмρĺεťΐóη.%п %ŧŜčåʼn ΪĎ:%ь{
9D7CE9E6-8D9F-4B52-AF5D-97B6078E061A}%ⁿ %ťŞćâñ Τỳрė:%ъAntimalwarový program%ņ %тŜçăņ Рǻŗámетєŕš:%вRychlé
prohledávání%и %ťŮśêŕ:%вNT AUTHORITY\SYSTEM%ņ %тŠŧőρ Ґėăŝǿη:%вΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
TimeCreated : 25.10.2026 15:09:43
Message : Antivirová ochrana v programu Microsoft Defender ŝсáñ ђāś вёęń šťŏρρёδ ьзƒōяэ ĉõмρĺεťΐóη.%п %ŧŜčåʼn ΪĎ:%ь{
4822C467-4E51-4A2B-9C3F-ECECA9CDA3AF}%ⁿ %ťŞćâñ Τỳрė:%ъAntimalwarový program%ņ %тŜçăņ Рǻŗámетєŕš:%вRychlé
prohledávání%и %ťŮśêŕ:%вNT AUTHORITY\SYSTEM%ņ %тŠŧőρ Ґėăŝǿη:%вЅçђēđμĺēđ ѕćàń ẃäś ѕкіρφ℮ď вεćāùŝ℮ тћě łáŝ
ť ѕμç¢℮śşƒύľ šćąη ẅāѕ шΐτђιп ťђэ łαѕτ 7 δąýѕ
TimeCreated : 25.10.2026 11:01:23
Message : Antivirová ochrana v programu Microsoft Defender ŝсáñ ђāś вёęń šťŏρρёδ ьзƒōяэ ĉõмρĺεťΐóη.%п %ŧŜčåʼn ΪĎ:%ь{
FC76592C-0C8E-4DCF-ACCE-1FC0BF918B4E}%ⁿ %ťŞćâñ Τỳрė:%ъAntimalwarový program%ņ %тŜçăņ Рǻŗámетєŕš:%вÚplné p
rohledávání%и %ťŮśêŕ:%вmiXa\rossu%ņ %тŠŧőρ Ґėăŝǿη:%вЦñĸñбωŋ
TimeCreated : 23.10.2026 18:55:28
Message : Antivirová ochrana v programu Microsoft Defender ŝсáñ ђāś вёęń šťŏρρёδ ьзƒōяэ ĉõмρĺεťΐóη.%п %ŧŜčåʼn ΪĎ:%ь{
4C6460EA-D0CF-4D16-8A5B-547E312C270B}%ⁿ %ťŞćâñ Τỳрė:%ъAntimalwarový program%ņ %тŜçăņ Рǻŗámетєŕš:%вRychlé
prohledávání%и %ťŮśêŕ:%вNT AUTHORITY\SYSTEM%ņ %тŠŧőρ Ґėăŝǿη:%вΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
TimeCreated : 23.10.2026 18:43:40
Message : Antivirová ochrana v programu Microsoft Defender ŝсáñ ђāś вёęń šťŏρρёδ ьзƒōяэ ĉõмρĺεťΐóη.%п %ŧŜčåʼn ΪĎ:%ь{
2DFFB2B2-CD54-400A-A170-3E4750249F4A}%ⁿ %ťŞćâñ Τỳрė:%ъAntimalwarový program%ņ %тŜçăņ Рǻŗámетєŕš:%вRychlé
prohledávání%и %ťŮśêŕ:%вNT AUTHORITY\SYSTEM%ņ %тŠŧőρ Ґėăŝǿη:%вΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
TimeCreated : 17.10.2026 20:56:43
Message : Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software
.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... 6&enterpri
se=0
Název: Adware:AndroidOS/Fictus.A!MTB
ID: 347926
Závažnost: Vysoké
Kategorie: Software placený zobrazováním reklamy
Cesta: containerfile:_C:\Users\rossu\Downloads\apkfiles.com_47751_biophilia.apk; file:_C:\Users\rossu\D
ownloads\apkfiles.com_47751_biophilia.apk->classes.dex
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Uživatel
Uživatel: miXa\rossu
Název procesu: Unknown
Verze bezpečnostních informací: AV: 1.461.67.0, AS: 1.461.67.0, NIS: 1.461.67.0
Verze modulu: AM: 1.1.26090.9, NIS: 1.1.26090.9
TimeCreated : 16.10.2026 17:42:06
Message : Antivirová ochrana v programu Microsoft Defender ŝсáñ ђāś вёęń šťŏρρёδ ьзƒōяэ ĉõмρĺεťΐóη.%п %ŧŜčåʼn ΪĎ:%ь{
383B718C-CCB8-4B4F-86DC-E35947D03F2E}%ⁿ %ťŞćâñ Τỳрė:%ъAntimalwarový program%ņ %тŜçăņ Рǻŗámетєŕš:%вRychlé
prohledávání%и %ťŮśêŕ:%вNT AUTHORITY\SYSTEM%ņ %тŠŧőρ Ґėăŝǿη:%вΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
TimeCreated : 16.10.2026 15:28:57
Message : Antivirová ochrana v programu Microsoft Defender ŝсáñ ђāś вёęń šťŏρρёδ ьзƒōяэ ĉõмρĺεťΐóη.%п %ŧŜčåʼn ΪĎ:%ь{
A4734C86-A71C-4297-B927-A7A7AF34D969}%ⁿ %ťŞćâñ Τỳрė:%ъAntimalwarový program%ņ %тŜçăņ Рǻŗámетєŕš:%вRychlé
prohledávání%и %ťŮśêŕ:%вNT AUTHORITY\SYSTEM%ņ %тŠŧőρ Ґėăŝǿη:%вΓΡ€ ĉòийεçťΐбň ґύⁿđøώņ
CodeIntegrity:
===============
Date: 2026-10-13 19:38:24
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2026-10-09 16:54:48
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\Google\Chrome\Application\154.0.8037.99\libLiteRtWebGpuAccelerator.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: Insyde Corp. V1.03 04/20/2015
Motherboard: Acer Tashigi_BA
Processor: Intel(R) Pentium(R) CPU N3700 @ 1.60GHz
Percentage of memory in use: 80%
Total physical RAM: 4009.76 MB
Available physical RAM: 772.49 MB
Total Virtual: 9129.76 MB
Available Virtual: 4066.25 MB
==================== Drives ================================
Disk 0 - Drive c: () (Fixed) (Total:445.37 GB) (Free:351.51 GB) (Model: KINGSTON SA400S37480G) (Protected) NTFS
Disk 1 - Drive d: (program) (Fixed) (Total:385.65 GB) (Free:234.41 GB) (Model: ST1000LM024 HN-M101MBB) (Protected) NTFS
Disk 1 - Drive e: (dokument) (Fixed) (Total:545.87 GB) (Free:284.34 GB) (Model: ST1000LM024 HN-M101MBB) (Protected) NTFS
Disk 0 - Drive g: (Google Drive) (Fixed) (Total:15 GB) (Free:11.82 GB) (Model: KINGSTON SA400S37480G) FAT32
Disk 0 - \\?\Volume{4b9d5381-3ac7-4771-8439-456dc87e904a}\ () (Fixed) (Total:0 bytes) (Free:0 bytes)
Disk 0 - \\?\Volume{1e7ba619-44e6-4ac7-bb7a-fb93f42a6b0b}\ () (Fixed) (Total:824 MB) (Free:77.6 MB) NTFS
Disk 0 - \\?\Volume{2f2a4a8d-1a5d-4744-91d4-dddc031369c2}\ () (Fixed) (Total:0 bytes) (Free:0 bytes)
Disk 0 - \\?\Volume{7a5c7e02-fac7-4092-a97b-85151bbf95ed}\ () (Fixed) (Total:96 MB) (Free:58.65 MB) FAT32
==================== MBR & Partition Table ====================
============================================================
Disk: 0 (Size: 447.13 GB) (Disk ID: 0F17B634)
Partitions:
===========
Partition Style : GPT
Partition Count : 6
Disk ID : {F47A30E5-B751-467C-B09D-EDE861F1ADC9}
Usable Offset : 0.02 MB
Usable Length : 447.13 GB
Max Partitions : 128
Partition 1
Type : Basic Data Partition
Size : 100 MB
Offset : 1 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {4B9D5381-3AC7-4771-8439-456DC87E904A}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 101 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {C1DD14AA-22EE-4D2A-9825-077D2401CB3D}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : EFI System Partition
Size : 100 MB
Offset : 117 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {7A5C7E02-FAC7-4092-A97B-85151BBF95ED}
GPT Name : EFI system partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Basic Data Partition
Size : 445.37 GB
Offset : 217 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {26E13345-E553-4874-BF0B-5E5321C8A3EB}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 5
Type : Windows Recovery
Size : 824 MB
Offset : 456277 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {1E7BA619-44E6-4AC7-BB7A-FB93F42A6B0B}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
Partition 6
Type : Basic Data Partition
Size : 760 MB
Offset : 457102 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {2F2A4A8D-1A5D-4744-91D4-DDDC031369C2}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : No
Platform Required: No
------------------------------------------------------------
============================================================
Disk: 1 (Size: 931.51 GB) (Disk ID: 0382F705)
Partitions:
===========
Partition Style : GPT
Partition Count : 2
Disk ID : {3D9269E9-5512-4F04-8E2E-019692FD2AA4}
Usable Offset : 0.02 MB
Usable Length : 931.51 GB
Max Partitions : 128
Partition 1
Type : Basic Data Partition
Size : 385.65 GB
Offset : 1 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {EDE0694E-9009-4E6C-A065-20F3D99ED780}
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Basic Data Partition
Size : 545.87 GB
Offset : 394902 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {B0D893DB-87EA-4ABD-BC60-759D481990A5}
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
============================================================
==================== End of Addition.txt =======================
Prosím o prevenci
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Prosím o prevenci
Ahoj,
odinstaluj SpyBot
Restart
Vycisti PC s Ccleanerom vcetne registrov
odinstaluj SpyBot
Restart
Vycisti PC s Ccleanerom vcetne registrov
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Přispějete na provoz fóra?