Fix result of Farbar Recovery Scan Tool (x64) Version: 21-08-2025
Ran by Fox (28-08-2025 17:43:15) Run:1
Running from C:\Users\Fox\Desktop
Loaded Profiles: Fox
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2025-06-27] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1220654465-1674008627-1598820287-1001\...\Run: [Agent Tray] => C:\Program Files\Agent\AgentTray.exe (No File)
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {40365F9E-39B1-4773-8D7D-4B559A2DC8F5} - System32\Tasks\Microsoft\Office\Copilot Optimization => C:\ProgramData\Microsoft\Windows\Tools\OfficeAI\aisvchost.exe [13312 2024-11-22] () [File not signed] <==== ATTENTION
Task: {DBCFB613-D6CA-4901-BAED-E630AB0AAE3F} - System32\Tasks\Microsoft\Windows\Copilot\Copilot Update => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [455680 2024-02-14] (Microsoft Windows -> Microsoft Corporation) -> -ExecutionPolicy Bypass C:\Windows\Copilot\update.ps1 <==== ATTENTION
Task: {7BDA8E1D-7654-4359-9DC1-B02842648DB0} - System32\Tasks\Microsoft\Windows\Defrag\Defrag Engine => C:\ProgramData\Microsoft\Windows\Tools\{b2cbd99e-3b5c-4c90-ae82-365bb56722cc}\desvchost.exe [27320 2024-09-02] (KUCHIKU LTD -> ) <==== ATTENTION
Task: {DF909F1D-E9CE-4792-8147-B249DB5003BF} - System32\Tasks\Microsoft\Windows\Defrag\Fragmentation Manager => C:\ProgramData\Microsoft\Windows\Tools\{85c559a7-e331-49d6-a96a-73f1be4e7e30}\fm.exe (No File) <==== ATTENTION
Task: {0685E0C6-CCD8-49DA-B87E-A4C60C7C80B1} - System32\Tasks\Microsoft\Windows\Experimental\Experimental Host => C:\ProgramData\Microsoft\Windows\Tools\{b77d01b7-e05f-445d-8363-897f3fe182d0}\sdkhost.exe [22200 2024-09-02] (KUCHIKU LTD -> ) <==== ATTENTION
Task: {81B7F7D4-5A90-47C6-89D7-EFAD3B5EDA4C} - System32\Tasks\Microsoft\Windows\NetTrace\Net Neutrality Service => C:\ProgramData\Microsoft\Windows\Tools\{181e11ad-596a-4b9c-b600-03d18e7129e4}\nnsvc.exe [22712 2024-09-14] (KUCHIKU LTD -> ) <==== ATTENTION
Task: {F23FAFB3-E33E-456B-86B6-7F3026683A95} - System32\Tasks\Microsoft\Windows\OneDrive\OneDrive Sync => C:\Program Files\nodejs\node.exe [69763224 2024-07-08] (OpenJS Foundation -> Node.js) -> C:\Windows\OneDrive\onedrivesync.js <==== ATTENTION
Task: {E7A9449E-A008-4B5B-A662-EF32F8D8832A} - System32\Tasks\Microsoft\Windows\Remote Assistant Host => C:\ProgramData\Microsoft\Windows\Tools\{3a40afdb-daa7-4812-8494-a3e3075ff2c9}\rasvc.exe (No File) <==== ATTENTION
Task: {A929B2D1-1CAF-483E-B8CA-C13E1D28A9DE} - System32\Tasks\Microsoft\Windows\SyncCenter\SyncX SDK => C:\ProgramData\Microsoft\Windows\Tools\{2c8cdec6-997a-44ff-9271-c0877b2f688a}\sxhost.exe [24248 2024-09-14] (KUCHIKU LTD -> ) <==== ATTENTION
S3 HWiNFO_204; \??\C:\Users\Fox\AppData\Local\Temp\HWiNFO_x64_204.sys [X] <==== ATTENTION
U4 npcap_wifi; no ImagePath
C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
CustomCLSID: HKU\S-1-5-21-1220654465-1674008627-1598820287-1001_Classes\CLSID\{b4175fb1-dff3-c216-a4be-a80de0dc90cf}\localserver32 -> "C:\Users\Fox\AppData\Local\PowerToys\PowerToys.PowerLauncher.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-1220654465-1674008627-1598820287-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1}\localserver32 -> "C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe" -ToastActivated => No File
ContextMenuHandlers4-x32: [DiskInternals_cd_recovery] -> {6DD33479-D4D0-4666-93C8-F6DC46668518} => C:\PROGRA~2\DISKIN~1\CDANDD~1\contmenu.dll -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
HKU\S-1-5-21-1220654465-1674008627-1598820287-1001\Software\Classes\regfile: <==== ATTENTION
HKU\S-1-5-21-1220654465-1674008627-1598820287-1001\Software\Classes\.reg: => <==== ATTENTION
HKU\S-1-5-21-1220654465-1674008627-1598820287-1001\Software\Classes\.bat: => <==== ATTENTION
HKU\S-1-5-21-1220654465-1674008627-1598820287-1001\Software\Classes\.cmd: => <==== ATTENTION
FirewallRules: [{1BE9E6D3-AA95-4011-A452-BF2CE357C382}] => (Allow) C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe => No File
FirewallRules: [{F373A20E-E92E-4E75-A73F-838CBE1AB42D}] => (Allow) C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe => No File
FirewallRules: [{84B80410-CABE-4E5B-939C-BEF7A3EBD5E6}] => (Allow) C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe => No File
FirewallRules: [{FB8B4D0B-7D9E-4FB1-B8DE-2C38DA23D31D}] => (Allow) C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe => No File
FirewallRules: [TCP Query User{8043DDEE-1C36-4D0F-9372-70AB4B2A4FBE}D:\games\bobb\binaries\win64\bobb-win64-shipping.exe] => (Allow) D:\games\bobb\binaries\win64\bobb-win64-shipping.exe => No File
FirewallRules: [UDP Query User{368042EB-E179-4397-BB8B-A5200815F804}D:\games\bobb\binaries\win64\bobb-win64-shipping.exe] => (Allow) D:\games\bobb\binaries\win64\bobb-win64-shipping.exe => No File
FirewallRules: [{FA684627-4579-44F1-A4BB-A6D5AAE94B0F}] => (Allow) D:\Games\BOBB.exe => No File
FirewallRules: [{357B5088-EFC4-4E79-9C40-615BB51B8EBE}] => (Allow) D:\Games\BOBB.exe => No File
FirewallRules: [{1F955F67-6AB5-49E8-ACD1-2990F7995F1B}] => (Allow) D:\Games\BOBB.exe => No File
FirewallRules: [{AB9838DE-F129-4929-8708-36645582CC38}] => (Allow) D:\Games\BOBB.exe => No File
FirewallRules: [TCP Query User{FC365856-4156-4812-A116-1B0903C974CA}D:\downloads\bitcomet\black.one.blood.brothers.university.early.access\black one blood brothers\bobb\binaries\win64\bobb-win64-shipping.exe] => (Allow) D:\downloads\bitcomet\black.one.blood.brothers.university.early.access\black one blood brothers\bobb\binaries\win64\bobb-win64-shipping.exe => No File
FirewallRules: [UDP Query User{B1691DA0-9820-4C22-B0F1-843B5CAB4A62}D:\downloads\bitcomet\black.one.blood.brothers.university.early.access\black one blood brothers\bobb\binaries\win64\bobb-win64-shipping.exe] => (Allow) D:\downloads\bitcomet\black.one.blood.brothers.university.early.access\black one blood brothers\bobb\binaries\win64\bobb-win64-shipping.exe => No File
FirewallRules: [TCP Query User{CFB0073B-E086-494F-BB4D-2F2D2835358A}C:\users\fox\appdata\local\temp\_tc\setup.exe] => (Allow) C:\users\fox\appdata\local\temp\_tc\setup.exe => No File
FirewallRules: [UDP Query User{872E9076-EC5A-46D5-95FA-5A5915ADE7AE}C:\users\fox\appdata\local\temp\_tc\setup.exe] => (Allow) C:\users\fox\appdata\local\temp\_tc\setup.exe => No File
FirewallRules: [{31E6622F-CF28-4EDC-B77F-809E6440E053}] => (Allow) C:\Program Files\Agent\Agent.exe => No File
FirewallRules: [TCP Query User{92343596-856B-48D8-AAC2-2FF0E22028DB}C:\program files\agent\agenttray.exe] => (Allow) C:\program files\agent\agenttray.exe => No File
FirewallRules: [UDP Query User{23335467-A1F4-4ADE-B4F7-17BF1ACE0BB4}C:\program files\agent\agenttray.exe] => (Allow) C:\program files\agent\agenttray.exe => No File
FirewallRules: [{B7B18275-0D77-4794-98FF-79612D1971C6}] => (Allow) C:\Program Files\Agent\Agent.exe => No File
FirewallRules: [TCP Query User{7F8F5B19-13C3-4B81-9363-198707928664}C:\users\fox\desktop\active\netfabb.exe] => (Allow) C:\users\fox\desktop\active\netfabb.exe => No File
FirewallRules: [UDP Query User{0EF7CA1C-C0C1-44D3-A07D-958BB07B97AE}C:\users\fox\desktop\active\netfabb.exe] => (Allow) C:\users\fox\desktop\active\netfabb.exe => No File
FirewallRules: [TCP Query User{C12E708B-F01A-4370-9FFA-B49A3B98F8DB}E:\start.exe] => (Allow) E:\start.exe => No File
FirewallRules: [UDP Query User{500E6930-D264-42E7-B464-4CD37CCE5E1A}E:\start.exe] => (Allow) E:\start.exe => No File
FirewallRules: [TCP Query User{B58B80FF-7EB6-44CD-9F6A-ED0D708B2029}C:\program files (x86)\java\jre1.8.0_421\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_421\bin\javaw.exe => No File
FirewallRules: [UDP Query User{8FA8DC1D-CA2D-44C8-AAAB-287048D6181D}C:\program files (x86)\java\jre1.8.0_421\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_421\bin\javaw.exe => No File
FirewallRules: [{043681AF-06DF-4083-ACF0-DCE59F99F074}] => (Allow) C:\Users\Fox\Desktop\EaseUS.Fixo.Technician.2.0.8_20240902.Portable.KaranPC\App\EaseUS Fixo\Fixo.exe => No File
FirewallRules: [{9af505ec-2aa1-4542-bed3-1b6d690d3910}] => (Allow) C:\ProgramData\Microsoft\Windows\Tools\AI\bgm.exe => No File
FirewallRules: [TCP Query User{5CCD8D1E-312D-443C-814A-9EA864D03D85}D:\games\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe] => (Allow) D:\games\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe => No File
FirewallRules: [UDP Query User{27B746EF-EAF9-43B5-9E1D-E398B1968EC3}D:\games\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe] => (Allow) D:\games\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe => No File
FirewallRules: [TCP Query User{D57B75DF-B6AC-4DF6-AFB9-A7E981F23D28}C:\program files (x86)\java\jre1.8.0_441\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_441\bin\javaw.exe => No File
FirewallRules: [UDP Query User{E0FF83B8-BAD4-4899-81D7-5FEF928AF6B6}C:\program files (x86)\java\jre1.8.0_441\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_441\bin\javaw.exe => No File
FirewallRules: [TCP Query User{5E7FCC69-8450-4A1E-9A5E-9B5683D3A44D}C:\programy\3d\ultimaker cura\ultimaker cura 5.9.1\ultimaker-cura.exe] => (Allow) C:\programy\3d\ultimaker cura\ultimaker cura 5.9.1\ultimaker-cura.exe => No File
FirewallRules: [UDP Query User{0A4AD823-EDB3-4A83-A9A0-BF26C344795F}C:\programy\3d\ultimaker cura\ultimaker cura 5.9.1\ultimaker-cura.exe] => (Allow) C:\programy\3d\ultimaker cura\ultimaker cura 5.9.1\ultimaker-cura.exe => No File
FirewallRules: [TCP Query User{51E5A682-A9FA-4A3C-AAB8-95BD7A04B204}C:\programy\3d\ultimaker cura\ultimaker cura 5.10.0\ultimaker-cura.exe] => (Allow) C:\programy\3d\ultimaker cura\ultimaker cura 5.10.0\ultimaker-cura.exe => No File
FirewallRules: [UDP Query User{7247441C-F1C0-4A9E-B94E-9A46E308578F}C:\programy\3d\ultimaker cura\ultimaker cura 5.10.0\ultimaker-cura.exe] => (Allow) C:\programy\3d\ultimaker cura\ultimaker cura 5.10.0\ultimaker-cura.exe => No File
FirewallRules: [TCP Query User{CB5C981B-4464-46DB-AB07-2F2CBCD9486E}C:\program files (x86)\java\jre1.8.0_451\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_451\bin\javaw.exe => No File
FirewallRules: [UDP Query User{DC0B785E-556A-4D17-9AC3-B05F7AFE21E3}C:\program files (x86)\java\jre1.8.0_451\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_451\bin\javaw.exe => No File
D:\ipacket\Vypálit\Vypalování+Kopírování\CloneDVD 2.8.5.1\Keygen.zip
D:\Downloads\Bitcomet\[FTUApps.com] - F-Secure Freedome VPN v2.71.176.0 Multilingual RePack\F-Secure Freedome VPN 2.71.176.0 RePack by KpoJIuK\F-Secure.Freedome.VPN.v2.71.176.exe
D:\Downloads\Bitcomet\Tag&Rename v3.9.15.7z; file:_D:\Downloads\Bitcomet\Tag&Rename v3.9.15.7z->v1 patch.7z->tagrename-3.9.x-patch.exe
D:\Downloads\Bitcomet\EaseUS Data Recovery Wizard Technician v16.0.0.0 Build 20230328 + Fix.zip

EmptyTemp:
Hosts:

End
*****************

Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
"HKU\S-1-5-21-1220654465-1674008627-1598820287-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Agent Tray" => removed successfully

"C:\Windows\system32\GroupPolicy\Machine" Folder move:

C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully

"C:\Windows\system32\GroupPolicy\User" Folder move:

C:\Windows\system32\GroupPolicy\User => moved successfully
C:\ProgramData\NTUSER.pol => moved successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Edge => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{40365F9E-39B1-4773-8D7D-4B559A2DC8F5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{40365F9E-39B1-4773-8D7D-4B559A2DC8F5}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Office\Copilot Optimization => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Office\Copilot Optimization" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{DBCFB613-D6CA-4901-BAED-E630AB0AAE3F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DBCFB613-D6CA-4901-BAED-E630AB0AAE3F}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\Copilot\Copilot Update => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Copilot\Copilot Update" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{7BDA8E1D-7654-4359-9DC1-B02842648DB0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7BDA8E1D-7654-4359-9DC1-B02842648DB0}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\Defrag\Defrag Engine => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Defrag\Defrag Engine" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{DF909F1D-E9CE-4792-8147-B249DB5003BF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DF909F1D-E9CE-4792-8147-B249DB5003BF}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\Defrag\Fragmentation Manager => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Defrag\Fragmentation Manager" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{0685E0C6-CCD8-49DA-B87E-A4C60C7C80B1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0685E0C6-CCD8-49DA-B87E-A4C60C7C80B1}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\Experimental\Experimental Host => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Experimental\Experimental Host" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{81B7F7D4-5A90-47C6-89D7-EFAD3B5EDA4C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{81B7F7D4-5A90-47C6-89D7-EFAD3B5EDA4C}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\NetTrace\Net Neutrality Service => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\NetTrace\Net Neutrality Service" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F23FAFB3-E33E-456B-86B6-7F3026683A95}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F23FAFB3-E33E-456B-86B6-7F3026683A95}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\OneDrive\OneDrive Sync => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\OneDrive\OneDrive Sync" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{E7A9449E-A008-4B5B-A662-EF32F8D8832A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7A9449E-A008-4B5B-A662-EF32F8D8832A}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\Remote Assistant Host => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Remote Assistant Host" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{A929B2D1-1CAF-483E-B8CA-C13E1D28A9DE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A929B2D1-1CAF-483E-B8CA-C13E1D28A9DE}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\SyncCenter\SyncX SDK => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\SyncCenter\SyncX SDK" => removed successfully
HKLM\System\CurrentControlSet\Services\HWiNFO_204 => removed successfully
HWiNFO_204 => service removed successfully
HKLM\System\CurrentControlSet\Services\npcap_wifi => removed successfully
npcap_wifi => service removed successfully
C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat => moved successfully
HKU\S-1-5-21-1220654465-1674008627-1598820287-1001_Classes\CLSID\{b4175fb1-dff3-c216-a4be-a80de0dc90cf} => removed successfully
HKU\S-1-5-21-1220654465-1674008627-1598820287-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1} => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\DiskInternals_cd_recovery => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{6DD33479-D4D0-4666-93C8-F6DC46668518} => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKU\S-1-5-21-1220654465-1674008627-1598820287-1001\Software\Classes\regfile => removed successfully
HKU\S-1-5-21-1220654465-1674008627-1598820287-1001\Software\Classes\.reg => removed successfully
HKU\S-1-5-21-1220654465-1674008627-1598820287-1001\Software\Classes\.bat => removed successfully
HKU\S-1-5-21-1220654465-1674008627-1598820287-1001\Software\Classes\.cmd => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1BE9E6D3-AA95-4011-A452-BF2CE357C382}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F373A20E-E92E-4E75-A73F-838CBE1AB42D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{84B80410-CABE-4E5B-939C-BEF7A3EBD5E6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FB8B4D0B-7D9E-4FB1-B8DE-2C38DA23D31D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8043DDEE-1C36-4D0F-9372-70AB4B2A4FBE}D:\games\bobb\binaries\win64\bobb-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{368042EB-E179-4397-BB8B-A5200815F804}D:\games\bobb\binaries\win64\bobb-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FA684627-4579-44F1-A4BB-A6D5AAE94B0F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{357B5088-EFC4-4E79-9C40-615BB51B8EBE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1F955F67-6AB5-49E8-ACD1-2990F7995F1B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AB9838DE-F129-4929-8708-36645582CC38}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FC365856-4156-4812-A116-1B0903C974CA}D:\downloads\bitcomet\black.one.blood.brothers.university.early.access\black one blood brothers\bobb\binaries\win64\bobb-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B1691DA0-9820-4C22-B0F1-843B5CAB4A62}D:\downloads\bitcomet\black.one.blood.brothers.university.early.access\black one blood brothers\bobb\binaries\win64\bobb-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CFB0073B-E086-494F-BB4D-2F2D2835358A}C:\users\fox\appdata\local\temp\_tc\setup.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{872E9076-EC5A-46D5-95FA-5A5915ADE7AE}C:\users\fox\appdata\local\temp\_tc\setup.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{31E6622F-CF28-4EDC-B77F-809E6440E053}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{92343596-856B-48D8-AAC2-2FF0E22028DB}C:\program files\agent\agenttray.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{23335467-A1F4-4ADE-B4F7-17BF1ACE0BB4}C:\program files\agent\agenttray.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B7B18275-0D77-4794-98FF-79612D1971C6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7F8F5B19-13C3-4B81-9363-198707928664}C:\users\fox\desktop\active\netfabb.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0EF7CA1C-C0C1-44D3-A07D-958BB07B97AE}C:\users\fox\desktop\active\netfabb.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C12E708B-F01A-4370-9FFA-B49A3B98F8DB}E:\start.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{500E6930-D264-42E7-B464-4CD37CCE5E1A}E:\start.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B58B80FF-7EB6-44CD-9F6A-ED0D708B2029}C:\program files (x86)\java\jre1.8.0_421\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8FA8DC1D-CA2D-44C8-AAAB-287048D6181D}C:\program files (x86)\java\jre1.8.0_421\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{043681AF-06DF-4083-ACF0-DCE59F99F074}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9af505ec-2aa1-4542-bed3-1b6d690d3910}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5CCD8D1E-312D-443C-814A-9EA864D03D85}D:\games\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{27B746EF-EAF9-43B5-9E1D-E398B1968EC3}D:\games\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D57B75DF-B6AC-4DF6-AFB9-A7E981F23D28}C:\program files (x86)\java\jre1.8.0_441\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E0FF83B8-BAD4-4899-81D7-5FEF928AF6B6}C:\program files (x86)\java\jre1.8.0_441\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5E7FCC69-8450-4A1E-9A5E-9B5683D3A44D}C:\programy\3d\ultimaker cura\ultimaker cura 5.9.1\ultimaker-cura.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0A4AD823-EDB3-4A83-A9A0-BF26C344795F}C:\programy\3d\ultimaker cura\ultimaker cura 5.9.1\ultimaker-cura.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{51E5A682-A9FA-4A3C-AAB8-95BD7A04B204}C:\programy\3d\ultimaker cura\ultimaker cura 5.10.0\ultimaker-cura.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{7247441C-F1C0-4A9E-B94E-9A46E308578F}C:\programy\3d\ultimaker cura\ultimaker cura 5.10.0\ultimaker-cura.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CB5C981B-4464-46DB-AB07-2F2CBCD9486E}C:\program files (x86)\java\jre1.8.0_451\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DC0B785E-556A-4D17-9AC3-B05F7AFE21E3}C:\program files (x86)\java\jre1.8.0_451\bin\javaw.exe" => removed successfully
D:\ipacket\Vypálit\Vypalování+Kopírování\CloneDVD 2.8.5.1\Keygen.zip => moved successfully
D:\Downloads\Bitcomet\[FTUApps.com] - F-Secure Freedome VPN v2.71.176.0 Multilingual RePack\F-Secure Freedome VPN 2.71.176.0 RePack by KpoJIuK\F-Secure.Freedome.VPN.v2.71.176.exe => moved successfully
"D:\Downloads\Bitcomet\Tag&Rename v3.9.15.7z; file:_D:\Downloads\Bitcomet\Tag&Rename v3.9.15.7z->v1 patch.7z->tagrename-3.9.x-patch.exe" => not found
D:\Downloads\Bitcomet\EaseUS Data Recovery Wizard Technician v16.0.0.0 Build 20230328 + Fix.zip => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 152197407 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 37664 B
Windows/system/drivers => 1568905 B
Edge => 0 B
Chrome => 571531842 B
Firefox => 311196744 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 3708261 B
systemprofile32 => 3709244 B
LocalService => 19831604 B
NetworkService => 20926260 B
Fox => 637416698 B

RecycleBin => 731559181 B
EmptyTemp: => 2.3 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 17:47:44 ====