Prosím o kontrolu logu.díky

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Pravidla fóra
Návod na použití programu HijackThis || Návod na vyčištění počítače CCleanerem || FAQ: Antiviry
xxxmen
nováček
Příspěvky: 19
Registrován: 03 říj 2015 20:21

Re: Prosím o kontrolu logu.díky

Příspěvek od xxxmen »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-11-2025
Ran by svecs (14-01-2026 19:14:03)
Running from C:\Users\svecs\OneDrive\Plocha
Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) (2020-10-31 19:00:39)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3816395652-1497722698-1134394226-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3816395652-1497722698-1134394226-503 - Limited - Disabled)
Guest (S-1-5-21-3816395652-1497722698-1134394226-501 - Limited - Disabled)
svecs (S-1-5-21-3816395652-1497722698-1134394226-1001 - Administrator - Enabled) => C:\Users\svecs
WDAGUtilityAccount (S-1-5-21-3816395652-1497722698-1134394226-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Security (Enabled - Up to date) {DF8BEACB-94C9-218A-73AD-A78362A8C516}
AV: ESET Security (Enabled - Up to date) {89B55CC4-3881-78B2-11E2-479AE0371896}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
AV: ESET Security (Disabled - Up to date) {26E0861C-6FB9-CEF9-E4F0-531986211ACE}
AV: ESET Security (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Security (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Enabled) {E7B06BEE-DEA6-20D2-58F2-0EB69C7B826D}
FW: ESET Firewall (Enabled) {B18EDDE1-72EE-79EA-3ABD-EEAF1EE45FED}
FW: ESET Firewall (Enabled) {1EDB0739-25D6-CFA1-CFAF-FA2C78F25DB5}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

123 Free Solitaire (HKLM-x32\...\123 Free Solitaire) (Version: 123 Free Solitaire 2004 - TreeCardGames.com)
7-Zip 19.00 (HKLM-x32\...\7-Zip) (Version: 19.00 - Igor Pavlov)
7-Zip 19.02 alpha (x64) (HKLM\...\7-Zip) (Version: 19.02 alpha - Igor Pavlov)
ABBYY FineReader 12 Professional (HKLM-x32\...\{F12000FE-0001-0000-0000-074957833700}) (Version: 12.0.501 - ABBYY Production LLC)
Adlice Protect version 16.5.4.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 16.5.4.0 - Adlice Software)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1033-FFFF-7760-BC15014EA700}) (Version: 25.001.20428 - Adobe)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 8.4.0.63 - Adobe Inc.)
AIDA64 Extreme v6.75 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 6.75 - FinalWire Ltd.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 25.8.1 - Advanced Micro Devices, Inc.)
Ashampoo Burning Studio FREE (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.24.13 - Ashampoo GmbH & Co. KG)
Bandizip (HKLM\...\Bandizip) (Version: 7.32 - Bandisoft.com)
Branding64 (HKLM\...\{492AEFBE-1B81-4C20-A111-E6974BB98EC5}) (Version: 1.00.0009 - Advanced Micro Devices, Inc.) Hidden
BubbleBall (HKLM-x32\...\BubbleBall) (Version: - )
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.3.1120.1339 - Piriform)
Compact Jpg Viewer (HKLM-x32\...\{42819B28-AAAC-4412-9768-3A187783CE7E}) (Version: 1.3.1 - Miodrag Malovic)
CrystalDiskInfo 9.7.2 (HKLM\...\CrystalDiskInfo_is1) (Version: 9.7.2 - Crystal Dew World)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.10.0.0797 - Disc Soft Ltd)
Electronic Parts Catalog (HKLM\...\{7170E3FE-E257-46D6-94F7-394576FF75D0}) (Version: 1.0.0 - CNH Industrial)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON SX420W Series Printer Uninstall (HKLM\...\EPSON SX420W Series) (Version: - SEIKO EPSON Corporation)
EPSON SX430 Series Printer Uninstall (HKLM\...\EPSON SX430 Series) (Version: - SEIKO EPSON Corporation)
ESET Security (HKLM\...\{6B1BBDBF-507A-4736-82B0-DE772C1D2AFE}) (Version: 19.0.14.0 - ESET, spol. s r.o.)
Farming Simulator 19 (HKLM-x32\...\Farming Simulator 19_is1) (Version: - )
Firebird 3.0.10.33601 (x64) (HKLM\...\FBDBServer_3_0_x64_is1) (Version: 3.0.10.33601 - Firebird Project)
FORM studio (HKLM-x32\...\FSCZ_is1) (Version: - KASTNER software s.r.o.)
FormApps Signing Extension (HKLM-x32\...\{35C42D1D-32DC-404F-8978-A30B0D64DD26}) (Version: 2.24.0.43 - Software602 a.s.)
FormatFactory 4.9.5.0 (HKLM-x32\...\FormatFactory) (Version: 4.9.5.0 - Free Time)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.109.5379 - GOM & Company)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 143.0.7499.192 - Google LLC)
IrfanView 4.70 (64-bit) (HKLM\...\IrfanView64) (Version: 4.70 - Irfan Skiljan)
Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.2.3.21 - PandoraTV)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D18FE9D2-2F54-4C68-A2DE-A59D4A80A9BC}) (Version: 3.1.2109.29003 - Microsoft Corporation)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Kros (HKLM\...\{9384B8CA-2E11-426F-B8CB-07F955D34BFC}) (Version: 8.5.939 - Softland) Hidden
KROS 4 (HKLM-x32\...\{30044428-2C20-3933-8C01-205EFF81E627}) (Version: 202.100 - ÚRS CZ)
Kros PDF (HKLM-x32\...\{6de8b2b9-2fc5-4937-8cd1-130342d9d5de}) (Version: 202.100.1.0 - Kros a.s.)
Malwarebytes version 5.4.6.227 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.4.6.227 - Malwarebytes)
Microsoft Access database engine 2010 (English) (HKLM-x32\...\{90140000-00D1-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 143.0.3650.139 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 143.0.3650.139 - Microsoft Corporation) Hidden
Microsoft Excel 2019 - cs-cz (HKLM\...\Excel2019Retail - cs-cz) (Version: 16.0.19426.20218 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - cs-cz (HKLM\...\ProPlus2019Retail - cs-cz) (Version: 16.0.19426.20218 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\OneDriveSetup.exe) (Version: 25.224.1116.0003 - Microsoft Corporation)
Microsoft PowerPoint 2019 - cs-cz (HKLM\...\PowerPoint2019Retail - cs-cz) (Version: 16.0.19426.20218 - Microsoft Corporation)
Microsoft Project - cs-cz (HKLM\...\ProjectPro2019Retail - cs-cz) (Version: 16.0.19426.20218 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visio - cs-cz (HKLM\...\VisioPro2019Retail - cs-cz) (Version: 16.0.19426.20218 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33135 (HKLM-x32\...\{c649ede4-f16a-4486-a117-dcc2f2a35165}) (Version: 14.38.33135.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.38.33135 (HKLM-x32\...\{46c3b171-c15c-4137-8e1d-67eeb2985b44}) (Version: 14.38.33135.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.38.33135 (HKLM\...\{19AFE054-CA83-45D5-A9DB-4108EF4BD391}) (Version: 14.38.33135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.38.33135 (HKLM\...\{AA0C8AB5-7297-4D46-A0D9-08096FE59E46}) (Version: 14.38.33135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.38.33135 (HKLM-x32\...\{9C19C103-7DB1-44D1-A039-2C076A633A38}) (Version: 14.38.33135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.38.33135 (HKLM-x32\...\{286DC39B-5FB7-4AFF-9DD4-22DB47664CD7}) (Version: 14.38.33135 - Microsoft Corporation) Hidden
Microsoft Word 2019 - cs-cz (HKLM\...\Word2019Retail - cs-cz) (Version: 16.0.19426.20218 - Microsoft Corporation)
MiraScan 6.3 (5000 series) (HKLM-x32\...\{EA2E8D6D-EE50-4689-B7ED-1E580BC04CC1}) (Version: V6.3(5000 series) - Benq Scan)
MRP-KS, účetní systém - zkušební verze (HKLM-x32\...\MRPKS CZ - demoverze_is1) (Version: 6.51.004 - MRP)
MSI to redistribute MS VS2010 CRT libraries (HKLM\...\{D9D020C0-B53E-4A40-B2FA-35D47966601B}) (Version: 10.0.30319.1 - The Firebird Project)
MSI to redistribute MS VS2010 CRT libraries (HKLM-x32\...\{3EE48F79-0D53-4FE3-B611-280D1EB6873A}) (Version: 10.0.30319.1 - The Firebird Project)
novaPDF 8 Printer Driver (HKLM\...\{0AC6DA67-5240-4F8B-9E69-168680B50AC5}) (Version: 8.5.939 - Softland)
novaPDF 8 SDK COM (x86) (HKLM-x32\...\{77341EEE-6919-4640-B3C0-A19944DB6B66}) (Version: 8.5.939 - Softland)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.19426.20170 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.19426.20170 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.19328.20244 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
Opera Stable 125.0.5729.49 (HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\Opera 125.0.5729.49) (Version: 125.0.5729.49 - Opera Software)
Oracle VM VirtualBox 6.0.12 (HKLM\...\{E572CA5C-A60B-4C3B-9E9E-1302BBE4DBEE}) (Version: 6.0.12 - Oracle Corporation)
Pošta a kancelář 4.4 (HKLM-x32\...\Pošta a kancelář 4_is1) (Version: 4.4 - PS Media s.r.o.)
RyzenMasterSDK (HKLM\...\{0963A25D-EBBE-4919-ACF8-BB45BFCC518A}) (Version: 1.2.3.5 - Advanced Micro Devices, Inc.) Hidden
Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.9.0 - Sophos Limited)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.10.5 - TeamViewer)
The Settlers Online - Standalone Client (HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\The Settlers Online) (Version: - )
Tisk Obalek Visual 4.0.1.0 (HKLM-x32\...\Tisk Obalek Visual_is1) (Version: 4.0.1.0 - Mgr. Radovan Kraus)
tso-unity-client 1.3.0 (HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\8d6e0df9-ca10-5594-945f-c86f2f5cf9ab) (Version: 1.3.0 - MrJoachim)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
upjers Home 2.1.92 (HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\e2446448-09eb-5b1b-84b1-6746557362e3) (Version: 2.1.92 - upjers GmbH)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
Webshare klient (HKLM-x32\...\Webshare klient) (Version: - )
Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
Zemana AntiMalware verze 3.2.28 (HKLM-x32\...\{4E1F3677-C72E-4F7D-B66E-85467B1A289E}_is1) (Version: 3.2.28 - Zemana)

Packages:
=========
Bing Wallpaper -> C:\Program Files\WindowsApps\Microsoft.BingWallpaper_1.1.437.0_x86__8wekyb3d8bbwe [2025-12-19] (Microsoft Corporation) [Startup Task]
Bubble Shooter : Ball Bust -> C:\Program Files\WindowsApps\21108PianoMusicStudio.BubbleShooterBallBust_1.1.5.0_x86__m18892jqh4q9e [2021-10-30] (Piano Music Studio) [MS Ad]
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_4.19.1.0_x64__kgqvnymyfvs32 [2025-12-10] (king.com)
Candy Crush Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.3181.1.0_x64__kgqvnymyfvs32 [2026-01-10] (king.com)
Cooking Fever -> C:\Program Files\WindowsApps\NORDCURRENT.COOKINGFEVER_24.0.7.0_x86__m9bz608c1b9ra [2025-09-02] (Nordcurrent Group UAB)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.27.5760.0_x64__rz1tebttyb220 [2025-11-11] (Dolby Laboratories)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-10-30] (Microsoft Corporation)
Epson Print and Scan -> C:\Program Files\WindowsApps\SEIKOEPSONCORPORATION.EpsonPrintandScan_1.1.0.0_x64__ezaqdwkaef94e [2021-10-30] (SEIKO EPSON CORPORATION)
Fitbit Coach -> C:\Program Files\WindowsApps\Fitbit.FitbitCoach_4.4.133.0_x64__6mqt6hf9g46tw [2021-10-30] (Fitbit)
Local AI Manager for Microsoft 365 -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\AI [2025-12-18] ()
Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1805.2.0_x64__8wekyb3d8bbwe [2021-10-30] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1805.2.0_x86__8wekyb3d8bbwe [2021-10-30] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-10-30] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-10-30] (Microsoft Corporation) [MS Ad]
Microsoft.Office.ActionsServer -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\ActionsServer [2025-12-18] ()
OfficePushNotificationsUtility -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16 [2025-12-18] ()
Phototastic Collage -> C:\Program Files\WindowsApps\ThumbmunkeysLtd.PhototasticCollage_3.27.25.0_x64__nfy108tqq3p12 [2023-01-09] (Thumbmunkeys Ltd)
Prší: Prázdninová edice -> C:\Program Files\WindowsApps\269100D3.PrPrzdninovedice_1.0.0.4_neutral__fnenng7xgae2p [2021-10-30] (ZENTITY a.s.)
Solitaire ! -> C:\Program Files\WindowsApps\476931bsyl.Solitaire_1.7.0.0_x64__cgv7566y2ek3j [2021-10-30] (1bsyl)
Solitaire Collection X -> C:\Program Files\WindowsApps\10867XAppsStudio.SolitaireCollectionX_1.1.21.0_x64__9x90rfe02k9we [2022-02-26] (X Apps Studio)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3816395652-1497722698-1134394226-1001_Classes\CLSID\{47E6DCAF-41F8-441C-BD0E-A50D5FE6C4D1}\localserver32 -> C:\Users\svecs\AppData\Local\Microsoft\OneDrive\25.224.1116.0003\OneDrive.Sync.Service.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3816395652-1497722698-1134394226-1001_Classes\CLSID\{5B69A6B4-393B-459C-8EBB-214237A9E7AC}\InprocServer32 -> C:\Program Files\Bandizip\bdzshl.x64.dll (Bandisoft International Inc. -> Bandisoft International Inc.)
CustomCLSID: HKU\S-1-5-21-3816395652-1497722698-1134394226-1001_Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}\localserver32 -> C:\Users\svecs\AppData\Local\Microsoft\OneDrive\25.224.1116.0003\OneDrive.Sync.Service.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3816395652-1497722698-1134394226-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3816395652-1497722698-1134394226-1001_Classes\CLSID\{F3B1EC2D-14AA-DED6-3843-2225A83CBAFF}\InprocServer32 -> C:\WINDOWS\system32\ole32.dll (Microsoft Windows -> Microsoft Corporation)
ContextMenuHandlers1: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana\AntiMalware\AM_ShellExt64.dll [2021-03-30] (Zemana D.O.O. Sarajevo -> Advanced Malware Protection. Copyright 2019.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-09-05] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl.x64.dll [2023-09-14] (Bandisoft International Inc. -> Bandisoft International Inc.)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2025-03-01] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-27] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [FineReader12ContextMenu] -> {55344AC6-630B-430C-B292-C7BE21F90061} => C:\Program Files (x86)\ABBYY FineReader 12\FRIntegration.x64.dll [2014-01-30] (ABBYY PRODUCTION LLC -> ABBYY Production LLC.)
ContextMenuHandlers1: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_106.dll [2019-09-25] (Free Time) [File not signed]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl.x64.dll [2023-09-14] (Bandisoft International Inc. -> Bandisoft International Inc.)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2019-03-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-27] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2019-03-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-01-11] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-09-05] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl.x64.dll [2023-09-14] (Bandisoft International Inc. -> Bandisoft International Inc.)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_106.dll [2019-09-25] (Free Time) [File not signed]
ContextMenuHandlers5: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl.x64.dll [2023-09-14] (Bandisoft International Inc. -> Bandisoft International Inc.)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2025-07-01] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana\AntiMalware\AM_ShellExt64.dll [2021-03-30] (Zemana D.O.O. Sarajevo -> Advanced Malware Protection. Copyright 2019.)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-09-05] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2025-03-01] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-27] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [FineReader12ContextMenu] -> {55344AC6-630B-430C-B292-C7BE21F90061} => C:\Program Files (x86)\ABBYY FineReader 12\FRIntegration.x64.dll [2014-01-30] (ABBYY PRODUCTION LLC -> ABBYY Production LLC.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-01-11] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-3816395652-1497722698-1134394226-1001: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl.x64.dll [2023-09-14] (Bandisoft International Inc. -> Bandisoft International Inc.)
ContextMenuHandlers2_S-1-5-21-3816395652-1497722698-1134394226-1001: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl.x64.dll [2023-09-14] (Bandisoft International Inc. -> Bandisoft International Inc.)
ContextMenuHandlers4_S-1-5-21-3816395652-1497722698-1134394226-1001: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl.x64.dll [2023-09-14] (Bandisoft International Inc. -> Bandisoft International Inc.)
ContextMenuHandlers5_S-1-5-21-3816395652-1497722698-1134394226-1001: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl.x64.dll [2023-09-14] (Bandisoft International Inc. -> Bandisoft International Inc.)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2021-02-01 20:49 - 2021-02-01 20:49 - 000010240 _____ () [File not signed] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\cs_cz\acrotray.cze
2023-04-02 08:34 - 2022-06-03 19:49 - 001844224 _____ (Firebird Project) [File not signed] C:\Program Files\Firebird\Firebird_3_0\fbclient.dll
2016-01-21 15:59 - 2016-01-21 15:59 - 000018944 _____ (Softland) [File not signed] C:\WINDOWS\System32\novamn8.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000035840 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qgif.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000044032 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qicns.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000033792 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qico.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000564736 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qjpeg.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000029696 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qpdf.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000026624 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qsvg.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000026112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qtga.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000024064 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwbmp.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000540672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwebp.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000890368 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\platforms\qwindows.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 001964544 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\sqldrivers\qsqlite.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000210432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\styles\qmodernwindowsstyle.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000299520 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\Qt5Compat\GraphicalEffects\private\qtgraphicaleffectsprivateplugin.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000556032 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\Qt5Compat\GraphicalEffects\qtgraphicaleffectsplugin.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000020480 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtMultimedia\quickmultimediaplugin.dll
2025-05-14 13:45 - 2025-05-14 13:45 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Basic\qtquickcontrols2basicstyleplugin.dll
2025-05-14 13:46 - 2025-05-14 13:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Fusion\impl\qtquickcontrols2fusionstyleimplplugin.dll
2025-05-14 13:46 - 2025-05-14 13:46 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Fusion\qtquickcontrols2fusionstyleplugin.dll
2025-05-14 13:46 - 2025-05-14 13:46 - 000028160 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\qtquickcontrols2plugin.dll
2025-05-14 13:46 - 2025-05-14 13:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Windows\impl\qtquickcontrols2windowsstyleimplplugin.dll
2025-05-14 13:46 - 2025-05-14 13:46 - 000468992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Controls\Windows\qtquickcontrols2windowsstyleplugin.dll
2025-05-14 13:46 - 2025-05-14 13:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Dialogs\qtquickdialogsplugin.dll
2025-05-14 13:46 - 2025-05-14 13:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Effects\effectsplugin.dll
2025-05-14 13:46 - 2025-05-14 13:46 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Layouts\qquicklayoutsplugin.dll
2025-05-14 13:46 - 2025-05-14 13:46 - 000767488 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\NativeStyle\qtquickcontrols2nativestyleplugin.dll
2025-05-14 13:46 - 2025-05-14 13:46 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Templates\qtquicktemplates2plugin.dll
2025-05-14 13:46 - 2025-05-14 13:46 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtQuick\Window\quickwindowplugin.dll
2025-05-14 13:46 - 2025-05-14 13:46 - 000022016 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\qml\QtWebEngine\qtwebenginequickplugin.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 006071296 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Core.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 008933376 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Gui.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000972288 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Multimedia.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000250368 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6MultimediaQuick.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 001725952 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Network.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 001964544 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6OpenGL.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 005337600 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Pdf.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000500224 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Positioning.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 005204992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Qml.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000137728 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QmlMeta.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000721920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QmlModels.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000062976 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QmlWorkerScript.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 006282752 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Quick.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000084992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 001313280 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2Basic.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 001131008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2Fusion.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000195584 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2FusionStyleImpl.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000276480 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2Impl.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000058368 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickControls2WindowsStyleImpl.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000142336 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickDialogs2.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 001992704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickDialogs2QuickImpl.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000035328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickDialogs2Utils.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000389120 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickEffects.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000192512 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickLayouts.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 001864192 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6QuickTemplates2.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 004028416 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6ShaderTools.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000303616 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Sql.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000513024 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Svg.dll
2025-06-17 03:46 - 2025-06-17 03:46 - 154372608 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6WebEngineCore.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000580096 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6WebEngineQuick.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000228352 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6WebChannel.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000050176 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6WebChannelQuick.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 006447616 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Widgets.dll
2025-05-14 13:44 - 2025-05-14 13:44 - 000141824 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt6Xml.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\svecs\OneDrive\Plocha\Zemana.AntiMalware.Setup.exe:MBAM.Zone.Identifier [145]

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2025-12-18] (Microsoft Corporation -> Microsoft Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2025-03-01] (Adobe Inc. -> Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2025-03-01] (Adobe Inc. -> Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-05-12] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2025-03-01] (Adobe Inc. -> Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-05-12] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2025-03-01] (Adobe Inc. -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2025-03-01] (Adobe Inc. -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2025-03-01] (Adobe Inc. -> Adobe Systems Incorporated)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-12-05] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2026-01-11 17:07 - 2026-01-11 17:07 - 000000841 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.10.1
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys

oracle_VBoxNetLwf: VirtualBox NDIS6 Bridged Networking Driver

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Bandizip\
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\svecs\AppData\Local\Packages\Microsoft.BingWallpaper_8wekyb3d8bbwe\LocalState\images\Bing\20260114_OHR.PalamidiFortress_ROW0874671580_UHD_bing.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: )
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "MTPW"
HKLM\...\StartupApproved\Run32: => "Bonus.SSR.FR12"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\StartupApproved\Run: => "Opera Browser Assistant"
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\StartupApproved\Run: => "upjers Home"
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\StartupApproved\Run: => "BingWallpaperDaemon"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{96C6A118-C8C6-4C94-ABDB-75F7102156B4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{A7E1264E-847C-4121-BC85-1C7D035B2CB6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{B343EBD1-2B4B-4DBE-A0CF-42402370D38D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{4515C47D-85A8-4494-B8A9-CB7C416F2903}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{B4B4432D-C904-4B0B-81AC-92CA51B7EEF3}] => (Allow) LPort=8501
FirewallRules: [{92ED7316-6BFA-414E-80CD-9E382ED7E623}] => (Allow) LPort=8501
FirewallRules: [{0CFD4E39-8D47-4FB6-9F23-9CA9783D0002}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{C9867FBC-E1F7-4B9A-B3CF-841422709277}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.) [File not signed]
FirewallRules: [{89421BC1-2EB4-4C9F-8025-FDE419EA7AED}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{D656C236-9897-4140-AB3B-777202CA97A0}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.) [File not signed]
FirewallRules: [{072BFABC-B770-4393-8BBF-8D1CF2E00CF3}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{9E134A25-1D09-427D-A2A7-E212B6F2B9D9}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.) [File not signed]
FirewallRules: [{72D860E5-892A-4847-BC99-5B1212FDB3F4}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{E2F2888A-30F3-41C7-8D33-909EE546EBCD}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.) [File not signed]
FirewallRules: [{E5110B52-183E-4513-AA51-FFCFBFF90E68}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [TCP Query User{9F09399F-61D1-4E8B-8199-7BBAD1A93B9D}C:\users\svecs\appdata\local\programs\opera\opera.exe] => (Block) C:\users\svecs\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{CDFD528E-FE12-4AAC-908E-A07423B79D97}C:\users\svecs\appdata\local\programs\opera\opera.exe] => (Block) C:\users\svecs\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{1CE34E7C-A7DD-4D5C-ADDF-BE6019E07F4C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

03-01-2026 18:18:58 Naplánovaný kontrolní bod
11-01-2026 14:56:18 JRT Pre-Junkware Removal
11-01-2026 17:06:05 zoek.exe restore point

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (01/14/2026 05:59:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AdwCleaner (1).exe, verze: 8.5.0.595, časové razítko: 0x67c85360
Název chybujícího modulu: AdwCleaner (1).exe, verze: 8.5.0.595, časové razítko: 0x67c85360
Kód výjimky: 0xc0000005
Posun chyby: 0x000c2ca2
ID chybujícího procesu: 0x17dc
Čas spuštění chybující aplikace: 0x01dc85772e243445
Cesta k chybující aplikaci: C:\Users\svecs\OneDrive\Plocha\AdwCleaner (1).exe
Cesta k chybujícímu modulu: C:\Users\svecs\OneDrive\Plocha\AdwCleaner (1).exe
ID zprávy: 1a9215fe-12b9-4f52-8fd5-19d78dd3a41f
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (01/14/2026 04:14:17 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 11324. ID zprávy: [0x2509].

Error: (01/13/2026 07:11:02 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 13108. ID zprávy: [0x2509].

Error: (01/12/2026 11:36:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: The Settlers Online.exe, verze: 0.0.0.0, časové razítko: 0x5f074cf1
Název chybujícího modulu: ntdll.dll, verze: 10.0.19041.6456, časové razítko: 0x701fa718
Kód výjimky: 0xc0000409
Posun chyby: 0x000891e0
ID chybujícího procesu: 0x2860
Čas spuštění chybující aplikace: 0x01dc83f477cfd353
Cesta k chybující aplikaci: C:\Users\svecs\AppData\Local\Ubisoft\The Settlers Online\The Settlers Online.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID zprávy: 8f1258be-9d34-43e0-9322-385632548810
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (01/12/2026 06:28:37 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na (F:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (01/12/2026 06:28:29 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na (E:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (01/12/2026 06:28:28 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na (G:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (01/11/2026 10:43:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AdwCleaner (1).exe, verze: 8.5.0.595, časové razítko: 0x67c85360
Název chybujícího modulu: AdwCleaner (1).exe, verze: 8.5.0.595, časové razítko: 0x67c85360
Kód výjimky: 0xc0000005
Posun chyby: 0x000c2ca2
ID chybujícího procesu: 0x30f4
Čas spuštění chybující aplikace: 0x01dc8343445159ae
Cesta k chybující aplikaci: C:\Users\svecs\OneDrive\Plocha\AdwCleaner (1).exe
Cesta k chybujícímu modulu: C:\Users\svecs\OneDrive\Plocha\AdwCleaner (1).exe
ID zprávy: 2afd6f69-c185-46d9-839a-fb7be48178b9
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (01/14/2026 05:52:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba ABBYY FineReader 12 PE Licensing Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/14/2026 04:13:35 PM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: Ovladač zjistil interní chybu ovladače na \Device\VBoxNetLwf.

Error: (01/13/2026 05:14:56 PM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: Ovladač zjistil interní chybu ovladače na \Device\VBoxNetLwf.

Error: (01/13/2026 01:25:01 PM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: Ovladač zjistil interní chybu ovladače na \Device\VBoxNetLwf.

Error: (01/13/2026 11:54:44 AM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: Ovladač zjistil interní chybu ovladače na \Device\VBoxNetLwf.

Error: (01/13/2026 09:26:44 AM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: Ovladač zjistil interní chybu ovladače na \Device\VBoxNetLwf.

Error: (01/12/2026 11:56:43 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-2KT8TSB)
Description: Server Microsoft.Windows.ContentDeliveryManager_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy!App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (01/12/2026 06:18:00 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
Description: Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:Micro-Star International Co., Ltd;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:A.70;OEMModelBaseBoard:B450-A PRO (MS-7B86);OEMManufacturerName:Micro-Star International Co., Ltd;OSArchitecture:amd64;
BucketId: 3d12313e53bb49e38722081df8ec1e4e9459bb8efcc5f369c67992225ce50dbf
BucketConfidenceLevel:
UpdateType: 0
HResult: 0


Windows Defender:
================
Date: 2020-12-11 19:01:00
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {080032EA-A4C0-4695-B8F2-5F5EC0E6F115}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2020-12-11 18:26:49
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {4C052877-FC23-41E5-A1FD-6622A18CF2A8}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

CodeIntegrity:
===============
Date: 2026-01-14 19:10:58
Description:
Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume7\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2026-01-14 19:10:26
Description:
Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume7\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Windows signing level requirements.


==================== Memory info ===========================

BIOS: American Megatrends Inc. A.70 03/06/2019
Motherboard: Micro-Star International Co., Ltd B450-A PRO (MS-7B86)
Processor: AMD Ryzen 3 2200G with Radeon Vega Graphics
Percentage of memory in use: 19%
Total physical RAM: 14283.8 MB
Available physical RAM: 11536.95 MB
Total Virtual: 21451.8 MB
Available Virtual: 16138.2 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:446.53 GB) (Free:31.97 GB) (Model: KINGSTON SA1000M8480G) NTFS
Drive e: () (Fixed) (Total:59.63 GB) (Free:28.8 GB) (Model: WDC WD5000AADS-00S9B0) NTFS
Drive f: () (Fixed) (Total:306.78 GB) (Free:73.88 GB) (Model: WDC WD5000AADS-00S9B0) NTFS
Drive g: () (Fixed) (Total:99.36 GB) (Free:26.52 GB) (Model: WDC WD5000AADS-00S9B0) NTFS ==>[system with boot components (obtained from drive)]

\\?\Volume{947993fc-a5c4-4584-bc2f-408f29c599ed}\ () (Fixed) (Total:0.49 GB) (Free:0.07 GB) NTFS
\\?\Volume{457de650-4c5b-4207-9154-39dda88675d8}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: 9AE79AE7)
Partition 1: (Active) - (Size=99.4 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=59.6 GB) - (Type=0F Extended)
Partition 3: (Not Active) - (Size=306.8 GB) - (Type=07 NTFS)

==========================================================
Disk: 1 (Protective MBR) (Size: 447.1 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================
Nahoru
xxxmen
nováček
Příspěvky: 19
Registrován: 03 říj 2015 20:21

Re: Prosím o kontrolu logu.díky

Příspěvek od xxxmen »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-11-2025

==================== End of FRST.txt ========================
Naposledy upravil(a) xxxmen dne 15 led 2026 15:01, celkem upraveno 1 x.
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Příspěvky: 43528
Registrován: 16 čer 2007 18:58
Bydliště: Jižní Čechy

Re: Prosím o kontrolu logu.díky

Příspěvek od jaro3 »

AV: ESET Security (Enabled - Up to date) {DF8BEACB-94C9-218A-73AD-A78362A8C516}
AV: ESET Security (Enabled - Up to date) {89B55CC4-3881-78B2-11E2-479AE0371896}
FW: ESET Firewall (Enabled) {E7B06BEE-DEA6-20D2-58F2-0EB69C7B826D}
FW: ESET Firewall (Enabled) {B18EDDE1-72EE-79EA-3ABD-EEAF1EE45FED}
FW: ESET Firewall (Enabled) {1EDB0739-25D6-CFA1-CFAF-FA2C78F25DB5}
Psal jsem vše vypnout. Pro příště..

Prosím, postupuj následujícím způsobem:
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.

Kód: Vybrat vše

Start
CreateRestorePoint:
CloseProcesses:
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\Run: [BingWallpaperDaemon] => C:\Users\svecs\AppData\Local\Temp\bwp076e3b02-75bd-4916-8629-a1271b16f9e7\UnInstDaemon.exe (No File) <==== ATTENTION
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\MountPoints2: {773218b5-4a31-11e9-8806-00d86117826e} - "K:\SiMPLEX.exe" 
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\MountPoints2: {773218e9-4a31-11e9-8806-00d86117826e} - "L:\SiMPLEX.exe"
Task: {36770757-C6D0-4C87-9377-B90BB31BD840} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem144.0.7547.0{D93218D8-B193-4800-9880-14D49B5888CE} => C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe [7056536 2025-11-26] (Google LLC -> Google LLC)
Error reading preferences. Please check "Secure Preferences" file for possible corruption. <==== ATTENTION
Edge Extension: (No Name) - C:\Users\svecs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-10-17] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\svecs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\svecs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2025-10-17] [UpdateUrl:0] <==== ATTENTION
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]
Error reading preferences. Please check "Secure Preferences" file for possible corruption. <==== ATTENTION
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-01-14] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-12-25] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\idolchmmfhdnihfikidaobnplmkalkbd [2023-03-09] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2024-06-06] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-23] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2025-11-15] [UpdateUrl:0] <==== ATTENTION
CHR HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [oombnmpbbhbakfpfgdflaajkhicgfaam]

EmptyTemp:
End
(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).

Ulož jej na na plochu jako fixlist.txt


Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.

Drive c: () (Fixed) (Total:446.53 GB) (Free:31.97 GB) (Model: KINGSTON SA1000M8480G) NTFS
Totální nedostatek volného místa na disku!! Něco odinstaluj , smaž. Máš mít nejméně 15-20% volného místa na syst. disku , pro zajištění bezproblémového chodu windows!!

Pak napiš co problémy.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
xxxmen
nováček
Příspěvky: 19
Registrován: 03 říj 2015 20:21

Re: Prosím o kontrolu logu.díky

Příspěvek od xxxmen »

Dal jsem dočasně vypnout ochranu tak nevím jak jinak ho víc vypnout.
Je to lepší, ale přišel jsem na to, že prohlížeč Opera i když je otevřený jeden list tak ,,žere" i 100% CPU tak zkusím reinstal a jinak přechod na jiný prohlížeč.
Data promazány a na systémovém disku 276GB volného placu.
Děkuji za pomoc a zde je log.

Fix result of Farbar Recovery Scan Tool (x64) Version: 20-11-2025
Ran by svecs (15-01-2026 12:29:01) Run:1
Running from C:\Users\svecs\OneDrive\Plocha
Loaded Profiles: svecs
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\Run: [BingWallpaperDaemon] => C:\Users\svecs\AppData\Local\Temp\bwp076e3b02-75bd-4916-8629-a1271b16f9e7\UnInstDaemon.exe (No File) <==== ATTENTION
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\MountPoints2: {773218b5-4a31-11e9-8806-00d86117826e} - "K:\SiMPLEX.exe"
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\...\MountPoints2: {773218e9-4a31-11e9-8806-00d86117826e} - "L:\SiMPLEX.exe"
Task: {36770757-C6D0-4C87-9377-B90BB31BD840} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem144.0.7547.0{D93218D8-B193-4800-9880-14D49B5888CE} => C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe [7056536 2025-11-26] (Google LLC -> Google LLC)
Error reading preferences. Please check "Secure Preferences" file for possible corruption. <==== ATTENTION
Edge Extension: (No Name) - C:\Users\svecs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-10-17] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\svecs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\svecs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2025-10-17] [UpdateUrl:0] <==== ATTENTION
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]
Error reading preferences. Please check "Secure Preferences" file for possible corruption. <==== ATTENTION
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-01-14] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-12-25] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\idolchmmfhdnihfikidaobnplmkalkbd [2023-03-09] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2024-06-06] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-23] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2025-11-15] [UpdateUrl:0] <==== ATTENTION
CHR HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [oombnmpbbhbakfpfgdflaajkhicgfaam]

EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
"HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\Software\Microsoft\Windows\CurrentVersion\Run\\BingWallpaperDaemon" => removed successfully
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{773218b5-4a31-11e9-8806-00d86117826e} => removed successfully
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{773218e9-4a31-11e9-8806-00d86117826e} => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{36770757-C6D0-4C87-9377-B90BB31BD840}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{36770757-C6D0-4C87-9377-B90BB31BD840}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem144.0.7547.0{D93218D8-B193-4800-9880-14D49B5888CE} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem144.0.7547.0{D93218D8-B193-4800-9880-14D49B5888CE}" => removed successfully
Error reading preferences. Please check "Secure Preferences" file for possible corruption. <==== ATTENTION => Error: No automatic fix found for this entry.
Edge Extension: (No Name) - C:\Users\svecs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-10-17] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
Edge Extension: (No Name) - C:\Users\svecs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
Edge Extension: (No Name) - C:\Users\svecs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2025-10-17] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Edge\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc => removed successfully
Error reading preferences. Please check "Secure Preferences" file for possible corruption. <==== ATTENTION => Error: No automatic fix found for this entry.
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-01-14] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-12-25] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\idolchmmfhdnihfikidaobnplmkalkbd [2023-03-09] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2024-06-06] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-23] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
CHR Extension: (No Name) - C:\Users\svecs\AppData\Local\Google\Chrome\User Data\Default\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2025-11-15] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
HKU\S-1-5-21-3816395652-1497722698-1134394226-1001\SOFTWARE\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam => removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 2621440 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 100575540 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 2450298 B
Edge => 0 B
Chrome => 0 B
Firefox => 0 B
Opera => 10024552 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 0 B
svecs => 124787197 B

RecycleBin => 52492533 B
EmptyTemp: => 279.4 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 12:29:53 ====
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Příspěvky: 43528
Registrován: 16 čer 2007 18:58
Bydliště: Jižní Čechy

Re: Prosím o kontrolu logu.díky

Příspěvek od jaro3 »

Mozzila FF si myslím těch prostředků bere nejmíň.

Stáhni si zde DelFix
https://www.bleepingcomputer.com/download/delfix/

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7, 8 a10 musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno .
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
xxxmen
nováček
Příspěvky: 19
Registrován: 03 říj 2015 20:21

Re: Prosím o kontrolu logu.díky

Příspěvek od xxxmen »

Tak jsem to odhalil byl to nějaký doplněk v Opeře o kterém si myslím, že jsem ho ani neinstaloval a vše jde zase jak má.
Díky za rady.

# DelFix v1.010 - Logfile created 15/01/2026 at 14:56:54
# Updated 26/04/2015 by Xplode
# Username : svecs - DESKTOP-2KT8TSB
# Operating System : Windows 10 Enterprise (64 bits)

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\zoek-results.log
Deleted : C:\Users\svecs\OneDrive\Plocha\AdwCleaner (1).exe
Deleted : C:\Users\svecs\OneDrive\Plocha\Fixlog.txt
Deleted : C:\Users\svecs\OneDrive\Plocha\FRST64.exe
Deleted : C:\Users\svecs\OneDrive\Plocha\JRT.exe
Deleted : C:\Users\svecs\OneDrive\Plocha\zoek (1).exe
Deleted : C:\Users\svecs\Downloads\AdwCleaner.exe
Deleted : C:\Users\svecs\Downloads\hijackthis (1).exe
Deleted : C:\Users\svecs\Downloads\hijackthis.exe
Deleted : C:\Users\svecs\Downloads\RogueKiller_setup.exe
Deleted : C:\Users\svecs\Downloads\TFC.exe

~ Cleaning system restore ...

Deleted : RP #337 [Naplánovaný kontrolní bod | 01/03/2026 17:18:58]
Deleted : RP #338 [JRT Pre-Junkware Removal | 01/11/2026 13:56:18]
Deleted : RP #339 [zoek.exe restore point | 01/11/2026 16:06:05]

New restore point created !

########## - EOF - ##########
Nahoru

Zpět na „HiJackThis“