Prosím o prevetivní kontrolu
Odeslal: 12 Lis 2026 12:52
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-11-2026 01
Ran by Daniel (administrator) on DESKTOP-DBCIFFE (12-11-2026 12:45:45)
Running from C:\Users\Daniel\Desktop\FRST64.exe
Loaded Profiles: Daniel
Platform: Microsoft Windows 10 Pro Version 22H2 19045.7846 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe
(BitTorrent Inc -> BitTorrent, Inc.) C:\Program Files (x86)\uTorrent\uTorrent.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eServiceHost.exe <2>
(C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2611.32041.0_x64__8wekyb3d8bbwe\M365Copilot.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\157.0.4341.46\msedgewebview2.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(F:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) F:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe <3>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <14>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\157.0.4341.46\msedgewebview2.exe <5>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2611.32041.0_x64__8wekyb3d8bbwe\M365Copilot.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_37503b637f6a53da\Display.NvContainer\NVDisplay.Container.exe
(Riot Games, Inc. -> Riot Games, Inc.) C:\Program Files\Riot Vanguard\vgtray.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.33\AsusFanControlService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_37503b637f6a53da\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
(svchost.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsStore_22609.1401.13.0_x64__8wekyb3d8bbwe\StoreDesktopExtension.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Valve Corp. -> Valve Corporation) F:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <7>
(Valve Corp. -> Valve Corporation) F:\Program Files (x86)\Steam\steam.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [282336 2026-11-04] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [7336968 2026-11-09] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8783616 2015-12-25] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Run: [Steam] => F:\Program Files (x86)\Steam\steam.exe [5775512 2026-09-03] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Run: [EpicGamesLauncher] => F:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [50913744 2025-12-13] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [486448 2025-05-15] (AVB Disc Soft, SIA -> Disc Soft Limited)
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [45649368 2026-10-13] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Run: [MicrosoftEdgeAutoLaunch_CA39946F614AD7FFFC070BF82DF8A22E] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [5073224 2026-11-07] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4944024 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\157.0.8103.51\Installer\chrmstp.exe [8160920 2026-11-11] (Google LLC -> Google LLC)
Startup: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe [225280 2025-05-17] (Leader Technologies) [File not signed]
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {860C1A4E-5A38-4D46-9BEC-CE1E7EA872B5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1617408 2026-08-03] (Adobe Inc. -> Adobe Inc.)
Task: {BA65C790-520C-407C-9835-026F2255FC27} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2096088 2018-01-04] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {4976B771-BCE5-4CF2-BF46-387F9EAA8663} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [1448408 2018-01-12] (ASUSTeK Computer Inc. -> )
Task: {6B7249A7-F8B4-4486-BB4C-07BD8E208572} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [4417496 2017-11-24] (ASUSTeK Computer Inc. -> TODO: <Company name>)
Task: {8397510D-A0BD-4897-8941-498890F68220} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem157.0.8089.0{B917684C-2C01-4E6E-8CF3-FE06015066C0} => C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe [9958552 2026-10-06] (Google LLC -> Google LLC)
Task: {015F9BD0-8EFF-4617-82C3-57E18D70DEC2} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4944024 2026-08-11] (Google LLC -> Google LLC)
Task: {F9C10651-133B-4291-8F54-9371020BFAB5} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4944024 2026-08-11] (Google LLC -> Google LLC)
Task: {E62C4F86-8E28-488D-A7E5-53AB28DE7284} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelperOnUnlock => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4944024 2026-08-11] (Google LLC -> Google LLC)
Task: {2BC108AA-C93F-4F3C-A75D-7F22CD0F15BC} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3324528 2025-10-15] (NVIDIA Corporation -> NVIDIA Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{836499d7-c834-44d7-b008-fa3ca5cccd97}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{836499d7-c834-44d7-b008-fa3ca5cccd97}: [DhcpDomain] home
FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-10-13] (Adobe Inc. -> Adobe Systems Inc.)
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default [2026-11-12]
Error reading preferences. Please make sure ESET "Secure Browser" option is disabled. <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-30] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2026-11-12] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2026-11-06] [UpdateUrl:0] <==== ATTENTION
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]
Chrome:
=======
CHR Profile: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default [2026-11-12]
Error reading preferences. Please make sure ESET "Secure Browser" option is disabled. <==== ATTENTION
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-11-11] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2023-12-05] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-24] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-11-11] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-12-05] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2026-11-08] [UpdateUrl:0] <==== ATTENTION
CHR HKU\S-1-5-21-3759179616-782039627-4007026311-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [oombnmpbbhbakfpfgdflaajkhicgfaam]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [182776 2026-08-03] (Adobe Inc. -> Adobe Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe [382424 2018-01-05] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.33\AsusFanControlService.exe [1340376 2017-12-05] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [3642064 2026-11-12] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4956208 2025-05-15] (AVB Disc Soft, SIA -> Disc Soft Limited)
S3 DiscordSystemHelper; C:\Program Files\Common Files\Discord\Discord\DiscordSystemHelper.exe [2247552 2026-09-21] (discord-code-sign-windows-admin -> Discord Inc.)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5743840 2026-11-04] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [5319968 2026-11-04] (ESET, spol. s r.o. -> ESET)
R2 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [5319968 2026-11-04] (ESET, spol. s r.o. -> ESET)
S3 EpicGamesUpdater; F:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3344336 2025-12-13] (Epic Games Inc. -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-08-02] (Epic Games Inc. -> Epic Games, Inc.)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_37503b637f6a53da\Display.NvContainer\NVDisplay.Container.exe [1275624 2026-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914728 2026-10-27] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [148934744 2026-11-09] (Riot Games, Inc. -> Riot Games, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.23100.2009-0\NisSrv.exe [3121120 2023-12-04] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.23100.2009-0\MsMpEng.exe [133704 2023-12-04] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 wuauserv; C:\Windows\system32\wuaueng.dll [3448320 2026-11-11] (Microsoft Windows -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2017-12-26] (ASUSTeK Computer Inc. -> )
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [File not signed]
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [42256 2025-05-17] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [63696 2025-05-17] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 e1dexpress; C:\Windows\System32\DriverStore\FileRepository\e1d.inf_amd64_9959ba283455536d\e1d.sys [611912 2023-07-18] (Intel Corporation -> Intel Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [234304 2026-11-04] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [143056 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [17880 2026-09-03] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [372232 2026-11-04] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [55160 2026-11-04] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [80944 2026-11-04] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [124824 2026-11-04] (ESET, spol. s r.o. -> ESET)
R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [34064 2017-12-26] (ASUSTeK Computer Inc. -> )
R3 SteamStreamingMicrophone; C:\Windows\system32\drivers\SteamStreamingMicrophone.sys [40736 2020-06-01] (Valve Corp. -> )
R3 SteamStreamingSpeakers; C:\Windows\system32\drivers\SteamStreamingSpeakers.sys [40736 2020-06-01] (Valve Corp. -> )
S3 VBVoicemeeterVAIOMME; C:\Windows\System32\DriverStore\FileRepository\vbvoicemeetervaio64_win10.inf_amd64_88e966008b21fe10\vbvoicemeetervaio64_win10.sys [296392 2026-07-23] (BUREL VINCENT Entrepreneur individuel -> VB-Audio Software)
R1 vgk; \??\C:\Program Files\Riot Vanguard\vgk.sys [108689048 2026-11-09] (Riot Games, Inc. -> )
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [55744 2023-12-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [578856 2023-12-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105768 2023-12-04] (Microsoft Windows -> Microsoft Corporation)
S4 NvModuleTracker; \SystemRoot\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys (No File)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-11-12 12:45 - 2026-11-12 12:46 - 000018993 _____ C:\Users\Daniel\Desktop\FRST.txt
2026-11-12 12:45 - 2026-11-12 12:46 - 000000000 ____D C:\FRST
2026-11-12 12:43 - 2026-11-12 12:43 - 002459648 _____ (Farbar) C:\Users\Daniel\Desktop\FRST64.exe
2026-11-12 10:32 - 2026-11-12 10:32 - 000991977 _____ C:\Users\Daniel\Desktop\Tesneni.jfif
2026-11-11 23:59 - 2026-11-11 23:59 - 000000722 _____ C:\Users\Daniel\Desktop\Fotky – zástupce.lnk
2026-11-11 23:51 - 2026-11-11 23:51 - 000001163 _____ C:\Users\Daniel\Desktop\Warcraft III Eternal Conflict.lnk
2026-11-06 00:58 - 2026-11-06 00:58 - 000000000 ____D C:\Users\Daniel\AppData\Local\EternalConflict
2026-10-30 17:33 - 2026-10-30 17:36 - 000000000 ____D C:\Users\Daniel\Desktop\kalendar 2026
2026-10-27 17:44 - 2026-10-27 17:44 - 000000000 ____D C:\Windows\SecureBoot
2026-10-27 16:59 - 2026-10-27 16:59 - 000000000 ___HD C:\$Windows.~WS
2026-10-27 16:48 - 2026-10-27 17:23 - 000000000 ____D C:\ESD
2026-10-27 16:46 - 2026-10-27 16:46 - 000000000 ____D C:\$WINDOWS.~BT
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-11-12 12:47 - 2023-12-13 15:38 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\uTorrent
2026-11-12 12:47 - 2023-12-04 22:49 - 000004212 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{AF8CC586-594D-4B1A-801A-10706225CA73}
2026-11-12 12:36 - 2023-12-04 20:58 - 000000000 ____D C:\Windows\system32\SleepStudy
2026-11-12 11:01 - 2023-05-05 13:28 - 000000000 ____D C:\Windows\SystemTemp
2026-11-12 10:37 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\AppReadiness
2026-11-12 10:32 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-11-12 04:35 - 2019-12-07 10:13 - 000000000 ____D C:\Windows\INF
2026-11-12 01:47 - 2023-12-04 21:02 - 000000000 ____D C:\Users\Daniel\AppData\Local\D3DSCache
2026-11-12 01:18 - 2023-12-13 16:05 - 000000000 ____D C:\Users\Daniel\AppData\Local\CrashDumps
2026-11-12 01:09 - 2026-03-27 22:29 - 000000000 ____D C:\Users\Daniel\AppData\Local\Battle.net
2026-11-12 01:09 - 2026-03-27 22:28 - 000000000 ____D C:\Program Files (x86)\Battle.net
2026-11-12 01:03 - 2026-09-27 16:37 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\discord
2026-11-12 00:41 - 2024-09-16 23:34 - 268440632 _____ C:\Windows\392667600.dat
2026-11-12 00:06 - 2026-09-27 16:37 - 000000000 ____D C:\Users\Daniel\AppData\Local\Discord
2026-11-11 23:06 - 2026-09-27 16:37 - 000002259 _____ C:\Users\Daniel\Desktop\Discord.lnk
2026-11-11 23:06 - 2026-09-27 16:37 - 000001318 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-11-11 23:05 - 2024-09-16 23:34 - 000000001 _____ C:\Windows\vgkbootstatus.dat
2026-11-11 23:05 - 2023-12-07 18:42 - 000000000 ____D C:\ProgramData\Riot Games
2026-11-11 23:03 - 2023-12-04 21:05 - 001693656 _____ C:\Windows\system32\PerfStringBackup.INI
2026-11-11 23:03 - 2019-12-07 15:43 - 000716894 _____ C:\Windows\system32\perfh005.dat
2026-11-11 23:03 - 2019-12-07 15:43 - 000145072 _____ C:\Windows\system32\perfc005.dat
2026-11-11 23:00 - 2026-01-22 05:30 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Riot Client
2026-11-11 22:58 - 2026-09-30 04:42 - 000131096 _____ C:\Windows\vgk0001.dat
2026-11-11 22:58 - 2024-09-16 23:32 - 000000000 ____D C:\Program Files\Riot Vanguard
2026-11-11 22:57 - 2024-02-26 17:03 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\riot-client-ux
2026-11-11 22:56 - 2023-12-04 21:03 - 000000000 ____D C:\ProgramData\NVIDIA
2026-11-11 22:56 - 2023-12-04 20:58 - 000008192 ___SH C:\DumpStack.log.tmp
2026-11-11 22:56 - 2023-12-04 20:58 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-11-11 22:55 - 2023-12-04 20:58 - 000268440 _____ C:\Windows\system32\FNTCACHE.DAT
2026-11-11 22:55 - 2019-12-07 10:03 - 000786432 _____ C:\Windows\system32\config\BBI
2026-11-11 22:54 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2026-11-11 22:54 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2026-11-11 22:54 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2026-11-11 22:53 - 2024-07-11 00:12 - 000000000 ____D C:\Windows\system32\compatrel
2026-11-11 22:53 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SystemResources
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\setup
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\oobe
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\migwiz
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\Dism
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\Provisioning
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\bcastdvr
2026-11-11 22:44 - 2023-12-05 19:42 - 000002329 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-11-11 12:35 - 2023-12-04 21:07 - 000000000 ____D C:\Windows\system32\MRT
2026-11-11 12:32 - 2023-12-04 21:07 - 238121080 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2026-11-11 12:32 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\CbsTemp
2026-11-11 12:28 - 2023-12-04 21:00 - 003021312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2026-11-11 12:17 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2026-11-10 11:26 - 2025-02-06 17:47 - 000003572 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-3759179616-782039627-4007026311-1001
2026-11-10 11:26 - 2023-12-04 21:04 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3759179616-782039627-4007026311-1001
2026-11-10 11:26 - 2023-12-04 21:04 - 000003380 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3759179616-782039627-4007026311-1001
2026-11-10 11:26 - 2023-12-04 21:01 - 000002386 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-11-10 11:24 - 2023-12-04 20:58 - 000002518 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-11-04 14:00 - 2023-12-04 20:58 - 000003640 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-11-04 14:00 - 2023-12-04 20:58 - 000003568 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-11-04 13:59 - 2023-11-14 12:04 - 000372232 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2026-11-04 13:59 - 2023-11-14 12:04 - 000234304 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2026-11-04 13:59 - 2023-11-14 12:04 - 000143056 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2026-11-04 13:59 - 2023-11-14 12:04 - 000124824 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2026-11-04 13:59 - 2023-11-14 12:04 - 000080944 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys
2026-11-04 13:59 - 2023-11-14 12:04 - 000055160 _____ (ESET) C:\Windows\system32\Drivers\ekbdflt.sys
2026-10-27 17:45 - 2019-12-07 15:44 - 000000000 ____D C:\Windows\system32\OpenSSH
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\downlevel
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\ShellExperiences
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\downlevel
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\DDFs
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\appraiser
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Portable Devices
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2026-10-27 17:44 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\PrintDialog
2026-10-27 17:44 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2026-10-27 17:44 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ShellExperiences
2026-10-27 17:44 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ShellComponents
2026-10-27 17:44 - 2019-12-07 10:14 - 000000000 ____D C:\PerfLogs
2026-10-27 17:44 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\servicing
2026-10-27 17:23 - 2023-12-04 20:58 - 000000000 ____D C:\Windows\Panther
2026-10-27 11:52 - 2024-01-05 12:00 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\com.adobe.dunamis
2026-10-24 09:20 - 2023-12-13 15:41 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\vlc
2026-10-18 18:01 - 2024-01-04 12:06 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2026-10-18 18:01 - 2024-01-04 12:06 - 000002152 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
==================== Files in the root of some directories ========
2026-07-23 22:34 - 2026-07-23 22:34 - 000008386 _____ () C:\Users\Daniel\AppData\Roaming\VoiceMeeterDefault.xml
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2026 01
Ran by Daniel (12-11-2026 12:47:19)
Running from C:\Users\Daniel\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.7846 (X64) (2023-12-04 20:00:12)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-3759179616-782039627-4007026311-500 - Administrators - Disabled)
Alex (S-1-5-21-3759179616-782039627-4007026311-1004 - Limited - Enabled) => C:\Users\Alex (Orphaned Folder) <==== ATTENTION
Daniel (S-1-5-21-3759179616-782039627-4007026311-1001 - Administrators - Enabled) => C:\Users\Daniel
DefaultAccount (S-1-5-21-3759179616-782039627-4007026311-503 - Limited - Disabled)
Guest (S-1-5-21-3759179616-782039627-4007026311-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3759179616-782039627-4007026311-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {26E0861C-6FB9-CEF9-E4F0-531986211ACE}
FW: ESET Firewall (Enabled) {1EDB0739-25D6-CFA1-CFAF-FA2C78F25DB5}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1 - )
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1033-1033-7760-BC15014EA700}) (Version: 26.002.22031 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601180}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AI Suite 3 (HKLM-x32\...\{CD36E28B-6023-469A-91E7-049A2874EC13}) (Version: 3.00.13 - ASUSTeK Computer Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 157.0.4341.46 - Microsoft Corporation)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 12.3.0.2299 - Disc Soft Ltd)
Discord (HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Discord) (Version: 1.0.9259 - Discord Inc.)
Epic Games Launcher (HKLM-x32\...\{B85FAA6E-A9AA-4655-9029-E1A4EDC05E1A}) (Version: 1.3.93.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{57A956AB-4BCC-45C6-9B40-957E4E125568}) (Version: 2.0.44.0 - Epic Games, Inc.)
ESET Security (HKLM\...\{B5798854-224A-40DB-A3B7-BECF8F838238}) (Version: 20.0.7.0 - ESET, spol. s r.o.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 157.0.8103.51 - Google LLC)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
League of Legends PBE (HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Riot Game league_of_legends.pbe) (Version: - Riot Games, Inc)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 157.0.4341.46 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 157.0.4341.46 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\OneDriveSetup.exe) (Version: 26.198.1011.0006 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
NVIDIA App 11.0.5.420 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.5.420 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.5.11504.36206172 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.5.11504.36206172 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.4.5.7 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.5.7 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 582.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 582.66 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
Oblivion (HKLM-x32\...\{35CB6715-41F8-4F99-8881-6FC75BF054B0}) (Version: 1.00.0000 - Bethesda Softworks)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7701 - Realtek Semiconductor Corp.)
Riot Client (HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Riot Game Riot_Client.) (Version: - Riot Games, Inc)
Riot Vanguard (HKLM\...\Riot Vanguard) (Version: - Riot Games, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stronghold Crusader Extreme HD (HKLM-x32\...\GOGPACKSTRONGHOLDCRUSADERHD_is1) (Version: 2.0.0.6 - GOG.com)
Teamfight Tactics (HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Riot Game teamfighttactics.live) (Version: - Riot Games, Inc)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 2.6.3.0 - Zenimax Online Studios)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: - Blizzard Entertainment)
WinRAR 6.24 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.24.0 - win.rar GmbH)
Worms Armageddon (HKLM-x32\...\Worms Armageddon_is1) (Version: v.3.8.1 - Decepticon)
Packages:
=========
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-07] (NVIDIA Corp.)
Spotify – hudba a podcasty -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0 [2026-11-08] (Spotify AB) [Startup Task]
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2642.101.0_x64__cv1g1gvanyjgm [2026-11-04] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.6.4.0_x64__8wekyb3d8bbwe [2026-11-08] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3759179616-782039627-4007026311-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3759179616-782039627-4007026311-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3759179616-782039627-4007026311-1001_Classes\CLSID\{CCDA8B86-931D-4F28-B98D-C4358861B042}\localserver32 -> C:\Users\Daniel\AppData\Local\Discord\app-1.0.9268\Discord.exe (Discord Inc. -> Discord Inc.)
CustomCLSID: HKU\S-1-5-21-3759179616-782039627-4007026311-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2026-11-04] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2025-05-15] (AVB Disc Soft, SIA -> Disc Soft Limited)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2026-11-04] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2025-05-15] (AVB Disc Soft, SIA -> Disc Soft Limited)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_37503b637f6a53da\nvshext.dll [2026-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2026-11-04] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2023-12-04 21:47 - 2017-10-29 19:15 - 000147456 _____ () [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\AssistFunc.dll
2023-12-04 21:46 - 2017-12-26 14:26 - 000053248 _____ () [File not signed] C:\Program Files (x86)\ASUS\AXSP\4.00.01\cpuutil.dll
2023-12-04 21:47 - 2017-11-27 10:57 - 000062464 _____ () [File not signed] C:\Program Files (x86)\ASUS\VGA COM\2.00.03\Exeio.dll
2023-12-04 21:47 - 2017-11-27 10:57 - 001772544 _____ () [File not signed] C:\Program Files (x86)\ASUS\VGA COM\2.00.03\Vender.dll
2026-11-12 01:03 - 2026-07-24 18:40 - 002291712 _____ () [File not signed] F:\Program Files (x86)\Steam\libpyrowave-shared-0.dll
2024-12-09 01:09 - 2025-11-18 16:20 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll
2023-12-04 21:47 - 2017-10-29 19:15 - 000108544 _____ (ASUS) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\AsAcpi.dll
2023-12-04 21:47 - 2017-11-24 08:47 - 000108544 _____ (ASUS) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\asacpi.dll
2023-12-04 21:46 - 2026-11-11 22:56 - 000034088 _____ (ASUSTeK Computer Inc. -> ) [File not signed] C:\Program Files (x86)\ASUS\AXSP\4.00.01\PEbiosinterface32.dll
2023-12-04 21:47 - 2017-10-29 19:15 - 000676864 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\asacpiEx.dll
2023-12-04 21:47 - 2017-10-29 19:15 - 000221184 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\AsMultiLang.dll
2023-12-04 21:47 - 2017-11-24 08:47 - 000221184 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\AsMultiLang.dll
2023-12-04 21:47 - 2017-11-24 08:47 - 000676864 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\asacpiEx.dll
2023-12-04 21:47 - 2017-05-03 01:17 - 000106496 _____ (ASUSTek Computer Inc.,) [File not signed] C:\Program Files (x86)\ASUS\VGA COM\2.00.03\EIO.DLL
2023-12-04 21:47 - 2017-12-20 04:01 - 000193536 _____ (TODO: <Company name>) [File not signed] [File is in use] C:\Program Files (x86)\ASUS\VGA COM\2.00.03\AsusGpuTweak.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\µTorrent.lnk:27CED3D9D4 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3442]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.1.1
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Intel(R) Ethernet Connection (2) I219-V -> e1d.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Daniel\Pictures\pexels-francesco-ungaro-1525041.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "SteelSeriesGG"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\StartupFolder: => "PowerReg Scheduler V3.exe"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_CA39946F614AD7FFFC070BF82DF8A22E"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "RiotClient"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{453272DA-F197-493F-8D67-98F7A5B8C5B6}] => (Allow) F:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{68C53600-D9DD-400A-8ECD-77055DF3E77A}] => (Allow) F:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D7B5E49F-1856-4615-938F-C2EFEBA69A2C}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{A04579BF-A506-4EE2-B426-63448FEA8B56}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{44924629-7A56-46B0-9ACB-C16232F74527}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve Corp. -> )
FirewallRules: [{7AE77550-4511-42F9-A22A-8A93C595EC33}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve Corp. -> )
FirewallRules: [{BD83894C-0955-4F3A-B464-78F6BA9AF014}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\theHunterCotW\theHunterCotW_F.exe () [File not signed]
FirewallRules: [{DD5FAE48-4F2A-4707-9F5A-9F98BB0C65AD}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\theHunterCotW\theHunterCotW_F.exe () [File not signed]
FirewallRules: [{D9CD876A-DE0B-4F50-8899-819A507DBAAC}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe => No File
FirewallRules: [{88A7BB74-1268-4C14-9804-B5685E8AC1CB}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe => No File
FirewallRules: [{60CFB877-329A-4E94-9B4E-BC2E166BD191}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe (QLOC S.A. -> Bethesda Softworks)
FirewallRules: [{EE519A89-F8DB-4665-ABAC-E6E6B560B289}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe (QLOC S.A. -> Bethesda Softworks)
FirewallRules: [{A5300E93-F0CF-4B13-AEFB-15514E25CD08}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{ED1B1CF3-3F1F-4933-8FB2-37E54968E336}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{13C0A848-5531-4B6F-9E6C-B3AE2F616831}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{4D3E8002-2FFB-4F44-92EB-5DC0CF46BD5D}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{4F8BCE37-6FFB-4F7A-8A3D-A44ED29B5CBA}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\AoE2DE\AoE2DE_s.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E3A1B5F2-6A75-491E-B901-902A5BC1E119}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\AoE2DE\AoE2DE_s.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CA390D43-9311-491B-90B0-91815E168839}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\AoE2DE\BattleServer\BattleServer.exe (Microsoft Corporation -> )
FirewallRules: [{3958BED4-D6F1-44B6-A4CD-876958885088}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\AoE2DE\BattleServer\BattleServer.exe (Microsoft Corporation -> )
FirewallRules: [{C6AF5B06-A6F8-43AD-9EEC-27597DB53233}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command and Conquer Generals\Generals.exe (Electronic Arts, Inc. -> ) [File not signed]
FirewallRules: [{C0A59F11-9CE5-4AC9-9C19-0AF58F859B1B}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command and Conquer Generals\Generals.exe (Electronic Arts, Inc. -> ) [File not signed]
FirewallRules: [{B4F42935-E572-4073-B354-C7C246528036}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command and Conquer Generals\WorldBuilder.exe (Electronic Arts, Inc. -> Electronic Arts) [File not signed]
FirewallRules: [{C9CBF1A6-DDDB-47F6-9234-016C4412B51E}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command and Conquer Generals\WorldBuilder.exe (Electronic Arts, Inc. -> Electronic Arts) [File not signed]
FirewallRules: [{B140B999-C370-4387-89B1-A2BC73C17065}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Generals - Zero Hour\Generals.exe (Electronic Arts, Inc. -> ) [File not signed]
FirewallRules: [{58DFE404-659C-4A57-9294-3E330BAAD9D9}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Generals - Zero Hour\Generals.exe (Electronic Arts, Inc. -> ) [File not signed]
FirewallRules: [{E21552A6-6C25-4C63-B6F9-8923B47653DD}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Generals - Zero Hour\WorldBuilder.exe (Electronic Arts, Inc. -> Electronic Arts) [File not signed]
FirewallRules: [{47C7BDEA-C8F5-4A37-AD34-8A5765CC920D}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Generals - Zero Hour\WorldBuilder.exe (Electronic Arts, Inc. -> Electronic Arts) [File not signed]
FirewallRules: [{F4EEB381-EFB7-4620-89CA-FA2C97638D2E}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe () [File not signed]
FirewallRules: [{998B7C1E-F52D-4B09-A952-B7D836CBA9D2}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe () [File not signed]
FirewallRules: [{5989D43D-B744-4D1F-A345-733CF5C93978}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Supermarket Together\Supermarket Together.exe () [File not signed]
FirewallRules: [{5286D453-5826-47B6-9526-C1EF1510291D}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Supermarket Together\Supermarket Together.exe () [File not signed]
FirewallRules: [{207FC7CD-6E8B-48CB-9557-BC050FA22D29}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Limited)
FirewallRules: [{7C77B126-DE5A-4571-B354-77181397FBB2}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Limited)
FirewallRules: [{2D1F766A-C01B-412D-8113-646E535740E7}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Definitive Edition\Stronghold Crusader Definitive Edition.exe () [File not signed]
FirewallRules: [{8047DF03-3EE0-499E-9206-11ED6DC0B15A}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Definitive Edition\Stronghold Crusader Definitive Edition.exe () [File not signed]
FirewallRules: [{5E492202-48BB-431C-9393-B7C80738B094}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{4862635C-49D8-40B9-A910-52A74205158B}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{498918A3-518E-4E26-8CA8-DE4671F30E1E}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Metro Last Light Redux\metro.exe (4A Games) [File not signed]
FirewallRules: [{6A56E3B1-F657-47EA-B7F1-6D256E9A3CDB}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Metro Last Light Redux\metro.exe (4A Games) [File not signed]
FirewallRules: [{4D9649F3-88AD-4ED9-ADE3-BCFF5D70B0B8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.47051.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{E81603D0-CB99-4142-BC87-417B44D9A791}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.47051.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{01822345-71AF-4932-BA7C-B130CC167568}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.47051.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{95F45C60-0F48-4A60-B080-A9C636D69A82}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.47051.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{81ED97FF-A5B1-4199-A687-AA7259D04DF0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.33021.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{91BECF76-99C6-4ABC-A210-AE5F7BC13956}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.33021.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{07A64997-56E3-4739-8626-1FDC6F564FFB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.33021.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{F2EE41AC-1F08-4735-90CC-D5FF08C456A4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.33021.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{22E73907-CCC1-4A35-8BE8-7056678165FD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0D1798A4-D1CF-4B66-AC96-279818AF65E3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8D17BA91-9F47-4774-AE25-0B6B5FBF6D4A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{84419841-14B1-4C48-A746-63D711DCB731}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{34508034-5636-4B04-963C-DE25DE4E858F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{18499848-D36F-4E4A-B0E6-EDE7580193D0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2FC87F1B-6DFB-4614-9636-450997CFD1CD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2250E0E4-78FC-4559-8A1C-7BA55B50D3B2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{EDBE8FD1-A1A3-4C44-B337-76417F96D6E9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{82171F92-E670-4FDA-9BCB-CDE9FD4B7B29}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{9E996993-982C-40D3-80B3-0E0BFC765DE8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1B3445B5-5A17-4794-B527-D0FB96BE0CE5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8B6851FD-0080-4B80-A9DE-0B62D382B260}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5741EC7A-3325-4C18-9781-5971AA1DA816}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2611.32041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5441B5F2-D4D0-4238-B58A-A3EA8B1D95AF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2611.32041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6F64AC8D-C38C-473C-9F1F-DB626A209783}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2611.32041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5C1D4348-07C2-4B77-8A7A-9535F8806D7B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2611.32041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3CF1F930-3C5F-480E-9F34-9C3134BAC8E1}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{321A6064-2717-402F-B18C-0423B311B50A}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Restore Points =========================
04-11-2026 14:17:03 Naplánovaný kontrolní bod
11-11-2026 12:20:32 Instalační služba modulů systému Windows
11-11-2026 12:22:03 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (11/12/2026 01:18:02 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: cstrike_win64.exe, verze: 0.0.0.0, časové razítko: 0x6822a649
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000000000
ID chybujícího procesu: 0x1d6c
Čas spuštění chybující aplikace: 0x01dd723a302fb33f
Cesta k chybující aplikaci: F:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\cstrike_win64.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: e6ec3e13-93c7-42df-a836-4d3f918ae928
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/11/2026 12:36:27 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/11/2026 12:35:45 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (D:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/04/2026 02:16:53 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/04/2026 02:16:51 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (D:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (10/28/2026 12:15:47 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (10/28/2026 12:15:44 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (D:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (10/27/2026 05:47:30 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
System errors:
=============
Error: (11/12/2026 01:10:18 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-DBCIFFE)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/12/2026 01:03:56 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Steam Client Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (11/12/2026 01:03:56 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Steam Client Service bylo dosaženo časového limitu (30000 ms).
Error: (11/12/2026 12:40:02 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-DBCIFFE)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/12/2026 12:00:27 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-DBCIFFE)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/11/2026 11:54:37 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-DBCIFFE)
Description: Služba DCOM zjistila chybu 1053 při pokusu o spuštění služby Disc Soft Lite Bus Service s argumenty Není k dispozici za účelem spuštění serveru:
{1BB2CAF7-8881-4CE8-B16A-3CA37C7C6F33}
Error: (11/11/2026 11:54:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Disc Soft Lite Bus Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (11/11/2026 11:54:37 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Disc Soft Lite Bus Service bylo dosaženo časového limitu (30000 ms).
Windows Defender:
================
CodeIntegrity:
===============
Date: 2026-11-12 12:03:29
Description:
Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\ESET\ESET Security\ekrn.exe) attempted to load \Device\HarddiskVolume7\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. 1805 06/20/2016
Motherboard: ASUSTeK COMPUTER INC. B150 PRO GAMING
Processor: Intel(R) Core(TM) i5-6500 CPU @ 3.20GHz
Percentage of memory in use: 34%
Total physical RAM: 16317.84 MB
Available physical RAM: 10635.52 MB
Total Virtual: 18749.84 MB
Available Virtual: 11174.51 MB
==================== Drives ================================
Disk 3 - Drive c: (Systém) (Fixed) (Total:222.94 GB) (Free:117.68 GB) (Model: KINGSTON SV300S37A240G) NTFS
Disk 1 - Drive d: (Nový svazek) (Fixed) (Total:2794.5 GB) (Free:1517.18 GB) (Model: ST3000VN006-3CW10G) NTFS
Disk 2 - Drive e: (Nový svazek) (Fixed) (Total:1863.01 GB) (Free:446.49 GB) (Model: ST2000DM006-2DM164) NTFS
Disk 0 - Drive f: (Nový svazek) (Fixed) (Total:953.87 GB) (Free:354.48 GB) (Model: Verbatim Vi560) NTFS
Disk 3 - \\?\Volume{fdc098e4-b097-48dd-a664-748b535b37e4}\ () (Fixed) (Total:523 MB) (Free:84.27 MB) NTFS
Disk 3 - \\?\Volume{2ccf7c4a-4e09-4ab3-ac0d-27415b7c7ceb}\ () (Fixed) (Total:96 MB) (Free:67.67 MB) FAT32
==================== MBR & Partition Table ====================
============================================================
Disk: 0 (Size: 953.87 GB) (Disk ID: 1408DC06)
Partitions:
===========
Partition Style : GPT
Partition Count : 1
Disk ID : {5C763B30-0D19-4327-AD86-EFE383B7A32F}
Usable Offset : 0.02 MB
Usable Length : 953.87 GB
Max Partitions : 128
Partition 1
Type : Basic Data Partition
Size : 953.87 GB
Offset : 1 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {32ECC956-CE6F-4DF2-99B0-09DEBFA0BEFD}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
============================================================
Disk: 1 (Protective MBR) (Size: 2794.52 GB)
Partitions:
===========
Partition Style : GPT
Partition Count : 2
Disk ID : {7B46D65D-4F8C-4907-B5EA-B1190F87DC75}
Usable Offset : 0.02 MB
Usable Length : 2794.52 GB
Max Partitions : 128
Partition 1
Type : Microsoft Reserved (MSR)
Size : 15.98 MB
Offset : 0.02 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {E56D7E54-CB80-44DC-A55F-015FBA82D9CA}
GPT Name : Microsoft reserved partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Basic Data Partition
Size : 2794.5 GB
Offset : 16 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {EDEBB2A4-7F1B-4CBF-B97B-30D630A2FCA5}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
============================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 1863.02 GB) (Disk ID: 0027548F)
Partitions:
===========
Partition Style : MBR
Partition Count : 4
Disk Signature : 0x0027548F
Partition 1
Type : MBR 0x07 (NTFS / exFAT / HPFS)
Size : 1863.01 GB
Offset : 1 MB
Partition GUID : {0027548F-0000-0000-0000-100000000000}
Bootable : No
Recognized : Yes
Hidden Sectors : 2048
------------------------------------------------------------
Partition Entries : 4
Actual Partitions : 1
============================================================
Disk: 3 (Size: 223.57 GB) (Disk ID: 1E509C8D)
Partitions:
===========
Partition Style : GPT
Partition Count : 4
Disk ID : {A427097F-782C-416F-AE1F-74633EA71D0B}
Usable Offset : 0.02 MB
Usable Length : 223.57 GB
Max Partitions : 128
Partition 1
Type : EFI System Partition
Size : 100 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {2CCF7C4A-4E09-4AB3-AC0D-27415B7C7CEB}
GPT Name : EFI system partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 101 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {20F85A5A-C444-4BB8-9916-E48F50408212}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 222.94 GB
Offset : 117 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {8D670132-378B-4F33-8AD1-97FB388535BE}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 523 MB
Offset : 228412 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {FDC098E4-B097-48DD-A664-748B535B37E4}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
============================================================
==================== End of Addition.txt =======================
Ran by Daniel (administrator) on DESKTOP-DBCIFFE (12-11-2026 12:45:45)
Running from C:\Users\Daniel\Desktop\FRST64.exe
Loaded Profiles: Daniel
Platform: Microsoft Windows 10 Pro Version 22H2 19045.7846 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe
(BitTorrent Inc -> BitTorrent, Inc.) C:\Program Files (x86)\uTorrent\uTorrent.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eServiceHost.exe <2>
(C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2611.32041.0_x64__8wekyb3d8bbwe\M365Copilot.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\157.0.4341.46\msedgewebview2.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(F:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) F:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe <3>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <14>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\157.0.4341.46\msedgewebview2.exe <5>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2611.32041.0_x64__8wekyb3d8bbwe\M365Copilot.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_37503b637f6a53da\Display.NvContainer\NVDisplay.Container.exe
(Riot Games, Inc. -> Riot Games, Inc.) C:\Program Files\Riot Vanguard\vgtray.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.33\AsusFanControlService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_37503b637f6a53da\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
(svchost.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsStore_22609.1401.13.0_x64__8wekyb3d8bbwe\StoreDesktopExtension.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Valve Corp. -> Valve Corporation) F:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <7>
(Valve Corp. -> Valve Corporation) F:\Program Files (x86)\Steam\steam.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [282336 2026-11-04] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [7336968 2026-11-09] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8783616 2015-12-25] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Run: [Steam] => F:\Program Files (x86)\Steam\steam.exe [5775512 2026-09-03] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Run: [EpicGamesLauncher] => F:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [50913744 2025-12-13] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [486448 2025-05-15] (AVB Disc Soft, SIA -> Disc Soft Limited)
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [45649368 2026-10-13] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Run: [MicrosoftEdgeAutoLaunch_CA39946F614AD7FFFC070BF82DF8A22E] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [5073224 2026-11-07] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4944024 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\157.0.8103.51\Installer\chrmstp.exe [8160920 2026-11-11] (Google LLC -> Google LLC)
Startup: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe [225280 2025-05-17] (Leader Technologies) [File not signed]
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {860C1A4E-5A38-4D46-9BEC-CE1E7EA872B5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1617408 2026-08-03] (Adobe Inc. -> Adobe Inc.)
Task: {BA65C790-520C-407C-9835-026F2255FC27} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2096088 2018-01-04] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {4976B771-BCE5-4CF2-BF46-387F9EAA8663} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [1448408 2018-01-12] (ASUSTeK Computer Inc. -> )
Task: {6B7249A7-F8B4-4486-BB4C-07BD8E208572} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [4417496 2017-11-24] (ASUSTeK Computer Inc. -> TODO: <Company name>)
Task: {8397510D-A0BD-4897-8941-498890F68220} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem157.0.8089.0{B917684C-2C01-4E6E-8CF3-FE06015066C0} => C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe [9958552 2026-10-06] (Google LLC -> Google LLC)
Task: {015F9BD0-8EFF-4617-82C3-57E18D70DEC2} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4944024 2026-08-11] (Google LLC -> Google LLC)
Task: {F9C10651-133B-4291-8F54-9371020BFAB5} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4944024 2026-08-11] (Google LLC -> Google LLC)
Task: {E62C4F86-8E28-488D-A7E5-53AB28DE7284} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelperOnUnlock => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4944024 2026-08-11] (Google LLC -> Google LLC)
Task: {2BC108AA-C93F-4F3C-A75D-7F22CD0F15BC} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3324528 2025-10-15] (NVIDIA Corporation -> NVIDIA Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{836499d7-c834-44d7-b008-fa3ca5cccd97}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{836499d7-c834-44d7-b008-fa3ca5cccd97}: [DhcpDomain] home
FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-10-13] (Adobe Inc. -> Adobe Systems Inc.)
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default [2026-11-12]
Error reading preferences. Please make sure ESET "Secure Browser" option is disabled. <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-30] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2026-11-12] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2026-11-06] [UpdateUrl:0] <==== ATTENTION
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]
Chrome:
=======
CHR Profile: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default [2026-11-12]
Error reading preferences. Please make sure ESET "Secure Browser" option is disabled. <==== ATTENTION
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-11-11] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2023-12-05] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-24] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-11-11] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-12-05] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2026-11-08] [UpdateUrl:0] <==== ATTENTION
CHR HKU\S-1-5-21-3759179616-782039627-4007026311-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [oombnmpbbhbakfpfgdflaajkhicgfaam]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [182776 2026-08-03] (Adobe Inc. -> Adobe Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe [382424 2018-01-05] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.33\AsusFanControlService.exe [1340376 2017-12-05] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [3642064 2026-11-12] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4956208 2025-05-15] (AVB Disc Soft, SIA -> Disc Soft Limited)
S3 DiscordSystemHelper; C:\Program Files\Common Files\Discord\Discord\DiscordSystemHelper.exe [2247552 2026-09-21] (discord-code-sign-windows-admin -> Discord Inc.)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5743840 2026-11-04] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [5319968 2026-11-04] (ESET, spol. s r.o. -> ESET)
R2 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [5319968 2026-11-04] (ESET, spol. s r.o. -> ESET)
S3 EpicGamesUpdater; F:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3344336 2025-12-13] (Epic Games Inc. -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-08-02] (Epic Games Inc. -> Epic Games, Inc.)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_37503b637f6a53da\Display.NvContainer\NVDisplay.Container.exe [1275624 2026-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914728 2026-10-27] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [148934744 2026-11-09] (Riot Games, Inc. -> Riot Games, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.23100.2009-0\NisSrv.exe [3121120 2023-12-04] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.23100.2009-0\MsMpEng.exe [133704 2023-12-04] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 wuauserv; C:\Windows\system32\wuaueng.dll [3448320 2026-11-11] (Microsoft Windows -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2017-12-26] (ASUSTeK Computer Inc. -> )
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [File not signed]
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [42256 2025-05-17] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [63696 2025-05-17] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 e1dexpress; C:\Windows\System32\DriverStore\FileRepository\e1d.inf_amd64_9959ba283455536d\e1d.sys [611912 2023-07-18] (Intel Corporation -> Intel Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [234304 2026-11-04] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [143056 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [17880 2026-09-03] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [372232 2026-11-04] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [55160 2026-11-04] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [80944 2026-11-04] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [124824 2026-11-04] (ESET, spol. s r.o. -> ESET)
R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [34064 2017-12-26] (ASUSTeK Computer Inc. -> )
R3 SteamStreamingMicrophone; C:\Windows\system32\drivers\SteamStreamingMicrophone.sys [40736 2020-06-01] (Valve Corp. -> )
R3 SteamStreamingSpeakers; C:\Windows\system32\drivers\SteamStreamingSpeakers.sys [40736 2020-06-01] (Valve Corp. -> )
S3 VBVoicemeeterVAIOMME; C:\Windows\System32\DriverStore\FileRepository\vbvoicemeetervaio64_win10.inf_amd64_88e966008b21fe10\vbvoicemeetervaio64_win10.sys [296392 2026-07-23] (BUREL VINCENT Entrepreneur individuel -> VB-Audio Software)
R1 vgk; \??\C:\Program Files\Riot Vanguard\vgk.sys [108689048 2026-11-09] (Riot Games, Inc. -> )
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [55744 2023-12-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [578856 2023-12-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105768 2023-12-04] (Microsoft Windows -> Microsoft Corporation)
S4 NvModuleTracker; \SystemRoot\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys (No File)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-11-12 12:45 - 2026-11-12 12:46 - 000018993 _____ C:\Users\Daniel\Desktop\FRST.txt
2026-11-12 12:45 - 2026-11-12 12:46 - 000000000 ____D C:\FRST
2026-11-12 12:43 - 2026-11-12 12:43 - 002459648 _____ (Farbar) C:\Users\Daniel\Desktop\FRST64.exe
2026-11-12 10:32 - 2026-11-12 10:32 - 000991977 _____ C:\Users\Daniel\Desktop\Tesneni.jfif
2026-11-11 23:59 - 2026-11-11 23:59 - 000000722 _____ C:\Users\Daniel\Desktop\Fotky – zástupce.lnk
2026-11-11 23:51 - 2026-11-11 23:51 - 000001163 _____ C:\Users\Daniel\Desktop\Warcraft III Eternal Conflict.lnk
2026-11-06 00:58 - 2026-11-06 00:58 - 000000000 ____D C:\Users\Daniel\AppData\Local\EternalConflict
2026-10-30 17:33 - 2026-10-30 17:36 - 000000000 ____D C:\Users\Daniel\Desktop\kalendar 2026
2026-10-27 17:44 - 2026-10-27 17:44 - 000000000 ____D C:\Windows\SecureBoot
2026-10-27 16:59 - 2026-10-27 16:59 - 000000000 ___HD C:\$Windows.~WS
2026-10-27 16:48 - 2026-10-27 17:23 - 000000000 ____D C:\ESD
2026-10-27 16:46 - 2026-10-27 16:46 - 000000000 ____D C:\$WINDOWS.~BT
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-11-12 12:47 - 2023-12-13 15:38 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\uTorrent
2026-11-12 12:47 - 2023-12-04 22:49 - 000004212 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{AF8CC586-594D-4B1A-801A-10706225CA73}
2026-11-12 12:36 - 2023-12-04 20:58 - 000000000 ____D C:\Windows\system32\SleepStudy
2026-11-12 11:01 - 2023-05-05 13:28 - 000000000 ____D C:\Windows\SystemTemp
2026-11-12 10:37 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\AppReadiness
2026-11-12 10:32 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-11-12 04:35 - 2019-12-07 10:13 - 000000000 ____D C:\Windows\INF
2026-11-12 01:47 - 2023-12-04 21:02 - 000000000 ____D C:\Users\Daniel\AppData\Local\D3DSCache
2026-11-12 01:18 - 2023-12-13 16:05 - 000000000 ____D C:\Users\Daniel\AppData\Local\CrashDumps
2026-11-12 01:09 - 2026-03-27 22:29 - 000000000 ____D C:\Users\Daniel\AppData\Local\Battle.net
2026-11-12 01:09 - 2026-03-27 22:28 - 000000000 ____D C:\Program Files (x86)\Battle.net
2026-11-12 01:03 - 2026-09-27 16:37 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\discord
2026-11-12 00:41 - 2024-09-16 23:34 - 268440632 _____ C:\Windows\392667600.dat
2026-11-12 00:06 - 2026-09-27 16:37 - 000000000 ____D C:\Users\Daniel\AppData\Local\Discord
2026-11-11 23:06 - 2026-09-27 16:37 - 000002259 _____ C:\Users\Daniel\Desktop\Discord.lnk
2026-11-11 23:06 - 2026-09-27 16:37 - 000001318 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-11-11 23:05 - 2024-09-16 23:34 - 000000001 _____ C:\Windows\vgkbootstatus.dat
2026-11-11 23:05 - 2023-12-07 18:42 - 000000000 ____D C:\ProgramData\Riot Games
2026-11-11 23:03 - 2023-12-04 21:05 - 001693656 _____ C:\Windows\system32\PerfStringBackup.INI
2026-11-11 23:03 - 2019-12-07 15:43 - 000716894 _____ C:\Windows\system32\perfh005.dat
2026-11-11 23:03 - 2019-12-07 15:43 - 000145072 _____ C:\Windows\system32\perfc005.dat
2026-11-11 23:00 - 2026-01-22 05:30 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Riot Client
2026-11-11 22:58 - 2026-09-30 04:42 - 000131096 _____ C:\Windows\vgk0001.dat
2026-11-11 22:58 - 2024-09-16 23:32 - 000000000 ____D C:\Program Files\Riot Vanguard
2026-11-11 22:57 - 2024-02-26 17:03 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\riot-client-ux
2026-11-11 22:56 - 2023-12-04 21:03 - 000000000 ____D C:\ProgramData\NVIDIA
2026-11-11 22:56 - 2023-12-04 20:58 - 000008192 ___SH C:\DumpStack.log.tmp
2026-11-11 22:56 - 2023-12-04 20:58 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-11-11 22:55 - 2023-12-04 20:58 - 000268440 _____ C:\Windows\system32\FNTCACHE.DAT
2026-11-11 22:55 - 2019-12-07 10:03 - 000786432 _____ C:\Windows\system32\config\BBI
2026-11-11 22:54 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2026-11-11 22:54 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2026-11-11 22:54 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2026-11-11 22:53 - 2024-07-11 00:12 - 000000000 ____D C:\Windows\system32\compatrel
2026-11-11 22:53 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SystemResources
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\setup
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\oobe
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\migwiz
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\Dism
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\Provisioning
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2026-11-11 22:53 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\bcastdvr
2026-11-11 22:44 - 2023-12-05 19:42 - 000002329 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-11-11 12:35 - 2023-12-04 21:07 - 000000000 ____D C:\Windows\system32\MRT
2026-11-11 12:32 - 2023-12-04 21:07 - 238121080 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2026-11-11 12:32 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\CbsTemp
2026-11-11 12:28 - 2023-12-04 21:00 - 003021312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2026-11-11 12:17 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2026-11-10 11:26 - 2025-02-06 17:47 - 000003572 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-3759179616-782039627-4007026311-1001
2026-11-10 11:26 - 2023-12-04 21:04 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3759179616-782039627-4007026311-1001
2026-11-10 11:26 - 2023-12-04 21:04 - 000003380 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3759179616-782039627-4007026311-1001
2026-11-10 11:26 - 2023-12-04 21:01 - 000002386 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-11-10 11:24 - 2023-12-04 20:58 - 000002518 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-11-04 14:00 - 2023-12-04 20:58 - 000003640 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-11-04 14:00 - 2023-12-04 20:58 - 000003568 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-11-04 13:59 - 2023-11-14 12:04 - 000372232 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2026-11-04 13:59 - 2023-11-14 12:04 - 000234304 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2026-11-04 13:59 - 2023-11-14 12:04 - 000143056 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2026-11-04 13:59 - 2023-11-14 12:04 - 000124824 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2026-11-04 13:59 - 2023-11-14 12:04 - 000080944 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys
2026-11-04 13:59 - 2023-11-14 12:04 - 000055160 _____ (ESET) C:\Windows\system32\Drivers\ekbdflt.sys
2026-10-27 17:45 - 2019-12-07 15:44 - 000000000 ____D C:\Windows\system32\OpenSSH
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\downlevel
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\ShellExperiences
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\downlevel
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\DDFs
2026-10-27 17:45 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\appraiser
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Portable Devices
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2026-10-27 17:44 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2026-10-27 17:44 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\PrintDialog
2026-10-27 17:44 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2026-10-27 17:44 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ShellExperiences
2026-10-27 17:44 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ShellComponents
2026-10-27 17:44 - 2019-12-07 10:14 - 000000000 ____D C:\PerfLogs
2026-10-27 17:44 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\servicing
2026-10-27 17:23 - 2023-12-04 20:58 - 000000000 ____D C:\Windows\Panther
2026-10-27 11:52 - 2024-01-05 12:00 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\com.adobe.dunamis
2026-10-24 09:20 - 2023-12-13 15:41 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\vlc
2026-10-18 18:01 - 2024-01-04 12:06 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2026-10-18 18:01 - 2024-01-04 12:06 - 000002152 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
==================== Files in the root of some directories ========
2026-07-23 22:34 - 2026-07-23 22:34 - 000008386 _____ () C:\Users\Daniel\AppData\Roaming\VoiceMeeterDefault.xml
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2026 01
Ran by Daniel (12-11-2026 12:47:19)
Running from C:\Users\Daniel\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.7846 (X64) (2023-12-04 20:00:12)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-3759179616-782039627-4007026311-500 - Administrators - Disabled)
Alex (S-1-5-21-3759179616-782039627-4007026311-1004 - Limited - Enabled) => C:\Users\Alex (Orphaned Folder) <==== ATTENTION
Daniel (S-1-5-21-3759179616-782039627-4007026311-1001 - Administrators - Enabled) => C:\Users\Daniel
DefaultAccount (S-1-5-21-3759179616-782039627-4007026311-503 - Limited - Disabled)
Guest (S-1-5-21-3759179616-782039627-4007026311-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3759179616-782039627-4007026311-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {26E0861C-6FB9-CEF9-E4F0-531986211ACE}
FW: ESET Firewall (Enabled) {1EDB0739-25D6-CFA1-CFAF-FA2C78F25DB5}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1 - )
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1033-1033-7760-BC15014EA700}) (Version: 26.002.22031 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601180}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AI Suite 3 (HKLM-x32\...\{CD36E28B-6023-469A-91E7-049A2874EC13}) (Version: 3.00.13 - ASUSTeK Computer Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 157.0.4341.46 - Microsoft Corporation)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 12.3.0.2299 - Disc Soft Ltd)
Discord (HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Discord) (Version: 1.0.9259 - Discord Inc.)
Epic Games Launcher (HKLM-x32\...\{B85FAA6E-A9AA-4655-9029-E1A4EDC05E1A}) (Version: 1.3.93.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{57A956AB-4BCC-45C6-9B40-957E4E125568}) (Version: 2.0.44.0 - Epic Games, Inc.)
ESET Security (HKLM\...\{B5798854-224A-40DB-A3B7-BECF8F838238}) (Version: 20.0.7.0 - ESET, spol. s r.o.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 157.0.8103.51 - Google LLC)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
League of Legends PBE (HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Riot Game league_of_legends.pbe) (Version: - Riot Games, Inc)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 157.0.4341.46 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 157.0.4341.46 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\OneDriveSetup.exe) (Version: 26.198.1011.0006 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
NVIDIA App 11.0.5.420 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.5.420 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.5.11504.36206172 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.5.11504.36206172 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.4.5.7 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.5.7 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 582.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 582.66 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
Oblivion (HKLM-x32\...\{35CB6715-41F8-4F99-8881-6FC75BF054B0}) (Version: 1.00.0000 - Bethesda Softworks)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7701 - Realtek Semiconductor Corp.)
Riot Client (HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Riot Game Riot_Client.) (Version: - Riot Games, Inc)
Riot Vanguard (HKLM\...\Riot Vanguard) (Version: - Riot Games, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stronghold Crusader Extreme HD (HKLM-x32\...\GOGPACKSTRONGHOLDCRUSADERHD_is1) (Version: 2.0.0.6 - GOG.com)
Teamfight Tactics (HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\Riot Game teamfighttactics.live) (Version: - Riot Games, Inc)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 2.6.3.0 - Zenimax Online Studios)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: - Blizzard Entertainment)
WinRAR 6.24 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.24.0 - win.rar GmbH)
Worms Armageddon (HKLM-x32\...\Worms Armageddon_is1) (Version: v.3.8.1 - Decepticon)
Packages:
=========
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-07] (NVIDIA Corp.)
Spotify – hudba a podcasty -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0 [2026-11-08] (Spotify AB) [Startup Task]
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2642.101.0_x64__cv1g1gvanyjgm [2026-11-04] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.6.4.0_x64__8wekyb3d8bbwe [2026-11-08] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3759179616-782039627-4007026311-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3759179616-782039627-4007026311-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3759179616-782039627-4007026311-1001_Classes\CLSID\{CCDA8B86-931D-4F28-B98D-C4358861B042}\localserver32 -> C:\Users\Daniel\AppData\Local\Discord\app-1.0.9268\Discord.exe (Discord Inc. -> Discord Inc.)
CustomCLSID: HKU\S-1-5-21-3759179616-782039627-4007026311-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2026-11-04] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2025-05-15] (AVB Disc Soft, SIA -> Disc Soft Limited)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2026-11-04] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2025-05-15] (AVB Disc Soft, SIA -> Disc Soft Limited)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_37503b637f6a53da\nvshext.dll [2026-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2026-11-04] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2023-12-04 21:47 - 2017-10-29 19:15 - 000147456 _____ () [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\AssistFunc.dll
2023-12-04 21:46 - 2017-12-26 14:26 - 000053248 _____ () [File not signed] C:\Program Files (x86)\ASUS\AXSP\4.00.01\cpuutil.dll
2023-12-04 21:47 - 2017-11-27 10:57 - 000062464 _____ () [File not signed] C:\Program Files (x86)\ASUS\VGA COM\2.00.03\Exeio.dll
2023-12-04 21:47 - 2017-11-27 10:57 - 001772544 _____ () [File not signed] C:\Program Files (x86)\ASUS\VGA COM\2.00.03\Vender.dll
2026-11-12 01:03 - 2026-07-24 18:40 - 002291712 _____ () [File not signed] F:\Program Files (x86)\Steam\libpyrowave-shared-0.dll
2024-12-09 01:09 - 2025-11-18 16:20 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll
2023-12-04 21:47 - 2017-10-29 19:15 - 000108544 _____ (ASUS) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\AsAcpi.dll
2023-12-04 21:47 - 2017-11-24 08:47 - 000108544 _____ (ASUS) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\asacpi.dll
2023-12-04 21:46 - 2026-11-11 22:56 - 000034088 _____ (ASUSTeK Computer Inc. -> ) [File not signed] C:\Program Files (x86)\ASUS\AXSP\4.00.01\PEbiosinterface32.dll
2023-12-04 21:47 - 2017-10-29 19:15 - 000676864 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\asacpiEx.dll
2023-12-04 21:47 - 2017-10-29 19:15 - 000221184 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\AsMultiLang.dll
2023-12-04 21:47 - 2017-11-24 08:47 - 000221184 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\AsMultiLang.dll
2023-12-04 21:47 - 2017-11-24 08:47 - 000676864 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\asacpiEx.dll
2023-12-04 21:47 - 2017-05-03 01:17 - 000106496 _____ (ASUSTek Computer Inc.,) [File not signed] C:\Program Files (x86)\ASUS\VGA COM\2.00.03\EIO.DLL
2023-12-04 21:47 - 2017-12-20 04:01 - 000193536 _____ (TODO: <Company name>) [File not signed] [File is in use] C:\Program Files (x86)\ASUS\VGA COM\2.00.03\AsusGpuTweak.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\µTorrent.lnk:27CED3D9D4 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3442]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.1.1
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Intel(R) Ethernet Connection (2) I219-V -> e1d.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Daniel\Pictures\pexels-francesco-ungaro-1525041.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "SteelSeriesGG"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\StartupFolder: => "PowerReg Scheduler V3.exe"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_CA39946F614AD7FFFC070BF82DF8A22E"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "RiotClient"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-3759179616-782039627-4007026311-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{453272DA-F197-493F-8D67-98F7A5B8C5B6}] => (Allow) F:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{68C53600-D9DD-400A-8ECD-77055DF3E77A}] => (Allow) F:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D7B5E49F-1856-4615-938F-C2EFEBA69A2C}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{A04579BF-A506-4EE2-B426-63448FEA8B56}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{44924629-7A56-46B0-9ACB-C16232F74527}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve Corp. -> )
FirewallRules: [{7AE77550-4511-42F9-A22A-8A93C595EC33}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve Corp. -> )
FirewallRules: [{BD83894C-0955-4F3A-B464-78F6BA9AF014}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\theHunterCotW\theHunterCotW_F.exe () [File not signed]
FirewallRules: [{DD5FAE48-4F2A-4707-9F5A-9F98BB0C65AD}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\theHunterCotW\theHunterCotW_F.exe () [File not signed]
FirewallRules: [{D9CD876A-DE0B-4F50-8899-819A507DBAAC}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe => No File
FirewallRules: [{88A7BB74-1268-4C14-9804-B5685E8AC1CB}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe => No File
FirewallRules: [{60CFB877-329A-4E94-9B4E-BC2E166BD191}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe (QLOC S.A. -> Bethesda Softworks)
FirewallRules: [{EE519A89-F8DB-4665-ABAC-E6E6B560B289}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe (QLOC S.A. -> Bethesda Softworks)
FirewallRules: [{A5300E93-F0CF-4B13-AEFB-15514E25CD08}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{ED1B1CF3-3F1F-4933-8FB2-37E54968E336}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{13C0A848-5531-4B6F-9E6C-B3AE2F616831}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{4D3E8002-2FFB-4F44-92EB-5DC0CF46BD5D}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{4F8BCE37-6FFB-4F7A-8A3D-A44ED29B5CBA}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\AoE2DE\AoE2DE_s.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E3A1B5F2-6A75-491E-B901-902A5BC1E119}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\AoE2DE\AoE2DE_s.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CA390D43-9311-491B-90B0-91815E168839}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\AoE2DE\BattleServer\BattleServer.exe (Microsoft Corporation -> )
FirewallRules: [{3958BED4-D6F1-44B6-A4CD-876958885088}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\AoE2DE\BattleServer\BattleServer.exe (Microsoft Corporation -> )
FirewallRules: [{C6AF5B06-A6F8-43AD-9EEC-27597DB53233}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command and Conquer Generals\Generals.exe (Electronic Arts, Inc. -> ) [File not signed]
FirewallRules: [{C0A59F11-9CE5-4AC9-9C19-0AF58F859B1B}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command and Conquer Generals\Generals.exe (Electronic Arts, Inc. -> ) [File not signed]
FirewallRules: [{B4F42935-E572-4073-B354-C7C246528036}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command and Conquer Generals\WorldBuilder.exe (Electronic Arts, Inc. -> Electronic Arts) [File not signed]
FirewallRules: [{C9CBF1A6-DDDB-47F6-9234-016C4412B51E}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command and Conquer Generals\WorldBuilder.exe (Electronic Arts, Inc. -> Electronic Arts) [File not signed]
FirewallRules: [{B140B999-C370-4387-89B1-A2BC73C17065}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Generals - Zero Hour\Generals.exe (Electronic Arts, Inc. -> ) [File not signed]
FirewallRules: [{58DFE404-659C-4A57-9294-3E330BAAD9D9}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Generals - Zero Hour\Generals.exe (Electronic Arts, Inc. -> ) [File not signed]
FirewallRules: [{E21552A6-6C25-4C63-B6F9-8923B47653DD}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Generals - Zero Hour\WorldBuilder.exe (Electronic Arts, Inc. -> Electronic Arts) [File not signed]
FirewallRules: [{47C7BDEA-C8F5-4A37-AD34-8A5765CC920D}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Generals - Zero Hour\WorldBuilder.exe (Electronic Arts, Inc. -> Electronic Arts) [File not signed]
FirewallRules: [{F4EEB381-EFB7-4620-89CA-FA2C97638D2E}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe () [File not signed]
FirewallRules: [{998B7C1E-F52D-4B09-A952-B7D836CBA9D2}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe () [File not signed]
FirewallRules: [{5989D43D-B744-4D1F-A345-733CF5C93978}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Supermarket Together\Supermarket Together.exe () [File not signed]
FirewallRules: [{5286D453-5826-47B6-9526-C1EF1510291D}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Supermarket Together\Supermarket Together.exe () [File not signed]
FirewallRules: [{207FC7CD-6E8B-48CB-9557-BC050FA22D29}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Limited)
FirewallRules: [{7C77B126-DE5A-4571-B354-77181397FBB2}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Limited)
FirewallRules: [{2D1F766A-C01B-412D-8113-646E535740E7}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Definitive Edition\Stronghold Crusader Definitive Edition.exe () [File not signed]
FirewallRules: [{8047DF03-3EE0-499E-9206-11ED6DC0B15A}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Definitive Edition\Stronghold Crusader Definitive Edition.exe () [File not signed]
FirewallRules: [{5E492202-48BB-431C-9393-B7C80738B094}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{4862635C-49D8-40B9-A910-52A74205158B}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{498918A3-518E-4E26-8CA8-DE4671F30E1E}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Metro Last Light Redux\metro.exe (4A Games) [File not signed]
FirewallRules: [{6A56E3B1-F657-47EA-B7F1-6D256E9A3CDB}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Metro Last Light Redux\metro.exe (4A Games) [File not signed]
FirewallRules: [{4D9649F3-88AD-4ED9-ADE3-BCFF5D70B0B8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.47051.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{E81603D0-CB99-4142-BC87-417B44D9A791}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.47051.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{01822345-71AF-4932-BA7C-B130CC167568}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.47051.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{95F45C60-0F48-4A60-B080-A9C636D69A82}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.47051.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{81ED97FF-A5B1-4199-A687-AA7259D04DF0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.33021.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{91BECF76-99C6-4ABC-A210-AE5F7BC13956}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.33021.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{07A64997-56E3-4739-8626-1FDC6F564FFB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.33021.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{F2EE41AC-1F08-4735-90CC-D5FF08C456A4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.33021.0_x64__8wekyb3d8bbwe\M365Copilot.exe => No File
FirewallRules: [{22E73907-CCC1-4A35-8BE8-7056678165FD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0D1798A4-D1CF-4B66-AC96-279818AF65E3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8D17BA91-9F47-4774-AE25-0B6B5FBF6D4A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{84419841-14B1-4C48-A746-63D711DCB731}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{34508034-5636-4B04-963C-DE25DE4E858F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{18499848-D36F-4E4A-B0E6-EDE7580193D0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2FC87F1B-6DFB-4614-9636-450997CFD1CD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2250E0E4-78FC-4559-8A1C-7BA55B50D3B2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{EDBE8FD1-A1A3-4C44-B337-76417F96D6E9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{82171F92-E670-4FDA-9BCB-CDE9FD4B7B29}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{9E996993-982C-40D3-80B3-0E0BFC765DE8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1B3445B5-5A17-4794-B527-D0FB96BE0CE5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8B6851FD-0080-4B80-A9DE-0B62D382B260}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.308.620.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5741EC7A-3325-4C18-9781-5971AA1DA816}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2611.32041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5441B5F2-D4D0-4238-B58A-A3EA8B1D95AF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2611.32041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6F64AC8D-C38C-473C-9F1F-DB626A209783}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2611.32041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5C1D4348-07C2-4B77-8A7A-9535F8806D7B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2611.32041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3CF1F930-3C5F-480E-9F34-9C3134BAC8E1}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{321A6064-2717-402F-B18C-0423B311B50A}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Restore Points =========================
04-11-2026 14:17:03 Naplánovaný kontrolní bod
11-11-2026 12:20:32 Instalační služba modulů systému Windows
11-11-2026 12:22:03 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (11/12/2026 01:18:02 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: cstrike_win64.exe, verze: 0.0.0.0, časové razítko: 0x6822a649
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000000000
ID chybujícího procesu: 0x1d6c
Čas spuštění chybující aplikace: 0x01dd723a302fb33f
Cesta k chybující aplikaci: F:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\cstrike_win64.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: e6ec3e13-93c7-42df-a836-4d3f918ae928
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/11/2026 12:36:27 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/11/2026 12:35:45 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (D:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/04/2026 02:16:53 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (11/04/2026 02:16:51 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (D:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (10/28/2026 12:15:47 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (10/28/2026 12:15:44 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (D:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (10/27/2026 05:47:30 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
System errors:
=============
Error: (11/12/2026 01:10:18 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-DBCIFFE)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/12/2026 01:03:56 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Steam Client Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (11/12/2026 01:03:56 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Steam Client Service bylo dosaženo časového limitu (30000 ms).
Error: (11/12/2026 12:40:02 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-DBCIFFE)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/12/2026 12:00:27 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-DBCIFFE)
Description: Server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/11/2026 11:54:37 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-DBCIFFE)
Description: Služba DCOM zjistila chybu 1053 při pokusu o spuštění služby Disc Soft Lite Bus Service s argumenty Není k dispozici za účelem spuštění serveru:
{1BB2CAF7-8881-4CE8-B16A-3CA37C7C6F33}
Error: (11/11/2026 11:54:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Disc Soft Lite Bus Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (11/11/2026 11:54:37 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Disc Soft Lite Bus Service bylo dosaženo časového limitu (30000 ms).
Windows Defender:
================
CodeIntegrity:
===============
Date: 2026-11-12 12:03:29
Description:
Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\ESET\ESET Security\ekrn.exe) attempted to load \Device\HarddiskVolume7\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. 1805 06/20/2016
Motherboard: ASUSTeK COMPUTER INC. B150 PRO GAMING
Processor: Intel(R) Core(TM) i5-6500 CPU @ 3.20GHz
Percentage of memory in use: 34%
Total physical RAM: 16317.84 MB
Available physical RAM: 10635.52 MB
Total Virtual: 18749.84 MB
Available Virtual: 11174.51 MB
==================== Drives ================================
Disk 3 - Drive c: (Systém) (Fixed) (Total:222.94 GB) (Free:117.68 GB) (Model: KINGSTON SV300S37A240G) NTFS
Disk 1 - Drive d: (Nový svazek) (Fixed) (Total:2794.5 GB) (Free:1517.18 GB) (Model: ST3000VN006-3CW10G) NTFS
Disk 2 - Drive e: (Nový svazek) (Fixed) (Total:1863.01 GB) (Free:446.49 GB) (Model: ST2000DM006-2DM164) NTFS
Disk 0 - Drive f: (Nový svazek) (Fixed) (Total:953.87 GB) (Free:354.48 GB) (Model: Verbatim Vi560) NTFS
Disk 3 - \\?\Volume{fdc098e4-b097-48dd-a664-748b535b37e4}\ () (Fixed) (Total:523 MB) (Free:84.27 MB) NTFS
Disk 3 - \\?\Volume{2ccf7c4a-4e09-4ab3-ac0d-27415b7c7ceb}\ () (Fixed) (Total:96 MB) (Free:67.67 MB) FAT32
==================== MBR & Partition Table ====================
============================================================
Disk: 0 (Size: 953.87 GB) (Disk ID: 1408DC06)
Partitions:
===========
Partition Style : GPT
Partition Count : 1
Disk ID : {5C763B30-0D19-4327-AD86-EFE383B7A32F}
Usable Offset : 0.02 MB
Usable Length : 953.87 GB
Max Partitions : 128
Partition 1
Type : Basic Data Partition
Size : 953.87 GB
Offset : 1 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {32ECC956-CE6F-4DF2-99B0-09DEBFA0BEFD}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
============================================================
Disk: 1 (Protective MBR) (Size: 2794.52 GB)
Partitions:
===========
Partition Style : GPT
Partition Count : 2
Disk ID : {7B46D65D-4F8C-4907-B5EA-B1190F87DC75}
Usable Offset : 0.02 MB
Usable Length : 2794.52 GB
Max Partitions : 128
Partition 1
Type : Microsoft Reserved (MSR)
Size : 15.98 MB
Offset : 0.02 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {E56D7E54-CB80-44DC-A55F-015FBA82D9CA}
GPT Name : Microsoft reserved partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Basic Data Partition
Size : 2794.5 GB
Offset : 16 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {EDEBB2A4-7F1B-4CBF-B97B-30D630A2FCA5}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
============================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 1863.02 GB) (Disk ID: 0027548F)
Partitions:
===========
Partition Style : MBR
Partition Count : 4
Disk Signature : 0x0027548F
Partition 1
Type : MBR 0x07 (NTFS / exFAT / HPFS)
Size : 1863.01 GB
Offset : 1 MB
Partition GUID : {0027548F-0000-0000-0000-100000000000}
Bootable : No
Recognized : Yes
Hidden Sectors : 2048
------------------------------------------------------------
Partition Entries : 4
Actual Partitions : 1
============================================================
Disk: 3 (Size: 223.57 GB) (Disk ID: 1E509C8D)
Partitions:
===========
Partition Style : GPT
Partition Count : 4
Disk ID : {A427097F-782C-416F-AE1F-74633EA71D0B}
Usable Offset : 0.02 MB
Usable Length : 223.57 GB
Max Partitions : 128
Partition 1
Type : EFI System Partition
Size : 100 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {2CCF7C4A-4E09-4AB3-AC0D-27415B7C7CEB}
GPT Name : EFI system partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 101 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {20F85A5A-C444-4BB8-9916-E48F50408212}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 222.94 GB
Offset : 117 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {8D670132-378B-4F33-8AD1-97FB388535BE}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 523 MB
Offset : 228412 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {FDC098E4-B097-48DD-A664-748B535B37E4}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
============================================================
==================== End of Addition.txt =======================