Prosím o kontrolu - IntelNUC se seká
Moderátoři: Mods_senior, Security team
Pravidla fóra
Návod na použití programu HijackThis || Návod na vyčištění počítače CCleanerem || FAQ: Antiviry
Návod na použití programu HijackThis || Návod na vyčištění počítače CCleanerem || FAQ: Antiviry
-
czTANIScz
- Level 1

- Příspěvky: 50
- Registrován: 01 dub 2022 15:55
Re: Prosím o kontrolu - IntelNUC se seká
Everest:
Počítač/Senzory - zde nejsou zobrazeny žádné údaje.
Počítač/Senzory - zde nejsou zobrazeny žádné údaje.
-
jaro3
- člen Security týmu
- Příspěvky: 43528
- Registrován: 16 čer 2007 18:58
- Bydliště: Jižní Čechy
Re: Prosím o kontrolu - IntelNUC se seká
Ok.
Ty logy FRST vlož sem do příspěvku. Z toho se to luští líp.
Děkuji.
//
https://www.cistepc.cz/hwmonitor/#google_vignette
https://www.cpuid.com/softwares/hwmonitor.html
Záložka Voltages. Sledovat napětí po dobu 15min. zda nekolísají.
Ty logy FRST vlož sem do příspěvku. Z toho se to luští líp.
Děkuji.
//
https://www.cistepc.cz/hwmonitor/#google_vignette
https://www.cpuid.com/softwares/hwmonitor.html
Záložka Voltages. Sledovat napětí po dobu 15min. zda nekolísají.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
-
czTANIScz
- Level 1

- Příspěvky: 50
- Registrován: 01 dub 2022 15:55
Re: Prosím o kontrolu - IntelNUC se seká
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-07-2026 01
Ran by FRPOK (administrator) on FRPOK (Intel(R) Client Systems NUC8i5BEH) (13-07-2026 23:45:46)
Running from C:\Users\FRPOK\Desktop\FRST64.exe
Loaded Profiles: FRPOK
Platform: Microsoft Windows 11 Pro Version 22H2 22621.4317 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Autodesk, Inc. -> Autodesk) C:\Program Files\Autodesk\Genuine Service\GenuineService.exe
(Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessService.exe
(C:\Users\FRPOK\Desktop\FRST64.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2605.29.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe <2>
(DriverStore\FileRepository\cui_dch.inf_amd64_500d7f066e4084ac\igfxCUIService.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_500d7f066e4084ac\igfxEM.exe
(explorer.exe ->) (AnyDesk Software GmbH -> AnyDesk Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(explorer.exe ->) (CPUID -> CPUID) C:\Program Files\CPUID\HWMonitor\HWMonitor.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe
(explorer.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2605.29.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe
(explorer.exe ->) (Nextcloud GmbH -> Nextcloud GmbH) C:\Program Files\Nextcloud\nextcloud.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(explorer.exe ->) (SOKNO S.R.L. -> ) C:\Program Files (x86)\SpeedFan\speedfan.exe
(explorer.exe ->) (Tailscale Inc. -> Tailscale Inc.) C:\Program Files\Tailscale\tailscale-ipn.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <16>
(Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2605.29.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\GameInputSvc.exe
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(REALiX, s.r.o. -> REALiX s.r.o.) C:\Program Files\HWiNFO64\HWiNFO64.EXE
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (AnyDesk Software GmbH -> AnyDesk Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (Autodesk, Inc. -> ) C:\Program Files\Autodesk\Autodesk CER\service\cer_service.exe
(services.exe ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\16.3.1.15415\AdskLicensingService\AdskLicensingService.exe
(services.exe ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessServiceHost.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(services.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (Lansweeper -> Fing Limited) C:\Program Files\Fing\extraResources\fingagent.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\GameInputSvc.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Arsenal Recon) C:\Windows\System32\deviosvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_500d7f066e4084ac\igfxCUIService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_9a229169a273dffe\OneApp.IGCC.WinService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_438014eb8484108d\IntelCpHDCPSvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_438014eb8484108d\IntelCpHeciSvc.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\NisSrv.exe
(services.exe ->) (NAVIMATICS LLC -> Navimatics LLC) C:\Program Files (x86)\WinFsp\SxS\sxs.20260517T165656Z\bin\launcher-x64.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(services.exe ->) (Smart Sound Technology -> Intel) C:\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe
(services.exe ->) (Tailscale Inc. -> Tailscale Inc.) C:\Program Files\Tailscale\tailscaled.exe
(sihost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(svchost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\IGCC.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2606.1001.29.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
(Tailscale Inc. -> Tailscale Inc.) C:\Program Files\Tailscale\tailscaled.exe
==================== Registry (Whitelisted) ===================
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [1126128 2020-07-02] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Autodesk Access Service] => C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessService.exe [21901144 2026-01-15] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM\...\Run: [Autodesk Access] => C:\Program Files\Autodesk\AdODIS\V1\Access\AdskAccessCore.exe [40474968 2026-02-05] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [669920 2025-06-23] (Geek Software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2066432 2014-10-31] (iSkySoft) [File not signed]
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\iSkysoft\Video Converter Ultimate\DelayPluginI.exe [1971872 2016-08-18] (Shenzhen Yi Xing Investment Co., Ltd. -> )
HKLM-x32\...\Run: [CND-SGM5 Gaming Mouse Driver] => C:\Program Files (x86)\CND-SGM5\Monitor.exe [471040 2015-03-17] () [File not signed]
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2022-12-30] (Adobe Inc. -> )
HKLM-x32\...\Run: [Autodesk Genuine Service ] => C:\Program Files\Autodesk\Genuine Service\GenuineService.exe [2690904 2026-07-08] (Autodesk, Inc. -> Autodesk)
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\125.0.0.0\GoogleDriveFS.exe --startup_mode (No File)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\125.0.0.0\GoogleDriveFS.exe --startup_mode (No File)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [com.squirrel.Teams.Teams] => C:\Users\FRPOK\AppData\Local\Microsoft\Teams\Update.exe [2454240 2022-12-28] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5767832 2026-03-13] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [45052888 2026-06-24] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [Discord] => C:\Users\FRPOK\AppData\Local\Discord\Update.exe [1525016 2023-08-28] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [MicrosoftEdgeAutoLaunch_779677589740C4166E4BD37CCE8C6B47] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [4970824 2026-07-09] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [Nextcloud] => C:\Program Files\Nextcloud\nextcloud.exe [10051392 2026-06-29] (Nextcloud GmbH -> Nextcloud GmbH)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [Fing] => C:\Program Files\Fing\Fing.exe [23571232 2026-06-01] (Lansweeper -> Fing Ltd)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Policies\Explorer: []
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\125.0.0.0\GoogleDriveFS.exe --startup_mode (No File)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\150.0.7871.102\Installer\chrmstp.exe [7690392 2026-07-08] (Google LLC -> Google LLC)
Startup: C:\Users\FRPOK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Arduino Create Agent.lnk [2023-12-27]
ShortcutTarget: Arduino Create Agent.lnk -> C:\Users\FRPOK\AppData\Roaming\ArduinoCreateAgent\Arduino_Create_Agent.exe (No File)
Startup: C:\Users\FRPOK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Outlook.lnk [2023-01-05]
ShortcutTarget: Outlook.lnk -> C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2025-05-21]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Tailscale.lnk [2026-05-28]
ShortcutTarget: Tailscale.lnk -> C:\Program Files\Tailscale\tailscale-ipn.exe (Tailscale Inc. -> Tailscale Inc.)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {56CA0A64-063C-4D6C-B3E9-F7F923254C44} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {AD984C2D-EC3A-4068-ADF9-A9C7A8A72DB8} - System32\Tasks\CCleanerCrashReporting => C:\Users\FRPOK\Downloads\ccsetup626\x64\CCleanerBugReport.exe [5074848 2024-07-16] (Gen Digital Inc. -> Gen Digital Inc. All rights reserved.) -> --product 90 --send dumps|report --path "C:\Users\FRPOK\Downloads\ccsetup626\LOG" --programpath "C:\Users\FRPOK\Downloads\ccsetup626" --guid "" --version "6.26.11169" --silent
Task: {661FFF5F-BC18-48A5-A2F7-A3B719E7D519} - System32\Tasks\CCleanerSkipUAC - FRPOK => C:\Users\FRPOK\Downloads\ccsetup626\CCleaner.exe [38931368 2024-07-16] (Gen Digital Inc. -> Piriform Software Ltd)
Task: {BB1F883F-1A49-4936-B3C0-6BE40937AC81} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem151.0.7910.0{0DBA025E-4945-403B-938D-1A8374F984AA} => C:\Program Files (x86)\Google\GoogleUpdater\151.0.7910.0\updater.exe [9600664 2026-06-24] (Google LLC -> Google LLC)
Task: {6F1D93E9-638D-48F8-BF68-51B68E25BEB5} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {0F92EA2A-4B30-4956-A58E-7A3084FF3E99} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {170E6E26-CB13-4158-B7C4-A756B5007E2B} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-27] (HP Inc. -> HP Inc.)
Task: {4A1B7D51-91EE-4B54-82CE-413381066D28} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-27] (HP Inc. -> HP Inc.)
Task: {1CB1C7E1-C67F-4ADF-89DC-2493389F9FBF} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21919552 2026-06-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {20C8ED48-0BE4-4AF0-96F6-7A494B2B3EE1} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21919552 2026-06-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {0DD12C28-9FB5-4EEC-868C-FFEDE60C3BBC} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143720 2026-06-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {97F57EFD-6B3A-411C-A70E-0D56C28B05D5} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143720 2026-06-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {1EA39766-A735-4317-B4B0-3D3D30DBC757} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5F005F56-E8D3-43FB-99F0-479DE3D61A73} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BFBAC8FA-236A-46E1-8567-F532902BEA82} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {83EA228E-D32C-45AF-A260-F2B68F770470} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5EE422C7-D827-4649-A7CB-FC2D653B02DF} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [815 2022-11-22] () [File not signed]
Task: {0EA77487-D58E-4C81-A7EC-2B90DD697A2C} - System32\Tasks\Opera GX scheduled Autoupdate 1696870330 => C:\Users\FRPOK\AppData\Local\Programs\Opera GX\launcher.exe [2686880 2023-10-03] (Opera Norway AS -> Opera Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Users\FRPOK\Downloads\ccsetup626\x64\CCleanerBugReport.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Tcpip\..\Interfaces\{73c44911-ce68-45b2-8dcf-f18dcacec574}: [DhcpNameServer] 192.168.0.10 192.168.0.1
Tcpip\..\Interfaces\{f937b7b7-b2a7-4a01-b164-2563f1b37d65}: [DhcpNameServer] 192.168.0.1 192.168.0.1
Discord: C:\Users\FRPOK\AppData\Local\Discord\app-1.0.9222\modules\discord_zstd-1\discord_zstd\index.js <==== ATTENTION
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [ISVCU@iSkysoft.com] - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com_xpi
FF Extension: (iSkysoft iMedia Converter Deluxe) - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com_xpi [2022-12-29] [Legacy]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-06-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-06-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [No File]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [No File]
Edge:
=======
Edge DefaultProfile: Default
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\FRPOK\AppData\Local\Google\Chrome\User Data\Default [2026-07-13]
CHR Notifications: Default -> hxxps://aukro.cz; hxxps://cloud.pfstav.eu; hxxps://www.youtube.com
CHR HomePage: Default -> hxxps://seznam.cz/
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\FRPOK\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-07-13]
CHR Extension: (Bitwarden - Správce hesel) - C:\Users\FRPOK\AppData\Local\Google\Chrome\User Data\Default\Extensions\nngceckbapebfimnlniiiahkandclblb [2026-07-13]
CHR HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
R2 AdskLicensingService; C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\Current\AdskLicensingService\AdskLicensingService.exe [17267544 2026-06-09] (Autodesk, Inc. -> Autodesk, Inc.)
R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [5635000 2026-06-25] (AnyDesk Software GmbH -> AnyDesk Software GmbH)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2021-08-20] (Apple Inc. -> Apple Inc.)
R2 Autodesk Access Service Host; C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessServiceHost.exe [23084888 2026-02-02] (Autodesk, Inc. -> Autodesk, Inc.)
R2 Autodesk CER Service; C:\Program Files\Autodesk\Autodesk CER\service\cer_service.exe [24472136 2025-11-28] (Autodesk, Inc. -> )
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [15044872 2023-09-17] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9213248 2026-06-04] (Microsoft Corporation -> Microsoft Corporation)
R2 deviosvc; C:\Windows\System32\deviosvc.exe [81104 2025-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Arsenal Recon)
S3 DiscordSystemHelper; C:\Program Files\Common Files\Discord\Discord\DiscordSystemHelper.exe [2131840 2025-11-07] (discord-code-sign-windows-admin -> Discord Inc.)
R2 FMAPOService; C:\Windows\System32\FMService64.exe [356472 2019-06-26] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [401792 2026-05-14] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2026-06-27] (HP Inc. -> HP Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpDefenderCoreService.exe [2100520 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [669920 2025-06-23] (Geek Software GmbH -> geek software GmbH)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [530448 2024-09-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Tailscale; C:\Program Files\Tailscale\tailscaled.exe [25126904 2026-05-14] (Tailscale Inc. -> Tailscale Inc.)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [805224 2022-11-16] (Oracle Corporation -> Oracle and/or its affiliates)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\NisSrv.exe [4769792 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MsMpEng.exe [290704 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinFsp.Launcher; C:\Program Files (x86)\WinFsp\SxS\sxs.20260517T165656Z\bin\launcher-x64.exe [34536 2025-06-05] (NAVIMATICS LLC -> Navimatics LLC)
S2 avast; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc (No File)
S3 avastm; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /medsvc (No File)
R2 Fing.Agent; "C:\Program Files\Fing\extraResources\fingagent.exe" --servicemode Fing.Agent --agentroot "C:\Users\FRPOK\AppData\Roaming"
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S0 aimwrfltr; C:\Windows\System32\drivers\aimwrfltr.sys [53416 2025-10-20] (Arsenal Consulting, Inc. -> Arsenal Recon)
R2 awealloc; C:\Windows\System32\drivers\awealloc.sys [35368 2025-10-20] (Arsenal Consulting, Inc. -> Arsenal Recon)
R1 cbdisk2; C:\Windows\system32\drivers\cbdisk2.sys [201992 2012-10-17] (EldoS Corporation -> EldoS Corporation)
R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [352520 2012-10-22] (EldoS Corporation -> EldoS Corporation)
R3 cpuz165; C:\ProgramData\CPUID Software\hwmonitor\SO8nfW8Jsvq80 [43184 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
R2 deviodrv; C:\Windows\System32\drivers\deviodrv.sys [40520 2025-10-20] (Arsenal Consulting, Inc. -> Arsenal Recon)
R3 droidvcam0_aud0; C:\Windows\System32\DriverStore\FileRepository\droidcamaudio.inf_amd64_f08960db84657665\droidcamaudio.sys [33808 2022-06-22] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 droidvcam0_vid0; C:\Windows\System32\DriverStore\FileRepository\droidcamvideo.inf_amd64_feb1f7897e5bcd20\droidcamvideo.sys [136376 2025-12-11] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 e1dexpress; C:\Windows\System32\DriverStore\FileRepository\e1d.inf_amd64_f3c6513565231a23\e1d.sys [609456 2023-01-10] (Intel Corporation -> Intel Corporation)
R3 e2esoft_ivcamaudio_simple; C:\Windows\system32\drivers\iVCamAud.sys [255464 2020-11-03] (Shanghai Yitu Information Technology Co., Ltd. -> e2eSoft)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2013-07-03] (LogMeIn, Inc. -> LogMeIn Inc.)
R3 HWiNFO_214; C:\Users\FRPOK\AppData\Local\Temp\HWiNFO_x64_214.sys [60072 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> REALiX) <==== ATTENTION
R3 iVCam; C:\Windows\system32\DRIVERS\iVCam.sys [1198664 2022-12-05] (Shanghai Yitu Information Technology Co., Ltd. -> e2eSoft)
R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [82312 2026-05-20] (Microsoft Windows -> Microsoft Corporation)
R1 npcap; C:\Windows\system32\DRIVERS\npcap.sys [81568 2025-08-01] (Nmap Software LLC -> Nmap Software LLC)
R0 osfdisk; C:\Windows\System32\drivers\osfdisk.sys [1518952 2024-02-21] (PassMark Software Pty Ltd -> )
S3 OSFMount; C:\Program Files\OSFMount\win10\OSFMount.sys [1209656 2024-02-21] (PassMark Software Pty Ltd -> PassMark Software)
R3 phdskmnt; C:\Windows\System32\drivers\phdskmnt.sys [65280 2025-10-20] (Arsenal Consulting, Inc. -> Arsenal Recon)
S3 pmdiskdriver; C:\Windows\System32\pmdiskdriver.sys [33296 2024-05-22] (深圳牛学长科技有限公司 -> Tenorshare)
R3 PPJoyBus; C:\Windows\System32\drivers\PPJoyBus64.sys [22752 2016-05-13] (Deon van der Westhuysen Test Certificate -> Deon van der Westhuysen)
R3 PPortJoystick; C:\Windows\System32\drivers\PPortJoy64.sys [42720 2016-05-13] (Deon van der Westhuysen Test Certificate -> Deon van der Westhuysen)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2021-03-26] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2021-03-26] (MiniTool Solution Ltd -> )
S3 RvNetMP60; C:\Windows\System32\drivers\RvNetMP60.sys [58288 2023-07-10] (Microsoft Windows Hardware Compatibility Publisher -> Famatech Corp.)
R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [254632 2022-11-16] (Oracle Corporation -> Oracle and/or its affiliates)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [265504 2022-11-16] (Oracle Corporation -> Oracle and/or its affiliates)
R1 VBoxSup; C:\Windows\system32\DRIVERS\VBoxSup.sys [1060880 2022-11-16] (Oracle Corporation -> Oracle and/or its affiliates)
R2 vhdaccess; C:\Windows\System32\drivers\vhdaccess.sys [44440 2025-10-20] (Lagerkvist Teknisk Rådgivning i Borås HB -> )
S4 WdAiNisDrv; C:\Windows\System32\drivers\wd\WdAiNisDrv.sys [50568 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [21928 2026-07-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [616880 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [110984 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
S3 WinFsp+20260517T165656Z; C:\Program Files (x86)\WinFsp\SxS\sxs.20260517T165656Z\bin\winfsp-x64.sys [168600 2025-06-05] (Microsoft Windows Hardware Compatibility Publisher -> Navimatics LLC)
R3 wintun; C:\Windows\System32\drivers\wintun.sys [29592 2025-07-04] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 WireGuard; C:\Windows\System32\drivers\wireguard.sys [489368 2025-10-08] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
U4 npcap_wifi; no ImagePath
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-07-13 23:47 - 2026-07-13 23:47 - 000000000 ____D C:\Users\FRPOK\Desktop\First
2026-07-13 23:32 - 2026-07-13 23:37 - 000086814 _____ C:\Users\FRPOK\Desktop\Addition.txt
2026-07-13 23:27 - 2026-07-13 23:46 - 000030368 _____ C:\Users\FRPOK\Desktop\FRST.txt
2026-07-13 23:27 - 2026-07-13 23:46 - 000000000 ____D C:\FRST
2026-07-13 23:26 - 2026-07-13 23:24 - 002451456 _____ (Farbar) C:\Users\FRPOK\Desktop\FRST64.exe
2026-07-13 23:24 - 2026-07-13 23:24 - 002451456 _____ (Farbar) C:\Users\FRPOK\Downloads\FRST64.exe
2026-07-13 23:22 - 2026-07-13 23:22 - 000020526 _____ C:\Users\FRPOK\Downloads\HWinfo.zip
2026-07-13 23:20 - 2026-07-13 23:20 - 000126630 _____ C:\Users\FRPOK\Downloads\HWinfo.txt
2026-07-13 23:18 - 2026-07-13 23:18 - 020491280 _____ (Martin Malik, REALiX s.r.o. ) C:\Users\FRPOK\Downloads\hwi64_846.exe
2026-07-13 23:18 - 2026-07-13 23:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO® 64
2026-07-13 23:18 - 2026-07-13 23:18 - 000000000 ____D C:\Program Files\HWiNFO64
2026-07-13 23:06 - 2026-07-13 23:07 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2026-07-13 23:06 - 2026-07-13 23:06 - 000001117 _____ C:\Users\FRPOK\Desktop\SpeedFan.lnk
2026-07-13 23:06 - 2026-07-13 23:06 - 000000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2026-07-13 23:06 - 2026-07-13 23:06 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2026-07-13 23:05 - 2026-07-13 23:05 - 003086696 _____ C:\Users\FRPOK\Downloads\instspeedfan452_1.exe
2026-07-13 23:03 - 2026-07-13 23:03 - 005056536 _____ ( ) C:\Users\FRPOK\Downloads\speedfan-4.53-installer_2PFp-g8.exe
2026-07-13 23:03 - 2026-07-13 23:03 - 000056554 _____ C:\Users\FRPOK\Downloads\HWMonitor.txt
2026-07-13 23:01 - 2026-07-13 23:01 - 000000972 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2026-07-13 23:01 - 2026-07-13 23:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2026-07-13 23:01 - 2026-07-13 23:01 - 000000000 ____D C:\Program Files\CPUID
2026-07-13 19:35 - 2026-07-13 19:35 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Backup
2026-07-13 19:29 - 2026-07-13 19:29 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Adobe
2026-07-13 19:21 - 2026-07-13 19:21 - 000729014 _____ C:\Windows\system32\perfh005.dat
2026-07-13 19:21 - 2026-07-13 19:21 - 000152310 _____ C:\Windows\system32\perfc005.dat
2026-07-13 19:14 - 2026-07-13 19:14 - 000000008 __RSH C:\ProgramData\ntuser.pol
2026-07-13 18:32 - 2014-02-13 23:59 - 000024064 _____ C:\Windows\zoek-delete.exe
2026-07-13 17:47 - 2026-07-13 18:26 - 000000000 ____D C:\zoek_backup
2026-07-13 17:47 - 2026-07-13 17:47 - 002038755 _____ C:\Users\FRPOK\Downloads\zoek (1).exe
2026-07-13 16:32 - 2026-07-13 16:32 - 000001651 _____ C:\Users\FRPOK\Downloads\rogue.txt
2026-07-13 16:28 - 2026-07-13 16:28 - 000001231 _____ C:\Users\FRPOK\Downloads\Malwarebytes Threat Scan Report 2026-07-13 161939.txt
2026-07-13 16:28 - 2026-07-13 16:28 - 000001231 _____ C:\Users\FRPOK\Desktop\Malwarebytes Threat Scan Report 2026-07-13 161939.txt
2026-07-13 16:23 - 2026-07-13 16:23 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Adlice Software
2026-07-13 16:20 - 2026-07-13 16:21 - 087069992 _____ (Adlice Software ) C:\Users\FRPOK\Downloads\RogueKiller_setup_win10.exe
2026-07-13 16:17 - 2026-07-13 19:18 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Autodesk
2026-07-13 16:04 - 2026-07-13 16:04 - 001790024 _____ (Malwarebytes) C:\Users\FRPOK\Downloads\JRT (1).exe
2026-07-12 21:32 - 2026-07-12 21:33 - 001790024 _____ (Malwarebytes) C:\Users\FRPOK\Desktop\JRT (1).exe
2026-07-12 21:29 - 2026-07-12 21:29 - 000001423 _____ C:\Users\FRPOK\Desktop\Malwarebytes Threat Scan Report 2026-07-12 212143.txt
2026-07-12 21:27 - 2026-07-12 21:27 - 010073529 _____ C:\Users\FRPOK\Downloads\Přílohy ZD GVM učebny chemie - vybavení 26_03_03.zip
2026-07-12 21:27 - 2026-07-12 21:27 - 000000000 ____D C:\Users\FRPOK\Downloads\Přílohy ZD GVM učebny chemie - vybavení 26_03_03
2026-07-12 21:19 - 2026-07-12 21:25 - 000000000 ____D C:\Users\FRPOK\Desktop\Posluchárna
2026-07-12 18:04 - 2026-07-12 18:04 - 007288516 _____ C:\Users\FRPOK\Downloads\Přílohy ZD GVM učebny chemie - vybavení.zip
2026-07-12 18:04 - 2026-07-12 18:04 - 000000000 ____D C:\Users\FRPOK\Downloads\Přílohy ZD GVM učebny chemie - vybavení
2026-07-12 18:03 - 2026-07-12 18:03 - 000000000 ____D C:\Users\FRPOK\Downloads\20250612-2025-05_DPS_CHEMICKY AREAL pro REALIZACI (1)
2026-07-12 18:02 - 2026-07-12 18:02 - 011804065 _____ C:\Users\FRPOK\Downloads\20250612-2025-05_DPS_CHEMICKY AREAL pro REALIZACI (1).zip
2026-07-12 17:53 - 2026-07-12 17:53 - 000279301 _____ C:\Users\FRPOK\Downloads\GVM - posluchárna - hnízda el. do lavic.pdf
2026-07-12 17:52 - 2026-07-12 17:48 - 006212656 _____ (Crystal Dew World ) C:\Users\FRPOK\Desktop\CrystalDiskInfo9_9_0.exe
2026-07-12 17:49 - 2026-07-12 17:48 - 002862824 _____ (Malwarebytes) C:\Users\FRPOK\Desktop\MBSetup-3.3.exe
2026-07-12 17:48 - 2026-07-13 16:07 - 006212656 _____ (Crystal Dew World ) C:\Users\FRPOK\Downloads\CrystalDiskInfo9_9_0.exe
2026-07-12 17:48 - 2026-07-12 17:48 - 002862824 _____ (Malwarebytes) C:\Users\FRPOK\Downloads\MBSetup-3.3.exe
2026-07-12 17:33 - 2026-07-12 17:33 - 002849080 _____ (Malwarebytes) C:\Users\FRPOK\Downloads\MBSetup_0wkn (1).exe
2026-07-12 14:32 - 2026-07-12 14:32 - 001749176 _____ (Gen Digital Inc.) C:\Users\FRPOK\Downloads\ccsetup_online_setup.exe
2026-07-12 13:54 - 2026-07-12 13:54 - 000001448 _____ C:\Users\FRPOK\Documents\Malwarebytes Threat Scan Report 2026-07-12 133444.txt
2026-07-12 13:33 - 2026-07-12 13:33 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Sentry
2026-07-12 13:31 - 2026-07-12 13:31 - 002849080 _____ (Malwarebytes) C:\Users\FRPOK\Downloads\MBSetup_0wkn.exe
2026-07-12 09:49 - 2026-07-12 09:49 - 000000000 ____D C:\Users\Default\AppData\Local\Autodesk
2026-07-12 09:10 - 2026-07-12 09:10 - 000056548 _____ C:\Users\FRPOK\Documents\HWMonitor.txt
2026-07-12 09:09 - 2026-07-12 09:09 - 000000000 ____D C:\ProgramData\CPUID Software
2026-07-12 09:07 - 2026-07-12 09:07 - 003596376 _____ (CPUID, Inc. ) C:\Users\FRPOK\Downloads\hwmonitor_1.64.exe
2026-07-12 08:07 - 2026-07-12 08:07 - 000388608 _____ (Trend Micro Inc.) C:\Users\FRPOK\Downloads\HijackThis.exe
2026-06-29 20:11 - 2026-06-29 20:11 - 012013054 _____ C:\Users\FRPOK\Downloads\20250612-2025-05_DPS_CHEMICKY AREAL pro PKKV (1).zip
2026-06-29 20:11 - 2026-06-29 20:11 - 000000000 ____D C:\Users\FRPOK\Downloads\20250612-2025-05_DPS_CHEMICKY AREAL pro PKKV (1)
2026-06-28 20:54 - 2026-06-28 20:54 - 000000000 ____D C:\Users\FRPOK\AppData\Local\e2eSoft
2026-06-28 20:53 - 2026-06-28 20:53 - 039707064 _____ (e2eSoft ) C:\Users\FRPOK\Downloads\iVCam_x64_v7.1.0.exe
2026-06-28 20:53 - 2026-06-28 20:53 - 000000972 _____ C:\Users\Public\Desktop\iVCam.lnk
2026-06-28 20:53 - 2026-06-28 20:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\e2eSoft iVCam
2026-06-28 20:53 - 2026-06-28 20:53 - 000000000 ____D C:\Program Files\e2eSoft
2026-06-28 20:53 - 2026-06-28 20:53 - 000000000 ____D C:\Program Files\Bonjour
2026-06-28 20:53 - 2026-06-28 20:53 - 000000000 ____D C:\Program Files (x86)\Bonjour
2026-06-28 20:53 - 2022-12-06 01:28 - 001198664 _____ (e2eSoft) C:\Windows\system32\Drivers\iVCam.sys
2026-06-28 20:53 - 2020-11-04 00:13 - 000255464 _____ (e2eSoft) C:\Windows\system32\Drivers\iVCamAud.sys
2026-06-28 20:31 - 2026-06-29 19:35 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\droidcam-obs-client
2026-06-28 20:31 - 2026-06-28 20:31 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DroidCam Client
2026-06-28 20:31 - 2026-06-28 20:31 - 000000000 ____D C:\Program Files\DroidCam
2026-06-28 20:30 - 2026-06-28 20:30 - 103246728 _____ C:\Users\FRPOK\Downloads\DroidCam.Client.7.2.1.exe
2026-06-28 19:21 - 2026-06-28 19:22 - 000000694 _____ C:\Users\FRPOK\Desktop\fve_power.py
2026-06-28 19:20 - 2026-06-28 19:20 - 000000000 ____D C:\Users\FRPOK\AppData\Local\pip
2026-06-28 16:47 - 2026-06-28 16:53 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.13
2026-06-28 16:47 - 2026-06-28 16:47 - 029225624 _____ (Python Software Foundation) C:\Users\FRPOK\Downloads\python-3.13.14-amd64.exe
2026-06-28 16:47 - 2026-06-28 16:47 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Package Cache
2026-06-28 16:19 - 2026-06-29 19:35 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\com.fing.app
2026-06-28 16:18 - 2026-06-28 16:18 - 000003460 _____ C:\Windows\system32\Tasks\npcapwatchdog
2026-06-28 16:18 - 2026-06-28 16:18 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\FingAgent
2026-06-28 16:17 - 2026-06-28 16:18 - 000000000 ____D C:\Program Files\Npcap
2026-06-28 16:17 - 2026-06-28 16:17 - 015320544 _____ C:\Users\FRPOK\Downloads\Fing.exe
2026-06-28 16:17 - 2026-06-28 16:17 - 000000919 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fing.lnk
2026-06-28 16:17 - 2026-06-28 16:17 - 000000000 ____D C:\Windows\SysWOW64\Npcap
2026-06-28 16:17 - 2026-06-28 16:17 - 000000000 ____D C:\Windows\system32\Npcap
2026-06-28 16:17 - 2026-06-28 16:17 - 000000000 ____D C:\ProgramData\Fingagent
2026-06-28 16:17 - 2026-06-28 16:17 - 000000000 ____D C:\Program Files\Fing
2026-06-28 16:07 - 2026-06-28 16:07 - 024397069 _____ C:\Users\FRPOK\Downloads\qModMaster-Win64-exe-0.5.3-beta.zip
2026-06-28 16:07 - 2026-06-28 16:07 - 000000000 ____D C:\Users\FRPOK\Downloads\qModMaster-Win64-exe-0.5.3-beta
2026-06-28 08:18 - 2026-06-28 08:19 - 000013045 _____ C:\Users\FRPOK\Desktop\Výkaz výměr -vymalba - GVM.xlsx
2026-06-27 15:22 - 2026-06-27 15:22 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-06-23 20:11 - 2026-06-23 20:11 - 016164440 _____ C:\Users\FRPOK\Downloads\HILBERT_VŘ - GVM.zip
2026-06-23 20:11 - 2026-06-23 20:11 - 007022988 _____ C:\Users\FRPOK\Downloads\VWR_contract-13739-OFFER-12944-attach.zip
2026-06-20 18:07 - 2026-06-20 18:07 - 000002400 _____ C:\Users\FRPOK\Downloads\FVE Řízení přetoků s chybovou.txt
2026-06-18 17:26 - 2026-06-18 17:26 - 021050672 _____ (Famatech Corp. ) C:\Users\FRPOK\Downloads\Advanced_IP_Scanner_2.5.4594.1.exe
2026-06-18 17:26 - 2026-06-18 17:26 - 021050672 _____ (Famatech Corp. ) C:\Users\FRPOK\Downloads\Advanced_IP_Scanner_2.5.4594.1 (1).exe
2026-06-16 10:38 - 2026-06-16 10:38 - 000071513 _____ C:\Users\FRPOK\Downloads\MKM_MONTAZKA_000045284048_20260616074053_VD000000059010243.pdf
2026-06-16 02:48 - 2026-07-10 15:58 - 000481736 _____ (Microsoft Corporation) C:\Windows\system32\gamingservicesproxy_11.dll.0
2026-06-15 14:38 - 2026-06-15 14:37 - 007153642 _____ C:\Users\FRPOK\Desktop\zpěvník1.pdf
2026-06-14 05:55 - 2026-06-14 05:55 - 000129957 _____ C:\Users\FRPOK\Downloads\jsonall.txt
2026-06-13 20:04 - 2026-06-13 21:42 - 000047386 _____ C:\Users\FRPOK\Downloads\json.txt
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-07-13 23:36 - 2023-01-02 00:26 - 000000000 ____D C:\TEMP
2026-07-13 23:19 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemTemp
2026-07-13 23:09 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-07-13 19:22 - 2023-12-18 19:52 - 000000000 ___HD C:\Users\FRPOK\Downloads\.opera
2026-07-13 19:22 - 2023-10-10 18:52 - 000000000 ___HD C:\Users\FRPOK\.opera
2026-07-13 19:21 - 2022-12-28 13:59 - 001726552 _____ C:\Windows\system32\PerfStringBackup.INI
2026-07-13 19:21 - 2022-05-07 07:22 - 000000000 ____D C:\Windows\INF
2026-07-13 19:18 - 2026-05-10 12:30 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Nextcloud
2026-07-13 19:18 - 2022-12-29 15:55 - 000000000 ____D C:\ProgramData\AnyDesk
2026-07-13 19:18 - 2022-12-29 15:53 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\AnyDesk
2026-07-13 19:17 - 2022-12-28 14:23 - 000000000 __SHD C:\Users\FRPOK\IntelGraphicsProfiles
2026-07-13 19:17 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\AppReadiness
2026-07-13 19:14 - 2022-12-28 14:05 - 000000134 _____ C:\Windows\system32\regtest.txt
2026-07-13 19:14 - 2022-12-28 13:58 - 000000000 ____D C:\Intel
2026-07-13 19:14 - 2022-12-28 13:52 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-07-13 19:13 - 2022-12-30 11:59 - 000001134 _____ C:\Windows\system32\config\VSMIDK
2026-07-13 19:13 - 2022-12-28 13:52 - 000012288 ___SH C:\DumpStack.log.tmp
2026-07-13 19:12 - 2022-05-07 07:17 - 000524288 _____ C:\Windows\system32\config\BBI
2026-07-13 18:27 - 2022-05-07 07:24 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2026-07-13 18:27 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2026-07-13 18:26 - 2022-12-28 13:55 - 000000000 ____D C:\Users\FRPOK
2026-07-13 17:51 - 2023-01-01 14:19 - 000000000 ____D C:\Users\FRPOK\AppData\Local\CrashDumps
2026-07-13 17:46 - 2024-07-29 16:11 - 000000000 ____D C:\ProgramData\Piriform
2026-07-13 17:44 - 2022-05-07 07:24 - 000000000 ___HD C:\Windows\ELAMBKUP
2026-07-13 17:44 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2026-07-12 23:14 - 2024-08-13 15:50 - 000000877 _____ C:\Users\FRPOK\Desktop\JRT.txt
2026-07-12 23:04 - 2022-12-29 09:37 - 000000000 ____D C:\Program Files (x86)\Steam
2026-07-12 21:36 - 2022-12-28 18:34 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Microsoft\Excel
2026-07-12 21:36 - 2022-12-28 13:55 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Packages
2026-07-12 17:31 - 2022-12-29 14:13 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\XnView
2026-07-12 14:39 - 2022-12-28 13:55 - 000000000 ____D C:\Users\FRPOK\AppData\Local\D3DSCache
2026-07-12 14:26 - 2023-01-05 11:03 - 000000000 ____D C:\Users\FRPOK\Documents\Soubory aplikace Outlook
2026-07-12 13:51 - 2024-11-04 11:23 - 000000000 ____D C:\ProgramData\boost_interprocess
2026-07-12 13:33 - 2022-12-28 13:55 - 000000000 ____D C:\ProgramData\Packages
2026-07-12 09:49 - 2024-11-04 11:23 - 000000000 ____D C:\Program Files\Autodesk
2026-07-12 08:59 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\LiveKernelReports
2026-07-12 08:43 - 2024-07-29 12:16 - 000000000 ____D C:\ProgramData\Wondershare
2026-07-12 08:42 - 2023-01-01 11:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
2026-07-12 08:31 - 2022-12-28 13:52 - 000000000 ____D C:\Windows\system32\SleepStudy
2026-07-12 08:30 - 2026-02-24 12:10 - 000000000 ____D C:\ProgramData\Avast Software
2026-07-11 21:13 - 2022-12-30 23:18 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\vlc
2026-07-11 19:36 - 2023-01-15 16:59 - 000000000 ____D C:\Program Files (x86)\Intel
2026-07-11 19:34 - 2024-06-22 14:03 - 000000000 ____D C:\Program Files\MiniTool ShadowMaker
2026-07-11 19:34 - 2024-06-22 14:03 - 000000000 ____D C:\Program Files\MiniTool Partition Wizard 12
2026-07-11 19:27 - 2026-05-10 12:30 - 000001961 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nextcloud.lnk
2026-07-11 19:27 - 2026-05-10 12:30 - 000001949 _____ C:\Users\Public\Desktop\Nextcloud.lnk
2026-07-11 19:27 - 2026-05-10 12:30 - 000000000 ____D C:\Program Files\Nextcloud
2026-07-11 19:27 - 2024-06-22 14:04 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\QtProject
2026-07-11 07:54 - 2022-12-28 13:52 - 000002473 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-07-10 15:58 - 2022-12-30 14:13 - 004561352 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll
2026-07-10 15:58 - 2022-12-30 14:13 - 001182152 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll
2026-07-10 15:58 - 2022-12-30 14:13 - 000338376 _____ (Microsoft Corporation) C:\Windows\system32\gamelaunchhelper.dll
2026-07-10 15:58 - 2022-12-30 14:13 - 000268744 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll
2026-07-10 15:58 - 2022-12-30 14:13 - 000166344 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll
2026-07-10 15:58 - 2022-12-30 14:13 - 000158152 _____ (Microsoft Corporation) C:\Windows\system32\xgamehelper.exe
2026-07-10 15:58 - 2022-12-30 14:13 - 000084424 _____ (Microsoft Corporation) C:\Windows\system32\xgamecontrol.exe
2026-07-09 01:00 - 2023-05-25 07:32 - 000002284 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-07-08 15:05 - 2022-12-28 13:52 - 000000000 ____D C:\Windows\system32\Drivers\wd
2026-06-29 20:00 - 2025-12-13 16:58 - 000000000 ____D C:\Users\FRPOK\Desktop\chemie
2026-06-29 19:48 - 2023-01-02 14:49 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Microsoft\Word
2026-06-28 16:19 - 2022-12-28 13:55 - 000000000 ___SD C:\Users\FRPOK\AppData\Roaming\Microsoft\Credentials
2026-06-27 19:05 - 2022-12-29 21:09 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2026-06-27 17:28 - 2023-01-15 17:04 - 000000000 ____D C:\Program Files\Intel
2026-06-27 15:35 - 2023-01-11 19:17 - 000002098 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2026-06-27 15:35 - 2022-12-29 21:13 - 000002183 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-06-27 15:24 - 2025-12-08 13:34 - 000000000 ____D C:\Windows\system32\Tasks\GoogleUserPEH
2026-06-27 15:22 - 2022-12-28 18:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office
2026-06-27 15:22 - 2022-12-28 18:28 - 000000000 ____D C:\Program Files\Microsoft Office
2026-06-27 15:20 - 2022-12-29 15:55 - 000000000 ____D C:\Program Files (x86)\AnyDesk
2026-06-27 03:09 - 2023-09-11 21:17 - 000000000 ____D C:\Windows\system32\Tasks\HP
2026-06-27 03:09 - 2023-08-09 11:22 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-06-26 19:18 - 2024-12-26 13:20 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\BambuStudio
2026-06-20 02:47 - 2022-12-28 13:52 - 000003640 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-20 02:47 - 2022-12-28 13:52 - 000003514 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-06-15 19:20 - 2022-12-31 19:10 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Kodi
==================== Files in the root of some directories ========
2023-08-21 17:14 - 2024-06-22 18:10 - 000000128 _____ () C:\Users\FRPOK\AppData\Local\PUTTY.RND
2026-02-25 21:52 - 2026-02-25 21:52 - 000000001 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.1.20.agreement
2026-04-12 15:10 - 2026-04-12 15:10 - 000000009 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.opendialog.dir
2026-04-12 15:10 - 2026-04-12 15:10 - 000000001 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.opendialog.filterindex
2026-02-25 21:54 - 2026-03-04 21:26 - 000000009 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.savedialog.dir
2026-02-25 21:54 - 2026-03-04 21:26 - 000000001 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.savedialog.filterindex
2026-04-12 15:10 - 2026-04-12 15:10 - 000000036 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.sourcedisk.filepath
2026-02-25 21:53 - 2026-04-12 15:10 - 000000001 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.sourcedisk.index
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
testsigning: ==> 'testsigning' is set. Check for possible unsigned driver <==== ATTENTION
==================== End of FRST.txt ========================
Ran by FRPOK (administrator) on FRPOK (Intel(R) Client Systems NUC8i5BEH) (13-07-2026 23:45:46)
Running from C:\Users\FRPOK\Desktop\FRST64.exe
Loaded Profiles: FRPOK
Platform: Microsoft Windows 11 Pro Version 22H2 22621.4317 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Autodesk, Inc. -> Autodesk) C:\Program Files\Autodesk\Genuine Service\GenuineService.exe
(Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessService.exe
(C:\Users\FRPOK\Desktop\FRST64.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2605.29.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe <2>
(DriverStore\FileRepository\cui_dch.inf_amd64_500d7f066e4084ac\igfxCUIService.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_500d7f066e4084ac\igfxEM.exe
(explorer.exe ->) (AnyDesk Software GmbH -> AnyDesk Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(explorer.exe ->) (CPUID -> CPUID) C:\Program Files\CPUID\HWMonitor\HWMonitor.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe
(explorer.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2605.29.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe
(explorer.exe ->) (Nextcloud GmbH -> Nextcloud GmbH) C:\Program Files\Nextcloud\nextcloud.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(explorer.exe ->) (SOKNO S.R.L. -> ) C:\Program Files (x86)\SpeedFan\speedfan.exe
(explorer.exe ->) (Tailscale Inc. -> Tailscale Inc.) C:\Program Files\Tailscale\tailscale-ipn.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <16>
(Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2605.29.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\GameInputSvc.exe
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(REALiX, s.r.o. -> REALiX s.r.o.) C:\Program Files\HWiNFO64\HWiNFO64.EXE
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (AnyDesk Software GmbH -> AnyDesk Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (Autodesk, Inc. -> ) C:\Program Files\Autodesk\Autodesk CER\service\cer_service.exe
(services.exe ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\16.3.1.15415\AdskLicensingService\AdskLicensingService.exe
(services.exe ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessServiceHost.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(services.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (Lansweeper -> Fing Limited) C:\Program Files\Fing\extraResources\fingagent.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\GameInputSvc.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Arsenal Recon) C:\Windows\System32\deviosvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_500d7f066e4084ac\igfxCUIService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_9a229169a273dffe\OneApp.IGCC.WinService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_438014eb8484108d\IntelCpHDCPSvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_438014eb8484108d\IntelCpHeciSvc.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\NisSrv.exe
(services.exe ->) (NAVIMATICS LLC -> Navimatics LLC) C:\Program Files (x86)\WinFsp\SxS\sxs.20260517T165656Z\bin\launcher-x64.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(services.exe ->) (Smart Sound Technology -> Intel) C:\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe
(services.exe ->) (Tailscale Inc. -> Tailscale Inc.) C:\Program Files\Tailscale\tailscaled.exe
(sihost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(svchost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\IGCC.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2606.1001.29.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
(Tailscale Inc. -> Tailscale Inc.) C:\Program Files\Tailscale\tailscaled.exe
==================== Registry (Whitelisted) ===================
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [1126128 2020-07-02] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Autodesk Access Service] => C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessService.exe [21901144 2026-01-15] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM\...\Run: [Autodesk Access] => C:\Program Files\Autodesk\AdODIS\V1\Access\AdskAccessCore.exe [40474968 2026-02-05] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [669920 2025-06-23] (Geek Software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2066432 2014-10-31] (iSkySoft) [File not signed]
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\iSkysoft\Video Converter Ultimate\DelayPluginI.exe [1971872 2016-08-18] (Shenzhen Yi Xing Investment Co., Ltd. -> )
HKLM-x32\...\Run: [CND-SGM5 Gaming Mouse Driver] => C:\Program Files (x86)\CND-SGM5\Monitor.exe [471040 2015-03-17] () [File not signed]
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2022-12-30] (Adobe Inc. -> )
HKLM-x32\...\Run: [Autodesk Genuine Service ] => C:\Program Files\Autodesk\Genuine Service\GenuineService.exe [2690904 2026-07-08] (Autodesk, Inc. -> Autodesk)
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\125.0.0.0\GoogleDriveFS.exe --startup_mode (No File)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\125.0.0.0\GoogleDriveFS.exe --startup_mode (No File)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [com.squirrel.Teams.Teams] => C:\Users\FRPOK\AppData\Local\Microsoft\Teams\Update.exe [2454240 2022-12-28] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5767832 2026-03-13] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [45052888 2026-06-24] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [Discord] => C:\Users\FRPOK\AppData\Local\Discord\Update.exe [1525016 2023-08-28] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [MicrosoftEdgeAutoLaunch_779677589740C4166E4BD37CCE8C6B47] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [4970824 2026-07-09] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [Nextcloud] => C:\Program Files\Nextcloud\nextcloud.exe [10051392 2026-06-29] (Nextcloud GmbH -> Nextcloud GmbH)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Run: [Fing] => C:\Program Files\Fing\Fing.exe [23571232 2026-06-01] (Lansweeper -> Fing Ltd)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Policies\Explorer: []
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\125.0.0.0\GoogleDriveFS.exe --startup_mode (No File)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\150.0.7871.102\Installer\chrmstp.exe [7690392 2026-07-08] (Google LLC -> Google LLC)
Startup: C:\Users\FRPOK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Arduino Create Agent.lnk [2023-12-27]
ShortcutTarget: Arduino Create Agent.lnk -> C:\Users\FRPOK\AppData\Roaming\ArduinoCreateAgent\Arduino_Create_Agent.exe (No File)
Startup: C:\Users\FRPOK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Outlook.lnk [2023-01-05]
ShortcutTarget: Outlook.lnk -> C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2025-05-21]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Tailscale.lnk [2026-05-28]
ShortcutTarget: Tailscale.lnk -> C:\Program Files\Tailscale\tailscale-ipn.exe (Tailscale Inc. -> Tailscale Inc.)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {56CA0A64-063C-4D6C-B3E9-F7F923254C44} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {AD984C2D-EC3A-4068-ADF9-A9C7A8A72DB8} - System32\Tasks\CCleanerCrashReporting => C:\Users\FRPOK\Downloads\ccsetup626\x64\CCleanerBugReport.exe [5074848 2024-07-16] (Gen Digital Inc. -> Gen Digital Inc. All rights reserved.) -> --product 90 --send dumps|report --path "C:\Users\FRPOK\Downloads\ccsetup626\LOG" --programpath "C:\Users\FRPOK\Downloads\ccsetup626" --guid "" --version "6.26.11169" --silent
Task: {661FFF5F-BC18-48A5-A2F7-A3B719E7D519} - System32\Tasks\CCleanerSkipUAC - FRPOK => C:\Users\FRPOK\Downloads\ccsetup626\CCleaner.exe [38931368 2024-07-16] (Gen Digital Inc. -> Piriform Software Ltd)
Task: {BB1F883F-1A49-4936-B3C0-6BE40937AC81} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem151.0.7910.0{0DBA025E-4945-403B-938D-1A8374F984AA} => C:\Program Files (x86)\Google\GoogleUpdater\151.0.7910.0\updater.exe [9600664 2026-06-24] (Google LLC -> Google LLC)
Task: {6F1D93E9-638D-48F8-BF68-51B68E25BEB5} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {0F92EA2A-4B30-4956-A58E-7A3084FF3E99} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {170E6E26-CB13-4158-B7C4-A756B5007E2B} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-27] (HP Inc. -> HP Inc.)
Task: {4A1B7D51-91EE-4B54-82CE-413381066D28} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-27] (HP Inc. -> HP Inc.)
Task: {1CB1C7E1-C67F-4ADF-89DC-2493389F9FBF} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21919552 2026-06-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {20C8ED48-0BE4-4AF0-96F6-7A494B2B3EE1} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21919552 2026-06-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {0DD12C28-9FB5-4EEC-868C-FFEDE60C3BBC} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143720 2026-06-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {97F57EFD-6B3A-411C-A70E-0D56C28B05D5} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143720 2026-06-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {1EA39766-A735-4317-B4B0-3D3D30DBC757} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5F005F56-E8D3-43FB-99F0-479DE3D61A73} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BFBAC8FA-236A-46E1-8567-F532902BEA82} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {83EA228E-D32C-45AF-A260-F2B68F770470} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5EE422C7-D827-4649-A7CB-FC2D653B02DF} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [815 2022-11-22] () [File not signed]
Task: {0EA77487-D58E-4C81-A7EC-2B90DD697A2C} - System32\Tasks\Opera GX scheduled Autoupdate 1696870330 => C:\Users\FRPOK\AppData\Local\Programs\Opera GX\launcher.exe [2686880 2023-10-03] (Opera Norway AS -> Opera Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Users\FRPOK\Downloads\ccsetup626\x64\CCleanerBugReport.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Tcpip\..\Interfaces\{73c44911-ce68-45b2-8dcf-f18dcacec574}: [DhcpNameServer] 192.168.0.10 192.168.0.1
Tcpip\..\Interfaces\{f937b7b7-b2a7-4a01-b164-2563f1b37d65}: [DhcpNameServer] 192.168.0.1 192.168.0.1
Discord: C:\Users\FRPOK\AppData\Local\Discord\app-1.0.9222\modules\discord_zstd-1\discord_zstd\index.js <==== ATTENTION
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [ISVCU@iSkysoft.com] - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com_xpi
FF Extension: (iSkysoft iMedia Converter Deluxe) - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com_xpi [2022-12-29] [Legacy]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-06-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-06-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [No File]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [No File]
Edge:
=======
Edge DefaultProfile: Default
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\FRPOK\AppData\Local\Google\Chrome\User Data\Default [2026-07-13]
CHR Notifications: Default -> hxxps://aukro.cz; hxxps://cloud.pfstav.eu; hxxps://www.youtube.com
CHR HomePage: Default -> hxxps://seznam.cz/
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\FRPOK\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-07-13]
CHR Extension: (Bitwarden - Správce hesel) - C:\Users\FRPOK\AppData\Local\Google\Chrome\User Data\Default\Extensions\nngceckbapebfimnlniiiahkandclblb [2026-07-13]
CHR HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
R2 AdskLicensingService; C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\Current\AdskLicensingService\AdskLicensingService.exe [17267544 2026-06-09] (Autodesk, Inc. -> Autodesk, Inc.)
R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [5635000 2026-06-25] (AnyDesk Software GmbH -> AnyDesk Software GmbH)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2021-08-20] (Apple Inc. -> Apple Inc.)
R2 Autodesk Access Service Host; C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessServiceHost.exe [23084888 2026-02-02] (Autodesk, Inc. -> Autodesk, Inc.)
R2 Autodesk CER Service; C:\Program Files\Autodesk\Autodesk CER\service\cer_service.exe [24472136 2025-11-28] (Autodesk, Inc. -> )
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [15044872 2023-09-17] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9213248 2026-06-04] (Microsoft Corporation -> Microsoft Corporation)
R2 deviosvc; C:\Windows\System32\deviosvc.exe [81104 2025-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Arsenal Recon)
S3 DiscordSystemHelper; C:\Program Files\Common Files\Discord\Discord\DiscordSystemHelper.exe [2131840 2025-11-07] (discord-code-sign-windows-admin -> Discord Inc.)
R2 FMAPOService; C:\Windows\System32\FMService64.exe [356472 2019-06-26] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [401792 2026-05-14] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2026-06-27] (HP Inc. -> HP Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpDefenderCoreService.exe [2100520 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [669920 2025-06-23] (Geek Software GmbH -> geek software GmbH)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [530448 2024-09-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Tailscale; C:\Program Files\Tailscale\tailscaled.exe [25126904 2026-05-14] (Tailscale Inc. -> Tailscale Inc.)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [805224 2022-11-16] (Oracle Corporation -> Oracle and/or its affiliates)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\NisSrv.exe [4769792 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MsMpEng.exe [290704 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinFsp.Launcher; C:\Program Files (x86)\WinFsp\SxS\sxs.20260517T165656Z\bin\launcher-x64.exe [34536 2025-06-05] (NAVIMATICS LLC -> Navimatics LLC)
S2 avast; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc (No File)
S3 avastm; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /medsvc (No File)
R2 Fing.Agent; "C:\Program Files\Fing\extraResources\fingagent.exe" --servicemode Fing.Agent --agentroot "C:\Users\FRPOK\AppData\Roaming"
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S0 aimwrfltr; C:\Windows\System32\drivers\aimwrfltr.sys [53416 2025-10-20] (Arsenal Consulting, Inc. -> Arsenal Recon)
R2 awealloc; C:\Windows\System32\drivers\awealloc.sys [35368 2025-10-20] (Arsenal Consulting, Inc. -> Arsenal Recon)
R1 cbdisk2; C:\Windows\system32\drivers\cbdisk2.sys [201992 2012-10-17] (EldoS Corporation -> EldoS Corporation)
R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [352520 2012-10-22] (EldoS Corporation -> EldoS Corporation)
R3 cpuz165; C:\ProgramData\CPUID Software\hwmonitor\SO8nfW8Jsvq80 [43184 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
R2 deviodrv; C:\Windows\System32\drivers\deviodrv.sys [40520 2025-10-20] (Arsenal Consulting, Inc. -> Arsenal Recon)
R3 droidvcam0_aud0; C:\Windows\System32\DriverStore\FileRepository\droidcamaudio.inf_amd64_f08960db84657665\droidcamaudio.sys [33808 2022-06-22] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 droidvcam0_vid0; C:\Windows\System32\DriverStore\FileRepository\droidcamvideo.inf_amd64_feb1f7897e5bcd20\droidcamvideo.sys [136376 2025-12-11] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 e1dexpress; C:\Windows\System32\DriverStore\FileRepository\e1d.inf_amd64_f3c6513565231a23\e1d.sys [609456 2023-01-10] (Intel Corporation -> Intel Corporation)
R3 e2esoft_ivcamaudio_simple; C:\Windows\system32\drivers\iVCamAud.sys [255464 2020-11-03] (Shanghai Yitu Information Technology Co., Ltd. -> e2eSoft)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2013-07-03] (LogMeIn, Inc. -> LogMeIn Inc.)
R3 HWiNFO_214; C:\Users\FRPOK\AppData\Local\Temp\HWiNFO_x64_214.sys [60072 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> REALiX) <==== ATTENTION
R3 iVCam; C:\Windows\system32\DRIVERS\iVCam.sys [1198664 2022-12-05] (Shanghai Yitu Information Technology Co., Ltd. -> e2eSoft)
R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [82312 2026-05-20] (Microsoft Windows -> Microsoft Corporation)
R1 npcap; C:\Windows\system32\DRIVERS\npcap.sys [81568 2025-08-01] (Nmap Software LLC -> Nmap Software LLC)
R0 osfdisk; C:\Windows\System32\drivers\osfdisk.sys [1518952 2024-02-21] (PassMark Software Pty Ltd -> )
S3 OSFMount; C:\Program Files\OSFMount\win10\OSFMount.sys [1209656 2024-02-21] (PassMark Software Pty Ltd -> PassMark Software)
R3 phdskmnt; C:\Windows\System32\drivers\phdskmnt.sys [65280 2025-10-20] (Arsenal Consulting, Inc. -> Arsenal Recon)
S3 pmdiskdriver; C:\Windows\System32\pmdiskdriver.sys [33296 2024-05-22] (深圳牛学长科技有限公司 -> Tenorshare)
R3 PPJoyBus; C:\Windows\System32\drivers\PPJoyBus64.sys [22752 2016-05-13] (Deon van der Westhuysen Test Certificate -> Deon van der Westhuysen)
R3 PPortJoystick; C:\Windows\System32\drivers\PPortJoy64.sys [42720 2016-05-13] (Deon van der Westhuysen Test Certificate -> Deon van der Westhuysen)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2021-03-26] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2021-03-26] (MiniTool Solution Ltd -> )
S3 RvNetMP60; C:\Windows\System32\drivers\RvNetMP60.sys [58288 2023-07-10] (Microsoft Windows Hardware Compatibility Publisher -> Famatech Corp.)
R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [254632 2022-11-16] (Oracle Corporation -> Oracle and/or its affiliates)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [265504 2022-11-16] (Oracle Corporation -> Oracle and/or its affiliates)
R1 VBoxSup; C:\Windows\system32\DRIVERS\VBoxSup.sys [1060880 2022-11-16] (Oracle Corporation -> Oracle and/or its affiliates)
R2 vhdaccess; C:\Windows\System32\drivers\vhdaccess.sys [44440 2025-10-20] (Lagerkvist Teknisk Rådgivning i Borås HB -> )
S4 WdAiNisDrv; C:\Windows\System32\drivers\wd\WdAiNisDrv.sys [50568 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [21928 2026-07-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [616880 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [110984 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
S3 WinFsp+20260517T165656Z; C:\Program Files (x86)\WinFsp\SxS\sxs.20260517T165656Z\bin\winfsp-x64.sys [168600 2025-06-05] (Microsoft Windows Hardware Compatibility Publisher -> Navimatics LLC)
R3 wintun; C:\Windows\System32\drivers\wintun.sys [29592 2025-07-04] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 WireGuard; C:\Windows\System32\drivers\wireguard.sys [489368 2025-10-08] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
U4 npcap_wifi; no ImagePath
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-07-13 23:47 - 2026-07-13 23:47 - 000000000 ____D C:\Users\FRPOK\Desktop\First
2026-07-13 23:32 - 2026-07-13 23:37 - 000086814 _____ C:\Users\FRPOK\Desktop\Addition.txt
2026-07-13 23:27 - 2026-07-13 23:46 - 000030368 _____ C:\Users\FRPOK\Desktop\FRST.txt
2026-07-13 23:27 - 2026-07-13 23:46 - 000000000 ____D C:\FRST
2026-07-13 23:26 - 2026-07-13 23:24 - 002451456 _____ (Farbar) C:\Users\FRPOK\Desktop\FRST64.exe
2026-07-13 23:24 - 2026-07-13 23:24 - 002451456 _____ (Farbar) C:\Users\FRPOK\Downloads\FRST64.exe
2026-07-13 23:22 - 2026-07-13 23:22 - 000020526 _____ C:\Users\FRPOK\Downloads\HWinfo.zip
2026-07-13 23:20 - 2026-07-13 23:20 - 000126630 _____ C:\Users\FRPOK\Downloads\HWinfo.txt
2026-07-13 23:18 - 2026-07-13 23:18 - 020491280 _____ (Martin Malik, REALiX s.r.o. ) C:\Users\FRPOK\Downloads\hwi64_846.exe
2026-07-13 23:18 - 2026-07-13 23:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO® 64
2026-07-13 23:18 - 2026-07-13 23:18 - 000000000 ____D C:\Program Files\HWiNFO64
2026-07-13 23:06 - 2026-07-13 23:07 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2026-07-13 23:06 - 2026-07-13 23:06 - 000001117 _____ C:\Users\FRPOK\Desktop\SpeedFan.lnk
2026-07-13 23:06 - 2026-07-13 23:06 - 000000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2026-07-13 23:06 - 2026-07-13 23:06 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2026-07-13 23:05 - 2026-07-13 23:05 - 003086696 _____ C:\Users\FRPOK\Downloads\instspeedfan452_1.exe
2026-07-13 23:03 - 2026-07-13 23:03 - 005056536 _____ ( ) C:\Users\FRPOK\Downloads\speedfan-4.53-installer_2PFp-g8.exe
2026-07-13 23:03 - 2026-07-13 23:03 - 000056554 _____ C:\Users\FRPOK\Downloads\HWMonitor.txt
2026-07-13 23:01 - 2026-07-13 23:01 - 000000972 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2026-07-13 23:01 - 2026-07-13 23:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2026-07-13 23:01 - 2026-07-13 23:01 - 000000000 ____D C:\Program Files\CPUID
2026-07-13 19:35 - 2026-07-13 19:35 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Backup
2026-07-13 19:29 - 2026-07-13 19:29 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Adobe
2026-07-13 19:21 - 2026-07-13 19:21 - 000729014 _____ C:\Windows\system32\perfh005.dat
2026-07-13 19:21 - 2026-07-13 19:21 - 000152310 _____ C:\Windows\system32\perfc005.dat
2026-07-13 19:14 - 2026-07-13 19:14 - 000000008 __RSH C:\ProgramData\ntuser.pol
2026-07-13 18:32 - 2014-02-13 23:59 - 000024064 _____ C:\Windows\zoek-delete.exe
2026-07-13 17:47 - 2026-07-13 18:26 - 000000000 ____D C:\zoek_backup
2026-07-13 17:47 - 2026-07-13 17:47 - 002038755 _____ C:\Users\FRPOK\Downloads\zoek (1).exe
2026-07-13 16:32 - 2026-07-13 16:32 - 000001651 _____ C:\Users\FRPOK\Downloads\rogue.txt
2026-07-13 16:28 - 2026-07-13 16:28 - 000001231 _____ C:\Users\FRPOK\Downloads\Malwarebytes Threat Scan Report 2026-07-13 161939.txt
2026-07-13 16:28 - 2026-07-13 16:28 - 000001231 _____ C:\Users\FRPOK\Desktop\Malwarebytes Threat Scan Report 2026-07-13 161939.txt
2026-07-13 16:23 - 2026-07-13 16:23 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Adlice Software
2026-07-13 16:20 - 2026-07-13 16:21 - 087069992 _____ (Adlice Software ) C:\Users\FRPOK\Downloads\RogueKiller_setup_win10.exe
2026-07-13 16:17 - 2026-07-13 19:18 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Autodesk
2026-07-13 16:04 - 2026-07-13 16:04 - 001790024 _____ (Malwarebytes) C:\Users\FRPOK\Downloads\JRT (1).exe
2026-07-12 21:32 - 2026-07-12 21:33 - 001790024 _____ (Malwarebytes) C:\Users\FRPOK\Desktop\JRT (1).exe
2026-07-12 21:29 - 2026-07-12 21:29 - 000001423 _____ C:\Users\FRPOK\Desktop\Malwarebytes Threat Scan Report 2026-07-12 212143.txt
2026-07-12 21:27 - 2026-07-12 21:27 - 010073529 _____ C:\Users\FRPOK\Downloads\Přílohy ZD GVM učebny chemie - vybavení 26_03_03.zip
2026-07-12 21:27 - 2026-07-12 21:27 - 000000000 ____D C:\Users\FRPOK\Downloads\Přílohy ZD GVM učebny chemie - vybavení 26_03_03
2026-07-12 21:19 - 2026-07-12 21:25 - 000000000 ____D C:\Users\FRPOK\Desktop\Posluchárna
2026-07-12 18:04 - 2026-07-12 18:04 - 007288516 _____ C:\Users\FRPOK\Downloads\Přílohy ZD GVM učebny chemie - vybavení.zip
2026-07-12 18:04 - 2026-07-12 18:04 - 000000000 ____D C:\Users\FRPOK\Downloads\Přílohy ZD GVM učebny chemie - vybavení
2026-07-12 18:03 - 2026-07-12 18:03 - 000000000 ____D C:\Users\FRPOK\Downloads\20250612-2025-05_DPS_CHEMICKY AREAL pro REALIZACI (1)
2026-07-12 18:02 - 2026-07-12 18:02 - 011804065 _____ C:\Users\FRPOK\Downloads\20250612-2025-05_DPS_CHEMICKY AREAL pro REALIZACI (1).zip
2026-07-12 17:53 - 2026-07-12 17:53 - 000279301 _____ C:\Users\FRPOK\Downloads\GVM - posluchárna - hnízda el. do lavic.pdf
2026-07-12 17:52 - 2026-07-12 17:48 - 006212656 _____ (Crystal Dew World ) C:\Users\FRPOK\Desktop\CrystalDiskInfo9_9_0.exe
2026-07-12 17:49 - 2026-07-12 17:48 - 002862824 _____ (Malwarebytes) C:\Users\FRPOK\Desktop\MBSetup-3.3.exe
2026-07-12 17:48 - 2026-07-13 16:07 - 006212656 _____ (Crystal Dew World ) C:\Users\FRPOK\Downloads\CrystalDiskInfo9_9_0.exe
2026-07-12 17:48 - 2026-07-12 17:48 - 002862824 _____ (Malwarebytes) C:\Users\FRPOK\Downloads\MBSetup-3.3.exe
2026-07-12 17:33 - 2026-07-12 17:33 - 002849080 _____ (Malwarebytes) C:\Users\FRPOK\Downloads\MBSetup_0wkn (1).exe
2026-07-12 14:32 - 2026-07-12 14:32 - 001749176 _____ (Gen Digital Inc.) C:\Users\FRPOK\Downloads\ccsetup_online_setup.exe
2026-07-12 13:54 - 2026-07-12 13:54 - 000001448 _____ C:\Users\FRPOK\Documents\Malwarebytes Threat Scan Report 2026-07-12 133444.txt
2026-07-12 13:33 - 2026-07-12 13:33 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Sentry
2026-07-12 13:31 - 2026-07-12 13:31 - 002849080 _____ (Malwarebytes) C:\Users\FRPOK\Downloads\MBSetup_0wkn.exe
2026-07-12 09:49 - 2026-07-12 09:49 - 000000000 ____D C:\Users\Default\AppData\Local\Autodesk
2026-07-12 09:10 - 2026-07-12 09:10 - 000056548 _____ C:\Users\FRPOK\Documents\HWMonitor.txt
2026-07-12 09:09 - 2026-07-12 09:09 - 000000000 ____D C:\ProgramData\CPUID Software
2026-07-12 09:07 - 2026-07-12 09:07 - 003596376 _____ (CPUID, Inc. ) C:\Users\FRPOK\Downloads\hwmonitor_1.64.exe
2026-07-12 08:07 - 2026-07-12 08:07 - 000388608 _____ (Trend Micro Inc.) C:\Users\FRPOK\Downloads\HijackThis.exe
2026-06-29 20:11 - 2026-06-29 20:11 - 012013054 _____ C:\Users\FRPOK\Downloads\20250612-2025-05_DPS_CHEMICKY AREAL pro PKKV (1).zip
2026-06-29 20:11 - 2026-06-29 20:11 - 000000000 ____D C:\Users\FRPOK\Downloads\20250612-2025-05_DPS_CHEMICKY AREAL pro PKKV (1)
2026-06-28 20:54 - 2026-06-28 20:54 - 000000000 ____D C:\Users\FRPOK\AppData\Local\e2eSoft
2026-06-28 20:53 - 2026-06-28 20:53 - 039707064 _____ (e2eSoft ) C:\Users\FRPOK\Downloads\iVCam_x64_v7.1.0.exe
2026-06-28 20:53 - 2026-06-28 20:53 - 000000972 _____ C:\Users\Public\Desktop\iVCam.lnk
2026-06-28 20:53 - 2026-06-28 20:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\e2eSoft iVCam
2026-06-28 20:53 - 2026-06-28 20:53 - 000000000 ____D C:\Program Files\e2eSoft
2026-06-28 20:53 - 2026-06-28 20:53 - 000000000 ____D C:\Program Files\Bonjour
2026-06-28 20:53 - 2026-06-28 20:53 - 000000000 ____D C:\Program Files (x86)\Bonjour
2026-06-28 20:53 - 2022-12-06 01:28 - 001198664 _____ (e2eSoft) C:\Windows\system32\Drivers\iVCam.sys
2026-06-28 20:53 - 2020-11-04 00:13 - 000255464 _____ (e2eSoft) C:\Windows\system32\Drivers\iVCamAud.sys
2026-06-28 20:31 - 2026-06-29 19:35 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\droidcam-obs-client
2026-06-28 20:31 - 2026-06-28 20:31 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DroidCam Client
2026-06-28 20:31 - 2026-06-28 20:31 - 000000000 ____D C:\Program Files\DroidCam
2026-06-28 20:30 - 2026-06-28 20:30 - 103246728 _____ C:\Users\FRPOK\Downloads\DroidCam.Client.7.2.1.exe
2026-06-28 19:21 - 2026-06-28 19:22 - 000000694 _____ C:\Users\FRPOK\Desktop\fve_power.py
2026-06-28 19:20 - 2026-06-28 19:20 - 000000000 ____D C:\Users\FRPOK\AppData\Local\pip
2026-06-28 16:47 - 2026-06-28 16:53 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.13
2026-06-28 16:47 - 2026-06-28 16:47 - 029225624 _____ (Python Software Foundation) C:\Users\FRPOK\Downloads\python-3.13.14-amd64.exe
2026-06-28 16:47 - 2026-06-28 16:47 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Package Cache
2026-06-28 16:19 - 2026-06-29 19:35 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\com.fing.app
2026-06-28 16:18 - 2026-06-28 16:18 - 000003460 _____ C:\Windows\system32\Tasks\npcapwatchdog
2026-06-28 16:18 - 2026-06-28 16:18 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\FingAgent
2026-06-28 16:17 - 2026-06-28 16:18 - 000000000 ____D C:\Program Files\Npcap
2026-06-28 16:17 - 2026-06-28 16:17 - 015320544 _____ C:\Users\FRPOK\Downloads\Fing.exe
2026-06-28 16:17 - 2026-06-28 16:17 - 000000919 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fing.lnk
2026-06-28 16:17 - 2026-06-28 16:17 - 000000000 ____D C:\Windows\SysWOW64\Npcap
2026-06-28 16:17 - 2026-06-28 16:17 - 000000000 ____D C:\Windows\system32\Npcap
2026-06-28 16:17 - 2026-06-28 16:17 - 000000000 ____D C:\ProgramData\Fingagent
2026-06-28 16:17 - 2026-06-28 16:17 - 000000000 ____D C:\Program Files\Fing
2026-06-28 16:07 - 2026-06-28 16:07 - 024397069 _____ C:\Users\FRPOK\Downloads\qModMaster-Win64-exe-0.5.3-beta.zip
2026-06-28 16:07 - 2026-06-28 16:07 - 000000000 ____D C:\Users\FRPOK\Downloads\qModMaster-Win64-exe-0.5.3-beta
2026-06-28 08:18 - 2026-06-28 08:19 - 000013045 _____ C:\Users\FRPOK\Desktop\Výkaz výměr -vymalba - GVM.xlsx
2026-06-27 15:22 - 2026-06-27 15:22 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-06-23 20:11 - 2026-06-23 20:11 - 016164440 _____ C:\Users\FRPOK\Downloads\HILBERT_VŘ - GVM.zip
2026-06-23 20:11 - 2026-06-23 20:11 - 007022988 _____ C:\Users\FRPOK\Downloads\VWR_contract-13739-OFFER-12944-attach.zip
2026-06-20 18:07 - 2026-06-20 18:07 - 000002400 _____ C:\Users\FRPOK\Downloads\FVE Řízení přetoků s chybovou.txt
2026-06-18 17:26 - 2026-06-18 17:26 - 021050672 _____ (Famatech Corp. ) C:\Users\FRPOK\Downloads\Advanced_IP_Scanner_2.5.4594.1.exe
2026-06-18 17:26 - 2026-06-18 17:26 - 021050672 _____ (Famatech Corp. ) C:\Users\FRPOK\Downloads\Advanced_IP_Scanner_2.5.4594.1 (1).exe
2026-06-16 10:38 - 2026-06-16 10:38 - 000071513 _____ C:\Users\FRPOK\Downloads\MKM_MONTAZKA_000045284048_20260616074053_VD000000059010243.pdf
2026-06-16 02:48 - 2026-07-10 15:58 - 000481736 _____ (Microsoft Corporation) C:\Windows\system32\gamingservicesproxy_11.dll.0
2026-06-15 14:38 - 2026-06-15 14:37 - 007153642 _____ C:\Users\FRPOK\Desktop\zpěvník1.pdf
2026-06-14 05:55 - 2026-06-14 05:55 - 000129957 _____ C:\Users\FRPOK\Downloads\jsonall.txt
2026-06-13 20:04 - 2026-06-13 21:42 - 000047386 _____ C:\Users\FRPOK\Downloads\json.txt
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-07-13 23:36 - 2023-01-02 00:26 - 000000000 ____D C:\TEMP
2026-07-13 23:19 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemTemp
2026-07-13 23:09 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-07-13 19:22 - 2023-12-18 19:52 - 000000000 ___HD C:\Users\FRPOK\Downloads\.opera
2026-07-13 19:22 - 2023-10-10 18:52 - 000000000 ___HD C:\Users\FRPOK\.opera
2026-07-13 19:21 - 2022-12-28 13:59 - 001726552 _____ C:\Windows\system32\PerfStringBackup.INI
2026-07-13 19:21 - 2022-05-07 07:22 - 000000000 ____D C:\Windows\INF
2026-07-13 19:18 - 2026-05-10 12:30 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Nextcloud
2026-07-13 19:18 - 2022-12-29 15:55 - 000000000 ____D C:\ProgramData\AnyDesk
2026-07-13 19:18 - 2022-12-29 15:53 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\AnyDesk
2026-07-13 19:17 - 2022-12-28 14:23 - 000000000 __SHD C:\Users\FRPOK\IntelGraphicsProfiles
2026-07-13 19:17 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\AppReadiness
2026-07-13 19:14 - 2022-12-28 14:05 - 000000134 _____ C:\Windows\system32\regtest.txt
2026-07-13 19:14 - 2022-12-28 13:58 - 000000000 ____D C:\Intel
2026-07-13 19:14 - 2022-12-28 13:52 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-07-13 19:13 - 2022-12-30 11:59 - 000001134 _____ C:\Windows\system32\config\VSMIDK
2026-07-13 19:13 - 2022-12-28 13:52 - 000012288 ___SH C:\DumpStack.log.tmp
2026-07-13 19:12 - 2022-05-07 07:17 - 000524288 _____ C:\Windows\system32\config\BBI
2026-07-13 18:27 - 2022-05-07 07:24 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2026-07-13 18:27 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2026-07-13 18:26 - 2022-12-28 13:55 - 000000000 ____D C:\Users\FRPOK
2026-07-13 17:51 - 2023-01-01 14:19 - 000000000 ____D C:\Users\FRPOK\AppData\Local\CrashDumps
2026-07-13 17:46 - 2024-07-29 16:11 - 000000000 ____D C:\ProgramData\Piriform
2026-07-13 17:44 - 2022-05-07 07:24 - 000000000 ___HD C:\Windows\ELAMBKUP
2026-07-13 17:44 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2026-07-12 23:14 - 2024-08-13 15:50 - 000000877 _____ C:\Users\FRPOK\Desktop\JRT.txt
2026-07-12 23:04 - 2022-12-29 09:37 - 000000000 ____D C:\Program Files (x86)\Steam
2026-07-12 21:36 - 2022-12-28 18:34 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Microsoft\Excel
2026-07-12 21:36 - 2022-12-28 13:55 - 000000000 ____D C:\Users\FRPOK\AppData\Local\Packages
2026-07-12 17:31 - 2022-12-29 14:13 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\XnView
2026-07-12 14:39 - 2022-12-28 13:55 - 000000000 ____D C:\Users\FRPOK\AppData\Local\D3DSCache
2026-07-12 14:26 - 2023-01-05 11:03 - 000000000 ____D C:\Users\FRPOK\Documents\Soubory aplikace Outlook
2026-07-12 13:51 - 2024-11-04 11:23 - 000000000 ____D C:\ProgramData\boost_interprocess
2026-07-12 13:33 - 2022-12-28 13:55 - 000000000 ____D C:\ProgramData\Packages
2026-07-12 09:49 - 2024-11-04 11:23 - 000000000 ____D C:\Program Files\Autodesk
2026-07-12 08:59 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\LiveKernelReports
2026-07-12 08:43 - 2024-07-29 12:16 - 000000000 ____D C:\ProgramData\Wondershare
2026-07-12 08:42 - 2023-01-01 11:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
2026-07-12 08:31 - 2022-12-28 13:52 - 000000000 ____D C:\Windows\system32\SleepStudy
2026-07-12 08:30 - 2026-02-24 12:10 - 000000000 ____D C:\ProgramData\Avast Software
2026-07-11 21:13 - 2022-12-30 23:18 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\vlc
2026-07-11 19:36 - 2023-01-15 16:59 - 000000000 ____D C:\Program Files (x86)\Intel
2026-07-11 19:34 - 2024-06-22 14:03 - 000000000 ____D C:\Program Files\MiniTool ShadowMaker
2026-07-11 19:34 - 2024-06-22 14:03 - 000000000 ____D C:\Program Files\MiniTool Partition Wizard 12
2026-07-11 19:27 - 2026-05-10 12:30 - 000001961 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nextcloud.lnk
2026-07-11 19:27 - 2026-05-10 12:30 - 000001949 _____ C:\Users\Public\Desktop\Nextcloud.lnk
2026-07-11 19:27 - 2026-05-10 12:30 - 000000000 ____D C:\Program Files\Nextcloud
2026-07-11 19:27 - 2024-06-22 14:04 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\QtProject
2026-07-11 07:54 - 2022-12-28 13:52 - 000002473 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-07-10 15:58 - 2022-12-30 14:13 - 004561352 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll
2026-07-10 15:58 - 2022-12-30 14:13 - 001182152 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll
2026-07-10 15:58 - 2022-12-30 14:13 - 000338376 _____ (Microsoft Corporation) C:\Windows\system32\gamelaunchhelper.dll
2026-07-10 15:58 - 2022-12-30 14:13 - 000268744 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll
2026-07-10 15:58 - 2022-12-30 14:13 - 000166344 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll
2026-07-10 15:58 - 2022-12-30 14:13 - 000158152 _____ (Microsoft Corporation) C:\Windows\system32\xgamehelper.exe
2026-07-10 15:58 - 2022-12-30 14:13 - 000084424 _____ (Microsoft Corporation) C:\Windows\system32\xgamecontrol.exe
2026-07-09 01:00 - 2023-05-25 07:32 - 000002284 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-07-08 15:05 - 2022-12-28 13:52 - 000000000 ____D C:\Windows\system32\Drivers\wd
2026-06-29 20:00 - 2025-12-13 16:58 - 000000000 ____D C:\Users\FRPOK\Desktop\chemie
2026-06-29 19:48 - 2023-01-02 14:49 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Microsoft\Word
2026-06-28 16:19 - 2022-12-28 13:55 - 000000000 ___SD C:\Users\FRPOK\AppData\Roaming\Microsoft\Credentials
2026-06-27 19:05 - 2022-12-29 21:09 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2026-06-27 17:28 - 2023-01-15 17:04 - 000000000 ____D C:\Program Files\Intel
2026-06-27 15:35 - 2023-01-11 19:17 - 000002098 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2026-06-27 15:35 - 2022-12-29 21:13 - 000002183 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-06-27 15:24 - 2025-12-08 13:34 - 000000000 ____D C:\Windows\system32\Tasks\GoogleUserPEH
2026-06-27 15:22 - 2022-12-28 18:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office
2026-06-27 15:22 - 2022-12-28 18:28 - 000000000 ____D C:\Program Files\Microsoft Office
2026-06-27 15:20 - 2022-12-29 15:55 - 000000000 ____D C:\Program Files (x86)\AnyDesk
2026-06-27 03:09 - 2023-09-11 21:17 - 000000000 ____D C:\Windows\system32\Tasks\HP
2026-06-27 03:09 - 2023-08-09 11:22 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-06-26 19:18 - 2024-12-26 13:20 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\BambuStudio
2026-06-20 02:47 - 2022-12-28 13:52 - 000003640 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-20 02:47 - 2022-12-28 13:52 - 000003514 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-06-15 19:20 - 2022-12-31 19:10 - 000000000 ____D C:\Users\FRPOK\AppData\Roaming\Kodi
==================== Files in the root of some directories ========
2023-08-21 17:14 - 2024-06-22 18:10 - 000000128 _____ () C:\Users\FRPOK\AppData\Local\PUTTY.RND
2026-02-25 21:52 - 2026-02-25 21:52 - 000000001 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.1.20.agreement
2026-04-12 15:10 - 2026-04-12 15:10 - 000000009 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.opendialog.dir
2026-04-12 15:10 - 2026-04-12 15:10 - 000000001 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.opendialog.filterindex
2026-02-25 21:54 - 2026-03-04 21:26 - 000000009 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.savedialog.dir
2026-02-25 21:54 - 2026-03-04 21:26 - 000000001 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.savedialog.filterindex
2026-04-12 15:10 - 2026-04-12 15:10 - 000000036 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.sourcedisk.filepath
2026-02-25 21:53 - 2026-04-12 15:10 - 000000001 _____ () C:\Users\FRPOK\AppData\Local\RawCopy.sourcedisk.index
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
testsigning: ==> 'testsigning' is set. Check for possible unsigned driver <==== ATTENTION
==================== End of FRST.txt ========================
-
czTANIScz
- Level 1

- Příspěvky: 50
- Registrován: 01 dub 2022 15:55
Re: Prosím o kontrolu - IntelNUC se seká
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-07-2026 01
Ran by FRPOK (13-07-2026 23:48:02)
Running from C:\Users\FRPOK\Desktop
Microsoft Windows 11 Pro Version 22H2 22621.4317 (X64) (2022-12-28 11:54:59)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-1460461504-3284535065-2975757879-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-1460461504-3284535065-2975757879-503 - Limited - Disabled)
FRPOK (S-1-5-21-1460461504-3284535065-2975757879-1000 - Administrators - Enabled) => C:\Users\FRPOK
Guest (S-1-5-21-1460461504-3284535065-2975757879-501 - Limited - Disabled)
sdileni (S-1-5-21-1460461504-3284535065-2975757879-1002 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-1460461504-3284535065-2975757879-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Disabled - Out of date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
4DDiG Partition Manager 3.0.2.2 (HKLM\...\{4DDiG Partition Manager}_is1) (Version: 3.0.2.2 - Tenorshare, Inc.)
AccessData FTK Imager (HKLM-x32\...\{0ADC8340-4A94-4CE3-A721-B558F365F8D0}) (Version: 3.1.2.0 - AccessData)
ADB AppControl verze 1.8.3 (HKLM-x32\...\{64A8B963-4FB2-49B5-B2B1-35A333497319}_is1) (Version: 1.8.3 - Cyber.Cat)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 26.001.21691 - Adobe)
Adobe Dreamweaver 2021 (HKLM-x32\...\DRWV_21_2) (Version: 21.2 - Adobe Inc.)
Adobe Illustrator 2024 (HKLM-x32\...\ILST_28_5) (Version: 28.5 - Adobe Inc.)
Adobe Photoshop 2023 (HKLM-x32\...\PHSP_24_0) (Version: 24.0.0.59 - Adobe Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AllDup (HKLM-x32\...\AllDup_is1) (Version: 4.5.72 - MTSD)
Angry IP Scanner (HKLM-x32\...\Angry IP Scanner) (Version: 3.9.1 - Angry IP Scanner)
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 9.0.14 - AnyDesk Software GmbH)
AnyRecover 6.4.5.5 (HKLM-x32\...\{89DFCC5A-39CC-4AE7-8313-1ED6553E1ADD}_is1) (Version: 6.4.5.5 - Shenzhen AnyRecover Technology Co., Ltd.)
Apple Mobile Device Support (HKLM\...\{527DD209-8A66-482F-8779-C7B3BACCA8F1}) (Version: 15.0.0.16 - Apple Inc.)
Arduino IDE 2.2.1 (HKLM\...\459fc68c-eb53-59f8-8957-9913bc627af3) (Version: 2.2.1 - Arduino SA)
AutoCAD Open in Desktop (HKLM\...\{1C66A0B0-784E-4777-97B3-93F843D1C8CF}) (Version: 1.0.20.0 - Autodesk)
Autodesk Access (HKLM\...\{A3158B3E-5F28-358A-BF1A-9532D8EBC811}) (Version: 2.21.0.559 - Autodesk, Inc.)
Autodesk App Manager (HKLM-x32\...\{9C2E49CB-F671-47EC-8093-CC1A8749A92A}) (Version: 3.2.1 - Autodesk)
Autodesk AutoCAD 2022 - English (HKLM\...\{1E7D4EF7-A28E-3D3E-BA3C-C6FAE4AAB2E0}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk AutoCAD 2022 Language Pack – Čeština (Czech) (HKLM\...\{B914E66E-BDF2-3DB2-ADDC-782AC4A48F1F}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk CER (HKLM\...\{11D68ADA-767C-43E0-9716-C2E1ECD08AA2}) (Version: 7.2.4.927 - Autodesk Inc.) Hidden
Autodesk Genuine Service (HKLM\...\{4E5E212E-F881-4C74-9F1B-5B1ADCB4BB7B}) (Version: 7.6.1.4 - Autodesk)
Autodesk Genuine Service (HKLM-x32\...\{317D67F2-9027-4E85-9ED1-ADF4D765AE02}) (Version: 3.0.11 - Autodesk)
Autodesk Identity Manager (HKLM\...\Autodesk Identity Manager) (Version: 1.12.0.7 - Autodesk)
Autodesk Material Library 2022 (HKLM-x32\...\{A9221A68-5AD0-4215-B54F-CB5DBA4FB27C}) (Version: 20.3.7.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2022 (HKLM-x32\...\{6256584F-B04B-41D4-8A59-44E70940C473}) (Version: 20.3.7.0 - Autodesk)
Automesher (HKLM\...\{F769E4A9-5EED-457B-AF50-08F3E68F6695}) (Version: 1.7.6 - Automapki)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
balenaEtcher (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\balena_etcher) (Version: 1.19.21 - Balena Ltd. <hello@balena.io>)
Bambu Studio (HKLM\...\Bambu Studio) (Version: 02.06.00.51 - Bambulab)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CND-SGM5 Gaming Mouse Driver (HKLM-x32\...\{D0E01BE3-1E25-4457-B25A-4D44F352C371}) (Version: - )
CPUID HWMonitor 1.64 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.64 - CPUID, Inc.)
DeleteEmptyFolders 1.3 (HKLM\...\com.extrabit.DeleteEmptyFolders_is1) (Version: 1.3 - ExtraBit Software Ltd.)
Discord (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Discord) (Version: 1.0.9017 - Discord Inc.)
DiskGenius V5.6.0 (HKLM\...\{2661F2FA-56A7-415D-8196-C4CB3D3ACFFE}_is1) (Version: - Eassos Co., Ltd.)
Documentation Manager (HKLM\...\{9CB8A55C-34D9-4AE2-9147-2CABD63DCB37}) (Version: 24.40.0.4 - Intel Corporation) Hidden
DroidCam Audio & Video Drivers (X64) (HKLM\...\DroidCamDrivers) (Version: 7.1.2 - Dev47Apps)
DroidCam Client (HKLM\...\DroidCamOBSClient) (Version: 7.2.1 - Dev47Apps)
Dynamic Application Loader Host Interface Service (HKLM\...\{0E6217C5-C8FC-4745-AAC2-154D672F8EF3}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Fing (HKLM\...\Fing) (Version: 4.0.2 - Fing Ltd)
Folder Size 5.9.0.5 (HKLM-x32\...\{2DFA85ED-588F-4CE3-A175-29E52C3804A8}_is1) (Version: 5.9.0.5 - MindGems)
GoldWave v5.58 (HKLM-x32\...\GoldWave v5.58) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 150.0.7871.102 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
HDD Raw Copy Tool v2.5 (HKLM\...\{F1FC5C64-7E4A-44AD-A0DF-B66E8790148A}_is1) (Version: 2.5 - HDDGURU)
HWiNFO® 64 (HKLM\...\HWiNFO® 64_is1) (Version: 8.46 - Martin Malik, REALiX s.r.o.)
HxD Hex Editor 2.5 (HKLM\...\HxD_is1) (Version: 2.5 - Maël Hörz)
Intel(R) Icls (HKLM\...\{4AFF8BD2-8533-46B3-89CA-2F929B022F70}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) LMS (HKLM\...\{277F237D-10EF-46D5-BE31-25C1ADE3E13F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2105.15.0.2157 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{959E6738-F665-4E07-8D7E-88C449AD2479}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{A9B23394-82C4-4885-92F6-5C21D2AFAF14}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{005DE983-782C-43E6-959E-2DB59D503529}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{531F2CB2-5A78-49E5-A71B-FFF7C7CDC32C}) (Version: 30.100.2020.7 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.2020.7 - Intel Corporation)
Intel® Software Installer (HKLM\...\{55AFCB51-121C-4654-B9A3-6EADAA94CD2B}) (Version: 24.40.0.4 - Intel Corporation) Hidden
Intel® Software Installer (HKLM-x32\...\{acc5d32f-fbf7-4d75-8943-2f70e698123d}) (Version: 23.20.0.4 - Intel Corporation) Hidden
iSkysoft iMedia Converter Deluxe(Build 8.8.0.1) (HKLM-x32\...\iSkysoft iMedia Converter Deluxe_is1) (Version: 8.8.0.1 - iSkysoft Software)
iVCam 7.1 (HKLM\...\iVCam_is1) (Version: 7.1.0 - e2eSoft)
K-Lite Codec Pack 16.0.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 16.0.5 - KLCP)
Kodi (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Kodi) (Version: 19.5.0.0 - XBMC Foundation)
MediaInfo 22.12 (HKLM\...\MediaInfo) (Version: 22.12 - MediaArea.net)
Microsoft .NET Core Host - 3.1.28 (x64) (HKLM\...\{26ECE92F-518E-40AF-9108-7B7B444A46DE}) (Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.28 (x64) (HKLM\...\{CDEA72F4-1367-4E0A-AC5F-0EBAF7C6825A}) (Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.28 (x64) (HKLM\...\{3691148D-EF42-4812-8956-AE11FC413B8D}) (Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.28 (x64) (HKLM-x32\...\{231e3b76-4d0f-4e60-9d69-f11c9c448630}) (Version: 3.1.28.31513 - Microsoft Corporation)
Microsoft .NET Host - 8.0.14 (x64) (HKLM\...\{04904762-A110-4E46-A728-7EF88DCCA1F1}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.14 (x86) (HKLM-x32\...\{CB771E25-82B7-435C-B8CF-1DAF85D9A373}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host - 9.0.13 (x64) (HKLM\...\{B5A26326-5FBC-4B3A-916D-E284E8CF2537}) (Version: 72.52.47121 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.14 (x64) (HKLM\...\{B2E7F2C8-73CD-4269-B7BC-11B7D8BB7A37}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.14 (x86) (HKLM-x32\...\{455AA7CD-6D99-4039-95D2-FF1A437FD444}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 9.0.13 (x64) (HKLM\...\{45D7F314-4193-43EA-A004-52C2F45953EB}) (Version: 72.52.47121 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.14 (x64) (HKLM\...\{6C817CE3-32BC-4C6B-8B1A-E6F71EDAFFCC}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.14 (x64) (HKLM-x32\...\{a6918640-3436-4607-9108-9b6038e680d6}) (Version: 8.0.14.34611 - Microsoft Corporation)
Microsoft .NET Runtime - 8.0.14 (x86) (HKLM-x32\...\{6E39BE88-1272-4732-A962-9B34A31EE12C}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 9.0.13 (x64) (HKLM\...\{F4381ABE-B1E5-45F9-AEA5-4BF1235163C3}) (Version: 72.52.47121 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 3.1.10 - Shared Framework (HKLM-x32\...\{6efe3294-03d8-4977-9c67-9f57ab075130}) (Version: 3.1.10.20520 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.10 Shared Framework (x64) (HKLM\...\{7BEAA207-E3EB-3948-BBB3-336B04D8A2F1}) (Version: 3.1.10.20520 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.14 - Shared Framework (x86) (HKLM-x32\...\{b4843496-41d3-405c-b4c6-2ff39b7609ed}) (Version: 8.0.14.25112 - Microsoft Corporation)
Microsoft ASP.NET Core 8.0.14 Shared Framework (x86) (HKLM-x32\...\{BBD33465-6641-37D3-9444-5CCD7FE71A79}) (Version: 8.0.14.25112 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 150.0.4078.65 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 150.0.4078.65 - Microsoft Corporation) Hidden
Microsoft GameInput (HKLM\...\{14EDF950-06B9-415F-862C-1D5DEC321AE6}) (Version: 3.3.221.0 - Microsoft Corporation)
Microsoft Office LTSC Professional Plus 2021 - cs-cz (HKLM\...\ProPlus2021Volume - cs-cz) (Version: 16.0.14334.20756 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Teams) (Version: 1.4.00.19572 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34433 (HKLM-x32\...\{804e7d66-ccc2-4c12-84ba-476da31d103d}) (Version: 14.42.34433.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31332 (HKLM-x32\...\{a98dc6ff-d360-4878-9f0a-915eba86eaf3}) (Version: 14.32.31332.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34433 (HKLM\...\{E1902FC6-C423-4719-AB8A-AC7B2694B367}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34433 (HKLM\...\{382F1166-A409-4C5B-9B1E-85ED538B8291}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31332 (HKLM-x32\...\{8972AC25-452E-4FFE-945A-EB9E28C20322}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31332 (HKLM-x32\...\{AEAA18F7-9C96-4A43-BC07-8B88A4913EEB}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.14 (x86) (HKLM-x32\...\{F12CDBC1-172E-4413-829C-B5234E386262}) (Version: 64.56.29521 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.14 (x86) (HKLM-x32\...\{f70d61fa-5d61-4582-bf8d-07dec8e4fcda}) (Version: 8.0.14.34613 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 9.0.13 (x64) (HKLM\...\{A58D99B5-9613-4E04-9254-8052BDC85B4B}) (Version: 72.52.47159 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 9.0.13 (x64) (HKLM-x32\...\{6dbc901f-1907-469f-8f4a-e822d33c5877}) (Version: 9.0.13.35715 - Microsoft Corporation)
Nextcloud (HKLM\...\{DF14F8E8-E3A9-43D3-8B4D-AF5FC8B76405}) (Version: 33.0.7.20260629 - Nextcloud GmbH)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.4.8 - Notepad++ Team)
Npcap OEM (HKLM-x32\...\NpcapInst) (Version: 1.83 - Nmap Project)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 29.0.1 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14334.20756 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14334.20756 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Oracle VM VirtualBox 7.0.4 (HKLM\...\{AC025744-F936-446B-A128-AC42F974FCC8}) (Version: 7.0.4 - Oracle and/or its affiliates)
OSFMount (HKLM\...\{E2AF9D8E-F778-4C3F-904B-F4F88873ADDE}_is1) (Version: 3.1.1003.0 - Passmark Software)
PDF24 Creator 11.27.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.27.0 - Geek Software GmbH)
PPJoy Joystick Driver 0.8.4.6 (HKLM-x32\...\PPJoy Joystick Driver) (Version: 0.8.4.6 - Deon van der Westhuysen)
Puran Delete Empty Folders 1.2 (HKLM\...\Puran Delete Empty Folders_is1) (Version: - Puran Software)
Python 3.13.14 (64-bit) (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\{c49e1a3f-d78c-4307-b1e9-fc5e0ebb91a1}) (Version: 3.13.14150.0 - Python Software Foundation)
Python 3.13.14 Core Interpreter (64-bit) (HKLM\...\{1E897E54-A9F8-4146-A531-9B4E7093AC92}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Development Libraries (64-bit) (HKLM\...\{D22E5A19-BCA7-4438-904E-54CEB910C054}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Documentation (64-bit) (HKLM\...\{4F4A15BF-B55E-4A32-A9A7-32E649C2E9BD}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Executables (64-bit) (HKLM\...\{377B613A-310E-45FF-9E16-63876BF37A30}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 pip Bootstrap (64-bit) (HKLM\...\{82676C9E-1943-4D0B-AFB4-EB6C5F5F10C8}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Standard Library (64-bit) (HKLM\...\{FAF06E78-33D1-49DC-BDA8-626BC5C4A408}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Tcl/Tk Support (64-bit) (HKLM\...\{88AE664F-B464-40D0-9DCE-35D367D20EBB}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Test Suite (64-bit) (HKLM\...\{81624098-AE39-415B-A02F-3647169A0A13}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{3122B179-860E-45B2-8AE2-A80B9B0E8D3C}) (Version: 3.13.14150.0 - Python Software Foundation)
Raspberry Pi Imager (HKLM\...\{6D809377-6AF0-444B-8957-A3773F02200E}_is1) (Version: 1.9.6 - Raspberry Pi Ltd)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.22621.21362 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.54 - Piriform)
Remove Empty Directories version 2.2 (HKLM-x32\...\{06F25DC8-71E2-44E2-805A-F15E15B51C74}_is1) (Version: 2.2 - Jonas John)
Riot Client (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Riot Game Riot_Client.) (Version: - Riot Games, Inc)
Roblox Player (HKLM-x32\...\roblox-player-admin) (Version: - Roblox Corporation)
R-Studio 5.2 (HKLM-x32\...\R-Studio 5.2NSIS) (Version: 5.2.130701 - R-Tools Technology Inc.)
Speciální aplikace Autodesk (HKLM-x32\...\{46EA8955-D629-4B3E-AAF0-D136031D7C95}) (Version: 3.2.1 - Autodesk)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Tailscale (HKLM\...\{9B913CA1-1029-5D8B-9FF1-73CBF3A737B6}) (Version: 1.98.2 - Tailscale Inc.)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.19572 - Microsoft Corporation)
TP-Link PLC Utility (HKLM-x32\...\{88BC1EEA-0E0D-4016-B892-5FE92C01845A}) (Version: 2.3.4751.12 - TP-Link) Hidden
TP-Link PLC Utility (HKLM-x32\...\InstallShield_{88BC1EEA-0E0D-4016-B892-5FE92C01845A}) (Version: 2.3.4751.12 - TP-Link)
Trezor Suite 25.11.3 (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\978be57b-9286-5cd7-a60b-54c81352a986) (Version: 25.11.3 - SatoshiLabs)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 130.1.10657 - Ubisoft)
Uložit do služby Autodesk Web and Mobile (HKLM\...\{192B349F-C3F7-4BBE-B49E-00DD4BD28373}) (Version: 3.0.29 - Autodesk) Hidden
UXP WebView Support (HKLM-x32\...\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.23 - VideoLAN)
WinFsp 2025 (HKLM-x32\...\{C79D9B29-3AF0-45B3-9DB9-226F3C2D2204}) (Version: 2.1.25156 - Navimatics LLC)
WinRAR 6.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.00.0 - win.rar GmbH)
WinToUSB verze 3.4 Beta (HKLM\...\WinToUSB_is1) (Version: 3.4 Beta - The EasyUEFI Development Team.)
WireGuard (HKLM\...\{2FDB79CE-5193-4A39-82BB-E00158CC1533}) (Version: 0.5.3 - WireGuard LLC)
Xml Viewer (HKLM-x32\...\{F58E04CD-6E76-43C8-AAF1-482225C2910E}) (Version: 3 - MindFusion Limited)
XnView 2.50 (HKLM-x32\...\XnView_is1) (Version: 2.50 - Gougelet Pierre-e)
Zoom (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\ZoomUMX) (Version: 5.14.0 (13888) - Zoom Video Communications, Inc.)
Chrome apps:
============
Disk Google (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\2e1f774cc4371fbfbff4e7d6f7f056fe) (Version: 1.0 - Google\Chrome)
Dokumenty (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\a868a3838444d73317ef339d1e30ea30) (Version: 1.0 - Google\Chrome)
Gmail (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\af789019a872fc9ae490ed1854e54927) (Version: 1.0 - Google\Chrome)
Prezentace (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\48092105802d4c7c56cdd840ad7ccf63) (Version: 1.0 - Google\Chrome)
Tabulky (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\daad2b3103f02167f39f739a3768b102) (Version: 1.0 - Google\Chrome)
YouTube (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\ff9ade1046cf1cff42fbe6f98b389f25) (Version: 1.0 - Google\Chrome)
Ran by FRPOK (13-07-2026 23:48:02)
Running from C:\Users\FRPOK\Desktop
Microsoft Windows 11 Pro Version 22H2 22621.4317 (X64) (2022-12-28 11:54:59)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-1460461504-3284535065-2975757879-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-1460461504-3284535065-2975757879-503 - Limited - Disabled)
FRPOK (S-1-5-21-1460461504-3284535065-2975757879-1000 - Administrators - Enabled) => C:\Users\FRPOK
Guest (S-1-5-21-1460461504-3284535065-2975757879-501 - Limited - Disabled)
sdileni (S-1-5-21-1460461504-3284535065-2975757879-1002 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-1460461504-3284535065-2975757879-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Disabled - Out of date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
4DDiG Partition Manager 3.0.2.2 (HKLM\...\{4DDiG Partition Manager}_is1) (Version: 3.0.2.2 - Tenorshare, Inc.)
AccessData FTK Imager (HKLM-x32\...\{0ADC8340-4A94-4CE3-A721-B558F365F8D0}) (Version: 3.1.2.0 - AccessData)
ADB AppControl verze 1.8.3 (HKLM-x32\...\{64A8B963-4FB2-49B5-B2B1-35A333497319}_is1) (Version: 1.8.3 - Cyber.Cat)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 26.001.21691 - Adobe)
Adobe Dreamweaver 2021 (HKLM-x32\...\DRWV_21_2) (Version: 21.2 - Adobe Inc.)
Adobe Illustrator 2024 (HKLM-x32\...\ILST_28_5) (Version: 28.5 - Adobe Inc.)
Adobe Photoshop 2023 (HKLM-x32\...\PHSP_24_0) (Version: 24.0.0.59 - Adobe Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AllDup (HKLM-x32\...\AllDup_is1) (Version: 4.5.72 - MTSD)
Angry IP Scanner (HKLM-x32\...\Angry IP Scanner) (Version: 3.9.1 - Angry IP Scanner)
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 9.0.14 - AnyDesk Software GmbH)
AnyRecover 6.4.5.5 (HKLM-x32\...\{89DFCC5A-39CC-4AE7-8313-1ED6553E1ADD}_is1) (Version: 6.4.5.5 - Shenzhen AnyRecover Technology Co., Ltd.)
Apple Mobile Device Support (HKLM\...\{527DD209-8A66-482F-8779-C7B3BACCA8F1}) (Version: 15.0.0.16 - Apple Inc.)
Arduino IDE 2.2.1 (HKLM\...\459fc68c-eb53-59f8-8957-9913bc627af3) (Version: 2.2.1 - Arduino SA)
AutoCAD Open in Desktop (HKLM\...\{1C66A0B0-784E-4777-97B3-93F843D1C8CF}) (Version: 1.0.20.0 - Autodesk)
Autodesk Access (HKLM\...\{A3158B3E-5F28-358A-BF1A-9532D8EBC811}) (Version: 2.21.0.559 - Autodesk, Inc.)
Autodesk App Manager (HKLM-x32\...\{9C2E49CB-F671-47EC-8093-CC1A8749A92A}) (Version: 3.2.1 - Autodesk)
Autodesk AutoCAD 2022 - English (HKLM\...\{1E7D4EF7-A28E-3D3E-BA3C-C6FAE4AAB2E0}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk AutoCAD 2022 Language Pack – Čeština (Czech) (HKLM\...\{B914E66E-BDF2-3DB2-ADDC-782AC4A48F1F}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk CER (HKLM\...\{11D68ADA-767C-43E0-9716-C2E1ECD08AA2}) (Version: 7.2.4.927 - Autodesk Inc.) Hidden
Autodesk Genuine Service (HKLM\...\{4E5E212E-F881-4C74-9F1B-5B1ADCB4BB7B}) (Version: 7.6.1.4 - Autodesk)
Autodesk Genuine Service (HKLM-x32\...\{317D67F2-9027-4E85-9ED1-ADF4D765AE02}) (Version: 3.0.11 - Autodesk)
Autodesk Identity Manager (HKLM\...\Autodesk Identity Manager) (Version: 1.12.0.7 - Autodesk)
Autodesk Material Library 2022 (HKLM-x32\...\{A9221A68-5AD0-4215-B54F-CB5DBA4FB27C}) (Version: 20.3.7.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2022 (HKLM-x32\...\{6256584F-B04B-41D4-8A59-44E70940C473}) (Version: 20.3.7.0 - Autodesk)
Automesher (HKLM\...\{F769E4A9-5EED-457B-AF50-08F3E68F6695}) (Version: 1.7.6 - Automapki)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
balenaEtcher (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\balena_etcher) (Version: 1.19.21 - Balena Ltd. <hello@balena.io>)
Bambu Studio (HKLM\...\Bambu Studio) (Version: 02.06.00.51 - Bambulab)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CND-SGM5 Gaming Mouse Driver (HKLM-x32\...\{D0E01BE3-1E25-4457-B25A-4D44F352C371}) (Version: - )
CPUID HWMonitor 1.64 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.64 - CPUID, Inc.)
DeleteEmptyFolders 1.3 (HKLM\...\com.extrabit.DeleteEmptyFolders_is1) (Version: 1.3 - ExtraBit Software Ltd.)
Discord (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Discord) (Version: 1.0.9017 - Discord Inc.)
DiskGenius V5.6.0 (HKLM\...\{2661F2FA-56A7-415D-8196-C4CB3D3ACFFE}_is1) (Version: - Eassos Co., Ltd.)
Documentation Manager (HKLM\...\{9CB8A55C-34D9-4AE2-9147-2CABD63DCB37}) (Version: 24.40.0.4 - Intel Corporation) Hidden
DroidCam Audio & Video Drivers (X64) (HKLM\...\DroidCamDrivers) (Version: 7.1.2 - Dev47Apps)
DroidCam Client (HKLM\...\DroidCamOBSClient) (Version: 7.2.1 - Dev47Apps)
Dynamic Application Loader Host Interface Service (HKLM\...\{0E6217C5-C8FC-4745-AAC2-154D672F8EF3}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Fing (HKLM\...\Fing) (Version: 4.0.2 - Fing Ltd)
Folder Size 5.9.0.5 (HKLM-x32\...\{2DFA85ED-588F-4CE3-A175-29E52C3804A8}_is1) (Version: 5.9.0.5 - MindGems)
GoldWave v5.58 (HKLM-x32\...\GoldWave v5.58) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 150.0.7871.102 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
HDD Raw Copy Tool v2.5 (HKLM\...\{F1FC5C64-7E4A-44AD-A0DF-B66E8790148A}_is1) (Version: 2.5 - HDDGURU)
HWiNFO® 64 (HKLM\...\HWiNFO® 64_is1) (Version: 8.46 - Martin Malik, REALiX s.r.o.)
HxD Hex Editor 2.5 (HKLM\...\HxD_is1) (Version: 2.5 - Maël Hörz)
Intel(R) Icls (HKLM\...\{4AFF8BD2-8533-46B3-89CA-2F929B022F70}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) LMS (HKLM\...\{277F237D-10EF-46D5-BE31-25C1ADE3E13F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2105.15.0.2157 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{959E6738-F665-4E07-8D7E-88C449AD2479}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{A9B23394-82C4-4885-92F6-5C21D2AFAF14}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{005DE983-782C-43E6-959E-2DB59D503529}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{531F2CB2-5A78-49E5-A71B-FFF7C7CDC32C}) (Version: 30.100.2020.7 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.2020.7 - Intel Corporation)
Intel® Software Installer (HKLM\...\{55AFCB51-121C-4654-B9A3-6EADAA94CD2B}) (Version: 24.40.0.4 - Intel Corporation) Hidden
Intel® Software Installer (HKLM-x32\...\{acc5d32f-fbf7-4d75-8943-2f70e698123d}) (Version: 23.20.0.4 - Intel Corporation) Hidden
iSkysoft iMedia Converter Deluxe(Build 8.8.0.1) (HKLM-x32\...\iSkysoft iMedia Converter Deluxe_is1) (Version: 8.8.0.1 - iSkysoft Software)
iVCam 7.1 (HKLM\...\iVCam_is1) (Version: 7.1.0 - e2eSoft)
K-Lite Codec Pack 16.0.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 16.0.5 - KLCP)
Kodi (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Kodi) (Version: 19.5.0.0 - XBMC Foundation)
MediaInfo 22.12 (HKLM\...\MediaInfo) (Version: 22.12 - MediaArea.net)
Microsoft .NET Core Host - 3.1.28 (x64) (HKLM\...\{26ECE92F-518E-40AF-9108-7B7B444A46DE}) (Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.28 (x64) (HKLM\...\{CDEA72F4-1367-4E0A-AC5F-0EBAF7C6825A}) (Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.28 (x64) (HKLM\...\{3691148D-EF42-4812-8956-AE11FC413B8D}) (Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.28 (x64) (HKLM-x32\...\{231e3b76-4d0f-4e60-9d69-f11c9c448630}) (Version: 3.1.28.31513 - Microsoft Corporation)
Microsoft .NET Host - 8.0.14 (x64) (HKLM\...\{04904762-A110-4E46-A728-7EF88DCCA1F1}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.14 (x86) (HKLM-x32\...\{CB771E25-82B7-435C-B8CF-1DAF85D9A373}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host - 9.0.13 (x64) (HKLM\...\{B5A26326-5FBC-4B3A-916D-E284E8CF2537}) (Version: 72.52.47121 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.14 (x64) (HKLM\...\{B2E7F2C8-73CD-4269-B7BC-11B7D8BB7A37}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.14 (x86) (HKLM-x32\...\{455AA7CD-6D99-4039-95D2-FF1A437FD444}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 9.0.13 (x64) (HKLM\...\{45D7F314-4193-43EA-A004-52C2F45953EB}) (Version: 72.52.47121 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.14 (x64) (HKLM\...\{6C817CE3-32BC-4C6B-8B1A-E6F71EDAFFCC}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.14 (x64) (HKLM-x32\...\{a6918640-3436-4607-9108-9b6038e680d6}) (Version: 8.0.14.34611 - Microsoft Corporation)
Microsoft .NET Runtime - 8.0.14 (x86) (HKLM-x32\...\{6E39BE88-1272-4732-A962-9B34A31EE12C}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 9.0.13 (x64) (HKLM\...\{F4381ABE-B1E5-45F9-AEA5-4BF1235163C3}) (Version: 72.52.47121 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 3.1.10 - Shared Framework (HKLM-x32\...\{6efe3294-03d8-4977-9c67-9f57ab075130}) (Version: 3.1.10.20520 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.10 Shared Framework (x64) (HKLM\...\{7BEAA207-E3EB-3948-BBB3-336B04D8A2F1}) (Version: 3.1.10.20520 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.14 - Shared Framework (x86) (HKLM-x32\...\{b4843496-41d3-405c-b4c6-2ff39b7609ed}) (Version: 8.0.14.25112 - Microsoft Corporation)
Microsoft ASP.NET Core 8.0.14 Shared Framework (x86) (HKLM-x32\...\{BBD33465-6641-37D3-9444-5CCD7FE71A79}) (Version: 8.0.14.25112 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 150.0.4078.65 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 150.0.4078.65 - Microsoft Corporation) Hidden
Microsoft GameInput (HKLM\...\{14EDF950-06B9-415F-862C-1D5DEC321AE6}) (Version: 3.3.221.0 - Microsoft Corporation)
Microsoft Office LTSC Professional Plus 2021 - cs-cz (HKLM\...\ProPlus2021Volume - cs-cz) (Version: 16.0.14334.20756 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Teams) (Version: 1.4.00.19572 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34433 (HKLM-x32\...\{804e7d66-ccc2-4c12-84ba-476da31d103d}) (Version: 14.42.34433.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31332 (HKLM-x32\...\{a98dc6ff-d360-4878-9f0a-915eba86eaf3}) (Version: 14.32.31332.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34433 (HKLM\...\{E1902FC6-C423-4719-AB8A-AC7B2694B367}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34433 (HKLM\...\{382F1166-A409-4C5B-9B1E-85ED538B8291}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31332 (HKLM-x32\...\{8972AC25-452E-4FFE-945A-EB9E28C20322}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31332 (HKLM-x32\...\{AEAA18F7-9C96-4A43-BC07-8B88A4913EEB}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.14 (x86) (HKLM-x32\...\{F12CDBC1-172E-4413-829C-B5234E386262}) (Version: 64.56.29521 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.14 (x86) (HKLM-x32\...\{f70d61fa-5d61-4582-bf8d-07dec8e4fcda}) (Version: 8.0.14.34613 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 9.0.13 (x64) (HKLM\...\{A58D99B5-9613-4E04-9254-8052BDC85B4B}) (Version: 72.52.47159 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 9.0.13 (x64) (HKLM-x32\...\{6dbc901f-1907-469f-8f4a-e822d33c5877}) (Version: 9.0.13.35715 - Microsoft Corporation)
Nextcloud (HKLM\...\{DF14F8E8-E3A9-43D3-8B4D-AF5FC8B76405}) (Version: 33.0.7.20260629 - Nextcloud GmbH)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.4.8 - Notepad++ Team)
Npcap OEM (HKLM-x32\...\NpcapInst) (Version: 1.83 - Nmap Project)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 29.0.1 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14334.20756 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14334.20756 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Oracle VM VirtualBox 7.0.4 (HKLM\...\{AC025744-F936-446B-A128-AC42F974FCC8}) (Version: 7.0.4 - Oracle and/or its affiliates)
OSFMount (HKLM\...\{E2AF9D8E-F778-4C3F-904B-F4F88873ADDE}_is1) (Version: 3.1.1003.0 - Passmark Software)
PDF24 Creator 11.27.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.27.0 - Geek Software GmbH)
PPJoy Joystick Driver 0.8.4.6 (HKLM-x32\...\PPJoy Joystick Driver) (Version: 0.8.4.6 - Deon van der Westhuysen)
Puran Delete Empty Folders 1.2 (HKLM\...\Puran Delete Empty Folders_is1) (Version: - Puran Software)
Python 3.13.14 (64-bit) (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\{c49e1a3f-d78c-4307-b1e9-fc5e0ebb91a1}) (Version: 3.13.14150.0 - Python Software Foundation)
Python 3.13.14 Core Interpreter (64-bit) (HKLM\...\{1E897E54-A9F8-4146-A531-9B4E7093AC92}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Development Libraries (64-bit) (HKLM\...\{D22E5A19-BCA7-4438-904E-54CEB910C054}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Documentation (64-bit) (HKLM\...\{4F4A15BF-B55E-4A32-A9A7-32E649C2E9BD}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Executables (64-bit) (HKLM\...\{377B613A-310E-45FF-9E16-63876BF37A30}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 pip Bootstrap (64-bit) (HKLM\...\{82676C9E-1943-4D0B-AFB4-EB6C5F5F10C8}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Standard Library (64-bit) (HKLM\...\{FAF06E78-33D1-49DC-BDA8-626BC5C4A408}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Tcl/Tk Support (64-bit) (HKLM\...\{88AE664F-B464-40D0-9DCE-35D367D20EBB}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Test Suite (64-bit) (HKLM\...\{81624098-AE39-415B-A02F-3647169A0A13}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{3122B179-860E-45B2-8AE2-A80B9B0E8D3C}) (Version: 3.13.14150.0 - Python Software Foundation)
Raspberry Pi Imager (HKLM\...\{6D809377-6AF0-444B-8957-A3773F02200E}_is1) (Version: 1.9.6 - Raspberry Pi Ltd)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.22621.21362 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.54 - Piriform)
Remove Empty Directories version 2.2 (HKLM-x32\...\{06F25DC8-71E2-44E2-805A-F15E15B51C74}_is1) (Version: 2.2 - Jonas John)
Riot Client (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Riot Game Riot_Client.) (Version: - Riot Games, Inc)
Roblox Player (HKLM-x32\...\roblox-player-admin) (Version: - Roblox Corporation)
R-Studio 5.2 (HKLM-x32\...\R-Studio 5.2NSIS) (Version: 5.2.130701 - R-Tools Technology Inc.)
Speciální aplikace Autodesk (HKLM-x32\...\{46EA8955-D629-4B3E-AAF0-D136031D7C95}) (Version: 3.2.1 - Autodesk)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Tailscale (HKLM\...\{9B913CA1-1029-5D8B-9FF1-73CBF3A737B6}) (Version: 1.98.2 - Tailscale Inc.)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.19572 - Microsoft Corporation)
TP-Link PLC Utility (HKLM-x32\...\{88BC1EEA-0E0D-4016-B892-5FE92C01845A}) (Version: 2.3.4751.12 - TP-Link) Hidden
TP-Link PLC Utility (HKLM-x32\...\InstallShield_{88BC1EEA-0E0D-4016-B892-5FE92C01845A}) (Version: 2.3.4751.12 - TP-Link)
Trezor Suite 25.11.3 (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\978be57b-9286-5cd7-a60b-54c81352a986) (Version: 25.11.3 - SatoshiLabs)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 130.1.10657 - Ubisoft)
Uložit do služby Autodesk Web and Mobile (HKLM\...\{192B349F-C3F7-4BBE-B49E-00DD4BD28373}) (Version: 3.0.29 - Autodesk) Hidden
UXP WebView Support (HKLM-x32\...\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.23 - VideoLAN)
WinFsp 2025 (HKLM-x32\...\{C79D9B29-3AF0-45B3-9DB9-226F3C2D2204}) (Version: 2.1.25156 - Navimatics LLC)
WinRAR 6.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.00.0 - win.rar GmbH)
WinToUSB verze 3.4 Beta (HKLM\...\WinToUSB_is1) (Version: 3.4 Beta - The EasyUEFI Development Team.)
WireGuard (HKLM\...\{2FDB79CE-5193-4A39-82BB-E00158CC1533}) (Version: 0.5.3 - WireGuard LLC)
Xml Viewer (HKLM-x32\...\{F58E04CD-6E76-43C8-AAF1-482225C2910E}) (Version: 3 - MindFusion Limited)
XnView 2.50 (HKLM-x32\...\XnView_is1) (Version: 2.50 - Gougelet Pierre-e)
Zoom (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\ZoomUMX) (Version: 5.14.0 (13888) - Zoom Video Communications, Inc.)
Chrome apps:
============
Disk Google (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\2e1f774cc4371fbfbff4e7d6f7f056fe) (Version: 1.0 - Google\Chrome)
Dokumenty (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\a868a3838444d73317ef339d1e30ea30) (Version: 1.0 - Google\Chrome)
Gmail (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\af789019a872fc9ae490ed1854e54927) (Version: 1.0 - Google\Chrome)
Prezentace (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\48092105802d4c7c56cdd840ad7ccf63) (Version: 1.0 - Google\Chrome)
Tabulky (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\daad2b3103f02167f39f739a3768b102) (Version: 1.0 - Google\Chrome)
YouTube (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\ff9ade1046cf1cff42fbe6f98b389f25) (Version: 1.0 - Google\Chrome)
-
czTANIScz
- Level 1

- Příspěvky: 50
- Registrován: 01 dub 2022 15:55
Re: Prosím o kontrolu - IntelNUC se seká
Napětí CPU voltage:
běhá v rozmezí 0,6 - 1,2 V v závyslosti na frekvenci 1000 - 3600 MHz
běhá v rozmezí 0,6 - 1,2 V v závyslosti na frekvenci 1000 - 3600 MHz
-
jaro3
- člen Security týmu
- Příspěvky: 43528
- Registrován: 16 čer 2007 18:58
- Bydliště: Jižní Čechy
Re: Prosím o kontrolu - IntelNUC se seká
Log z Additional scan result of Farbar Recovery Scan Tool není celý, doplň.
To napětí CPU je skutečně v rozmezí 0,6 - 1,2 V ? To je hodně. Nemáš náhradní zdroj stejných parametrů? Nebo od kamaráda?
To napětí CPU je skutečně v rozmezí 0,6 - 1,2 V ? To je hodně. Nemáš náhradní zdroj stejných parametrů? Nebo od kamaráda?
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
-
czTANIScz
- Level 1

- Příspěvky: 50
- Registrován: 01 dub 2022 15:55
Re: Prosím o kontrolu - IntelNUC se seká
Je to malý intelNUC. Zdroj je malý adaptérek 19V 90W připojuje se do NUCka jackem 5,5mm.
-
czTANIScz
- Level 1

- Příspěvky: 50
- Registrován: 01 dub 2022 15:55
Re: Prosím o kontrolu - IntelNUC se seká
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-07-2026 01
Ran by FRPOK (13-07-2026 23:48:02)
Running from C:\Users\FRPOK\Desktop
Microsoft Windows 11 Pro Version 22H2 22621.4317 (X64) (2022-12-28 11:54:59)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-1460461504-3284535065-2975757879-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-1460461504-3284535065-2975757879-503 - Limited - Disabled)
FRPOK (S-1-5-21-1460461504-3284535065-2975757879-1000 - Administrators - Enabled) => C:\Users\FRPOK
Guest (S-1-5-21-1460461504-3284535065-2975757879-501 - Limited - Disabled)
sdileni (S-1-5-21-1460461504-3284535065-2975757879-1002 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-1460461504-3284535065-2975757879-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Disabled - Out of date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
4DDiG Partition Manager 3.0.2.2 (HKLM\...\{4DDiG Partition Manager}_is1) (Version: 3.0.2.2 - Tenorshare, Inc.)
AccessData FTK Imager (HKLM-x32\...\{0ADC8340-4A94-4CE3-A721-B558F365F8D0}) (Version: 3.1.2.0 - AccessData)
ADB AppControl verze 1.8.3 (HKLM-x32\...\{64A8B963-4FB2-49B5-B2B1-35A333497319}_is1) (Version: 1.8.3 - Cyber.Cat)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 26.001.21691 - Adobe)
Adobe Dreamweaver 2021 (HKLM-x32\...\DRWV_21_2) (Version: 21.2 - Adobe Inc.)
Adobe Illustrator 2024 (HKLM-x32\...\ILST_28_5) (Version: 28.5 - Adobe Inc.)
Adobe Photoshop 2023 (HKLM-x32\...\PHSP_24_0) (Version: 24.0.0.59 - Adobe Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AllDup (HKLM-x32\...\AllDup_is1) (Version: 4.5.72 - MTSD)
Angry IP Scanner (HKLM-x32\...\Angry IP Scanner) (Version: 3.9.1 - Angry IP Scanner)
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 9.0.14 - AnyDesk Software GmbH)
AnyRecover 6.4.5.5 (HKLM-x32\...\{89DFCC5A-39CC-4AE7-8313-1ED6553E1ADD}_is1) (Version: 6.4.5.5 - Shenzhen AnyRecover Technology Co., Ltd.)
Apple Mobile Device Support (HKLM\...\{527DD209-8A66-482F-8779-C7B3BACCA8F1}) (Version: 15.0.0.16 - Apple Inc.)
Arduino IDE 2.2.1 (HKLM\...\459fc68c-eb53-59f8-8957-9913bc627af3) (Version: 2.2.1 - Arduino SA)
AutoCAD Open in Desktop (HKLM\...\{1C66A0B0-784E-4777-97B3-93F843D1C8CF}) (Version: 1.0.20.0 - Autodesk)
Autodesk Access (HKLM\...\{A3158B3E-5F28-358A-BF1A-9532D8EBC811}) (Version: 2.21.0.559 - Autodesk, Inc.)
Autodesk App Manager (HKLM-x32\...\{9C2E49CB-F671-47EC-8093-CC1A8749A92A}) (Version: 3.2.1 - Autodesk)
Autodesk AutoCAD 2022 - English (HKLM\...\{1E7D4EF7-A28E-3D3E-BA3C-C6FAE4AAB2E0}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk AutoCAD 2022 Language Pack – Čeština (Czech) (HKLM\...\{B914E66E-BDF2-3DB2-ADDC-782AC4A48F1F}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk CER (HKLM\...\{11D68ADA-767C-43E0-9716-C2E1ECD08AA2}) (Version: 7.2.4.927 - Autodesk Inc.) Hidden
Autodesk Genuine Service (HKLM\...\{4E5E212E-F881-4C74-9F1B-5B1ADCB4BB7B}) (Version: 7.6.1.4 - Autodesk)
Autodesk Genuine Service (HKLM-x32\...\{317D67F2-9027-4E85-9ED1-ADF4D765AE02}) (Version: 3.0.11 - Autodesk)
Autodesk Identity Manager (HKLM\...\Autodesk Identity Manager) (Version: 1.12.0.7 - Autodesk)
Autodesk Material Library 2022 (HKLM-x32\...\{A9221A68-5AD0-4215-B54F-CB5DBA4FB27C}) (Version: 20.3.7.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2022 (HKLM-x32\...\{6256584F-B04B-41D4-8A59-44E70940C473}) (Version: 20.3.7.0 - Autodesk)
Automesher (HKLM\...\{F769E4A9-5EED-457B-AF50-08F3E68F6695}) (Version: 1.7.6 - Automapki)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
balenaEtcher (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\balena_etcher) (Version: 1.19.21 - Balena Ltd. <hello@balena.io>)
Bambu Studio (HKLM\...\Bambu Studio) (Version: 02.06.00.51 - Bambulab)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CND-SGM5 Gaming Mouse Driver (HKLM-x32\...\{D0E01BE3-1E25-4457-B25A-4D44F352C371}) (Version: - )
CPUID HWMonitor 1.64 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.64 - CPUID, Inc.)
DeleteEmptyFolders 1.3 (HKLM\...\com.extrabit.DeleteEmptyFolders_is1) (Version: 1.3 - ExtraBit Software Ltd.)
Discord (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Discord) (Version: 1.0.9017 - Discord Inc.)
DiskGenius V5.6.0 (HKLM\...\{2661F2FA-56A7-415D-8196-C4CB3D3ACFFE}_is1) (Version: - Eassos Co., Ltd.)
Documentation Manager (HKLM\...\{9CB8A55C-34D9-4AE2-9147-2CABD63DCB37}) (Version: 24.40.0.4 - Intel Corporation) Hidden
DroidCam Audio & Video Drivers (X64) (HKLM\...\DroidCamDrivers) (Version: 7.1.2 - Dev47Apps)
DroidCam Client (HKLM\...\DroidCamOBSClient) (Version: 7.2.1 - Dev47Apps)
Dynamic Application Loader Host Interface Service (HKLM\...\{0E6217C5-C8FC-4745-AAC2-154D672F8EF3}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Fing (HKLM\...\Fing) (Version: 4.0.2 - Fing Ltd)
Folder Size 5.9.0.5 (HKLM-x32\...\{2DFA85ED-588F-4CE3-A175-29E52C3804A8}_is1) (Version: 5.9.0.5 - MindGems)
GoldWave v5.58 (HKLM-x32\...\GoldWave v5.58) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 150.0.7871.102 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
HDD Raw Copy Tool v2.5 (HKLM\...\{F1FC5C64-7E4A-44AD-A0DF-B66E8790148A}_is1) (Version: 2.5 - HDDGURU)
HWiNFO® 64 (HKLM\...\HWiNFO® 64_is1) (Version: 8.46 - Martin Malik, REALiX s.r.o.)
HxD Hex Editor 2.5 (HKLM\...\HxD_is1) (Version: 2.5 - Maël Hörz)
Intel(R) Icls (HKLM\...\{4AFF8BD2-8533-46B3-89CA-2F929B022F70}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) LMS (HKLM\...\{277F237D-10EF-46D5-BE31-25C1ADE3E13F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2105.15.0.2157 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{959E6738-F665-4E07-8D7E-88C449AD2479}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{A9B23394-82C4-4885-92F6-5C21D2AFAF14}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{005DE983-782C-43E6-959E-2DB59D503529}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{531F2CB2-5A78-49E5-A71B-FFF7C7CDC32C}) (Version: 30.100.2020.7 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.2020.7 - Intel Corporation)
Intel® Software Installer (HKLM\...\{55AFCB51-121C-4654-B9A3-6EADAA94CD2B}) (Version: 24.40.0.4 - Intel Corporation) Hidden
Intel® Software Installer (HKLM-x32\...\{acc5d32f-fbf7-4d75-8943-2f70e698123d}) (Version: 23.20.0.4 - Intel Corporation) Hidden
iSkysoft iMedia Converter Deluxe(Build 8.8.0.1) (HKLM-x32\...\iSkysoft iMedia Converter Deluxe_is1) (Version: 8.8.0.1 - iSkysoft Software)
iVCam 7.1 (HKLM\...\iVCam_is1) (Version: 7.1.0 - e2eSoft)
K-Lite Codec Pack 16.0.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 16.0.5 - KLCP)
Kodi (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Kodi) (Version: 19.5.0.0 - XBMC Foundation)
MediaInfo 22.12 (HKLM\...\MediaInfo) (Version: 22.12 - MediaArea.net)
Microsoft .NET Core Host - 3.1.28 (x64) (HKLM\...\{26ECE92F-518E-40AF-9108-7B7B444A46DE}) (Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.28 (x64) (HKLM\...\{CDEA72F4-1367-4E0A-AC5F-0EBAF7C6825A}) (Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.28 (x64) (HKLM\...\{3691148D-EF42-4812-8956-AE11FC413B8D}) (Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.28 (x64) (HKLM-x32\...\{231e3b76-4d0f-4e60-9d69-f11c9c448630}) (Version: 3.1.28.31513 - Microsoft Corporation)
Microsoft .NET Host - 8.0.14 (x64) (HKLM\...\{04904762-A110-4E46-A728-7EF88DCCA1F1}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.14 (x86) (HKLM-x32\...\{CB771E25-82B7-435C-B8CF-1DAF85D9A373}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host - 9.0.13 (x64) (HKLM\...\{B5A26326-5FBC-4B3A-916D-E284E8CF2537}) (Version: 72.52.47121 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.14 (x64) (HKLM\...\{B2E7F2C8-73CD-4269-B7BC-11B7D8BB7A37}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.14 (x86) (HKLM-x32\...\{455AA7CD-6D99-4039-95D2-FF1A437FD444}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 9.0.13 (x64) (HKLM\...\{45D7F314-4193-43EA-A004-52C2F45953EB}) (Version: 72.52.47121 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.14 (x64) (HKLM\...\{6C817CE3-32BC-4C6B-8B1A-E6F71EDAFFCC}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.14 (x64) (HKLM-x32\...\{a6918640-3436-4607-9108-9b6038e680d6}) (Version: 8.0.14.34611 - Microsoft Corporation)
Microsoft .NET Runtime - 8.0.14 (x86) (HKLM-x32\...\{6E39BE88-1272-4732-A962-9B34A31EE12C}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 9.0.13 (x64) (HKLM\...\{F4381ABE-B1E5-45F9-AEA5-4BF1235163C3}) (Version: 72.52.47121 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 3.1.10 - Shared Framework (HKLM-x32\...\{6efe3294-03d8-4977-9c67-9f57ab075130}) (Version: 3.1.10.20520 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.10 Shared Framework (x64) (HKLM\...\{7BEAA207-E3EB-3948-BBB3-336B04D8A2F1}) (Version: 3.1.10.20520 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.14 - Shared Framework (x86) (HKLM-x32\...\{b4843496-41d3-405c-b4c6-2ff39b7609ed}) (Version: 8.0.14.25112 - Microsoft Corporation)
Microsoft ASP.NET Core 8.0.14 Shared Framework (x86) (HKLM-x32\...\{BBD33465-6641-37D3-9444-5CCD7FE71A79}) (Version: 8.0.14.25112 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 150.0.4078.65 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 150.0.4078.65 - Microsoft Corporation) Hidden
Microsoft GameInput (HKLM\...\{14EDF950-06B9-415F-862C-1D5DEC321AE6}) (Version: 3.3.221.0 - Microsoft Corporation)
Microsoft Office LTSC Professional Plus 2021 - cs-cz (HKLM\...\ProPlus2021Volume - cs-cz) (Version: 16.0.14334.20756 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Teams) (Version: 1.4.00.19572 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34433 (HKLM-x32\...\{804e7d66-ccc2-4c12-84ba-476da31d103d}) (Version: 14.42.34433.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31332 (HKLM-x32\...\{a98dc6ff-d360-4878-9f0a-915eba86eaf3}) (Version: 14.32.31332.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34433 (HKLM\...\{E1902FC6-C423-4719-AB8A-AC7B2694B367}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34433 (HKLM\...\{382F1166-A409-4C5B-9B1E-85ED538B8291}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31332 (HKLM-x32\...\{8972AC25-452E-4FFE-945A-EB9E28C20322}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31332 (HKLM-x32\...\{AEAA18F7-9C96-4A43-BC07-8B88A4913EEB}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.14 (x86) (HKLM-x32\...\{F12CDBC1-172E-4413-829C-B5234E386262}) (Version: 64.56.29521 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.14 (x86) (HKLM-x32\...\{f70d61fa-5d61-4582-bf8d-07dec8e4fcda}) (Version: 8.0.14.34613 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 9.0.13 (x64) (HKLM\...\{A58D99B5-9613-4E04-9254-8052BDC85B4B}) (Version: 72.52.47159 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 9.0.13 (x64) (HKLM-x32\...\{6dbc901f-1907-469f-8f4a-e822d33c5877}) (Version: 9.0.13.35715 - Microsoft Corporation)
Nextcloud (HKLM\...\{DF14F8E8-E3A9-43D3-8B4D-AF5FC8B76405}) (Version: 33.0.7.20260629 - Nextcloud GmbH)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.4.8 - Notepad++ Team)
Npcap OEM (HKLM-x32\...\NpcapInst) (Version: 1.83 - Nmap Project)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 29.0.1 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14334.20756 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14334.20756 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Oracle VM VirtualBox 7.0.4 (HKLM\...\{AC025744-F936-446B-A128-AC42F974FCC8}) (Version: 7.0.4 - Oracle and/or its affiliates)
OSFMount (HKLM\...\{E2AF9D8E-F778-4C3F-904B-F4F88873ADDE}_is1) (Version: 3.1.1003.0 - Passmark Software)
PDF24 Creator 11.27.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.27.0 - Geek Software GmbH)
PPJoy Joystick Driver 0.8.4.6 (HKLM-x32\...\PPJoy Joystick Driver) (Version: 0.8.4.6 - Deon van der Westhuysen)
Puran Delete Empty Folders 1.2 (HKLM\...\Puran Delete Empty Folders_is1) (Version: - Puran Software)
Python 3.13.14 (64-bit) (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\{c49e1a3f-d78c-4307-b1e9-fc5e0ebb91a1}) (Version: 3.13.14150.0 - Python Software Foundation)
Python 3.13.14 Core Interpreter (64-bit) (HKLM\...\{1E897E54-A9F8-4146-A531-9B4E7093AC92}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Development Libraries (64-bit) (HKLM\...\{D22E5A19-BCA7-4438-904E-54CEB910C054}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Documentation (64-bit) (HKLM\...\{4F4A15BF-B55E-4A32-A9A7-32E649C2E9BD}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Executables (64-bit) (HKLM\...\{377B613A-310E-45FF-9E16-63876BF37A30}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 pip Bootstrap (64-bit) (HKLM\...\{82676C9E-1943-4D0B-AFB4-EB6C5F5F10C8}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Standard Library (64-bit) (HKLM\...\{FAF06E78-33D1-49DC-BDA8-626BC5C4A408}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Tcl/Tk Support (64-bit) (HKLM\...\{88AE664F-B464-40D0-9DCE-35D367D20EBB}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Test Suite (64-bit) (HKLM\...\{81624098-AE39-415B-A02F-3647169A0A13}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{3122B179-860E-45B2-8AE2-A80B9B0E8D3C}) (Version: 3.13.14150.0 - Python Software Foundation)
Raspberry Pi Imager (HKLM\...\{6D809377-6AF0-444B-8957-A3773F02200E}_is1) (Version: 1.9.6 - Raspberry Pi Ltd)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.22621.21362 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.54 - Piriform)
Remove Empty Directories version 2.2 (HKLM-x32\...\{06F25DC8-71E2-44E2-805A-F15E15B51C74}_is1) (Version: 2.2 - Jonas John)
Riot Client (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Riot Game Riot_Client.) (Version: - Riot Games, Inc)
Roblox Player (HKLM-x32\...\roblox-player-admin) (Version: - Roblox Corporation)
R-Studio 5.2 (HKLM-x32\...\R-Studio 5.2NSIS) (Version: 5.2.130701 - R-Tools Technology Inc.)
Speciální aplikace Autodesk (HKLM-x32\...\{46EA8955-D629-4B3E-AAF0-D136031D7C95}) (Version: 3.2.1 - Autodesk)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Tailscale (HKLM\...\{9B913CA1-1029-5D8B-9FF1-73CBF3A737B6}) (Version: 1.98.2 - Tailscale Inc.)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.19572 - Microsoft Corporation)
TP-Link PLC Utility (HKLM-x32\...\{88BC1EEA-0E0D-4016-B892-5FE92C01845A}) (Version: 2.3.4751.12 - TP-Link) Hidden
TP-Link PLC Utility (HKLM-x32\...\InstallShield_{88BC1EEA-0E0D-4016-B892-5FE92C01845A}) (Version: 2.3.4751.12 - TP-Link)
Trezor Suite 25.11.3 (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\978be57b-9286-5cd7-a60b-54c81352a986) (Version: 25.11.3 - SatoshiLabs)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 130.1.10657 - Ubisoft)
Uložit do služby Autodesk Web and Mobile (HKLM\...\{192B349F-C3F7-4BBE-B49E-00DD4BD28373}) (Version: 3.0.29 - Autodesk) Hidden
UXP WebView Support (HKLM-x32\...\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.23 - VideoLAN)
WinFsp 2025 (HKLM-x32\...\{C79D9B29-3AF0-45B3-9DB9-226F3C2D2204}) (Version: 2.1.25156 - Navimatics LLC)
WinRAR 6.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.00.0 - win.rar GmbH)
WinToUSB verze 3.4 Beta (HKLM\...\WinToUSB_is1) (Version: 3.4 Beta - The EasyUEFI Development Team.)
WireGuard (HKLM\...\{2FDB79CE-5193-4A39-82BB-E00158CC1533}) (Version: 0.5.3 - WireGuard LLC)
Xml Viewer (HKLM-x32\...\{F58E04CD-6E76-43C8-AAF1-482225C2910E}) (Version: 3 - MindFusion Limited)
XnView 2.50 (HKLM-x32\...\XnView_is1) (Version: 2.50 - Gougelet Pierre-e)
Zoom (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\ZoomUMX) (Version: 5.14.0 (13888) - Zoom Video Communications, Inc.)
Chrome apps:
============
Disk Google (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\2e1f774cc4371fbfbff4e7d6f7f056fe) (Version: 1.0 - Google\Chrome)
Dokumenty (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\a868a3838444d73317ef339d1e30ea30) (Version: 1.0 - Google\Chrome)
Gmail (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\af789019a872fc9ae490ed1854e54927) (Version: 1.0 - Google\Chrome)
Prezentace (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\48092105802d4c7c56cdd840ad7ccf63) (Version: 1.0 - Google\Chrome)
Tabulky (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\daad2b3103f02167f39f739a3768b102) (Version: 1.0 - Google\Chrome)
YouTube (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\ff9ade1046cf1cff42fbe6f98b389f25) (Version: 1.0 - Google\Chrome)
Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-06-27] ()
Age of Empires II: Definitive Edition -> C:\Program Files\WindowsApps\Microsoft.MSPhoenix_101.103.48987.0_x64__8wekyb3d8bbwe [2026-07-11] (Microsoft Studios)
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2026-04-12] (INTEL CORP) [Startup Task]
DelEmptyFolders -> C:\Program Files\DeleteEmptyFolders [2026-05-17] ()
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_165.3.1107.0_x64__v10z8vjag6ke6 [2026-06-27] (HP Inc.)
Microsoft Teams (personal) -> C:\Program Files\WindowsApps\MicrosoftTeams_26149.701.4759.8860_x64__8wekyb3d8bbwe [2026-06-21] (Microsoft)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2026-04-18] (Realtek Semiconductor Corp)
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0 [2026-07-11] (Spotify AB) [Startup Task]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{1E62D59A-6EA4-476C-B707-4A32E88ED822}\InprocServer32 -> C:\Program Files\Nextcloud\CfApiShellExtensions.dll (Nextcloud GmbH) [File not signed]
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{345D3165-3889-4694-AB75-A91A27B217E8}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{6FF9B5B6-389F-444A-9FDD-A286C36EA079}\InprocServer32 -> C:\Program Files\Nextcloud\CfApiShellExtensions.dll (Nextcloud GmbH) [File not signed]
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{72F6A03F-7B17-4E65-AE37-666FC9024FA2}\InprocServer32 -> C:\ProgramData\AllDup\KuShellExtension64.dll (Michael Thummerer -> )
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{8B4929F8-076F-4AEC-AFEE-8928747B7AE3}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{9B1F8A90-DF55-4BB6-B78F-77F8C4632B37}\localserver32 -> D:\ISO\SOFTWARE\ABBYY.FineReader.PDF.16.v16.0.14.6564-full\ABBYY FineReader 16\FineUpdate.exe (ABBYY Development Inc. -> ABBYY Development, Inc.)
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{AA46BA8A-9825-40FD-8493-0BA3C4D5CEB5}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{BEA218D2-6950-497B-9434-61683EC065FE}\InprocServer32 -> C:\Users\FRPOK\AppData\Local\Programs\Python\Launcher\pyshellext.amd64.dll (Python Software Foundation -> Python Software Foundation)
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{e0c94c23-71a3-406b-a173-cee7f020b19d} -> [Nextcloud] => D:\NEXTCLOUD [2026-05-15 22:04]
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2022\en-US\acadficn.dll (Autodesk, Inc. -> Autodesk, Inc.)
ShellIconOverlayIdentifiers: [ NextcloudError] -> {E0342B74-7593-4C70-9D61-22F294AAFE05} => C:\Program Files\Nextcloud\NCOverlays.dll [2026-05-04] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudOK] -> {E1094E94-BE93-4EA2-9639-8475C68F3886} => C:\Program Files\Nextcloud\NCOverlays.dll [2026-05-04] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudOKShared] -> {E243AD85-F71B-496B-B17E-B8091CBE93D2} => C:\Program Files\Nextcloud\NCOverlays.dll [2026-05-04] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudSync] -> {E3D6DB20-1D83-4829-B5C9-941B31C0C35A} => C:\Program Files\Nextcloud\NCOverlays.dll [2026-05-04] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudWarning] -> {E4977F33-F93A-4A0A-9D3C-83DEA0EE8483} => C:\Program Files\Nextcloud\NCOverlays.dll [2026-05-04] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-09-22] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-09-22] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-09-22] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2021-01-29] (Autodesk, Inc. -> Autodesk, Inc.)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-09-22] (Adobe Inc. -> )
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2021-01-29] (Autodesk, Inc. -> Autodesk)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2022-12-24] (Notepad++ -> )
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
ContextMenuHandlers1: [iSkysoftVideoConverterFileOpreation] -> {BB35DE05-89D6-4D8F-95DE-A27DF8156D91} => C:\Windows\SysWOW64\ISCM64.dll [2015-02-27] () [File not signed]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [NextcloudContextMenuHandler] -> {BC6988AB-ACE2-4B81-84DC-DC34F9B24401} => C:\Program Files\Nextcloud\NCContextMenu.dll [2026-05-04] (Nextcloud GmbH -> Nextcloud GmbH)
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2024-05-22] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-09-22] (Adobe Inc. -> )
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2024-05-22] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-1460461504-3284535065-2975757879-1000: [!!KuShellExtension-{72F6A03F-7B17-4E65-AE37-666FC9024FA2}] -> {72F6A03F-7B17-4E65-AE37-666FC9024FA2} => C:\ProgramData\AllDup\KuShellExtension64.dll [2023-03-04] (Michael Thummerer -> )
ContextMenuHandlers2_S-1-5-21-1460461504-3284535065-2975757879-1000: [!!KuShellExtension-{72F6A03F-7B17-4E65-AE37-666FC9024FA2}] -> {72F6A03F-7B17-4E65-AE37-666FC9024FA2} => C:\ProgramData\AllDup\KuShellExtension64.dll [2023-03-04] (Michael Thummerer -> )
ContextMenuHandlers4_S-1-5-21-1460461504-3284535065-2975757879-1000: [!!KuShellExtension-{72F6A03F-7B17-4E65-AE37-666FC9024FA2}] -> {72F6A03F-7B17-4E65-AE37-666FC9024FA2} => C:\ProgramData\AllDup\KuShellExtension64.dll [2023-03-04] (Michael Thummerer -> )
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\FRPOK\Desktop\Node-RED Dashboard (František).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Default" --ignore-profile-directory-if-not-exists hxxp://homeassistant.local:1880/endpoint/ui/#!/0?socketid=dWNv7WqwANp3VL0CAABL
ShortcutWithArgument: C:\Users\FRPOK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Frantisek - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 2"
==================== Loaded Modules (Whitelisted) =============
2026-02-04 14:09 - 2026-02-04 14:09 - 000211456 _____ () [File not signed] C:\Program Files\Nextcloud\b2-1.dll
2026-02-04 16:06 - 2026-02-04 16:06 - 000187904 _____ () [File not signed] C:\Program Files\Nextcloud\brotlicommon.dll
2026-02-04 16:06 - 2026-02-04 16:06 - 000113152 _____ () [File not signed] C:\Program Files\Nextcloud\brotlidec.dll
2026-02-04 14:09 - 2026-02-04 14:09 - 000104448 _____ () [File not signed] C:\Program Files\Nextcloud\bz2.dll
2026-02-19 18:02 - 2026-02-19 18:02 - 002503168 _____ () [File not signed] C:\Program Files\Nextcloud\harfbuzz.dll
2026-02-05 01:32 - 2026-02-05 01:32 - 000116736 _____ () [File not signed] C:\Program Files\Nextcloud\kdsingleapplication-qt6.dll
2026-02-23 16:45 - 2026-02-23 16:45 - 000596480 _____ () [File not signed] C:\Program Files\Nextcloud\KF6Archive.dll
2026-02-04 16:07 - 2026-02-04 16:07 - 000265728 _____ () [File not signed] C:\Program Files\Nextcloud\libpng16.dll
2026-02-04 15:39 - 2026-02-04 15:39 - 001438208 _____ () [File not signed] C:\Program Files\Nextcloud\libsqlite.dll
2026-06-29 10:16 - 2026-06-29 10:16 - 000493056 _____ () [File not signed] C:\Program Files\Nextcloud\nextcloudsync_vfs_cfapi.dll
2026-06-29 10:16 - 2026-06-29 10:16 - 000117760 _____ () [File not signed] C:\Program Files\Nextcloud\nextcloudsync_vfs_suffix.dll
2026-02-04 16:10 - 2026-02-04 16:10 - 000418304 _____ () [File not signed] C:\Program Files\Nextcloud\pcre2-16.dll
2026-07-13 23:06 - 2026-07-13 23:06 - 000192512 _____ () [File not signed] C:\Users\FRPOK\AppData\Local\Temp\sfamcc00001.dll
2026-07-13 23:06 - 2026-07-13 23:06 - 000158720 _____ () [File not signed] C:\Users\FRPOK\AppData\Local\Temp\sfareca00001.dll
2022-12-29 13:31 - 2015-02-27 15:38 - 000721263 _____ () [File not signed] C:\Windows\SysWOW64\ISCM64.dll
2025-08-22 19:28 - 2025-08-22 19:28 - 000030720 _____ (Adobe Systems Inc.) [File not signed] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\cs_cz\Acrobat Elements\ContextMenuShim64.cze
2026-02-04 16:07 - 2026-02-04 16:07 - 001114624 _____ (Meta Platforms, Inc.) [File not signed] C:\Program Files\Nextcloud\zstd.dll
2026-05-04 15:21 - 2026-05-04 15:21 - 001437696 _____ (Nextcloud GmbH) [File not signed] C:\Program Files\Nextcloud\CfApiShellExtensions.dll
2026-02-06 18:10 - 2026-02-06 18:10 - 000232448 _____ (OpenSC Project) [File not signed] C:\Program Files\Nextcloud\libp11.dll
2026-02-19 18:01 - 2026-02-19 18:01 - 000878592 _____ (The FreeType Project) [File not signed] C:\Program Files\Nextcloud\freetype.dll
2026-02-04 14:34 - 2026-02-04 14:34 - 033110528 _____ (The ICU Project) [File not signed] C:\Program Files\Nextcloud\icudt78.dll
2026-02-04 14:33 - 2026-02-04 14:33 - 003907584 _____ (The ICU Project) [File not signed] C:\Program Files\Nextcloud\icuin78.dll
2026-02-04 14:33 - 2026-02-04 14:33 - 002368512 _____ (The ICU Project) [File not signed] C:\Program Files\Nextcloud\icuuc78.dll
2026-02-04 16:07 - 2026-02-04 16:07 - 000995328 _____ (The libjpeg-turbo Project) [File not signed] C:\Program Files\Nextcloud\jpeg62.dll
2026-02-19 18:28 - 2026-02-19 18:28 - 000059392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\iconengines\qsvgicon.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000035840 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\imageformats\qgif.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000033792 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\imageformats\qico.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000052736 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\imageformats\qjpeg.dll
2026-02-23 16:11 - 2026-02-23 16:11 - 000030208 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\imageformats\qpdf.dll
2026-02-19 18:28 - 2026-02-19 18:28 - 000027136 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\imageformats\qsvg.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000978432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\platforms\qwindows.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\Qt\labs\platform\labsplatformplugin.dll
2026-02-23 16:43 - 2026-02-23 16:43 - 000439808 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\Qt5Compat\GraphicalEffects\private\qtgraphicaleffectsprivateplugin.dll
2026-02-23 16:44 - 2026-02-23 16:44 - 000790016 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\Qt5Compat\GraphicalEffects\qtgraphicaleffectsplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\Basic\impl\qtquickcontrols2basicstyleimplplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\Basic\qtquickcontrols2basicstyleplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 003169792 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\FluentWinUI3\qtquickcontrols2fluentwinui3styleplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\Fusion\impl\qtquickcontrols2fusionstyleimplplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\Fusion\qtquickcontrols2fusionstyleplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\impl\qtquickcontrols2implplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000029184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\qtquickcontrols2plugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Dialogs\qtquickdialogsplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Effects\effectsplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Layouts\qquicklayoutsplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Shapes\qmlshapesplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Templates\qtquicktemplates2plugin.dll
2026-02-19 18:40 - 2026-02-19 18:40 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Window\quickwindowplugin.dll
2026-02-19 18:17 - 2026-02-19 18:17 - 005724672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Core.dll
2026-02-23 16:43 - 2026-02-23 16:43 - 000383488 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Core5Compat.dll
2026-02-19 18:19 - 2026-02-19 18:19 - 007474688 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Gui.dll
2026-02-19 18:50 - 2026-02-19 18:50 - 000272384 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6LabsPlatform.dll
2026-02-19 18:20 - 2026-02-19 18:20 - 001763840 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Network.dll
2026-02-19 18:20 - 2026-02-19 18:20 - 001963008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6OpenGL.dll
2026-02-23 16:11 - 2026-02-23 16:11 - 005507584 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Pdf.dll
2026-02-19 19:00 - 2026-02-19 19:00 - 000506880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Positioning.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000394752 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6PrintSupport.dll
2026-02-19 18:40 - 2026-02-19 18:40 - 005321728 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Qml.dll
2026-02-19 18:42 - 2026-02-19 18:42 - 000147968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QmlMeta.dll
2026-02-19 18:41 - 2026-02-19 18:41 - 000974848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QmlModels.dll
2026-02-19 18:40 - 2026-02-19 18:40 - 000064512 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QmlWorkerScript.dll
2026-02-19 18:47 - 2026-02-19 18:47 - 006509056 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Quick.dll
2026-02-19 18:50 - 2026-02-19 18:50 - 000088064 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2.dll
2026-02-19 18:51 - 2026-02-19 18:51 - 001766400 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2Basic.dll
2026-02-19 18:51 - 2026-02-19 18:51 - 000050176 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2BasicStyleImpl.dll
2026-02-19 18:50 - 2026-02-19 18:50 - 000177664 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2FluentWinUI3StyleImpl.dll
2026-02-19 18:53 - 2026-02-19 18:53 - 001405952 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2Fusion.dll
2026-02-19 18:51 - 2026-02-19 18:51 - 000149504 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2FusionStyleImpl.dll
2026-02-19 18:50 - 2026-02-19 18:50 - 000282112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2Impl.dll
2026-02-19 18:55 - 2026-02-19 18:55 - 000147456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickDialogs2.dll
2026-02-19 18:55 - 2026-02-19 18:55 - 002859008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickDialogs2QuickImpl.dll
2026-02-19 18:36 - 2026-02-19 18:36 - 000035328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickDialogs2Utils.dll
2026-02-19 18:50 - 2026-02-19 18:50 - 000419328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickEffects.dll
2026-02-19 18:48 - 2026-02-19 18:48 - 000294912 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickLayouts.dll
2026-02-19 18:48 - 2026-02-19 18:48 - 000331776 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickShapes.dll
2026-02-19 18:49 - 2026-02-19 18:49 - 001987072 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickTemplates2.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000121344 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickWidgets.dll
2026-02-19 18:27 - 2026-02-19 18:27 - 004055040 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6ShaderTools.dll
2026-02-19 18:20 - 2026-02-19 18:20 - 000300544 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Sql.dll
2026-02-19 18:28 - 2026-02-19 18:28 - 000620032 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Svg.dll
2026-02-23 16:05 - 2026-02-23 16:05 - 201931776 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6WebEngineCore.dll
2026-02-23 16:05 - 2026-02-23 16:05 - 000176128 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6WebEngineWidgets.dll
2026-02-19 19:01 - 2026-02-19 19:01 - 000241152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6WebChannel.dll
2026-02-19 19:01 - 2026-02-19 19:01 - 000206848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6WebSockets.dll
2026-02-19 18:22 - 2026-02-19 18:22 - 006564864 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Widgets.dll
2026-02-19 18:24 - 2026-02-19 18:24 - 000147968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Xml.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000208896 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\styles\qmodernwindowsstyle.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000091136 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\tls\qcertonlybackend.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000232960 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\tls\qopensslbackend.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000250880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\tls\qschannelbackend.dll
2026-02-04 14:29 - 2026-02-04 14:29 - 000154112 _____ (The Tukaani Project <hxxp://tukaani.org/>) [File not signed] C:\Program Files\Nextcloud\liblzma.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Dreamweaver 2021.lnk:9E737BDB02 [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2023.lnk:4A503CCB3B [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk:B96E9B8455 [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk:159ADC9AA1 [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk:60EC9648C0 [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk:5465085A2F [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk:1DC1525F34 [2594]
AlternateDataStreams: C:\Users\FRPOK\Desktop\Adobe Photoshop 2023.lnk:4A503CCB3B [2594]
AlternateDataStreams: C:\Users\FRPOK\Desktop\JRT (1).exe:MBAM.Zone.Identifier [218]
AlternateDataStreams: C:\Users\FRPOK\Downloads\ccsetup_online_setup.exe:MBAM.Zone.Identifier [183]
AlternateDataStreams: C:\Users\FRPOK\Downloads\CrystalDiskInfo9_9_0.exe:MBAM.Zone.Identifier [251]
AlternateDataStreams: C:\Users\FRPOK\Downloads\RogueKiller_setup_win10.exe:MBAM.Zone.Identifier [191]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
==================== Internet Explorer (Whitelisted) =============
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-06-24] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: iSkysoft iMedia Converter Deluxe 5.1.0 -> {AEAF002F-E6D8-4A21-ABD3-2B309B79A6CE} -> C:\ProgramData\iSkysoft\Video Converter Ultimate\WSBrowserAppMgr.dll [2016-08-18] (Shenzhen Yi Xing Investment Co., Ltd. -> Wondershare)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-10-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-10-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-10-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-10-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: WSISVCUchrome - {78A543EB-3A61-4ED3 - No File
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\sharepoint.com -> hxxps://skolaradostinno-files.sharepoint.com
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2025-02-21 12:45 - 2026-07-13 17:52 - 000000841 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 localhost
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.0.10 - 192.168.0.1
Windows Firewall is enabled.
Network Binding:
=============
Wi-Fi: Intel(R) Wireless-AC 9560 160MHz -> Netwtw08.sys
Ethernet 2: VirtualBox Host-Only Ethernet Adapter -> VBoxNetAdp6.sys
Ethernet: Intel(R) Ethernet Connection (6) I219-V -> e1d.sys
Tailscale: Tailscale Tunnel -> wintun.sys
oracle_VBoxNetLwf: VirtualBox NDIS6 Bridged Networking Driver
INSECURE_NPCAP: Npcap Packet Driver (NPCAP)
Ran by FRPOK (13-07-2026 23:48:02)
Running from C:\Users\FRPOK\Desktop
Microsoft Windows 11 Pro Version 22H2 22621.4317 (X64) (2022-12-28 11:54:59)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-1460461504-3284535065-2975757879-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-1460461504-3284535065-2975757879-503 - Limited - Disabled)
FRPOK (S-1-5-21-1460461504-3284535065-2975757879-1000 - Administrators - Enabled) => C:\Users\FRPOK
Guest (S-1-5-21-1460461504-3284535065-2975757879-501 - Limited - Disabled)
sdileni (S-1-5-21-1460461504-3284535065-2975757879-1002 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-1460461504-3284535065-2975757879-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Disabled - Out of date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
4DDiG Partition Manager 3.0.2.2 (HKLM\...\{4DDiG Partition Manager}_is1) (Version: 3.0.2.2 - Tenorshare, Inc.)
AccessData FTK Imager (HKLM-x32\...\{0ADC8340-4A94-4CE3-A721-B558F365F8D0}) (Version: 3.1.2.0 - AccessData)
ADB AppControl verze 1.8.3 (HKLM-x32\...\{64A8B963-4FB2-49B5-B2B1-35A333497319}_is1) (Version: 1.8.3 - Cyber.Cat)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 26.001.21691 - Adobe)
Adobe Dreamweaver 2021 (HKLM-x32\...\DRWV_21_2) (Version: 21.2 - Adobe Inc.)
Adobe Illustrator 2024 (HKLM-x32\...\ILST_28_5) (Version: 28.5 - Adobe Inc.)
Adobe Photoshop 2023 (HKLM-x32\...\PHSP_24_0) (Version: 24.0.0.59 - Adobe Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AllDup (HKLM-x32\...\AllDup_is1) (Version: 4.5.72 - MTSD)
Angry IP Scanner (HKLM-x32\...\Angry IP Scanner) (Version: 3.9.1 - Angry IP Scanner)
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 9.0.14 - AnyDesk Software GmbH)
AnyRecover 6.4.5.5 (HKLM-x32\...\{89DFCC5A-39CC-4AE7-8313-1ED6553E1ADD}_is1) (Version: 6.4.5.5 - Shenzhen AnyRecover Technology Co., Ltd.)
Apple Mobile Device Support (HKLM\...\{527DD209-8A66-482F-8779-C7B3BACCA8F1}) (Version: 15.0.0.16 - Apple Inc.)
Arduino IDE 2.2.1 (HKLM\...\459fc68c-eb53-59f8-8957-9913bc627af3) (Version: 2.2.1 - Arduino SA)
AutoCAD Open in Desktop (HKLM\...\{1C66A0B0-784E-4777-97B3-93F843D1C8CF}) (Version: 1.0.20.0 - Autodesk)
Autodesk Access (HKLM\...\{A3158B3E-5F28-358A-BF1A-9532D8EBC811}) (Version: 2.21.0.559 - Autodesk, Inc.)
Autodesk App Manager (HKLM-x32\...\{9C2E49CB-F671-47EC-8093-CC1A8749A92A}) (Version: 3.2.1 - Autodesk)
Autodesk AutoCAD 2022 - English (HKLM\...\{1E7D4EF7-A28E-3D3E-BA3C-C6FAE4AAB2E0}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk AutoCAD 2022 Language Pack – Čeština (Czech) (HKLM\...\{B914E66E-BDF2-3DB2-ADDC-782AC4A48F1F}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk CER (HKLM\...\{11D68ADA-767C-43E0-9716-C2E1ECD08AA2}) (Version: 7.2.4.927 - Autodesk Inc.) Hidden
Autodesk Genuine Service (HKLM\...\{4E5E212E-F881-4C74-9F1B-5B1ADCB4BB7B}) (Version: 7.6.1.4 - Autodesk)
Autodesk Genuine Service (HKLM-x32\...\{317D67F2-9027-4E85-9ED1-ADF4D765AE02}) (Version: 3.0.11 - Autodesk)
Autodesk Identity Manager (HKLM\...\Autodesk Identity Manager) (Version: 1.12.0.7 - Autodesk)
Autodesk Material Library 2022 (HKLM-x32\...\{A9221A68-5AD0-4215-B54F-CB5DBA4FB27C}) (Version: 20.3.7.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2022 (HKLM-x32\...\{6256584F-B04B-41D4-8A59-44E70940C473}) (Version: 20.3.7.0 - Autodesk)
Automesher (HKLM\...\{F769E4A9-5EED-457B-AF50-08F3E68F6695}) (Version: 1.7.6 - Automapki)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
balenaEtcher (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\balena_etcher) (Version: 1.19.21 - Balena Ltd. <hello@balena.io>)
Bambu Studio (HKLM\...\Bambu Studio) (Version: 02.06.00.51 - Bambulab)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CND-SGM5 Gaming Mouse Driver (HKLM-x32\...\{D0E01BE3-1E25-4457-B25A-4D44F352C371}) (Version: - )
CPUID HWMonitor 1.64 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.64 - CPUID, Inc.)
DeleteEmptyFolders 1.3 (HKLM\...\com.extrabit.DeleteEmptyFolders_is1) (Version: 1.3 - ExtraBit Software Ltd.)
Discord (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Discord) (Version: 1.0.9017 - Discord Inc.)
DiskGenius V5.6.0 (HKLM\...\{2661F2FA-56A7-415D-8196-C4CB3D3ACFFE}_is1) (Version: - Eassos Co., Ltd.)
Documentation Manager (HKLM\...\{9CB8A55C-34D9-4AE2-9147-2CABD63DCB37}) (Version: 24.40.0.4 - Intel Corporation) Hidden
DroidCam Audio & Video Drivers (X64) (HKLM\...\DroidCamDrivers) (Version: 7.1.2 - Dev47Apps)
DroidCam Client (HKLM\...\DroidCamOBSClient) (Version: 7.2.1 - Dev47Apps)
Dynamic Application Loader Host Interface Service (HKLM\...\{0E6217C5-C8FC-4745-AAC2-154D672F8EF3}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Fing (HKLM\...\Fing) (Version: 4.0.2 - Fing Ltd)
Folder Size 5.9.0.5 (HKLM-x32\...\{2DFA85ED-588F-4CE3-A175-29E52C3804A8}_is1) (Version: 5.9.0.5 - MindGems)
GoldWave v5.58 (HKLM-x32\...\GoldWave v5.58) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 150.0.7871.102 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
HDD Raw Copy Tool v2.5 (HKLM\...\{F1FC5C64-7E4A-44AD-A0DF-B66E8790148A}_is1) (Version: 2.5 - HDDGURU)
HWiNFO® 64 (HKLM\...\HWiNFO® 64_is1) (Version: 8.46 - Martin Malik, REALiX s.r.o.)
HxD Hex Editor 2.5 (HKLM\...\HxD_is1) (Version: 2.5 - Maël Hörz)
Intel(R) Icls (HKLM\...\{4AFF8BD2-8533-46B3-89CA-2F929B022F70}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) LMS (HKLM\...\{277F237D-10EF-46D5-BE31-25C1ADE3E13F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2105.15.0.2157 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{959E6738-F665-4E07-8D7E-88C449AD2479}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{A9B23394-82C4-4885-92F6-5C21D2AFAF14}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{005DE983-782C-43E6-959E-2DB59D503529}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{531F2CB2-5A78-49E5-A71B-FFF7C7CDC32C}) (Version: 30.100.2020.7 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.2020.7 - Intel Corporation)
Intel® Software Installer (HKLM\...\{55AFCB51-121C-4654-B9A3-6EADAA94CD2B}) (Version: 24.40.0.4 - Intel Corporation) Hidden
Intel® Software Installer (HKLM-x32\...\{acc5d32f-fbf7-4d75-8943-2f70e698123d}) (Version: 23.20.0.4 - Intel Corporation) Hidden
iSkysoft iMedia Converter Deluxe(Build 8.8.0.1) (HKLM-x32\...\iSkysoft iMedia Converter Deluxe_is1) (Version: 8.8.0.1 - iSkysoft Software)
iVCam 7.1 (HKLM\...\iVCam_is1) (Version: 7.1.0 - e2eSoft)
K-Lite Codec Pack 16.0.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 16.0.5 - KLCP)
Kodi (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Kodi) (Version: 19.5.0.0 - XBMC Foundation)
MediaInfo 22.12 (HKLM\...\MediaInfo) (Version: 22.12 - MediaArea.net)
Microsoft .NET Core Host - 3.1.28 (x64) (HKLM\...\{26ECE92F-518E-40AF-9108-7B7B444A46DE}) (Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.28 (x64) (HKLM\...\{CDEA72F4-1367-4E0A-AC5F-0EBAF7C6825A}) (Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.28 (x64) (HKLM\...\{3691148D-EF42-4812-8956-AE11FC413B8D}) (Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.28 (x64) (HKLM-x32\...\{231e3b76-4d0f-4e60-9d69-f11c9c448630}) (Version: 3.1.28.31513 - Microsoft Corporation)
Microsoft .NET Host - 8.0.14 (x64) (HKLM\...\{04904762-A110-4E46-A728-7EF88DCCA1F1}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.14 (x86) (HKLM-x32\...\{CB771E25-82B7-435C-B8CF-1DAF85D9A373}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host - 9.0.13 (x64) (HKLM\...\{B5A26326-5FBC-4B3A-916D-E284E8CF2537}) (Version: 72.52.47121 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.14 (x64) (HKLM\...\{B2E7F2C8-73CD-4269-B7BC-11B7D8BB7A37}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.14 (x86) (HKLM-x32\...\{455AA7CD-6D99-4039-95D2-FF1A437FD444}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 9.0.13 (x64) (HKLM\...\{45D7F314-4193-43EA-A004-52C2F45953EB}) (Version: 72.52.47121 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.14 (x64) (HKLM\...\{6C817CE3-32BC-4C6B-8B1A-E6F71EDAFFCC}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.14 (x64) (HKLM-x32\...\{a6918640-3436-4607-9108-9b6038e680d6}) (Version: 8.0.14.34611 - Microsoft Corporation)
Microsoft .NET Runtime - 8.0.14 (x86) (HKLM-x32\...\{6E39BE88-1272-4732-A962-9B34A31EE12C}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 9.0.13 (x64) (HKLM\...\{F4381ABE-B1E5-45F9-AEA5-4BF1235163C3}) (Version: 72.52.47121 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 3.1.10 - Shared Framework (HKLM-x32\...\{6efe3294-03d8-4977-9c67-9f57ab075130}) (Version: 3.1.10.20520 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.10 Shared Framework (x64) (HKLM\...\{7BEAA207-E3EB-3948-BBB3-336B04D8A2F1}) (Version: 3.1.10.20520 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.14 - Shared Framework (x86) (HKLM-x32\...\{b4843496-41d3-405c-b4c6-2ff39b7609ed}) (Version: 8.0.14.25112 - Microsoft Corporation)
Microsoft ASP.NET Core 8.0.14 Shared Framework (x86) (HKLM-x32\...\{BBD33465-6641-37D3-9444-5CCD7FE71A79}) (Version: 8.0.14.25112 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 150.0.4078.65 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 150.0.4078.65 - Microsoft Corporation) Hidden
Microsoft GameInput (HKLM\...\{14EDF950-06B9-415F-862C-1D5DEC321AE6}) (Version: 3.3.221.0 - Microsoft Corporation)
Microsoft Office LTSC Professional Plus 2021 - cs-cz (HKLM\...\ProPlus2021Volume - cs-cz) (Version: 16.0.14334.20756 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Teams) (Version: 1.4.00.19572 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34433 (HKLM-x32\...\{804e7d66-ccc2-4c12-84ba-476da31d103d}) (Version: 14.42.34433.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31332 (HKLM-x32\...\{a98dc6ff-d360-4878-9f0a-915eba86eaf3}) (Version: 14.32.31332.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34433 (HKLM\...\{E1902FC6-C423-4719-AB8A-AC7B2694B367}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34433 (HKLM\...\{382F1166-A409-4C5B-9B1E-85ED538B8291}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31332 (HKLM-x32\...\{8972AC25-452E-4FFE-945A-EB9E28C20322}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31332 (HKLM-x32\...\{AEAA18F7-9C96-4A43-BC07-8B88A4913EEB}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.14 (x86) (HKLM-x32\...\{F12CDBC1-172E-4413-829C-B5234E386262}) (Version: 64.56.29521 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.14 (x86) (HKLM-x32\...\{f70d61fa-5d61-4582-bf8d-07dec8e4fcda}) (Version: 8.0.14.34613 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 9.0.13 (x64) (HKLM\...\{A58D99B5-9613-4E04-9254-8052BDC85B4B}) (Version: 72.52.47159 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 9.0.13 (x64) (HKLM-x32\...\{6dbc901f-1907-469f-8f4a-e822d33c5877}) (Version: 9.0.13.35715 - Microsoft Corporation)
Nextcloud (HKLM\...\{DF14F8E8-E3A9-43D3-8B4D-AF5FC8B76405}) (Version: 33.0.7.20260629 - Nextcloud GmbH)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.4.8 - Notepad++ Team)
Npcap OEM (HKLM-x32\...\NpcapInst) (Version: 1.83 - Nmap Project)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 29.0.1 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14334.20756 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14334.20756 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Oracle VM VirtualBox 7.0.4 (HKLM\...\{AC025744-F936-446B-A128-AC42F974FCC8}) (Version: 7.0.4 - Oracle and/or its affiliates)
OSFMount (HKLM\...\{E2AF9D8E-F778-4C3F-904B-F4F88873ADDE}_is1) (Version: 3.1.1003.0 - Passmark Software)
PDF24 Creator 11.27.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.27.0 - Geek Software GmbH)
PPJoy Joystick Driver 0.8.4.6 (HKLM-x32\...\PPJoy Joystick Driver) (Version: 0.8.4.6 - Deon van der Westhuysen)
Puran Delete Empty Folders 1.2 (HKLM\...\Puran Delete Empty Folders_is1) (Version: - Puran Software)
Python 3.13.14 (64-bit) (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\{c49e1a3f-d78c-4307-b1e9-fc5e0ebb91a1}) (Version: 3.13.14150.0 - Python Software Foundation)
Python 3.13.14 Core Interpreter (64-bit) (HKLM\...\{1E897E54-A9F8-4146-A531-9B4E7093AC92}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Development Libraries (64-bit) (HKLM\...\{D22E5A19-BCA7-4438-904E-54CEB910C054}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Documentation (64-bit) (HKLM\...\{4F4A15BF-B55E-4A32-A9A7-32E649C2E9BD}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Executables (64-bit) (HKLM\...\{377B613A-310E-45FF-9E16-63876BF37A30}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 pip Bootstrap (64-bit) (HKLM\...\{82676C9E-1943-4D0B-AFB4-EB6C5F5F10C8}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Standard Library (64-bit) (HKLM\...\{FAF06E78-33D1-49DC-BDA8-626BC5C4A408}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Tcl/Tk Support (64-bit) (HKLM\...\{88AE664F-B464-40D0-9DCE-35D367D20EBB}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python 3.13.14 Test Suite (64-bit) (HKLM\...\{81624098-AE39-415B-A02F-3647169A0A13}) (Version: 3.13.14150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{3122B179-860E-45B2-8AE2-A80B9B0E8D3C}) (Version: 3.13.14150.0 - Python Software Foundation)
Raspberry Pi Imager (HKLM\...\{6D809377-6AF0-444B-8957-A3773F02200E}_is1) (Version: 1.9.6 - Raspberry Pi Ltd)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.22621.21362 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.54 - Piriform)
Remove Empty Directories version 2.2 (HKLM-x32\...\{06F25DC8-71E2-44E2-805A-F15E15B51C74}_is1) (Version: 2.2 - Jonas John)
Riot Client (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\Riot Game Riot_Client.) (Version: - Riot Games, Inc)
Roblox Player (HKLM-x32\...\roblox-player-admin) (Version: - Roblox Corporation)
R-Studio 5.2 (HKLM-x32\...\R-Studio 5.2NSIS) (Version: 5.2.130701 - R-Tools Technology Inc.)
Speciální aplikace Autodesk (HKLM-x32\...\{46EA8955-D629-4B3E-AAF0-D136031D7C95}) (Version: 3.2.1 - Autodesk)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Tailscale (HKLM\...\{9B913CA1-1029-5D8B-9FF1-73CBF3A737B6}) (Version: 1.98.2 - Tailscale Inc.)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.19572 - Microsoft Corporation)
TP-Link PLC Utility (HKLM-x32\...\{88BC1EEA-0E0D-4016-B892-5FE92C01845A}) (Version: 2.3.4751.12 - TP-Link) Hidden
TP-Link PLC Utility (HKLM-x32\...\InstallShield_{88BC1EEA-0E0D-4016-B892-5FE92C01845A}) (Version: 2.3.4751.12 - TP-Link)
Trezor Suite 25.11.3 (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\978be57b-9286-5cd7-a60b-54c81352a986) (Version: 25.11.3 - SatoshiLabs)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 130.1.10657 - Ubisoft)
Uložit do služby Autodesk Web and Mobile (HKLM\...\{192B349F-C3F7-4BBE-B49E-00DD4BD28373}) (Version: 3.0.29 - Autodesk) Hidden
UXP WebView Support (HKLM-x32\...\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.23 - VideoLAN)
WinFsp 2025 (HKLM-x32\...\{C79D9B29-3AF0-45B3-9DB9-226F3C2D2204}) (Version: 2.1.25156 - Navimatics LLC)
WinRAR 6.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.00.0 - win.rar GmbH)
WinToUSB verze 3.4 Beta (HKLM\...\WinToUSB_is1) (Version: 3.4 Beta - The EasyUEFI Development Team.)
WireGuard (HKLM\...\{2FDB79CE-5193-4A39-82BB-E00158CC1533}) (Version: 0.5.3 - WireGuard LLC)
Xml Viewer (HKLM-x32\...\{F58E04CD-6E76-43C8-AAF1-482225C2910E}) (Version: 3 - MindFusion Limited)
XnView 2.50 (HKLM-x32\...\XnView_is1) (Version: 2.50 - Gougelet Pierre-e)
Zoom (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\ZoomUMX) (Version: 5.14.0 (13888) - Zoom Video Communications, Inc.)
Chrome apps:
============
Disk Google (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\2e1f774cc4371fbfbff4e7d6f7f056fe) (Version: 1.0 - Google\Chrome)
Dokumenty (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\a868a3838444d73317ef339d1e30ea30) (Version: 1.0 - Google\Chrome)
Gmail (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\af789019a872fc9ae490ed1854e54927) (Version: 1.0 - Google\Chrome)
Prezentace (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\48092105802d4c7c56cdd840ad7ccf63) (Version: 1.0 - Google\Chrome)
Tabulky (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\daad2b3103f02167f39f739a3768b102) (Version: 1.0 - Google\Chrome)
YouTube (HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\ff9ade1046cf1cff42fbe6f98b389f25) (Version: 1.0 - Google\Chrome)
Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-06-27] ()
Age of Empires II: Definitive Edition -> C:\Program Files\WindowsApps\Microsoft.MSPhoenix_101.103.48987.0_x64__8wekyb3d8bbwe [2026-07-11] (Microsoft Studios)
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2026-04-12] (INTEL CORP) [Startup Task]
DelEmptyFolders -> C:\Program Files\DeleteEmptyFolders [2026-05-17] ()
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_165.3.1107.0_x64__v10z8vjag6ke6 [2026-06-27] (HP Inc.)
Microsoft Teams (personal) -> C:\Program Files\WindowsApps\MicrosoftTeams_26149.701.4759.8860_x64__8wekyb3d8bbwe [2026-06-21] (Microsoft)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2026-04-18] (Realtek Semiconductor Corp)
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0 [2026-07-11] (Spotify AB) [Startup Task]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{1E62D59A-6EA4-476C-B707-4A32E88ED822}\InprocServer32 -> C:\Program Files\Nextcloud\CfApiShellExtensions.dll (Nextcloud GmbH) [File not signed]
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{345D3165-3889-4694-AB75-A91A27B217E8}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{6FF9B5B6-389F-444A-9FDD-A286C36EA079}\InprocServer32 -> C:\Program Files\Nextcloud\CfApiShellExtensions.dll (Nextcloud GmbH) [File not signed]
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{72F6A03F-7B17-4E65-AE37-666FC9024FA2}\InprocServer32 -> C:\ProgramData\AllDup\KuShellExtension64.dll (Michael Thummerer -> )
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{8B4929F8-076F-4AEC-AFEE-8928747B7AE3}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{9B1F8A90-DF55-4BB6-B78F-77F8C4632B37}\localserver32 -> D:\ISO\SOFTWARE\ABBYY.FineReader.PDF.16.v16.0.14.6564-full\ABBYY FineReader 16\FineUpdate.exe (ABBYY Development Inc. -> ABBYY Development, Inc.)
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{AA46BA8A-9825-40FD-8493-0BA3C4D5CEB5}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{BEA218D2-6950-497B-9434-61683EC065FE}\InprocServer32 -> C:\Users\FRPOK\AppData\Local\Programs\Python\Launcher\pyshellext.amd64.dll (Python Software Foundation -> Python Software Foundation)
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{e0c94c23-71a3-406b-a173-cee7f020b19d} -> [Nextcloud] => D:\NEXTCLOUD [2026-05-15 22:04]
CustomCLSID: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2022\en-US\acadficn.dll (Autodesk, Inc. -> Autodesk, Inc.)
ShellIconOverlayIdentifiers: [ NextcloudError] -> {E0342B74-7593-4C70-9D61-22F294AAFE05} => C:\Program Files\Nextcloud\NCOverlays.dll [2026-05-04] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudOK] -> {E1094E94-BE93-4EA2-9639-8475C68F3886} => C:\Program Files\Nextcloud\NCOverlays.dll [2026-05-04] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudOKShared] -> {E243AD85-F71B-496B-B17E-B8091CBE93D2} => C:\Program Files\Nextcloud\NCOverlays.dll [2026-05-04] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudSync] -> {E3D6DB20-1D83-4829-B5C9-941B31C0C35A} => C:\Program Files\Nextcloud\NCOverlays.dll [2026-05-04] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudWarning] -> {E4977F33-F93A-4A0A-9D3C-83DEA0EE8483} => C:\Program Files\Nextcloud\NCOverlays.dll [2026-05-04] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-09-22] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-09-22] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-09-22] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2021-01-29] (Autodesk, Inc. -> Autodesk, Inc.)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-09-22] (Adobe Inc. -> )
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2021-01-29] (Autodesk, Inc. -> Autodesk)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2022-12-24] (Notepad++ -> )
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
ContextMenuHandlers1: [iSkysoftVideoConverterFileOpreation] -> {BB35DE05-89D6-4D8F-95DE-A27DF8156D91} => C:\Windows\SysWOW64\ISCM64.dll [2015-02-27] () [File not signed]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [NextcloudContextMenuHandler] -> {BC6988AB-ACE2-4B81-84DC-DC34F9B24401} => C:\Program Files\Nextcloud\NCContextMenu.dll [2026-05-04] (Nextcloud GmbH -> Nextcloud GmbH)
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2024-05-22] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-09-22] (Adobe Inc. -> )
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2024-05-22] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-1460461504-3284535065-2975757879-1000: [!!KuShellExtension-{72F6A03F-7B17-4E65-AE37-666FC9024FA2}] -> {72F6A03F-7B17-4E65-AE37-666FC9024FA2} => C:\ProgramData\AllDup\KuShellExtension64.dll [2023-03-04] (Michael Thummerer -> )
ContextMenuHandlers2_S-1-5-21-1460461504-3284535065-2975757879-1000: [!!KuShellExtension-{72F6A03F-7B17-4E65-AE37-666FC9024FA2}] -> {72F6A03F-7B17-4E65-AE37-666FC9024FA2} => C:\ProgramData\AllDup\KuShellExtension64.dll [2023-03-04] (Michael Thummerer -> )
ContextMenuHandlers4_S-1-5-21-1460461504-3284535065-2975757879-1000: [!!KuShellExtension-{72F6A03F-7B17-4E65-AE37-666FC9024FA2}] -> {72F6A03F-7B17-4E65-AE37-666FC9024FA2} => C:\ProgramData\AllDup\KuShellExtension64.dll [2023-03-04] (Michael Thummerer -> )
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\FRPOK\Desktop\Node-RED Dashboard (František).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Default" --ignore-profile-directory-if-not-exists hxxp://homeassistant.local:1880/endpoint/ui/#!/0?socketid=dWNv7WqwANp3VL0CAABL
ShortcutWithArgument: C:\Users\FRPOK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Frantisek - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 2"
==================== Loaded Modules (Whitelisted) =============
2026-02-04 14:09 - 2026-02-04 14:09 - 000211456 _____ () [File not signed] C:\Program Files\Nextcloud\b2-1.dll
2026-02-04 16:06 - 2026-02-04 16:06 - 000187904 _____ () [File not signed] C:\Program Files\Nextcloud\brotlicommon.dll
2026-02-04 16:06 - 2026-02-04 16:06 - 000113152 _____ () [File not signed] C:\Program Files\Nextcloud\brotlidec.dll
2026-02-04 14:09 - 2026-02-04 14:09 - 000104448 _____ () [File not signed] C:\Program Files\Nextcloud\bz2.dll
2026-02-19 18:02 - 2026-02-19 18:02 - 002503168 _____ () [File not signed] C:\Program Files\Nextcloud\harfbuzz.dll
2026-02-05 01:32 - 2026-02-05 01:32 - 000116736 _____ () [File not signed] C:\Program Files\Nextcloud\kdsingleapplication-qt6.dll
2026-02-23 16:45 - 2026-02-23 16:45 - 000596480 _____ () [File not signed] C:\Program Files\Nextcloud\KF6Archive.dll
2026-02-04 16:07 - 2026-02-04 16:07 - 000265728 _____ () [File not signed] C:\Program Files\Nextcloud\libpng16.dll
2026-02-04 15:39 - 2026-02-04 15:39 - 001438208 _____ () [File not signed] C:\Program Files\Nextcloud\libsqlite.dll
2026-06-29 10:16 - 2026-06-29 10:16 - 000493056 _____ () [File not signed] C:\Program Files\Nextcloud\nextcloudsync_vfs_cfapi.dll
2026-06-29 10:16 - 2026-06-29 10:16 - 000117760 _____ () [File not signed] C:\Program Files\Nextcloud\nextcloudsync_vfs_suffix.dll
2026-02-04 16:10 - 2026-02-04 16:10 - 000418304 _____ () [File not signed] C:\Program Files\Nextcloud\pcre2-16.dll
2026-07-13 23:06 - 2026-07-13 23:06 - 000192512 _____ () [File not signed] C:\Users\FRPOK\AppData\Local\Temp\sfamcc00001.dll
2026-07-13 23:06 - 2026-07-13 23:06 - 000158720 _____ () [File not signed] C:\Users\FRPOK\AppData\Local\Temp\sfareca00001.dll
2022-12-29 13:31 - 2015-02-27 15:38 - 000721263 _____ () [File not signed] C:\Windows\SysWOW64\ISCM64.dll
2025-08-22 19:28 - 2025-08-22 19:28 - 000030720 _____ (Adobe Systems Inc.) [File not signed] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\cs_cz\Acrobat Elements\ContextMenuShim64.cze
2026-02-04 16:07 - 2026-02-04 16:07 - 001114624 _____ (Meta Platforms, Inc.) [File not signed] C:\Program Files\Nextcloud\zstd.dll
2026-05-04 15:21 - 2026-05-04 15:21 - 001437696 _____ (Nextcloud GmbH) [File not signed] C:\Program Files\Nextcloud\CfApiShellExtensions.dll
2026-02-06 18:10 - 2026-02-06 18:10 - 000232448 _____ (OpenSC Project) [File not signed] C:\Program Files\Nextcloud\libp11.dll
2026-02-19 18:01 - 2026-02-19 18:01 - 000878592 _____ (The FreeType Project) [File not signed] C:\Program Files\Nextcloud\freetype.dll
2026-02-04 14:34 - 2026-02-04 14:34 - 033110528 _____ (The ICU Project) [File not signed] C:\Program Files\Nextcloud\icudt78.dll
2026-02-04 14:33 - 2026-02-04 14:33 - 003907584 _____ (The ICU Project) [File not signed] C:\Program Files\Nextcloud\icuin78.dll
2026-02-04 14:33 - 2026-02-04 14:33 - 002368512 _____ (The ICU Project) [File not signed] C:\Program Files\Nextcloud\icuuc78.dll
2026-02-04 16:07 - 2026-02-04 16:07 - 000995328 _____ (The libjpeg-turbo Project) [File not signed] C:\Program Files\Nextcloud\jpeg62.dll
2026-02-19 18:28 - 2026-02-19 18:28 - 000059392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\iconengines\qsvgicon.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000035840 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\imageformats\qgif.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000033792 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\imageformats\qico.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000052736 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\imageformats\qjpeg.dll
2026-02-23 16:11 - 2026-02-23 16:11 - 000030208 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\imageformats\qpdf.dll
2026-02-19 18:28 - 2026-02-19 18:28 - 000027136 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\imageformats\qsvg.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000978432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\platforms\qwindows.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\Qt\labs\platform\labsplatformplugin.dll
2026-02-23 16:43 - 2026-02-23 16:43 - 000439808 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\Qt5Compat\GraphicalEffects\private\qtgraphicaleffectsprivateplugin.dll
2026-02-23 16:44 - 2026-02-23 16:44 - 000790016 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\Qt5Compat\GraphicalEffects\qtgraphicaleffectsplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\Basic\impl\qtquickcontrols2basicstyleimplplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\Basic\qtquickcontrols2basicstyleplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 003169792 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\FluentWinUI3\qtquickcontrols2fluentwinui3styleplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\Fusion\impl\qtquickcontrols2fusionstyleimplplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\Fusion\qtquickcontrols2fusionstyleplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\impl\qtquickcontrols2implplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000029184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Controls\qtquickcontrols2plugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Dialogs\qtquickdialogsplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Effects\effectsplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Layouts\qquicklayoutsplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Shapes\qmlshapesplugin.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000018944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Templates\qtquicktemplates2plugin.dll
2026-02-19 18:40 - 2026-02-19 18:40 - 000019456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\qml\QtQuick\Window\quickwindowplugin.dll
2026-02-19 18:17 - 2026-02-19 18:17 - 005724672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Core.dll
2026-02-23 16:43 - 2026-02-23 16:43 - 000383488 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Core5Compat.dll
2026-02-19 18:19 - 2026-02-19 18:19 - 007474688 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Gui.dll
2026-02-19 18:50 - 2026-02-19 18:50 - 000272384 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6LabsPlatform.dll
2026-02-19 18:20 - 2026-02-19 18:20 - 001763840 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Network.dll
2026-02-19 18:20 - 2026-02-19 18:20 - 001963008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6OpenGL.dll
2026-02-23 16:11 - 2026-02-23 16:11 - 005507584 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Pdf.dll
2026-02-19 19:00 - 2026-02-19 19:00 - 000506880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Positioning.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000394752 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6PrintSupport.dll
2026-02-19 18:40 - 2026-02-19 18:40 - 005321728 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Qml.dll
2026-02-19 18:42 - 2026-02-19 18:42 - 000147968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QmlMeta.dll
2026-02-19 18:41 - 2026-02-19 18:41 - 000974848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QmlModels.dll
2026-02-19 18:40 - 2026-02-19 18:40 - 000064512 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QmlWorkerScript.dll
2026-02-19 18:47 - 2026-02-19 18:47 - 006509056 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Quick.dll
2026-02-19 18:50 - 2026-02-19 18:50 - 000088064 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2.dll
2026-02-19 18:51 - 2026-02-19 18:51 - 001766400 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2Basic.dll
2026-02-19 18:51 - 2026-02-19 18:51 - 000050176 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2BasicStyleImpl.dll
2026-02-19 18:50 - 2026-02-19 18:50 - 000177664 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2FluentWinUI3StyleImpl.dll
2026-02-19 18:53 - 2026-02-19 18:53 - 001405952 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2Fusion.dll
2026-02-19 18:51 - 2026-02-19 18:51 - 000149504 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2FusionStyleImpl.dll
2026-02-19 18:50 - 2026-02-19 18:50 - 000282112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickControls2Impl.dll
2026-02-19 18:55 - 2026-02-19 18:55 - 000147456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickDialogs2.dll
2026-02-19 18:55 - 2026-02-19 18:55 - 002859008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickDialogs2QuickImpl.dll
2026-02-19 18:36 - 2026-02-19 18:36 - 000035328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickDialogs2Utils.dll
2026-02-19 18:50 - 2026-02-19 18:50 - 000419328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickEffects.dll
2026-02-19 18:48 - 2026-02-19 18:48 - 000294912 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickLayouts.dll
2026-02-19 18:48 - 2026-02-19 18:48 - 000331776 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickShapes.dll
2026-02-19 18:49 - 2026-02-19 18:49 - 001987072 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickTemplates2.dll
2026-02-19 18:57 - 2026-02-19 18:57 - 000121344 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6QuickWidgets.dll
2026-02-19 18:27 - 2026-02-19 18:27 - 004055040 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6ShaderTools.dll
2026-02-19 18:20 - 2026-02-19 18:20 - 000300544 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Sql.dll
2026-02-19 18:28 - 2026-02-19 18:28 - 000620032 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Svg.dll
2026-02-23 16:05 - 2026-02-23 16:05 - 201931776 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6WebEngineCore.dll
2026-02-23 16:05 - 2026-02-23 16:05 - 000176128 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6WebEngineWidgets.dll
2026-02-19 19:01 - 2026-02-19 19:01 - 000241152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6WebChannel.dll
2026-02-19 19:01 - 2026-02-19 19:01 - 000206848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6WebSockets.dll
2026-02-19 18:22 - 2026-02-19 18:22 - 006564864 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Widgets.dll
2026-02-19 18:24 - 2026-02-19 18:24 - 000147968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\Qt6Xml.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000208896 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\styles\qmodernwindowsstyle.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000091136 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\tls\qcertonlybackend.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000232960 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\tls\qopensslbackend.dll
2026-02-19 18:25 - 2026-02-19 18:25 - 000250880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Nextcloud\tls\qschannelbackend.dll
2026-02-04 14:29 - 2026-02-04 14:29 - 000154112 _____ (The Tukaani Project <hxxp://tukaani.org/>) [File not signed] C:\Program Files\Nextcloud\liblzma.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Dreamweaver 2021.lnk:9E737BDB02 [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2023.lnk:4A503CCB3B [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk:B96E9B8455 [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk:159ADC9AA1 [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk:60EC9648C0 [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk:5465085A2F [2594]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk:1DC1525F34 [2594]
AlternateDataStreams: C:\Users\FRPOK\Desktop\Adobe Photoshop 2023.lnk:4A503CCB3B [2594]
AlternateDataStreams: C:\Users\FRPOK\Desktop\JRT (1).exe:MBAM.Zone.Identifier [218]
AlternateDataStreams: C:\Users\FRPOK\Downloads\ccsetup_online_setup.exe:MBAM.Zone.Identifier [183]
AlternateDataStreams: C:\Users\FRPOK\Downloads\CrystalDiskInfo9_9_0.exe:MBAM.Zone.Identifier [251]
AlternateDataStreams: C:\Users\FRPOK\Downloads\RogueKiller_setup_win10.exe:MBAM.Zone.Identifier [191]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
==================== Internet Explorer (Whitelisted) =============
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-06-24] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: iSkysoft iMedia Converter Deluxe 5.1.0 -> {AEAF002F-E6D8-4A21-ABD3-2B309B79A6CE} -> C:\ProgramData\iSkysoft\Video Converter Ultimate\WSBrowserAppMgr.dll [2016-08-18] (Shenzhen Yi Xing Investment Co., Ltd. -> Wondershare)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-10-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-10-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-10-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-10-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: WSISVCUchrome - {78A543EB-3A61-4ED3 - No File
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\sharepoint.com -> hxxps://skolaradostinno-files.sharepoint.com
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2025-02-21 12:45 - 2026-07-13 17:52 - 000000841 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 localhost
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.0.10 - 192.168.0.1
Windows Firewall is enabled.
Network Binding:
=============
Wi-Fi: Intel(R) Wireless-AC 9560 160MHz -> Netwtw08.sys
Ethernet 2: VirtualBox Host-Only Ethernet Adapter -> VBoxNetAdp6.sys
Ethernet: Intel(R) Ethernet Connection (6) I219-V -> e1d.sys
Tailscale: Tailscale Tunnel -> wintun.sys
oracle_VBoxNetLwf: VirtualBox NDIS6 Bridged Networking Driver
INSECURE_NPCAP: Npcap Packet Driver (NPCAP)
-
czTANIScz
- Level 1

- Příspěvky: 50
- Registrován: 01 dub 2022 15:55
Re: Prosím o kontrolu - IntelNUC se seká
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "MTPW"
HKLM\...\StartupApproved\Run: => "Autodesk Access"
HKLM\...\StartupApproved\Run: => "Autodesk Access Service"
HKLM\...\StartupApproved\Run: => "PDF24"
HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller"
HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App"
HKLM\...\StartupApproved\Run32: => "DelaypluginInstall"
HKLM\...\StartupApproved\Run32: => "iSkysoft Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "Adobe CCXProcess"
HKLM\...\StartupApproved\Run32: => "RadminVPN"
HKLM\...\StartupApproved\Run32: => "CND-SGM5 Gaming Mouse Driver"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\StartupFolder: => "GenuineService.lnk"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\StartupFolder: => "Outlook.lnk"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\StartupFolder: => "Arduino Create Agent.lnk"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "GoogleDriveFS"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_779677589740C4166E4BD37CCE8C6B47"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_CCE918ECEBFCE4EC3307D7FAF4E51241"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "Fing"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_44124267D743D3E1FA303E3CD7630F8B"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_2BA46B42B643741941584529D7004A14"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_E73FDF75316ED90E0DC315221934744F"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_692093BC5B280CED72B2A1CFF5F77C51"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_29E263A648AA766D2ECF1A5749C1D4C1"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_4A5745CF081A360D10C7CDA0806C92E1"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_E92BE86E9DC68A3BE3922F8EAE67B408"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_44FD37A2C93862AB49D792EB6FDDA371"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_13756561A018933AC055BC5C04FF655D"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_7D09001EF022BA877FBEBF9374EAB627"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_E7263B9C628174B47FE0A5F9959DDF33"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_1EDDFFB76A334B93425B797DF175A9BA"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_99E41B0677A63683BC3F484A924680F5"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_8C8D6B0B2AFADF2C4ADBDD6225ECC720"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_00549A6A050DC6FE66CA2922ADF0314C"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_756C40E1D232B504D1D92DAB56A80720"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_2D9722D1BE53B0959B261252A1C232A4"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_70F5549BB59B4151E5973CB6BB2FD6BC"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_D3936E95DCA3FB6C49F281A836BCF00F"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{CBBF044A-11E7-46EF-9246-C5037FD9A032}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{9069D01F-0994-4952-B040-4003E360AEA8}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{230A70D7-277C-4E95-A8FD-114CFE9ADF25}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [UDP Query User{6DC0F7CA-F567-4278-AB64-AF8742025144}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [TCP Query User{7E2C5CAB-A89D-4B9F-A7AF-30AE948E0002}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [UDP Query User{22B6327D-183E-4D1D-AB51-5E4AB3A355B1}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [TCP Query User{BAC279E2-5C49-47B7-B8A2-375AC858946D}C:\program files\bambu studio\bambu-studio.exe] => (Allow) C:\program files\bambu studio\bambu-studio.exe (Shanghai Lunkuo Technology Co., Ltd -> Bambu Research)
FirewallRules: [UDP Query User{2539FFD2-027E-4156-9C66-1317A9505904}C:\program files\bambu studio\bambu-studio.exe] => (Allow) C:\program files\bambu studio\bambu-studio.exe (Shanghai Lunkuo Technology Co., Ltd -> Bambu Research)
FirewallRules: [{36B56346-3CF3-4196-8232-310E42E41805}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3A486A9E-F772-4D23-A235-CAA9C688F726}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FB945453-1B7B-4AEB-8451-8BB8DA567E49}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [TCP Query User{C50D1776-4FD7-47D1-B39B-DE83CEBABC8E}C:\users\frpok\downloads\iperf-3.20-win64\iperf3.exe] => (Allow) C:\users\frpok\downloads\iperf-3.20-win64\iperf3.exe () [File not signed]
FirewallRules: [UDP Query User{011A919D-41C3-4BC5-B667-B7B55A70B449}C:\users\frpok\downloads\iperf-3.20-win64\iperf3.exe] => (Allow) C:\users\frpok\downloads\iperf-3.20-win64\iperf3.exe () [File not signed]
FirewallRules: [TCP Query User{0C3D997C-E2DD-4E7D-A7DE-F00EA90E3108}C:\users\frpok\appdata\local\programs\trezor suite\trezor suite.exe] => (Allow) C:\users\frpok\appdata\local\programs\trezor suite\trezor suite.exe (Trezor Company s.r.o. -> SatoshiLabs)
FirewallRules: [UDP Query User{2662A370-D730-4031-96AB-9A1BF9235BC7}C:\users\frpok\appdata\local\programs\trezor suite\trezor suite.exe] => (Allow) C:\users\frpok\appdata\local\programs\trezor suite\trezor suite.exe (Trezor Company s.r.o. -> SatoshiLabs)
FirewallRules: [TCP Query User{5D667A7B-C5D7-4E9F-828C-576CA117AEE3}C:\program files (x86)\tp-link\tp-link plc utility\plcu.exe] => (Allow) C:\program files (x86)\tp-link\tp-link plc utility\plcu.exe (TP-Link Corporation Limited.) [File not signed]
FirewallRules: [UDP Query User{CC9ACE2F-84A8-40BD-8564-EBD28E611108}C:\program files (x86)\tp-link\tp-link plc utility\plcu.exe] => (Allow) C:\program files (x86)\tp-link\tp-link plc utility\plcu.exe (TP-Link Corporation Limited.) [File not signed]
FirewallRules: [TCP Query User{9E1158B5-A9B1-4B40-B6CD-A69DEC346992}C:\program files (x86)\platform-tools\adb.exe] => (Allow) C:\program files (x86)\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [UDP Query User{259477F8-D7AF-48F5-8017-12708D23AABA}C:\program files (x86)\platform-tools\adb.exe] => (Allow) C:\program files (x86)\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [TCP Query User{CD9C611A-B164-48AD-B6CD-004802C1FAB8}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{4486DCA9-29E7-4FCF-9DB5-7FB7E77EFB07}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{D5B19DAC-464C-40DD-AC6F-0D1ABF062381}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{A437C8CE-847B-4D85-BDA9-337C31AE6B97}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{F5F54ECB-31A8-442A-BAE4-004C749D768D}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{37F222A9-CDB3-4A7C-9BD1-BEF85715EBF8}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{9BFAE481-BAC6-46FF-8523-73586535A2C5}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{D4332879-C355-402D-8A93-31B08DE138DD}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{B6E07CA3-9C09-492D-BA09-96270922FFC2}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_26149.701.4759.8860_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{015ECCF6-B2FA-4EF9-91B7-6EF4018600D0}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_26149.701.4759.8860_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1DE17745-0B32-4D48-AC3B-13056A373A38}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B3BFA467-7FB8-4475-8DC7-976974FA7D7F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{71E8F3D3-CCCC-4824-A5CC-5B9BFD1EB2DC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{329172FD-0A52-4F66-9FD3-897DCA2B8D78}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{A77C62FF-D30D-4586-90AB-8AE2A89F64AF}C:\program files\e2esoft\ivcam\ivcam.exe] => (Allow) C:\program files\e2esoft\ivcam\ivcam.exe (Shanghai Yitu Information Technology Co., Ltd. -> )
FirewallRules: [UDP Query User{B43C0F9A-D2C4-4038-87E5-5BA876FDC690}C:\program files\e2esoft\ivcam\ivcam.exe] => (Allow) C:\program files\e2esoft\ivcam\ivcam.exe (Shanghai Yitu Information Technology Co., Ltd. -> )
FirewallRules: [{2D915720-7573-4894-BB6B-9B4DBABA5305}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{2F31CF0C-E9ED-4198-B45A-6926547261B8}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{460CC54B-6C95-41D5-850E-AA227016C6B6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{844AE3FC-EC21-428A-BA84-13696B2D2A7F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1BEF79C1-804A-40DE-A233-D6AD50AE99FB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{668D01D6-C982-474D-9D96-3939952FBC35}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{761AAA01-9C5E-4F7C-8ED5-C6DAA40F8A51}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CAEF6E4B-E992-4367-8693-34092662DF94}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8CFF1BE1-81AF-4F7A-81FF-ABB350C4B994}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A811471E-B913-4BEB-9398-138C9070EE64}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4BE97044-8F64-44FA-AA34-48217B27C1B4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{04652D78-DB15-4DB2-9B2B-F5288200B708}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E551D016-79E3-4160-8A61-6764D25C03B9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{611C9AE7-463F-4D4E-83A8-3C2A95AE247F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0236FAD6-0E32-448E-AD64-C1720BDACBCC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7B80A3D6-3DE6-4EF1-84F0-5A4A7B565E6F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.33011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{654A0813-E1B3-4083-9CC2-70456DBE15C7}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.33011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9D92FA7B-6145-404D-A5D5-691A827E3760}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.33011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E71B800A-D123-451C-8E09-DDB428641379}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.33011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{AEF97308-7E43-4C46-B3C1-5EB72988E3F0}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{0E5533B8-5B46-4F87-82EA-ADE5BCEC7F43}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{15F7E879-6A26-4FBE-821B-D9CFBA93FDC6}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{5F764EFB-F4B4-4F6D-B5E1-BA9FC8541803}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{5C9227B5-B09B-4349-A9D0-E3FDF991B83E}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{1C26C7D0-5352-43B8-8CA4-DBFEEDB1DBF8}] => (Allow) C:\Program Files\Tailscale\tailscaled.exe (Tailscale Inc. -> Tailscale Inc.)
==================== Restore Points =========================
30-06-2026 21:16:11 Installed Nextcloud
01-07-2026 22:12:15 Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34433
10-07-2026 14:54:11 Naplánovaný kontrolní bod
11-07-2026 19:26:22 Installed Nextcloud
12-07-2026 23:11:18 JRT Pre-Junkware Removal
==================== Faulty Device Manager Devices ============
Name: Zařízení PCI
Description: Zařízení PCI
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Základní systémové zařízení
Description: Základní systémové zařízení
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Řadič PCI pro získávání dat a zpracování signálu
Description: Řadič PCI pro získávání dat a zpracování signálu
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Řadič sběrnice SM
Description: Řadič sběrnice SM
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Detection Verification
Description: Detection Verification
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (07/13/2026 05:51:56 PM) (Source: Application Error) (EventID: 1000) (User: FRPOK)
Description: Název chybující aplikace: DaS_21.exe, verze: 2.1.0.4, časové razítko: 0x540c90b2
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x00007ff99f7f53fa
ID chybujícího procesu: 0x0xb14
Čas spuštění chybující aplikace: 0x0x1dd12df85741121
Cesta k chybující aplikaci: C:\Users\FRPOK\AppData\Local\Temp\DaS_21.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: 8389d182-7c17-44a1-ad3c-ef145e337c23
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (07/13/2026 05:51:56 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: DaS_21.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.NullReferenceException
na DriverAndServicesOut.GetProcess.GetPathName(System.String)
na DriverAndServicesOut.GetProcess.GetAllServices(System.String)
na DriverAndServicesOut.Program.Main(System.String[])
Error: (07/13/2026 05:51:53 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x8007001f, Zařízení připojené k systému nefunguje..
Operace:
Spouštění asynchronní operace
Kontext:
Aktuální stav: DoSnapshotSet
Error: (07/13/2026 05:51:40 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddWin32ServiceFiles: Unable to back up image of service CCleaner 7 since QueryServiceConfig API failed
System Error:
Systém nemůže nalézt uvedený soubor..
Error: (07/12/2026 08:42:45 AM) (Source: Application Error) (EventID: 1000) (User: FRPOK)
Description: Název chybující aplikace: RiotClientServices.exe, verze: 67.0.13.192, časové razítko: 0x64b980d7
Název chybujícího modulu: RiotClientServices.exe, verze: 67.0.13.192, časové razítko: 0x64b980d7
Kód výjimky: 0xc0000409
Posun chyby: 0x005c9549
ID chybujícího procesu: 0x0x3208
Čas spuštění chybující aplikace: 0x0x1dd11c9a44d82a4
Cesta k chybující aplikaci: C:\Riot Games\Riot Client\RiotClientServices.exe
Cesta k chybujícímu modulu: C:\Riot Games\Riot Client\RiotClientServices.exe
ID zprávy: 36fd1fbc-b507-40e7-9e3b-39682e4f871e
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (07/11/2026 07:33:47 PM) (Source: Application Error) (EventID: 1000) (User: FRPOK)
Description: Název chybující aplikace: svchost.exe_WpnUserService, verze: 10.0.22621.1, časové razítko: 0x6dc5c2a5
Název chybujícího modulu: NotificationController.dll, verze: 10.0.22621.4249, časové razítko: 0xb72efa16
Kód výjimky: 0xc0000409
Posun chyby: 0x0000000000087342
ID chybujícího procesu: 0x0x1410
Čas spuštění chybující aplikace: 0x0x1dd115a0570291a
Cesta k chybující aplikaci: C:\Windows\system32\svchost.exe
Cesta k chybujícímu modulu: C:\Windows\System32\NotificationController.dll
ID zprávy: 3e9f1c5a-b345-41fa-8d1c-9c5d8f20ce10
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (06/28/2026 10:47:04 PM) (Source: Application Error) (EventID: 1000) (User: FRPOK)
Description: Název chybující aplikace: iVCam.exe, verze: 7.1.0.1545, časové razítko: 0x63ef46ae
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000001f54
ID chybujícího procesu: 0x0x4524
Čas spuštění chybující aplikace: 0x0x1dd0739f9cf67a3
Cesta k chybující aplikaci: C:\Program Files\e2eSoft\iVCam\iVCam.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: 176f8da0-9f49-4383-8486-67ecbdd46c03
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (06/28/2026 09:07:08 PM) (Source: Application Error) (EventID: 1000) (User: FRPOK)
Description: Název chybující aplikace: iVCam.exe, verze: 7.1.0.1545, časové razítko: 0x63ef46ae
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000005e92
ID chybujícího procesu: 0x0x4434
Čas spuštění chybující aplikace: 0x0x1dd0730a0322f83
Cesta k chybující aplikaci: C:\Program Files\e2eSoft\iVCam\iVCam.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: 61c9c303-9167-4eb1-a002-95ce5c6a18eb
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
System errors:
=============
Error: (07/13/2026 07:17:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (07/13/2026 07:17:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (60000 ms).
Error: (07/13/2026 07:16:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Avast Browser Update (avast) neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.
Error: (07/13/2026 06:22:50 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (07/13/2026 06:22:50 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (07/13/2026 06:22:50 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (07/13/2026 06:22:49 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (07/13/2026 06:22:49 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Windows Defender:
================
TimeCreated : 13.07.2026 23:47:48
(Message : Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jinĂ˝ potenciálnÄ› nežádoucĂ software) (.) (Dalšà informace:) (https://go.microsoft.com/fwlink/?linkid ... &enterpris) (e=0) (Název: PUADlManager:Win32/OfferCore) (ID: 311999) (ZávaĹľnost: NĂzkĂ©) (Kategorie: PotenciálnÄ› nežádoucĂ software) (Cesta: file:_C:\Users\FRPOK\Downloads\speedfan-4.53-installer_2PFp-g8.exe) (PĹŻvod detekce: MĂstnĂ poÄŤĂtaÄŤ) (Typ detekce: KonkrĂ©tnĂ) (Zdroj detekce: Ochrana v reálnĂ©m ÄŤase) (UĹľivatel: FRPOK\FRPOK) (Název procesu: C:\Users\FRPOK\Desktop\FRST64.exe) (Verze bezpeÄŤnostnĂch informacĂ: AV: 1.455.125.0, AS: 1.455.125.0, NIS: 1.455.125.0) (Verze modulu: AM: 1.1.26060.3008, NIS: 1.1.26060.3008)
TimeCreated : 13.07.2026 23:03:23
(Message : Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jinĂ˝ potenciálnÄ› nežádoucĂ software) (.) (Dalšà informace:) (https://go.microsoft.com/fwlink/?linkid ... &enterpris) (e=0) (Název: PUADlManager:Win32/OfferCore) (ID: 311999) (ZávaĹľnost: NĂzkĂ©) (Kategorie: PotenciálnÄ› nežádoucĂ software) (Cesta: file:_C:\Users\FRPOK\Downloads\speedfan-4.53-installer_2PFp-g8.exe) (PĹŻvod detekce: MĂstnĂ poÄŤĂtaÄŤ) (Typ detekce: KonkrĂ©tnĂ) (Zdroj detekce: Ochrana v reálnĂ©m ÄŤase) (UĹľivatel: FRPOK\FRPOK) (Název procesu: C:\Windows\explorer.exe) (Verze bezpeÄŤnostnĂch informacĂ: AV: 1.455.122.0, AS: 1.455.122.0, NIS: 1.455.122.0) (Verze modulu: AM: 1.1.26060.3008, NIS: 1.1.26060.3008)
TimeCreated : 11.07.2026 18:54:10
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎð ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (4D69CB63-47F1-4731-8172-FBF3940D85CC}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вЅċђÎδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 10.07.2026 18:54:07
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎð ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (083F85EF-1D32-43A1-94BF-05441369E2B1}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вЅċђÎδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 09.07.2026 18:54:04
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎð ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (57F7C5A5-E4C9-4666-AE60-303B145F3B02}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вЅċђÎδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 07.07.2026 18:53:58
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎð ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (ABCE4D67-8DA5-4E90-8DD0-E0AD8A3C62C7}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ тĥé ľäšτ 7 đâýš)
TimeCreated : 06.07.2026 18:54:00
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎð ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (5033D544-1FDD-4D18-A1F8-64CAA7A2961E}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ тĥé ľäšτ 7 đâýš)
TimeCreated : 01.07.2026 17:09:51
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎð ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (0F93BE69-2A33-47E6-A4D0-49534D13B188}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ тĥé ľäšτ 7 đâýš)
CodeIntegrity:
===============
Date: 2026-07-13 23:48:32
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
Date: 2026-07-13 23:36:39
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: Intel Corp. BECFL357.86A.0090.2022.0916.1942 09/16/2022
Motherboard: Intel Corporation NUC8BEB
Processor: Intel(R) Core(TM) i5-8259U CPU @ 2.30GHz
Percentage of memory in use: 41%
Total physical RAM: 16247.03 MB
Available physical RAM: 9570.27 MB
Total Virtual: 17271.03 MB
Available Virtual: 10607.07 MB
==================== Drives ================================
Drive c: (SYSTEM) (Fixed) (Total:464.97 GB) (Free:137.87 GB) (Model: WDC WDS500G2B0A-00SM50) NTFS
Drive d: (DATA) (Fixed) (Total:1863.02 GB) (Free:779.17 GB) (Model: KINGSTON SNV2S2000G) NTFS
Drive y: (config) (Network) (Total:233.99 GB) (Free:180.66 GB) (Model: WDC WDS500G2B0A-00SM50) NTFS
Drive z: () (Network) (Total:0 GB) (Free:0 GB) (Model: WDC WDS500G2B0A-00SM50)
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 51EC97F6)
Partition 1: (Active) - (Size=100 MB) - (Type=17)
Partition 2: (Not Active) - (Size=465 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=708 MB) - (Type=17)
==========================================================
Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "MTPW"
HKLM\...\StartupApproved\Run: => "Autodesk Access"
HKLM\...\StartupApproved\Run: => "Autodesk Access Service"
HKLM\...\StartupApproved\Run: => "PDF24"
HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller"
HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App"
HKLM\...\StartupApproved\Run32: => "DelaypluginInstall"
HKLM\...\StartupApproved\Run32: => "iSkysoft Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "Adobe CCXProcess"
HKLM\...\StartupApproved\Run32: => "RadminVPN"
HKLM\...\StartupApproved\Run32: => "CND-SGM5 Gaming Mouse Driver"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\StartupFolder: => "GenuineService.lnk"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\StartupFolder: => "Outlook.lnk"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\StartupFolder: => "Arduino Create Agent.lnk"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "GoogleDriveFS"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_779677589740C4166E4BD37CCE8C6B47"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_CCE918ECEBFCE4EC3307D7FAF4E51241"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "Fing"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_44124267D743D3E1FA303E3CD7630F8B"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_2BA46B42B643741941584529D7004A14"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_E73FDF75316ED90E0DC315221934744F"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_692093BC5B280CED72B2A1CFF5F77C51"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_29E263A648AA766D2ECF1A5749C1D4C1"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_4A5745CF081A360D10C7CDA0806C92E1"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_E92BE86E9DC68A3BE3922F8EAE67B408"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_44FD37A2C93862AB49D792EB6FDDA371"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_13756561A018933AC055BC5C04FF655D"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_7D09001EF022BA877FBEBF9374EAB627"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_E7263B9C628174B47FE0A5F9959DDF33"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_1EDDFFB76A334B93425B797DF175A9BA"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_99E41B0677A63683BC3F484A924680F5"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_8C8D6B0B2AFADF2C4ADBDD6225ECC720"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_00549A6A050DC6FE66CA2922ADF0314C"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_756C40E1D232B504D1D92DAB56A80720"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_2D9722D1BE53B0959B261252A1C232A4"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_70F5549BB59B4151E5973CB6BB2FD6BC"
HKU\S-1-5-21-1460461504-3284535065-2975757879-1000\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_D3936E95DCA3FB6C49F281A836BCF00F"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{CBBF044A-11E7-46EF-9246-C5037FD9A032}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{9069D01F-0994-4952-B040-4003E360AEA8}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{230A70D7-277C-4E95-A8FD-114CFE9ADF25}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [UDP Query User{6DC0F7CA-F567-4278-AB64-AF8742025144}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [TCP Query User{7E2C5CAB-A89D-4B9F-A7AF-30AE948E0002}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [UDP Query User{22B6327D-183E-4D1D-AB51-5E4AB3A355B1}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [TCP Query User{BAC279E2-5C49-47B7-B8A2-375AC858946D}C:\program files\bambu studio\bambu-studio.exe] => (Allow) C:\program files\bambu studio\bambu-studio.exe (Shanghai Lunkuo Technology Co., Ltd -> Bambu Research)
FirewallRules: [UDP Query User{2539FFD2-027E-4156-9C66-1317A9505904}C:\program files\bambu studio\bambu-studio.exe] => (Allow) C:\program files\bambu studio\bambu-studio.exe (Shanghai Lunkuo Technology Co., Ltd -> Bambu Research)
FirewallRules: [{36B56346-3CF3-4196-8232-310E42E41805}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3A486A9E-F772-4D23-A235-CAA9C688F726}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FB945453-1B7B-4AEB-8451-8BB8DA567E49}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [TCP Query User{C50D1776-4FD7-47D1-B39B-DE83CEBABC8E}C:\users\frpok\downloads\iperf-3.20-win64\iperf3.exe] => (Allow) C:\users\frpok\downloads\iperf-3.20-win64\iperf3.exe () [File not signed]
FirewallRules: [UDP Query User{011A919D-41C3-4BC5-B667-B7B55A70B449}C:\users\frpok\downloads\iperf-3.20-win64\iperf3.exe] => (Allow) C:\users\frpok\downloads\iperf-3.20-win64\iperf3.exe () [File not signed]
FirewallRules: [TCP Query User{0C3D997C-E2DD-4E7D-A7DE-F00EA90E3108}C:\users\frpok\appdata\local\programs\trezor suite\trezor suite.exe] => (Allow) C:\users\frpok\appdata\local\programs\trezor suite\trezor suite.exe (Trezor Company s.r.o. -> SatoshiLabs)
FirewallRules: [UDP Query User{2662A370-D730-4031-96AB-9A1BF9235BC7}C:\users\frpok\appdata\local\programs\trezor suite\trezor suite.exe] => (Allow) C:\users\frpok\appdata\local\programs\trezor suite\trezor suite.exe (Trezor Company s.r.o. -> SatoshiLabs)
FirewallRules: [TCP Query User{5D667A7B-C5D7-4E9F-828C-576CA117AEE3}C:\program files (x86)\tp-link\tp-link plc utility\plcu.exe] => (Allow) C:\program files (x86)\tp-link\tp-link plc utility\plcu.exe (TP-Link Corporation Limited.) [File not signed]
FirewallRules: [UDP Query User{CC9ACE2F-84A8-40BD-8564-EBD28E611108}C:\program files (x86)\tp-link\tp-link plc utility\plcu.exe] => (Allow) C:\program files (x86)\tp-link\tp-link plc utility\plcu.exe (TP-Link Corporation Limited.) [File not signed]
FirewallRules: [TCP Query User{9E1158B5-A9B1-4B40-B6CD-A69DEC346992}C:\program files (x86)\platform-tools\adb.exe] => (Allow) C:\program files (x86)\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [UDP Query User{259477F8-D7AF-48F5-8017-12708D23AABA}C:\program files (x86)\platform-tools\adb.exe] => (Allow) C:\program files (x86)\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [TCP Query User{CD9C611A-B164-48AD-B6CD-004802C1FAB8}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{4486DCA9-29E7-4FCF-9DB5-7FB7E77EFB07}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{D5B19DAC-464C-40DD-AC6F-0D1ABF062381}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{A437C8CE-847B-4D85-BDA9-337C31AE6B97}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{F5F54ECB-31A8-442A-BAE4-004C749D768D}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{37F222A9-CDB3-4A7C-9BD1-BEF85715EBF8}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{9BFAE481-BAC6-46FF-8523-73586535A2C5}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{D4332879-C355-402D-8A93-31B08DE138DD}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{B6E07CA3-9C09-492D-BA09-96270922FFC2}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_26149.701.4759.8860_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{015ECCF6-B2FA-4EF9-91B7-6EF4018600D0}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_26149.701.4759.8860_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1DE17745-0B32-4D48-AC3B-13056A373A38}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B3BFA467-7FB8-4475-8DC7-976974FA7D7F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{71E8F3D3-CCCC-4824-A5CC-5B9BFD1EB2DC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{329172FD-0A52-4F66-9FD3-897DCA2B8D78}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{A77C62FF-D30D-4586-90AB-8AE2A89F64AF}C:\program files\e2esoft\ivcam\ivcam.exe] => (Allow) C:\program files\e2esoft\ivcam\ivcam.exe (Shanghai Yitu Information Technology Co., Ltd. -> )
FirewallRules: [UDP Query User{B43C0F9A-D2C4-4038-87E5-5BA876FDC690}C:\program files\e2esoft\ivcam\ivcam.exe] => (Allow) C:\program files\e2esoft\ivcam\ivcam.exe (Shanghai Yitu Information Technology Co., Ltd. -> )
FirewallRules: [{2D915720-7573-4894-BB6B-9B4DBABA5305}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{2F31CF0C-E9ED-4198-B45A-6926547261B8}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{460CC54B-6C95-41D5-850E-AA227016C6B6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{844AE3FC-EC21-428A-BA84-13696B2D2A7F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1BEF79C1-804A-40DE-A233-D6AD50AE99FB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{668D01D6-C982-474D-9D96-3939952FBC35}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{761AAA01-9C5E-4F7C-8ED5-C6DAA40F8A51}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CAEF6E4B-E992-4367-8693-34092662DF94}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8CFF1BE1-81AF-4F7A-81FF-ABB350C4B994}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A811471E-B913-4BEB-9398-138C9070EE64}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4BE97044-8F64-44FA-AA34-48217B27C1B4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{04652D78-DB15-4DB2-9B2B-F5288200B708}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E551D016-79E3-4160-8A61-6764D25C03B9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{611C9AE7-463F-4D4E-83A8-3C2A95AE247F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0236FAD6-0E32-448E-AD64-C1720BDACBCC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.293.667.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7B80A3D6-3DE6-4EF1-84F0-5A4A7B565E6F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.33011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{654A0813-E1B3-4083-9CC2-70456DBE15C7}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.33011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9D92FA7B-6145-404D-A5D5-691A827E3760}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.33011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E71B800A-D123-451C-8E09-DDB428641379}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2607.33011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{AEF97308-7E43-4C46-B3C1-5EB72988E3F0}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{0E5533B8-5B46-4F87-82EA-ADE5BCEC7F43}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{15F7E879-6A26-4FBE-821B-D9CFBA93FDC6}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{5F764EFB-F4B4-4F6D-B5E1-BA9FC8541803}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{5C9227B5-B09B-4349-A9D0-E3FDF991B83E}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{1C26C7D0-5352-43B8-8CA4-DBFEEDB1DBF8}] => (Allow) C:\Program Files\Tailscale\tailscaled.exe (Tailscale Inc. -> Tailscale Inc.)
==================== Restore Points =========================
30-06-2026 21:16:11 Installed Nextcloud
01-07-2026 22:12:15 Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34433
10-07-2026 14:54:11 Naplánovaný kontrolní bod
11-07-2026 19:26:22 Installed Nextcloud
12-07-2026 23:11:18 JRT Pre-Junkware Removal
==================== Faulty Device Manager Devices ============
Name: Zařízení PCI
Description: Zařízení PCI
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Základní systémové zařízení
Description: Základní systémové zařízení
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Řadič PCI pro získávání dat a zpracování signálu
Description: Řadič PCI pro získávání dat a zpracování signálu
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Řadič sběrnice SM
Description: Řadič sběrnice SM
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Detection Verification
Description: Detection Verification
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (07/13/2026 05:51:56 PM) (Source: Application Error) (EventID: 1000) (User: FRPOK)
Description: Název chybující aplikace: DaS_21.exe, verze: 2.1.0.4, časové razítko: 0x540c90b2
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x00007ff99f7f53fa
ID chybujícího procesu: 0x0xb14
Čas spuštění chybující aplikace: 0x0x1dd12df85741121
Cesta k chybující aplikaci: C:\Users\FRPOK\AppData\Local\Temp\DaS_21.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: 8389d182-7c17-44a1-ad3c-ef145e337c23
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (07/13/2026 05:51:56 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: DaS_21.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.NullReferenceException
na DriverAndServicesOut.GetProcess.GetPathName(System.String)
na DriverAndServicesOut.GetProcess.GetAllServices(System.String)
na DriverAndServicesOut.Program.Main(System.String[])
Error: (07/13/2026 05:51:53 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x8007001f, Zařízení připojené k systému nefunguje..
Operace:
Spouštění asynchronní operace
Kontext:
Aktuální stav: DoSnapshotSet
Error: (07/13/2026 05:51:40 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddWin32ServiceFiles: Unable to back up image of service CCleaner 7 since QueryServiceConfig API failed
System Error:
Systém nemůže nalézt uvedený soubor..
Error: (07/12/2026 08:42:45 AM) (Source: Application Error) (EventID: 1000) (User: FRPOK)
Description: Název chybující aplikace: RiotClientServices.exe, verze: 67.0.13.192, časové razítko: 0x64b980d7
Název chybujícího modulu: RiotClientServices.exe, verze: 67.0.13.192, časové razítko: 0x64b980d7
Kód výjimky: 0xc0000409
Posun chyby: 0x005c9549
ID chybujícího procesu: 0x0x3208
Čas spuštění chybující aplikace: 0x0x1dd11c9a44d82a4
Cesta k chybující aplikaci: C:\Riot Games\Riot Client\RiotClientServices.exe
Cesta k chybujícímu modulu: C:\Riot Games\Riot Client\RiotClientServices.exe
ID zprávy: 36fd1fbc-b507-40e7-9e3b-39682e4f871e
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (07/11/2026 07:33:47 PM) (Source: Application Error) (EventID: 1000) (User: FRPOK)
Description: Název chybující aplikace: svchost.exe_WpnUserService, verze: 10.0.22621.1, časové razítko: 0x6dc5c2a5
Název chybujícího modulu: NotificationController.dll, verze: 10.0.22621.4249, časové razítko: 0xb72efa16
Kód výjimky: 0xc0000409
Posun chyby: 0x0000000000087342
ID chybujícího procesu: 0x0x1410
Čas spuštění chybující aplikace: 0x0x1dd115a0570291a
Cesta k chybující aplikaci: C:\Windows\system32\svchost.exe
Cesta k chybujícímu modulu: C:\Windows\System32\NotificationController.dll
ID zprávy: 3e9f1c5a-b345-41fa-8d1c-9c5d8f20ce10
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (06/28/2026 10:47:04 PM) (Source: Application Error) (EventID: 1000) (User: FRPOK)
Description: Název chybující aplikace: iVCam.exe, verze: 7.1.0.1545, časové razítko: 0x63ef46ae
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000001f54
ID chybujícího procesu: 0x0x4524
Čas spuštění chybující aplikace: 0x0x1dd0739f9cf67a3
Cesta k chybující aplikaci: C:\Program Files\e2eSoft\iVCam\iVCam.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: 176f8da0-9f49-4383-8486-67ecbdd46c03
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (06/28/2026 09:07:08 PM) (Source: Application Error) (EventID: 1000) (User: FRPOK)
Description: Název chybující aplikace: iVCam.exe, verze: 7.1.0.1545, časové razítko: 0x63ef46ae
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000005e92
ID chybujícího procesu: 0x0x4434
Čas spuštění chybující aplikace: 0x0x1dd0730a0322f83
Cesta k chybující aplikaci: C:\Program Files\e2eSoft\iVCam\iVCam.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: 61c9c303-9167-4eb1-a002-95ce5c6a18eb
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
System errors:
=============
Error: (07/13/2026 07:17:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (07/13/2026 07:17:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (60000 ms).
Error: (07/13/2026 07:16:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Avast Browser Update (avast) neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.
Error: (07/13/2026 06:22:50 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (07/13/2026 06:22:50 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (07/13/2026 06:22:50 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (07/13/2026 06:22:49 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (07/13/2026 06:22:49 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Windows Defender:
================
TimeCreated : 13.07.2026 23:47:48
(Message : Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jinĂ˝ potenciálnÄ› nežádoucĂ software) (.) (Dalšà informace:) (https://go.microsoft.com/fwlink/?linkid ... &enterpris) (e=0) (Název: PUADlManager:Win32/OfferCore) (ID: 311999) (ZávaĹľnost: NĂzkĂ©) (Kategorie: PotenciálnÄ› nežádoucĂ software) (Cesta: file:_C:\Users\FRPOK\Downloads\speedfan-4.53-installer_2PFp-g8.exe) (PĹŻvod detekce: MĂstnĂ poÄŤĂtaÄŤ) (Typ detekce: KonkrĂ©tnĂ) (Zdroj detekce: Ochrana v reálnĂ©m ÄŤase) (UĹľivatel: FRPOK\FRPOK) (Název procesu: C:\Users\FRPOK\Desktop\FRST64.exe) (Verze bezpeÄŤnostnĂch informacĂ: AV: 1.455.125.0, AS: 1.455.125.0, NIS: 1.455.125.0) (Verze modulu: AM: 1.1.26060.3008, NIS: 1.1.26060.3008)
TimeCreated : 13.07.2026 23:03:23
(Message : Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jinĂ˝ potenciálnÄ› nežádoucĂ software) (.) (Dalšà informace:) (https://go.microsoft.com/fwlink/?linkid ... &enterpris) (e=0) (Název: PUADlManager:Win32/OfferCore) (ID: 311999) (ZávaĹľnost: NĂzkĂ©) (Kategorie: PotenciálnÄ› nežádoucĂ software) (Cesta: file:_C:\Users\FRPOK\Downloads\speedfan-4.53-installer_2PFp-g8.exe) (PĹŻvod detekce: MĂstnĂ poÄŤĂtaÄŤ) (Typ detekce: KonkrĂ©tnĂ) (Zdroj detekce: Ochrana v reálnĂ©m ÄŤase) (UĹľivatel: FRPOK\FRPOK) (Název procesu: C:\Windows\explorer.exe) (Verze bezpeÄŤnostnĂch informacĂ: AV: 1.455.122.0, AS: 1.455.122.0, NIS: 1.455.122.0) (Verze modulu: AM: 1.1.26060.3008, NIS: 1.1.26060.3008)
TimeCreated : 11.07.2026 18:54:10
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎð ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (4D69CB63-47F1-4731-8172-FBF3940D85CC}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вЅċђÎδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 10.07.2026 18:54:07
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎð ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (083F85EF-1D32-43A1-94BF-05441369E2B1}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вЅċђÎδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 09.07.2026 18:54:04
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎð ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (57F7C5A5-E4C9-4666-AE60-303B145F3B02}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вЅċђÎδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 07.07.2026 18:53:58
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎð ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (ABCE4D67-8DA5-4E90-8DD0-E0AD8A3C62C7}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ тĥé ľäšτ 7 đâýš)
TimeCreated : 06.07.2026 18:54:00
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎð ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (5033D544-1FDD-4D18-A1F8-64CAA7A2961E}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ тĥé ľäšτ 7 đâýš)
TimeCreated : 01.07.2026 17:09:51
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎð ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (0F93BE69-2A33-47E6-A4D0-49534D13B188}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ тĥé ľäšτ 7 đâýš)
CodeIntegrity:
===============
Date: 2026-07-13 23:48:32
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
Date: 2026-07-13 23:36:39
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: Intel Corp. BECFL357.86A.0090.2022.0916.1942 09/16/2022
Motherboard: Intel Corporation NUC8BEB
Processor: Intel(R) Core(TM) i5-8259U CPU @ 2.30GHz
Percentage of memory in use: 41%
Total physical RAM: 16247.03 MB
Available physical RAM: 9570.27 MB
Total Virtual: 17271.03 MB
Available Virtual: 10607.07 MB
==================== Drives ================================
Drive c: (SYSTEM) (Fixed) (Total:464.97 GB) (Free:137.87 GB) (Model: WDC WDS500G2B0A-00SM50) NTFS
Drive d: (DATA) (Fixed) (Total:1863.02 GB) (Free:779.17 GB) (Model: KINGSTON SNV2S2000G) NTFS
Drive y: (config) (Network) (Total:233.99 GB) (Free:180.66 GB) (Model: WDC WDS500G2B0A-00SM50) NTFS
Drive z: () (Network) (Total:0 GB) (Free:0 GB) (Model: WDC WDS500G2B0A-00SM50)
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 51EC97F6)
Partition 1: (Active) - (Size=100 MB) - (Type=17)
Partition 2: (Not Active) - (Size=465 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=708 MB) - (Type=17)
==========================================================
Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================
-
czTANIScz
- Level 1

- Příspěvky: 50
- Registrován: 01 dub 2022 15:55
Re: Prosím o kontrolu - IntelNUC se seká
Addition kůli velikosti rozdělen do dvou příspěvků.
-
jaro3
- člen Security týmu
- Příspěvky: 43528
- Registrován: 16 čer 2007 18:58
- Bydliště: Jižní Čechy
Re: Prosím o kontrolu - IntelNUC se seká
Ok. Používáš Avast Browser?
Ten zdroj by chtěl vyměnit,ale může to být i v PC v měniči.
Prosím, postupuj následujícím způsobem:
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.
(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).
Ulož jej na na plochu jako fixlist.txt
Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.
Pak napiš jak to vypadá.
Ten zdroj by chtěl vyměnit,ale může to být i v PC v měniči.
Prosím, postupuj následujícím způsobem:
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.
Kód: Vybrat vše
Start
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\125.0.0.0\GoogleDriveFS.exe --startup_mode (No File)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\125.0.0.0\GoogleDriveFS.exe --startup_mode (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Discord: C:\Users\FRPOK\AppData\Local\Discord\app-1.0.9222\modules\discord_zstd-1\discord_zstd\index.js <==== ATTENTION
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [No File]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [No File]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
U4 npcap_wifi; no ImagePath
testsigning: ==> 'testsigning' is set. Check for possible unsigned driver <==== ATTENTION
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
Handler: WSISVCUchrome - {78A543EB-3A61-4ED3 - No File
FirewallRules: [{F5F54ECB-31A8-442A-BAE4-004C749D768D}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{37F222A9-CDB3-4A7C-9BD1-BEF85715EBF8}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{2D915720-7573-4894-BB6B-9B4DBABA5305}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{2F31CF0C-E9ED-4198-B45A-6926547261B8}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
EmptyTemp:
EndUlož jej na na plochu jako fixlist.txt
Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.
Pak napiš jak to vypadá.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
-
czTANIScz
- Level 1

- Příspěvky: 50
- Registrován: 01 dub 2022 15:55
Re: Prosím o kontrolu - IntelNUC se seká
Fix result of Farbar Recovery Scan Tool (x64) Version: 12-07-2026 01
Ran by FRPOK (14-07-2026 19:42:13) Run:1
Running from C:\Users\FRPOK\Desktop
Loaded Profiles: FRPOK
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\125.0.0.0\GoogleDriveFS.exe --startup_mode (No File)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\125.0.0.0\GoogleDriveFS.exe --startup_mode (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Discord: C:\Users\FRPOK\AppData\Local\Discord\app-1.0.9222\modules\discord_zstd-1\discord_zstd\index.js <==== ATTENTION
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [No File]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [No File]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
U4 npcap_wifi; no ImagePath
testsigning: ==> 'testsigning' is set. Check for possible unsigned driver <==== ATTENTION
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
Handler: WSISVCUchrome - {78A543EB-3A61-4ED3 - No File
FirewallRules: [{F5F54ECB-31A8-442A-BAE4-004C749D768D}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{37F222A9-CDB3-4A7C-9BD1-BEF85715EBF8}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{2D915720-7573-4894-BB6B-9B4DBABA5305}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{2F31CF0C-E9ED-4198-B45A-6926547261B8}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
EmptyTemp:
End
*****************
Restore point was successfully created.
Processes closed successfully.
"HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleDriveFS" => removed successfully
"HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleDriveFS" => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Edge => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
C:\Users\FRPOK\AppData\Local\Discord\app-1.0.9222\modules\discord_zstd-1\discord_zstd\index.js => restored successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@update.avastbrowser.com/Avast Browser;version=3 => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@update.avastbrowser.com/Avast Browser;version=9 => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj => removed successfully
HKLM\System\CurrentControlSet\Services\npcap_wifi => removed successfully
npcap_wifi => service removed successfully
========================= bcdedit ========================
Operace byla dokonźena ŁspŘçnŘ.
========= End of bcdedit =========
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{19C3AB22-3718-4E4D-B203-242F5001565B}\\SystemComponent" => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\DriveFS 28 or later => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\DriveFS 28 or later => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\DriveFS 28 or later => removed successfully
HKLM\Software\Classes\PROTOCOLS\Handler\WSISVCUchrome => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F5F54ECB-31A8-442A-BAE4-004C749D768D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{37F222A9-CDB3-4A7C-9BD1-BEF85715EBF8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2D915720-7573-4894-BB6B-9B4DBABA5305}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2F31CF0C-E9ED-4198-B45A-6926547261B8}" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 31116605 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 572465666 B
Windows/system/drivers => 14965125 B
Edge => 181514800 B
Chrome => 1443681827 B
Firefox => 0 B
Opera => 0 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 1266 B
FRPOK => 56342321 B
RecycleBin => 2451456 B
EmptyTemp: => 2.1 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 19:46:19 ====
Ran by FRPOK (14-07-2026 19:42:13) Run:1
Running from C:\Users\FRPOK\Desktop
Loaded Profiles: FRPOK
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\125.0.0.0\GoogleDriveFS.exe --startup_mode (No File)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\125.0.0.0\GoogleDriveFS.exe --startup_mode (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Discord: C:\Users\FRPOK\AppData\Local\Discord\app-1.0.9222\modules\discord_zstd-1\discord_zstd\index.js <==== ATTENTION
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [No File]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [No File]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
U4 npcap_wifi; no ImagePath
testsigning: ==> 'testsigning' is set. Check for possible unsigned driver <==== ATTENTION
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> No File
Handler: WSISVCUchrome - {78A543EB-3A61-4ED3 - No File
FirewallRules: [{F5F54ECB-31A8-442A-BAE4-004C749D768D}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{37F222A9-CDB3-4A7C-9BD1-BEF85715EBF8}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{2D915720-7573-4894-BB6B-9B4DBABA5305}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
FirewallRules: [{2F31CF0C-E9ED-4198-B45A-6926547261B8}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => No File
EmptyTemp:
End
*****************
Restore point was successfully created.
Processes closed successfully.
"HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleDriveFS" => removed successfully
"HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleDriveFS" => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Edge => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
C:\Users\FRPOK\AppData\Local\Discord\app-1.0.9222\modules\discord_zstd-1\discord_zstd\index.js => restored successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@update.avastbrowser.com/Avast Browser;version=3 => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@update.avastbrowser.com/Avast Browser;version=9 => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj => removed successfully
HKLM\System\CurrentControlSet\Services\npcap_wifi => removed successfully
npcap_wifi => service removed successfully
========================= bcdedit ========================
Operace byla dokonźena ŁspŘçnŘ.
========= End of bcdedit =========
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{19C3AB22-3718-4E4D-B203-242F5001565B}\\SystemComponent" => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\DriveFS 28 or later => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\DriveFS 28 or later => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\DriveFS 28 or later => removed successfully
HKLM\Software\Classes\PROTOCOLS\Handler\WSISVCUchrome => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F5F54ECB-31A8-442A-BAE4-004C749D768D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{37F222A9-CDB3-4A7C-9BD1-BEF85715EBF8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2D915720-7573-4894-BB6B-9B4DBABA5305}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2F31CF0C-E9ED-4198-B45A-6926547261B8}" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 31116605 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 572465666 B
Windows/system/drivers => 14965125 B
Edge => 181514800 B
Chrome => 1443681827 B
Firefox => 0 B
Opera => 0 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 1266 B
FRPOK => 56342321 B
RecycleBin => 2451456 B
EmptyTemp: => 2.1 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 19:46:19 ====
