ahojte,
v poslednej dobe sa mi pomaly špúšťa rôzne aplikácie. Ak surfujem cez Chrome a pozerám youtube, tak dosť mi seká celý počítač, niekedy je problém napísať aj správu na FB, čo má PC veľmí pomalú odozvu.
Ďakujem za pomoc.
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-11-2025
Ran by Marcel (25-12-2025 10:09:51)
Running from C:\Users\Marcel\OneDrive\Počítač
Microsoft Windows 11 Pro Version 25H2 26200.7462 (X64) (2024-12-09 16:19:58)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-1514861923-3393839258-3891969025-500 - Administrator - Enabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-1514861923-3393839258-3891969025-503 - Limited - Disabled)
Guest (S-1-5-21-1514861923-3393839258-3891969025-501 - Limited - Disabled)
Marcel (S-1-5-21-1514861923-3393839258-3891969025-1001 - Limited - Enabled) => C:\Users\Marcel
WDAGUtilityAccount (S-1-5-21-1514861923-3393839258-3891969025-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: ESET Security (Enabled - Up to date) {DF8BEACB-94C9-218A-73AD-A78362A8C516}
AV: ESET Security (Enabled - Up to date) {89B55CC4-3881-78B2-11E2-479AE0371896}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {26E0861C-6FB9-CEF9-E4F0-531986211ACE}
AV: ESET Internet Security (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Security (Enabled - Up to date) {333C65BB-8923-0EAA-C47E-C486E687BEFD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Enabled) {E7B06BEE-DEA6-20D2-58F2-0EB69C7B826D}
FW: ESET Firewall (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}
FW: ESET Firewall (Enabled) {B18EDDE1-72EE-79EA-3ABD-EEAF1EE45FED}
FW: ESET Firewall (Enabled) {1EDB0739-25D6-CFA1-CFAF-FA2C78F25DB5}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
A Way Out (HKLM-x32\...\{E8D752CF-2FCC-470D-B0C5-4BFC6F42ACCE}) (Version: 1.0.62.0 - Electronic Arts, Inc.)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1033-1033-7760-BC15014EA700}) (Version: 25.001.20997 - Adobe)
Adobe Photoshop CC 2019 (HKLM-x32\...\PHSP_20_0_1) (Version: 20.0.1 - Adobe Systems Incorporated)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601120}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Age of Empires III Definitive Edition (HKLM-x32\...\Age of Empires III Definitive Edition_is1) (Version: - )
Age of Empires IV (HKLM-x32\...\Age of Empires IV_is1) (Version: - )
ARMOURY CRATE Lite Service (HKLM\...\{EF3944FF-2501-4568-B15C-5701E726719E}) (Version: 5.2.10 - ASUS)
Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.54.1 - Asmedia Technology)
Assassin's Creed Mirage (HKLM-x32\...\Uplay Install 6100) (Version: - Ubisoft)
Asterix & Obelix XXL 2 (HKLM-x32\...\1858508334_is1) (Version: XXL 2 v0.41 - GOG.com)
ASUS AURA Extension Card HAL (HKLM\...\{237E1CAC-1708-4940-AC34-DF15C079AB70}) (Version: 1.1.0.13 - ASUSTeK COMPUTER INC.) Hidden
ASUS AURA Extension Card HAL (HKLM-x32\...\{c398adfb-d090-4897-8845-baca53f7ecde}) (Version: 1.1.0.13 - ASUSTeK COMPUTER INC.) Hidden
ASUS Aura SDK (HKLM\...\{CF8E6E00-9C03-4440-81C0-21FACB921A6B}) (Version: 3.04.39 - ASUSTek COMPUTER INC.) Hidden
ASUS AURA VGA Component (HKLM\...\{71BB96A6-EAC4-45AE-A17D-D3ED43FF1D14}) (Version: 0.0.4.3 - ASUSTek COMPUTER INC. ) Hidden
ASUS AURA VGA Component (HKLM-x32\...\{7a0d5159-cb5e-4f66-91f8-bab46f864f14}) (Version: 0.0.4.3 - ASUSTek COMPUTER INC. ) Hidden
ASUS Framework Service (HKLM-x32\...\{8bc53c84-d9aa-4cc6-b19c-261f445494dc}) (Version: 2.1.3.0 - ASUSTek COMPUTER INC.)
ASUS Framework Service (HKLM-x32\...\{EA6A87BE-8AD3-40D2-944C-9DF5FBFF4332}) (Version: 2.1.3.0 - ASUSTek COMPUTER INC.) Hidden
ASUS Mouse HAL (HKLM\...\{B8F984F2-7887-4DD2-8D96-F9A4BC5A4AC5}) (Version: 1.2.0.32 - ASUSTek COMPUTER INC.) Hidden
ASUS Mouse HAL (HKLM-x32\...\{df47dea9-35b9-4e26-86ad-282af744d129}) (Version: 1.2.0.32 - ASUSTek COMPUTER INC.) Hidden
ASUS Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.107.145 - ASUSTeK Computer Inc.) Hidden
AURA DRAM Component (HKLM\...\{9AFE5429-866B-457D-A864-80BCF7672EE8}) (Version: 1.1.16 - ASUS) Hidden
AURA DRAM Component (HKLM-x32\...\{41a78792-5489-400c-a567-b78d40b8c878}) (Version: 1.1.16 - ASUS) Hidden
AURA lighting effect add-on (HKLM-x32\...\{1E2EA04B-FCA7-457E-B6F4-F33E1858E859}) (Version: 0.0.21 - ASUS)
AURA lighting effect add-on x64 (HKLM\...\{C5A4A164-4428-4931-B728-96EEF0FA3C44}) (Version: 0.0.21 - ASUS)
AURA Service (HKLM-x32\...\{0fcadbd2-1a6a-4a4a-a56d-fc7163d9b3fa}) (Version: 3.07.25 - ASUSTeK Computer Inc.)
AURA Service (HKLM-x32\...\{56EEEF7D-0AE3-401A-898B-581719D005AE}) (Version: 3.07.25 - ASUSTeK Computer Inc.) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield™ V (HKLM-x32\...\{e26b382f-e945-4f70-9318-121b683f1d61}) (Version: 1.0.64.43202 - Electronic Arts)
Bethesda.net Launcher (HKLM-x32\...\{3448917E-E4FE-4E30-9502-9FD52EABB6F5}_is1) (Version: 1.48.2 - Bethesda Softworks)
BIOMUTANT (HKLM-x32\...\BIOMUTANT_is1) (Version: - )
Black Mesa (HKLM-x32\...\Black Mesa_is1) (Version: - )
Boris FX Continuum Plug-ins 11 for Cyberlink (HKLM\...\{7E607B62-1788-40CB-BADB-DC1511627F6C}_is1) (Version: - Boris FX, Inc.)
Brothers: A Tale of Two Sons Remake (HKLM-x32\...\1641576654_is1) (Version: 20240417.12.1559082 - GOG.com)
Call of Duty (HKLM-x32\...\Call of Duty) (Version: - Blizzard Entertainment)
Call of Duty Black Ops Cold War (HKLM-x32\...\Call of Duty Black Ops Cold War) (Version: - Blizzard Entertainment)
Canon MF Toolbox 4.9.1.1.mf18 (HKLM-x32\...\{6767DFEE-8909-453A-B553-C7693912B2EB}) (Version: 4.9.1.1.mf18 - CANON INC.)
Canon MF4700 Series (HKLM\...\{47A8DB42-4E21-4d55-9931-D4F44CC3F03B}) (Version: 4.1.0.1 - CANON INC.)
Cardo Update 4.1.0 (HKLM-x32\...\{1df36462-58f9-538c-9cdd-480c8780cceb}) (Version: 4.1.0 - Cardo Systems Ltd.)
CCleaner (HKLM\...\CCleaner) (Version: 6.34 - Piriform)
CCleaner Browser (HKLM-x32\...\CCleaner Browser) (Version: 143.0.33371.147 - Autori prehliadača CCleaner Browser)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1583.3 - Piriform Software) Hidden
Contents64 (HKLM\...\{C2D307EA-96F8-4F6E-880E-E244779D8477}) (Version: 19.1.0.10 - Corel Corporation) Hidden
Contra Operation Galuga (HKLM-x32\...\FLT_Contra_Operation_Galuga) (Version: - )
Corel VideoStudio Pro X9 (HKLM-x32\...\_{EE80DAA0-0071-475C-A222-F1782888FC55}) (Version: 19.1.0.10 - Corel Corporation)
CPUID CPU-Z MSI 1.86 (HKLM\...\CPUID CPU-Z MSI_is1) (Version: 1.86 - CPUID, Inc.)
CPUID HWMonitor 1.52 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.52 - CPUID, Inc.)
CrystalDiskInfo 7.6.0 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.6.0 - Crystal Dew World)
CrystalDiskMark 5.5.0 (HKLM\...\CrystalDiskMark5_is1) (Version: 5.5.0 - Crystal Dew World)
D.Launcher 2 (x86) (HKLM-x32\...\{92D18F02-F5F4-4E80-8F49-A7F9952DE2FF}) (Version: 2.0.5 - DITEC, a.s.)
Death Stranding (HKLM-x32\...\{86861D6D-1293-421A-8853-2C7EF85CF5B6}_is1) (Version: - KOJIMA PRODUCTIONS)
Discord (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Discord) (Version: 1.0.9219 - Discord Inc.)
Dokan Library 1.5.1.1000 (x64) (HKLM\...\{65A3A964-3DC3-0105-0001-211126123627}) (Version: 1.5.1.1000 - Dokany Project) Hidden
Dokan Library 1.5.1.1000 Bundle (HKLM-x32\...\{05c046de-f751-48c8-b8d3-77259ea88eb7}) (Version: 1.5.1.1000 - Dokany Project)
Dragon Center (HKLM-x32\...\{B252FABF-9582-4824-B02B-6D2DC93685C7}}_is1) (Version: 1.0.0.21 - MSI)
E.M.Total Video Converter 3.20 3.20 (HKLM-x32\...\E.M.Total Video Converter 3.20 3.20) (Version: - )
EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS)
ENE RGB HAL (HKLM\...\{E050E98C-5524-4AFB-9E53-97700BEF2C02}) (Version: 1.1.39.5 - Ene Tech.) Hidden
ENE RGB HAL (HKLM-x32\...\{09239bb1-d62b-4710-991f-f8cf987be42b}) (Version: 1.1.39.5 - Ene Tech.) Hidden
ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.9.6 - ENE TECHNOLOGY INC.) Hidden
ENE_EHD_M2_HAL (HKLM-x32\...\{fb849319-e131-4301-9dc9-458db90abe1d}) (Version: 1.0.9.6 - ENE TECHNOLOGY INC.) Hidden
Epic Games Launcher (HKLM-x32\...\{0E63B233-DC24-442C-BD38-0B91D90FEC5B}) (Version: 1.1.167.0 - Epic Games, Inc.)
Epic Online Services (HKLM-x32\...\{19695986-25CE-41AC-9C6F-54794653EDBA}) (Version: 2.0.36.0 - Epic Games, Inc.)
ESET Security (HKLM\...\{3B47BDC5-99BF-4F5C-A303-1F0F9DBC74F6}) (Version: 19.0.14.0 - ESET, spol. s r.o.)
FakerInput (HKLM\...\{BF63C434-BF91-4666-B817-AD7B5C34AE91}) (Version: 0.1.0 - Ryochan7)
Far Cry New Dawn (HKLM-x32\...\Far Cry New Dawn_is1) (Version: - )
FastShare.cz verzia 2.3.1 (HKLM-x32\...\FastShare.cz_is1) (Version: 2.3.1 - )
FIFA 21 (HKLM-x32\...\{A918ACE7-A83B-41F4-8746-AEF8DC821879}) (Version: 1.0.72.32477 - Electronic Arts)
FlixiCam 1.3.1 (HKLM-x32\...\FlixiCam) (Version: 1.3.1 - FlixiCam)
Forza Horizon 4 Ultimate Edition MULTi16 - ElAmigos verze 1.332.904.2 (HKLM-x32\...\{236DFCEC-29C2-4C1B-8598-32308D2B7BAB}_is1) (Version: 1.332.904.2 - Microsoft)
Forza Horizon 5 (HKLM-x32\...\Forza Horizon 5_is1) (Version: - )
GameSDK Service (HKLM-x32\...\{1a192f34-128f-43ed-a83d-f998b9d5f646}) (Version: 1.0.0.4 - ASUSTek COMPUTER INC.)
GameSDK Service (HKLM-x32\...\{7160DA8D-3F25-4F6E-ABC8-F693551D82FA}) (Version: 1.0.0.4 - ASUSTek COMPUTER INC.) Hidden
Gaming Mouse (HKLM-x32\...\Gaming Mouse 3) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 143.0.7499.170 - Google LLC)
Grand Theft Auto V (HKLM-x32\...\{5EFC6C07-6B87-43FC-9524-F9E967241741}) (Version: 1.0.3095.0 - Rockstar Games)
Heavy Rain (HKLM-x32\...\{EE94E976-82B0-470C-97A8-ADF41EF11F2A}_is1) (Version: - Quantic Dream)
HidHide (HKLM\...\{48DD38C8-443E-4474-A249-AB32389E08F6}) (Version: 1.2.128 - Nefarius Software Solutions e.U.)
Hitman 2 (HKLM-x32\...\{F7E0BCEB-1F73-468C-BC5B-CFD39EC31149}_is1) (Version: - IO Interactive)
Hitman 3 (HKLM-x32\...\Hitman 3_is1) (Version: - )
Chrome Remote Desktop Host (HKLM-x32\...\{55E2698F-22F7-4AAF-8F5B-5CB55252BB37}) (Version: 143.0.7499.7 - Google LLC)
ICA (HKLM-x32\...\{EE80DAA0-0071-475C-A222-F1782888FC55}) (Version: 19.1.0.10 - Corel Corporation) Hidden
Icecream Video Editor 3 verzia 3.22 (HKLM-x32\...\{269BD8C5-950E-432F-9FAB-4CB8C3BAAAF4}_is1) (Version: 3.22 - Icecream Apps)
Icecream Video Editor verzia 2.70 (HKLM-x32\...\{DB083527-50BE-4762-8CBE-30CB8E19E19C}_is1) (Version: 2.70 - Icecream Apps)
Intel(R) Chipset Device Software (HKLM\...\{4F954DAC-F23D-4AF8-A730-65C372BF6661}) (Version: 10.1.18508.8239 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{a884defb-81e9-46b8-a7f2-5d27c231bf51}) (Version: 10.1.18508.8239 - Intel(R) Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1842.12.0.1168 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{729EDC54-AD3F-415F-B075-EFF12200F7E8}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{ADDD241F-86F9-47E5-80F2-6A2BAE7D7D49}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{13598D46-EA89-45DD-8E29-EE4479665F99}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{11CA971A-7918-49EF-9A4A-43335B4589E9}) (Version: 17.7.0.1006 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 17.7.0.1006 - Intel Corporation)
Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.50.638.1 - Intel Corporation) Hidden
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.50.638.1 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{99ee3c29-c7cd-450f-8db9-d43cc49de1c7}) (Version: 1.50.638.1 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000070-0200-1033-84C8-B8D95FA3C8C3}) (Version: 20.70.0 - Intel Corporation)
Intel® Hardware Accelerated Execution Manager (HKLM\...\{73250D12-B600-4ED6-AFC0-10D9D8EDA745}) (Version: 7.3.2 - Intel Corporation)
Intel® Optane™ Pinning Explorer Extensions (HKLM\...\{AA90D357-23D3-44C1-954D-7105B0C08F38}) (Version: 17.7.0.1006 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{f8c930bd-0a68-425f-8c11-87723d1e2c97}) (Version: 20.90.0 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{EF71AFFB-85B5-407C-A301-39EA25F98313}) (Version: 20.90.0.2270 - Intel Corporation) Hidden
IPM_VS_Pro64 (HKLM\...\{1BD7EE90-7C52-4142-B4DD-55C4F28F9EE7}) (Version: 19.0 - Corel Corporation) Hidden
Java 8 Update 441 (64-bit) (HKLM\...\{77724AE4-039E-4CA4-87B4-2F64180441F0}) (Version: 8.0.4410.7 - Oracle Corporation)
Java 8 Update 441 (HKLM-x32\...\{77724AE4-039E-4CA4-87B4-2F32180441F0}) (Version: 8.0.4410.7 - Oracle Corporation)
Java SE Development Kit 7 Update 80 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170800}) (Version: 1.7.0.800 - Oracle)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kena Bridge of Spirits (HKLM-x32\...\Kena Bridge of Spirits_is1) (Version: - )
Kigo Netflix Video Downloader version 1.51 (HKLM-x32\...\{62789724-F4C9-2021-1983-90091911AAA}_is1) (Version: 1.51 - )
Kingston AURA DRAM Component (HKLM\...\{965CDF5F-901C-476F-B3A8-7396701B1129}) (Version: 1.1.12 - KINGSTON COMPONENTS INC.) Hidden
Kingston AURA DRAM Component (HKLM-x32\...\{2237a879-7fa4-4e21-ae3b-00f6a649b9d9}) (Version: 1.1.12 - KINGSTON COMPONENTS INC.) Hidden
Last Train Home (HKLM-x32\...\Last Train Home_is1) (Version: - )
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Lazesoft Recover My Password version 4.3 Home Edition (HKLM-x32\...\LS-C4DC987A-47E2-487C-9F63-7E1DB5F88FC3_is1) (Version: 4.3 - Lazesoft)
League of Legends (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
Marvels SpiderMan 2 (HKLM-x32\...\Marvels SpiderMan 2_is1) (Version: - )
Microsoft .NET Host - 5.0.4 (x64) (HKLM\...\{DD901386-A294-4FF1-A683-0EFF5C66209A}) (Version: 40.16.29816 - Microsoft Corporation) Hidden
Microsoft .NET Host - 6.0.6 (x64) (HKLM\...\{F48FB46C-3334-47AA-98ED-D5A47DED33F1}) (Version: 48.27.42327 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.8 (x64) (HKLM\...\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}) (Version: 64.32.18380 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 5.0.4 (x64) (HKLM\...\{773EF543-570F-4746-953A-3CB19DFCB3E2}) (Version: 40.16.29816 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.6 (x64) (HKLM\...\{089493D9-430B-4210-8A47-8F611288F461}) (Version: 48.27.42327 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.8 (x64) (HKLM\...\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}) (Version: 64.32.18380 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.4 (x64) (HKLM\...\{879C9645-ADF3-4697-915B-00B76EBA629F}) (Version: 40.16.29816 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.6 (x64) (HKLM\...\{00478901-CD97-4A20-8FF3-3276865A2B44}) (Version: 48.27.42327 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.8 (x64) (HKLM\...\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}) (Version: 64.32.18380 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 143.0.3650.96 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 143.0.3650.96 - Microsoft Corporation) Hidden
Microsoft Office 2016 Professional Plus - sk-sk (HKLM\...\ProPlusRetail - sk-sk) (Version: 16.0.19127.20302 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\OneDriveSetup.exe) (Version: 25.222.1112.0002 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.24.28402 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{7AE98414-C8A5-47D4-BEA7-EBD4A2C57A77}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{798627BD-2A12-4C07-A39B-6D0537295702}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34438 (HKLM-x32\...\{b49c10dd-4d54-45f8-ad13-fa25704456a4}) (Version: 14.42.34438.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.42.34438 (HKLM-x32\...\{ba10fda9-f731-441f-a999-000bbb7ceec2}) (Version: 14.42.34438.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34438 (HKLM\...\{E528AD94-12D7-42C4-91A3-908BE28E9BD2}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34438 (HKLM\...\{2E15F519-4FDA-4834-B4EE-7EFCE7D8D4EE}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.42.34438 (HKLM-x32\...\{A5592FEF-F948-4BA6-A066-8BBFC2DC7EE1}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.42.34438 (HKLM-x32\...\{5D0C4511-3CA1-4FF8-A4BA-C0E1957ABEEA}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 5.0.4 (x64) (HKLM\...\{A04C83D6-2FC0-4F09-9166-E870E5A9E168}) (Version: 40.16.29817 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 5.0.4 (x64) (HKLM-x32\...\{ff817559-f11f-4faa-af52-26feb4b46fff}) (Version: 5.0.4.29817 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 6.0.6 (x64) (HKLM\...\{B9E46F95-AC34-4943-AFE2-B72EFD56C6C0}) (Version: 48.27.42342 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.6 (x64) (HKLM-x32\...\{aad3b888-fde2-48c0-95c2-2f7a729283fb}) (Version: 6.0.6.31318 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.8 (x64) (HKLM\...\{663E7053-3B36-4AE5-8223-234867FAEAE6}) (Version: 64.32.18376 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.8 (x64) (HKLM-x32\...\{33832ff3-5583-4b81-b270-d9fd42760e1a}) (Version: 8.0.8.33916 - Microsoft Corporation)
Monster Hunter World (HKLM-x32\...\Monster Hunter World_is1) (Version: - )
Mortal Shell (HKLM-x32\...\Mortal Shell_is1) (Version: - )
Mozilla Firefox (x64 sk) (HKLM\...\Mozilla Firefox 143.0 (x64 sk)) (Version: 143.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 76.0.1 - Mozilla)
MSI Center SDK (HKLM-x32\...\{15289038-41BE-48F8-B8B9-0B1021D3089E}}_is1) (Version: 3.2023.1127.01 - MSI)
MSI MysticLight (HKLM-x32\...\{93874B70-6C5E-446A-AF4D-E5AC776A0386}}_is1) (Version: 3.0.0.46 - MSI)
MX vs ATV All Out 2020 AMA Pro Motocross Championship (HKLM-x32\...\MX vs ATV All Out 2020 AMA Pro Motocross Championship_is1) (Version: - )
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
NewBlue Paint Effects for Windows (HKLM-x32\...\NewBlue Paint Effects for Windows) (Version: 3.0 - NewBlue)
NewBlue Titler Pro for Windows (HKLM-x32\...\NewBlue Titler Pro for Windows) (Version: 1.5 - NewBlue)
NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)
NewBlue Video Essentials VII for Windows (HKLM-x32\...\NewBlue Video Essentials VII for Windows) (Version: 3.0 - NewBlue)
Next Car Game Wreckfest MULTi12 - ElAmigos version 1.268578 (HKLM-x32\...\{82B09F3C-8719-4BFB-9E5C-1A4E0FDDECEF}_is1) (Version: 1.268578 - THQ Nordic)
NVIDIA App 11.0.5.420 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.5.420 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.5.11504.36206172 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.5.11504.36206172 - NVIDIA Corporation)
NVIDIA Grafický ovládač 591.59 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 591.59 - NVIDIA Corporation)
NVIDIA Softvér systému s podporou technológie PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 31.0.3 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.19127.20154 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.19127.20154 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.19127.20302 - Microsoft Corporation) Hidden
Opera Stable 125.0.5729.49 (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Opera 125.0.5729.49) (Version: 125.0.5729.49 - Opera Software)
Parsec (HKLM-x32\...\Parsec) (Version: 150-101b - Parsec Cloud Inc.)
Patriot Viper DRAM RGB (HKLM\...\{1F9C282E-CCB4-4D8E-A5CB-7B74DFCD8C95}) (Version: 1.0.9.2 - Patriot Memory) Hidden
Patriot Viper DRAM RGB (HKLM-x32\...\{fdc098ce-d76c-4e2e-a0a6-01a24e9a1f7d}) (Version: 1.0.9.2 - Patriot Memory)
Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.0.6.5 - Patriot Memory) Hidden
Patriot Viper M2 SSD RGB (HKLM-x32\...\{387596e5-692e-4baf-bec2-3338d555df7a}) (Version: 1.0.6.5 - Patriot Memory)
PC Building Simulator Razer Workshop (HKLM-x32\...\PC Building Simulator Razer Workshop_is1) (Version: - )
PHISON HAL (HKLM\...\{966E33F0-6786-4B38-AA29-C1B3F6C1955D}) (Version: 1.0.9.0 - PHISON Electronics Corp.) Hidden
PHISON HAL (HKLM-x32\...\{549da357-1b81-456b-83f2-dcc47c41dfff}) (Version: 1.0.9.0 - PHISON Electronics Corp.) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.8 - Google, Inc.)
PingPlotter 5 (HKLM-x32\...\{52022F58-76C1-45C7-9279-5A7748072A9A}) (Version: 5.25.20.9089 - Pingman Tools, LLC) Hidden
PingPlotter 5 (HKLM-x32\...\PingPlotter 5 5.25.20.9089) (Version: 5.25.20.9089 - Pingman Tools, LLC)
PUBG Lite (HKLM-x32\...\PUBG Lite_is1) (Version: 1.0.0.7 - )
RAGE 2 (HKLM-x32\...\RAGE 2_is1) (Version: - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8581 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Red Dead Redemption 2 (HKLM-x32\...\Red Dead Redemption 2) (Version: 1.0.1491.18 - Rockstar Games)
RescuePRO Deluxe 7.0.2.2 (HKLM-x32\...\{38D9AAB8-116B-40BB-A801-50B71DF82D24}_is1) (Version: 7.0.2.2 - LC Technology International, Inc.)
Resident Evil Village (HKLM-x32\...\Resident Evil Village_is1) (Version: - )
RIDE 3 (HKLM-x32\...\RIDE 3_is1) (Version: - )
Riot Client (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Riot Game Riot_Client.) (Version: - Riot Games, Inc)
Roblox Player for Marcel (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\roblox-player) (Version: - Roblox Corporation)
Roblox Studio for Marcel (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\roblox-studio) (Version: - Roblox Corporation)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.84.1829 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.2.7.0 - Rockstar Games)
ROG Armoury (HKLM-x32\...\{FE703E21-A9E0-4DB3-9115-404175C8222F}) (Version: 3.00.44 - ASUSTeK Computer Inc.)
ROG CHAKRAM (2.4GHz) (HKLM-x32\...\{ad70ebbb-8dc8-4208-ab08-7db2ebbaaae3}) (Version: 3.00.18 - ASUSTek Computer Inc.)
ROG CHAKRAM (HKLM-x32\...\{d68c9f4f-c226-4682-aefb-f183b5c7b446}) (Version: 3.00.18 - ASUSTek Computer Inc.)
ROG Live Service (HKLM\...\{2D87BFB6-C184-4A59-9BBE-3E20CE797631}) (Version: 3.3.12.0 - ASUSTek COMPUTER INC.)
Sekiro Shadows Die Twice (HKLM-x32\...\Sekiro Shadows Die Twice_is1) (Version: - )
Setup (HKLM-x32\...\{F8B95E3C-40A0-49CE-B5F9-3861F238B9FF}) (Version: 19.1.0.10 - Corel Corporation) Hidden
Share64 (HKLM\...\{A61EEC3A-E37C-49A5-BE61-7AEE04F1A15D}) (Version: 19.1.0.10 - Corel Corporation) Hidden
Sniper Ghost Warrior Contracts 2 (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\FLT_Sniper Ghost Warrior Contracts 2) (Version: - )
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Speedtest by Ookla (HKLM\...\{CFF1450F-71E9-4286-82AE-99E6D797CAD3}) (Version: 1.1.23.001 - Ookla)
Split Fiction (HKLM-x32\...\Split Fiction_is1) (Version: - )
Star Wars Jedi Fallen Order (HKLM-x32\...\Star Wars Jedi Fallen Order_is1) (Version: - )
STAR WARS Jedi Survivor (HKLM-x32\...\STAR WARS Jedi Survivor_is1) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Streamlabs OBS 0.11.11 (HKLM\...\029c4619-0385-5543-9426-46f9987161d9) (Version: 0.11.11 - General Workings, Inc.)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.2.3 - TeamSpeak Systems GmbH)
The Smurfs – Dreams (HKLM-x32\...\1882505557_is1) (Version: 0.0.17 - GOG.com)
Tibbo Device Server Toolkit (HKLM-x32\...\{2AA4E05D-7F8C-42CB-9D98-C0D63D42D304}) (Version: - )
Tom Clancys Ghost Recon Wildlands MULTi16 - ElAmigos verze 1.29 (HKLM-x32\...\{C1B8475A-9A07-4043-B95E-4A06FEA79F0C}_is1) (Version: 1.29 - Ubisoft)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.50 - Ghisler Software GmbH)
Trackmania (HKLM-x32\...\Uplay Install 5595) (Version: - Ubisoft)
Twitch (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 8.0.0 - Twitch Interactive, Inc.)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 50.0 - Ubisoft)
UE4 Prerequisites (x64) (HKLM\...\{D7B591D8-1091-4A00-A0B3-5301C45E5D51}) (Version: 1.0.14.0 - Epic Games, Inc.) Hidden
UE4 Prerequisites (x64) (HKLM-x32\...\{0d995f46-317b-4b5f-bf3e-9f98bae9d339}) (Version: 1.0.14.0 - Epic Games, Inc.) Hidden
Universal Holtek RGB DRAM (HKLM\...\{826388E4-E31F-4514-948B-3BB954FB3EAF}) (Version: 1.0.0.2 - PD) Hidden
Universal Holtek RGB DRAM (HKLM-x32\...\{6870588f-9f28-488b-a169-cf548ad6b393}) (Version: 1.0.0.2 - PD)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
ViGEm Bus Driver (HKLM\...\{966606F3-2745-49E9-BF15-5C3EAA4E9077}) (Version: 1.22.0 - Nefarius Software Solutions e.U.)
Visual C++ 10.0 CRT (x64) (HKLM\...\{BFF61907-AA2D-3A26-8666-98D956A62ABC}) (Version: 10.0 - Microsoft Corporation) Hidden
VIVAT SLOVAKIA (HKLM-x32\...\VIVAT SLOVAKIA_) (Version: - )
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
VSClassic64 (HKLM\...\{99B95309-4793-43D9-8F1C-EC086FC74CB5}) (Version: 19.1.0.10 - Corel Corporation) Hidden
VSPro64 (HKLM\...\{2287D9D6-98FC-4985-B27F-771BBD702B7F}) (Version: 19.1.0.10 - Corel Corporation) Hidden
Wargaming.net Game Center (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Wargaming.net Game Center) (Version: 25.6.0.709 - Wargaming.net)
WD_BLACK AN1500 (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden
WD_BLACK AN1500 (HKLM-x32\...\{e42c5874-37b0-4977-9e8d-70bf006e1f76}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden
WebM Media Foundation Components (HKLM-x32\...\webmmf) (Version: 1.0.1.2 - WebM Project)
WGCheck_EU (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\1259076438) (Version: - Wargaming.net)
Windows Kontrola stavu počítača (HKLM\...\{BDBC15A5-E9F1-485F-A0D3-7526052FB2B2}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Windows Movie Maker 2022 (HKLM\...\{9CC29C6A-B5FE-497B-8F23-52A2557A92C0}}_is1) (Version: - VideoWin)
WinRAR 5.61 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH)
Wondershare Filmora X(Build 10.7.8.12) (HKLM\...\Wondershare Filmora X_is1) (Version: - Wondershare Software)
Wondershare Helper Compact 2.6.0 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.6.0 - Wondershare)
World of Tanks Classic (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\WOTCL.WW.PRODUCTION) (Version: - Wargaming.net)
World of Tanks EU (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\1703131623) (Version: - Wargaming.net)
World of Tanks EU (HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\2314027414) (Version: - Wargaming.net)
WWE 2K19 (HKLM-x32\...\WWE 2K19_is1) (Version: - )
Xilisoft Video Converter Ultimate (HKLM-x32\...\Xilisoft Video Converter Ultimate) (Version: 7.8.24.20200219 - Xilisoft)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)
ZebraDesigner 3 (HKLM\...\{B5E9064F-6922-46E5-9EAC-F167340308A6}) (Version: 3.2.1.577 - Zebra Technologies Corporation) Hidden
ZebraDesigner 3 (HKLM-x32\...\ZebraDesigner 3) (Version: 3.2.1.577 - Zebra Technologies Corporation)
Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3624.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-01] ()
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-01] ()
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3912.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-01] ()
@{MicrosoftWindows.57242383.Tasbar_1000.26100.7309.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57242383.Tasbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy [2025-12-13] (Microsoft Windows)
@{MicrosoftWindows.58683691.InpApp_1000.26100.6725.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.58683691.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.58683691.InpApp_cw5n1h2txyewy [2025-12-03] ()
@{MicrosoftWindows.58683691.InpApp_1000.26100.6899.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.58683691.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.58683691.InpApp_cw5n1h2txyewy [2025-12-03] ()
@{MicrosoftWindows.58683691.InpApp_1000.26100.6901.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.58683691.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.58683691.InpApp_cw5n1h2txyewy [2025-12-03] ()
@{MicrosoftWindows.58683691.InpApp_1000.26100.7019.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.58683691.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.58683691.InpApp_cw5n1h2txyewy [2025-12-03] ()
@{MicrosoftWindows.59379618.InpApp_1000.26100.7019.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59379618.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy [2025-12-13] (Microsoft Windows)
@{MicrosoftWindows.59379618.InpApp_1000.26100.7171.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59379618.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy [2025-12-13] (Microsoft Windows)
@{MicrosoftWindows.59379618.InpApp_1000.26100.7309.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59379618.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy [2025-12-13] (Microsoft Windows)
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2025-12-12] ()
Age of Empires: Definitive Edition -> C:\Program Files\WindowsApps\Microsoft.MSDallas_1.3.19864.2_x64__8wekyb3d8bbwe [0] ()
Armoury Crate -> C:\Program Files\WindowsApps\B9ECED6F.ArmouryCrate_6.3.9.0_x64__qmba6cd70vzyy [2025-12-16] (ASUSTeK COMPUTER INC.)
Balík pre prostredie funkcií Windowsu -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy [2025-12-13] (Microsoft Windows)
Balík pre prostredie funkcií Windowsu -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy [2025-12-13] (Microsoft Windows)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.27.6410.0_x64__rz1tebttyb220 [2025-12-20] (Dolby Laboratories)
Doplnok mediálneho nástroja pre Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-11-06] (Microsoft Corporation)
EasyMail for Gmail -> C:\Program Files\WindowsApps\61545TimGrabinat.wAPPerforGmail_2.5.9.0_x64__rcb0qdgx4z9ca [0] ()
ESET Context Menu -> C:\Program Files\ESET\ESET Security [2025-12-24] (Sparse Package)
HyperX NGENUITY -> C:\Program Files\WindowsApps\33C30B79.HyperXNGenuity_5.35.0.0_x64__0a78dr3hq0pvt [2025-11-19] (HP Inc.) [Startup Task]
Local Artificial Intelligence Manager -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\AI [2025-10-17] ()
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-04-21] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-04-21] (Microsoft Corporation) [MS Ad]
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_55.20610.576.0_x64__8wekyb3d8bbwe [2025-07-04] (Microsoft Corporation)
Microsoft.Office.ActionsServer -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\ActionsServer [2025-10-17] ()
MSI Center -> C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.MSICenter_2.0.63.0_x64__kzh8wxbdkxb8p [2025-12-17] (MICRO-STAR INTERNATIONAL CO., LTD) [Startup Task]
Net Speed Meter -> C:\Program Files\WindowsApps\4789ZeroByte.NetSpeedMeter_5.0.0.0_neutral__gvheqymwk6zrr [2025-11-12] (Zero Byte) [Startup Task]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-07] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16 [2025-10-17] ()
Phototastic Collage -> C:\Program Files\WindowsApps\ThumbmunkeysLtd.PhototasticCollage_3.27.25.0_x64__nfy108tqq3p12 [2023-01-15] (Thumbmunkeys Ltd)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.53.374.0_x64__dt26b99r8h8gj [2025-10-27] (Realtek Semiconductor Corp)
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0 [2025-12-22] (Spotify AB) [Startup Task]
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-01-29] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8000.675.1142.0_x64__8wekyb3d8bbwe [2025-11-21] (Microsoft Corp.)
Windows File Recovery -> C:\Program Files\WindowsApps\Microsoft.WindowsFileRecovery_0.1.20151.0_x64__8wekyb3d8bbwe [2025-04-21] (Microsoft Corporation)
Wireless Display Adapter -> C:\Program Files\WindowsApps\Microsoft.SurfaceWirelessDisplayAdapter_4.232.137.0_x64__8wekyb3d8bbwe [2024-02-07] (Microsoft Corporation) [Startup Task]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1514861923-3393839258-3891969025-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-1514861923-3393839258-3891969025-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-1514861923-3393839258-3891969025-1001_Classes\CLSID\{47E6DCAF-41F8-441C-BD0E-A50D5FE6C4D1}\localserver32 -> C:\Users\Marcel\AppData\Local\Microsoft\OneDrive\25.222.1112.0002_1\OneDrive.Sync.Service.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1514861923-3393839258-3891969025-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\Marcel\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (SteelSeries France SASU -> A-Volute)
CustomCLSID: HKU\S-1-5-21-1514861923-3393839258-3891969025-1001_Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}\localserver32 -> C:\Users\Marcel\AppData\Local\Microsoft\OneDrive\25.222.1112.0002_1\OneDrive.Sync.Service.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1514861923-3393839258-3891969025-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1}\localserver32 -> "C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-1514861923-3393839258-3891969025-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1514861923-3393839258-3891969025-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems Incorporated -> Adobe Systems)
ShellIconOverlayIdentifiers: [ OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-08-07] (Intel(R) Rapid Storage Technology -> )
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2025-09-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-26] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-26] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-08-07] (Intel(R) Rapid Storage Technology -> )
ContextMenuHandlers3: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] (Empty Loop -> )
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4646b47d9477048e\nvshext.dll [2025-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-26] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers6: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] (Empty Loop -> )
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [vidc.XVID] => C:\Windows\system32\xvidvfw.dll [255488 2011-05-30] () [File not signed]
HKLM\...\Drivers32: [vidc.pDAD] => C:\Windows\system32\prodad-codec.dll [607256 2020-12-10] (proDAD GmbH -> proDAD GmbH)
HKLM\...\Drivers32: [msacm.dvacm_vspx9] => c:\Program Files\Corel\Corel VideoStudio X9\DVACM.acm [23552 2016-02-03] (Corel TW Corp.) [File not signed]
HKLM\...\Drivers32: [MidisrvTransferComplete] => 0
HKLM\...\Drivers32: [vidc.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [240640 2011-05-30] () [File not signed]
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Chrome Remote Desktop.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=efmjfjelnicpmdcmfikempdhlmainjcb
ShortcutWithArgument: C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Vzdialená plocha Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\YouTube.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\Public\Desktop\VideoStudio X9 Training.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> www.studiobacklot.tv/videostudioX9
==================== Loaded Modules (Whitelisted) =============
2019-01-04 19:06 - 2009-06-23 04:42 - 000043008 _____ () [File not signed] C:\Program Files (x86)\FastShare\libgcc_s_dw2-1.dll
2019-01-04 19:06 - 2009-01-10 20:32 - 000011362 _____ () [File not signed] C:\Program Files (x86)\FastShare\mingwm10.dll
2021-06-06 08:33 - 2023-12-21 08:58 - 000014848 _____ () [File not signed] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\FakerInputDll.dll
2021-03-31 21:47 - 2022-01-17 01:30 - 000090624 _____ (Bernhard Millauer,Uwe Mayer, Konrad Mattheis) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\WPFLocalizeExtension.dll
2021-03-31 21:47 - 2020-01-28 21:08 - 000013824 _____ (bloomtom) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\HttpProgress.dll
2019-01-04 19:06 - 2012-11-26 13:55 - 000288256 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\FastShare\plugins\imageformats\qjpeg4.dll
2019-01-04 19:06 - 2013-05-20 16:11 - 002892800 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\FastShare\QtCore4.dll
2019-01-04 19:06 - 2012-11-26 10:46 - 010153984 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\FastShare\QtGui4.dll
2019-01-04 19:06 - 2012-11-26 10:23 - 001306624 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\FastShare\QtNetwork4.dll
2019-01-04 19:06 - 2012-11-26 11:04 - 004023808 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\FastShare\QtXmlPatterns4.dll
2021-04-02 11:12 - 2023-10-30 02:38 - 001198080 _____ (DotNetProjects) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\DotNetProjects.Wpf.Extended.Toolkit.dll
2021-03-31 21:47 - 2022-02-10 17:07 - 000336896 _____ (GitHub Community) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Microsoft.Win32.TaskScheduler.dll
2021-04-02 11:12 - 2022-11-08 10:46 - 000339456 _____ (havendv -> Lakritzator and Philipp Sumi) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\H.NotifyIcon.dll
2022-07-21 15:22 - 2022-11-08 10:47 - 000109568 _____ (havendv -> Lakritzator and Philipp Sumi) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\H.NotifyIcon.Wpf.dll
2020-04-19 17:06 - 2020-04-19 17:06 - 000000000 ___JL (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems32.dll] C:\Program Files (x86)\Microsoft Office\Root\Office16\AppVIsvSubsystems32.dll
2020-04-19 17:06 - 2020-04-19 17:06 - 000000000 ___JL (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R32.dll] C:\Program Files (x86)\Microsoft Office\Root\Office16\c2r32.dll
2022-11-08 17:12 - 2022-09-08 00:16 - 000017920 _____ (Michael Denny, Contributors (see GitHub repo)) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\WpfScreenHelper.dll
2021-03-31 21:47 - 2023-12-21 08:58 - 000213504 _____ (Nefarius Software Solutions e.U.) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Nefarius.ViGEm.Client.dll
2024-12-09 17:24 - 2024-12-09 17:24 - 000175104 _____ (Nefarius Software Solutions e.U.) [File not signed] C:\Users\Marcel\AppData\Local\Temp\Costura\97FA0AE0D994A8E9C523B190D4B69A1A\64\vigemclient.dll
2021-03-31 21:47 - 2022-12-29 17:01 - 000837120 _____ (NLog) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\NLog.dll
2021-04-02 11:12 - 2023-12-31 12:33 - 004169728 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\DS4Windows.dll
2021-06-06 08:33 - 2023-12-21 08:58 - 000010752 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\FakerInputWrapper.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000011776 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\ar\DS4Windows.resources.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000011776 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\cs\DS4Windows.resources.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000019968 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\de\DS4Windows.resources.dll
2023-09-03 14:18 - 2023-12-31 12:33 - 000035328 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\el\DS4Windows.resources.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000010752 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\es\DS4Windows.resources.dll
2023-06-26 16:17 - 2023-12-31 12:33 - 000022528 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\fi\DS4Windows.resources.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000024576 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\fr\DS4Windows.resources.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000011264 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\he\DS4Windows.resources.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000010752 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\hu-HU\DS4Windows.resources.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000021504 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\it\DS4Windows.resources.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000019968 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\ja\DS4Windows.resources.dll
2023-11-25 06:49 - 2023-12-31 12:33 - 000025088 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\ms\DS4Windows.resources.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000038912 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\nl\DS4Windows.resources.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000010752 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\pl\DS4Windows.resources.dll
2021-04-13 15:45 - 2023-12-31 12:33 - 000011776 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\pt\DS4Windows.resources.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000010752 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\pt-BR\DS4Windows.resources.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000814080 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\ru\DS4Windows.resources.dll
2023-01-06 12:40 - 2023-12-31 12:33 - 000016896 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\se\DS4Windows.resources.dll
2023-10-30 17:43 - 2023-12-31 12:33 - 000026112 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\tr\DS4Windows.resources.dll
2021-03-31 21:47 - 2023-12-31 12:33 - 000011264 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\uk-UA\DS4Windows.resources.dll
2023-07-28 18:17 - 2023-12-31 12:33 - 000023552 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\vi\DS4Windows.resources.dll
2022-08-08 16:40 - 2023-12-31 12:33 - 000048640 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\zh-Hans\DS4Windows.resources.dll
2022-08-08 16:40 - 2023-12-31 12:33 - 000016896 _____ (Ryochan7) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\Lang\zh-Hant\DS4Windows.resources.dll
2022-08-08 16:40 - 2023-12-21 08:58 - 000019968 _____ (SharpOSC) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\SharpOSC.dll
2025-10-30 16:17 - 2025-10-30 16:17 - 000852992 _____ (sta) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\websocket-sharp\7659b911a6cc3464cd612c6df1c11234\websocket-sharp.ni.dll
2021-08-03 09:40 - 2019-05-02 14:48 - 000072704 _____ (TODO: <Company name>) [File not signed] C:\Program Files (x86)\ASUS\ROG Armoury\Protocol\Interrupt\InterruptTransfer.dll
2025-12-16 19:59 - 2025-12-16 19:59 - 006164376 _____ (Unity Technologies SF -> Parsec) [File not signed] [File is in use] C:\Users\Marcel\AppData\Roaming\Parsec\parsecd-150-101b.dll
2021-03-31 21:47 - 2022-01-17 01:12 - 000036864 _____ (Uwe Mayer,Konrad Mattheis,Bernhard Millauer) [File not signed] [File is in use] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\XAMLMarkupExtensions.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [470]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
URLSearchHook: [S-1-5-21-1514861923-3393839258-3891969025-500] ATTENTION => Default URLSearchHook is missing
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\ssv.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\jp2ssv.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2018-09-15 08:31 - 2022-06-04 20:12 - 000001188 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 cbs.wondershare.com
127.0.0.1 www.cbs.wondershare.com
127.0.0.1 platform.wondershare.com
127.0.0.1 www.wondershare.com
127.0.0.1 www.cbs.wondershare.com
127.0.0.1 www.cbs.wondershare.com
127.0.0.1 www.cbs.wondershare.com
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 217.119.121.226 - 217.119.121.225
Windows Firewall is enabled.
Network Binding:
=============
Sieťové pripojenie Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
Ethernet: Killer E2500 Gigabit Ethernet Controller -> e2xw10x64.sys
Wi-Fi: Intel(R) Wireless-AC 9560 160MHz -> Netwtw08.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\;C:\Program Files\NVIDIA Corporation\NVIDIA app\NvDLISR
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Marcel\OneDrive\Počítač\gallery_2021_Test Days 2021_12.6.2021 Budmerice_originals_20210612_pict213.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_11F810DC58703105CF0600BCC1ED96D2"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{F238B8E9-6277-465E-89F9-568FEA079295}] => (Allow) F:\Assassin's Creed Mirage\ACMirage_plus.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{03252034-92F7-4832-AECB-A089D22DFB69}] => (Allow) F:\the Crew 2\PrinceOfPersiaTLCdemo\TheLostCrown.exe => No File
FirewallRules: [{5A654BEE-3103-4932-B460-90EA0AFA06F7}] => (Allow) G:\A way out\AWayOut\Haze1\Binaries\Win64\AWayOut_friend.exe (Hazelight Studios AB -> Hazelight Studios AB)
FirewallRules: [{38314D95-CC89-4325-9DD2-4E323FD88FE0}] => (Allow) G:\A way out\AWayOut\Haze1\Binaries\Win64\AWayOut_friend.exe (Hazelight Studios AB -> Hazelight Studios AB)
FirewallRules: [{06814624-9854-43EA-BF27-6164F52CEB65}] => (Allow) G:\A way out\AWayOut\Haze1\Binaries\Win64\AWayOut.exe (Hazelight Studios AB -> Hazelight Studios AB)
FirewallRules: [{61D26D6A-A9A9-48E2-B35F-857B108A751E}] => (Allow) G:\A way out\AWayOut\Haze1\Binaries\Win64\AWayOut.exe (Hazelight Studios AB -> Hazelight Studios AB)
FirewallRules: [{EFFB4A15-4FE8-4321-93F8-6EAD8D7DC7EE}] => (Allow) G:\SteamLibrary\steamapps\common\Wreckfest\Wreckfest.exe () [File not signed]
FirewallRules: [{2579F33E-4C9E-409B-AAB5-B602F4CAFF0F}] => (Allow) G:\SteamLibrary\steamapps\common\Wreckfest\Wreckfest.exe () [File not signed]
FirewallRules: [{7AA05FAA-4829-46FC-B592-FA44F348022E}] => (Allow) G:\SteamLibrary\steamapps\common\Wreckfest\Wreckfest_x64.exe () [File not signed]
FirewallRules: [{957A3DE3-81A7-4FE4-A144-8675E44484EB}] => (Allow) G:\SteamLibrary\steamapps\common\Wreckfest\Wreckfest_x64.exe () [File not signed]
FirewallRules: [{C3B05AC9-0D1B-4F9A-BDDD-AB767086024C}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Half-Life\hl.exe (Valve Corp. -> Valve)
FirewallRules: [{FA6E16C2-34A2-4E53-BC29-A5A51E8CA183}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Half-Life\hl.exe (Valve Corp. -> Valve)
FirewallRules: [{BA0FC8E1-9E25-45BB-AC8D-764FF998CE07}] => (Allow) F:\SteamLibrary\steamapps\common\Sea of Thieves\Athena\Binaries\Win64\SoTGame.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{61499B34-FE15-46E3-AAA4-21D343EB5F11}] => (Allow) F:\SteamLibrary\steamapps\common\Sea of Thieves\Athena\Binaries\Win64\SoTGame.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F6D064B2-7A5D-44C8-9507-0F9C93736EC1}] => (Allow) G:\SteamLibrary\steamapps\common\Grounded\Grounded.exe (Obsidian Entertainment, Inc. -> Epic Games, Inc.)
FirewallRules: [{C340B9A6-DBA9-4C5D-9E1F-86E1B6385B71}] => (Allow) G:\SteamLibrary\steamapps\common\Grounded\Grounded.exe (Obsidian Entertainment, Inc. -> Epic Games, Inc.)
FirewallRules: [{5F8D2A1E-E46C-4F1B-8430-E96718ACEC1E}] => (Allow) G:\SteamLibrary\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe () [File not signed]
FirewallRules: [{E3B12315-4F0B-4C8B-A492-3204F6BA9C85}] => (Allow) G:\SteamLibrary\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe () [File not signed]
FirewallRules: [{B5325169-A01F-4DB2-8FAC-341B6D4D6654}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{0D6EABB2-89F7-48CB-8EB1-AB2D70CB2218}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{C9908B8B-54A3-44EA-86FD-669FA66D1A79}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{5DC15804-1BEE-4FD5-B3A4-73C6845CD821}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{BCFE214F-8D41-4078-9405-2CE7710CCB70}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{C5BE056A-E383-463E-BA20-4C859B831AFA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{CB3FA553-DD48-4B1E-9858-9F1610F89783}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{96124403-73E5-4CE3-A16C-828DC761232C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{2FBF9C07-2414-4EC9-8EFD-137C0DF84A1E}] => (Allow) G:\SteamLibrary\steamapps\common\Last Oasis\OasisLauncher.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{2092584F-0DE7-4C64-BD54-B43ABFE29607}] => (Allow) G:\SteamLibrary\steamapps\common\Last Oasis\OasisLauncher.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{385DA567-098A-4AD9-AED1-A3F7BF02455D}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
FirewallRules: [{6D7E8F64-B855-4FD3-8BE7-88FAE09642CC}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryHtmlDebugServer.exe (ASUSTeK COMPUTER INC. -> ASUS)
FirewallRules: [{12700D6A-9E19-4465-B7D2-347B4B77EFA6}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe (ASUSTeK COMPUTER INC. -> ASUS)
FirewallRules: [{7E5DCF5C-01E5-4E1C-AB18-AB4016703F67}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light 2\ph\work\bin\x64\DyingLightGame_x64_rwdi.exe (Techland S.A. -> Techland)
FirewallRules: [{190796F2-A6D3-4C27-9438-8BE8CB7B47A3}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light 2\ph\work\bin\x64\DyingLightGame_x64_rwdi.exe (Techland S.A. -> Techland)
FirewallRules: [{09DB0E7F-8E55-46A0-A0C8-10C7B4DF3D03}] => (Block) G:\GodOfWar\GoW.exe => No File
FirewallRules: [{8260592D-9BEB-45F7-A88F-FFECFA7F2C01}] => (Allow) E:\Games\Battlefield V\bfv.exe (EA Digital Illusions CE AB) [File not signed]
FirewallRules: [{E9F1C4FE-589F-4B65-BBFE-686E8ECD5E9D}] => (Allow) E:\Games\Battlefield V\bfv.exe (EA Digital Illusions CE AB) [File not signed]
FirewallRules: [{CCD7BD15-90C3-4B6A-AA83-8A5792C2C655}] => (Allow) E:\Games\Battlefield V\bfvTrial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{D70196FC-D250-40B3-9A16-004814EFDF21}] => (Allow) E:\Games\Battlefield V\bfvTrial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{14FD0AEB-DA87-4CD2-A746-C8D12AB7E325}] => (Allow) C:\Program Files\Zebra Technologies\ZebraDesigner 3\bin.net\ZebraProxy3.exe (Zebra Technologies Corporation -> Zebra Technologies Corporation)
FirewallRules: [{B8E5471D-23CE-4AAB-926D-2C9A4F7B8E06}] => (Allow) C:\Program Files\Zebra Technologies\ZebraDesigner 3\bin.net\ZebraProxy3.exe (Zebra Technologies Corporation -> Zebra Technologies Corporation)
FirewallRules: [{339EFDF1-E91C-4323-9D7E-EB4593C93F02}] => (Allow) G:\Fifa 21\FIFA 21\FIFASetup\fifaconfig.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{03344E7B-40D3-48D4-98AC-046522F77CF3}] => (Allow) G:\Fifa 21\FIFA 21\FIFASetup\fifaconfig.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{68B11AC2-877C-4224-B6DF-8C940F217632}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Bloodhunt\Tiger.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{8519F972-378D-4A72-A7EA-F610358DBBC9}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Bloodhunt\Tiger.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{3A5C22CF-FD32-4676-BA82-30A62A23A5B5}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
FirewallRules: [{D5C78401-A855-4216-AC84-445AB167981E}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe (ASUSTeK COMPUTER INC. -> ASUS)
FirewallRules: [{3D287752-7741-4962-9090-D717B37EADED}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryHtmlDebugServer.exe (ASUSTeK COMPUTER INC. -> ASUS)
FirewallRules: [{DD1C0CB3-79B9-49FD-A77E-DAAF2964B663}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryHtmlDebugServer.exe (ASUSTeK COMPUTER INC. -> ASUS)
FirewallRules: [{65DE684F-F819-42D8-ADAD-5E4584E83294}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
FirewallRules: [{79113E2D-FEB3-4675-8730-FA2CA4596963}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe (ASUSTeK COMPUTER INC. -> ASUS)
FirewallRules: [{5F2ACDDB-C97F-4B68-91FA-A850DC41BFBE}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{A8DB996B-A433-4C01-8B07-2E971C6EFBDE}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{3F4D9CA3-6812-403D-A9AE-58631DD2993C}] => (Allow) G:\Trackmania\trackmania.exe (NADEO SASU -> Nadeo)
FirewallRules: [{44E4DDA3-B22F-48E0-886F-2EFB5E79807D}] => (Allow) G:\Trackmania\trackmania.exe (NADEO SASU -> Nadeo)
FirewallRules: [{48FE90E3-2A1C-4853-A94C-121E51D9E616}] => (Allow) C:\Program Files\Parsec\parsecd.exe (Unity Technologies SF -> Parsec) [File not signed]
FirewallRules: [UDP Query User{60EDA928-8EE3-48F4-86A0-3D174A8D09A1}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe => No File
FirewallRules: [TCP Query User{0D0E2DC6-3E54-49E0-84E9-8D76ED00F9C1}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe => No File
FirewallRules: [{C5262BB4-E336-4AE2-8911-C3AFCDA6362E}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Fall Guys\FallGuys_client_game.exe () [File not signed]
FirewallRules: [{DC42E8BB-3F8F-4A98-B0C1-849B30A68A61}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Fall Guys\FallGuys_client_game.exe () [File not signed]
FirewallRules: [{C8FF3B41-798B-4E07-B055-6B9D53A6DB74}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Fall Guys\FallGuys_client.exe () [File not signed]
FirewallRules: [{030E6172-0846-45E1-B089-59CFEDE71A27}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Fall Guys\FallGuys_client.exe () [File not signed]
FirewallRules: [{F33BB033-0285-4CA9-8BD7-648EEA73EDB0}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\BloonsTD6\BloonsTD6.exe () [File not signed]
FirewallRules: [{30FFF2F6-12E8-4691-9957-CD904D360DCE}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\BloonsTD6\BloonsTD6.exe () [File not signed]
FirewallRules: [{FF7ECF05-B808-4C3D-A1BD-F837E039474F}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Raft\Raft.exe () [File not signed]
FirewallRules: [{71049D21-3684-4918-B4E3-CF3A90E6EE27}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Raft\Raft.exe () [File not signed]
FirewallRules: [{38A39E44-0ABD-41D0-B984-3E497561F3A6}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\FarCry5\bin\FarCry5.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{D440200B-22CF-416C-A3EC-63DF1B48478B}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\FarCry5\bin\FarCry5.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{CA1A03D6-F560-48EA-95F1-8DB2D4F7CAD5}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Mortal Kombat 11\Binaries\Retail\MK11_DX12.exe (WB Games, Inc.) [File not signed]
FirewallRules: [{24696365-6664-4284-B8D1-EA757D8F640E}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Mortal Kombat 11\Binaries\Retail\MK11_DX12.exe (WB Games, Inc.) [File not signed]
FirewallRules: [{D293DFF2-EAFB-4C3B-8934-282F8EEC73FF}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Mortal Kombat 11\Binaries\Retail\MK11.exe (WB Games, Inc.) [File not signed]
FirewallRules: [{B0D936C9-739F-4D54-9F88-C28D4771C5A4}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\Mortal Kombat 11\Binaries\Retail\MK11.exe (WB Games, Inc.) [File not signed]
FirewallRules: [{D77090D5-C80D-4887-AA6C-D18F0EDA187E}] => (Allow) E:\Games\Titan Quest\steamapps\common\Titan Quest Anniversary Edition\WorkshopTool\TQWorkshopTool.exe => No File
FirewallRules: [{64EE3DA9-E0E7-458D-9015-8A1C916F9F30}] => (Allow) E:\Games\Titan Quest\steamapps\common\Titan Quest Anniversary Edition\WorkshopTool\TQWorkshopTool.exe => No File
FirewallRules: [{F7DC6466-DFB5-414D-8238-C398150A1B71}] => (Allow) E:\Games\Titan Quest\steamapps\common\Titan Quest Anniversary Edition\TQ.exe () [File not signed]
FirewallRules: [{6C8DB6B9-F5C4-4338-ACB4-CAC80FCE7D69}] => (Allow) E:\Games\Titan Quest\steamapps\common\Titan Quest Anniversary Edition\TQ.exe () [File not signed]
FirewallRules: [{80C10D29-7E4C-4139-B8AC-D88A8B4D8311}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{16986E0A-D801-47C7-85A5-3904CE620470}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{E53025C9-F459-4797-B4B2-A8B9523BF271}] => (Allow) E:\Games\The Forest\steamapps\common\The Forest\TheForestVR.exe () [File not signed]
FirewallRules: [{8B9B98E2-BE60-4EC8-A835-E7431B177613}] => (Allow) E:\Games\The Forest\steamapps\common\The Forest\TheForestVR.exe () [File not signed]
FirewallRules: [{97D6F4C0-118F-42E7-ACE4-EA026FA871C0}] => (Allow) E:\Games\The Forest\steamapps\common\The Forest\TheForest.exe () [File not signed]
FirewallRules: [{A1598D4F-80BB-4319-A1A1-5F9BAA93E564}] => (Allow) E:\Games\The Forest\steamapps\common\The Forest\TheForest.exe () [File not signed]
FirewallRules: [{1EAF4A0F-AF1B-4656-A9DA-A6ACE8E6C1EF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{AD6DA623-01B1-497B-8DB3-314A46F3B33B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{F77BF968-BF7C-48D9-BE0B-967C2B0EFAF8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{AA3DAFF2-2DC0-4F37-A12F-35A8DF6F7F4B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{4AC6BD3B-73B5-41EB-BE45-38304C72AB50}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [TCP Query User{4635854F-4405-40E9-9F9E-006509C95995}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{F51BADD4-6291-4B29-886A-09BA37A713F0}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> )
FirewallRules: [{BA7D7673-B103-4711-973F-D78859671C5E}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe => No File
FirewallRules: [{4E280D24-C01D-48AB-8801-4C77EDC7CACD}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe => No File
FirewallRules: [{3588E09E-F4B7-4677-B8F1-4F6FA113404F}] => (Allow) E:\Games\Battlefield V\bfvTrial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{D36A95E6-405F-4C8B-A457-9FEAE759720A}] => (Allow) E:\Games\Battlefield V\bfvTrial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{3A094159-0E62-4528-A241-7DCE7F6590FF}] => (Allow) E:\Games\Battlefield V\bfv.exe (EA Digital Illusions CE AB) [File not signed]
FirewallRules: [{659DD04D-3B7D-4BD2-AA13-C001D56D6E98}] => (Allow) E:\Games\Battlefield V\bfv.exe (EA Digital Illusions CE AB) [File not signed]
FirewallRules: [{CE3D311C-ABC3-47DD-B3C9-55A31729B1F7}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22042.702.1226.2352_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B68F22B4-6470-4149-8306-23E2F6CF6A7D}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22042.702.1226.2352_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1DCADB8F-A066-411E-BA00-E3C12BC0FFB5}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\FarCry5\bin\FarCry5.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{8E1E098D-46BD-4FEC-830A-407D36851CAE}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\FarCry5\bin\FarCry5.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{7A987629-E60F-4233-BE75-320E2AA1A6D3}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\FarCry5\bin\ArcadeEditor64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{0BFD96E1-0A41-4AB5-95FE-4D4A609DC245}] => (Allow) D:\Games\Mortal Kombat 11\steamapps\common\FarCry5\bin\ArcadeEditor64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{68F4DA61-68F3-4D72-800F-BB1BCB31E7F5}] => (Allow) G:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{4FC9E373-26BD-4F0A-A3AF-1536CCE3325C}] => (Allow) G:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{8D1B8864-90D5-4B15-A576-79188A280E3E}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe => No File
FirewallRules: [{009CC80E-2328-41FB-9901-D6C9876A6CF8}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe => No File
FirewallRules: [{FB9858EC-F707-4216-A928-29CAAA19DA45}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{BB71F22B-870C-4301-807C-4EDEBAED1C61}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{3DC51261-C701-4B73-9917-83558B4B9696}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{61C0A4D7-5D2A-4164-A84E-6D81F79DF70C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{7F905CE0-4BCF-4D23-8859-3DF2B633AAA5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{67A2CE38-4D92-4456-931E-6C2DB64F4CDE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{AB07D894-8661-48BA-B53A-BFE21FBFB10A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{D875BFA8-27AC-46E9-BA2D-6A7EDF4763F0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{3912721D-98C1-4565-97E8-C858F0450CF3}] => (Allow) H:\World_of_Tanks_EU\WGCheck EU\WGCheck.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{38A337F7-5AA4-4E57-93D1-97FF4965E802}] => (Allow) H:\World_of_Tanks_EU\WGCheck EU\WGCheck.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{24BC6099-3338-414B-B27C-21BC0D58CE52}] => (Allow) H:\SteamLibrary\steamapps\common\The Scouring Demo\TheScouring.exe (Orc Group Game Studio) [File not signed]
FirewallRules: [{B2EFB41F-666C-4C4D-8644-5396DFF4D8A4}] => (Allow) H:\SteamLibrary\steamapps\common\The Scouring Demo\TheScouring.exe (Orc Group Game Studio) [File not signed]
FirewallRules: [{ACB4751E-6E49-4866-B911-CDD460CCCAA1}] => (Allow) LPort=26820
FirewallRules: [{2535574B-F0CE-43E2-BD29-F06B6B82491F}] => (Allow) LPort=26822
FirewallRules: [{38CF6759-4D49-4412-86D4-89464F56DCB0}] => (Allow) LPort=57209
FirewallRules: [{35CA7D73-9680-434C-A43C-DB0EF7DF8667}] => (Allow) LPort=57210
FirewallRules: [{DBF94D93-BE60-4D3B-BC59-6A9DE4738CA2}] => (Allow) LPort=57211
FirewallRules: [{F141C646-4916-49F6-A76E-619D378A6CB6}] => (Allow) LPort=57212
FirewallRules: [{7014BDC9-F275-4A32-AB47-7BC019AE5DEE}] => (Allow) LPort=57213
FirewallRules: [{7B50BC82-8F69-4901-A95C-BC69ABB072BA}] => (Allow) LPort=57214
FirewallRules: [{30675479-6B5C-4B0A-B9A2-7FF0CB41597D}] => (Allow) LPort=57215
FirewallRules: [{0E291876-5B9A-4E94-84D8-DB42EC6A7102}] => (Allow) LPort=57216
FirewallRules: [{30B91CB3-9834-4E10-BA04-4B1115F0F1A0}] => (Allow) LPort=57217
FirewallRules: [{2F162B52-1A0F-4AD4-B20E-04136801DAE4}] => (Allow) LPort=57218
FirewallRules: [{44C15F4D-A8F1-4207-971E-ABEC3B2BEE92}] => (Allow) LPort=57209
FirewallRules: [{A926BE48-3225-4546-BC4A-40C7ED6E2BDC}] => (Allow) LPort=57210
FirewallRules: [{94A4B7C1-862A-4DE3-9E62-8075665610DD}] => (Allow) LPort=57211
FirewallRules: [{37633EF8-77FA-4321-B5D2-C0BCDE7BA46C}] => (Allow) LPort=57212
FirewallRules: [{2649D4F7-564F-465A-B79D-5D6928D0B178}] => (Allow) LPort=57213
FirewallRules: [{74DBA225-9A6C-4028-AD23-684E5C8EA786}] => (Allow) LPort=57214
FirewallRules: [{A93EA439-A1D5-4D06-8334-0B8DB160A10A}] => (Allow) LPort=57215
FirewallRules: [{10FBCD02-9386-4F6A-A198-3E71ABC7B3CC}] => (Allow) LPort=57216
FirewallRules: [{A528A5EA-380D-4846-880A-EA845711EBB1}] => (Allow) LPort=57217
FirewallRules: [{6EFB405A-B6E1-4443-902A-BF30A8666766}] => (Allow) LPort=57218
FirewallRules: [{33F9543B-A31E-4850-9E9F-89D83F97A0B3}] => (Allow) LPort=23007
FirewallRules: [{C6DFB18C-C214-4CC8-AF6C-E22842D5908F}] => (Allow) LPort=23008
FirewallRules: [{227B831D-A2A8-4064-A615-36CF7D9B52D9}] => (Allow) LPort=33009
FirewallRules: [{B2F98048-7D9D-4DBB-8119-6845BB2C07CA}] => (Allow) LPort=33010
FirewallRules: [{6B5C9750-D138-4C0D-9F87-4B01959106BB}] => (Allow) LPort=33011
FirewallRules: [{6EF58A44-5542-4752-B366-E21D50654882}] => (Allow) LPort=43012
FirewallRules: [{C9B13FBF-FB16-4811-BB42-02E3E1AEFE78}] => (Allow) LPort=43013
FirewallRules: [{38CD3ADF-B80C-472F-8B8C-F469CD49354B}] => (Allow) LPort=53014
FirewallRules: [{FCD76DA2-6CDD-4C5D-8867-22D7C3799655}] => (Allow) LPort=53015
FirewallRules: [{D46C73B6-F92C-4EBD-9892-1820EC1D8682}] => (Allow) LPort=53016
FirewallRules: [{AA8AEC24-6268-41FA-80F6-C71EBFDF9732}] => (Allow) LPort=23007
FirewallRules: [{89ECECAE-DC7B-423A-B60A-8486B3D01E8D}] => (Allow) LPort=23008
FirewallRules: [{60579C05-35E0-4839-9200-E5C906B72418}] => (Allow) LPort=33009
FirewallRules: [{49EC3BD9-DA16-4106-84F0-A52CC272713D}] => (Allow) LPort=33010
FirewallRules: [{97B07677-AEA4-4E64-89C5-2A806CA71044}] => (Allow) LPort=33011
FirewallRules: [{7B8896E9-F5D0-4DF8-90B3-70ED90772328}] => (Allow) LPort=43012
FirewallRules: [{B1BF6941-D5C0-4EE2-BC30-0939DA260F2A}] => (Allow) LPort=43013
FirewallRules: [{FFADB89B-CBC3-4CC4-84EF-8CE4CBA3AEA6}] => (Allow) LPort=53014
FirewallRules: [{FC3C9150-82CC-490C-B562-2EFFF944A0C3}] => (Allow) LPort=53015
FirewallRules: [{132D89EA-FE96-4F50-8C74-C90FC91CB7CB}] => (Allow) LPort=53016
FirewallRules: [{FB790B1C-8A38-43D3-BB38-C6BF4A5D563A}] => (Allow) LPort=50053
FirewallRules: [{116CFA4B-B451-40FD-9948-49AAFD6351EA}] => (Allow) LPort=50053
FirewallRules: [{D4DCCD38-7913-4AD6-B586-EEEBFD8DE9A4}] => (Allow) LPort=26822
FirewallRules: [{88676837-996B-4D6C-AF5C-A98A49C4D88A}] => (Allow) C:\Program Files\EaseUS\EaseUS Data Recovery Wizard\DRWUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{D60D725E-325A-46B3-9403-6B71ABC18172}] => (Allow) C:\Program Files\EaseUS\EaseUS Data Recovery Wizard\DRWUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{F79BDFDF-FF28-4AE5-AA8B-222609021A45}] => (Allow) H:\SteamLibrary\steamapps\common\RoadCraft\root\bin\pc\Roadcraft - Retail.exe (Focus Entertainment SA -> Saber Interactive)
FirewallRules: [{3BAA3E60-F150-4A3C-B907-F90C7ED93793}] => (Allow) H:\SteamLibrary\steamapps\common\RoadCraft\root\bin\pc\Roadcraft - Retail.exe (Focus Entertainment SA -> Saber Interactive)
FirewallRules: [{CDDAAEEF-7CFF-4F55-83FE-38529B7AE216}] => (Allow) H:\SteamLibrary\steamapps\common\RoadCraft\root\bin\pc\EpicOnlineServices\start_epic_crossplay_game.exe (Focus Entertainment SA -> )
FirewallRules: [{B4D99415-529E-4999-BC86-8A3748DAE402}] => (Allow) H:\SteamLibrary\steamapps\common\RoadCraft\root\bin\pc\EpicOnlineServices\start_epic_crossplay_game.exe (Focus Entertainment SA -> )
FirewallRules: [{D1288AAC-F5EB-4D90-B4B4-0EC7798AA05D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2024884E-33B9-481D-BEBD-8BECF2076945}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{450CBD7C-4260-48A6-AFF2-6D7CB531D371}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E9439DA2-7AAF-4169-B01F-C3258D58A4A8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A8864C4D-25A2-4199-9B01-A95001B6E2E8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{013152EC-5244-4B82-B012-C4835CD1AABD}] => (Allow) C:\Program Files (x86)\PingPlotter 5\PingPlotter.exe (Pingman Tools LLC -> )
FirewallRules: [{3F4E2179-D013-43DE-8294-B97336F4B206}] => (Allow) C:\Program Files (x86)\PingPlotter 5\PingPlotter.exe (Pingman Tools LLC -> )
FirewallRules: [{C38A8C81-D8B9-4EAC-B059-07C85D4C0AD7}] => (Allow) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
FirewallRules: [{F7FD0B45-CF45-463E-B20A-13D08BA90B42}] => (Allow) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
FirewallRules: [{611770B0-E23A-4785-817F-4ACF154B5F0E}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\143.0.7499.7\remoting_host.exe (Google LLC -> Google LLC)
FirewallRules: [{CB8DC042-05F0-4447-95FD-434DB0D4A50C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{8C7793A3-07DC-4BEA-84A5-5545EB0803E1}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{6C83AA6C-8334-4DB4-BAFC-1ACEC5DC0401}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B31CA107-963C-4171-BEF3-3B32EB7C999C}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{79EEE1CF-DD4E-4D85-8CF4-D1DCF28EC3B2}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CE984DD0-4912-47FB-95B4-97BC2B5B9496}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{AC4DCC87-5157-401F-90E4-CAAE13A20FF7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{7AABDEE1-E9A9-4123-8304-B71FD879A98A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{64611CFA-C0E8-4FC7-B359-37092685C242}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{86B1796E-825E-40D1-A03C-AE0FA9837834}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{7A5C06DA-D2E5-49C8-ABAE-21BCE7D235F8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{752109A5-FC7A-48BB-8285-E7944397A9A6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{2487EDD7-618E-4DE7-8A34-F112CBF0E5CF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{445B44EC-3E83-46C3-A29E-62EA49C7878F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{A46B79C1-8587-4595-80E9-D1319E46959D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{B6FFA649-61EF-467F-98A1-CF2632313892}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{C02F4E68-9B11-43B5-828F-084DFA96387C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{9D4795AF-179E-44AD-84C4-5E0C16CBCEC3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{47308414-869F-4F7E-80C2-5A6BA25E74C7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{19EBD441-2172-4190-A095-238CB3C33585}] => (Allow) C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{37AE2AAB-4894-4A4D-B2CD-E9FA39403844}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{7EC68787-E014-4D50-B298-C641B3A395B3}] => (Allow) LPort=32683
==================== Restore Points =========================
ATTENTION: System Restore is disabled (Total:464.26 GB) (Free:105.38 GB) (23%)
Check "VSS" service
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (12/25/2025 09:50:02 AM) (Source: Service1) (EventID: 0) (User: )
Description: Failed in handling the PowerEvent. The error that occurred was: System.IO.FileNotFoundException: The system cannot find the file specified. (Exception from HRESULT: 0x80070002)
at TaskScheduler.IRegisteredTask.get_Enabled()
at VoiceControl_Service.VoiceControlService.CreateTask(_TASK_RUNLEVEL taskRunLevel, String sName, String sPath, String sArg)
at VoiceControl_Service.VoiceControlService.OnPowerEvent(PowerBroadcastStatus powerStatus)
at System.ServiceProcess.ServiceBase.DeferredPowerEvent(Int32 eventType, IntPtr eventData).
Error: (12/25/2025 09:46:12 AM) (Source: Service1) (EventID: 0) (User: )
Description: Failed in handling the PowerEvent. The error that occurred was: System.IO.FileNotFoundException: The system cannot find the file specified. (Exception from HRESULT: 0x80070002)
at TaskScheduler.IRegisteredTask.get_Enabled()
at VoiceControl_Service.VoiceControlService.CreateTask(_TASK_RUNLEVEL taskRunLevel, String sName, String sPath, String sArg)
at VoiceControl_Service.VoiceControlService.OnPowerEvent(PowerBroadcastStatus powerStatus)
at System.ServiceProcess.ServiceBase.DeferredPowerEvent(Int32 eventType, IntPtr eventData).
Error: (12/24/2025 08:07:51 PM) (Source: Service1) (EventID: 0) (User: )
Description: Failed to process session change. System.IO.FileNotFoundException: The system cannot find the file specified. (Exception from HRESULT: 0x80070002)
at TaskScheduler.IRegisteredTask.get_Enabled()
at VoiceControl_Service.VoiceControlService.CreateTask(_TASK_RUNLEVEL taskRunLevel, String sName, String sPath, String sArg)
at VoiceControl_Service.VoiceControlService.OnSessionChange(SessionChangeDescription changeDescription)
at System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)
Error: (12/24/2025 08:06:57 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Služba Windows Search sa zastavuje, pretože sa vyskytol problém s indexovaním, Fáza obnovenia zlyhala..
Context: Application, SystemIndex Catalog
Details:
0x%08x (0x80040d23 - The gatherer is shutting down. (HRESULT : 0x80040d23))
Error: (12/24/2025 08:06:57 PM) (Source: Windows Search Service) (EventID: 3602) (User: )
Description: V štádiu obnovovania služby Windows Search sa vyskytla chyba, jej ID je 1. Znova spustite službu. Ak táto chyba pretrváva, znova vytvorte index.
Context: Application, SystemIndex Catalog
Details:
0x%08x (0x80040d23 - The gatherer is shutting down. (HRESULT : 0x80040d23))
Error: (12/24/2025 08:02:57 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: The program WorldOfTanks.exe version 2.1.0.1410 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Error: (12/24/2025 02:34:35 PM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-843F9OM)
Description: Názov chybnej aplikácie: FileOperator.exe, verzia: 3.3.12.0, časová značka: 0xf908d142
Názov modulu s poruchou: KERNELBASE.dll, verzia: 10.0.26100.7462, časová značka: 0xe9f9d656
Kód výnimky: 0xe0434352
Odchýlka poruchy: 0x00000000000c782a
Id poruchového procesu: 0x479c
Čas spustenia poruchovej aplikácie: 0x1dc74da0b4831a6
Cesta k poruchovej aplikácii: C:\Program Files\ASUS\ROG Live Service\FileOperator.exe
Cesta k poruchovému modulu: C:\WINDOWS\System32\KERNELBASE.dll
Id správy: 6538df01-ab34-47ab-bc4c-3863ec6e459e
Plný názov chybného balíka:
Identifikátor poruchovej aplikácie vzťahujúci sa na balík:
Error: (12/24/2025 02:34:35 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: FileOperator.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Security.SecurityException
at System.ThrowHelper.ThrowSecurityException(System.ExceptionResource)
at Microsoft.Win32.RegistryKey.OpenSubKey(System.String, Boolean)
at FileOperator.Program+<listSubKeys>d__36.MoveNext()
at FileOperator.Program.queryAllFrameworkPluginVersion()
at FileOperator.Program.Main(System.String[])
System errors:
=============
Error: (12/25/2025 09:55:40 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-843F9OM)
Description: The server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter did not register with DCOM within the required timeout.
Error: (12/25/2025 12:09:32 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-843F9OM)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.
Error: (12/25/2025 12:09:32 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-843F9OM)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.
Error: (12/25/2025 12:07:33 AM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-843F9OM)
Description: The activation of the CLSID Windows.Media.Capture.Internal.AppCaptureShell timed out waiting for the service BcastDVRUserService_c8687 to stop.
Error: (12/25/2025 12:03:32 AM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-843F9OM)
Description: The activation of the CLSID Windows.Media.Capture.Internal.AppCaptureShell timed out waiting for the service BcastDVRUserService_c8687 to stop.
Error: (12/24/2025 11:59:30 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-843F9OM)
Description: The activation of the CLSID Windows.Media.Capture.Internal.AppCaptureShell timed out waiting for the service BcastDVRUserService_c8687 to stop.
Error: (12/24/2025 11:55:29 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-843F9OM)
Description: The activation of the CLSID Windows.Media.Capture.Internal.AppCaptureShell timed out waiting for the service BcastDVRUserService_c8687 to stop.
Error: (12/24/2025 11:51:28 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-843F9OM)
Description: The activation of the CLSID Windows.Media.Capture.Internal.AppCaptureShell timed out waiting for the service BcastDVRUserService_c8687 to stop.
CodeIntegrity:
===============
Date: 2025-12-25 09:53:59
Description:
Code Integrity determined that a process (\Device\HarddiskVolume12\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume12\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. 1.00 09/07/2018
Motherboard: Micro-Star International Co., Ltd. MEG Z390 ACE (MS-7B12)
Processor: Intel(R) Core(TM) i7-9700K CPU @ 3.60GHz
Percentage of memory in use: 40%
Total physical RAM: 32696.6 MB
Available physical RAM: 19346.38 MB
Total Virtual: 34744.6 MB
Available Virtual: 20192.48 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:464.26 GB) (Free:105.38 GB) (Model: Samsung SSD 970 EVO 500GB) NTFS
Drive d: (SSD 1TB) (Fixed) (Total:931.5 GB) (Free:156.59 GB) (Model: Samsung SSD 860 EVO 1TB) NTFS
Drive e: (Nový zväzok) (Fixed) (Total:1863 GB) (Free:908.93 GB) (Model: ST2000DM008-2FR102) NTFS
Drive f: (Msata 980 PRO) (Fixed) (Total:1863 GB) (Free:1422.98 GB) (Model: Samsung SSD 980 PRO 2TB) NTFS
Drive g: (Msata) (Fixed) (Total:1863.01 GB) (Free:252.88 GB) (Model: Samsung SSD 970 EVO 2TB) NTFS
Drive h: (Msata 990 PRO) (Fixed) (Total:3726.01 GB) (Free:2509.37 GB) (Model: Samsung SSD 990 PRO with Heatsink 4TB) NTFS
\\?\Volume{84137028-56bb-4c79-b175-ffe32344640e}\ (Obnovenie) (Fixed) (Total:0.49 GB) (Free:0.47 GB) NTFS
\\?\Volume{2182c18b-37d9-418c-9bcc-f0a11402620b}\ () (Fixed) (Total:0.9 GB) (Free:0.05 GB) NTFS
\\?\Volume{37ced62e-90bf-4ad9-9cdb-d16a8c5c892a}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32
==================== MBR & Partition Table ====================
==================== End of Addition.txt =======================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Pomalý PC
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119694
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Pomalý PC
Zdravím!
Chybí log FRST. Toto je pouze Addition. FRST najdete v C:\Users\Marcel\OneDrive\Počítač v souboru frst.txt. Děkuji.
Chybí log FRST. Toto je pouze Addition. FRST najdete v C:\Users\Marcel\OneDrive\Počítač v souboru frst.txt. Děkuji.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
marsell2607
- Návštěvník
- Příspěvky: 32
- Registrován: 21 led 2014 01:35
Re: Pomalý PC
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-11-2025
Ran by Administrator (administrator) on DESKTOP-843F9OM (Micro-Star International Co., Ltd. MS-7B12) (25-12-2025 12:01:58)
Running from C:\Users\Marcel\OneDrive\Počítač\FRST64.exe
Loaded Profiles: Marcel & Administrator
Platform: Microsoft Windows 11 Pro Version 25H2 26200.7462 (X64) Language: Slovenčina (Slovensko)
Default browser: Edge
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() [File not signed] C:\Gaming Mouse\Gaming Mouse.exe
(A225F3B5-240D-4EE9-BCF4-697A07F5E93E -> Micro-Star INT'L CO., LTD.) C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.MSICenter_2.0.63.0_x64__kzh8wxbdkxb8p\DCv2\DCv2.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (Node.js Foundation -> Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe <2>
(C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Nahimic\NahimicMonitorX64.exe
(C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\MSI Center\Engine\CC_Engine_x64.exe
(C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <8>
(C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.UserSessionHelper.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eServiceHost.exe <2>
(C:\Program Files\Parsec\pservice.exe ->) (Unity Technologies SF -> Parsec) [File not signed] C:\Program Files\Parsec\parsecd.exe <2>
(C:\ProgramData\Wargaming.net\GameCenter\wgc.exe ->) (Wargaming Group Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\dlls\wgc_renderer_host.exe <5>
(C:\ProgramData\Wargaming.net\GameCenter\wgc.exe ->) (Wargaming.net Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\wargamingerrormonitor.exe
(cmd.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\BrowserPrivacyAndSecurity.exe
(D:\Games\Riot Games\Riot Client\RiotClientServices.exe ->) () [File not signed] D:\Games\Riot Games\Riot Client\RiotClientCrashHandler.exe
(Discord Inc. -> Discord Inc.) C:\Users\Marcel\AppData\Local\Discord\app-1.0.9219\Discord.exe <6>
(drivers\RivetNetworks\Killer\xTendSoftAPService.exe ->) (Rivet Networks LLC -> Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendSoftAP.exe
(drivers\RivetNetworks\Killer\xTendUtilityService.exe ->) (Rivet Networks LLC -> Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtility.exe
(E:\Games\Fortnite\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe ->) (Epic Games Inc. -> Epic Games, Inc.) E:\Games\Fortnite\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <3>
(explorer.exe ->) () [File not signed] C:\Program Files (x86)\FastShare\FastShare.exe
(explorer.exe ->) (Epic Games Inc. -> Epic Games, Inc.) E:\Games\Fortnite\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <16>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams.exe <2>
(explorer.exe ->) (Riot Games, Inc. -> Riot Games, Inc.) D:\Games\Riot Games\Riot Client\RiotClientServices.exe
(explorer.exe ->) (Ryochan7) [File not signed] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\DS4Windows.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Marcel\AppData\Local\Microsoft\OneDrive\25.222.1112.0002_1\OneDrive.Sync.Service.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) () [File not signed] C:\Program Files (x86)\TIBBO\Tibbo Device Server Toolkit\tsvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.02.12\atkexComSvc.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Program Files (x86)\LightingService\LightingService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe
(services.exe ->) (ASUSTEK COMPUTER INCORPORATION -> ASUS Inc.) C:\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome Remote Desktop\143.0.7499.7\remoting_host.exe <2>
(services.exe ->) (HP Inc. -> DTS Inc.) C:\Windows\System32\DTS\HP\APO4x\DtsHPXV2Apo4Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_120314e52c04567c\RstMwService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Dragon Center\DragonCenter_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Voice Control\VoiceControl_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4646b47d9477048e\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_7e93164ae8ff6bf7\RtkAudUService64.exe <2>
(services.exe ->) (Rivet Networks LLC -> Rivet Networks) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(services.exe ->) (Rivet Networks LLC -> Rivet Networks, LLC.) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendSoftAPService.exe
(services.exe ->) (Rivet Networks LLC -> Rivet Networks, LLC.) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe
(services.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicService.exe
(services.exe ->) (Unity Technologies SF -> Parsec) [File not signed] C:\Program Files\Parsec\pservice.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(services.exe ->) (Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.224\WsAppService.exe
(sihost.exe ->) (8545CA03-A40F-42F8-9E80-790ABC2452FC -> Zero Byte) C:\Program Files\WindowsApps\4789ZeroByte.NetSpeedMeter_5.0.0.0_neutral__gvheqymwk6zrr\NetSpeedMeter\Net Speed Meter.exe
(sihost.exe ->) (CACCD12F-7BFA-4346-AD14-30B4E275348F -> Hewlett-Packard Development Company, L.P.) C:\Program Files\WindowsApps\33C30B79.HyperXNGenuity_5.35.0.0_x64__0a78dr3hq0pvt\Assets\Native\NGenuity2Helper.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.SurfaceWirelessDisplayAdapter_4.232.137.0_x64__8wekyb3d8bbwe\Desktop\WDADesktopService.exe
(SteelSeries France SASU -> A-Volute) C:\Users\Marcel\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\ROG Armoury\Mouse\ROG STRIX CARRY\P508PowerAgent.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x86.exe
(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\AacExtCard\extensionCardHal_x86.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\ASUS_Aac_DRAM\Aac3572DramHal_x86.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.195.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Marcel\AppData\Local\Microsoft\OneDrive\25.222.1112.0002_1\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> ) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Wargaming Group Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_7e93164ae8ff6bf7\RtkAudUService64.exe [3112448 2025-08-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320056 2019-08-28] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [285616 2025-11-26] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [Gaming Mouse] => C:\Gaming Mouse\Gaming Mouse.exe [1306624 2009-09-30] () [File not signed]
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2410968 2018-09-13] (Adobe Systems Incorporated -> Adobe Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\RunOnce: [msedge_cleanup_{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}] => C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.96\Installer\setup.exe [7735336 2025-12-20] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\RunOnce: [ccleaner_update_helper] => C:\Program Files\CCleaner\ccleaner_update_helper.exe [824072 2025-12-12] (Gen Digital Inc. -> Piriform)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [EpicGamesLauncher] => E:\Games\Fortnite\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [39520672 2025-12-24] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [FastShare] => C:\Program Files (x86)\FastShare\FastShare.exe [1132544 2014-10-02] () [File not signed]
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5750936 2025-12-23] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Xvid] => C:\Program Files (x86)\Xvid\CheckUpdate.exe [8192 2011-01-17] () [File not signed]
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45875504 2025-03-12] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Parsec.App.0] => C:\Program Files\Parsec\parsecd.exe [517016 2025-11-12] (Unity Technologies SF -> Parsec) [File not signed]
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [RiotClient] => D:\Games\Riot Games\Riot Client\RiotClientServices.exe [75280512 2025-12-12] (Riot Games, Inc. -> Riot Games, Inc.)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Disig Web Signer] => C:\Program Files (x86)\Disig\Web Signer\WebSignerTray.exe (No File)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [41655256 2025-12-06] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Teams] => C:\Users\Marcel\AppData\Local\Microsoft\WindowsApps\MSTeams_8wekyb3d8bbwe\ms-teams.exe [0 0] () [symlink -> ]
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Discord] => C:\Users\Marcel\AppData\Local\Discord\Update.exe [1596344 2025-12-15] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\MountPoints2: {418d1015-0a4e-11e9-93fc-645d8676882d} - "I:\SETUP.exe"
HKU\S-1-5-21-1514861923-3393839258-3891969025-500\...\Run: [MicrosoftEdgeAutoLaunch_98769996E24836F99EC8617644423B4C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4228688 2025-12-18] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\Canon WSD Language Monitor: C:\Windows\system32\cnnx0_flm.dll [1420800 2013-02-25] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\CPCA Language Monitor3b: C:\Windows\system32\CNAS0MOK.DLL [1006080 2012-08-09] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{052EB454-9F19-CB42-7875-807F79F311C4}] -> C:\Program Files (x86)\CCleaner Browser\Application\143.0.33371.147\Installer\chrmstp.exe [2025-12-22] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2025-11-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\143.0.7499.170\Installer\chrmstp.exe [2025-12-22] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0947c4b8-f719-4d7c-b117-22b759b5e2aa} - no filepath. <==== ATTENTION
Task: {11583b5c-0cdd-4464-ad1f-819982c7c077} - no filepath. <==== ATTENTION
Task: {14ed5bae-80ea-428d-969e-f56cc58f5555} - no filepath. <==== ATTENTION
Task: {16b4f2e2-ecdd-4f15-bbb7-aeb3592e0274} - no filepath. <==== ATTENTION
Task: {1bd1fbd8-1668-470f-8d4a-9a00f89d2f57} - no filepath. <==== ATTENTION
Task: {1e878e15-d1ec-4e19-9240-9b42c11fb02e} - no filepath. <==== ATTENTION
Task: {1ebf2531-930f-44ba-abe4-892fb54f316b} - no filepath. <==== ATTENTION
Task: {21a08a80-58fc-4c2e-9627-34f8e3a7ad0d} - no filepath. <==== ATTENTION
Task: {22945d36-6724-4512-a10c-609866181c2b} - no filepath. <==== ATTENTION
Task: {23cef70e-dbe2-481a-9354-a83528bc8668} - no filepath. <==== ATTENTION
Task: {2673ad69-8957-4fd6-88e9-ca1f60ff11af} - no filepath. <==== ATTENTION
Task: {269cb3b0-44f2-41dd-ae8c-ce36ca290fca} - no filepath. <==== ATTENTION
Task: {2b8a4287-f1a9-4c38-a394-d8c5c955c964} - no filepath. <==== ATTENTION
Task: {33ee042c-0be2-4151-9774-9ec54d68a286} - no filepath. <==== ATTENTION
Task: {3727500c-6736-44db-9936-8658b76069f4} - no filepath. <==== ATTENTION
Task: {41365dac-c06c-4ffa-b257-c09cf3a22231} - no filepath. <==== ATTENTION
Task: {41abd0d2-d2cb-42f7-a49f-7e1d9b0f9b6c} - no filepath. <==== ATTENTION
Task: {451378e5-3d3b-436a-bac8-7b99dc3f86ed} - no filepath. <==== ATTENTION
Task: {46fff474-66d3-4285-a188-de91e8cc6616} - no filepath. <==== ATTENTION
Task: {49759e68-43b5-4d7e-9548-7035383134ac} - no filepath. <==== ATTENTION
Task: {4988b198-0a7c-4d81-967c-4c5bbc2970ef} - no filepath. <==== ATTENTION
Task: {4cdbb754-7e59-45aa-8894-e2a5e2cb00f6} - no filepath. <==== ATTENTION
Task: {4f0d9664-f75f-45fd-88a3-237f1a60cbd1} - no filepath. <==== ATTENTION
Task: {4f164eff-c987-43b5-8945-36703be40f64} - no filepath. <==== ATTENTION
Task: {50c27b69-7516-4760-9cc3-6175606a580b} - no filepath. <==== ATTENTION
Task: {51aa329e-089f-4e13-8a1d-ea4e9a47c99a} - no filepath. <==== ATTENTION
Task: {55f94a0a-0e35-463a-b84b-d433ec4e798a} - no filepath. <==== ATTENTION
Task: {57ad22f1-f2d6-4869-b651-23eee945566d} - no filepath. <==== ATTENTION
Task: {5b6823bc-b681-4611-a718-933b4cdec481} - no filepath. <==== ATTENTION
Task: {63562bbe-f86f-46a5-805b-19291cc6a7c7} - no filepath. <==== ATTENTION
Task: {649ba9d8-1482-4ed7-9984-9f2594a95864} - no filepath. <==== ATTENTION
Task: {64c61f0c-cb15-4eb0-9380-b12cc9c32284} - no filepath. <==== ATTENTION
Task: {6826578c-0939-4752-bbc4-331ea94d3393} - no filepath. <==== ATTENTION
Task: {6bcaff12-09cf-4e54-a582-bd0aca107a7f} - no filepath. <==== ATTENTION
Task: {6d596213-eaed-489c-824f-ae21ac694692} - no filepath. <==== ATTENTION
Task: {6ffe0b3f-d980-4f8a-9906-dd1662f24f55} - no filepath. <==== ATTENTION
Task: {72ade00d-1676-49ae-b365-99af4d25e218} - no filepath. <==== ATTENTION
Task: {7436d804-e04b-411a-8d81-71c6ed5f3619} - no filepath. <==== ATTENTION
Task: {74c616c9-4b47-44fc-bda5-5e6a24a439fa} - no filepath. <==== ATTENTION
Task: {76e0fada-cc41-416e-b20b-28b0d0b52d0d} - no filepath. <==== ATTENTION
Task: {797a43b9-8a8f-442c-bdc3-5d2ad2c79f75} - no filepath. <==== ATTENTION
Task: {79c20b72-833c-4248-8910-d9b19604170c} - no filepath. <==== ATTENTION
Task: {7b2dad43-6fa8-4881-8bbe-19ccb994c5aa} - no filepath. <==== ATTENTION
Task: {80b1999a-bd28-45be-ade3-a25a2032349c} - no filepath. <==== ATTENTION
Task: {821aa2b1-76e3-4140-b656-0fc18c1c44f9} - no filepath. <==== ATTENTION
Task: {84c48bb9-b77e-4c32-bd0e-58bc944d4f96} - no filepath. <==== ATTENTION
Task: {8615702a-d69d-4dcf-a314-5e53c51afadc} - no filepath. <==== ATTENTION
Task: {8ab155af-85aa-47fe-9fd1-8292f3e74912} - no filepath. <==== ATTENTION
Task: {8f1ced85-349b-4a38-bde3-7e717df9f8b1} - no filepath. <==== ATTENTION
Task: {91f7640b-29d6-4fb5-b8f7-77b85bffe085} - no filepath. <==== ATTENTION
Task: {9d816d21-ec4d-46b7-9afc-2b827e7a213a} - no filepath. <==== ATTENTION
Task: {a0f01ba4-7a84-45df-bd80-27578470830c} - no filepath. <==== ATTENTION
Task: {a6107a93-ae69-47d8-9b17-6cd148493c2e} - no filepath. <==== ATTENTION
Task: {a7c9d806-dda3-457b-a7a8-02fee3477135} - no filepath. <==== ATTENTION
Task: {a90423ca-02b5-42cb-bfbc-755b8a246eb5} - no filepath. <==== ATTENTION
Task: {a9c1b96f-326d-43d5-b02d-b97125d8d360} - no filepath. <==== ATTENTION
Task: {adb6a7e3-3a40-46dc-b105-4b1249b3ac1d} - no filepath. <==== ATTENTION
Task: {b17df9fd-c446-4c8a-9192-7e6b0466c7d4} - no filepath. <==== ATTENTION
Task: {b92834b0-8de7-4789-bd77-b7a59121df4b} - no filepath. <==== ATTENTION
Task: {ba983d80-5206-4ebd-b5e4-2b5f860b7bec} - no filepath. <==== ATTENTION
Task: {be885d8d-cb7b-46a9-a2a3-ae108bab8c7c} - no filepath. <==== ATTENTION
Task: {bf587726-62a4-4f02-a044-6dd420d90d11} - no filepath. <==== ATTENTION
Task: {d9ac1b9e-bb29-44bd-96af-15e55ee0e8e5} - no filepath. <==== ATTENTION
Task: {dba1c038-f4b8-457e-9132-4d53a0c7482e} - no filepath. <==== ATTENTION
Task: {e0d5d199-6254-43f8-95ff-8717f1e6a5fd} - no filepath. <==== ATTENTION
Task: {e29c975b-9eee-46e7-918c-fb08a0559844} - no filepath. <==== ATTENTION
Task: {e5b0518b-a697-4d81-afe0-fe1a9ddbbe99} - no filepath. <==== ATTENTION
Task: {e8b1cb45-e3a4-489e-a2d0-c7a480e94e92} - no filepath. <==== ATTENTION
Task: {ea23531a-7d75-4329-afaf-f901f9652530} - no filepath. <==== ATTENTION
Task: {efe22549-e2b0-466b-b10d-631ed079e2b0} - no filepath. <==== ATTENTION
Task: {f55b43b8-a812-4a7f-9b49-6358dfc5c15c} - no filepath. <==== ATTENTION
Task: {f798d559-79af-47b3-962f-c7dd3e256b80} - no filepath. <==== ATTENTION
Task: {f822c973-b72f-4b94-a897-484cda35daf1} - no filepath. <==== ATTENTION
Task: {fc79eb21-b4ac-4b3b-9452-2aabc0ba13b4} - no filepath. <==== ATTENTION
Task: {ffd668c9-6dfd-42d4-be10-858b94504503} - no filepath. <==== ATTENTION
Task: {09E23B9F-355E-4000-81BE-3472AA6ACB4C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1581568 2025-08-24] (Adobe Inc. -> Adobe Inc.)
Task: {9D755281-2F72-4BAE-8AC9-1EDE1223A29D} - System32\Tasks\ASUS\AcPowerNotification => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe [294880 2022-01-24] (ASUSTeK COMPUTER INC. -> ASUS)
Task: {C6BD68D8-B304-4A72-8D03-24D9B60A134D} - System32\Tasks\ASUS\ArmouryLiveUpdate => C:\Program Files (x86)\ASUS\ROG Armoury\Live Update\ArmouryLiveUpdate.exe [1462760 2020-03-31] (ASUSTeK Computer Inc. -> )
Task: {2424EEDB-0304-4BC5-BA3B-4993F6289522} - System32\Tasks\ASUS\ArmourySocketServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe [2196448 2022-01-24] (ASUSTeK COMPUTER INC. -> ASUS)
Task: {91F91705-4C2F-4A1F-A37C-0612270055AD} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-08-03] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {BF492E52-A5C3-4575-9534-7C4D359FB0ED} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-08-03] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {215998F6-E08E-417D-8DDA-B329E0FE36F4} - System32\Tasks\ASUS\Framework Service => C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe [43022856 2022-01-11] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
Task: {475D4E01-6428-404A-BA9F-E9E4518DBFE5} - System32\Tasks\ASUS\ledcontrolservice3 => C:\Program Files (x86)\ASUS\ROG Armoury\Protocol\AudioLEDControl\ledcontrolservice3.exe [2557744 2020-01-08] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {E942852C-23E2-46AE-99A5-434133A89361} - System32\Tasks\ASUS\MacroAgent => C:\Program Files (x86)\ASUS\ROG Armoury\MacroAgent.exe [77960 2020-03-31] (ASUSTeK Computer Inc. -> )
Task: {F49F8990-5CB1-4C4F-9606-1B0E416932D2} - System32\Tasks\ASUS\P508PowerAgent => C:\Program Files (x86)\ASUS\ROG Armoury\Mouse\ROG STRIX CARRY\P508PowerAgent.exe [51120 2019-11-01] (ASUSTeK Computer Inc. -> )
Task: {EA298C7A-0E22-4BE8-9569-71E901099E72} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (No File)
Task: {5364A06D-910A-478A-B3FD-631B18BCB756} - System32\Tasks\CCleaner Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [3749768 2025-12-17] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {707525D6-71F5-4E6C-AE66-AC45E048585A} - System32\Tasks\CCleaner Browser Heartbeat Task (Logon) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [3749768 2025-12-17] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {8096281C-1AFA-4778-A4FD-C2E604B8B0D3} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-03-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B1C9A4AB-1F11-4D41-9056-1E9614E1B02A} - System32\Tasks\CCleanerBrowserProtectS-1-5-21-1514861923-3393839258-3891969025-1001 => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowserProtect.exe [1774816 2025-09-11] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {BCB59737-BD20-4B44-9E12-D9B847637E05} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6139696 2025-03-12] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "ccfa8858-d8f5-46b6-96ad-2c4e904e85e3" --version "6.34.0.11482" --silent
Task: {5A4CBF65-9F64-4420-96B6-8B6309125C82} - System32\Tasks\CCleanerSkipUAC - Marcel => C:\Program Files\CCleaner\CCleaner.exe [39616304 2025-03-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {20EABEB5-FD59-4959-A4C0-E568E938A333} - System32\Tasks\CCleanerUpdateTaskMachineCore => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-13] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {A8158877-A413-4685-8D72-2BC4EA63B452} - System32\Tasks\CCleanerUpdateTaskMachineUA => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-13] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {8FAC1EB8-D29D-4A49-A324-FB1823D42871} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem145.0.7569.0{0F3F76F3-DDD6-44A4-90BB-B0199C5F5447} => C:\Program Files (x86)\Google\GoogleUpdater\145.0.7569.0\updater.exe [7201944 2025-12-08] (Google LLC -> Google LLC)
Task: {5F06F60A-7F53-4756-A037-57C1FC6A701A} - System32\Tasks\HidHide_Updater => C:\Program Files\Nefarius Software Solutions\HidHide\HidHide_Updater.exe [1206200 2023-05-06] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.) -> C:\Program Files\Nefarius Software Solutions\HidHide\\/silent
Task: {982879DF-E9DC-4DFB-B1E4-D12A95B7D35F} - System32\Tasks\Meta\Messenger-WSP-Helper-S-1-5-21-1514861923-3393839258-3891969025-1001 => MessengerHelper.exe --lassie (No File)
Task: {D6C242DA-7419-46D2-9570-6DC76BA89110} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [11419480 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {03F3CDA3-B69F-4DEF-A0B7-2408DF2CB21D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29025120 2025-10-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {999C25E1-22F1-476A-8FF9-DAD51ADD62C5} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE16\opushutil.exe [61280 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {ACEC2850-37E7-4674-84A6-2741593930F9} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29025120 2025-10-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {F6B4678C-248A-4190-B950-4DA67CC4B10D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [224520 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {3E89E60A-F5B2-499A-B1FC-E3D6E3591EC3} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [224520 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {183876CC-201F-4C15-BB84-AE10DB25A5BB} - System32\Tasks\Microsoft\Windows\Setup\PITRTask => {093cb270-c282-4c22-b2ea-7d2bf1c30bbf} C:\WINDOWS\system32\oobe\PITRTask.dll [118784 2025-12-02] (Microsoft Windows -> Microsoft Corporation)
Task: {6B654AB7-33A9-413C-A421-D0C89DFC221C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)
Task: {789F4532-274D-4D14-A059-56E1FAA216C2} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {AC56674A-B120-4F36-AF39-F46AE6001FA7} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {EB0EE129-4E31-4AAD-AE9D-8A4FF27BE19D} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [692864 2025-09-17] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {7790AD2D-FA20-4634-87F9-FD88AD631264} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34944 2025-09-17] (Mozilla Corporation -> Mozilla Foundation)
Task: {E315423A-552A-4C18-81BE-BCC7B1B17471} - System32\Tasks\MSILEDKeeper_Host => C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe [1024160 2019-01-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {981E78FF-9D6B-43F0-AD55-38B5067549A8} - System32\Tasks\MSISW_Host => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
Task: {E31A19C4-CF15-4C0C-828D-446CF1CD9B3D} - System32\Tasks\NahimicAPISvc32Run => "C:\Program Files\NahimicAPI\x86\NahimicAPISvc32.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7) (No File)
Task: {215A5A84-4DE4-4AA5-A139-E6C3505DA1A9} - System32\Tasks\NahimicAPISvc64Run => "C:\Program Files\NahimicAPI\NahimicAPISvc64.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7) (No File)
Task: {489962F0-4488-40BD-923B-7D9F8DC6373B} - System32\Tasks\NahimicSvc32Run => C:\Windows\SysWOW64\NahimicSvc32.exe [1118128 2024-06-20] (SteelSeries France SASU -> Nahimic)
Task: {EF7445D8-08C0-4245-A0ED-B4E21808829B} - System32\Tasks\NahimicSvc64Run => C:\Windows\System32\NahimicSvc64.exe [1438128 2024-06-20] (SteelSeries France SASU -> Nahimic)
Task: {E5C979AD-8C23-4A0C-934A-9A86653BB98A} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3324528 2025-10-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {35A86BBB-A8D3-4AB6-AEE7-994048F17575} - System32\Tasks\OneDrive Startup Task-S-1-5-21-1514861923-3393839258-3891969025-1001 => C:\Users\Marcel\AppData\Local\Microsoft\OneDrive\25.222.1112.0002_1\OneDriveLauncher.exe [745832 2025-12-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {A876663F-32C4-4ED3-B1FA-910D32F75689} - System32\Tasks\Opera scheduled assistant Autoupdate 1601999995 => C:\Users\Marcel\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Marcel\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {E5106116-7F2F-4869-BF24-DE9519C30321} - System32\Tasks\Opera scheduled Autoupdate 1601999962 => C:\Users\Marcel\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (No File)
Task: {8303BD63-6334-406E-946F-1E7DB0626CA8} - System32\Tasks\Opera scheduled Autoupdate 1705345213 => C:\Users\Marcel\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [6233560 2025-12-18] (Opera Norway AS -> Opera Software)
Task: {FDDE2540-BA1C-4E08-A4DC-5BDEDB5BFA3F} - System32\Tasks\S-1-5-21-1514861923-3393839258-3891969025-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe (No File)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\MSILEDKeeper_Host.job => C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe
Task: C:\WINDOWS\Tasks\MSISW_Host.job => C:\WINDOWS\SysWOW64\muachost.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{202613f3-fd9f-41f9-bf07-a24ac07ebf11}: [DhcpNameServer] 192.168.50.1
Tcpip\..\Interfaces\{21c96efd-c25e-4e8a-9d27-ec8ba4e3f705}: [DhcpNameServer] 192.168.50.1
Tcpip\..\Interfaces\{82891aa6-0e5a-4191-a53c-9acb9a07203f}: [DhcpNameServer] 217.119.121.226 217.119.121.225
Tcpip\..\Interfaces\{e78ecf2c-4d52-4aeb-9615-bc24c128ce54}: [DhcpNameServer] 192.168.50.1
Edge:
=======
Edge Profile: C:\Users\Administrator\AppData\Local\Microsoft\Edge\User Data\Default [2025-04-21]
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\Administrator\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-21]
Edge Extension: (Edge relevant text changes) - C:\Users\Administrator\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-04-21]
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]
FireFox:
========
FF DefaultProfile: gaer362i.default
FF ProfilePath: C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\gaer362i.default [2019-08-10]
FF ProfilePath: C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\v44n3atk.default-release [2019-08-10]
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-12-06] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2018-09-13] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2011-12-14] (Google Inc. -> Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\dtplugin\npDeployJava1.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\plugin2\npjp2.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=3 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1583.3\npCCleanerBrowserUpdate3.dll [2022-12-13] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=9 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1583.3\npCCleanerBrowserUpdate3.dll [2022-12-13] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2018-09-13] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: ditec.sk/DitecNMc -> C:\PROGRA~2\Ditec\DLAUNC~1\NPDITE~1.DLL [2022-05-06] (DITEC, a.s. -> DITEC, a.s.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2025-12-25]
Chrome:
=======
CHR Profile: C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default [2025-04-21]
CHR Extension: (Prezentácie) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-12-06]
CHR Extension: (Dokumenty) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-12-06]
CHR Extension: (Disk Google) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-12-06]
CHR Extension: (YouTube) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-12-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-04-21]
CHR Extension: (Tabuľky) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-12-06]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-26]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-26]
CHR Extension: (ESET Browser Privacy & Security) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2025-04-21]
CHR Extension: (Gmail) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-12-06]
CHR HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [oombnmpbbhbakfpfgdflaajkhicgfaam]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174584 2025-08-24] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818136 2018-09-13] (Adobe Systems Incorporated -> Adobe Inc.)
S3 AntiCheatExpert Service; C:\Program Files\AntiCheatExpert\SGuard\x64\SGuardSvc64.exe [2695304 2021-09-16] (PROXIMA BETA PTE. LIMITED -> )
S3 ArmouryCrateDownloadTool; C:\WINDOWS\System32\DriverStore\FileRepository\rogms.inf_amd64_7bcd8839c8e4f2a7\ArmouryLiveUpdate.exe [577440 2025-11-04] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 ArmouryCrateService; C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe [382112 2022-08-18] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.02.12\atkexComSvc.exe [457544 2021-10-21] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-08-03] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [181576 2021-12-27] (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.)
S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-08-03] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [15044872 2023-03-10] (BattlEye Innovations e.K. -> )
S2 ccleaner; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-13] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
S3 CCleanerBrowserElevationService; C:\Program Files (x86)\CCleaner Browser\Application\143.0.33371.147\elevation_service.exe [2631528 2025-12-17] (Gen Digital Inc. -> Gen Digital Inc.)
S3 ccleanerm; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-13] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1088816 2025-03-12] (Gen Digital Inc. -> Gen Digital Inc.)
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\143.0.7499.7\remoting_host.exe [74392 2025-10-31] (Google LLC -> Google LLC)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13288288 2025-10-07] (Microsoft Corporation -> Microsoft Corporation)
R2 DragonCenter_Service; C:\Program Files (x86)\MSI\Dragon Center\DragonCenter_Service.exe [136864 2018-11-15] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 DtsHPXV2Apo4Service; C:\WINDOWS\System32\DTS\HP\APO4x\DtsHPXV2Apo4Service.exe [380656 2025-03-07] (HP Inc. -> DTS Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1136560 2022-08-16] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [965872 2024-12-29] (EasyAntiCheat Oy -> Epic Games, Inc.)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5543856 2025-11-26] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [4980040 2025-11-26] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [4980040 2025-11-26] (ESET, spol. s r.o. -> ESET)
S3 EpicGamesUpdater; E:\Games\Fortnite\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3071904 2025-12-24] (Epic Games Inc. -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2022-07-11] (Epic Games Inc. -> Epic Games, Inc.)
R2 GameSDK Service; C:\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe [396520 2022-01-20] (ASUSTEK COMPUTER INCORPORATION -> ASUS Inc.)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2602200 2019-04-17] (Rivet Networks LLC -> Rivet Networks)
S3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [81616 2019-04-17] (Rivet Networks LLC -> Rivet Networks, LLC.)
R2 LightingService; C:\Program Files (x86)\LightingService\LightingService.exe [4799336 2023-09-13] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
R2 MSI_Case_Service; C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe [74336 2023-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_Center_Service; C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe [154216 2023-08-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
U2 MSI_VoiceControl_Service; C:\Program Files (x86)\MSI\MSI Center\Voice Control\VoiceControl_Service.exe [36880 2023-04-27] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MysticLight2_Service; C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe [34976 2018-12-20] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 NahimicService; C:\WINDOWS\System32\NahimicService.exe [1910704 2024-06-20] (SteelSeries France SASU -> Nahimic)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4646b47d9477048e\Display.NvContainer\NVDisplay.Container.exe [1275624 2025-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
R2 Parsec; C:\Program Files\Parsec\pservice.exe [436120 2025-11-12] (Unity Technologies SF -> Parsec) [File not signed]
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [4659696 2024-02-04] (Rockstar Games, Inc. -> Rockstar Games)
R2 ROG Live Service; C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe [2533992 2025-10-09] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803088 2025-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 tsvc; C:\Program Files (x86)\TIBBO\Tibbo Device Server Toolkit\tsvc.exe [69632 2006-07-04] () [File not signed]
S3 uncheater_bgl; C:\Program Files\Common Files\Uncheater\uncheater_bgl.exe [2097008 2019-10-17] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4414464 2025-12-02] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [282480 2025-12-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.224\WsAppService.exe [473824 2017-04-20] (Wondershare Technology Co.,Ltd -> Wondershare)
R2 xTendSoftAPService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendSoftAPService.exe [81624 2019-04-17] (Rivet Networks LLC -> Rivet Networks, LLC.)
R2 xTendUtilityService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe [81624 2019-04-17] (Rivet Networks LLC -> Rivet Networks, LLC.)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 ACE-BASE; C:\WINDOWS\system32\drivers\ACE-BASE.sys [1736832 2021-09-16] (Tencent Technology(Shenzhen) Company Limited -> ANTICHEATEXPERT.COM)
R1 Asusgio2; C:\WINDOWS\system32\drivers\AsIO2.sys [34384 2021-10-21] (ASUSTeK Computer Inc. -> )
R1 Asusgio3; C:\WINDOWS\system32\drivers\AsIO3.sys [43168 2021-12-27] (ASUSTeK Computer Inc. -> )
S3 atvi-randgrid; C:\ProgramData\Battle.net_components\randgridauks\randgrid.sys [2986792 2023-06-07] (Activision Publishing Inc -> Activision Blizzard, Inc.)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2024-12-08] (Microsoft Corporation) [File not signed]
R1 CTIIO; C:\WINDOWS\system32\drivers\CtiIo64.sys [30728 2022-03-12] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
R1 dokan1; C:\WINDOWS\System32\DRIVERS\dokan1.sys [386552 2021-11-26] (Microsoft Windows Hardware Compatibility Publisher -> Dokan Project)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [232928 2025-11-03] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [139904 2025-11-03] (Microsoft Windows Hardware Compatibility Publisher -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [17840 2025-11-26] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [273768 2025-11-03] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [57368 2025-11-03] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [86800 2025-11-03] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [126552 2025-11-03] (ESET, spol. s r.o. -> ESET)
S3 EuMrx; C:\WINDOWS\System32\DRIVERS\EuMrx.sys [215704 2025-04-02] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Win 7 DDK provider)
S3 GemCCID; C:\WINDOWS\System32\DriverStore\FileRepository\gemccid.inf_amd64_526ec61d10ad09ec\GemCCID.sys [163032 2025-03-25] (Thales DIS CPL USA, Inc. -> Gemalto)
R3 HidHide; C:\WINDOWS\System32\drivers\HidHide.sys [66584 2022-06-27] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)
R4 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [55416 2024-12-02] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
S3 ipadtst; C:\ProgramData\MSI\Super_Charger\ipadtst_64.sys [20464 2013-11-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> Windows (R) Win 7 DDK provider)
S3 ipadtst2; C:\ProgramData\MSI\Super_Charger\ipadtst2_64.sys [16336 2016-07-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo10X64.sys [173408 2019-04-17] (Rivet Networks LLC -> Rivet Networks, LLC.)
S3 libusb0; C:\WINDOWS\system32\DRIVERS\libusb0.sys [52872 2015-05-14] (深圳市中达优控科技有限公司 -> hxxp://libusb-win32.sourceforge.net)
R1 MSIO; C:\WINDOWS\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [94784 2022-06-02] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
R3 NTIOLib_CC_Clock; C:\Program Files (x86)\MSI\MSI Center\Lib\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_CC_COMM; C:\Program Files (x86)\MSI\MSI Center\Lib\SYS\NTIOLib_X64.sys [32424 2023-07-31] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 NTIOLib_CC_CPU; C:\Program Files (x86)\MSI\Dragon Center\Lib\Super_Charger\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 ROGKB; C:\WINDOWS\System32\DriverStore\FileRepository\rogkb.inf_amd64_3da3a8b71ac46a0e\ROGKB.sys [36776 2022-01-12] (ASUSTeK Computer Inc. -> Windows (R) Win 7 DDK provider)
R3 ROGMS; C:\WINDOWS\System32\DriverStore\FileRepository\rogms.inf_amd64_7bcd8839c8e4f2a7\ROGMS.sys [41456 2025-11-04] (ASUSTeK COMPUTER INC. -> Windows (R) Win 7 DDK provider)
S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [12435144 2024-10-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
S3 rtucx22x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtucx22x64.inf_amd64_a6eb3abe5befec7d\rtucx22x64.sys [1876424 2024-04-24] (Realtek Semiconductor Corp. -> Realtek Corporation)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)
R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 tap0901cn; C:\WINDOWS\System32\drivers\tap0901cn.sys [45576 2015-10-19] (Connectify (Connectify, Inc.) -> The OpenVPN Project)
S3 tapprotonvpn; C:\WINDOWS\System32\drivers\tapprotonvpn.sys [49024 2021-05-28] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R1 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [249400 2022-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [20880 2025-12-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [627104 2025-12-02] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [102816 2025-12-02] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\Windows\xhunter1.sys [74552 2019-10-22] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-12-25 10:22 - 2025-12-25 11:44 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-12-24 19:52 - 2025-12-24 19:52 - 000000000 ____D C:\Users\Administrator\AppData\Local\UnrealEngineLauncher
2025-12-24 13:23 - 2025-12-25 11:47 - 000000000 ____D C:\Users\Marcel\AppData\Local\Discord
2025-12-23 08:02 - 2025-12-23 08:02 - 000724310 _____ C:\WINDOWS\system32\perfh01B.dat
2025-12-23 08:02 - 2025-12-23 08:02 - 000144284 _____ C:\WINDOWS\system32\perfc01B.dat
2025-12-22 09:08 - 2025-12-22 09:08 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2025-12-18 18:42 - 2025-12-12 05:19 - 002421296 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2025-12-18 18:42 - 2025-12-12 05:19 - 002421296 _____ C:\WINDOWS\system32\vulkaninfo.exe
2025-12-18 18:42 - 2025-12-12 05:19 - 001923120 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-12-18 18:42 - 2025-12-12 05:19 - 001923120 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2025-12-18 18:42 - 2025-12-12 05:19 - 001625648 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2025-12-18 18:42 - 2025-12-12 05:19 - 001625648 _____ C:\WINDOWS\system32\vulkan-1.dll
2025-12-18 18:42 - 2025-12-12 05:19 - 001434672 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2025-12-18 18:42 - 2025-12-12 05:19 - 001434672 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2025-12-18 18:42 - 2025-12-12 05:19 - 000478952 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2025-12-18 18:42 - 2025-12-12 05:19 - 000375016 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2025-12-18 18:42 - 2025-12-12 05:15 - 001574632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2025-12-18 18:42 - 2025-12-12 05:15 - 001344744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2025-12-18 18:42 - 2025-12-12 05:15 - 001224936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2025-12-18 18:42 - 2025-12-12 05:15 - 000675048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2025-12-18 18:42 - 2025-12-12 05:15 - 000509160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2025-12-18 18:42 - 2025-12-12 05:14 - 027559656 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2025-12-18 18:42 - 2025-12-12 05:14 - 002319080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2025-12-18 18:42 - 2025-12-12 05:14 - 001716968 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2025-12-18 18:42 - 2025-12-12 05:14 - 001616104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2025-12-18 18:42 - 2025-12-12 05:14 - 001055976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2025-12-18 18:42 - 2025-12-12 05:14 - 000812264 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2025-12-18 18:42 - 2025-12-12 05:14 - 000469224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2025-12-18 18:42 - 2025-12-12 05:13 - 022613224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2025-12-18 18:42 - 2025-12-12 05:13 - 018277608 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2025-12-18 18:42 - 2025-12-12 05:13 - 007908072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2025-12-18 18:42 - 2025-12-12 05:13 - 005923048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2025-12-18 18:42 - 2025-12-12 05:13 - 005586664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2025-12-18 18:42 - 2025-12-12 05:13 - 004288232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2025-12-18 18:42 - 2025-12-12 05:13 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2025-12-18 18:42 - 2025-12-12 05:12 - 005687448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2025-12-18 18:42 - 2025-12-12 05:12 - 004975632 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2025-12-18 18:42 - 2025-12-11 17:29 - 000153488 _____ C:\WINDOWS\system32\nvinfo.pb
2025-12-03 22:01 - 2025-12-03 22:01 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2025-12-02 17:11 - 2025-12-02 17:11 - 000035602 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-12-02 17:11 - 2025-12-02 17:11 - 000035602 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-12-25 12:02 - 2021-03-26 07:38 - 000000000 ____D C:\FRST
2025-12-25 12:00 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-12-25 11:58 - 2019-03-22 21:38 - 000000000 ____D C:\Program Files (x86)\Steam
2025-12-25 11:21 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-12-25 10:45 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-12-25 10:45 - 2021-03-26 19:45 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\Parsec
2025-12-25 10:19 - 2018-12-28 01:10 - 000000000 ____D C:\Users\Marcel\AppData\Local\D3DSCache
2025-12-25 10:07 - 2019-01-01 17:44 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\vlc
2025-12-25 10:03 - 2019-01-01 21:40 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2025-12-25 10:01 - 2018-12-28 05:44 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome
2025-12-25 10:00 - 2018-12-28 00:57 - 000000000 ____D C:\Users\Marcel\AppData\Local\Packages
2025-12-25 09:58 - 2018-12-31 12:14 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Word
2025-12-25 09:54 - 2024-12-08 23:16 - 000003326 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2025-12-25 09:54 - 2022-09-20 17:41 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2025-12-25 09:54 - 2019-08-10 22:46 - 000000000 ____D C:\Users\Administrator\AppData\Local\Packages
2025-12-25 09:51 - 2019-10-17 18:41 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\DS4Windows
2025-12-25 09:48 - 2020-11-12 17:43 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\discord
2025-12-25 00:09 - 2018-12-28 01:02 - 000000000 ____D C:\ProgramData\NVIDIA
2025-12-24 20:06 - 2024-12-08 23:16 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-12-24 20:06 - 2024-12-08 23:13 - 000018688 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-12-24 20:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2025-12-24 20:06 - 2024-04-01 08:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2025-12-24 20:06 - 2020-10-01 13:44 - 000012288 ___SH C:\DumpStack.log.tmp
2025-12-24 19:56 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2025-12-24 17:48 - 2024-12-08 23:12 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-12-24 15:49 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-12-24 14:34 - 2018-12-28 02:47 - 000000000 ____D C:\Users\Marcel\AppData\Local\CrashDumps
2025-12-24 13:23 - 2020-11-12 17:43 - 000000000 ____D C:\Users\Marcel\AppData\Local\tmpdiblb2im.43g
2025-12-24 13:23 - 2018-12-28 04:07 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2025-12-24 13:23 - 2018-12-28 04:07 - 000000000 ____D C:\Users\Marcel\AppData\Local\SquirrelTemp
2025-12-24 12:46 - 2019-01-06 21:22 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Excel
2025-12-23 08:02 - 2024-12-08 23:16 - 001698692 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-12-22 23:15 - 2018-12-28 01:15 - 000002313 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-12-22 14:14 - 2022-07-20 23:01 - 000002399 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner Browser.lnk
2025-12-22 14:14 - 2022-07-20 23:01 - 000002364 _____ C:\Users\Public\Desktop\CCleaner Browser.lnk
2025-12-22 14:14 - 2022-07-20 23:01 - 000000000 ____D C:\Program Files (x86)\CCleaner Browser
2025-12-22 12:53 - 2024-12-08 23:16 - 000004252 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1705345213
2025-12-22 12:53 - 2024-01-15 20:00 - 000001393 _____ C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prehliadač Opera.lnk
2025-12-22 08:14 - 2024-06-16 08:15 - 000000000 ____D C:\Users\Marcel\AppData\Local\eID_klient
2025-12-22 08:09 - 2024-12-08 23:16 - 000003630 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-12-22 08:09 - 2024-12-08 23:16 - 000003504 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-12-20 10:01 - 2020-06-10 14:55 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-12-17 17:06 - 2021-08-03 09:53 - 000000000 ____D C:\Program Files\ASUS
2025-12-14 12:59 - 2018-12-28 03:38 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-12-14 12:56 - 2018-12-28 03:38 - 218369424 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-12-13 22:12 - 2019-10-31 12:08 - 000000248 ____H C:\WINDOWS\Tasks\MSILEDKeeper_Host.job
2025-12-13 22:10 - 2024-04-01 17:35 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-12-13 22:10 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-12-13 22:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-12-13 22:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-12-13 22:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-12-13 22:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2025-12-13 22:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-12-13 07:03 - 2025-02-06 16:42 - 000003582 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1514861923-3393839258-3891969025-1001
2025-12-13 07:03 - 2024-12-08 23:16 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1514861923-3393839258-3891969025-1001
2025-12-13 07:03 - 2024-12-08 23:16 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1514861923-3393839258-3891969025-1001
2025-12-13 07:03 - 2020-10-01 10:32 - 000002386 _____ C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-12-12 20:41 - 2024-12-08 23:13 - 003276800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-12-12 14:17 - 2023-09-14 15:05 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2025-12-12 14:17 - 2023-09-14 15:05 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2025-12-12 14:09 - 2021-03-26 13:56 - 000000000 ____D C:\Program Files\CCleaner
2025-12-06 22:45 - 2018-12-30 18:20 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\TS3Client
2025-12-05 18:05 - 2021-08-03 09:39 - 000000000 ____D C:\Program Files (x86)\ASUS
2025-12-03 22:02 - 2024-12-08 23:12 - 000516520 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-12-03 22:01 - 2025-06-27 21:49 - 000000000 ____D C:\WINDOWS\system32\ruxim
2025-12-03 22:01 - 2024-04-01 17:36 - 000000000 ____D C:\WINDOWS\InboxApps
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ___RD C:\Program Files\Windows Defender
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\WUModels
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\DiagTrack
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\System
2025-12-03 22:01 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2025-11-26 18:33 - 2024-12-08 09:20 - 000017840 _____ (ESET) C:\WINDOWS\system32\Drivers\eelam.sys
==================== Files in the root of some directories ========
2020-09-16 18:46 - 2020-09-16 18:46 - 000000048 ____H () C:\Program Files (x86)\y4greqpdhy.dat
2017-01-14 12:37 - 2017-01-14 12:37 - 002174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2025-04-21 15:52 - 2025-04-21 15:52 - 000000018 _____ () C:\Users\Administrator\AppData\Roaming\.cache9050425797200915815.dat
2019-08-15 17:03 - 2019-08-15 17:03 - 000000000 _____ () C:\Users\Administrator\AppData\Local\oobelibMkey.log
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Ran by Administrator (administrator) on DESKTOP-843F9OM (Micro-Star International Co., Ltd. MS-7B12) (25-12-2025 12:01:58)
Running from C:\Users\Marcel\OneDrive\Počítač\FRST64.exe
Loaded Profiles: Marcel & Administrator
Platform: Microsoft Windows 11 Pro Version 25H2 26200.7462 (X64) Language: Slovenčina (Slovensko)
Default browser: Edge
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() [File not signed] C:\Gaming Mouse\Gaming Mouse.exe
(A225F3B5-240D-4EE9-BCF4-697A07F5E93E -> Micro-Star INT'L CO., LTD.) C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.MSICenter_2.0.63.0_x64__kzh8wxbdkxb8p\DCv2\DCv2.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (Node.js Foundation -> Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe <2>
(C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Nahimic\NahimicMonitorX64.exe
(C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\MSI Center\Engine\CC_Engine_x64.exe
(C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <8>
(C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.UserSessionHelper.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eServiceHost.exe <2>
(C:\Program Files\Parsec\pservice.exe ->) (Unity Technologies SF -> Parsec) [File not signed] C:\Program Files\Parsec\parsecd.exe <2>
(C:\ProgramData\Wargaming.net\GameCenter\wgc.exe ->) (Wargaming Group Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\dlls\wgc_renderer_host.exe <5>
(C:\ProgramData\Wargaming.net\GameCenter\wgc.exe ->) (Wargaming.net Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\wargamingerrormonitor.exe
(cmd.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\BrowserPrivacyAndSecurity.exe
(D:\Games\Riot Games\Riot Client\RiotClientServices.exe ->) () [File not signed] D:\Games\Riot Games\Riot Client\RiotClientCrashHandler.exe
(Discord Inc. -> Discord Inc.) C:\Users\Marcel\AppData\Local\Discord\app-1.0.9219\Discord.exe <6>
(drivers\RivetNetworks\Killer\xTendSoftAPService.exe ->) (Rivet Networks LLC -> Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendSoftAP.exe
(drivers\RivetNetworks\Killer\xTendUtilityService.exe ->) (Rivet Networks LLC -> Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtility.exe
(E:\Games\Fortnite\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe ->) (Epic Games Inc. -> Epic Games, Inc.) E:\Games\Fortnite\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <3>
(explorer.exe ->) () [File not signed] C:\Program Files (x86)\FastShare\FastShare.exe
(explorer.exe ->) (Epic Games Inc. -> Epic Games, Inc.) E:\Games\Fortnite\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <16>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams.exe <2>
(explorer.exe ->) (Riot Games, Inc. -> Riot Games, Inc.) D:\Games\Riot Games\Riot Client\RiotClientServices.exe
(explorer.exe ->) (Ryochan7) [File not signed] C:\Users\Marcel\OneDrive\Počítač\DS4Windows\DS4Windows.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Marcel\AppData\Local\Microsoft\OneDrive\25.222.1112.0002_1\OneDrive.Sync.Service.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) () [File not signed] C:\Program Files (x86)\TIBBO\Tibbo Device Server Toolkit\tsvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.02.12\atkexComSvc.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Program Files (x86)\LightingService\LightingService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe
(services.exe ->) (ASUSTEK COMPUTER INCORPORATION -> ASUS Inc.) C:\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome Remote Desktop\143.0.7499.7\remoting_host.exe <2>
(services.exe ->) (HP Inc. -> DTS Inc.) C:\Windows\System32\DTS\HP\APO4x\DtsHPXV2Apo4Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_120314e52c04567c\RstMwService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Dragon Center\DragonCenter_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Voice Control\VoiceControl_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4646b47d9477048e\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_7e93164ae8ff6bf7\RtkAudUService64.exe <2>
(services.exe ->) (Rivet Networks LLC -> Rivet Networks) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(services.exe ->) (Rivet Networks LLC -> Rivet Networks, LLC.) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendSoftAPService.exe
(services.exe ->) (Rivet Networks LLC -> Rivet Networks, LLC.) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe
(services.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicService.exe
(services.exe ->) (Unity Technologies SF -> Parsec) [File not signed] C:\Program Files\Parsec\pservice.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(services.exe ->) (Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.224\WsAppService.exe
(sihost.exe ->) (8545CA03-A40F-42F8-9E80-790ABC2452FC -> Zero Byte) C:\Program Files\WindowsApps\4789ZeroByte.NetSpeedMeter_5.0.0.0_neutral__gvheqymwk6zrr\NetSpeedMeter\Net Speed Meter.exe
(sihost.exe ->) (CACCD12F-7BFA-4346-AD14-30B4E275348F -> Hewlett-Packard Development Company, L.P.) C:\Program Files\WindowsApps\33C30B79.HyperXNGenuity_5.35.0.0_x64__0a78dr3hq0pvt\Assets\Native\NGenuity2Helper.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.SurfaceWirelessDisplayAdapter_4.232.137.0_x64__8wekyb3d8bbwe\Desktop\WDADesktopService.exe
(SteelSeries France SASU -> A-Volute) C:\Users\Marcel\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\ROG Armoury\Mouse\ROG STRIX CARRY\P508PowerAgent.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x86.exe
(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\AacExtCard\extensionCardHal_x86.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\ASUS_Aac_DRAM\Aac3572DramHal_x86.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.195.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Marcel\AppData\Local\Microsoft\OneDrive\25.222.1112.0002_1\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> ) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Wargaming Group Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_7e93164ae8ff6bf7\RtkAudUService64.exe [3112448 2025-08-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320056 2019-08-28] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [285616 2025-11-26] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [Gaming Mouse] => C:\Gaming Mouse\Gaming Mouse.exe [1306624 2009-09-30] () [File not signed]
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2410968 2018-09-13] (Adobe Systems Incorporated -> Adobe Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\RunOnce: [msedge_cleanup_{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}] => C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.96\Installer\setup.exe [7735336 2025-12-20] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\RunOnce: [ccleaner_update_helper] => C:\Program Files\CCleaner\ccleaner_update_helper.exe [824072 2025-12-12] (Gen Digital Inc. -> Piriform)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [EpicGamesLauncher] => E:\Games\Fortnite\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [39520672 2025-12-24] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [FastShare] => C:\Program Files (x86)\FastShare\FastShare.exe [1132544 2014-10-02] () [File not signed]
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5750936 2025-12-23] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Xvid] => C:\Program Files (x86)\Xvid\CheckUpdate.exe [8192 2011-01-17] () [File not signed]
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45875504 2025-03-12] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Parsec.App.0] => C:\Program Files\Parsec\parsecd.exe [517016 2025-11-12] (Unity Technologies SF -> Parsec) [File not signed]
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [RiotClient] => D:\Games\Riot Games\Riot Client\RiotClientServices.exe [75280512 2025-12-12] (Riot Games, Inc. -> Riot Games, Inc.)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Disig Web Signer] => C:\Program Files (x86)\Disig\Web Signer\WebSignerTray.exe (No File)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [41655256 2025-12-06] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Teams] => C:\Users\Marcel\AppData\Local\Microsoft\WindowsApps\MSTeams_8wekyb3d8bbwe\ms-teams.exe [0 0] () [symlink -> ]
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Discord] => C:\Users\Marcel\AppData\Local\Discord\Update.exe [1596344 2025-12-15] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\MountPoints2: {418d1015-0a4e-11e9-93fc-645d8676882d} - "I:\SETUP.exe"
HKU\S-1-5-21-1514861923-3393839258-3891969025-500\...\Run: [MicrosoftEdgeAutoLaunch_98769996E24836F99EC8617644423B4C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4228688 2025-12-18] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\Canon WSD Language Monitor: C:\Windows\system32\cnnx0_flm.dll [1420800 2013-02-25] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\CPCA Language Monitor3b: C:\Windows\system32\CNAS0MOK.DLL [1006080 2012-08-09] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{052EB454-9F19-CB42-7875-807F79F311C4}] -> C:\Program Files (x86)\CCleaner Browser\Application\143.0.33371.147\Installer\chrmstp.exe [2025-12-22] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2025-11-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\143.0.7499.170\Installer\chrmstp.exe [2025-12-22] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0947c4b8-f719-4d7c-b117-22b759b5e2aa} - no filepath. <==== ATTENTION
Task: {11583b5c-0cdd-4464-ad1f-819982c7c077} - no filepath. <==== ATTENTION
Task: {14ed5bae-80ea-428d-969e-f56cc58f5555} - no filepath. <==== ATTENTION
Task: {16b4f2e2-ecdd-4f15-bbb7-aeb3592e0274} - no filepath. <==== ATTENTION
Task: {1bd1fbd8-1668-470f-8d4a-9a00f89d2f57} - no filepath. <==== ATTENTION
Task: {1e878e15-d1ec-4e19-9240-9b42c11fb02e} - no filepath. <==== ATTENTION
Task: {1ebf2531-930f-44ba-abe4-892fb54f316b} - no filepath. <==== ATTENTION
Task: {21a08a80-58fc-4c2e-9627-34f8e3a7ad0d} - no filepath. <==== ATTENTION
Task: {22945d36-6724-4512-a10c-609866181c2b} - no filepath. <==== ATTENTION
Task: {23cef70e-dbe2-481a-9354-a83528bc8668} - no filepath. <==== ATTENTION
Task: {2673ad69-8957-4fd6-88e9-ca1f60ff11af} - no filepath. <==== ATTENTION
Task: {269cb3b0-44f2-41dd-ae8c-ce36ca290fca} - no filepath. <==== ATTENTION
Task: {2b8a4287-f1a9-4c38-a394-d8c5c955c964} - no filepath. <==== ATTENTION
Task: {33ee042c-0be2-4151-9774-9ec54d68a286} - no filepath. <==== ATTENTION
Task: {3727500c-6736-44db-9936-8658b76069f4} - no filepath. <==== ATTENTION
Task: {41365dac-c06c-4ffa-b257-c09cf3a22231} - no filepath. <==== ATTENTION
Task: {41abd0d2-d2cb-42f7-a49f-7e1d9b0f9b6c} - no filepath. <==== ATTENTION
Task: {451378e5-3d3b-436a-bac8-7b99dc3f86ed} - no filepath. <==== ATTENTION
Task: {46fff474-66d3-4285-a188-de91e8cc6616} - no filepath. <==== ATTENTION
Task: {49759e68-43b5-4d7e-9548-7035383134ac} - no filepath. <==== ATTENTION
Task: {4988b198-0a7c-4d81-967c-4c5bbc2970ef} - no filepath. <==== ATTENTION
Task: {4cdbb754-7e59-45aa-8894-e2a5e2cb00f6} - no filepath. <==== ATTENTION
Task: {4f0d9664-f75f-45fd-88a3-237f1a60cbd1} - no filepath. <==== ATTENTION
Task: {4f164eff-c987-43b5-8945-36703be40f64} - no filepath. <==== ATTENTION
Task: {50c27b69-7516-4760-9cc3-6175606a580b} - no filepath. <==== ATTENTION
Task: {51aa329e-089f-4e13-8a1d-ea4e9a47c99a} - no filepath. <==== ATTENTION
Task: {55f94a0a-0e35-463a-b84b-d433ec4e798a} - no filepath. <==== ATTENTION
Task: {57ad22f1-f2d6-4869-b651-23eee945566d} - no filepath. <==== ATTENTION
Task: {5b6823bc-b681-4611-a718-933b4cdec481} - no filepath. <==== ATTENTION
Task: {63562bbe-f86f-46a5-805b-19291cc6a7c7} - no filepath. <==== ATTENTION
Task: {649ba9d8-1482-4ed7-9984-9f2594a95864} - no filepath. <==== ATTENTION
Task: {64c61f0c-cb15-4eb0-9380-b12cc9c32284} - no filepath. <==== ATTENTION
Task: {6826578c-0939-4752-bbc4-331ea94d3393} - no filepath. <==== ATTENTION
Task: {6bcaff12-09cf-4e54-a582-bd0aca107a7f} - no filepath. <==== ATTENTION
Task: {6d596213-eaed-489c-824f-ae21ac694692} - no filepath. <==== ATTENTION
Task: {6ffe0b3f-d980-4f8a-9906-dd1662f24f55} - no filepath. <==== ATTENTION
Task: {72ade00d-1676-49ae-b365-99af4d25e218} - no filepath. <==== ATTENTION
Task: {7436d804-e04b-411a-8d81-71c6ed5f3619} - no filepath. <==== ATTENTION
Task: {74c616c9-4b47-44fc-bda5-5e6a24a439fa} - no filepath. <==== ATTENTION
Task: {76e0fada-cc41-416e-b20b-28b0d0b52d0d} - no filepath. <==== ATTENTION
Task: {797a43b9-8a8f-442c-bdc3-5d2ad2c79f75} - no filepath. <==== ATTENTION
Task: {79c20b72-833c-4248-8910-d9b19604170c} - no filepath. <==== ATTENTION
Task: {7b2dad43-6fa8-4881-8bbe-19ccb994c5aa} - no filepath. <==== ATTENTION
Task: {80b1999a-bd28-45be-ade3-a25a2032349c} - no filepath. <==== ATTENTION
Task: {821aa2b1-76e3-4140-b656-0fc18c1c44f9} - no filepath. <==== ATTENTION
Task: {84c48bb9-b77e-4c32-bd0e-58bc944d4f96} - no filepath. <==== ATTENTION
Task: {8615702a-d69d-4dcf-a314-5e53c51afadc} - no filepath. <==== ATTENTION
Task: {8ab155af-85aa-47fe-9fd1-8292f3e74912} - no filepath. <==== ATTENTION
Task: {8f1ced85-349b-4a38-bde3-7e717df9f8b1} - no filepath. <==== ATTENTION
Task: {91f7640b-29d6-4fb5-b8f7-77b85bffe085} - no filepath. <==== ATTENTION
Task: {9d816d21-ec4d-46b7-9afc-2b827e7a213a} - no filepath. <==== ATTENTION
Task: {a0f01ba4-7a84-45df-bd80-27578470830c} - no filepath. <==== ATTENTION
Task: {a6107a93-ae69-47d8-9b17-6cd148493c2e} - no filepath. <==== ATTENTION
Task: {a7c9d806-dda3-457b-a7a8-02fee3477135} - no filepath. <==== ATTENTION
Task: {a90423ca-02b5-42cb-bfbc-755b8a246eb5} - no filepath. <==== ATTENTION
Task: {a9c1b96f-326d-43d5-b02d-b97125d8d360} - no filepath. <==== ATTENTION
Task: {adb6a7e3-3a40-46dc-b105-4b1249b3ac1d} - no filepath. <==== ATTENTION
Task: {b17df9fd-c446-4c8a-9192-7e6b0466c7d4} - no filepath. <==== ATTENTION
Task: {b92834b0-8de7-4789-bd77-b7a59121df4b} - no filepath. <==== ATTENTION
Task: {ba983d80-5206-4ebd-b5e4-2b5f860b7bec} - no filepath. <==== ATTENTION
Task: {be885d8d-cb7b-46a9-a2a3-ae108bab8c7c} - no filepath. <==== ATTENTION
Task: {bf587726-62a4-4f02-a044-6dd420d90d11} - no filepath. <==== ATTENTION
Task: {d9ac1b9e-bb29-44bd-96af-15e55ee0e8e5} - no filepath. <==== ATTENTION
Task: {dba1c038-f4b8-457e-9132-4d53a0c7482e} - no filepath. <==== ATTENTION
Task: {e0d5d199-6254-43f8-95ff-8717f1e6a5fd} - no filepath. <==== ATTENTION
Task: {e29c975b-9eee-46e7-918c-fb08a0559844} - no filepath. <==== ATTENTION
Task: {e5b0518b-a697-4d81-afe0-fe1a9ddbbe99} - no filepath. <==== ATTENTION
Task: {e8b1cb45-e3a4-489e-a2d0-c7a480e94e92} - no filepath. <==== ATTENTION
Task: {ea23531a-7d75-4329-afaf-f901f9652530} - no filepath. <==== ATTENTION
Task: {efe22549-e2b0-466b-b10d-631ed079e2b0} - no filepath. <==== ATTENTION
Task: {f55b43b8-a812-4a7f-9b49-6358dfc5c15c} - no filepath. <==== ATTENTION
Task: {f798d559-79af-47b3-962f-c7dd3e256b80} - no filepath. <==== ATTENTION
Task: {f822c973-b72f-4b94-a897-484cda35daf1} - no filepath. <==== ATTENTION
Task: {fc79eb21-b4ac-4b3b-9452-2aabc0ba13b4} - no filepath. <==== ATTENTION
Task: {ffd668c9-6dfd-42d4-be10-858b94504503} - no filepath. <==== ATTENTION
Task: {09E23B9F-355E-4000-81BE-3472AA6ACB4C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1581568 2025-08-24] (Adobe Inc. -> Adobe Inc.)
Task: {9D755281-2F72-4BAE-8AC9-1EDE1223A29D} - System32\Tasks\ASUS\AcPowerNotification => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe [294880 2022-01-24] (ASUSTeK COMPUTER INC. -> ASUS)
Task: {C6BD68D8-B304-4A72-8D03-24D9B60A134D} - System32\Tasks\ASUS\ArmouryLiveUpdate => C:\Program Files (x86)\ASUS\ROG Armoury\Live Update\ArmouryLiveUpdate.exe [1462760 2020-03-31] (ASUSTeK Computer Inc. -> )
Task: {2424EEDB-0304-4BC5-BA3B-4993F6289522} - System32\Tasks\ASUS\ArmourySocketServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe [2196448 2022-01-24] (ASUSTeK COMPUTER INC. -> ASUS)
Task: {91F91705-4C2F-4A1F-A37C-0612270055AD} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-08-03] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {BF492E52-A5C3-4575-9534-7C4D359FB0ED} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-08-03] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {215998F6-E08E-417D-8DDA-B329E0FE36F4} - System32\Tasks\ASUS\Framework Service => C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe [43022856 2022-01-11] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
Task: {475D4E01-6428-404A-BA9F-E9E4518DBFE5} - System32\Tasks\ASUS\ledcontrolservice3 => C:\Program Files (x86)\ASUS\ROG Armoury\Protocol\AudioLEDControl\ledcontrolservice3.exe [2557744 2020-01-08] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {E942852C-23E2-46AE-99A5-434133A89361} - System32\Tasks\ASUS\MacroAgent => C:\Program Files (x86)\ASUS\ROG Armoury\MacroAgent.exe [77960 2020-03-31] (ASUSTeK Computer Inc. -> )
Task: {F49F8990-5CB1-4C4F-9606-1B0E416932D2} - System32\Tasks\ASUS\P508PowerAgent => C:\Program Files (x86)\ASUS\ROG Armoury\Mouse\ROG STRIX CARRY\P508PowerAgent.exe [51120 2019-11-01] (ASUSTeK Computer Inc. -> )
Task: {EA298C7A-0E22-4BE8-9569-71E901099E72} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (No File)
Task: {5364A06D-910A-478A-B3FD-631B18BCB756} - System32\Tasks\CCleaner Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [3749768 2025-12-17] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {707525D6-71F5-4E6C-AE66-AC45E048585A} - System32\Tasks\CCleaner Browser Heartbeat Task (Logon) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [3749768 2025-12-17] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {8096281C-1AFA-4778-A4FD-C2E604B8B0D3} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-03-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B1C9A4AB-1F11-4D41-9056-1E9614E1B02A} - System32\Tasks\CCleanerBrowserProtectS-1-5-21-1514861923-3393839258-3891969025-1001 => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowserProtect.exe [1774816 2025-09-11] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {BCB59737-BD20-4B44-9E12-D9B847637E05} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6139696 2025-03-12] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "ccfa8858-d8f5-46b6-96ad-2c4e904e85e3" --version "6.34.0.11482" --silent
Task: {5A4CBF65-9F64-4420-96B6-8B6309125C82} - System32\Tasks\CCleanerSkipUAC - Marcel => C:\Program Files\CCleaner\CCleaner.exe [39616304 2025-03-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {20EABEB5-FD59-4959-A4C0-E568E938A333} - System32\Tasks\CCleanerUpdateTaskMachineCore => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-13] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {A8158877-A413-4685-8D72-2BC4EA63B452} - System32\Tasks\CCleanerUpdateTaskMachineUA => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-13] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {8FAC1EB8-D29D-4A49-A324-FB1823D42871} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem145.0.7569.0{0F3F76F3-DDD6-44A4-90BB-B0199C5F5447} => C:\Program Files (x86)\Google\GoogleUpdater\145.0.7569.0\updater.exe [7201944 2025-12-08] (Google LLC -> Google LLC)
Task: {5F06F60A-7F53-4756-A037-57C1FC6A701A} - System32\Tasks\HidHide_Updater => C:\Program Files\Nefarius Software Solutions\HidHide\HidHide_Updater.exe [1206200 2023-05-06] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.) -> C:\Program Files\Nefarius Software Solutions\HidHide\\/silent
Task: {982879DF-E9DC-4DFB-B1E4-D12A95B7D35F} - System32\Tasks\Meta\Messenger-WSP-Helper-S-1-5-21-1514861923-3393839258-3891969025-1001 => MessengerHelper.exe --lassie (No File)
Task: {D6C242DA-7419-46D2-9570-6DC76BA89110} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [11419480 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {03F3CDA3-B69F-4DEF-A0B7-2408DF2CB21D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29025120 2025-10-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {999C25E1-22F1-476A-8FF9-DAD51ADD62C5} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE16\opushutil.exe [61280 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {ACEC2850-37E7-4674-84A6-2741593930F9} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29025120 2025-10-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {F6B4678C-248A-4190-B950-4DA67CC4B10D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [224520 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {3E89E60A-F5B2-499A-B1FC-E3D6E3591EC3} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [224520 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {183876CC-201F-4C15-BB84-AE10DB25A5BB} - System32\Tasks\Microsoft\Windows\Setup\PITRTask => {093cb270-c282-4c22-b2ea-7d2bf1c30bbf} C:\WINDOWS\system32\oobe\PITRTask.dll [118784 2025-12-02] (Microsoft Windows -> Microsoft Corporation)
Task: {6B654AB7-33A9-413C-A421-D0C89DFC221C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)
Task: {789F4532-274D-4D14-A059-56E1FAA216C2} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {AC56674A-B120-4F36-AF39-F46AE6001FA7} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {EB0EE129-4E31-4AAD-AE9D-8A4FF27BE19D} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [692864 2025-09-17] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {7790AD2D-FA20-4634-87F9-FD88AD631264} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34944 2025-09-17] (Mozilla Corporation -> Mozilla Foundation)
Task: {E315423A-552A-4C18-81BE-BCC7B1B17471} - System32\Tasks\MSILEDKeeper_Host => C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe [1024160 2019-01-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {981E78FF-9D6B-43F0-AD55-38B5067549A8} - System32\Tasks\MSISW_Host => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
Task: {E31A19C4-CF15-4C0C-828D-446CF1CD9B3D} - System32\Tasks\NahimicAPISvc32Run => "C:\Program Files\NahimicAPI\x86\NahimicAPISvc32.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7) (No File)
Task: {215A5A84-4DE4-4AA5-A139-E6C3505DA1A9} - System32\Tasks\NahimicAPISvc64Run => "C:\Program Files\NahimicAPI\NahimicAPISvc64.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7) (No File)
Task: {489962F0-4488-40BD-923B-7D9F8DC6373B} - System32\Tasks\NahimicSvc32Run => C:\Windows\SysWOW64\NahimicSvc32.exe [1118128 2024-06-20] (SteelSeries France SASU -> Nahimic)
Task: {EF7445D8-08C0-4245-A0ED-B4E21808829B} - System32\Tasks\NahimicSvc64Run => C:\Windows\System32\NahimicSvc64.exe [1438128 2024-06-20] (SteelSeries France SASU -> Nahimic)
Task: {E5C979AD-8C23-4A0C-934A-9A86653BB98A} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3324528 2025-10-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {35A86BBB-A8D3-4AB6-AEE7-994048F17575} - System32\Tasks\OneDrive Startup Task-S-1-5-21-1514861923-3393839258-3891969025-1001 => C:\Users\Marcel\AppData\Local\Microsoft\OneDrive\25.222.1112.0002_1\OneDriveLauncher.exe [745832 2025-12-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {A876663F-32C4-4ED3-B1FA-910D32F75689} - System32\Tasks\Opera scheduled assistant Autoupdate 1601999995 => C:\Users\Marcel\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Marcel\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {E5106116-7F2F-4869-BF24-DE9519C30321} - System32\Tasks\Opera scheduled Autoupdate 1601999962 => C:\Users\Marcel\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (No File)
Task: {8303BD63-6334-406E-946F-1E7DB0626CA8} - System32\Tasks\Opera scheduled Autoupdate 1705345213 => C:\Users\Marcel\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [6233560 2025-12-18] (Opera Norway AS -> Opera Software)
Task: {FDDE2540-BA1C-4E08-A4DC-5BDEDB5BFA3F} - System32\Tasks\S-1-5-21-1514861923-3393839258-3891969025-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe (No File)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\MSILEDKeeper_Host.job => C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe
Task: C:\WINDOWS\Tasks\MSISW_Host.job => C:\WINDOWS\SysWOW64\muachost.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{202613f3-fd9f-41f9-bf07-a24ac07ebf11}: [DhcpNameServer] 192.168.50.1
Tcpip\..\Interfaces\{21c96efd-c25e-4e8a-9d27-ec8ba4e3f705}: [DhcpNameServer] 192.168.50.1
Tcpip\..\Interfaces\{82891aa6-0e5a-4191-a53c-9acb9a07203f}: [DhcpNameServer] 217.119.121.226 217.119.121.225
Tcpip\..\Interfaces\{e78ecf2c-4d52-4aeb-9615-bc24c128ce54}: [DhcpNameServer] 192.168.50.1
Edge:
=======
Edge Profile: C:\Users\Administrator\AppData\Local\Microsoft\Edge\User Data\Default [2025-04-21]
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\Administrator\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-21]
Edge Extension: (Edge relevant text changes) - C:\Users\Administrator\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-04-21]
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]
FireFox:
========
FF DefaultProfile: gaer362i.default
FF ProfilePath: C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\gaer362i.default [2019-08-10]
FF ProfilePath: C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\v44n3atk.default-release [2019-08-10]
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-12-06] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2018-09-13] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2011-12-14] (Google Inc. -> Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\dtplugin\npDeployJava1.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\plugin2\npjp2.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=3 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1583.3\npCCleanerBrowserUpdate3.dll [2022-12-13] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=9 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1583.3\npCCleanerBrowserUpdate3.dll [2022-12-13] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2018-09-13] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: ditec.sk/DitecNMc -> C:\PROGRA~2\Ditec\DLAUNC~1\NPDITE~1.DLL [2022-05-06] (DITEC, a.s. -> DITEC, a.s.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2025-12-25]
Chrome:
=======
CHR Profile: C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default [2025-04-21]
CHR Extension: (Prezentácie) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-12-06]
CHR Extension: (Dokumenty) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-12-06]
CHR Extension: (Disk Google) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-12-06]
CHR Extension: (YouTube) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-12-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-04-21]
CHR Extension: (Tabuľky) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-12-06]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-26]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-26]
CHR Extension: (ESET Browser Privacy & Security) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oombnmpbbhbakfpfgdflaajkhicgfaam [2025-04-21]
CHR Extension: (Gmail) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-12-06]
CHR HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [oombnmpbbhbakfpfgdflaajkhicgfaam]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174584 2025-08-24] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818136 2018-09-13] (Adobe Systems Incorporated -> Adobe Inc.)
S3 AntiCheatExpert Service; C:\Program Files\AntiCheatExpert\SGuard\x64\SGuardSvc64.exe [2695304 2021-09-16] (PROXIMA BETA PTE. LIMITED -> )
S3 ArmouryCrateDownloadTool; C:\WINDOWS\System32\DriverStore\FileRepository\rogms.inf_amd64_7bcd8839c8e4f2a7\ArmouryLiveUpdate.exe [577440 2025-11-04] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 ArmouryCrateService; C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe [382112 2022-08-18] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.02.12\atkexComSvc.exe [457544 2021-10-21] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-08-03] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [181576 2021-12-27] (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.)
S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-08-03] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [15044872 2023-03-10] (BattlEye Innovations e.K. -> )
S2 ccleaner; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-13] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
S3 CCleanerBrowserElevationService; C:\Program Files (x86)\CCleaner Browser\Application\143.0.33371.147\elevation_service.exe [2631528 2025-12-17] (Gen Digital Inc. -> Gen Digital Inc.)
S3 ccleanerm; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208176 2022-12-13] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1088816 2025-03-12] (Gen Digital Inc. -> Gen Digital Inc.)
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\143.0.7499.7\remoting_host.exe [74392 2025-10-31] (Google LLC -> Google LLC)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13288288 2025-10-07] (Microsoft Corporation -> Microsoft Corporation)
R2 DragonCenter_Service; C:\Program Files (x86)\MSI\Dragon Center\DragonCenter_Service.exe [136864 2018-11-15] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 DtsHPXV2Apo4Service; C:\WINDOWS\System32\DTS\HP\APO4x\DtsHPXV2Apo4Service.exe [380656 2025-03-07] (HP Inc. -> DTS Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1136560 2022-08-16] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [965872 2024-12-29] (EasyAntiCheat Oy -> Epic Games, Inc.)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5543856 2025-11-26] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [4980040 2025-11-26] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [4980040 2025-11-26] (ESET, spol. s r.o. -> ESET)
S3 EpicGamesUpdater; E:\Games\Fortnite\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3071904 2025-12-24] (Epic Games Inc. -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2022-07-11] (Epic Games Inc. -> Epic Games, Inc.)
R2 GameSDK Service; C:\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe [396520 2022-01-20] (ASUSTEK COMPUTER INCORPORATION -> ASUS Inc.)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2602200 2019-04-17] (Rivet Networks LLC -> Rivet Networks)
S3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [81616 2019-04-17] (Rivet Networks LLC -> Rivet Networks, LLC.)
R2 LightingService; C:\Program Files (x86)\LightingService\LightingService.exe [4799336 2023-09-13] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
R2 MSI_Case_Service; C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe [74336 2023-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_Center_Service; C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe [154216 2023-08-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
U2 MSI_VoiceControl_Service; C:\Program Files (x86)\MSI\MSI Center\Voice Control\VoiceControl_Service.exe [36880 2023-04-27] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MysticLight2_Service; C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe [34976 2018-12-20] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 NahimicService; C:\WINDOWS\System32\NahimicService.exe [1910704 2024-06-20] (SteelSeries France SASU -> Nahimic)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4646b47d9477048e\Display.NvContainer\NVDisplay.Container.exe [1275624 2025-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
R2 Parsec; C:\Program Files\Parsec\pservice.exe [436120 2025-11-12] (Unity Technologies SF -> Parsec) [File not signed]
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [4659696 2024-02-04] (Rockstar Games, Inc. -> Rockstar Games)
R2 ROG Live Service; C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe [2533992 2025-10-09] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803088 2025-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 tsvc; C:\Program Files (x86)\TIBBO\Tibbo Device Server Toolkit\tsvc.exe [69632 2006-07-04] () [File not signed]
S3 uncheater_bgl; C:\Program Files\Common Files\Uncheater\uncheater_bgl.exe [2097008 2019-10-17] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4414464 2025-12-02] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [282480 2025-12-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.224\WsAppService.exe [473824 2017-04-20] (Wondershare Technology Co.,Ltd -> Wondershare)
R2 xTendSoftAPService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendSoftAPService.exe [81624 2019-04-17] (Rivet Networks LLC -> Rivet Networks, LLC.)
R2 xTendUtilityService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe [81624 2019-04-17] (Rivet Networks LLC -> Rivet Networks, LLC.)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 ACE-BASE; C:\WINDOWS\system32\drivers\ACE-BASE.sys [1736832 2021-09-16] (Tencent Technology(Shenzhen) Company Limited -> ANTICHEATEXPERT.COM)
R1 Asusgio2; C:\WINDOWS\system32\drivers\AsIO2.sys [34384 2021-10-21] (ASUSTeK Computer Inc. -> )
R1 Asusgio3; C:\WINDOWS\system32\drivers\AsIO3.sys [43168 2021-12-27] (ASUSTeK Computer Inc. -> )
S3 atvi-randgrid; C:\ProgramData\Battle.net_components\randgridauks\randgrid.sys [2986792 2023-06-07] (Activision Publishing Inc -> Activision Blizzard, Inc.)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2024-12-08] (Microsoft Corporation) [File not signed]
R1 CTIIO; C:\WINDOWS\system32\drivers\CtiIo64.sys [30728 2022-03-12] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
R1 dokan1; C:\WINDOWS\System32\DRIVERS\dokan1.sys [386552 2021-11-26] (Microsoft Windows Hardware Compatibility Publisher -> Dokan Project)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [232928 2025-11-03] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [139904 2025-11-03] (Microsoft Windows Hardware Compatibility Publisher -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [17840 2025-11-26] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [273768 2025-11-03] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [57368 2025-11-03] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [86800 2025-11-03] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [126552 2025-11-03] (ESET, spol. s r.o. -> ESET)
S3 EuMrx; C:\WINDOWS\System32\DRIVERS\EuMrx.sys [215704 2025-04-02] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Win 7 DDK provider)
S3 GemCCID; C:\WINDOWS\System32\DriverStore\FileRepository\gemccid.inf_amd64_526ec61d10ad09ec\GemCCID.sys [163032 2025-03-25] (Thales DIS CPL USA, Inc. -> Gemalto)
R3 HidHide; C:\WINDOWS\System32\drivers\HidHide.sys [66584 2022-06-27] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)
R4 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [55416 2024-12-02] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
S3 ipadtst; C:\ProgramData\MSI\Super_Charger\ipadtst_64.sys [20464 2013-11-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> Windows (R) Win 7 DDK provider)
S3 ipadtst2; C:\ProgramData\MSI\Super_Charger\ipadtst2_64.sys [16336 2016-07-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo10X64.sys [173408 2019-04-17] (Rivet Networks LLC -> Rivet Networks, LLC.)
S3 libusb0; C:\WINDOWS\system32\DRIVERS\libusb0.sys [52872 2015-05-14] (深圳市中达优控科技有限公司 -> hxxp://libusb-win32.sourceforge.net)
R1 MSIO; C:\WINDOWS\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [94784 2022-06-02] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
R3 NTIOLib_CC_Clock; C:\Program Files (x86)\MSI\MSI Center\Lib\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_CC_COMM; C:\Program Files (x86)\MSI\MSI Center\Lib\SYS\NTIOLib_X64.sys [32424 2023-07-31] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 NTIOLib_CC_CPU; C:\Program Files (x86)\MSI\Dragon Center\Lib\Super_Charger\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 ROGKB; C:\WINDOWS\System32\DriverStore\FileRepository\rogkb.inf_amd64_3da3a8b71ac46a0e\ROGKB.sys [36776 2022-01-12] (ASUSTeK Computer Inc. -> Windows (R) Win 7 DDK provider)
R3 ROGMS; C:\WINDOWS\System32\DriverStore\FileRepository\rogms.inf_amd64_7bcd8839c8e4f2a7\ROGMS.sys [41456 2025-11-04] (ASUSTeK COMPUTER INC. -> Windows (R) Win 7 DDK provider)
S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [12435144 2024-10-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
S3 rtucx22x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtucx22x64.inf_amd64_a6eb3abe5befec7d\rtucx22x64.sys [1876424 2024-04-24] (Realtek Semiconductor Corp. -> Realtek Corporation)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)
R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 tap0901cn; C:\WINDOWS\System32\drivers\tap0901cn.sys [45576 2015-10-19] (Connectify (Connectify, Inc.) -> The OpenVPN Project)
S3 tapprotonvpn; C:\WINDOWS\System32\drivers\tapprotonvpn.sys [49024 2021-05-28] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R1 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [249400 2022-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [20880 2025-12-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [627104 2025-12-02] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [102816 2025-12-02] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\Windows\xhunter1.sys [74552 2019-10-22] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-12-25 10:22 - 2025-12-25 11:44 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-12-24 19:52 - 2025-12-24 19:52 - 000000000 ____D C:\Users\Administrator\AppData\Local\UnrealEngineLauncher
2025-12-24 13:23 - 2025-12-25 11:47 - 000000000 ____D C:\Users\Marcel\AppData\Local\Discord
2025-12-23 08:02 - 2025-12-23 08:02 - 000724310 _____ C:\WINDOWS\system32\perfh01B.dat
2025-12-23 08:02 - 2025-12-23 08:02 - 000144284 _____ C:\WINDOWS\system32\perfc01B.dat
2025-12-22 09:08 - 2025-12-22 09:08 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2025-12-18 18:42 - 2025-12-12 05:19 - 002421296 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2025-12-18 18:42 - 2025-12-12 05:19 - 002421296 _____ C:\WINDOWS\system32\vulkaninfo.exe
2025-12-18 18:42 - 2025-12-12 05:19 - 001923120 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-12-18 18:42 - 2025-12-12 05:19 - 001923120 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2025-12-18 18:42 - 2025-12-12 05:19 - 001625648 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2025-12-18 18:42 - 2025-12-12 05:19 - 001625648 _____ C:\WINDOWS\system32\vulkan-1.dll
2025-12-18 18:42 - 2025-12-12 05:19 - 001434672 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2025-12-18 18:42 - 2025-12-12 05:19 - 001434672 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2025-12-18 18:42 - 2025-12-12 05:19 - 000478952 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2025-12-18 18:42 - 2025-12-12 05:19 - 000375016 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2025-12-18 18:42 - 2025-12-12 05:15 - 001574632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2025-12-18 18:42 - 2025-12-12 05:15 - 001344744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2025-12-18 18:42 - 2025-12-12 05:15 - 001224936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2025-12-18 18:42 - 2025-12-12 05:15 - 000675048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2025-12-18 18:42 - 2025-12-12 05:15 - 000509160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2025-12-18 18:42 - 2025-12-12 05:14 - 027559656 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2025-12-18 18:42 - 2025-12-12 05:14 - 002319080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2025-12-18 18:42 - 2025-12-12 05:14 - 001716968 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2025-12-18 18:42 - 2025-12-12 05:14 - 001616104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2025-12-18 18:42 - 2025-12-12 05:14 - 001055976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2025-12-18 18:42 - 2025-12-12 05:14 - 000812264 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2025-12-18 18:42 - 2025-12-12 05:14 - 000469224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2025-12-18 18:42 - 2025-12-12 05:13 - 022613224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2025-12-18 18:42 - 2025-12-12 05:13 - 018277608 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2025-12-18 18:42 - 2025-12-12 05:13 - 007908072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2025-12-18 18:42 - 2025-12-12 05:13 - 005923048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2025-12-18 18:42 - 2025-12-12 05:13 - 005586664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2025-12-18 18:42 - 2025-12-12 05:13 - 004288232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2025-12-18 18:42 - 2025-12-12 05:13 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2025-12-18 18:42 - 2025-12-12 05:12 - 005687448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2025-12-18 18:42 - 2025-12-12 05:12 - 004975632 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2025-12-18 18:42 - 2025-12-11 17:29 - 000153488 _____ C:\WINDOWS\system32\nvinfo.pb
2025-12-03 22:01 - 2025-12-03 22:01 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2025-12-02 17:11 - 2025-12-02 17:11 - 000035602 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-12-02 17:11 - 2025-12-02 17:11 - 000035602 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-12-25 12:02 - 2021-03-26 07:38 - 000000000 ____D C:\FRST
2025-12-25 12:00 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-12-25 11:58 - 2019-03-22 21:38 - 000000000 ____D C:\Program Files (x86)\Steam
2025-12-25 11:21 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-12-25 10:45 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-12-25 10:45 - 2021-03-26 19:45 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\Parsec
2025-12-25 10:19 - 2018-12-28 01:10 - 000000000 ____D C:\Users\Marcel\AppData\Local\D3DSCache
2025-12-25 10:07 - 2019-01-01 17:44 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\vlc
2025-12-25 10:03 - 2019-01-01 21:40 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2025-12-25 10:01 - 2018-12-28 05:44 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome
2025-12-25 10:00 - 2018-12-28 00:57 - 000000000 ____D C:\Users\Marcel\AppData\Local\Packages
2025-12-25 09:58 - 2018-12-31 12:14 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Word
2025-12-25 09:54 - 2024-12-08 23:16 - 000003326 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2025-12-25 09:54 - 2022-09-20 17:41 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2025-12-25 09:54 - 2019-08-10 22:46 - 000000000 ____D C:\Users\Administrator\AppData\Local\Packages
2025-12-25 09:51 - 2019-10-17 18:41 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\DS4Windows
2025-12-25 09:48 - 2020-11-12 17:43 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\discord
2025-12-25 00:09 - 2018-12-28 01:02 - 000000000 ____D C:\ProgramData\NVIDIA
2025-12-24 20:06 - 2024-12-08 23:16 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-12-24 20:06 - 2024-12-08 23:13 - 000018688 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-12-24 20:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2025-12-24 20:06 - 2024-04-01 08:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2025-12-24 20:06 - 2020-10-01 13:44 - 000012288 ___SH C:\DumpStack.log.tmp
2025-12-24 19:56 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2025-12-24 17:48 - 2024-12-08 23:12 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-12-24 15:49 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-12-24 14:34 - 2018-12-28 02:47 - 000000000 ____D C:\Users\Marcel\AppData\Local\CrashDumps
2025-12-24 13:23 - 2020-11-12 17:43 - 000000000 ____D C:\Users\Marcel\AppData\Local\tmpdiblb2im.43g
2025-12-24 13:23 - 2018-12-28 04:07 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2025-12-24 13:23 - 2018-12-28 04:07 - 000000000 ____D C:\Users\Marcel\AppData\Local\SquirrelTemp
2025-12-24 12:46 - 2019-01-06 21:22 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Excel
2025-12-23 08:02 - 2024-12-08 23:16 - 001698692 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-12-22 23:15 - 2018-12-28 01:15 - 000002313 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-12-22 14:14 - 2022-07-20 23:01 - 000002399 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner Browser.lnk
2025-12-22 14:14 - 2022-07-20 23:01 - 000002364 _____ C:\Users\Public\Desktop\CCleaner Browser.lnk
2025-12-22 14:14 - 2022-07-20 23:01 - 000000000 ____D C:\Program Files (x86)\CCleaner Browser
2025-12-22 12:53 - 2024-12-08 23:16 - 000004252 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1705345213
2025-12-22 12:53 - 2024-01-15 20:00 - 000001393 _____ C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prehliadač Opera.lnk
2025-12-22 08:14 - 2024-06-16 08:15 - 000000000 ____D C:\Users\Marcel\AppData\Local\eID_klient
2025-12-22 08:09 - 2024-12-08 23:16 - 000003630 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-12-22 08:09 - 2024-12-08 23:16 - 000003504 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-12-20 10:01 - 2020-06-10 14:55 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-12-17 17:06 - 2021-08-03 09:53 - 000000000 ____D C:\Program Files\ASUS
2025-12-14 12:59 - 2018-12-28 03:38 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-12-14 12:56 - 2018-12-28 03:38 - 218369424 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-12-13 22:12 - 2019-10-31 12:08 - 000000248 ____H C:\WINDOWS\Tasks\MSILEDKeeper_Host.job
2025-12-13 22:10 - 2024-04-01 17:35 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-12-13 22:10 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-12-13 22:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-12-13 22:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-12-13 22:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-12-13 22:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2025-12-13 22:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-12-13 07:03 - 2025-02-06 16:42 - 000003582 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1514861923-3393839258-3891969025-1001
2025-12-13 07:03 - 2024-12-08 23:16 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1514861923-3393839258-3891969025-1001
2025-12-13 07:03 - 2024-12-08 23:16 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1514861923-3393839258-3891969025-1001
2025-12-13 07:03 - 2020-10-01 10:32 - 000002386 _____ C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-12-12 20:41 - 2024-12-08 23:13 - 003276800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-12-12 14:17 - 2023-09-14 15:05 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2025-12-12 14:17 - 2023-09-14 15:05 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2025-12-12 14:09 - 2021-03-26 13:56 - 000000000 ____D C:\Program Files\CCleaner
2025-12-06 22:45 - 2018-12-30 18:20 - 000000000 ____D C:\Users\Marcel\AppData\Roaming\TS3Client
2025-12-05 18:05 - 2021-08-03 09:39 - 000000000 ____D C:\Program Files (x86)\ASUS
2025-12-03 22:02 - 2024-12-08 23:12 - 000516520 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-12-03 22:01 - 2025-06-27 21:49 - 000000000 ____D C:\WINDOWS\system32\ruxim
2025-12-03 22:01 - 2024-04-01 17:36 - 000000000 ____D C:\WINDOWS\InboxApps
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ___RD C:\Program Files\Windows Defender
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\WUModels
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\DiagTrack
2025-12-03 22:01 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\System
2025-12-03 22:01 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2025-11-26 18:33 - 2024-12-08 09:20 - 000017840 _____ (ESET) C:\WINDOWS\system32\Drivers\eelam.sys
==================== Files in the root of some directories ========
2020-09-16 18:46 - 2020-09-16 18:46 - 000000048 ____H () C:\Program Files (x86)\y4greqpdhy.dat
2017-01-14 12:37 - 2017-01-14 12:37 - 002174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2025-04-21 15:52 - 2025-04-21 15:52 - 000000018 _____ () C:\Users\Administrator\AppData\Roaming\.cache9050425797200915815.dat
2019-08-15 17:03 - 2019-08-15 17:03 - 000000000 _____ () C:\Users\Administrator\AppData\Local\oobelibMkey.log
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
-
Rudy
- Site Admin
- Příspěvky: 119694
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Pomalý PC
Díky. Otevřte poznámkový blok a zkopírujte do něj:
Uložte do C:\Users\Marcel\OneDrive\Počítač jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Disig Web Signer] => C:\Program Files (x86)\Disig\Web Signer\WebSignerTray.exe (No File)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\MountPoints2: {418d1015-0a4e-11e9-93fc-645d8676882d} - "I:\SETUP.exe"
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {0947c4b8-f719-4d7c-b117-22b759b5e2aa} - no filepath. <==== ATTENTION
Task: {11583b5c-0cdd-4464-ad1f-819982c7c077} - no filepath. <==== ATTENTION
Task: {14ed5bae-80ea-428d-969e-f56cc58f5555} - no filepath. <==== ATTENTION
Task: {16b4f2e2-ecdd-4f15-bbb7-aeb3592e0274} - no filepath. <==== ATTENTION
Task: {1bd1fbd8-1668-470f-8d4a-9a00f89d2f57} - no filepath. <==== ATTENTION
Task: {1e878e15-d1ec-4e19-9240-9b42c11fb02e} - no filepath. <==== ATTENTION
Task: {1ebf2531-930f-44ba-abe4-892fb54f316b} - no filepath. <==== ATTENTION
Task: {21a08a80-58fc-4c2e-9627-34f8e3a7ad0d} - no filepath. <==== ATTENTION
Task: {22945d36-6724-4512-a10c-609866181c2b} - no filepath. <==== ATTENTION
Task: {23cef70e-dbe2-481a-9354-a83528bc8668} - no filepath. <==== ATTENTION
Task: {2673ad69-8957-4fd6-88e9-ca1f60ff11af} - no filepath. <==== ATTENTION
Task: {269cb3b0-44f2-41dd-ae8c-ce36ca290fca} - no filepath. <==== ATTENTION
Task: {2b8a4287-f1a9-4c38-a394-d8c5c955c964} - no filepath. <==== ATTENTION
Task: {33ee042c-0be2-4151-9774-9ec54d68a286} - no filepath. <==== ATTENTION
Task: {3727500c-6736-44db-9936-8658b76069f4} - no filepath. <==== ATTENTION
Task: {41365dac-c06c-4ffa-b257-c09cf3a22231} - no filepath. <==== ATTENTION
Task: {41abd0d2-d2cb-42f7-a49f-7e1d9b0f9b6c} - no filepath. <==== ATTENTION
Task: {451378e5-3d3b-436a-bac8-7b99dc3f86ed} - no filepath. <==== ATTENTION
Task: {46fff474-66d3-4285-a188-de91e8cc6616} - no filepath. <==== ATTENTION
Task: {49759e68-43b5-4d7e-9548-7035383134ac} - no filepath. <==== ATTENTION
Task: {4988b198-0a7c-4d81-967c-4c5bbc2970ef} - no filepath. <==== ATTENTION
Task: {4cdbb754-7e59-45aa-8894-e2a5e2cb00f6} - no filepath. <==== ATTENTION
Task: {4f0d9664-f75f-45fd-88a3-237f1a60cbd1} - no filepath. <==== ATTENTION
Task: {4f164eff-c987-43b5-8945-36703be40f64} - no filepath. <==== ATTENTION
Task: {50c27b69-7516-4760-9cc3-6175606a580b} - no filepath. <==== ATTENTION
Task: {51aa329e-089f-4e13-8a1d-ea4e9a47c99a} - no filepath. <==== ATTENTION
Task: {55f94a0a-0e35-463a-b84b-d433ec4e798a} - no filepath. <==== ATTENTION
Task: {57ad22f1-f2d6-4869-b651-23eee945566d} - no filepath. <==== ATTENTION
Task: {5b6823bc-b681-4611-a718-933b4cdec481} - no filepath. <==== ATTENTION
Task: {63562bbe-f86f-46a5-805b-19291cc6a7c7} - no filepath. <==== ATTENTION
Task: {649ba9d8-1482-4ed7-9984-9f2594a95864} - no filepath. <==== ATTENTION
Task: {64c61f0c-cb15-4eb0-9380-b12cc9c32284} - no filepath. <==== ATTENTION
Task: {6826578c-0939-4752-bbc4-331ea94d3393} - no filepath. <==== ATTENTION
Task: {6bcaff12-09cf-4e54-a582-bd0aca107a7f} - no filepath. <==== ATTENTION
Task: {6d596213-eaed-489c-824f-ae21ac694692} - no filepath. <==== ATTENTION
Task: {6ffe0b3f-d980-4f8a-9906-dd1662f24f55} - no filepath. <==== ATTENTION
Task: {72ade00d-1676-49ae-b365-99af4d25e218} - no filepath. <==== ATTENTION
Task: {7436d804-e04b-411a-8d81-71c6ed5f3619} - no filepath. <==== ATTENTION
Task: {74c616c9-4b47-44fc-bda5-5e6a24a439fa} - no filepath. <==== ATTENTION
Task: {76e0fada-cc41-416e-b20b-28b0d0b52d0d} - no filepath. <==== ATTENTION
Task: {797a43b9-8a8f-442c-bdc3-5d2ad2c79f75} - no filepath. <==== ATTENTION
Task: {79c20b72-833c-4248-8910-d9b19604170c} - no filepath. <==== ATTENTION
Task: {7b2dad43-6fa8-4881-8bbe-19ccb994c5aa} - no filepath. <==== ATTENTION
Task: {80b1999a-bd28-45be-ade3-a25a2032349c} - no filepath. <==== ATTENTION
Task: {821aa2b1-76e3-4140-b656-0fc18c1c44f9} - no filepath. <==== ATTENTION
Task: {84c48bb9-b77e-4c32-bd0e-58bc944d4f96} - no filepath. <==== ATTENTION
Task: {8615702a-d69d-4dcf-a314-5e53c51afadc} - no filepath. <==== ATTENTION
Task: {8ab155af-85aa-47fe-9fd1-8292f3e74912} - no filepath. <==== ATTENTION
Task: {8f1ced85-349b-4a38-bde3-7e717df9f8b1} - no filepath. <==== ATTENTION
Task: {91f7640b-29d6-4fb5-b8f7-77b85bffe085} - no filepath. <==== ATTENTION
Task: {9d816d21-ec4d-46b7-9afc-2b827e7a213a} - no filepath. <==== ATTENTION
Task: {a0f01ba4-7a84-45df-bd80-27578470830c} - no filepath. <==== ATTENTION
Task: {a6107a93-ae69-47d8-9b17-6cd148493c2e} - no filepath. <==== ATTENTION
Task: {a7c9d806-dda3-457b-a7a8-02fee3477135} - no filepath. <==== ATTENTION
Task: {a90423ca-02b5-42cb-bfbc-755b8a246eb5} - no filepath. <==== ATTENTION
Task: {a9c1b96f-326d-43d5-b02d-b97125d8d360} - no filepath. <==== ATTENTION
Task: {adb6a7e3-3a40-46dc-b105-4b1249b3ac1d} - no filepath. <==== ATTENTION
Task: {b17df9fd-c446-4c8a-9192-7e6b0466c7d4} - no filepath. <==== ATTENTION
Task: {b92834b0-8de7-4789-bd77-b7a59121df4b} - no filepath. <==== ATTENTION
Task: {ba983d80-5206-4ebd-b5e4-2b5f860b7bec} - no filepath. <==== ATTENTION
Task: {be885d8d-cb7b-46a9-a2a3-ae108bab8c7c} - no filepath. <==== ATTENTION
Task: {bf587726-62a4-4f02-a044-6dd420d90d11} - no filepath. <==== ATTENTION
Task: {d9ac1b9e-bb29-44bd-96af-15e55ee0e8e5} - no filepath. <==== ATTENTION
Task: {dba1c038-f4b8-457e-9132-4d53a0c7482e} - no filepath. <==== ATTENTION
Task: {e0d5d199-6254-43f8-95ff-8717f1e6a5fd} - no filepath. <==== ATTENTION
Task: {e29c975b-9eee-46e7-918c-fb08a0559844} - no filepath. <==== ATTENTION
Task: {e5b0518b-a697-4d81-afe0-fe1a9ddbbe99} - no filepath. <==== ATTENTION
Task: {e8b1cb45-e3a4-489e-a2d0-c7a480e94e92} - no filepath. <==== ATTENTION
Task: {ea23531a-7d75-4329-afaf-f901f9652530} - no filepath. <==== ATTENTION
Task: {efe22549-e2b0-466b-b10d-631ed079e2b0} - no filepath. <==== ATTENTION
Task: {f55b43b8-a812-4a7f-9b49-6358dfc5c15c} - no filepath. <==== ATTENTION
Task: {f798d559-79af-47b3-962f-c7dd3e256b80} - no filepath. <==== ATTENTION
Task: {f822c973-b72f-4b94-a897-484cda35daf1} - no filepath. <==== ATTENTION
Task: {fc79eb21-b4ac-4b3b-9452-2aabc0ba13b4} - no filepath. <==== ATTENTION
Task: {ffd668c9-6dfd-42d4-be10-858b94504503} - no filepath. <==== ATTENTION
Task: {982879DF-E9DC-4DFB-B1E4-D12A95B7D35F} - System32\Tasks\Meta\Messenger-WSP-Helper-S-1-5-21-1514861923-3393839258-3891969025-1001 => MessengerHelper.exe --lassie (No File)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {6B654AB7-33A9-413C-A421-D0C89DFC221C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)
Task: {789F4532-274D-4D14-A059-56E1FAA216C2} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {AC56674A-B120-4F36-AF39-F46AE6001FA7} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {E31A19C4-CF15-4C0C-828D-446CF1CD9B3D} - System32\Tasks\NahimicAPISvc32Run => "C:\Program Files\NahimicAPI\x86\NahimicAPISvc32.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7) (No File)
Task: {215A5A84-4DE4-4AA5-A139-E6C3505DA1A9} - System32\Tasks\NahimicAPISvc64Run => "C:\Program Files\NahimicAPI\NahimicAPISvc64.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7) (No File)
Task: {215A5A84-4DE4-4AA5-A139-E6C3505DA1A9} - System32\Tasks\NahimicAPISvc64Run => "C:\Program Files\NahimicAPI\NahimicAPISvc64.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7) (No File)
Task: {E5106116-7F2F-4869-BF24-DE9519C30321} - System32\Tasks\Opera scheduled Autoupdate 1601999962 => C:\Users\Marcel\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (No File)
Task: {FDDE2540-BA1C-4E08-A4DC-5BDEDB5BFA3F} - System32\Tasks\S-1-5-21-1514861923-3393839258-3891969025-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe (No File)
C:\WINDOWS\LastGood.Tmp
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
C:\Users\Administrator\AppData\Roaming\.cache9050425797200915815.dat
CustomCLSID: HKU\S-1-5-21-1514861923-3393839258-3891969025-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1}\localserver32 -> "C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe" -ToastActivated => No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [470]
FirewallRules: [{03252034-92F7-4832-AECB-A089D22DFB69}] => (Allow) F:\the Crew 2\PrinceOfPersiaTLCdemo\TheLostCrown.exe => No File
FirewallRules: [{B5325169-A01F-4DB2-8FAC-341B6D4D6654}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{0D6EABB2-89F7-48CB-8EB1-AB2D70CB2218}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{C9908B8B-54A3-44EA-86FD-669FA66D1A79}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{5DC15804-1BEE-4FD5-B3A4-73C6845CD821}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{BCFE214F-8D41-4078-9405-2CE7710CCB70}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{C5BE056A-E383-463E-BA20-4C859B831AFA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{CB3FA553-DD48-4B1E-9858-9F1610F89783}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{96124403-73E5-4CE3-A16C-828DC761232C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{09DB0E7F-8E55-46A0-A0C8-10C7B4DF3D03}] => (Block) G:\GodOfWar\GoW.exe => No File
FirewallRules: [UDP Query User{60EDA928-8EE3-48F4-86A0-3D174A8D09A1}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe => No File
FirewallRules: [TCP Query User{0D0E2DC6-3E54-49E0-84E9-8D76ED00F9C1}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe => No File
FirewallRules: [{D77090D5-C80D-4887-AA6C-D18F0EDA187E}] => (Allow) E:\Games\Titan Quest\steamapps\common\Titan Quest Anniversary Edition\WorkshopTool\TQWorkshopTool.exe => No File
FirewallRules: [{64EE3DA9-E0E7-458D-9015-8A1C916F9F30}] => (Allow) E:\Games\Titan Quest\steamapps\common\Titan Quest Anniversary Edition\WorkshopTool\TQWorkshopTool.exe => No File
FirewallRules: [{80C10D29-7E4C-4139-B8AC-D88A8B4D8311}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{16986E0A-D801-47C7-85A5-3904CE620470}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{BA7D7673-B103-4711-973F-D78859671C5E}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe => No File
FirewallRules: [{4E280D24-C01D-48AB-8801-4C77EDC7CACD}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe => No File
FirewallRules: [{68F4DA61-68F3-4D72-800F-BB1BCB31E7F5}] => (Allow) G:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{4FC9E373-26BD-4F0A-A3AF-1536CCE3325C}] => (Allow) G:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{8D1B8864-90D5-4B15-A576-79188A280E3E}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe => No File
FirewallRules: [{009CC80E-2328-41FB-9901-D6C9876A6CF8}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe => No File
FirewallRules: [{FB9858EC-F707-4216-A928-29CAAA19DA45}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{BB71F22B-870C-4301-807C-4EDEBAED1C61}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{3DC51261-C701-4B73-9917-83558B4B9696}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{61C0A4D7-5D2A-4164-A84E-6D81F79DF70C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{7F905CE0-4BCF-4D23-8859-3DF2B633AAA5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{67A2CE38-4D92-4456-931E-6C2DB64F4CDE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{AB07D894-8661-48BA-B53A-BFE21FBFB10A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{D875BFA8-27AC-46E9-BA2D-6A7EDF4763F0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
Emptytemp:
Hosts:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
marsell2607
- Návštěvník
- Příspěvky: 32
- Registrován: 21 led 2014 01:35
Re: Pomalý PC
Fix result of Farbar Recovery Scan Tool (x64) Version: 20-11-2025
Ran by Administrator (26-12-2025 07:41:12) Run:1
Running from C:\Users\Marcel\OneDrive\Počítač
Loaded Profiles: Marcel & Administrator
Boot Mode: Normal
==============================================
fixlist content:
*****************
*****************
==== End of Fixlog 07:41:12 ====
Ran by Administrator (26-12-2025 07:41:12) Run:1
Running from C:\Users\Marcel\OneDrive\Počítač
Loaded Profiles: Marcel & Administrator
Boot Mode: Normal
==============================================
fixlist content:
*****************
*****************
==== End of Fixlog 07:41:12 ====
Re: Pomalý PC
Skontroluj subor fixlist.txt vypada to, ze si pouzil prazdny subor resp. neulozil obsah
Zopakuj akciu doporucenu Rudym
Zopakuj akciu doporucenu Rudym
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
-
marsell2607
- Návštěvník
- Příspěvky: 32
- Registrován: 21 led 2014 01:35
Re: Pomalý PC
Fix result of Farbar Recovery Scan Tool (x64) Version: 20-11-2025
Ran by Administrator (26-12-2025 12:52:05) Run:2
Running from C:\Users\Marcel\OneDrive\Počítač
Loaded Profiles: Marcel & Administrator
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Disig Web Signer] => C:\Program Files (x86)\Disig\Web Signer\WebSignerTray.exe (No File)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\MountPoints2: {418d1015-0a4e-11e9-93fc-645d8676882d} - "I:\SETUP.exe"
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {0947c4b8-f719-4d7c-b117-22b759b5e2aa} - no filepath. <==== ATTENTION
Task: {11583b5c-0cdd-4464-ad1f-819982c7c077} - no filepath. <==== ATTENTION
Task: {14ed5bae-80ea-428d-969e-f56cc58f5555} - no filepath. <==== ATTENTION
Task: {16b4f2e2-ecdd-4f15-bbb7-aeb3592e0274} - no filepath. <==== ATTENTION
Task: {1bd1fbd8-1668-470f-8d4a-9a00f89d2f57} - no filepath. <==== ATTENTION
Task: {1e878e15-d1ec-4e19-9240-9b42c11fb02e} - no filepath. <==== ATTENTION
Task: {1ebf2531-930f-44ba-abe4-892fb54f316b} - no filepath. <==== ATTENTION
Task: {21a08a80-58fc-4c2e-9627-34f8e3a7ad0d} - no filepath. <==== ATTENTION
Task: {22945d36-6724-4512-a10c-609866181c2b} - no filepath. <==== ATTENTION
Task: {23cef70e-dbe2-481a-9354-a83528bc8668} - no filepath. <==== ATTENTION
Task: {2673ad69-8957-4fd6-88e9-ca1f60ff11af} - no filepath. <==== ATTENTION
Task: {269cb3b0-44f2-41dd-ae8c-ce36ca290fca} - no filepath. <==== ATTENTION
Task: {2b8a4287-f1a9-4c38-a394-d8c5c955c964} - no filepath. <==== ATTENTION
Task: {33ee042c-0be2-4151-9774-9ec54d68a286} - no filepath. <==== ATTENTION
Task: {3727500c-6736-44db-9936-8658b76069f4} - no filepath. <==== ATTENTION
Task: {41365dac-c06c-4ffa-b257-c09cf3a22231} - no filepath. <==== ATTENTION
Task: {41abd0d2-d2cb-42f7-a49f-7e1d9b0f9b6c} - no filepath. <==== ATTENTION
Task: {451378e5-3d3b-436a-bac8-7b99dc3f86ed} - no filepath. <==== ATTENTION
Task: {46fff474-66d3-4285-a188-de91e8cc6616} - no filepath. <==== ATTENTION
Task: {49759e68-43b5-4d7e-9548-7035383134ac} - no filepath. <==== ATTENTION
Task: {4988b198-0a7c-4d81-967c-4c5bbc2970ef} - no filepath. <==== ATTENTION
Task: {4cdbb754-7e59-45aa-8894-e2a5e2cb00f6} - no filepath. <==== ATTENTION
Task: {4f0d9664-f75f-45fd-88a3-237f1a60cbd1} - no filepath. <==== ATTENTION
Task: {4f164eff-c987-43b5-8945-36703be40f64} - no filepath. <==== ATTENTION
Task: {50c27b69-7516-4760-9cc3-6175606a580b} - no filepath. <==== ATTENTION
Task: {51aa329e-089f-4e13-8a1d-ea4e9a47c99a} - no filepath. <==== ATTENTION
Task: {55f94a0a-0e35-463a-b84b-d433ec4e798a} - no filepath. <==== ATTENTION
Task: {57ad22f1-f2d6-4869-b651-23eee945566d} - no filepath. <==== ATTENTION
Task: {5b6823bc-b681-4611-a718-933b4cdec481} - no filepath. <==== ATTENTION
Task: {63562bbe-f86f-46a5-805b-19291cc6a7c7} - no filepath. <==== ATTENTION
Task: {649ba9d8-1482-4ed7-9984-9f2594a95864} - no filepath. <==== ATTENTION
Task: {64c61f0c-cb15-4eb0-9380-b12cc9c32284} - no filepath. <==== ATTENTION
Task: {6826578c-0939-4752-bbc4-331ea94d3393} - no filepath. <==== ATTENTION
Task: {6bcaff12-09cf-4e54-a582-bd0aca107a7f} - no filepath. <==== ATTENTION
Task: {6d596213-eaed-489c-824f-ae21ac694692} - no filepath. <==== ATTENTION
Task: {6ffe0b3f-d980-4f8a-9906-dd1662f24f55} - no filepath. <==== ATTENTION
Task: {72ade00d-1676-49ae-b365-99af4d25e218} - no filepath. <==== ATTENTION
Task: {7436d804-e04b-411a-8d81-71c6ed5f3619} - no filepath. <==== ATTENTION
Task: {74c616c9-4b47-44fc-bda5-5e6a24a439fa} - no filepath. <==== ATTENTION
Task: {76e0fada-cc41-416e-b20b-28b0d0b52d0d} - no filepath. <==== ATTENTION
Task: {797a43b9-8a8f-442c-bdc3-5d2ad2c79f75} - no filepath. <==== ATTENTION
Task: {79c20b72-833c-4248-8910-d9b19604170c} - no filepath. <==== ATTENTION
Task: {7b2dad43-6fa8-4881-8bbe-19ccb994c5aa} - no filepath. <==== ATTENTION
Task: {80b1999a-bd28-45be-ade3-a25a2032349c} - no filepath. <==== ATTENTION
Task: {821aa2b1-76e3-4140-b656-0fc18c1c44f9} - no filepath. <==== ATTENTION
Task: {84c48bb9-b77e-4c32-bd0e-58bc944d4f96} - no filepath. <==== ATTENTION
Task: {8615702a-d69d-4dcf-a314-5e53c51afadc} - no filepath. <==== ATTENTION
Task: {8ab155af-85aa-47fe-9fd1-8292f3e74912} - no filepath. <==== ATTENTION
Task: {8f1ced85-349b-4a38-bde3-7e717df9f8b1} - no filepath. <==== ATTENTION
Task: {91f7640b-29d6-4fb5-b8f7-77b85bffe085} - no filepath. <==== ATTENTION
Task: {9d816d21-ec4d-46b7-9afc-2b827e7a213a} - no filepath. <==== ATTENTION
Task: {a0f01ba4-7a84-45df-bd80-27578470830c} - no filepath. <==== ATTENTION
Task: {a6107a93-ae69-47d8-9b17-6cd148493c2e} - no filepath. <==== ATTENTION
Task: {a7c9d806-dda3-457b-a7a8-02fee3477135} - no filepath. <==== ATTENTION
Task: {a90423ca-02b5-42cb-bfbc-755b8a246eb5} - no filepath. <==== ATTENTION
Task: {a9c1b96f-326d-43d5-b02d-b97125d8d360} - no filepath. <==== ATTENTION
Task: {adb6a7e3-3a40-46dc-b105-4b1249b3ac1d} - no filepath. <==== ATTENTION
Task: {b17df9fd-c446-4c8a-9192-7e6b0466c7d4} - no filepath. <==== ATTENTION
Task: {b92834b0-8de7-4789-bd77-b7a59121df4b} - no filepath. <==== ATTENTION
Task: {ba983d80-5206-4ebd-b5e4-2b5f860b7bec} - no filepath. <==== ATTENTION
Task: {be885d8d-cb7b-46a9-a2a3-ae108bab8c7c} - no filepath. <==== ATTENTION
Task: {bf587726-62a4-4f02-a044-6dd420d90d11} - no filepath. <==== ATTENTION
Task: {d9ac1b9e-bb29-44bd-96af-15e55ee0e8e5} - no filepath. <==== ATTENTION
Task: {dba1c038-f4b8-457e-9132-4d53a0c7482e} - no filepath. <==== ATTENTION
Task: {e0d5d199-6254-43f8-95ff-8717f1e6a5fd} - no filepath. <==== ATTENTION
Task: {e29c975b-9eee-46e7-918c-fb08a0559844} - no filepath. <==== ATTENTION
Task: {e5b0518b-a697-4d81-afe0-fe1a9ddbbe99} - no filepath. <==== ATTENTION
Task: {e8b1cb45-e3a4-489e-a2d0-c7a480e94e92} - no filepath. <==== ATTENTION
Task: {ea23531a-7d75-4329-afaf-f901f9652530} - no filepath. <==== ATTENTION
Task: {efe22549-e2b0-466b-b10d-631ed079e2b0} - no filepath. <==== ATTENTION
Task: {f55b43b8-a812-4a7f-9b49-6358dfc5c15c} - no filepath. <==== ATTENTION
Task: {f798d559-79af-47b3-962f-c7dd3e256b80} - no filepath. <==== ATTENTION
Task: {f822c973-b72f-4b94-a897-484cda35daf1} - no filepath. <==== ATTENTION
Task: {fc79eb21-b4ac-4b3b-9452-2aabc0ba13b4} - no filepath. <==== ATTENTION
Task: {ffd668c9-6dfd-42d4-be10-858b94504503} - no filepath. <==== ATTENTION
Task: {982879DF-E9DC-4DFB-B1E4-D12A95B7D35F} - System32\Tasks\Meta\Messenger-WSP-Helper-S-1-5-21-1514861923-3393839258-3891969025-1001 => MessengerHelper.exe --lassie (No File)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {6B654AB7-33A9-413C-A421-D0C89DFC221C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)
Task: {789F4532-274D-4D14-A059-56E1FAA216C2} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {AC56674A-B120-4F36-AF39-F46AE6001FA7} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {E31A19C4-CF15-4C0C-828D-446CF1CD9B3D} - System32\Tasks\NahimicAPISvc32Run => "C:\Program Files\NahimicAPI\x86\NahimicAPISvc32.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7) (No File)
Task: {215A5A84-4DE4-4AA5-A139-E6C3505DA1A9} - System32\Tasks\NahimicAPISvc64Run => "C:\Program Files\NahimicAPI\NahimicAPISvc64.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7) (No File)
Task: {215A5A84-4DE4-4AA5-A139-E6C3505DA1A9} - System32\Tasks\NahimicAPISvc64Run => "C:\Program Files\NahimicAPI\NahimicAPISvc64.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7) (No File)
Task: {E5106116-7F2F-4869-BF24-DE9519C30321} - System32\Tasks\Opera scheduled Autoupdate 1601999962 => C:\Users\Marcel\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (No File)
Task: {FDDE2540-BA1C-4E08-A4DC-5BDEDB5BFA3F} - System32\Tasks\S-1-5-21-1514861923-3393839258-3891969025-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe (No File)
C:\WINDOWS\LastGood.Tmp
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
C:\Users\Administrator\AppData\Roaming\.cache9050425797200915815.dat
CustomCLSID: HKU\S-1-5-21-1514861923-3393839258-3891969025-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1}\localserver32 -> "C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe" -ToastActivated => No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [470]
FirewallRules: [{03252034-92F7-4832-AECB-A089D22DFB69}] => (Allow) F:\the Crew 2\PrinceOfPersiaTLCdemo\TheLostCrown.exe => No File
FirewallRules: [{B5325169-A01F-4DB2-8FAC-341B6D4D6654}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{0D6EABB2-89F7-48CB-8EB1-AB2D70CB2218}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{C9908B8B-54A3-44EA-86FD-669FA66D1A79}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{5DC15804-1BEE-4FD5-B3A4-73C6845CD821}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{BCFE214F-8D41-4078-9405-2CE7710CCB70}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{C5BE056A-E383-463E-BA20-4C859B831AFA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{CB3FA553-DD48-4B1E-9858-9F1610F89783}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{96124403-73E5-4CE3-A16C-828DC761232C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{09DB0E7F-8E55-46A0-A0C8-10C7B4DF3D03}] => (Block) G:\GodOfWar\GoW.exe => No File
FirewallRules: [UDP Query User{60EDA928-8EE3-48F4-86A0-3D174A8D09A1}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe => No File
FirewallRules: [TCP Query User{0D0E2DC6-3E54-49E0-84E9-8D76ED00F9C1}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe => No File
FirewallRules: [{D77090D5-C80D-4887-AA6C-D18F0EDA187E}] => (Allow) E:\Games\Titan Quest\steamapps\common\Titan Quest Anniversary Edition\WorkshopTool\TQWorkshopTool.exe => No File
FirewallRules: [{64EE3DA9-E0E7-458D-9015-8A1C916F9F30}] => (Allow) E:\Games\Titan Quest\steamapps\common\Titan Quest Anniversary Edition\WorkshopTool\TQWorkshopTool.exe => No File
FirewallRules: [{80C10D29-7E4C-4139-B8AC-D88A8B4D8311}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{16986E0A-D801-47C7-85A5-3904CE620470}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{BA7D7673-B103-4711-973F-D78859671C5E}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe => No File
FirewallRules: [{4E280D24-C01D-48AB-8801-4C77EDC7CACD}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe => No File
FirewallRules: [{68F4DA61-68F3-4D72-800F-BB1BCB31E7F5}] => (Allow) G:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{4FC9E373-26BD-4F0A-A3AF-1536CCE3325C}] => (Allow) G:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{8D1B8864-90D5-4B15-A576-79188A280E3E}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe => No File
FirewallRules: [{009CC80E-2328-41FB-9901-D6C9876A6CF8}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe => No File
FirewallRules: [{FB9858EC-F707-4216-A928-29CAAA19DA45}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{BB71F22B-870C-4301-807C-4EDEBAED1C61}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{3DC51261-C701-4B73-9917-83558B4B9696}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{61C0A4D7-5D2A-4164-A84E-6D81F79DF70C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{7F905CE0-4BCF-4D23-8859-3DF2B633AAA5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{67A2CE38-4D92-4456-931E-6C2DB64F4CDE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{AB07D894-8661-48BA-B53A-BFE21FBFB10A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{D875BFA8-27AC-46E9-BA2D-6A7EDF4763F0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
Emptytemp:
Hosts:
End
*****************
Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
"HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Disig Web Signer" => removed successfully
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{418d1015-0a4e-11e9-93fc-645d8676882d} => removed successfully
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{C885AA15-1764-4293-B82A-0586ADD46B35} => removed successfully
"C:\WINDOWS\system32\GroupPolicy\Machine" Folder move:
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\ProgramData\NTUSER.pol => moved successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0947c4b8-f719-4d7c-b117-22b759b5e2aa}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11583b5c-0cdd-4464-ad1f-819982c7c077}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{14ed5bae-80ea-428d-969e-f56cc58f5555}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{16b4f2e2-ecdd-4f15-bbb7-aeb3592e0274}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1bd1fbd8-1668-470f-8d4a-9a00f89d2f57}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1e878e15-d1ec-4e19-9240-9b42c11fb02e}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1ebf2531-930f-44ba-abe4-892fb54f316b}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{21a08a80-58fc-4c2e-9627-34f8e3a7ad0d}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{22945d36-6724-4512-a10c-609866181c2b}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{23cef70e-dbe2-481a-9354-a83528bc8668}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2673ad69-8957-4fd6-88e9-ca1f60ff11af}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{269cb3b0-44f2-41dd-ae8c-ce36ca290fca}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2b8a4287-f1a9-4c38-a394-d8c5c955c964}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{33ee042c-0be2-4151-9774-9ec54d68a286}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3727500c-6736-44db-9936-8658b76069f4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{41365dac-c06c-4ffa-b257-c09cf3a22231}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{41abd0d2-d2cb-42f7-a49f-7e1d9b0f9b6c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{451378e5-3d3b-436a-bac8-7b99dc3f86ed}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{46fff474-66d3-4285-a188-de91e8cc6616}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49759e68-43b5-4d7e-9548-7035383134ac}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4988b198-0a7c-4d81-967c-4c5bbc2970ef}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4cdbb754-7e59-45aa-8894-e2a5e2cb00f6}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4f0d9664-f75f-45fd-88a3-237f1a60cbd1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4f164eff-c987-43b5-8945-36703be40f64}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{50c27b69-7516-4760-9cc3-6175606a580b}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{51aa329e-089f-4e13-8a1d-ea4e9a47c99a}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{55f94a0a-0e35-463a-b84b-d433ec4e798a}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{57ad22f1-f2d6-4869-b651-23eee945566d}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5b6823bc-b681-4611-a718-933b4cdec481}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63562bbe-f86f-46a5-805b-19291cc6a7c7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{649ba9d8-1482-4ed7-9984-9f2594a95864}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{64c61f0c-cb15-4eb0-9380-b12cc9c32284}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6826578c-0939-4752-bbc4-331ea94d3393}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6bcaff12-09cf-4e54-a582-bd0aca107a7f}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6d596213-eaed-489c-824f-ae21ac694692}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6ffe0b3f-d980-4f8a-9906-dd1662f24f55}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{72ade00d-1676-49ae-b365-99af4d25e218}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7436d804-e04b-411a-8d81-71c6ed5f3619}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74c616c9-4b47-44fc-bda5-5e6a24a439fa}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76e0fada-cc41-416e-b20b-28b0d0b52d0d}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{797a43b9-8a8f-442c-bdc3-5d2ad2c79f75}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{79c20b72-833c-4248-8910-d9b19604170c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7b2dad43-6fa8-4881-8bbe-19ccb994c5aa}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{80b1999a-bd28-45be-ade3-a25a2032349c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{821aa2b1-76e3-4140-b656-0fc18c1c44f9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{84c48bb9-b77e-4c32-bd0e-58bc944d4f96}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8615702a-d69d-4dcf-a314-5e53c51afadc}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8ab155af-85aa-47fe-9fd1-8292f3e74912}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8f1ced85-349b-4a38-bde3-7e717df9f8b1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{91f7640b-29d6-4fb5-b8f7-77b85bffe085}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9d816d21-ec4d-46b7-9afc-2b827e7a213a}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a0f01ba4-7a84-45df-bd80-27578470830c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a6107a93-ae69-47d8-9b17-6cd148493c2e}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a7c9d806-dda3-457b-a7a8-02fee3477135}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a90423ca-02b5-42cb-bfbc-755b8a246eb5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a9c1b96f-326d-43d5-b02d-b97125d8d360}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{adb6a7e3-3a40-46dc-b105-4b1249b3ac1d}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b17df9fd-c446-4c8a-9192-7e6b0466c7d4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b92834b0-8de7-4789-bd77-b7a59121df4b}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ba983d80-5206-4ebd-b5e4-2b5f860b7bec}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{be885d8d-cb7b-46a9-a2a3-ae108bab8c7c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{bf587726-62a4-4f02-a044-6dd420d90d11}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{d9ac1b9e-bb29-44bd-96af-15e55ee0e8e5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{dba1c038-f4b8-457e-9132-4d53a0c7482e}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e0d5d199-6254-43f8-95ff-8717f1e6a5fd}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e29c975b-9eee-46e7-918c-fb08a0559844}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e5b0518b-a697-4d81-afe0-fe1a9ddbbe99}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e8b1cb45-e3a4-489e-a2d0-c7a480e94e92}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ea23531a-7d75-4329-afaf-f901f9652530}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{efe22549-e2b0-466b-b10d-631ed079e2b0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{f55b43b8-a812-4a7f-9b49-6358dfc5c15c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{f798d559-79af-47b3-962f-c7dd3e256b80}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{f822c973-b72f-4b94-a897-484cda35daf1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{fc79eb21-b4ac-4b3b-9452-2aabc0ba13b4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ffd668c9-6dfd-42d4-be10-858b94504503}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{982879DF-E9DC-4DFB-B1E4-D12A95B7D35F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{982879DF-E9DC-4DFB-B1E4-D12A95B7D35F}" => removed successfully
C:\WINDOWS\System32\Tasks\Meta\Messenger-WSP-Helper-S-1-5-21-1514861923-3393839258-3891969025-1001 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Meta\Messenger-WSP-Helper-S-1-5-21-1514861923-3393839258-3891969025-1001" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6B654AB7-33A9-413C-A421-D0C89DFC221C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6B654AB7-33A9-413C-A421-D0C89DFC221C}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{789F4532-274D-4D14-A059-56E1FAA216C2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{789F4532-274D-4D14-A059-56E1FAA216C2}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AC56674A-B120-4F36-AF39-F46AE6001FA7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC56674A-B120-4F36-AF39-F46AE6001FA7}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E31A19C4-CF15-4C0C-828D-446CF1CD9B3D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E31A19C4-CF15-4C0C-828D-446CF1CD9B3D}" => removed successfully
C:\WINDOWS\System32\Tasks\NahimicAPISvc32Run => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NahimicAPISvc32Run" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{215A5A84-4DE4-4AA5-A139-E6C3505DA1A9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{215A5A84-4DE4-4AA5-A139-E6C3505DA1A9}" => removed successfully
C:\WINDOWS\System32\Tasks\NahimicAPISvc64Run => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NahimicAPISvc64Run" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{215A5A84-4DE4-4AA5-A139-E6C3505DA1A9}" => not found
"C:\WINDOWS\System32\Tasks\NahimicAPISvc64Run" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NahimicAPISvc64Run" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E5106116-7F2F-4869-BF24-DE9519C30321}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E5106116-7F2F-4869-BF24-DE9519C30321}" => removed successfully
C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1601999962 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Opera scheduled Autoupdate 1601999962" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FDDE2540-BA1C-4E08-A4DC-5BDEDB5BFA3F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FDDE2540-BA1C-4E08-A4DC-5BDEDB5BFA3F}" => removed successfully
C:\WINDOWS\System32\Tasks\S-1-5-21-1514861923-3393839258-3891969025-1001\DataSenseLiveTileTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\S-1-5-21-1514861923-3393839258-3891969025-1001\DataSenseLiveTileTask" => removed successfully
"C:\WINDOWS\LastGood.Tmp" Folder move:
C:\WINDOWS\LastGood.Tmp => moved successfully
Could not move "C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2" => Scheduled to move on reboot.
C:\Users\Administrator\AppData\Roaming\.cache9050425797200915815.dat => moved successfully
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1} => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
C:\Users\Public\Shared Files => ":VersionCache" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{03252034-92F7-4832-AECB-A089D22DFB69}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B5325169-A01F-4DB2-8FAC-341B6D4D6654}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0D6EABB2-89F7-48CB-8EB1-AB2D70CB2218}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C9908B8B-54A3-44EA-86FD-669FA66D1A79}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5DC15804-1BEE-4FD5-B3A4-73C6845CD821}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BCFE214F-8D41-4078-9405-2CE7710CCB70}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C5BE056A-E383-463E-BA20-4C859B831AFA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CB3FA553-DD48-4B1E-9858-9F1610F89783}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{96124403-73E5-4CE3-A16C-828DC761232C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{09DB0E7F-8E55-46A0-A0C8-10C7B4DF3D03}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{60EDA928-8EE3-48F4-86A0-3D174A8D09A1}C:\games\world_of_tanks_eu\win64\worldoftanks.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0D0E2DC6-3E54-49E0-84E9-8D76ED00F9C1}C:\games\world_of_tanks_eu\win64\worldoftanks.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D77090D5-C80D-4887-AA6C-D18F0EDA187E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{64EE3DA9-E0E7-458D-9015-8A1C916F9F30}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{80C10D29-7E4C-4139-B8AC-D88A8B4D8311}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{16986E0A-D801-47C7-85A5-3904CE620470}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BA7D7673-B103-4711-973F-D78859671C5E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4E280D24-C01D-48AB-8801-4C77EDC7CACD}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{68F4DA61-68F3-4D72-800F-BB1BCB31E7F5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4FC9E373-26BD-4F0A-A3AF-1536CCE3325C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8D1B8864-90D5-4B15-A576-79188A280E3E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{009CC80E-2328-41FB-9901-D6C9876A6CF8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FB9858EC-F707-4216-A928-29CAAA19DA45}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BB71F22B-870C-4301-807C-4EDEBAED1C61}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3DC51261-C701-4B73-9917-83558B4B9696}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{61C0A4D7-5D2A-4164-A84E-6D81F79DF70C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7F905CE0-4BCF-4D23-8859-3DF2B633AAA5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{67A2CE38-4D92-4456-931E-6C2DB64F4CDE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AB07D894-8661-48BA-B53A-BFE21FBFB10A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D875BFA8-27AC-46E9-BA2D-6A7EDF4763F0}" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10599008 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 47270147 B
Windows/system/drivers => 320085705 B
Edge => 0 B
Chrome => 38113181 B
Firefox => 2408167 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 6656 B
ProgramData => 6656 B
Public => 6656 B
systemprofile => 7065 B
systemprofile32 => 7065 B
LocalService => 1261414 B
NetworkService => 1268070 B
Marcel => 1272725091 B
Administrator => 1711139010 B
RecycleBin => 0 B
EmptyTemp: => 3.2 GB temporary data Removed.
================================
Ran by Administrator (26-12-2025 12:52:05) Run:2
Running from C:\Users\Marcel\OneDrive\Počítač
Loaded Profiles: Marcel & Administrator
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\Run: [Disig Web Signer] => C:\Program Files (x86)\Disig\Web Signer\WebSignerTray.exe (No File)
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\...\MountPoints2: {418d1015-0a4e-11e9-93fc-645d8676882d} - "I:\SETUP.exe"
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {0947c4b8-f719-4d7c-b117-22b759b5e2aa} - no filepath. <==== ATTENTION
Task: {11583b5c-0cdd-4464-ad1f-819982c7c077} - no filepath. <==== ATTENTION
Task: {14ed5bae-80ea-428d-969e-f56cc58f5555} - no filepath. <==== ATTENTION
Task: {16b4f2e2-ecdd-4f15-bbb7-aeb3592e0274} - no filepath. <==== ATTENTION
Task: {1bd1fbd8-1668-470f-8d4a-9a00f89d2f57} - no filepath. <==== ATTENTION
Task: {1e878e15-d1ec-4e19-9240-9b42c11fb02e} - no filepath. <==== ATTENTION
Task: {1ebf2531-930f-44ba-abe4-892fb54f316b} - no filepath. <==== ATTENTION
Task: {21a08a80-58fc-4c2e-9627-34f8e3a7ad0d} - no filepath. <==== ATTENTION
Task: {22945d36-6724-4512-a10c-609866181c2b} - no filepath. <==== ATTENTION
Task: {23cef70e-dbe2-481a-9354-a83528bc8668} - no filepath. <==== ATTENTION
Task: {2673ad69-8957-4fd6-88e9-ca1f60ff11af} - no filepath. <==== ATTENTION
Task: {269cb3b0-44f2-41dd-ae8c-ce36ca290fca} - no filepath. <==== ATTENTION
Task: {2b8a4287-f1a9-4c38-a394-d8c5c955c964} - no filepath. <==== ATTENTION
Task: {33ee042c-0be2-4151-9774-9ec54d68a286} - no filepath. <==== ATTENTION
Task: {3727500c-6736-44db-9936-8658b76069f4} - no filepath. <==== ATTENTION
Task: {41365dac-c06c-4ffa-b257-c09cf3a22231} - no filepath. <==== ATTENTION
Task: {41abd0d2-d2cb-42f7-a49f-7e1d9b0f9b6c} - no filepath. <==== ATTENTION
Task: {451378e5-3d3b-436a-bac8-7b99dc3f86ed} - no filepath. <==== ATTENTION
Task: {46fff474-66d3-4285-a188-de91e8cc6616} - no filepath. <==== ATTENTION
Task: {49759e68-43b5-4d7e-9548-7035383134ac} - no filepath. <==== ATTENTION
Task: {4988b198-0a7c-4d81-967c-4c5bbc2970ef} - no filepath. <==== ATTENTION
Task: {4cdbb754-7e59-45aa-8894-e2a5e2cb00f6} - no filepath. <==== ATTENTION
Task: {4f0d9664-f75f-45fd-88a3-237f1a60cbd1} - no filepath. <==== ATTENTION
Task: {4f164eff-c987-43b5-8945-36703be40f64} - no filepath. <==== ATTENTION
Task: {50c27b69-7516-4760-9cc3-6175606a580b} - no filepath. <==== ATTENTION
Task: {51aa329e-089f-4e13-8a1d-ea4e9a47c99a} - no filepath. <==== ATTENTION
Task: {55f94a0a-0e35-463a-b84b-d433ec4e798a} - no filepath. <==== ATTENTION
Task: {57ad22f1-f2d6-4869-b651-23eee945566d} - no filepath. <==== ATTENTION
Task: {5b6823bc-b681-4611-a718-933b4cdec481} - no filepath. <==== ATTENTION
Task: {63562bbe-f86f-46a5-805b-19291cc6a7c7} - no filepath. <==== ATTENTION
Task: {649ba9d8-1482-4ed7-9984-9f2594a95864} - no filepath. <==== ATTENTION
Task: {64c61f0c-cb15-4eb0-9380-b12cc9c32284} - no filepath. <==== ATTENTION
Task: {6826578c-0939-4752-bbc4-331ea94d3393} - no filepath. <==== ATTENTION
Task: {6bcaff12-09cf-4e54-a582-bd0aca107a7f} - no filepath. <==== ATTENTION
Task: {6d596213-eaed-489c-824f-ae21ac694692} - no filepath. <==== ATTENTION
Task: {6ffe0b3f-d980-4f8a-9906-dd1662f24f55} - no filepath. <==== ATTENTION
Task: {72ade00d-1676-49ae-b365-99af4d25e218} - no filepath. <==== ATTENTION
Task: {7436d804-e04b-411a-8d81-71c6ed5f3619} - no filepath. <==== ATTENTION
Task: {74c616c9-4b47-44fc-bda5-5e6a24a439fa} - no filepath. <==== ATTENTION
Task: {76e0fada-cc41-416e-b20b-28b0d0b52d0d} - no filepath. <==== ATTENTION
Task: {797a43b9-8a8f-442c-bdc3-5d2ad2c79f75} - no filepath. <==== ATTENTION
Task: {79c20b72-833c-4248-8910-d9b19604170c} - no filepath. <==== ATTENTION
Task: {7b2dad43-6fa8-4881-8bbe-19ccb994c5aa} - no filepath. <==== ATTENTION
Task: {80b1999a-bd28-45be-ade3-a25a2032349c} - no filepath. <==== ATTENTION
Task: {821aa2b1-76e3-4140-b656-0fc18c1c44f9} - no filepath. <==== ATTENTION
Task: {84c48bb9-b77e-4c32-bd0e-58bc944d4f96} - no filepath. <==== ATTENTION
Task: {8615702a-d69d-4dcf-a314-5e53c51afadc} - no filepath. <==== ATTENTION
Task: {8ab155af-85aa-47fe-9fd1-8292f3e74912} - no filepath. <==== ATTENTION
Task: {8f1ced85-349b-4a38-bde3-7e717df9f8b1} - no filepath. <==== ATTENTION
Task: {91f7640b-29d6-4fb5-b8f7-77b85bffe085} - no filepath. <==== ATTENTION
Task: {9d816d21-ec4d-46b7-9afc-2b827e7a213a} - no filepath. <==== ATTENTION
Task: {a0f01ba4-7a84-45df-bd80-27578470830c} - no filepath. <==== ATTENTION
Task: {a6107a93-ae69-47d8-9b17-6cd148493c2e} - no filepath. <==== ATTENTION
Task: {a7c9d806-dda3-457b-a7a8-02fee3477135} - no filepath. <==== ATTENTION
Task: {a90423ca-02b5-42cb-bfbc-755b8a246eb5} - no filepath. <==== ATTENTION
Task: {a9c1b96f-326d-43d5-b02d-b97125d8d360} - no filepath. <==== ATTENTION
Task: {adb6a7e3-3a40-46dc-b105-4b1249b3ac1d} - no filepath. <==== ATTENTION
Task: {b17df9fd-c446-4c8a-9192-7e6b0466c7d4} - no filepath. <==== ATTENTION
Task: {b92834b0-8de7-4789-bd77-b7a59121df4b} - no filepath. <==== ATTENTION
Task: {ba983d80-5206-4ebd-b5e4-2b5f860b7bec} - no filepath. <==== ATTENTION
Task: {be885d8d-cb7b-46a9-a2a3-ae108bab8c7c} - no filepath. <==== ATTENTION
Task: {bf587726-62a4-4f02-a044-6dd420d90d11} - no filepath. <==== ATTENTION
Task: {d9ac1b9e-bb29-44bd-96af-15e55ee0e8e5} - no filepath. <==== ATTENTION
Task: {dba1c038-f4b8-457e-9132-4d53a0c7482e} - no filepath. <==== ATTENTION
Task: {e0d5d199-6254-43f8-95ff-8717f1e6a5fd} - no filepath. <==== ATTENTION
Task: {e29c975b-9eee-46e7-918c-fb08a0559844} - no filepath. <==== ATTENTION
Task: {e5b0518b-a697-4d81-afe0-fe1a9ddbbe99} - no filepath. <==== ATTENTION
Task: {e8b1cb45-e3a4-489e-a2d0-c7a480e94e92} - no filepath. <==== ATTENTION
Task: {ea23531a-7d75-4329-afaf-f901f9652530} - no filepath. <==== ATTENTION
Task: {efe22549-e2b0-466b-b10d-631ed079e2b0} - no filepath. <==== ATTENTION
Task: {f55b43b8-a812-4a7f-9b49-6358dfc5c15c} - no filepath. <==== ATTENTION
Task: {f798d559-79af-47b3-962f-c7dd3e256b80} - no filepath. <==== ATTENTION
Task: {f822c973-b72f-4b94-a897-484cda35daf1} - no filepath. <==== ATTENTION
Task: {fc79eb21-b4ac-4b3b-9452-2aabc0ba13b4} - no filepath. <==== ATTENTION
Task: {ffd668c9-6dfd-42d4-be10-858b94504503} - no filepath. <==== ATTENTION
Task: {982879DF-E9DC-4DFB-B1E4-D12A95B7D35F} - System32\Tasks\Meta\Messenger-WSP-Helper-S-1-5-21-1514861923-3393839258-3891969025-1001 => MessengerHelper.exe --lassie (No File)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {6B654AB7-33A9-413C-A421-D0C89DFC221C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)
Task: {789F4532-274D-4D14-A059-56E1FAA216C2} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {AC56674A-B120-4F36-AF39-F46AE6001FA7} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {E31A19C4-CF15-4C0C-828D-446CF1CD9B3D} - System32\Tasks\NahimicAPISvc32Run => "C:\Program Files\NahimicAPI\x86\NahimicAPISvc32.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7) (No File)
Task: {215A5A84-4DE4-4AA5-A139-E6C3505DA1A9} - System32\Tasks\NahimicAPISvc64Run => "C:\Program Files\NahimicAPI\NahimicAPISvc64.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7) (No File)
Task: {215A5A84-4DE4-4AA5-A139-E6C3505DA1A9} - System32\Tasks\NahimicAPISvc64Run => "C:\Program Files\NahimicAPI\NahimicAPISvc64.exe" $(Arg0) $(Arg1) $(Arg2) $(Arg3) $(Arg4) $(Arg5) $(Arg6) $(Arg7) (No File)
Task: {E5106116-7F2F-4869-BF24-DE9519C30321} - System32\Tasks\Opera scheduled Autoupdate 1601999962 => C:\Users\Marcel\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (No File)
Task: {FDDE2540-BA1C-4E08-A4DC-5BDEDB5BFA3F} - System32\Tasks\S-1-5-21-1514861923-3393839258-3891969025-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe (No File)
C:\WINDOWS\LastGood.Tmp
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
C:\Users\Administrator\AppData\Roaming\.cache9050425797200915815.dat
CustomCLSID: HKU\S-1-5-21-1514861923-3393839258-3891969025-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1}\localserver32 -> "C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe" -ToastActivated => No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [470]
FirewallRules: [{03252034-92F7-4832-AECB-A089D22DFB69}] => (Allow) F:\the Crew 2\PrinceOfPersiaTLCdemo\TheLostCrown.exe => No File
FirewallRules: [{B5325169-A01F-4DB2-8FAC-341B6D4D6654}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{0D6EABB2-89F7-48CB-8EB1-AB2D70CB2218}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{C9908B8B-54A3-44EA-86FD-669FA66D1A79}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{5DC15804-1BEE-4FD5-B3A4-73C6845CD821}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{BCFE214F-8D41-4078-9405-2CE7710CCB70}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{C5BE056A-E383-463E-BA20-4C859B831AFA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{CB3FA553-DD48-4B1E-9858-9F1610F89783}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{96124403-73E5-4CE3-A16C-828DC761232C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.181.604.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{09DB0E7F-8E55-46A0-A0C8-10C7B4DF3D03}] => (Block) G:\GodOfWar\GoW.exe => No File
FirewallRules: [UDP Query User{60EDA928-8EE3-48F4-86A0-3D174A8D09A1}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe => No File
FirewallRules: [TCP Query User{0D0E2DC6-3E54-49E0-84E9-8D76ED00F9C1}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe => No File
FirewallRules: [{D77090D5-C80D-4887-AA6C-D18F0EDA187E}] => (Allow) E:\Games\Titan Quest\steamapps\common\Titan Quest Anniversary Edition\WorkshopTool\TQWorkshopTool.exe => No File
FirewallRules: [{64EE3DA9-E0E7-458D-9015-8A1C916F9F30}] => (Allow) E:\Games\Titan Quest\steamapps\common\Titan Quest Anniversary Edition\WorkshopTool\TQWorkshopTool.exe => No File
FirewallRules: [{80C10D29-7E4C-4139-B8AC-D88A8B4D8311}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{16986E0A-D801-47C7-85A5-3904CE620470}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{BA7D7673-B103-4711-973F-D78859671C5E}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe => No File
FirewallRules: [{4E280D24-C01D-48AB-8801-4C77EDC7CACD}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe => No File
FirewallRules: [{68F4DA61-68F3-4D72-800F-BB1BCB31E7F5}] => (Allow) G:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{4FC9E373-26BD-4F0A-A3AF-1536CCE3325C}] => (Allow) G:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{8D1B8864-90D5-4B15-A576-79188A280E3E}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe => No File
FirewallRules: [{009CC80E-2328-41FB-9901-D6C9876A6CF8}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe => No File
FirewallRules: [{FB9858EC-F707-4216-A928-29CAAA19DA45}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{BB71F22B-870C-4301-807C-4EDEBAED1C61}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{3DC51261-C701-4B73-9917-83558B4B9696}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{61C0A4D7-5D2A-4164-A84E-6D81F79DF70C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{7F905CE0-4BCF-4D23-8859-3DF2B633AAA5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{67A2CE38-4D92-4456-931E-6C2DB64F4CDE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{AB07D894-8661-48BA-B53A-BFE21FBFB10A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{D875BFA8-27AC-46E9-BA2D-6A7EDF4763F0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe => No File
Emptytemp:
Hosts:
End
*****************
Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
"HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Disig Web Signer" => removed successfully
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{418d1015-0a4e-11e9-93fc-645d8676882d} => removed successfully
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{C885AA15-1764-4293-B82A-0586ADD46B35} => removed successfully
"C:\WINDOWS\system32\GroupPolicy\Machine" Folder move:
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\ProgramData\NTUSER.pol => moved successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0947c4b8-f719-4d7c-b117-22b759b5e2aa}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11583b5c-0cdd-4464-ad1f-819982c7c077}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{14ed5bae-80ea-428d-969e-f56cc58f5555}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{16b4f2e2-ecdd-4f15-bbb7-aeb3592e0274}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1bd1fbd8-1668-470f-8d4a-9a00f89d2f57}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1e878e15-d1ec-4e19-9240-9b42c11fb02e}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1ebf2531-930f-44ba-abe4-892fb54f316b}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{21a08a80-58fc-4c2e-9627-34f8e3a7ad0d}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{22945d36-6724-4512-a10c-609866181c2b}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{23cef70e-dbe2-481a-9354-a83528bc8668}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2673ad69-8957-4fd6-88e9-ca1f60ff11af}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{269cb3b0-44f2-41dd-ae8c-ce36ca290fca}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2b8a4287-f1a9-4c38-a394-d8c5c955c964}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{33ee042c-0be2-4151-9774-9ec54d68a286}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3727500c-6736-44db-9936-8658b76069f4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{41365dac-c06c-4ffa-b257-c09cf3a22231}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{41abd0d2-d2cb-42f7-a49f-7e1d9b0f9b6c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{451378e5-3d3b-436a-bac8-7b99dc3f86ed}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{46fff474-66d3-4285-a188-de91e8cc6616}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49759e68-43b5-4d7e-9548-7035383134ac}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4988b198-0a7c-4d81-967c-4c5bbc2970ef}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4cdbb754-7e59-45aa-8894-e2a5e2cb00f6}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4f0d9664-f75f-45fd-88a3-237f1a60cbd1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4f164eff-c987-43b5-8945-36703be40f64}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{50c27b69-7516-4760-9cc3-6175606a580b}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{51aa329e-089f-4e13-8a1d-ea4e9a47c99a}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{55f94a0a-0e35-463a-b84b-d433ec4e798a}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{57ad22f1-f2d6-4869-b651-23eee945566d}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5b6823bc-b681-4611-a718-933b4cdec481}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63562bbe-f86f-46a5-805b-19291cc6a7c7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{649ba9d8-1482-4ed7-9984-9f2594a95864}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{64c61f0c-cb15-4eb0-9380-b12cc9c32284}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6826578c-0939-4752-bbc4-331ea94d3393}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6bcaff12-09cf-4e54-a582-bd0aca107a7f}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6d596213-eaed-489c-824f-ae21ac694692}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6ffe0b3f-d980-4f8a-9906-dd1662f24f55}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{72ade00d-1676-49ae-b365-99af4d25e218}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7436d804-e04b-411a-8d81-71c6ed5f3619}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74c616c9-4b47-44fc-bda5-5e6a24a439fa}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76e0fada-cc41-416e-b20b-28b0d0b52d0d}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{797a43b9-8a8f-442c-bdc3-5d2ad2c79f75}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{79c20b72-833c-4248-8910-d9b19604170c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7b2dad43-6fa8-4881-8bbe-19ccb994c5aa}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{80b1999a-bd28-45be-ade3-a25a2032349c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{821aa2b1-76e3-4140-b656-0fc18c1c44f9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{84c48bb9-b77e-4c32-bd0e-58bc944d4f96}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8615702a-d69d-4dcf-a314-5e53c51afadc}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8ab155af-85aa-47fe-9fd1-8292f3e74912}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8f1ced85-349b-4a38-bde3-7e717df9f8b1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{91f7640b-29d6-4fb5-b8f7-77b85bffe085}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9d816d21-ec4d-46b7-9afc-2b827e7a213a}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a0f01ba4-7a84-45df-bd80-27578470830c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a6107a93-ae69-47d8-9b17-6cd148493c2e}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a7c9d806-dda3-457b-a7a8-02fee3477135}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a90423ca-02b5-42cb-bfbc-755b8a246eb5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a9c1b96f-326d-43d5-b02d-b97125d8d360}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{adb6a7e3-3a40-46dc-b105-4b1249b3ac1d}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b17df9fd-c446-4c8a-9192-7e6b0466c7d4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b92834b0-8de7-4789-bd77-b7a59121df4b}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ba983d80-5206-4ebd-b5e4-2b5f860b7bec}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{be885d8d-cb7b-46a9-a2a3-ae108bab8c7c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{bf587726-62a4-4f02-a044-6dd420d90d11}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{d9ac1b9e-bb29-44bd-96af-15e55ee0e8e5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{dba1c038-f4b8-457e-9132-4d53a0c7482e}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e0d5d199-6254-43f8-95ff-8717f1e6a5fd}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e29c975b-9eee-46e7-918c-fb08a0559844}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e5b0518b-a697-4d81-afe0-fe1a9ddbbe99}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e8b1cb45-e3a4-489e-a2d0-c7a480e94e92}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ea23531a-7d75-4329-afaf-f901f9652530}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{efe22549-e2b0-466b-b10d-631ed079e2b0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{f55b43b8-a812-4a7f-9b49-6358dfc5c15c}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{f798d559-79af-47b3-962f-c7dd3e256b80}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{f822c973-b72f-4b94-a897-484cda35daf1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{fc79eb21-b4ac-4b3b-9452-2aabc0ba13b4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ffd668c9-6dfd-42d4-be10-858b94504503}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{982879DF-E9DC-4DFB-B1E4-D12A95B7D35F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{982879DF-E9DC-4DFB-B1E4-D12A95B7D35F}" => removed successfully
C:\WINDOWS\System32\Tasks\Meta\Messenger-WSP-Helper-S-1-5-21-1514861923-3393839258-3891969025-1001 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Meta\Messenger-WSP-Helper-S-1-5-21-1514861923-3393839258-3891969025-1001" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6B654AB7-33A9-413C-A421-D0C89DFC221C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6B654AB7-33A9-413C-A421-D0C89DFC221C}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{789F4532-274D-4D14-A059-56E1FAA216C2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{789F4532-274D-4D14-A059-56E1FAA216C2}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AC56674A-B120-4F36-AF39-F46AE6001FA7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC56674A-B120-4F36-AF39-F46AE6001FA7}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E31A19C4-CF15-4C0C-828D-446CF1CD9B3D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E31A19C4-CF15-4C0C-828D-446CF1CD9B3D}" => removed successfully
C:\WINDOWS\System32\Tasks\NahimicAPISvc32Run => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NahimicAPISvc32Run" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{215A5A84-4DE4-4AA5-A139-E6C3505DA1A9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{215A5A84-4DE4-4AA5-A139-E6C3505DA1A9}" => removed successfully
C:\WINDOWS\System32\Tasks\NahimicAPISvc64Run => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NahimicAPISvc64Run" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{215A5A84-4DE4-4AA5-A139-E6C3505DA1A9}" => not found
"C:\WINDOWS\System32\Tasks\NahimicAPISvc64Run" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NahimicAPISvc64Run" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E5106116-7F2F-4869-BF24-DE9519C30321}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E5106116-7F2F-4869-BF24-DE9519C30321}" => removed successfully
C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1601999962 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Opera scheduled Autoupdate 1601999962" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FDDE2540-BA1C-4E08-A4DC-5BDEDB5BFA3F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FDDE2540-BA1C-4E08-A4DC-5BDEDB5BFA3F}" => removed successfully
C:\WINDOWS\System32\Tasks\S-1-5-21-1514861923-3393839258-3891969025-1001\DataSenseLiveTileTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\S-1-5-21-1514861923-3393839258-3891969025-1001\DataSenseLiveTileTask" => removed successfully
"C:\WINDOWS\LastGood.Tmp" Folder move:
C:\WINDOWS\LastGood.Tmp => moved successfully
Could not move "C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2" => Scheduled to move on reboot.
C:\Users\Administrator\AppData\Roaming\.cache9050425797200915815.dat => moved successfully
HKU\S-1-5-21-1514861923-3393839258-3891969025-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1} => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
C:\Users\Public\Shared Files => ":VersionCache" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{03252034-92F7-4832-AECB-A089D22DFB69}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B5325169-A01F-4DB2-8FAC-341B6D4D6654}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0D6EABB2-89F7-48CB-8EB1-AB2D70CB2218}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C9908B8B-54A3-44EA-86FD-669FA66D1A79}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5DC15804-1BEE-4FD5-B3A4-73C6845CD821}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BCFE214F-8D41-4078-9405-2CE7710CCB70}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C5BE056A-E383-463E-BA20-4C859B831AFA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CB3FA553-DD48-4B1E-9858-9F1610F89783}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{96124403-73E5-4CE3-A16C-828DC761232C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{09DB0E7F-8E55-46A0-A0C8-10C7B4DF3D03}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{60EDA928-8EE3-48F4-86A0-3D174A8D09A1}C:\games\world_of_tanks_eu\win64\worldoftanks.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0D0E2DC6-3E54-49E0-84E9-8D76ED00F9C1}C:\games\world_of_tanks_eu\win64\worldoftanks.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D77090D5-C80D-4887-AA6C-D18F0EDA187E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{64EE3DA9-E0E7-458D-9015-8A1C916F9F30}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{80C10D29-7E4C-4139-B8AC-D88A8B4D8311}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{16986E0A-D801-47C7-85A5-3904CE620470}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BA7D7673-B103-4711-973F-D78859671C5E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4E280D24-C01D-48AB-8801-4C77EDC7CACD}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{68F4DA61-68F3-4D72-800F-BB1BCB31E7F5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4FC9E373-26BD-4F0A-A3AF-1536CCE3325C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8D1B8864-90D5-4B15-A576-79188A280E3E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{009CC80E-2328-41FB-9901-D6C9876A6CF8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FB9858EC-F707-4216-A928-29CAAA19DA45}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BB71F22B-870C-4301-807C-4EDEBAED1C61}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3DC51261-C701-4B73-9917-83558B4B9696}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{61C0A4D7-5D2A-4164-A84E-6D81F79DF70C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7F905CE0-4BCF-4D23-8859-3DF2B633AAA5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{67A2CE38-4D92-4456-931E-6C2DB64F4CDE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AB07D894-8661-48BA-B53A-BFE21FBFB10A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D875BFA8-27AC-46E9-BA2D-6A7EDF4763F0}" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10599008 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 47270147 B
Windows/system/drivers => 320085705 B
Edge => 0 B
Chrome => 38113181 B
Firefox => 2408167 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 6656 B
ProgramData => 6656 B
Public => 6656 B
systemprofile => 7065 B
systemprofile32 => 7065 B
LocalService => 1261414 B
NetworkService => 1268070 B
Marcel => 1272725091 B
Administrator => 1711139010 B
RecycleBin => 0 B
EmptyTemp: => 3.2 GB temporary data Removed.
================================
-
Rudy
- Site Admin
- Příspěvky: 119694
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Pomalý PC
GTeď je to vpořádku. Zrychlil se chod. PC?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
marsell2607
- Návštěvník
- Příspěvky: 32
- Registrován: 21 led 2014 01:35
Re: Pomalý PC
dobrý deň, áno.
funguje mi to, ďakujem
funguje mi to, ďakujem
-
Rudy
- Site Admin
- Příspěvky: 119694
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Pomalý PC
Rádo se stalo!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?