Kontrola logu

[Bruno39]

Dobrý deň
Poprosím o kontrolu

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 13.07.2024
Ran by Martin (administrator) on DESKTOP-0P77LES (Acer Nitro AN517-55) (14-07-2024 11:30:01)
Running from C:\Users\Martin\Desktop\FRST64.exe
Loaded Profiles: Martin
Platform: Microsoft Windows 10 Pro Version 22H2 19045.4651 (X64) Language: Slovenčina (Slovensko)
Default browser: Brave
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\NitroSense Service\PSAgent.exe
(C:\Program Files\Acer\NitroSense Service\PSSvc.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\NitroSense Service\PSAdminAgent.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(drivers\RivetNetworks\Killer\KNDBWMService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWM.exe
(explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\Application\brave.exe <14>
(hasplms.exe ->) (SafeNet Canada, Inc. -> SafeNet, Inc.) C:\Windows\System32\hasplmv.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\NitroSense Service\PSSvc.exe
(services.exe ->) (DTS, Inc. -> DTS Inc.) C:\Windows\System32\DTS\PC\APO4x\DtsApo4Service.exe
(services.exe ->) (Intel Corporation -> ) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_3de31b09a0024837\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_64f1ea0105c67ec6\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_0bfc7052a9e9b3c5\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\NisSrv.exe
(services.exe ->) (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.) C:\Program Files\Nefarius Software Solutions\HidHide\x64\HidHideWatchdog.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_c9a42395be47885d\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9b2689b4e3586127\RtkAudUService64.exe <3>
(services.exe ->) (SafeNet Canada, Inc. -> SafeNet, Inc.) C:\Windows\System32\hasplms.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9b2689b4e3586127\RtkAudUService64.exe [1673008 2023-05-10] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-3364782867-55803913-202834563-1001\...\Run: [MicrosoftEdgeAutoLaunch_B808638226F52F22B08BF8F7E5687BBA] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3883560 2024-07-11] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3364782867-55803913-202834563-1001\...\Run: [nefarius_HidHide_Updater] => C:\Program Files\Nefarius Software Solutions\HidHide\x64\nefarius_HidHide_Updater.exe [2347432 2024-07-12] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.)
HKU\S-1-5-21-3364782867-55803913-202834563-1001\...\RunOnce: [Application Restart #0] => C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\Application\brave.exe [2866712 2024-06-25] (Brave Software, Inc. -> Brave Software, Inc.)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {60624C53-8D30-46D8-8505-2DC5DEC489D2} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [3089768 2023-02-03] (Acer Incorporated -> ) -> C:\Program Files (x86)\Acer\Care Center\-auto
Task: {BD71A343-39B8-4213-81F3-8E40B92D8902} - System32\Tasks\BraveSoftwareUpdateTaskUserS-1-5-21-3364782867-55803913-202834563-1001Core{57FBE99C-C4CA-46FE-9F76-229CF221BD71} => C:\Users\Martin\AppData\Local\BraveSoftware\Update\BraveUpdate.exe [175424 2023-11-16] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {85510585-E3C0-4517-9617-E614718E71BB} - System32\Tasks\BraveSoftwareUpdateTaskUserS-1-5-21-3364782867-55803913-202834563-1001UA{503E36C2-1BEB-4B1D-88FF-78EAA8AF8C47} => C:\Users\Martin\AppData\Local\BraveSoftware\Update\BraveUpdate.exe [175424 2023-11-16] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {129C0BA7-0A42-496F-BD39-B73491424EE3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpCmdRun.exe [1678960 2024-06-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {194F3943-50BD-4C69-B606-7A665EB9F773} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpCmdRun.exe [1678960 2024-06-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {798FE438-D742-48F3-A6E0-940B60367891} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpCmdRun.exe [1678960 2024-06-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {17365B58-1C9E-4465-B51C-4F4D6683F5D6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpCmdRun.exe [1678960 2024-06-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {989B0EFF-68A9-4535-BB3D-2679E930B51C} - System32\Tasks\nefarius_HidHide_Updater => C:\Program Files\Nefarius Software Solutions\HidHide\x64\nefarius_HidHide_Updater.exe [2347432 2024-07-12] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.)
Task: {90876391-DA13-4530-97D8-6C10B0AAE21F} - System32\Tasks\NitroSense => C:\Program Files\Acer\NitroSense Service\PSLauncher.exe [609640 2023-01-05] (Acer Incorporated -> Acer Incorporated)
Task: {3894559B-16AE-4048-857E-20AEEEC9DEEF} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1277480 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {67DF18A9-34BD-4779-85B4-2790A4D08423} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3347496 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {22539094-10EA-4E1F-9818-7675C0CCC21A} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646696 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {E6D1F279-7C4B-490E-997B-39056C4D6205} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C92481CB-99A5-4CBC-BD83-BBC85761F9CD} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9FA43904-A292-4135-BB9B-8083B4C0E8C5} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7EC4EF9F-51FE-4FB8-A60B-55261B33EBF9} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {EF2F482A-9690-4B4C-AD47-2E18B73EFA8B} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4AF823DB-2C60-4140-98A0-B6A9AD95AD3A} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3D4C67C0-C92C-4522-BD47-AEE99DE739E0} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [461472 2022-12-20] (Acer Incorporated -> Acer Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{27ecc121-d097-46c9-96a8-32ab46778e89}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{fcff51fd-04b4-43e2-99a5-e8045eda766a}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{fcff51fd-04b4-43e2-99a5-e8045eda766a}: [DhcpDomain] speedport.ip
Tcpip\..\Interfaces\{fcff51fd-04b4-43e2-99a5-e8045eda766a}\24572716C6: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Martin\AppData\Local\Microsoft\Edge\User Data\Default [2024-07-14]
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\Martin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-14]
Edge Extension: (Edge relevant text changes) - C:\Users\Martin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-03-24]

Brave:
=======
BRA Profile: C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2024-07-14]
BRA DefaultSearchKeyword: Default -> :g
BRA Extension: (JSON Viewer Pro) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\eifflpmocdbdmepbjaopkkhbfmdgijcc [2024-04-05]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2024-07-14]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2024-07-14]
BRA Extension: (Brave NTP background images) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2024-02-05]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2024-07-14]
BRA Extension: (Wallet Data Files Updater) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2024-01-27]
BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2024-07-14]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2024-07-12]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2023-11-16]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2024-07-14]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2024-07-08]
BRA Extension: (Brave NTP sponsored images) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mjgplcflbkgklplplbakkopkafojhbmk [2024-07-14]
BRA Extension: (Brave Ads Resources) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\obponfmfefkaeehakbehbnnlcbebebhd [2024-06-29]
BRA Extension: (Brave Ad Block Updater (EasyList Czech and Slovak (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\oegebjahecghlckbhkmojgnpcgdeajdi [2024-06-09]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-11-16]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACCSvc; C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe [259432 2023-02-03] (Acer Incorporated -> Acer Incorporated)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [18663720 2024-07-06] (BattlEye Innovations e.K. -> )
R2 DtsApo4Service; C:\Windows\System32\DTS\PC\APO4x\DtsApo4Service.exe [235744 2021-12-21] (DTS, Inc. -> DTS Inc.)
R2 hasplms; C:\Windows\system32\hasplms.exe [4502024 2018-03-29] (SafeNet Canada, Inc. -> SafeNet, Inc.)
R2 HidHideWatchdog.exe; C:\Program Files\Nefarius Software Solutions\HidHide\x64\HidHideWatchdog.exe [1446824 2024-05-12] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.)
S2 Intel(R) Platform License Manager Service; C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2023-12-14] (Intel Corporation -> Intel(R) Corporation)
R2 IntelAudioService; C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_0bfc7052a9e9b3c5\AS\IAS\IntelAudioService.exe [530552 2023-01-19] (Intel Corporation -> Intel)
S3 KAPSService; C:\Windows\System32\drivers\RivetNetworks\Killer\KAPSService.exe [64376 2022-03-29] (Intel Corporation -> Intel® Corporation)
R2 Killer Analytics Service; C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe [2423160 2022-03-29] (Intel Corporation -> Intel)
R2 Killer Network Service; C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2883448 2022-03-29] (Intel Corporation -> Intel)
R3 KNDBWM; C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [64376 2022-03-29] (Intel Corporation -> Intel® Corporation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpDefenderCoreService.exe [1505416 2024-06-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_c9a42395be47885d\Display.NvContainer\NVDisplay.Container.exe [1274888 2024-06-25] (NVIDIA Corporation -> NVIDIA Corporation)
R3 PSSvc; C:\Program Files\Acer\NitroSense Service\PSSvc.exe [867176 2023-01-05] (Acer Incorporated -> Acer Incorporated)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [522200 2024-05-17] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\NisSrv.exe [3236728 2024-06-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MsMpEng.exe [133704 2024-06-09] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AcerAirplaneModeController; C:\Windows\System32\drivers\AcerAirplaneModeController.sys [30168 2020-05-12] (Acer Incorporated -> Acer Incorporated)
R4 EUDCPEPM; C:\Windows\system32\drivers\EUDCPEPM.sys [76344 2024-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
S3 FXVAD; C:\Windows\system32\drivers\fxvad.sys [326656 2022-04-15] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [1304816 2018-03-29] (SafeNet, Inc. -> SafeNet, Inc.)
R3 HidHide; C:\Windows\System32\drivers\HidHide.sys [59088 2023-10-31] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)
R3 iaLPSS2_GPIO2_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_c385707073e5c73f\iaLPSS2_GPIO2_ADL.sys [139912 2021-10-25] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_8ad31c966ef4e638\iaLPSS2_I2C_ADL.sys [207504 2021-10-25] (Intel Corporation -> Intel Corporation)
R3 IntcUSB; C:\Windows\System32\DriverStore\FileRepository\intcusb.inf_amd64_a63c64fdd7b6a5c5\IntcUSB.sys [915592 2023-01-19] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\Windows\System32\DriverStore\FileRepository\gna.inf_amd64_19ceb7ce67a7cf8b\gna.sys [87208 2021-09-23] (Intel Corporation -> Intel Corporation)
R3 KfeCoSvc; C:\Windows\System32\drivers\RivetNetworks\Killer\KfeCo10X64.sys [172264 2022-03-29] (Intel Corporation -> Rivet Networks, LLC.)
R3 MpKsl6a81906c; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E5A1D26E-AA84-4340-8F3A-E1C4E6D402CD}\MpKslDrv.sys [271640 2024-07-14] (Microsoft Windows -> Microsoft Corporation)
R3 NvModuleTracker; C:\Windows\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys [47240 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvpcf; C:\Windows\System32\drivers\nvpcf.sys [236576 2024-05-14] (NVIDIA Corporation -> NVIDIA Corporation)
S3 tap0901; C:\Windows\System32\drivers\tap0901.sys [39920 2023-12-01] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R1 ViGEmBus; C:\Windows\System32\drivers\ViGEmBus.sys [249400 2022-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [22080 2024-06-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [602520 2024-06-09] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105880 2024-06-09] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2024-07-14 11:30 - 2024-07-14 11:30 - 000021675 _____ C:\Users\Martin\Desktop\FRST.txt
2024-07-14 11:29 - 2024-07-14 11:30 - 000000000 ____D C:\FRST
2024-07-14 11:28 - 2024-07-14 11:28 - 002395648 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2024-07-14 11:04 - 2024-07-14 11:04 - 000000000 ____D C:\Users\Martin\Downloads\ChipGenius
2024-07-14 11:03 - 2024-07-14 11:03 - 000000000 ____D C:\Users\Martin\AppData\Local\UninstallUI
2024-07-14 10:55 - 2024-07-14 10:55 - 000000023 _____ C:\Users\Martin\AppData\Roaming\epm_user.ini
2024-07-14 10:54 - 2024-07-14 11:04 - 000000000 ____D C:\Program Files (x86)\EaseUS
2024-07-14 10:54 - 2024-07-14 10:54 - 000000000 ____D C:\Users\Martin\AppData\Local\SpacePop
2024-07-14 10:54 - 2024-07-14 10:54 - 000000000 ____D C:\Users\Martin\AppData\Local\EPMUI
2024-07-14 10:54 - 2024-07-14 10:54 - 000000000 ____D C:\ProgramData\SystemAcCrux
2024-07-14 10:53 - 2024-07-14 11:04 - 000000000 ____D C:\Program Files\EaseUS
2024-07-14 10:13 - 2024-07-14 10:14 - 000000000 ____D C:\AdwCleaner
2024-07-14 10:12 - 2024-07-14 10:12 - 008790880 _____ (Malwarebytes) C:\Users\Martin\Desktop\adwcleaner.exe
2024-07-14 09:19 - 2024-07-14 09:19 - 000000000 ____D C:\Users\Martin\AppData\Local\Transcend_Information_Inc
2024-07-14 09:06 - 2024-07-14 09:13 - 000000000 ____D C:\Users\Martin\Downloads\The.Roundup.Punishment.2024.1080p.WEBRip.x264.AAC-WORLD
2024-07-13 10:00 - 2024-07-13 10:00 - 000000000 ____D C:\Users\Martin\AppData\Local\WB Games
2024-07-12 16:54 - 2024-07-12 16:54 - 000374206 _____ C:\Windows\ntbtlog.txt
2024-07-12 16:54 - 2024-07-12 16:54 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2024-07-12 16:42 - 2024-07-12 16:42 - 000000000 ___HD C:\$Windows.~WS
2024-07-12 16:42 - 2024-07-12 16:42 - 000000000 ____D C:\$WINDOWS.~BT
2024-07-12 16:41 - 2024-07-12 16:41 - 000000432 __RSH C:\ProgramData\ntuser.pol
2024-07-12 16:39 - 2024-07-12 16:39 - 000000065 _____ C:\Users\Martin\Downloads\rufus.ini
2024-07-12 16:38 - 2024-07-12 16:38 - 001513032 _____ (Akeo Consulting) C:\Users\Martin\Downloads\rufus-4.5p.exe
2024-07-12 16:37 - 2024-07-12 16:37 - 000000000 ____D C:\Users\Martin\Desktop\lubo
2024-07-12 16:20 - 2024-07-12 16:20 - 000000000 ____D C:\Windows\system32\compatrel
2024-07-12 16:11 - 2024-07-12 16:11 - 000021724 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-07-12 16:11 - 2024-07-12 16:11 - 000021724 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2024-07-12 16:08 - 2024-07-12 16:08 - 000000000 ___HD C:\$WinREAgent
2024-07-12 16:03 - 2024-07-12 16:16 - 2454307455 _____ C:\Users\Martin\Downloads\Kaskadér, The Fall Guy (2024) (CZ).mkv
2024-07-12 16:02 - 2024-07-12 16:04 - 000000000 ____D C:\Users\Martin\Downloads\Furiosa A Mad Max Saga (2024) [1080p] [WEBRip] [5.1] [YTS.MX]
2024-07-12 13:43 - 2024-07-12 13:43 - 000003698 _____ C:\Windows\system32\Tasks\nefarius_HidHide_Updater
2024-07-12 13:43 - 2024-07-12 13:43 - 000001348 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HidHide Configuration Client.lnk
2024-07-12 13:43 - 2024-07-12 13:43 - 000001342 _____ C:\Users\Public\Desktop\HidHide Configuration Client.lnk
2024-07-12 13:43 - 2024-07-12 13:43 - 000000000 ____D C:\ProgramData\Nefarius Software Solutions
2024-07-08 10:05 - 2024-07-08 10:06 - 000000000 ____D C:\Users\Martin\AppData\Roaming\EldenRing
2024-07-08 10:03 - 2024-07-08 10:07 - 000001791 _____ C:\Users\Martin\Desktop\Elden Ring česky.lnk
2024-07-08 10:03 - 2024-07-08 10:03 - 000000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elden Ring čeština - MUŽ
2024-07-08 08:36 - 2024-07-08 08:36 - 000000000 ____D C:\Games
2024-07-08 07:50 - 2024-06-25 18:26 - 002031464 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2024-07-08 07:50 - 2024-06-25 18:26 - 002031464 _____ C:\Windows\system32\vulkaninfo.exe
2024-07-08 07:50 - 2024-06-25 18:26 - 001578752 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-07-08 07:50 - 2024-06-25 18:26 - 001578752 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2024-07-08 07:50 - 2024-06-25 18:26 - 001445120 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2024-07-08 07:50 - 2024-06-25 18:26 - 001445120 _____ C:\Windows\system32\vulkan-1.dll
2024-07-08 07:50 - 2024-06-25 18:26 - 001295104 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2024-07-08 07:50 - 2024-06-25 18:26 - 001295104 _____ C:\Windows\SysWOW64\vulkan-1.dll
2024-07-08 07:50 - 2024-06-25 18:26 - 000477816 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2024-07-08 07:50 - 2024-06-25 18:26 - 000374392 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2024-07-08 07:50 - 2024-06-25 18:23 - 001068664 _____ (NVIDIA Corporation) C:\Windows\system32\nvml.dll
2024-07-08 07:50 - 2024-06-25 18:23 - 000670344 _____ (NVIDIA Corporation) C:\Windows\system32\nvofapi64.dll
2024-07-08 07:50 - 2024-06-25 18:23 - 000505992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvofapi.dll
2024-07-08 07:50 - 2024-06-25 18:22 - 001549320 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2024-07-08 07:50 - 2024-06-25 18:22 - 001204744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2024-07-08 07:50 - 2024-06-25 18:22 - 000847880 _____ (NVIDIA Corporation) C:\Windows\system32\nvidia-smi.exe
2024-07-08 07:50 - 2024-06-25 18:21 - 002180728 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2024-07-08 07:50 - 2024-06-25 18:21 - 001631368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2024-07-08 07:50 - 2024-06-25 18:21 - 001033352 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2024-07-08 07:50 - 2024-06-25 18:21 - 000795656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2024-07-08 07:50 - 2024-06-25 18:21 - 000460936 _____ (NVIDIA Corporation) C:\Windows\system32\nvdebugdump.exe
2024-07-08 07:50 - 2024-06-25 18:20 - 016119432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2024-07-08 07:50 - 2024-06-25 18:20 - 013009032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2024-07-08 07:50 - 2024-06-25 18:20 - 006914696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2024-07-08 07:50 - 2024-06-25 18:20 - 005914144 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2024-07-08 07:50 - 2024-06-25 18:20 - 005867656 _____ (NVIDIA Corporation) C:\Windows\system32\nvcudadebugger.dll
2024-07-08 07:50 - 2024-06-25 18:20 - 003788936 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2024-07-08 07:50 - 2024-06-25 18:19 - 000853536 _____ (NVIDIA Corporation) C:\Windows\system32\MCU.exe
2024-07-08 07:50 - 2024-06-25 18:18 - 007061880 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2024-07-08 07:50 - 2024-06-25 18:18 - 006142632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2024-07-08 07:50 - 2024-06-25 10:54 - 000123973 _____ C:\Windows\system32\nvinfo.pb
2024-07-06 13:26 - 2024-07-06 13:29 - 699693467 _____ C:\Users\Martin\Downloads\Luminar AI 1.5.3.10043 (x64) Repack.zip
2024-06-21 20:34 - 2024-06-21 20:34 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2024-06-21 20:34 - 2023-05-10 10:06 - 006470488 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2024-06-16 18:18 - 2024-06-16 18:18 - 010568588 _____ () C:\Users\Martin\Downloads\SoW_CS_21.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2024-07-14 11:19 - 2023-11-16 02:27 - 000000000 ____D C:\Users\Martin\AppData\Local\D3DSCache
2024-07-14 11:18 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-07-14 11:18 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2024-07-14 11:18 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-07-14 11:18 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2024-07-14 11:08 - 2023-12-15 16:57 - 000023430 _____ C:\Users\Martin\AppData\LocalLow\e9eb8b0291dbcc1532e363ece03438af1bb95354c9823c44f960a38305504a2c
2024-07-14 11:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Registration
2024-07-14 10:53 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2024-07-14 10:41 - 2023-11-16 01:49 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-07-14 10:18 - 2024-04-11 13:50 - 000050216 _____ C:\Windows\system32\perfh01B.dat
2024-07-14 10:18 - 2024-04-11 13:50 - 000012322 _____ C:\Windows\system32\perfc01B.dat
2024-07-14 10:18 - 2023-11-16 01:54 - 000884768 _____ C:\Windows\system32\PerfStringBackup.INI
2024-07-14 10:15 - 2023-11-16 02:34 - 000000000 ____D C:\ProgramData\Acer
2024-07-14 10:14 - 2023-11-16 02:28 - 000000000 ____D C:\ProgramData\NVIDIA
2024-07-14 10:14 - 2023-11-16 01:49 - 000008192 ___SH C:\DumpStack.log.tmp
2024-07-14 10:14 - 2023-11-16 01:49 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-07-14 10:14 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState
2024-07-14 10:14 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2024-07-14 10:10 - 2023-11-16 07:13 - 000000000 ____D C:\Users\Martin\AppData\Roaming\qBittorrent
2024-07-14 09:20 - 2023-11-16 02:07 - 000000000 ___RD C:\Users\Martin\OneDrive
2024-07-14 09:20 - 2023-11-16 02:03 - 000000000 ____D C:\Users\Martin\AppData\Local\Packages
2024-07-14 08:53 - 2023-11-16 02:49 - 000000000 ____D C:\Users\Martin\AppData\Local\NVIDIA
2024-07-13 11:44 - 2023-11-16 03:21 - 000000000 ____D C:\Program Files (x86)\Steam
2024-07-12 16:43 - 2023-11-16 01:49 - 000000000 ____D C:\Windows\Panther
2024-07-12 16:39 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2024-07-12 16:20 - 2023-12-04 17:53 - 000000000 ____D C:\Windows\InboxApps
2024-07-12 16:20 - 2023-11-16 01:49 - 000259760 _____ C:\Windows\system32\FNTCACHE.DAT
2024-07-12 16:20 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-07-12 16:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2024-07-12 16:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2024-07-12 16:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2024-07-12 16:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\setup
2024-07-12 16:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2024-07-12 16:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2024-07-12 16:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2024-07-12 16:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser
2024-07-12 16:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellExperiences
2024-07-12 16:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellComponents
2024-07-12 16:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2024-07-12 16:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2024-07-12 16:11 - 2023-11-16 01:52 - 003016192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2024-07-12 16:07 - 2023-11-16 02:42 - 194135240 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-07-12 16:07 - 2023-11-16 02:42 - 000000000 ____D C:\Windows\system32\MRT
2024-07-12 13:43 - 2023-11-17 16:50 - 000000000 ____D C:\Program Files\Nefarius Software Solutions
2024-07-12 13:26 - 2023-11-16 01:49 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-07-12 13:20 - 2023-11-16 01:49 - 000003630 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-07-12 13:20 - 2023-11-16 01:49 - 000003506 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-07-08 10:01 - 2024-04-13 19:27 - 000000000 ___HD C:\Windows\msdownld.tmp
2024-07-08 10:01 - 2024-04-13 19:27 - 000000000 ____D C:\Windows\SysWOW64\directx
2024-07-08 10:01 - 2023-11-16 02:50 - 000000000 ____D C:\Windows\SystemTemp
2024-07-08 07:47 - 2023-11-21 10:23 - 000000000 ____D C:\Users\Martin\Desktop\Hry
2024-07-08 07:47 - 2023-11-21 10:22 - 000000000 ____D C:\Users\Martin\Desktop\Programy
2024-07-06 18:47 - 2023-11-21 10:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlestate Games
2024-06-27 14:51 - 2023-11-16 02:25 - 000002632 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2024-06-27 14:51 - 2023-11-16 02:25 - 000002595 _____ C:\Users\Martin\Desktop\Brave.lnk
2024-06-21 20:36 - 2023-11-16 03:10 - 000000000 ___HD C:\Program Files (x86)\Temp
2024-06-21 19:17 - 2023-11-16 02:11 - 000000000 ____D C:\Users\Martin\AppData\Local\ElevatedDiagnostics
2024-06-16 17:58 - 2023-11-16 02:28 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2024-06-16 17:57 - 2023-11-16 09:50 - 000004308 _____ C:\Windows\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-06-16 17:57 - 2023-11-16 09:50 - 000003976 _____ C:\Windows\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-06-16 17:57 - 2023-11-16 09:50 - 000003940 _____ C:\Windows\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-06-16 17:57 - 2023-11-16 09:50 - 000003894 _____ C:\Windows\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-06-16 17:57 - 2023-11-16 09:50 - 000003858 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-06-16 17:57 - 2023-11-16 09:50 - 000003858 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-06-16 17:57 - 2023-11-16 09:50 - 000003858 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-06-16 17:57 - 2023-11-16 09:50 - 000003858 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-06-16 17:57 - 2023-11-16 09:50 - 000003654 _____ C:\Windows\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-06-16 17:57 - 2023-11-16 03:16 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2024-06-16 17:57 - 2023-11-16 02:28 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2024-06-16 16:12 - 2023-11-16 07:18 - 000000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

==================== Files in the root of some directories ========

2024-07-14 10:55 - 2024-07-14 10:55 - 000000023 _____ () C:\Users\Martin\AppData\Roaming\epm_user.ini
2024-04-25 13:05 - 2024-04-25 13:05 - 000000136 _____ () C:\Users\Martin\AppData\Local\krita-scripterrc
2024-04-25 13:02 - 2024-04-25 13:07 - 000007877 _____ () C:\Users\Martin\AppData\Local\krita-sysinfo.log
2024-04-25 13:02 - 2024-04-25 13:22 - 000002003 _____ () C:\Users\Martin\AppData\Local\krita.log
2024-04-25 13:22 - 2024-04-25 13:22 - 000000039 _____ () C:\Users\Martin\AppData\Local\kritadisplayrc
2024-04-25 13:02 - 2024-04-25 13:22 - 000017346 _____ () C:\Users\Martin\AppData\Local\kritarc
2024-02-11 10:50 - 2024-02-11 10:50 - 000000218 _____ () C:\Users\Martin\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13.07.2024
Ran by Martin (14-07-2024 11:30:51)
Running from C:\Users\Martin\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.4651 (X64) (2023-11-15 23:50:24)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3364782867-55803913-202834563-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3364782867-55803913-202834563-503 - Limited - Disabled)
Guest (S-1-5-21-3364782867-55803913-202834563-501 - Limited - Disabled)
Martin (S-1-5-21-3364782867-55803913-202834563-1001 - Administrator - Enabled) => C:\Users\Martin
WDAGUtilityAccount (S-1-5-21-3364782867-55803913-202834563-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AC: Valhalla CZ v3.1 (HKLM-x32\...\AC: Valhalla CZ) (Version: 3.1 - Squiee)
Alan Wake 2 (HKLM-x32\...\Alan Wake 2_is1) (Version: 0.0.0 - DODI-Repacks)
Assassin's Creed Valhalla (HKLM-x32\...\Uplay Install 13504) (Version: - Ubisoft)
Battlestate Games Launcher 14.3.1.2482 (HKLM-x32\...\{B0FDA062-7581-4D67-B085-C4E7C358037F}_is1) (Version: 14.3.1.2482 - Battlestate Games)
Brave (HKU\S-1-5-21-3364782867-55803913-202834563-1001\...\BraveSoftware Brave-Browser) (Version: 126.1.67.123 - Autori prehliadača Brave)
Discord (HKU\S-1-5-21-3364782867-55803913-202834563-1001\...\Discord) (Version: 1.0.9024 - Discord Inc.)
ELDEN RING (HKLM-x32\...\ELDEN RING_is1) (Version: - )
Elden Ring čeština - MUŽ (HKLM-x32\...\Elden Ring čeština - MUŽ) (Version: 1.02.2b - FARFLAMOVY ČEŠTINY)
Escape from Tarkov (HKLM-x32\...\EscapeFromTarkov) (Version: 0.14.9.6.31073 - Battlestate Games)
HECATE Connect (HKU\S-1-5-21-3364782867-55803913-202834563-1001\...\HECATE Connect) (Version: 1.0.0.3 - Edifier Esports Technology Co., Ltd.)
HidHide (HKLM\...\{01E0AB21-D1CC-42B4-9DFF-84FFE4F26DAF}) (Version: 1.5.230 - Nefarius Software Solutions e.U.)
HxD Hex Editor 2.5 (HKLM\...\HxD_is1) (Version: 2.5 - Maël Hörz)
Intel(R) Chipset Device Software (HKLM\...\{E6CC1C02-638D-44F5-8BAE-E455453F80BA}) (Version: 10.1.19468.8385 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{8af15a1a-f70d-4968-84c0-97df0607c3e6}) (Version: 10.1.19468.8385 - Intel(R) Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.2134.22 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{D2261734-FC8C-4C96-B4FA-98C3B76ACED6}) (Version: 30.100.2134.22 - Intel Corporation) Hidden
Killer Ethernet Performance Driver Suite UWD (HKLM\...\{A4078235-5F51-4F2C-947F-0792F7D9D43A}) (Version: 3.1122.3146 - Rivet Networks)
Krita (x64) 5.2.2 (HKLM\...\Krita_x64) (Version: 5.2.2.100 - Krita Foundation)
Microsoft .NET Host - 6.0.25 (x64) (HKLM\...\{C7141A99-592B-4226-A4E9-B767C1D0FBAF}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host - 7.0.17 (x64) (HKLM\...\{089B0F2C-87D9-4470-B6E6-154DD6961C56}) (Version: 56.68.10360 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.4 (x64) (HKLM\...\{85D9FDA9-B82F-4DC6-A598-DC5EEE78ABFB}) (Version: 64.16.12025 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.25 (x64) (HKLM\...\{AE86D888-1404-47CC-A7BB-8D86C0503E58}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 7.0.17 (x64) (HKLM\...\{6B4D3428-4800-446B-971F-62A7377F06F6}) (Version: 56.68.10360 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.4 (x64) (HKLM\...\{2DF8788F-CE7B-4D48-AE13-00F807A959CC}) (Version: 64.16.12025 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.25 (x64) (HKLM\...\{3544B2EE-E62F-4D11-B79C-3DDEACE94DA5}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 7.0.17 (x64) (HKLM\...\{A638EFAE-5229-46A8-9A18-D0FF9D9827D2}) (Version: 56.68.10360 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.4 (x64) (HKLM\...\{F03725EC-977F-4425-A568-05D0B3DB9F15}) (Version: 64.16.12025 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.3 - Shared Framework (x64) (HKLM-x32\...\{62fb5773-cc60-4e02-9975-4a7db46a0f1f}) (Version: 8.0.3.24116 - Microsoft Corporation)
Microsoft ASP.NET Core 8.0.3 Shared Framework (x64) (HKLM\...\{85741B9D-ABC8-3E40-8721-3BD0B4629F8E}) (Version: 8.0.3.24116 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 126.0.2592.102 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 126.0.2592.102 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.34.31931 (HKLM-x32\...\{d4cecf3b-b68f-4995-8840-52ea0fab646e}) (Version: 14.34.31931.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.31.31103 (HKLM-x32\...\{41d7b770-418a-43b7-95a5-f925fff05789}) (Version: 14.31.31103.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.34.31931 (HKLM\...\{EAE242B1-0A26-485A-BFEB-0292EE9F03CB}) (Version: 14.34.31931 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.34.31931 (HKLM\...\{CF4C347D-954E-4543-88D2-EC17F07F466F}) (Version: 14.34.31931 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.31.31103 (HKLM-x32\...\{5720EC03-F26F-40B7-980C-50B5D420B5DE}) (Version: 14.31.31103 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.31.31103 (HKLM-x32\...\{799E3FFF-705C-461F-B400-6DE27398B3E5}) (Version: 14.31.31103 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.25 (x64) (HKLM\...\{E016F2B9-01FE-4FAA-882E-ECC43FA49751}) (Version: 48.100.4037 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.25 (x64) (HKLM-x32\...\{fb0500c1-f968-4621-a48b-985b52884c49}) (Version: 6.0.25.33020 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 7.0.17 (x64) (HKLM\...\{93812F65-BAA9-42E0-AF19-F15F39A92E3C}) (Version: 56.68.10379 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 7.0.17 (x64) (HKLM-x32\...\{24a68a65-6ac6-4276-9d7d-2c3939d8474e}) (Version: 7.0.17.33416 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.4 (x64) (HKLM\...\{4B91040F-9192-4D51-B1CE-36B959846C8D}) (Version: 64.16.12024 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.4 (x64) (HKLM-x32\...\{93344293-35c0-4560-8a6c-1b06afd31de4}) (Version: 8.0.4.33519 - Microsoft Corporation)
MPC-HC 1.7.9 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.9 - MPC-HC Team)
NitroSense Service (HKLM\...\{6FC78E80-6385-43D6-8A43-FA80094F1A2E}) (Version: 3.01.3052 - Acer Incorporated)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.6.5 - Notepad++ Team)
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.28.0.417 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.28.0.417 - NVIDIA Corporation)
NVIDIA Grafický ovládač 556.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 556.12 - NVIDIA Corporation)
NVIDIA Ovládač zvuku HD 1.4.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.0.1 - NVIDIA Corporation)
NVIDIA Softvér systému s podporou technológie PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
Peace (HKLM\...\Peace) (Version: 1.6.4.1 - P.E. Verbeek)
PureVPN (HKLM-x32\...\{fd7bbba7-82cd-400c-9f57-b635ae521047}) (Version: 11.19.1.0 - ) Hidden
PureVPN (HKLM-x32\...\PureVPN) (Version: 11.19.1.0 - GZ Systems)
qBittorrent (HKLM-x32\...\qBittorrent) (Version: 4.6.4 - The qBittorrent project)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9514.1 - Realtek Semiconductor Corp.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak (HKLM\...\{1A2225E5-E3DC-4227-B307-9857CCCCF540}) (Version: 5.0.0 - TeamSpeak)
Telegram Desktop (HKU\S-1-5-21-3364782867-55803913-202834563-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 4.16.1 - Telegram FZ-LLC)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 147.0.10965 - Ubisoft)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{85C69797-7336-4E83-8D97-32A7C8465A3B}) (Version: 8.94.0.0 - Microsoft Corporation)
ViGEm Bus Driver (HKLM\...\{966606F3-2745-49E9-BF15-5C3EAA4E9077}) (Version: 1.22.0 - Nefarius Software Solutions e.U.)
Windows Kontrola stavu počítača (HKLM\...\{8D6B9DC1-A437-41E0-8DF1-9F37748394AE}) (Version: 3.6.2204.08001 - Microsoft Corporation)
WinRAR 7.00 beta 1 64-bit (HKLM\...\WinRAR archiver) (Version: 7.00.1 - win.rar GmbH)

Packages:
=========

Acer Purified Voice Console (R) -> C:\Program Files\WindowsApps\AcerIncorporated.AcerPurifiedVoiceConsoleR_2.0.4.0_x64__48frkmn4z8aw4 [2024-02-08] (Acer Incorporated)
Care Center S -> C:\Program Files\WindowsApps\AcerIncorporated.AcerCareCenterS_4.0.3054.0_x64__48frkmn4z8aw4 [2023-11-16] (Acer Incorporated)
DOC Viewer Free -> C:\Program Files\WindowsApps\62307pauljohn.DOCViewerFree_1.1.0.1_x86__7sv5v3m8wq0b2 [2024-04-03] (pauljohn)
DTS:X Ultra -> C:\Program Files\WindowsApps\DTSInc.DTSXUltra_1.13.5.0_x64__t5j2fzbtdg37r [2024-04-13] (DTS, Inc.)
Killer Intelligence Center -> C:\Program Files\WindowsApps\RivetNetworks.KillerControlCenter_3.1122.329.0_x64__rh07ty8m5nkag [2023-11-16] (Rivet Networks LLC) [Startup Task]
NitroSense_V31 -> C:\Program Files\WindowsApps\AcerIncorporated.NitroSenseV31_3.1.3052.0_x64__48frkmn4z8aw4 [2023-11-16] (Acer Incorporated)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-07-08] (NVIDIA Corp.)
Ovládacie centrum pre grafiku Intel® -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5536.0_x64__8j3eq9eme6ctt [2024-06-16] (INTEL CORP) [Startup Task]
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.41.294.0_x64__dt26b99r8h8gj [2023-11-16] (Realtek Semiconductor Corp)
Vyhľadávanie na webe z Microsoft Bingu -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.92.0_x64__8wekyb3d8bbwe [2024-04-10] (Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3364782867-55803913-202834563-1001_Classes\CLSID\{06B74C04-E813-4DD4-A972-172836EFA8D6}\InprocServer32 -> C:\Users\Martin\AppData\Local\BraveSoftware\Update\1.3.361.149\psuser_64.dll (Brave Software, Inc. -> BraveSoftware Inc.)
CustomCLSID: HKU\S-1-5-21-3364782867-55803913-202834563-1001_Classes\CLSID\{06C9646D-2807-44C0-97D2-6DA0DB623DB4}\localserver32 -> C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\Application\126.1.67.123\notification_helper.exe (Brave Software, Inc. -> Brave Software, Inc.)
CustomCLSID: HKU\S-1-5-21-3364782867-55803913-202834563-1001_Classes\CLSID\{2611B500-C92D-4949-B04B-9B7039C47E03}\InprocServer32 -> C:\Users\Martin\AppData\Local\BraveSoftware\Update\1.3.361.147\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3364782867-55803913-202834563-1001_Classes\CLSID\{5C4D8D77-5B87-40CA-884E-F56858227E5C}\localserver32 -> C:\Users\Martin\AppData\Local\Programs\TeamSpeak\notification_helper.exe => No File
CustomCLSID: HKU\S-1-5-21-3364782867-55803913-202834563-1001_Classes\CLSID\{8AA6EF38-7866-40A3-BFB4-F33477ADB1F1}\InprocServer32 -> C:\Users\Martin\AppData\Local\BraveSoftware\Update\1.3.361.137\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3364782867-55803913-202834563-1001_Classes\CLSID\{B9E8CB05-29AD-419B-90EC-50B4683419A4}\InprocServer32 -> C:\Users\Martin\AppData\Local\BraveSoftware\Update\1.3.361.141\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3364782867-55803913-202834563-1001_Classes\CLSID\{C3B0D5E9-CAF5-48D2-AD21-41C74C237DEC}\InprocServer32 -> C:\Users\Martin\AppData\Local\BraveSoftware\Update\1.3.361.149\psuser_64.dll (Brave Software, Inc. -> BraveSoftware Inc.)
CustomCLSID: HKU\S-1-5-21-3364782867-55803913-202834563-1001_Classes\CLSID\{F6E536F5-F795-49CE-A85D-2DA66503C6F1}\InprocServer32 -> C:\Users\Martin\AppData\Local\BraveSoftware\Update\1.3.361.149\psuser_64.dll (Brave Software, Inc. -> BraveSoftware Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-10-23] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-10-23] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_c9a42395be47885d\nvshext.dll [2024-06-25] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-10-23] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-10-23] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========


==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 11:14 - 2019-12-07 11:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3364782867-55803913-202834563-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKU\S-1-5-21-3364782867-55803913-202834563-1001\...\StartupApproved\Run: => "BraveSoftware Update"
HKU\S-1-5-21-3364782867-55803913-202834563-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-3364782867-55803913-202834563-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-3364782867-55803913-202834563-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_B808638226F52F22B08BF8F7E5687BBA"
HKU\S-1-5-21-3364782867-55803913-202834563-1001\...\StartupApproved\Run: => "nefarius_HidHide_Updater"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{AF9AC315-A3AD-4CF0-AD74-D0D5717C5CBF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{E2BD508E-F9E2-43D7-A7F2-3BE174CD0EE0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{EFA9FCEA-2451-45DA-B95D-B16F014A6031}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{32E422A9-CD86-4CCF-83C1-D9ABCE49F540}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{5BE95F4A-DCD5-4D6C-B5FA-725207218298}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [{5CB08550-BD43-4BC2-81CF-E61B72C4B323}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [{B28B132E-184E-4E3A-8C2D-FC020682D367}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{25E9B4FA-97ED-452F-AB33-AA74B677BCF1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{1758E79B-12AC-4F55-8C71-A2880006123B}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed Valhalla\ACValhalla_Plus.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [TCP Query User{420DF321-26FD-48FB-982F-2A1FAAE432B9}C:\users\martin\appdata\local\bravesoftware\brave-browser\application\brave.exe] => (Block) C:\users\martin\appdata\local\bravesoftware\brave-browser\application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [UDP Query User{DD01C494-1784-4AD1-B791-1A76EE05462B}C:\users\martin\appdata\local\bravesoftware\brave-browser\application\brave.exe] => (Block) C:\users\martin\appdata\local\bravesoftware\brave-browser\application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [TCP Query User{BF739891-DA2E-498F-A11B-DB180508A607}C:\program files (x86)\gz systems\purevpn\purevpn.exe] => (Allow) C:\program files (x86)\gz systems\purevpn\purevpn.exe (GZ Systems Limited -> GZ Systems)
FirewallRules: [UDP Query User{2A028887-4F84-41AF-B0CE-CA9AD5D80F13}C:\program files (x86)\gz systems\purevpn\purevpn.exe] => (Allow) C:\program files (x86)\gz systems\purevpn\purevpn.exe (GZ Systems Limited -> GZ Systems)
FirewallRules: [TCP Query User{087935A2-EA53-4C3C-9DFB-2C647387B4BF}C:\program files (x86)\crash bandicoot n sane trilogy\crashbandicootnsanetrilogy.exe] => (Allow) C:\program files (x86)\crash bandicoot n sane trilogy\crashbandicootnsanetrilogy.exe => No File
FirewallRules: [UDP Query User{139E7CDC-1A77-4240-9EB9-923531D67FB6}C:\program files (x86)\crash bandicoot n sane trilogy\crashbandicootnsanetrilogy.exe] => (Allow) C:\program files (x86)\crash bandicoot n sane trilogy\crashbandicootnsanetrilogy.exe => No File
FirewallRules: [{9796DA63-8D58-4156-AC64-D5503711B311}] => (Allow) C:\Windows\system32\hasplms.exe (SafeNet Canada, Inc. -> SafeNet, Inc.)
FirewallRules: [{88A01511-999D-4F96-A141-60FC5674E5D9}] => (Allow) C:\Program Files\Unity Hub\Unity Hub.exe => No File
FirewallRules: [{CCA23544-F228-48FA-A038-3949EFC0A32C}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [{CEA8E090-5770-42C5-A891-592DF081B26B}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [{3C03D50D-9DE2-4BD6-84B2-CA31BA9BE566}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{FA87B9EB-B83E-406C-B065-BB6A902732B7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F0B2DA31-34B2-4A38-8D85-B9C4CBB65C63}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{4EFCD59C-8698-4DF3-9E8A-7E60859AFB42}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F2A710C8-05B1-4E52-B229-11356C916EDE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ShadowOfWar\x64\ShadowOfWar.exe (WB Games Inc. -> WB Games, Inc.) [File not signed]
FirewallRules: [{4C044598-6368-4D3B-B326-6057AC37DD32}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ShadowOfWar\x64\ShadowOfWar.exe (WB Games Inc. -> WB Games, Inc.) [File not signed]
FirewallRules: [{593DDE83-F0B7-4365-9A1A-2936CB1ABDD2}] => (Allow) C:\Battlestate Games\BsgLauncher\BsgLauncher.exe (BATTLESTATE GAMES LIMITED -> Battlestate Games)
FirewallRules: [{78EB5D69-5D23-437B-91ED-CF366A0B805D}] => (Allow) C:\Battlestate Games\BsgLauncher\BsgLauncher.exe (BATTLESTATE GAMES LIMITED -> Battlestate Games)
FirewallRules: [{C5D24783-D86C-4AFA-84C5-39E257F13D55}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.102\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

21-06-2024 19:16:08 Odstránené Realtek Audio Driver
08-07-2024 08:20:42 Scheduled Checkpoint
12-07-2024 13:20:23 Inštalátor modulov systému Windows
14-07-2024 10:13:52 AdwCleaner_BeforeCleaning_14/07/2024_10:13:52

==================== Faulty Device Manager Devices ============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Universal Serial Bus (USB) Controller
Description: Universal Serial Bus (USB) Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI Data Acquisition and Signal Processing Controller
Description: PCI Data Acquisition and Signal Processing Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: ========================

Application errors:
==================
Error: (07/14/2024 10:15:01 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80004005
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (07/14/2024 10:14:55 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80004005
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (07/14/2024 10:14:34 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80004005
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (07/14/2024 09:55:46 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80004005
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (07/14/2024 09:55:38 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80004005
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (07/14/2024 09:55:09 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80004005
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (07/14/2024 09:55:09 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80004005
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (07/14/2024 08:47:00 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80004005
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable


System errors:
=============
Error: (07/14/2024 10:54:07 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Virtual Disk sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 60000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (07/14/2024 10:53:52 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby EuGdiDrv zlyhalo kvôli nasledujúcej chybe:
The system cannot find the file specified.

Error: (07/14/2024 10:15:24 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 30000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (07/14/2024 10:14:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Content Protection HDCP Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (07/14/2024 10:14:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Predator Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (07/14/2024 10:14:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Killer Analytics Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (07/14/2024 10:14:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Killer Network Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (07/14/2024 10:14:04 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba NVIDIA LocalSystem Container sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 6000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.


Windows Defender:
================
Date: 2024-07-08 08:15:26
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2024-06-17 16:44:18
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2024-06-01 15:31:15
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2024-05-30 17:33:14
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2024-05-24 21:39:03
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Event[0]:

Date: 2024-07-12 16:54:13
Description:
Microsoft Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x8007043c
Error description: This service cannot be started in Safe Mode
Reason: Antimalware security intelligence has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.

CodeIntegrity:
===============
Date: 2024-04-11 13:44:16
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Unity Hub\Unity Hub.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.

Date: 2024-04-11 13:44:16
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Unity Hub\Unity Hub.exe) attempted to load \Device\HarddiskVolume3\Program Files\Unity Hub\vulkan-1.dll that did not meet the Microsoft signing level requirements.

Date: 2024-04-10 13:37:30
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_64f1ea0105c67ec6\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

BIOS: Insyde Corp. V2.05 04/12/2023
Motherboard: ADL Ignis_ADH
Processor: 12th Gen Intel(R) Core(TM) i5-12450H
Percentage of memory in use: 34%
Total physical RAM: 16070.49 MB
Available physical RAM: 10490.61 MB
Total Virtual: 19398.49 MB
Available Virtual: 13616.43 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:952.85 GB) (Free:229.8 GB) (Model: SAMSUNG MZVL21T0HCLR-00B07) NTFS

\\?\Volume{09e82516-e0aa-4326-b33f-d16c97c66ef4}\ (UEFISHELL) (Fixed) (Total:1 GB) (Free:0.97 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 953.9 GB) (Disk ID: 2F1F68A4)

Partition: GPT.

==================== End of Addition.txt =======================

[JaRon]

Ahoj,
prescanuj PC s MBAM - log sem

[Bruno39]

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 7/14/2024
Scan Time: 5:26 PM
Log File: 7bffe1ca-41f5-11ef-b1d9-40c2ba18fa37.json

-Software Information-
Version: 5.1.6.117
Components Version: 1.0.1270
Update Package Version: 1.0.86828
License: Trial

-System Information-
OS: Windows 10 (Build 19045.4651)
CPU: x64
File System: NTFS
User: DESKTOP-0P77LES\Martin

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 219987
Threats Detected: 1
Threats Quarantined: 1
Time Elapsed: 1 min, 16 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
Malware.Sandbox.17, C:\USERS\MARTIN\DOWNLOADS\UKRAINIAN7REMAKE.ZIP-1269-0-91-1711727206\FFVII-PC-EXPORTER.EXE, Quarantined, 17, 0, 1.0.86828, 17, dds, 02911034, D6DEA33E8AEE88C1BBD39DFB6793F6AE, 8CE5D8B4CB73387F7C42210082C2F1D4FDB5D1F1D1B82E763414A7885ACB07F8

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

[JaRon]

Až na nejaké problémy s licenciami SW je to OK

[Bruno39]

Dakujem

[JaRon]

Za malo