Prosím o kontrolu PC, abych mohl začit používat internet banking. Občas se jakoby něco instaluje na pozadí. Jestli jsou to aktualizace nebo něco jiného nevím.
Děkuji.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-07-2026 01
Ran by Mi (administrator) on DESKTOP-8N7P3M7 (ATComputers AUTOCONT OFFICEPRO) (11-07-2026 10:01:03)
Running from C:\Users\Mi\Desktop\FRST64.exe
Loaded Profiles: Mi
Platform: Microsoft Windows 10 Pro Version 22H2 19045.4046 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe ->) (Alexey Nicolaychuk -> ) C:\Program Files (x86)\RivaTuner Statistics Server\EncoderServer.exe
(C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe ->) (Alexey Nicolaychuk -> ) C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Windows\SysWOW64\svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(explorer.exe ->) (Gemfor s.r.o. -> Gemfor s.r.o.) C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\Manager.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD64.EXE
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <15>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_901d8cfde13e2b8b\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_901d8cfde13e2b8b\Display.NvContainer\NVDisplay.Container.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Alexey Nicolaychuk -> ) C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
(svchost.exe ->) (Gemfor s.r.o. -> Gemfor s.r.o.) C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\Manager.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Skype Software Sarl -> ) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(svchost.exe ->) (Skype Software Sarl -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeApp.exe
==================== Registry (Whitelisted) ===================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16418560 2023-02-10] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [T-Mobile CManager] => C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\Manager.exe [2171520 2017-12-05] (Gemfor s.r.o. -> Gemfor s.r.o.)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [Microsoft Edge Update] => C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.241.15\MicrosoftEdgeUpdateCore.exe [279384 2026-06-20] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [Icecream_Screen_Recorder_New_Auto_Start] => C:\Program Files (x86)\Icecream Screen Recorder 7\recorder.exe -tray (No File)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [utweb] => "C:\Users\Mi\AppData\Roaming\uTorrent Web\utweb.exe" /MINIMIZED (No File)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [5773976 2026-06-25] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [electron.app.BlueStacks Services] => C:\Users\Mi\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe [162219656 2024-05-08] (Now.gg, INC -> now.gg, Inc.)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {6acedf64-6514-11ef-af0c-ece137e8cf7e} - "J:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7aaa-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7acc-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {a47e8a88-23ce-11ee-aee9-a47831648add} - "K:\Autorun.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> "C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe" --first-run (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {E5897533-8B62-43F9-A56E-088239E4A9D4} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [303024 2026-06-21] (Now.gg, INC -> BlueStack Systems, Inc.)
Task: {2940DF58-89E3-4D31-B5CF-0D42589F6C9C} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem151.0.7910.0{FF72C57D-3D5D-4486-A191-8ACA220FC279} => C:\Program Files (x86)\Google\GoogleUpdater\151.0.7910.0\updater.exe [9600664 2026-06-24] (Google LLC -> Google LLC)
Task: {FE919BDF-5463-41EC-B39B-349171DD44B4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {751685A3-FD05-4052-BFB5-1F80C9B215EB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {57612A4B-EFD4-46F4-8E9B-3FF157FCAED5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B825B4A9-55C0-4D5E-8784-5F39646FEA91} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7D7FA9B8-96D1-47E0-9CB4-592B4F251B2E} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-382369773-1592508727-1391189433-1001Core{22470D11-467B-4882-B361-8EF9055909A5} => C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206944 2026-03-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {334F45D5-A697-4A2B-9EB3-CAAFDBB6803F} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-382369773-1592508727-1391189433-1001UA{671F0508-94A0-4724-ABB5-8BA8B99576AD} => C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206944 2026-03-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {BC58A3B7-C9BC-4923-9410-839F836A906B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-07-02] (Mozilla Corporation -> Mozilla Foundation)
Task: {C592614E-5533-45F7-BD42-31C79E60C02F} - System32\Tasks\Opera scheduled Autoupdate 1676197568 => C:\Users\Mi\AppData\Local\Programs\Opera\launcher.exe [2717592 2023-07-17] (Opera Norway AS -> Opera Software)
Task: {1B29A999-08B1-46D5-8DC6-AACFF38EB236} - System32\Tasks\RTSS => C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe [436544 2022-11-05] (Alexey Nicolaychuk -> )
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{612b9d4c-0467-4ba5-b335-59ac54fb38a4}: [NameServer] 62.141.16.161 62.141.16.150
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: k8v5djar.default-release -> 308046B0AF4A39CB
FF DefaultProfile: k8v5djar.default-release -> 641D10338ABA448D
FF ProfilePath: C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\eki0xmrp.default [2023-02-12]
FF ProfilePath: C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release [2026-07-11]
FF DownloadDir: G:\Downloads
FF Extension: (New Tab) - C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release\Extensions\newtab@mozilla.org.xpi [2026-07-07]
FF Extension: (uBlock Origin) - C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release\Extensions\uBlock0@raymondhill.net.xpi [2026-07-10]
FF Extension: (Video DownloadHelper) - C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-11-19]
FF Extension: (Download Youtube Subtitles) - C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release\Extensions\{f137c1e1-0bc3-489c-b5b4-9b908a3b5e5c}.xpi [2026-04-02]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [No File]
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Mi\AppData\Local\Microsoft\Edge\User Data\Default [2026-07-11]
Edge DownloadDir: G:\Downloads
Edge Extension: (Dokumenty Google offline) - C:\Users\Mi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-24]
Edge Extension: (Edge relevant text changes) - C:\Users\Mi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-12-27]
Edge DownloadDir: Default -> G:\Downloads
Opera:
=======
OPR Profile: C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable [2026-07-08]
OPR DownloadDir: G:\Downloads
OPR Notifications: Opera Stable -> hxxps://modivo.cz
OPR DefaultSearchURL: Opera Stable -> hxxps://www.google.com/search?client=opera&q={s ... utEncoding}
OPR DefaultSearchKeyword: Opera Stable -> g
OPR Extension: (Rich Hints Agent) - C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2026-06-27]
OPR Extension: (Opera Wallet) - C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2025-07-17]
OPR Extension: (Aria) - C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable\Extensions\igpdmclhhlcpoindmhkhillbfhdgoegm [2025-11-27]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2023-02-12]
OPR Extension: (opera-intro) - C:\Users\Mi\AppData\Local\Programs\Opera\100.0.4815.76\resources\opera_intro_extension [2023-07-26] [UpdateUrl:0] <==== ATTENTION
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 LibreOfficeMaintenance; C:\Program Files\LibreOffice\program\update_service.exe [123304 2026-07-06] (The Document Foundation -> The Document Foundation)
R2 MbnExt; C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\MbnExt.dll [422608 2017-04-13] (Gemfor s.r.o. -> Gemfor s.r.o.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe [2150144 2026-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_901d8cfde13e2b8b\Display.NvContainer\NVDisplay.Container.exe [1275600 2025-09-23] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [534472 2024-02-22] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe [4608640 2026-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe [290744 2026-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [436320 2026-06-21] (Microsoft Windows Hardware Compatibility Publisher -> Bluestack System Inc.)
S3 ew_hwusbdev; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys [109568 2013-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 ew_usbenumfilter; C:\Windows\System32\drivers\ew_usbenumfilter.sys [14976 2012-12-22] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 huawei_enumerator; C:\Windows\System32\drivers\ew_jubusenum.sys [91648 2013-11-30] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 hwusb_cdcacm; C:\Windows\system32\DRIVERS\ew_cdcacm.sys [125952 2014-07-25] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 hwusb_wwanecm; C:\Windows\System32\drivers\ew_wwanecm.sys [380672 2014-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [82312 2026-06-01] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [21888 2026-06-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [646536 2026-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [115120 2026-06-23] (Microsoft Windows -> Microsoft Corporation)
R1 YSDrv; C:\Program Files (x86)\Bignox\BigNoxVM\RT\YSDrv.sys [312776 2026-03-31] (Microsoft Windows Hardware Compatibility Publisher -> Nox Limited Corporation)
S1 axbfrsdj; \??\C:\Windows\system32\drivers\axbfrsdj.sys (No File)
S1 hosaiwng; \??\C:\Windows\system32\drivers\hosaiwng.sys (No File)
S1 mlangoti; \??\C:\Windows\system32\drivers\mlangoti.sys (No File)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-07-11 10:01 - 2026-07-11 10:02 - 000016740 _____ C:\Users\Mi\Desktop\FRST.txt
2026-07-11 10:00 - 2026-07-11 10:01 - 000000000 ____D C:\FRST
2026-07-11 09:59 - 2026-07-11 09:59 - 002449920 _____ (Farbar) C:\Users\Mi\Desktop\FRST64.exe
2026-07-11 09:53 - 2026-07-11 09:54 - 000000031 _____ C:\Users\Mi\Desktop\prihlaseni viry-forum.txt
2026-07-07 17:21 - 2026-07-07 17:21 - 000316235 _____ C:\Users\Mi\Desktop\navod na pouziti budiku.pdf
2026-07-06 12:40 - 2026-07-10 18:25 - 000002103 _____ C:\Users\Mi\Desktop\Moje O₂ - BlueStacks App Player 2.lnk
2026-07-06 12:33 - 2026-07-10 18:25 - 000002131 _____ C:\Users\Mi\Desktop\Můj T-Mobile - BlueStacks App Player 2.lnk
2026-07-06 10:53 - 2026-07-06 10:53 - 000000000 ____D C:\Users\Mi\AppData\Local\HD-MultiInstanceManager
2026-07-06 09:37 - 2026-07-06 09:37 - 000000000 ____D C:\Users\Mi\AppData\Roaming\HD-Player
2026-07-06 09:36 - 2026-07-06 12:45 - 000000000 ____D C:\Users\Mi\AppData\Local\BlueStacks X
2026-07-06 09:36 - 2026-07-06 09:36 - 000000000 ____D C:\Users\Mi\AppData\Local\BSXCache
2026-07-06 09:35 - 2026-07-06 17:26 - 000000000 ____D C:\Users\Mi\AppData\Roaming\bluestacks-services
2026-07-06 09:35 - 2026-07-06 12:47 - 000000000 ____D C:\ProgramData\BlueStacks_nxt
2026-07-06 09:35 - 2026-07-06 09:35 - 000006412 _____ C:\Users\Mi\-1.14-windows.xml
2026-07-06 09:35 - 2026-07-06 09:35 - 000003932 _____ C:\Windows\system32\Tasks\BlueStacksHelper_nxt
2026-07-06 09:35 - 2026-07-06 09:35 - 000002423 _____ C:\Users\Mi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BlueStacks Services.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000002120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueAI.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks 5.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000002057 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks Manager.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000002045 _____ C:\Users\Public\Desktop\BlueStacks Manager.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000001975 _____ C:\Users\Public\Desktop\BlueStacks 5.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000000000 ____D C:\Users\Mi\AppData\Local\HD-Player
2026-07-06 09:35 - 2026-07-06 09:35 - 000000000 ____D C:\Users\Mi\AppData\Local\bluestacks-services-updater
2026-07-06 09:34 - 2026-07-06 09:35 - 000000000 ____D C:\Program Files\BlueStacks_nxt
2026-07-06 09:30 - 2026-07-06 09:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks Store
2026-07-06 09:30 - 2026-07-06 09:30 - 000000000 ____D C:\Program Files (x86)\BlueStacks X
2026-07-02 11:18 - 2026-07-02 11:18 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2026-07-02 09:57 - 2026-07-06 12:42 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-06-15 09:59 - 2026-06-15 10:21 - 000000476 _____ C:\Users\Mi\Desktop\kod hdo elektrika.txt
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-07-11 09:28 - 2023-02-12 15:06 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-07-11 09:27 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-07-11 09:27 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2026-07-10 18:37 - 2024-02-06 11:54 - 000000000 ____D C:\ProgramData\NVIDIA
2026-07-10 18:25 - 2026-05-08 12:14 - 000001060 _____ C:\Users\Mi\Desktop\Pretty Good Solitaire.lnk
2026-07-10 18:25 - 2026-05-08 09:47 - 000002052 _____ C:\Users\Mi\Desktop\Recommended Software.lnk
2026-07-10 18:25 - 2026-05-08 09:47 - 000002002 _____ C:\Users\Mi\Desktop\Time Stopper.lnk
2026-07-10 18:25 - 2026-05-07 18:01 - 000001169 _____ C:\Users\Mi\Desktop\BVS Solitaire Collection.lnk
2026-07-10 18:25 - 2026-04-05 09:30 - 000002246 _____ C:\Users\Mi\Desktop\30+ Free Patience.lnk
2026-07-10 18:25 - 2025-10-22 19:43 - 000001222 _____ C:\Users\Mi\Desktop\Youtube Downloader HD.lnk
2026-07-10 18:25 - 2025-09-09 11:39 - 000001185 _____ C:\Users\Mi\Desktop\RivaTuner Statistics Server.lnk
2026-07-10 18:25 - 2025-09-09 11:39 - 000001096 _____ C:\Users\Mi\Desktop\OBS Studio.lnk
2026-07-10 18:25 - 2025-09-09 11:39 - 000001052 _____ C:\Users\Mi\Desktop\TeamSpeak 3 Client.lnk
2026-07-10 18:25 - 2025-09-09 11:39 - 000000984 _____ C:\Users\Mi\Desktop\4K Video Downloader+.lnk
2026-07-10 18:25 - 2025-09-09 11:39 - 000000821 _____ C:\Users\Mi\Desktop\Microsoft Edge.lnk
2026-07-10 18:25 - 2025-01-07 11:37 - 000002141 _____ C:\Users\Mi\Desktop\JDownloader 2.lnk
2026-07-10 18:25 - 2024-05-17 12:53 - 000001917 _____ C:\Users\Mi\Desktop\IrfanView 64 Thumbnails.lnk
2026-07-10 18:25 - 2024-05-17 12:53 - 000001043 _____ C:\Users\Mi\Desktop\IrfanView 64.lnk
2026-07-10 18:25 - 2023-08-09 13:25 - 000001140 _____ C:\Users\Mi\Desktop\Chess 2022.lnk
2026-07-10 18:25 - 2023-02-12 12:26 - 000001434 _____ C:\Users\Mi\Desktop\Prohlížeč Opera.lnk
2026-07-10 18:25 - 2023-02-11 17:43 - 000001155 _____ C:\Users\Mi\Desktop\MSI Afterburner.lnk
2026-07-10 18:25 - 2023-02-11 16:53 - 000001205 _____ C:\Users\Mi\Desktop\T-Mobile Internet Manager.lnk
2026-07-10 18:25 - 2023-02-11 14:43 - 000000923 _____ C:\Users\Mi\Desktop\Total Commander.lnk
2026-07-10 18:25 - 2023-02-11 14:43 - 000000603 _____ C:\Users\Mi\Desktop\Total Commander 64 bit.lnk
2026-07-10 12:12 - 2023-02-09 17:07 - 000000000 ____D C:\Windows\system32\SleepStudy
2026-07-07 11:00 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2026-07-07 10:44 - 2025-02-06 19:58 - 000003564 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-382369773-1592508727-1391189433-1001
2026-07-07 10:44 - 2023-10-14 09:57 - 000002370 _____ C:\Users\Mi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-07-07 10:44 - 2023-02-11 16:55 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-382369773-1592508727-1391189433-1001
2026-07-07 10:44 - 2023-02-09 17:16 - 000003372 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-382369773-1592508727-1391189433-1001
2026-07-06 18:02 - 2025-02-20 19:21 - 000000000 ____D C:\Program Files\LibreOffice
2026-07-06 18:02 - 2024-08-12 16:01 - 000000000 ____D C:\Users\Mi\AppData\Local\CrashDumps
2026-07-06 17:58 - 2025-02-15 19:50 - 000000000 ____D C:\Users\Mi\Desktop\text
2026-07-06 12:47 - 2023-02-09 17:13 - 001693656 _____ C:\Windows\system32\PerfStringBackup.INI
2026-07-06 12:47 - 2019-12-07 16:43 - 000716894 _____ C:\Windows\system32\perfh005.dat
2026-07-06 12:47 - 2019-12-07 16:43 - 000145072 _____ C:\Windows\system32\perfc005.dat
2026-07-06 12:47 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2026-07-06 12:42 - 2023-02-12 15:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-07-06 12:42 - 2023-02-09 17:07 - 000008192 ___SH C:\DumpStack.log.tmp
2026-07-06 12:42 - 2023-02-09 17:07 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-07-06 12:42 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2026-07-06 11:28 - 2025-02-13 18:47 - 000000295 _____ C:\Users\Mi\d4ac4633ebd6440fa397b84f1bc94a3c.7z
2026-07-06 11:28 - 2025-02-13 17:56 - 000000000 ____D C:\Users\Mi\AppData\Local\Nox
2026-07-06 11:28 - 2023-02-09 17:12 - 000000000 ____D C:\Users\Mi
2026-07-06 10:32 - 2023-07-06 13:49 - 000000000 ____D C:\Users\Mi\Desktop\obrazky
2026-07-06 09:58 - 2025-02-13 17:58 - 000000000 ____D C:\Users\Mi\.android
2026-07-06 09:57 - 2026-03-31 11:59 - 000000000 ____D C:\Users\Mi\.BigNox
2026-07-06 09:57 - 2025-02-13 17:58 - 000000000 ____D C:\Users\Mi\vmlogs
2026-07-06 09:57 - 2025-02-13 17:58 - 000000000 ____D C:\Users\Mi\AppData\Local\NoxSrv
2026-07-06 09:37 - 2023-02-10 17:06 - 000000000 ____D C:\Users\Mi\AppData\Local\D3DSCache
2026-07-06 09:36 - 2024-02-23 15:02 - 000000000 ____D C:\Users\Mi\AppData\Local\cache
2026-07-06 09:34 - 2026-03-31 12:24 - 000000000 ____D C:\Users\Mi\AppData\Local\Bluestacks
2026-07-03 10:49 - 2024-02-22 16:55 - 000000000 ____D C:\Windows\SystemTemp
2026-07-02 11:18 - 2023-02-12 15:06 - 000001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-06-23 10:19 - 2023-02-09 17:07 - 000000000 ____D C:\Windows\system32\Drivers\wd
2026-06-20 09:57 - 2023-02-12 17:14 - 000003970 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-382369773-1592508727-1391189433-1001UA{671F0508-94A0-4724-ABB5-8BA8B99576AD}
2026-06-20 09:57 - 2023-02-12 17:14 - 000003898 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-382369773-1592508727-1391189433-1001Core{22470D11-467B-4882-B361-8EF9055909A5}
2026-06-20 09:30 - 2023-02-09 17:07 - 000003640 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-20 09:30 - 2023-02-09 17:07 - 000003514 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== Files in the root of some directories ========
2023-02-11 14:54 - 2023-02-11 14:54 - 000000025 _____ () C:\Users\Mi\AppData\Roaming\alsoft.ini
2023-02-13 13:04 - 2026-03-23 18:27 - 000000000 _____ () C:\Users\Mi\AppData\Roaming\FileIn.cns
2023-02-13 13:04 - 2026-03-23 18:27 - 000000000 _____ () C:\Users\Mi\AppData\Roaming\FileOut.cns
2023-02-12 16:30 - 2023-04-16 14:38 - 000007602 _____ () C:\Users\Mi\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-07-2026 01
Ran by Mi (11-07-2026 10:03:16)
Running from C:\Users\Mi\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.4046 (X64) (2023-02-09 15:09:05)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-382369773-1592508727-1391189433-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-382369773-1592508727-1391189433-503 - Limited - Disabled)
Guest (S-1-5-21-382369773-1592508727-1391189433-501 - Limited - Disabled)
Mi (S-1-5-21-382369773-1592508727-1391189433-1001 - Administrators - Enabled) => C:\Users\Mi
WDAGUtilityAccount (S-1-5-21-382369773-1592508727-1391189433-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\uTorrent) (Version: 3.6.0.47224 - BitTorrent Limited)
1.0 (HKLM-x32\...\{AB726D73-E20A-4534-B607-EBB1A3867DD5}_is1) (Version: - ml-train.ucoz.ru)
30+ Free Patience (HKLM-x32\...\30+ Free Patience) (Version: - )
4K Video Downloader+ (HKLM\...\{0007A5D2-DEB9-4811-B201-7DAA9CE75FC7}) (Version: 26.1.5.0370 - Open Media LLC) Hidden
4K Video Downloader+ (HKLM-x32\...\{61d16153-cd60-41d8-bb5c-44bf72a83894}) (Version: 26.1.5.0370 - Open Media LLC)
ActivityChanger 1.5 (HKLM-x32\...\ActivityChanger 1.5) (Version: - )
Age Of Empires 3 CZ verze 1.0 (HKLM-x32\...\{A6502644-790D-4DCB-824F-45C64B22AF4D}_is1) (Version: 1.0 - tomi2k9)
Bandicam (HKLM-x32\...\Bandicam) (Version: 6.0.6.2034 - Bandicam.com)
Bandicam MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandicam.com)
Bestie Tajemstvi zamku Bileho jednorozce v.2015 (HKLM-x32\...\Bestie Tajemstvi zamku Bileho jednorozce v.2015) (Version: v.2015 - Spidla)
BitTorrent (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\BitTorrent) (Version: 7.11.0.47225 - BitTorrent Limited)
BlueStacks (HKLM\...\BlueStacks_nxt) (Version: 5.22.232.1002 - now.gg, Inc.)
BlueStacks Services (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\BlueStacksServices) (Version: 3.0.9 - now.gg, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BVS Solitaire Collection 9.0 (HKLM-x32\...\BVSSOL_is1) (Version: 9.0 - BVS Development Corporation)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7128 - CDBurnerXP)
ConBuilder (HKLM-x32\...\ConBuilder) (Version: 2.04.0007 - WEIruan)
CPUID CPU-Z 2.08 (HKLM\...\CPUID CPU-Z_is1) (Version: 2.08 - CPUID, Inc.)
Černý kocour Sběratelská edice verze 1.0b (HKLM-x32\...\Černý kocour Sběratelská edice_is1) (Version: 1.0b - )
Dáma 2004 (HKLM-x32\...\Dáma 2004 ) (Version: - )
DXTBmp (HKLM-x32\...\{2C1544E4-5DA6-4A72-B1BA-E4692991C1DC}) (Version: 1.00.000 - )
East Coast Express Part 1 (HKLM-x32\...\East Coast Express Part 1) (Version: - )
East Coast Express Part 2 (HKLM-x32\...\East Coast Express Part 2) (Version: - )
Enterprise Part 1 (HKLM-x32\...\Enterprise Part 1) (Version: - )
Esso Kesselwagen (HKLM-x32\...\Esso Kesselwagen) (Version: - )
FFEDIT_Sub v1.2 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\FFEDIT_Sub v1.2) (Version: - )
Ghostscript GPL 10.03.1 (Msi Setup) (HKLM\...\_{476FD34A-6D96-497A-9B55-63F3A9A8B3C0}) (Version: 10.03.1 - Corel Corporation)
Ghostscript GPL 10.03.1 (Msi Setup) (HKLM\...\{476FD34A-6D96-497A-9B55-63F3A9A8B3C0}) (Version: 10.03.1 - Corel Corporation) Hidden
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
Gothic (HKLM-x32\...\1207658682_is1) (Version: 1.08k Hotfix - GOG.com)
Great Eastern (HKLM-x32\...\Great Eastern) (Version: - )
HP Prime Virtual Calculator (64 bit) (HKLM\...\{B58605BE-9DED-4176-AE28-870E782755E1}) (Version: 2.1.14730.79 - HP) Hidden
HP Prime Virtual Calculator (HKLM-x32\...\{6cad3ba6-d99a-4bf5-98c6-c4132260fb77}) (Version: 2.1.14730.79 - HP)
Huawei Drivers (HKLM-x32\...\{C82D8932-EB28-4da6-9582-33D515D46F04}) (Version: 5.05.02.00 - )
Hungarotram 1.0 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Hungarotram 1.0) (Version: - )
HWiNFO® 64 (HKLM\...\HWiNFO® 64_is1) (Version: 8.40 - Martin Malik, REALiX s.r.o.)
Chess 2022 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Chess 2022) (Version: 2022.4 - Filip Höfer)
Chessarama (HKLM-x32\...\Chessarama_is1) (Version: - )
Chris Sawyer's Locomotion (HKLM-x32\...\GOGPACKLOCOMOTION_is1) (Version: 2.0.0.8 - GOG.com)
Inno Setup verze 6.2.2 (HKLM-x32\...\Inno Setup 6_is1) (Version: 6.2.2 - jrsoftware.org)
Intel(R) Chipset Device Software (HKLM\...\{B685D0AD-42A8-4A39-9BFE-8C063FA9AF29}) (Version: 10.1.1.8 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{60DC6F22-D268-44F0-8720-200033508384}) (Version: 11.0.0.1158 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{DF17C0DB-76D8-4A45-B26E-674F8455B803}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel® Chipset Device Software (HKLM-x32\...\{c6cff78a-cccb-49d5-be68-ae0ec5f0d48a}) (Version: 10.1.1.8 - Intel(R) Corporation) Hidden
IrfanView 4.67 (64-bit) (HKLM\...\IrfanView64) (Version: 4.67 - Irfan Skiljan)
Irish Enterprise version 2 (HKLM-x32\...\Irish Enterprise version 2) (Version: - Fastline Simulation Ltd)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0.1 - AppWork GmbH)
jewel match atlantis solitaire collectors edition version 1.0 (HKLM-x32\...\{70843751-1911-2019-7777-90091911AAA}_is1) (Version: 1.0 - )
LibreOffice 25.2.0.3 (HKLM\...\{E38AFCD6-BF08-4ECA-AAFF-D6D57FAC1A3A}) (Version: 25.2.0.3 - The Document Foundation)
Link Shell Extension (HKLM\...\HardlinkShellExt) (Version: 3.9.3.5 - Hermann Schinagl)
Loksim3D (HKLM\...\Loksim3D_is1) (Version: 2.11.0 - Loksim3D)
London and South East (HKLM-x32\...\London and South East) (Version: - )
Making Tracks Evesham Route for MSTS (HKLM-x32\...\Making Tracks Evesham Route for MSTS) (Version: v1.0.0 - Making Tracks Rail Simulation Software Limited)
Mariáš 3.4 (HKLM-x32\...\{6F42ECD9-A1E6-4FFC-B16D-768F1D70AD30}) (Version: 3.4.0 - Ganttsoft)
Microsoft .NET Host - 6.0.14 (x64) (HKLM\...\{40D4EC44-91F8-4EEE-869E-F4B3E90E6688}) (Version: 48.59.55225 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.15 (x64) (HKLM\...\{4C903F19-B4C3-4D0C-8CC9-D444C511AF1C}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.14 (x64) (HKLM\...\{D1726E78-81F3-40A2-A7AF-6286BAA49B1C}) (Version: 48.59.55225 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.15 (x64) (HKLM\...\{11CCC9F6-77AA-4421-9EAC-BAEC36D96817}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.14 (x64) (HKLM\...\{61202CF9-3B84-4E5A-91A1-2984FAE38259}) (Version: 48.59.55225 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.15 (x64) (HKLM\...\{8731E6E3-AF96-4515-ACEC-DBFB3DF55292}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 131.0.2903.112 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 131.0.2903.112 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Czech) 2007 (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Excel MUI (Czech) 2007 (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Czech) 2007 (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Czech) 2007 (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2007 (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (HKLM-x32\...\{90120000-002C-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Czech) 2007 (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Czech) 2007 (HKLM\...\{90120000-002A-0405-1000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2007 (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\OneDriveSetup.exe) (Version: 26.108.0607.0002 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft Train Simulator (HKLM-x32\...\Train Simulator 1.0) (Version: - )
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual Studio Tools for Applications 2022 (HKLM-x32\...\{5451d67a-bba3-400d-9705-96fb24f27192}) (Version: 17.0.33529 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2022 x64 Hosting Support (HKLM\...\{2472E763-D716-3A63-ACC5-FFAE11F05B71}) (Version: 17.0.33529 - Microsoft Corporation) Hidden
Microsoft Visual Studio Tools for Applications 2022 x86 Hosting Support (HKLM-x32\...\{86B4A90B-3A22-302E-8407-D83DF8D427F7}) (Version: 17.0.33529 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.14 (x64) (HKLM\...\{424D9E0C-14D9-4D4B-9562-845689D972F6}) (Version: 48.59.55235 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.14 (x64) (HKLM-x32\...\{c4558324-5b32-43fc-9ac2-423fee96dae0}) (Version: 6.0.14.32124 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.15 (x64) (HKLM\...\{0E4A7820-FDA4-4250-B7AC-E7A2F7B43B64}) (Version: 64.60.31203 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.15 (x64) (HKLM-x32\...\{5625bb48-295c-4113-bc92-d6a69b19b04c}) (Version: 8.0.15.34718 - Microsoft Corporation)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 152.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 109.0.1 - Mozilla)
MPC-HC 2.0.0 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 2.0.0 - MPC-HC Team)
MSI Afterburner 4.6.5 Beta 4 (HKLM-x32\...\Afterburner) (Version: 4.6.5 Beta 4 - MSI Co., LTD)
MSTS CFR Megapack 10 v1 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MSTS CFR Megapack 10 v1) (Version: - )
MSTS Patch 1.8.0521 CZ (HKLM-x32\...\{587A2120-41D3-11DB-3D6C-00E19E4D4AE1}) (Version: 1.8.052113 - George)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.4.9 - Notepad++ Team)
NoxPlayer (HKLM-x32\...\Nox) (Version: 7.0.6.2 - Duodian Technology Co. Ltd.)
NVIDIA Ovladač HD audia 1.4.5.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.5.0 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 581.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 581.42 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 30.2.3 - OBS Project)
Opera Stable 100.0.4815.76 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Opera 100.0.4815.76) (Version: 100.0.4815.76 - Opera Software)
Oshawa Route 1.0 (HKLM-x32\...\Oshawa Route 1.0) (Version: 1.0 - Maple Leaf Tracks)
Pack de coches Argentinos Nş1 (HKLM-x32\...\Pack de coches Argentinos Nş1_is1) (Version: 1.0 - Diego Rivera.)
paint.net (HKLM\...\{DBC43589-CC32-4502-BBEC-5B931AF4BD2E}) (Version: 5.0.2 - dotPDN LLC)
PARKING TYCOON BUSINESS SIMULATOR (HKLM-x32\...\PARKING TYCOON BUSINESS SIMULATOR_) (Version: - )
Polda 6 CZ v.1.1 (HKLM-x32\...\Polda 6 CZ v.1.1) (Version: v.1.1 - libbi)
Port Royale (HKLM-x32\...\Port Royale_is1) (Version: 1.4 - US-ACTION, s.r.o.)
Port Royale 2 (HKLM-x32\...\Port Royale 2) (Version: - )
Pretty Good Solitaire version 12.4.0 (HKLM-x32\...\Pretty Good Solitaire_is1) (Version: 12.4.0 - Goodsol Development Inc.)
QD DB Umbauwaggons V4.0 (HKLM-x32\...\QD DB Umbauwaggons V4.0) (Version: - )
Railroad Tycoon II Platinum (HKLM-x32\...\1445250876_is1) (Version: 2.0.0.5 - GOG.com)
Railroads Online (HKLM-x32\...\Railroads Online_is1) (Version: - )
Railway Empire - France (HKLM-x32\...\2147483048_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire - Germany (HKLM-x32\...\1455317728_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire - Great Britain & Ireland (HKLM-x32\...\1841852514_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire - Mexico (HKLM-x32\...\1974940689_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire - The Great Lakes (HKLM-x32\...\1740280886_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire (HKLM-x32\...\1556481953_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire: Crossing the Andes (HKLM-x32\...\1212290691_is1) (Version: 1.9.0.24255 - GOG.com)
rcLoco_M62-1806 v1 0 (HKLM-x32\...\{A6B8ACDE-AB38-419E-A513-5CCA2F98F021}_is1) (Version: - MSTS Addon)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7727 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.6.8 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.6.8 - VS Revo Group, Ltd.)
RivaTuner Statistics Server 7.3.4 Beta 6 (HKLM-x32\...\RTSS) (Version: 7.3.4 Beta 6 - Unwinder)
Route Riter 7.8 (HKLM-x32\...\Route Riter 7.8) (Version: 7.8.10 - Digital Rails Corporation)
RTrainSim Launcher (HKLM-x32\...\{D85BDD00-2EAD-4A55-9501-B28570A1AC51}) (Version: 1.8 - MaDaDev)
RUNAWAY - A road adventure (HKLM-x32\...\{4B2767BD-9445-4A0C-BB8A-6B8350181B46}) (Version: - )
Sam & Max Save the World (HKLM-x32\...\1409865962_is1) (Version: 1.1.0 - GOG.com)
Samorost 3 (HKLM-x32\...\1452686647_is1) (Version: 1.467.0 - GOG.com)
ScaleRail (HKLM-x32\...\ScaleRail1.77) (Version: 1.77 - 3DTrains)
ScaleRoad (HKLM-x32\...\ScaleRoad1.77) (Version: 1.77 - 3DTrains)
Shell Kesselwagen (HKLM-x32\...\Shell Kesselwagen) (Version: - )
Simon the Sorcerer 2: 25th Anniversary Edition (HKLM-x32\...\1893480337_is1) (Version: 1.2.1 - GOG.com)
Simutrans Game (HKLM-x32\...\Simutrans) (Version: - )
Solas and the White Winter (HKLM-x32\...\Solas and the White Winter_is1) (Version: - )
Spintires (HKLM-x32\...\Spintires_is1) (Version: - )
Station to Station (HKLM-x32\...\Station to Station_is1) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
STP DB ICE3 406 V1.0 (HKLM-x32\...\STP DB ICE3 406 V1.0) (Version: - )
SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.4.6 - Krzysztof Kowalczyk)
Sweet Solitaire School Witch 2 version 1.0 (HKLM-x32\...\{59475593-1911-2019-7777-90091911AAA}_is1) (Version: 1.0 - )
Taroky (HKLM-x32\...\Taroky_is1) (Version: - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.10 - TeamSpeak Systems GmbH)
Time Stopper (HKLM-x32\...\Time Stopper3.00) (Version: 3.00 - DilSoft)
T-Mobile Internet Manager (HKLM-x32\...\T-Mobile Communication Centre) (Version: 2017-12-05@2017-04-13 - Gemfor s.r.o.)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.51 - Ghisler Software GmbH)
Train Store (Czech Language Pack) (HKLM-x32\...\Train Store (Czech Language Pack)) (Version: - )
Train Store V3.2 (HKLM-x32\...\Train Store V3.2) (Version: - )
Train Valley World (HKLM-x32\...\Train Valley World) (Version: - TiNYiSO)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
WebM Media Foundation Components (HKLM-x32\...\webmmf) (Version: 1.0.1.2 - WebM Project)
WinAce Archiver (HKLM-x32\...\WinAce Archiver) (Version: 2.69 - e-merge GmbH)
WinRAR 6.22 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.22.0 - win.rar GmbH)
Workers & Resources: Soviet Republic - Biomes (HKLM-x32\...\1668945748_is1) (Version: 1.0.0.4.2 - GOG.com)
Workers & Resources: Soviet Republic (HKLM-x32\...\1860281269_is1) (Version: 1.0.0.4.2 - GOG.com)
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
Youtube Downloader HD v. 5.9.9.5 (HKLM-x32\...\Youtube Downloader HD_is1) (Version: - YoutubeDownloaderHD.com)
ZDSimulator version 55.008 (HKLM-x32\...\{1291E1CC-8792-4CE0-BBEB-FA42BA028007}_is1) (Version: 55.008 - ZDSimulator.com.ua)
Менеджер сценариев RTrainSim (HKLM-x32\...\Менеджер сценариев RTrainSim_is1) (Version: 1.0 - Галета Антон)
Packages:
=========
FreeCell v češtině -> C:\Program Files\WindowsApps\TreeCardGames.FreeCellCollectionFree_5.3.2.0_x64__n666hb6ddc5jp [2026-04-04] (TreeCardGames)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2023-02-09] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe [2023-02-10] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe [2023-02-10] (Microsoft Corporation) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.968.0_x64__56jybvy8sckqj [2025-10-12] (NVIDIA Corp.)
Pošta a Kalendář -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2023-02-09] (Microsoft Corporation) [MS Ad]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{03B29243-35DA-4858-920E-B70A007DF5AA}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.217.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{0982FB18-B2DC-43DF-9DA3-A54C41F699EA}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.233.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{1108FD1C-492F-4251-B9DB-77F0274267B2}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.187.37\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{1C67DF85-7959-43C0-92F8-2CAD0314C31C}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.201.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{22D49062-B8D3-4DD5-B9C2-A044EA04D5CD}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.223.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{2ABD6384-2E18-40E8-8439-F06D21E0B03D}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.43\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{2B49DB21-41C5-44C0-8358-CA4C76205AE1}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.209.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{2EF7E390-2F7C-4F9A-9B7D-4A87B56B711D}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.173.51\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{2FDB3305-19B8-4FE2-972B-ED5E97CBBD6E}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.39\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{38971E90-14FD-44F6-AA45-1447B653F873}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.173.45\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{41B09861-5409-4D44-8CA4-D49FBFAA2E6F}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.49\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{448DD314-7FBB-429C-9DAA-C05A00D235A8}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.215.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{4FFB4BD8-A109-4F25-A4DB-313678B19417}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.31\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{5247F326-2FF0-4920-998E-12AA35F0883C}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.213.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{5E9DEE2B-5F44-4C87-84B8-D2E7B11D7017}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.229.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{5EA43877-C6D8-4885-B77A-C0BB27E94372}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.241.15\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{5FC44EBC-3A1F-4FBB-85E5-34405788C8D7}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.187.41\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{608D599A-DCA6-4A7C-BED7-AFCD8465345A}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.175.29\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{64C6EFB9-8F79-4106-B975-067448DC768F}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.177.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{674CB023-C9D4-4286-B1FF-A1FF76AD4B27}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.227.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{6A012BDE-3690-4747-9C3E-5E4FC354304A}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.241.13\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{6A49690B-7DB6-424B-81CE-F51078F2A58D}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.203.13\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{6DD6748E-7DAE-47EF-B4D5-03AA1B06D697}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.187.39\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{72726D01-426C-4B35-8266-B4496CAA889E}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.183.29\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{78C1ADF4-6DAE-4164-AEFA-4E3EAD9E750A}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.19\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{79F05C14-E714-4C12-9924-93C812894CB0}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.57\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{7C9A348D-C321-47AC-904F-150312A5430F}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.175.27\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{7EFB4924-4B93-4C43-9832-9C3D05E85214}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.59\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{81093D63-7825-417B-BFC8-ADC63FA4E53D}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.241.15\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{83F21C4B-8643-4A08-A29A-822AFD835037}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.193.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{8DC94452-5748-435A-B24F-B0F57718821E}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.225.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{9C391760-8CB8-4F1E-AB7D-0C9915EFB004}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.211.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{A087E49F-1F8E-4603-A200-55537B737421}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.25\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{A78355B5-2A4D-486B-B97A-43448FC8C34D}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.207.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{AE1542A7-3989-481B-93A9-1500C5F56B14}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.185.27\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{B12A60CF-E572-4314-8F54-4E96C6660780}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.237.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{B258532D-3529-4BEB-BF38-F08F98B3968C}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{B314A279-F12F-4B54-A0AC-148FA68207CF}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.241.15\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{BB04C6F8-598E-4733-ABB4-07489C863436}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.205.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{BC4C72EF-3055-4A6D-86E1-AE4D24DB63CA}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.35\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{BCF99248-58CE-4562-B227-14D1E171B49D}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.221.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{C88B3957-621C-415B-8EE5-B688FC7EF924}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.61\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{CAE1760A-CB07-481B-8F9A-BC65510AF5D5}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.185.21\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{D2188EEC-2B0F-488C-8ECA-5285E8ECD87D}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.69\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{D8599F80-3D26-46D2-8CF1-0AD21B0ECF31}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.65\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{DAA7499A-B3AC-4419-A89B-124318504051}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.185.29\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{E3D57E77-FE71-4D06-BD34-D48820074909}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.181.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{E76F97B1-1AE9-497C-9FA4-F57BBABAD54A}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.185.17\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{E8791438-3525-48BF-A600-C577AD1674C2}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.173.49\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{ECCE2756-C45D-4E13-BC2D-EC9F138997E6}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.199.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{F1CBF5EB-347F-4E4C-90AC-E43339FC34EC}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.173.55\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{F46A78BD-06FC-442C-88DF-0500F08F2379}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.195.45\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{F583F9E9-8B95-4D88-BC72-AE190E9B71F9}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.239.19\psuser_64.dll => No File
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2210608 2006-10-26] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers: [IconOverlayJunction] -> {0A479751-02BC-11d3-A855-0004AC2568FF} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers-x32: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers-x32: [IconOverlayJunction] -> {0A479751-02BC-11d3-A855-0004AC2568FF} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers-x32: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2023-01-27] (Notepad++ -> )
ContextMenuHandlers1: [BB FlashBack 2] -> {A8065B9E-193F-4797-B62D-8F6321E7FCCB} => -> No File
ContextMenuHandlers1: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-05-29] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-05-29] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [ZFAdd] -> {8FF88D27-7BD0-11D1-BFB7-00AA00262A11} => C:\Program Files (x86)\WinAce\arcext.dll [2007-11-08] (e-merge GmbH) [File not signed]
ContextMenuHandlers4-x32: [ZFAdd] -> {8FF88D27-7BD0-11D1-BFB7-00AA00262A11} => C:\Program Files (x86)\WinAce\arcext.dll [2007-11-08] (e-merge GmbH) [File not signed]
ContextMenuHandlers5: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_901d8cfde13e2b8b\nvshext.dll [2025-09-23] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-05-29] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-05-29] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\system32\rtvcvfw64.dll [246272 2012-09-28] () [File not signed]
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\system32\bdmjpeg64.dll [75248 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\system32\bdmpegv64.dll [75272 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\system32\bdmpega64.acm [75784 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\SysWOW64\rtvcvfw32.dll [247296 2012-09-28] () [File not signed]
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\SysWOW64\bdmjpeg.dll [71152 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\SysWOW64\bdmpegv.dll [71176 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\SysWOW64\bdmpega.acm [71176 2017-01-26] (Bandicam Company -> )
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\Mi\Desktop\Nebuch.lnk -> G:\Program Files\Nebuch\LaunchGame.bat ()
Shortcut: C:\Users\Mi\Desktop\Менеджер сценариев RTrainSim.lnk -> G:\Program Files\Менеджер сценариев RTrainSim\ActivityManRTS.exe () <==== Cyrillic
Shortcut: C:\Users\Mi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Link Shell Extension\Donate.lnk -> hxxp://schinagl.priv.at/nt/hardlinkshellext/linkshellextension.htm
Shortcut: C:\Users\Mi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ActivityChanger\ActivityChanger.lnk -> G:\Program Files\Microsoft Games\Train Simulator\ActivityChanger\run_ac.bat (No File)
==================== Loaded Modules (Whitelisted) =============
2014-01-09 14:15 - 2014-01-09 14:15 - 001146880 _____ () [File not signed] C:\Program Files (x86)\Huawei\Drivers\NDISAPI.dll
2022-11-05 12:04 - 2022-11-05 12:04 - 000058368 _____ () [File not signed] C:\Program Files (x86)\RivaTuner Statistics Server\RTFC.dll
2022-11-05 12:04 - 2022-11-05 12:04 - 000074240 _____ () [File not signed] C:\Program Files (x86)\RivaTuner Statistics Server\RTMUI.dll
2022-11-05 12:04 - 2022-11-05 12:04 - 000368640 _____ () [File not signed] C:\Program Files (x86)\RivaTuner Statistics Server\RTUI.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-26] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 11:14 - 2026-02-07 20:09 - 000004136 _____ C:\Windows\system32\drivers\etc\hosts
109.94.209.70 *.fitgirl-repacks.xyz # Fake FitGirl site
109.94.209.70 *.fitgirl-repacks.xyz # Fake FitGirl site
109.94.209.70 fitgirl-repack.org # Fake FitGirl site
109.94.209.70 www.fitgirl-repack.org # Fake FitGirl site
109.94.209.70 fitgirlrepacks.pro # Fake FitGirl site
109.94.209.70 www.fitgirlrepacks.pro # Fake FitGirl site
109.94.209.70 fitgirl-repacks-site.org # Fake FitGirl site
109.94.209.70 www.fitgirl-repacks-site.org # Fake FitGirl site
109.94.209.70 fitgirls-repacks.com # Fake FitGirl site
109.94.209.70 fitgirlrepack.cc # Fake FitGirl site
109.94.209.70 fitgirlrepacks.org # Fake FitGirl site
109.94.209.70 www.fitgirls-repacks.com # Fake FitGirl site
109.94.209.70 www.fitgirlrepack.cc # Fake FitGirl site
109.94.209.70 www.fitgirlrepacks.org # Fake FitGirl site
109.94.209.70 fitgirltorrent.org # Fake FitGirl site
109.94.209.70 www.fitgirltorrent.org # Fake FitGirl site
109.94.209.70 fitgirl-repacks.net # Fake FitGirl site
109.94.209.70 www.fitgirl-repacks.net # Fake FitGirl site
109.94.209.70 fitgirlrepack.net # Fake FitGirl site
109.94.209.70 www.fitgirlrepack.net # Fake FitGirl site
109.94.209.70 fitgirl-repacks.com.de # Fake FitGirl site
109.94.209.70 www.fitgirl-repacks.com.de # Fake FitGirl site
109.94.209.70 fitgirltorrent.com # Fake FitGirl site
109.94.209.70 www.fitgirltorrent.com # Fake FitGirl site
109.94.209.70 fitgirl-repacks.in # Fake FitGirl site
109.94.209.70 fitgirlrepacks.in # Fake FitGirl site
109.94.209.70 www.fitgirlrepacks.in # Fake FitGirl site
109.94.209.70 fitgirlrepacks.co # Fake FitGirl site
109.94.209.70 fitgirl-repacks.cc # Fake FitGirl site
109.94.209.70 fitgirl-repacks.to # Fake FitGirl site
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 62.141.16.161 - 62.141.16.150
Windows Firewall is enabled.
Network Binding:
=============
Mobilní síť 5: HUAWEI Mobile Connect - Network Card #5 -> ew_wwanecm.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: )
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|G:\Program Files\Microsoft Games\Train Simulator\TRAINS\TRAINSET 5\2014 CD Raijet szerelvény
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Polda 6 CZ
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
MSCONFIG\Services: wuauserv => 3
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\StartupApproved\Run: => "electron.app.BlueStacks Services"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{C1B41260-CC85-430B-A4AC-B8AF64D6EDFE}G:\program files\open rails t1.5.1-263_open rails u2023.01.25-2006 2023-01-25 20-13-09\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-263_open rails u2023.01.25-2006 2023-01-25 20-13-09\runactivity.exe => No File
FirewallRules: [UDP Query User{15BDB1B6-60C0-4621-8F0E-782379E2F647}G:\program files\open rails t1.5.1-263_open rails u2023.01.25-2006 2023-01-25 20-13-09\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-263_open rails u2023.01.25-2006 2023-01-25 20-13-09\runactivity.exe => No File
FirewallRules: [{AF300018-170C-4510-A582-EA95424350B9}] => (Block) G:\program files\open rails t1.5.1-263_open rails u2023.01.25-2006 2023-01-25 20-13-09\runactivity.exe => No File
FirewallRules: [{59E3A53F-FD39-4AC1-8F79-4A6514FADA0B}] => (Block) G:\program files\open rails t1.5.1-263_open rails u2023.01.25-2006 2023-01-25 20-13-09\runactivity.exe => No File
FirewallRules: [TCP Query User{631720E6-225A-474E-959B-442AD9082785}G:\program files\live for speed z\lfs.exe] => (Allow) G:\program files\live for speed z\lfs.exe () [File not signed]
FirewallRules: [UDP Query User{8DD54513-09A8-4366-B626-61B4326E0A10}G:\program files\live for speed z\lfs.exe] => (Allow) G:\program files\live for speed z\lfs.exe () [File not signed]
FirewallRules: [{659841F0-B137-43C4-AC9D-48D36039051D}] => (Block) G:\program files\live for speed z\lfs.exe () [File not signed]
FirewallRules: [{ED235EB1-4518-4334-AD0C-38B4F577DA8B}] => (Block) G:\program files\live for speed z\lfs.exe () [File not signed]
FirewallRules: [{BF61E11A-ADF1-4CC9-A2AD-7C94EEC08891}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{ABD29330-B04D-413B-B479-7AE8D36C0377}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{C92392A9-15E9-434E-8E5C-DA99DB42538D}G:\program files\open rails t1.5.1-340_open rails u2023.03.02-2321 2023-03-02 23-28-17\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-340_open rails u2023.03.02-2321 2023-03-02 23-28-17\runactivity.exe => No File
FirewallRules: [UDP Query User{40A5CC98-477E-4DDF-85F1-41ACF4A4A3F0}G:\program files\open rails t1.5.1-340_open rails u2023.03.02-2321 2023-03-02 23-28-17\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-340_open rails u2023.03.02-2321 2023-03-02 23-28-17\runactivity.exe => No File
FirewallRules: [{CE4FCF76-74DC-457E-AB78-020741E000AD}] => (Block) G:\program files\open rails t1.5.1-340_open rails u2023.03.02-2321 2023-03-02 23-28-17\runactivity.exe => No File
FirewallRules: [{0581CB01-B4A0-4486-8F35-7EFF42016923}] => (Block) G:\program files\open rails t1.5.1-340_open rails u2023.03.02-2321 2023-03-02 23-28-17\runactivity.exe => No File
FirewallRules: [TCP Query User{D82B0F81-F3BA-49F5-9233-D5E6FE8FDDD0}D:\program files\maszyna\aria2c.exe] => (Allow) D:\program files\maszyna\aria2c.exe => No File
FirewallRules: [UDP Query User{47E632E4-8F6F-4A1C-8DEE-47A1327118D5}D:\program files\maszyna\aria2c.exe] => (Allow) D:\program files\maszyna\aria2c.exe => No File
FirewallRules: [{D16910E9-E65E-4D6F-9865-37E1760CF3AC}] => (Block) D:\program files\maszyna\aria2c.exe => No File
FirewallRules: [{0000446C-87E2-424E-A100-5AE65F0EF697}] => (Block) D:\program files\maszyna\aria2c.exe => No File
FirewallRules: [TCP Query User{ACC9C983-0FC2-4269-A728-033CB6A50F03}G:\program files\open rails t1.5.1-346_open rails u2023.03.14-1936 2023-03-14 19-43-23\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-346_open rails u2023.03.14-1936 2023-03-14 19-43-23\runactivity.exe => No File
FirewallRules: [UDP Query User{E968CCDA-C129-420A-BECA-6E96166983F7}G:\program files\open rails t1.5.1-346_open rails u2023.03.14-1936 2023-03-14 19-43-23\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-346_open rails u2023.03.14-1936 2023-03-14 19-43-23\runactivity.exe => No File
FirewallRules: [{48EE410E-E493-4AD8-A1DA-D12FC3290AA9}] => (Block) G:\program files\open rails t1.5.1-346_open rails u2023.03.14-1936 2023-03-14 19-43-23\runactivity.exe => No File
FirewallRules: [{0425DB4F-40EF-49AE-96D4-F76A6B62A51D}] => (Block) G:\program files\open rails t1.5.1-346_open rails u2023.03.14-1936 2023-03-14 19-43-23\runactivity.exe => No File
FirewallRules: [TCP Query User{42F8B8B7-A008-42E9-BF5D-EE14C389D446}G:\program files\open rails t1.5.1-368_open rails u2023.04.02-1636 2023-04-02 17-43-13\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-368_open rails u2023.04.02-1636 2023-04-02 17-43-13\runactivity.exe => No File
FirewallRules: [UDP Query User{40F641F8-992E-42F7-AF69-6EBCDAD11EE8}G:\program files\open rails t1.5.1-368_open rails u2023.04.02-1636 2023-04-02 17-43-13\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-368_open rails u2023.04.02-1636 2023-04-02 17-43-13\runactivity.exe => No File
FirewallRules: [{5033A1E3-B797-422A-8A41-2017AB32DDAD}] => (Block) G:\program files\open rails t1.5.1-368_open rails u2023.04.02-1636 2023-04-02 17-43-13\runactivity.exe => No File
FirewallRules: [{DB8F9453-96BA-4152-AB60-44CDD952104F}] => (Block) G:\program files\open rails t1.5.1-368_open rails u2023.04.02-1636 2023-04-02 17-43-13\runactivity.exe => No File
FirewallRules: [TCP Query User{C260A656-C550-471D-AF60-75C9076CBD18}G:\program files\open rails t1.5.1-376_open rails u2023.04.02-1636 2023-04-02 17-43-13\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-376_open rails u2023.04.02-1636 2023-04-02 17-43-13\runactivity.exe => No File
FirewallRules: [UDP Query User{0773035F-0B9A-4C26-87C1-9FA5A6030118}G:\program files\open rails t1.5.1-376_open rails u2023.04.02-1636 2023-04-02 17-43-13\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-376_open rails u2023.04.02-1636 2023-04-02 17-43-13\runactivity.exe => No File
FirewallRules: [{FE040A9F-8445-4CF6-BE72-90D144C24F87}] => (Block) G:\program files\open rails t1.5.1-376_open rails u2023.04.02-1636 2023-04-02 17-43-13\runactivity.exe => No File
FirewallRules: [{B89F977D-C9FD-43E3-A83F-B437A840D227}] => (Block) G:\program files\open rails t1.5.1-376_open rails u2023.04.02-1636 2023-04-02 17-43-13\runactivity.exe => No File
FirewallRules: [TCP Query User{DBF2B056-678F-4AA7-9C38-8F9BC725173F}G:\program files\open rails t1.5.1-376_open rails u2023.04.28-1937 2023-04-28 20-43-15\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-376_open rails u2023.04.28-1937 2023-04-28 20-43-15\runactivity.exe => No File
FirewallRules: [UDP Query User{2D11F48E-0C54-440B-A936-4F8C04201241}G:\program files\open rails t1.5.1-376_open rails u2023.04.28-1937 2023-04-28 20-43-15\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-376_open rails u2023.04.28-1937 2023-04-28 20-43-15\runactivity.exe => No File
FirewallRules: [{292E0934-CAB9-47CF-94E7-09B5B739F307}] => (Block) G:\program files\open rails t1.5.1-376_open rails u2023.04.28-1937 2023-04-28 20-43-15\runactivity.exe => No File
FirewallRules: [{03272B6B-3DCB-4309-9FB1-3566CD4BAEED}] => (Block) G:\program files\open rails t1.5.1-376_open rails u2023.04.28-1937 2023-04-28 20-43-15\runactivity.exe => No File
FirewallRules: [TCP Query User{317066C5-9CAA-4084-933A-E1E2834073DA}G:\program files\open rails t1.5.1-411\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-411\runactivity.exe => No File
FirewallRules: [UDP Query User{BAA120B0-AF26-43F5-BC01-55DCB33BAF01}G:\program files\open rails t1.5.1-411\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-411\runactivity.exe => No File
FirewallRules: [{13916854-5DA7-487F-A376-185F2A3FAB1A}] => (Block) G:\program files\open rails t1.5.1-411\runactivity.exe => No File
FirewallRules: [{5B4F8242-5E8C-4C81-ACA3-506F2FF8D728}] => (Block) G:\program files\open rails t1.5.1-411\runactivity.exe => No File
FirewallRules: [TCP Query User{64031366-26BD-492F-8649-A9CE67FD40BF}G:\program files\open rails t1.5.1-427_open rails u2023.06.11-0752 2023-06-11 08-58-14\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-427_open rails u2023.06.11-0752 2023-06-11 08-58-14\runactivity.exe => No File
FirewallRules: [UDP Query User{AEE49EAB-0D02-4A4C-B697-CDD8DBE84875}G:\program files\open rails t1.5.1-427_open rails u2023.06.11-0752 2023-06-11 08-58-14\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-427_open rails u2023.06.11-0752 2023-06-11 08-58-14\runactivity.exe => No File
FirewallRules: [{FC0806D3-CADB-47CE-80C0-9266971F5608}] => (Block) G:\program files\open rails t1.5.1-427_open rails u2023.06.11-0752 2023-06-11 08-58-14\runactivity.exe => No File
FirewallRules: [{34086D86-14F0-4785-8A50-5E14143C9E7C}] => (Block) G:\program files\open rails t1.5.1-427_open rails u2023.06.11-0752 2023-06-11 08-58-14\runactivity.exe => No File
FirewallRules: [TCP Query User{B3E5A585-2C3B-4894-8E23-A197F433035A}G:\program files\open rails1.5stable\runactivity.exe] => (Allow) G:\program files\open rails1.5stable\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [UDP Query User{BB4033A2-8BCD-46CD-82DB-BAB8C3E0D9BA}G:\program files\open rails1.5stable\runactivity.exe] => (Allow) G:\program files\open rails1.5stable\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{65D1631F-E74C-4B40-8FC1-B60AEB5DA146}] => (Block) G:\program files\open rails1.5stable\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{0FA79A7A-AA7E-4915-93E5-6E44BBFEDC5C}] => (Block) G:\program files\open rails1.5stable\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{D036E904-55DE-4CDA-ACCE-B8661C4D32A1}] => (Allow) C:\Users\Mi\AppData\Local\Programs\Opera\99.0.4788.88\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [TCP Query User{16B7415F-6668-48C6-A328-E4AEE4080F34}G:\program files\open rails t1.5.1-495_open rails u2023.07.07-0837 2023-07-07 09-43-17\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-495_open rails u2023.07.07-0837 2023-07-07 09-43-17\runactivity.exe => No File
FirewallRules: [UDP Query User{5CD4E5AB-353B-4603-A006-50A8C86B6A76}G:\program files\open rails t1.5.1-495_open rails u2023.07.07-0837 2023-07-07 09-43-17\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-495_open rails u2023.07.07-0837 2023-07-07 09-43-17\runactivity.exe => No File
FirewallRules: [{517C7A4E-819B-44D9-B5DE-810F80D70B92}] => (Block) G:\program files\open rails t1.5.1-495_open rails u2023.07.07-0837 2023-07-07 09-43-17\runactivity.exe => No File
FirewallRules: [{A0887DCB-D5B2-4D36-8756-92A044E51DC8}] => (Block) G:\program files\open rails t1.5.1-495_open rails u2023.07.07-0837 2023-07-07 09-43-17\runactivity.exe => No File
FirewallRules: [TCP Query User{0294C91A-E59A-4B2D-B9F7-9C88CCCDA909}G:\program files\open rails t1.5.1-500_open rails u2023.07.07-0837 2023-07-07 09-43-17\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-500_open rails u2023.07.07-0837 2023-07-07 09-43-17\runactivity.exe => No File
FirewallRules: [UDP Query User{329B262E-DEAD-4653-80B5-DCCAA5F036EA}G:\program files\open rails t1.5.1-500_open rails u2023.07.07-0837 2023-07-07 09-43-17\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-500_open rails u2023.07.07-0837 2023-07-07 09-43-17\runactivity.exe => No File
FirewallRules: [{8DD4F956-FBB1-455E-A1DB-94B8D9685451}] => (Block) G:\program files\open rails t1.5.1-500_open rails u2023.07.07-0837 2023-07-07 09-43-17\runactivity.exe => No File
FirewallRules: [{A11DD963-A648-46A0-9114-89581C7E9FF6}] => (Block) G:\program files\open rails t1.5.1-500_open rails u2023.07.07-0837 2023-07-07 09-43-17\runactivity.exe => No File
FirewallRules: [TCP Query User{80C70051-5FA9-46E4-A047-5DF0727F985F}C:\users\mi\appdata\local\programs\opera\opera.exe] => (Block) C:\users\mi\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{9CF5C523-D093-42A2-A95D-72A6720BB2E0}C:\users\mi\appdata\local\programs\opera\opera.exe] => (Block) C:\users\mi\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [TCP Query User{C6F339B3-FE95-4B63-892E-2AC5D278EAAB}G:\program files\open rails t1.5.1-507_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-507_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe => No File
FirewallRules: [UDP Query User{6BA9B048-C544-4B1A-97A0-59A5E5E90F09}G:\program files\open rails t1.5.1-507_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-507_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe => No File
FirewallRules: [{7DD730FD-98DA-4350-B5F6-CAFD311E259B}] => (Block) G:\program files\open rails t1.5.1-507_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe => No File
FirewallRules: [{9E01B8E8-0786-4655-8815-3C3F5070ED81}] => (Block) G:\program files\open rails t1.5.1-507_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe => No File
FirewallRules: [{7653A5C4-CC44-473B-92DF-B8464CE5FB25}] => (Allow) C:\Users\Mi\AppData\Local\Programs\Opera\100.0.4815.76\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [TCP Query User{C831B6BF-20B0-4E0F-BD7A-3318DC813C58}G:\program files\open rails t1.5.1-529_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-529_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe => No File
FirewallRules: [UDP Query User{546D1B6D-FCBF-414D-8123-0BE37E90355C}G:\program files\open rails t1.5.1-529_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-529_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe => No File
FirewallRules: [{58B57ACE-9009-4BAB-8EEC-B47954481CA2}] => (Block) G:\program files\open rails t1.5.1-529_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe => No File
FirewallRules: [{C3A7904C-33A3-4B00-8D6B-33BB830D6C07}] => (Block) G:\program files\open rails t1.5.1-529_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe => No File
FirewallRules: [TCP Query User{C7436642-3300-423C-8B24-6FC73F98A5B3}G:\program files\open rails t1.5.1-535_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-535_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe => No File
FirewallRules: [UDP Query User{4ACB53F8-6295-4842-96A2-0314E51AFCDF}G:\program files\open rails t1.5.1-535_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-535_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe => No File
FirewallRules: [{515B6AB3-225D-4A56-8F28-F027E5C6A6E9}] => (Block) G:\program files\open rails t1.5.1-535_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe => No File
FirewallRules: [{604FC31B-211A-4A10-9324-8330AE9DB4CE}] => (Block) G:\program files\open rails t1.5.1-535_open rails u2023.07.15-0353 2023-07-15 04-58-11\runactivity.exe => No File
FirewallRules: [TCP Query User{E9B20D46-0A7B-44DB-9AB0-5F0848D6ED8D}G:\program files\open rails t1.5.1-535a_open rail\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-535a_open rail\runactivity.exe => No File
FirewallRules: [UDP Query User{62372D34-30B3-4E8F-B469-143237E51CBC}G:\program files\open rails t1.5.1-535a_open rail\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-535a_open rail\runactivity.exe => No File
FirewallRules: [{CCFE6CD9-8DFB-4A9F-8C0A-6DB9A88D6ED7}] => (Block) G:\program files\open rails t1.5.1-535a_open rail\runactivity.exe => No File
FirewallRules: [{DEE342E4-B1E3-405D-999C-FCACEEBB0A83}] => (Block) G:\program files\open rails t1.5.1-535a_open rail\runactivity.exe => No File
FirewallRules: [TCP Query User{BD5A16FC-B642-4FB8-B37D-C7DFB6C6570A}D:\program files\maszyna23.07\aria2c.exe] => (Allow) D:\program files\maszyna23.07\aria2c.exe => No File
FirewallRules: [UDP Query User{E618A1D7-F77F-45A7-81D9-4AC4AA68D405}D:\program files\maszyna23.07\aria2c.exe] => (Allow) D:\program files\maszyna23.07\aria2c.exe => No File
FirewallRules: [{25CC43DB-C572-4324-B420-99B84F9A737B}] => (Block) D:\program files\maszyna23.07\aria2c.exe => No File
FirewallRules: [{473DDB19-CBAF-46C2-B646-8B1B3F7B10D4}] => (Block) D:\program files\maszyna23.07\aria2c.exe => No File
FirewallRules: [TCP Query User{1BEF8305-A1A2-4B61-BA22-5DFF8DD334DC}C:\program files (x86)\hp\hp prime virtual calculator\hpprime.exe] => (Allow) C:\program files (x86)\hp\hp prime virtual calculator\hpprime.exe => No File
FirewallRules: [UDP Query User{0554AFA1-C20B-4602-AEA9-294E6C179F4E}C:\program files (x86)\hp\hp prime virtual calculator\hpprime.exe] => (Allow) C:\program files (x86)\hp\hp prime virtual calculator\hpprime.exe => No File
FirewallRules: [{D189A58C-4AFB-4235-922F-67B1595CB33C}] => (Block) C:\program files (x86)\hp\hp prime virtual calculator\hpprime.exe => No File
FirewallRules: [{737B3DB2-967E-48C5-B93D-CFB696A7493F}] => (Block) C:\program files (x86)\hp\hp prime virtual calculator\hpprime.exe => No File
FirewallRules: [{2495A4F4-4711-4DAC-A8CC-78F638C0D4FB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{809EA813-F3AE-4240-863D-639CB587E530}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5F17A198-3C6D-4BA0-ABD8-C45E6B475DCE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F3FD2543-AED5-4DA4-881F-9461A455E822}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{B971455D-D2DB-4EC1-AAF1-24C7A3CDDEFA}C:\program files\hp\hp prime virtual calculator\hpprime.exe] => (Allow) C:\program files\hp\hp prime virtual calculator\hpprime.exe (Moravia Consulting, spol s. r. o. -> )
FirewallRules: [UDP Query User{7F8C2DD3-0D30-45A0-A85A-BE762267D6C8}C:\program files\hp\hp prime virtual calculator\hpprime.exe] => (Allow) C:\program files\hp\hp prime virtual calculator\hpprime.exe (Moravia Consulting, spol s. r. o. -> )
FirewallRules: [{92BB304F-67D8-4704-B3F7-707FDB4E7605}] => (Block) C:\program files\hp\hp prime virtual calculator\hpprime.exe (Moravia Consulting, spol s. r. o. -> )
FirewallRules: [{7AA5BB72-89D5-4FCB-ABF0-90102B35E749}] => (Block) C:\program files\hp\hp prime virtual calculator\hpprime.exe (Moravia Consulting, spol s. r. o. -> )
FirewallRules: [TCP Query User{8E26A11F-E386-435F-A4AA-F3802338633E}G:\program files\open rails t1.5.1-638_open rail\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-638_open rail\runactivity.exe => No File
FirewallRules: [UDP Query User{6A6BF988-6AAB-4F72-AA39-CAD5B3E62219}G:\program files\open rails t1.5.1-638_open rail\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-638_open rail\runactivity.exe => No File
FirewallRules: [{5AEDB1A9-0544-4ED6-BDE7-984259F77BBC}] => (Block) G:\program files\open rails t1.5.1-638_open rail\runactivity.exe => No File
FirewallRules: [{E2E5D186-0541-420E-8A39-BB6B2EA97652}] => (Block) G:\program files\open rails t1.5.1-638_open rail\runactivity.exe => No File
FirewallRules: [TCP Query User{B9E77B24-5EBC-47C9-AA4A-365E2D2E0CE8}G:\program files\open rails t1.5.1-664_open rails u2023.10.02-0822 2023-10-02 09-28-08\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-664_open rails u2023.10.02-0822 2023-10-02 09-28-08\runactivity.exe => No File
FirewallRules: [UDP Query User{7C634F33-6687-40B8-96C7-AE688EB3DA4D}G:\program files\open rails t1.5.1-664_open rails u2023.10.02-0822 2023-10-02 09-28-08\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-664_open rails u2023.10.02-0822 2023-10-02 09-28-08\runactivity.exe => No File
FirewallRules: [{F8096366-59AD-4E77-AA3D-D62CE7E22389}] => (Block) G:\program files\open rails t1.5.1-664_open rails u2023.10.02-0822 2023-10-02 09-28-08\runactivity.exe => No File
FirewallRules: [{5AC82138-67D1-49B8-BEDA-9E87B4B2DDCD}] => (Block) G:\program files\open rails t1.5.1-664_open rails u2023.10.02-0822 2023-10-02 09-28-08\runactivity.exe => No File
FirewallRules: [TCP Query User{B99B55B3-7BDD-445E-B2E0-ABE2225E9633}G:\program files\open rails t1.5.1-682_open rail\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-682_open rail\runactivity.exe => No File
FirewallRules: [UDP Query User{60B5DF32-07D2-48E2-8AEB-1BB629FD3BA2}G:\program files\open rails t1.5.1-682_open rail\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-682_open rail\runactivity.exe => No File
FirewallRules: [{162F3B9A-AF4A-44DB-BFE3-F615DD99F652}] => (Block) G:\program files\open rails t1.5.1-682_open rail\runactivity.exe => No File
FirewallRules: [{4652A817-A25C-4724-8C39-C6AEE9B28CAE}] => (Block) G:\program files\open rails t1.5.1-682_open rail\runactivity.exe => No File
FirewallRules: [TCP Query User{DAD01135-B5EF-4CEF-B8E1-382149657240}G:\program files\open rails t1.5.1-684_open rail\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-684_open rail\runactivity.exe => No File
FirewallRules: [UDP Query User{CD9F63D8-3399-49EB-801A-FEAAF6F3E662}G:\program files\open rails t1.5.1-684_open rail\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-684_open rail\runactivity.exe => No File
FirewallRules: [{592E825D-C37E-4FE1-84DF-0241A1B3D7A8}] => (Block) G:\program files\open rails t1.5.1-684_open rail\runactivity.exe => No File
FirewallRules: [{AD6724FC-48A5-45F3-85B8-F87D78F24BF0}] => (Block) G:\program files\open rails t1.5.1-684_open rail\runactivity.exe => No File
FirewallRules: [TCP Query User{77976378-D212-473C-A5CD-905126A5BEC1}G:\program files\open rails t1.5.1-684_open rails u2023.10.23-0437 2023-10-23 05-43-18\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-684_open rails u2023.10.23-0437 2023-10-23 05-43-18\runactivity.exe => No File
FirewallRules: [UDP Query User{D0E79018-E054-47D4-833F-7C97DF11F481}G:\program files\open rails t1.5.1-684_open rails u2023.10.23-0437 2023-10-23 05-43-18\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-684_open rails u2023.10.23-0437 2023-10-23 05-43-18\runactivity.exe => No File
FirewallRules: [TCP Query User{9A465E0E-C4FC-4C92-BE4E-F7C6D894E662}G:\program files\open rails t1.5.1-722_open rails u2023.12.05-1922 2023-12-05 19-28-13\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-722_open rails u2023.12.05-1922 2023-12-05 19-28-13\runactivity.exe => No File
FirewallRules: [UDP Query User{E77BB764-8BEA-4257-9E30-8A473DE02233}G:\program files\open rails t1.5.1-722_open rails u2023.12.05-1922 2023-12-05 19-28-13\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-722_open rails u2023.12.05-1922 2023-12-05 19-28-13\runactivity.exe => No File
FirewallRules: [{E9F14A6D-81B9-4F4E-B39C-0EAC61B801A1}] => (Block) G:\program files\open rails t1.5.1-722_open rails u2023.12.05-1922 2023-12-05 19-28-13\runactivity.exe => No File
FirewallRules: [{3732A2FC-927A-41F3-B2AF-66CA901B7D73}] => (Block) G:\program files\open rails t1.5.1-722_open rails u2023.12.05-1922 2023-12-05 19-28-13\runactivity.exe => No File
FirewallRules: [TCP Query User{C536C697-7A6E-4472-8F04-23435752C729}G:\program files\open rails t1.5.1-722_open rails u2023.12.05-1922 2023-12-05 19-28-13\contrib.trackviewer.exe] => (Allow) G:\program files\open rails t1.5.1-722_open rails u2023.12.05-1922 2023-12-05 19-28-13\contrib.trackviewer.exe => No File
FirewallRules: [UDP Query User{16F67A51-D566-4FD0-AAC6-6CDB90118DDF}G:\program files\open rails t1.5.1-722_open rails u2023.12.05-1922 2023-12-05 19-28-13\contrib.trackviewer.exe] => (Allow) G:\program files\open rails t1.5.1-722_open rails u2023.12.05-1922 2023-12-05 19-28-13\contrib.trackviewer.exe => No File
FirewallRules: [TCP Query User{AC4FA936-5169-496F-B26A-0AB6B7D6FD2B}G:\program files\open rails t1.5.1-749\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-749\runactivity.exe => No File
FirewallRules: [UDP Query User{F51C92A4-122F-4017-84E6-E849E5497218}G:\program files\open rails t1.5.1-749\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-749\runactivity.exe => No File
FirewallRules: [TCP Query User{7201AAD4-65D3-4202-AC7F-8A1036C83D07}G:\program files\open rails t1.5.1-799_open rails u2024.01.20-0537 2024-01-20 05-43-14\contrib.trackviewer.exe] => (Allow) G:\program files\open rails t1.5.1-799_open rails u2024.01.20-0537 2024-01-20 05-43-14\contrib.trackviewer.exe => No File
FirewallRules: [UDP Query User{B3786E3D-6F74-4CC2-BBEF-EBA12FF5AE8F}G:\program files\open rails t1.5.1-799_open rails u2024.01.20-0537 2024-01-20 05-43-14\contrib.trackviewer.exe] => (Allow) G:\program files\open rails t1.5.1-799_open rails u2024.01.20-0537 2024-01-20 05-43-14\contrib.trackviewer.exe => No File
FirewallRules: [{A0AC4591-6611-43F8-AF07-95F34E56FED8}] => (Block) G:\program files\open rails t1.5.1-799_open rails u2024.01.20-0537 2024-01-20 05-43-14\contrib.trackviewer.exe => No File
FirewallRules: [{86057FE3-E8F4-4539-A384-C98014FBF716}] => (Block) G:\program files\open rails t1.5.1-799_open rails u2024.01.20-0537 2024-01-20 05-43-14\contrib.trackviewer.exe => No File
FirewallRules: [TCP Query User{5693A0F2-2D27-40CB-854F-F4C0709DD31C}G:\program files\open rails t1.5.1-799_open rails u2024.01.20-0537 2024-01-20 05-43-14\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-799_open rails u2024.01.20-0537 2024-01-20 05-43-14\runactivity.exe => No File
FirewallRules: [UDP Query User{0311C3C3-25FA-4784-BA8E-2055B2852055}G:\program files\open rails t1.5.1-799_open rails u2024.01.20-0537 2024-01-20 05-43-14\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-799_open rails u2024.01.20-0537 2024-01-20 05-43-14\runactivity.exe => No File
FirewallRules: [{B68FA36A-6092-4A77-A0E0-FF9A4C4C14DA}] => (Block) G:\program files\open rails t1.5.1-799_open rails u2024.01.20-0537 2024-01-20 05-43-14\runactivity.exe => No File
FirewallRules: [{5461D087-CD88-46F1-AA15-69EEECFE25B6}] => (Block) G:\program files\open rails t1.5.1-799_open rails u2024.01.20-0537 2024-01-20 05-43-14\runactivity.exe => No File
FirewallRules: [TCP Query User{711951B5-A4C6-4B8F-B61D-809E5BDC20A8}G:\program files\open rails t1.5.1-799_u2024.01.26-0523\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-799_u2024.01.26-0523\runactivity.exe => No File
FirewallRules: [UDP Query User{974D8488-5FAF-4BDD-9257-DF4C40B7988A}G:\program files\open rails t1.5.1-799_u2024.01.26-0523\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-799_u2024.01.26-0523\runactivity.exe => No File
FirewallRules: [{E14BEF3C-7FD6-4891-BDB8-D6F22809E970}] => (Block) G:\program files\open rails t1.5.1-799_u2024.01.26-0523\runactivity.exe => No File
FirewallRules: [{A000FBA8-F991-46E3-8EC4-C9C1A95B3F76}] => (Block) G:\program files\open rails t1.5.1-799_u2024.01.26-0523\runactivity.exe => No File
FirewallRules: [TCP Query User{6CCD5970-D4EE-4810-BD5F-0165AA539C63}G:\program files\open rails t1.5.1-687_open rails u2023.11.16-1308 2023-11-16 13-20-06.zip\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-687_open rails u2023.11.16-1308 2023-11-16 13-20-06.zip\runactivity.exe => No File
FirewallRules: [UDP Query User{E8F32DCF-047D-4974-9B0B-835D70A5E70F}G:\program files\open rails t1.5.1-687_open rails u2023.11.16-1308 2023-11-16 13-20-06.zip\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-687_open rails u2023.11.16-1308 2023-11-16 13-20-06.zip\runactivity.exe => No File
FirewallRules: [{9A3EF479-5B95-441F-AF8E-57D572614FF9}] => (Block) G:\program files\open rails t1.5.1-687_open rails u2023.11.16-1308 2023-11-16 13-20-06.zip\runactivity.exe => No File
FirewallRules: [{E7F6D54B-89BA-4CDA-971A-253930258DC0}] => (Block) G:\program files\open rails t1.5.1-687_open rails u2023.11.16-1308 2023-11-16 13-20-06.zip\runactivity.exe => No File
FirewallRules: [TCP Query User{D7170218-C435-4DFD-BC00-6002F2AEF7CF}G:\program files\open rails t1.5.1-870_u2024.02.16-0138\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-870_u2024.02.16-0138\runactivity.exe => No File
FirewallRules: [UDP Query User{DDBA375F-0352-4C16-990A-02E4C10B94E5}G:\program files\open rails t1.5.1-870_u2024.02.16-0138\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-870_u2024.02.16-0138\runactivity.exe => No File
FirewallRules: [{0CF30BD3-B67D-4651-8E9E-0268400237CA}] => (Block) G:\program files\open rails t1.5.1-870_u2024.02.16-0138\runactivity.exe => No File
FirewallRules: [{CD44F678-2B8E-40B1-83AC-8BB3DB77C4A2}] => (Block) G:\program files\open rails t1.5.1-870_u2024.02.16-0138\runactivity.exe => No File
FirewallRules: [TCP Query User{C3D4E420-0AF3-4187-8B24-16FEF6519B1B}G:\program files\open rails t1.5.1-870_u2024.02.23-1607\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-870_u2024.02.23-1607\runactivity.exe => No File
FirewallRules: [UDP Query User{52BD86AE-265D-4C17-9043-244535006D7F}G:\program files\open rails t1.5.1-870_u2024.02.23-1607\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-870_u2024.02.23-1607\runactivity.exe => No File
FirewallRules: [{5F96E219-2711-4FD9-95D2-CD2CFA9E845A}] => (Block) G:\program files\open rails t1.5.1-870_u2024.02.23-1607\runactivity.exe => No File
FirewallRules: [{25771DEA-5148-4E34-9273-DEC4C567DB20}] => (Block) G:\program files\open rails t1.5.1-870_u2024.02.23-1607\runactivity.exe => No File
FirewallRules: [{D7CEAEF7-F460-431E-8590-A7D9CE881AAC}] => (Allow) D:\Program Files (x86)\Wargaming.net\GameCenter\wgc.exe => No File
FirewallRules: [{F62DB9CE-3664-47E1-B343-FBA7ABE86994}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe (Ubisoft Massive -> Ubisoft)
FirewallRules: [{0D84C3D8-9093-4643-9685-58F0FFED0DF3}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe (Ubisoft Massive -> Ubisoft)
FirewallRules: [{4151EF6B-17AC-452E-A7B8-7CD6E0963F0D}] => (Allow) D:\Program Files (x86)\Wargaming.net\GameCenter\wgc.exe => No File
FirewallRules: [TCP Query User{9B85F39A-97EE-4A04-9766-03C07D1B42A5}D:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) D:\games\world_of_tanks_eu\win64\worldoftanks.exe => No File
FirewallRules: [UDP Query User{27E13A84-B4A1-44BE-9008-E2FB6ED45B50}D:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) D:\games\world_of_tanks_eu\win64\worldoftanks.exe => No File
FirewallRules: [{8C626C22-3BE9-4149-9D4D-566250EC099A}] => (Block) D:\games\world_of_tanks_eu\win64\worldoftanks.exe => No File
FirewallRules: [{554E9667-F6E9-4778-83A5-0A2127A96149}] => (Block) D:\games\world_of_tanks_eu\win64\worldoftanks.exe => No File
FirewallRules: [TCP Query User{A08D00D1-193E-4E68-B6D9-FC865BE2636F}D:\program files\microsoft games\train simulator\rts\rts1.exe] => (Allow) D:\program files\microsoft games\train simulator\rts\rts1.exe => No File
FirewallRules: [UDP Query User{7FE90E12-3AAE-4154-B4D5-2F93A7E3A5A3}D:\program files\microsoft games\train simulator\rts\rts1.exe] => (Allow) D:\program files\microsoft games\train simulator\rts\rts1.exe => No File
FirewallRules: [{EF481F5E-20B2-49B0-8582-07B8ED6DF64E}] => (Block) D:\program files\microsoft games\train simulator\rts\rts1.exe => No File
FirewallRules: [{90E8481E-582B-4E17-80B2-8B16903110DD}] => (Block) D:\program files\microsoft games\train simulator\rts\rts1.exe => No File
FirewallRules: [TCP Query User{4C6EA23F-3117-46C0-B9CF-E9CCAEC36010}G:\program files\microsoft games\train simulator\rts\rts1.exe] => (Allow) G:\program files\microsoft games\train simulator\rts\rts1.exe () [File not signed]
FirewallRules: [UDP Query User{819E1A5B-5784-4962-9B38-6E1AE64E445A}G:\program files\microsoft games\train simulator\rts\rts1.exe] => (Allow) G:\program files\microsoft games\train simulator\rts\rts1.exe () [File not signed]
FirewallRules: [{AD3F1CA2-B7C0-4A13-B722-A73A2FAAE319}] => (Block) G:\program files\microsoft games\train simulator\rts\rts1.exe () [File not signed]
FirewallRules: [{D43CE9D9-C8DF-4204-BBFE-2E7D5B021DB1}] => (Block) G:\program files\microsoft games\train simulator\rts\rts1.exe () [File not signed]
FirewallRules: [TCP Query User{29BE5173-A379-474B-93D1-A3B24D055833}G:\program files\open rails t1.5.1-1076_open rails u2024.07.19-0407\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-1076_open rails u2024.07.19-0407\runactivity.exe => No File
FirewallRules: [UDP Query User{88FE74BC-1176-4B39-B145-6AF5C3926C2A}G:\program files\open rails t1.5.1-1076_open rails u2024.07.19-0407\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-1076_open rails u2024.07.19-0407\runactivity.exe => No File
FirewallRules: [TCP Query User{EAE19185-F677-475F-8B11-2CD2C663ECCC}G:\program files\1.5.1open rails t1.5.1-1807_open rails u2024.09.04-1807\runactivity.exe] => (Allow) G:\program files\1.5.1open rails t1.5.1-1807_open rails u2024.09.04-1807\runactivity.exe => No File
FirewallRules: [UDP Query User{B7AC5A71-A988-4DA7-8FE9-026A07F6D7C7}G:\program files\1.5.1open rails t1.5.1-1807_open rails u2024.09.04-1807\runactivity.exe] => (Allow) G:\program files\1.5.1open rails t1.5.1-1807_open rails u2024.09.04-1807\runactivity.exe => No File
FirewallRules: [{C469366C-5254-415C-B0BD-740CAC02B550}] => (Block) G:\program files\1.5.1open rails t1.5.1-1807_open rails u2024.09.04-1807\runactivity.exe => No File
FirewallRules: [{50DFB587-333C-45CE-BFB0-E14D4C5F6C15}] => (Block) G:\program files\1.5.1open rails t1.5.1-1807_open rails u2024.09.04-1807\runactivity.exe => No File
FirewallRules: [TCP Query User{71102989-2166-4D1E-8669-EE69BE13C692}D:\games\rrs\bin\simulator.exe] => (Allow) D:\games\rrs\bin\simulator.exe => No File
FirewallRules: [UDP Query User{2D87FAA1-0CC9-44C0-ABF1-D29DC1C4DF09}D:\games\rrs\bin\simulator.exe] => (Allow) D:\games\rrs\bin\simulator.exe => No File
FirewallRules: [{B79E5BA8-6960-4D41-BF0A-309C666261D5}] => (Block) D:\games\rrs\bin\simulator.exe => No File
FirewallRules: [{7CB714EF-E134-4924-83DC-A0E4A073D0ED}] => (Block) D:\games\rrs\bin\simulator.exe => No File
FirewallRules: [TCP Query User{127C4820-B320-485E-AEDC-F0D1B87964CA}G:\program files\1.5.1open rails t1.5.1-1435_open rails u2024.12.21-0937\runactivity.exe] => (Allow) G:\program files\1.5.1open rails t1.5.1-1435_open rails u2024.12.21-0937\runactivity.exe => No File
FirewallRules: [UDP Query User{6BA9CDF0-D6C9-494F-B27D-C2AE1F74CAB7}G:\program files\1.5.1open rails t1.5.1-1435_open rails u2024.12.21-0937\runactivity.exe] => (Allow) G:\program files\1.5.1open rails t1.5.1-1435_open rails u2024.12.21-0937\runactivity.exe => No File
FirewallRules: [{7BEB7BC3-3BF9-455B-98C0-E085B3BBA995}] => (Block) G:\program files\1.5.1open rails t1.5.1-1435_open rails u2024.12.21-0937\runactivity.exe => No File
FirewallRules: [{E6CB5F5E-24CB-4AE5-A4A9-0EAB03114B65}] => (Block) G:\program files\1.5.1open rails t1.5.1-1435_open rails u2024.12.21-0937\runactivity.exe => No File
FirewallRules: [{8DDCB23C-AF03-44CD-880E-5CD144610BAC}] => (Allow) C:\Users\Mi\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [{2A87FB91-4E2B-4524-B2D9-93D8877BB0FC}] => (Allow) C:\Users\Mi\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [TCP Query User{862851F6-BB6D-40CC-97C3-D5C9A1535CC7}G:\program files\2_1.5.1open rails t1.5.1-1500_open rails u2025.01.30-1452\runactivity.exe] => (Allow) G:\program files\2_1.5.1open rails t1.5.1-1500_open rails u2025.01.30-1452\runactivity.exe => No File
FirewallRules: [UDP Query User{541757F8-CB33-4FBC-A234-757F94636328}G:\program files\2_1.5.1open rails t1.5.1-1500_open rails u2025.01.30-1452\runactivity.exe] => (Allow) G:\program files\2_1.5.1open rails t1.5.1-1500_open rails u2025.01.30-1452\runactivity.exe => No File
FirewallRules: [{A86FEDF6-16A7-4E7F-8313-4D499D66A3CB}] => (Block) G:\program files\2_1.5.1open rails t1.5.1-1500_open rails u2025.01.30-1452\runactivity.exe => No File
FirewallRules: [{C0E58C27-010C-4A63-A9FD-5E4C0B1B250A}] => (Block) G:\program files\2_1.5.1open rails t1.5.1-1500_open rails u2025.01.30-1452\runactivity.exe => No File
FirewallRules: [TCP Query User{4F9213F2-1E6F-45A5-B289-E1E87170CFEB}G:\program files\3_1.5.1open rails t1.5.1-1511_open rails u2025.02.09-2007\runactivity.exe] => (Allow) G:\program files\3_1.5.1open rails t1.5.1-1511_open rails u2025.02.09-2007\runactivity.exe => No File
FirewallRules: [UDP Query User{9CD6733B-4654-4CD0-BD59-7175FED0BFCE}G:\program files\3_1.5.1open rails t1.5.1-1511_open rails u2025.02.09-2007\runactivity.exe] => (Allow) G:\program files\3_1.5.1open rails t1.5.1-1511_open rails u2025.02.09-2007\runactivity.exe => No File
FirewallRules: [{012E52BA-658C-41B4-B684-7E5093D189A4}] => (Block) G:\program files\3_1.5.1open rails t1.5.1-1511_open rails u2025.02.09-2007\runactivity.exe => No File
FirewallRules: [{25A5CF83-DCD7-4831-9EF2-CFE94C71EF73}] => (Block) G:\program files\3_1.5.1open rails t1.5.1-1511_open rails u2025.02.09-2007\runactivity.exe => No File
FirewallRules: [TCP Query User{E98E3E8A-6587-418B-874D-120BE268D1DE}G:\program files\open rails t1.4-628_open rails u2022.07.26-1821 2022-07-26 19-28-15\runactivity.exe] => (Allow) G:\program files\open rails t1.4-628_open rails u2022.07.26-1821 2022-07-26 19-28-15\runactivity.exe => No File
FirewallRules: [UDP Query User{F8ADCFF3-7B64-4607-A9A6-083C7B49C3A1}G:\program files\open rails t1.4-628_open rails u2022.07.26-1821 2022-07-26 19-28-15\runactivity.exe] => (Allow) G:\program files\open rails t1.4-628_open rails u2022.07.26-1821 2022-07-26 19-28-15\runactivity.exe => No File
FirewallRules: [{3C3B0B7A-F77D-4875-8862-71C3C5C4FF72}] => (Block) G:\program files\open rails t1.4-628_open rails u2022.07.26-1821 2022-07-26 19-28-15\runactivity.exe => No File
FirewallRules: [{1EA40B4B-CEAB-4DD0-99D9-B72665B0FC66}] => (Block) G:\program files\open rails t1.4-628_open rails u2022.07.26-1821 2022-07-26 19-28-15\runactivity.exe => No File
FirewallRules: [TCP Query User{EAF59B4A-1A6C-4D0F-9A0F-A0D77DF7C06D}G:\program files\4_1.5.1open rails t1.5.1-1515_open rails u2025.02.13-0907\runactivity.exe] => (Allow) G:\program files\4_1.5.1open rails t1.5.1-1515_open rails u2025.02.13-0907\runactivity.exe => No File
FirewallRules: [UDP Query User{4A52B1B4-FA78-473C-9EEC-F0230236182D}G:\program files\4_1.5.1open rails t1.5.1-1515_open rails u2025.02.13-0907\runactivity.exe] => (Allow) G:\program files\4_1.5.1open rails t1.5.1-1515_open rails u2025.02.13-0907\runactivity.exe => No File
FirewallRules: [{A4B2C941-3B8B-4650-89B4-870C9ABAD5C3}] => (Block) G:\program files\4_1.5.1open rails t1.5.1-1515_open rails u2025.02.13-0907\runactivity.exe => No File
FirewallRules: [{DA951364-7BB9-4196-867A-6E975F343389}] => (Block) G:\program files\4_1.5.1open rails t1.5.1-1515_open rails u2025.02.13-0907\runactivity.exe => No File
FirewallRules: [TCP Query User{7B46CECD-DC3B-4CC8-AFB0-69863237D8D4}G:\program files\5_1.5.1open rails t1.5.1-1522_open rails u2025.02.16-2307\runactivity.exe] => (Allow) G:\program files\5_1.5.1open rails t1.5.1-1522_open rails u2025.02.16-2307\runactivity.exe => No File
FirewallRules: [UDP Query User{BA6E74E8-41B6-4951-B946-44BC61F9DB52}G:\program files\5_1.5.1open rails t1.5.1-1522_open rails u2025.02.16-2307\runactivity.exe] => (Allow) G:\program files\5_1.5.1open rails t1.5.1-1522_open rails u2025.02.16-2307\runactivity.exe => No File
FirewallRules: [{6604DD91-5EE5-49CF-8543-10D74256DC4C}] => (Block) G:\program files\5_1.5.1open rails t1.5.1-1522_open rails u2025.02.16-2307\runactivity.exe => No File
FirewallRules: [{E2F5B05E-F6AD-4ED3-AA98-2ACCC0A382E1}] => (Block) G:\program files\5_1.5.1open rails t1.5.1-1522_open rails u2025.02.16-2307\runactivity.exe => No File
FirewallRules: [TCP Query User{69643831-1942-4720-9EAA-B9214AA94EBF}G:\program files\6_1.5.1open rails t1.5.1-1689_open rails u2025.04.02-2352\runactivity.exe] => (Allow) G:\program files\6_1.5.1open rails t1.5.1-1689_open rails u2025.04.02-2352\runactivity.exe => No File
FirewallRules: [UDP Query User{4A17946A-85BD-475B-9C87-A933276A86EA}G:\program files\6_1.5.1open rails t1.5.1-1689_open rails u2025.04.02-2352\runactivity.exe] => (Allow) G:\program files\6_1.5.1open rails t1.5.1-1689_open rails u2025.04.02-2352\runactivity.exe => No File
FirewallRules: [{BEBAAA29-716A-4706-A326-7AAD77C76C12}] => (Block) G:\program files\6_1.5.1open rails t1.5.1-1689_open rails u2025.04.02-2352\runactivity.exe => No File
FirewallRules: [{E87FE625-3285-4A01-847C-3A007B151486}] => (Block) G:\program files\6_1.5.1open rails t1.5.1-1689_open rails u2025.04.02-2352\runactivity.exe => No File
FirewallRules: [TCP Query User{902AAE83-0F94-49F0-89F1-57B114E28315}G:\program files\7_1.5.1open rails t1.5.1-1695_open rails u2025.04.08-1707\runactivity.exe] => (Allow) G:\program files\7_1.5.1open rails t1.5.1-1695_open rails u2025.04.08-1707\runactivity.exe => No File
FirewallRules: [UDP Query User{C7241D0D-E45F-49C4-B64B-7A6ECA53C522}G:\program files\7_1.5.1open rails t1.5.1-1695_open rails u2025.04.08-1707\runactivity.exe] => (Allow) G:\program files\7_1.5.1open rails t1.5.1-1695_open rails u2025.04.08-1707\runactivity.exe => No File
FirewallRules: [{BC37F336-7A54-4459-A27C-6A713143D589}] => (Block) G:\program files\7_1.5.1open rails t1.5.1-1695_open rails u2025.04.08-1707\runactivity.exe => No File
FirewallRules: [{C3EF49FE-DDA6-4FF4-998B-EACADA38B0F3}] => (Block) G:\program files\7_1.5.1open rails t1.5.1-1695_open rails u2025.04.08-1707\runactivity.exe => No File
FirewallRules: [TCP Query User{525BA461-8C94-4DC9-8619-5C0AF880B6D1}G:\program files\8_1.5.1open rails t1.5.1-1741_open rails u2025.04.27-0722\runactivity.exe] => (Allow) G:\program files\8_1.5.1open rails t1.5.1-1741_open rails u2025.04.27-0722\runactivity.exe => No File
FirewallRules: [UDP Query User{55E30FED-07E8-45FE-9028-472314ACA7EE}G:\program files\8_1.5.1open rails t1.5.1-1741_open rails u2025.04.27-0722\runactivity.exe] => (Allow) G:\program files\8_1.5.1open rails t1.5.1-1741_open rails u2025.04.27-0722\runactivity.exe => No File
FirewallRules: [{49BE3D97-1255-48BC-BDCC-427720D16215}] => (Block) G:\program files\8_1.5.1open rails t1.5.1-1741_open rails u2025.04.27-0722\runactivity.exe => No File
FirewallRules: [{FE375275-CCF3-40AC-AD5A-C85C5834D3AB}] => (Block) G:\program files\8_1.5.1open rails t1.5.1-1741_open rails u2025.04.27-0722\runactivity.exe => No File
FirewallRules: [TCP Query User{2527ED28-F7C3-404A-B062-38EADA2B6692}G:\program files\9_1.5.1open rails t1.5.1-1741_open rails u2025.04.29-1037\runactivity.exe] => (Allow) G:\program files\9_1.5.1open rails t1.5.1-1741_open rails u2025.04.29-1037\runactivity.exe => No File
FirewallRules: [UDP Query User{4FEAAE49-EE51-4BB9-AE58-D531ED85F99D}G:\program files\9_1.5.1open rails t1.5.1-1741_open rails u2025.04.29-1037\runactivity.exe] => (Allow) G:\program files\9_1.5.1open rails t1.5.1-1741_open rails u2025.04.29-1037\runactivity.exe => No File
FirewallRules: [{8D52AC81-0A40-49B8-BC87-CC4EA49DBD62}] => (Block) G:\program files\9_1.5.1open rails t1.5.1-1741_open rails u2025.04.29-1037\runactivity.exe => No File
FirewallRules: [{1C330858-BBC0-42CE-8931-2CCDA6C6F78F}] => (Block) G:\program files\9_1.5.1open rails t1.5.1-1741_open rails u2025.04.29-1037\runactivity.exe => No File
FirewallRules: [TCP Query User{3340C93C-02E3-4100-9489-960B26705622}G:\program files\9_10_1.5.1open rails t1.5.1-1887_open rails u2025.05.30-0852\runactivity.exe] => (Allow) G:\program files\9_10_1.5.1open rails t1.5.1-1887_open rails u2025.05.30-0852\runactivity.exe => No File
FirewallRules: [UDP Query User{22775503-1B4F-41E7-956D-19F586C070E5}G:\program files\9_10_1.5.1open rails t1.5.1-1887_open rails u2025.05.30-0852\runactivity.exe] => (Allow) G:\program files\9_10_1.5.1open rails t1.5.1-1887_open rails u2025.05.30-0852\runactivity.exe => No File
FirewallRules: [{5747AC4B-2B0D-4049-8095-72F7C58AF3C6}] => (Block) G:\program files\9_10_1.5.1open rails t1.5.1-1887_open rails u2025.05.30-0852\runactivity.exe => No File
FirewallRules: [{C59C46CD-9062-459F-A738-275B2C99B9CC}] => (Block) G:\program files\9_10_1.5.1open rails t1.5.1-1887_open rails u2025.05.30-0852\runactivity.exe => No File
FirewallRules: [TCP Query User{68CD259E-8226-4164-BD4A-CE0309B4B557}G:\program files\9_11_t1.6-rc3_open rails u2025.07.08-0323 2025\runactivity.exe] => (Allow) G:\program files\9_11_t1.6-rc3_open rails u2025.07.08-0323 2025\runactivity.exe => No File
FirewallRules: [UDP Query User{E6F3E829-8678-4B29-B09A-6D811579F6E5}G:\program files\9_11_t1.6-rc3_open rails u2025.07.08-0323 2025\runactivity.exe] => (Allow) G:\program files\9_11_t1.6-rc3_open rails u2025.07.08-0323 2025\runactivity.exe => No File
FirewallRules: [{CA6A1113-202F-480D-89B7-82B6A33D09B5}] => (Block) G:\program files\9_11_t1.6-rc3_open rails u2025.07.08-0323 2025\runactivity.exe => No File
FirewallRules: [{8BEE5270-00BD-44E3-B3D1-98F08D0EC739}] => (Block) G:\program files\9_11_t1.6-rc3_open rails u2025.07.08-0323 2025\runactivity.exe => No File
FirewallRules: [TCP Query User{EE7BA554-F9E0-4ACF-B401-B7ACAAF53050}G:\program files\00_1.5.1open rails t1.5.1-1435_open rails u2024.12.21-0937\runactivity.exe] => (Allow) G:\program files\00_1.5.1open rails t1.5.1-1435_open rails u2024.12.21-0937\runactivity.exe => No File
FirewallRules: [UDP Query User{650615D1-5635-4486-BD08-097976123EF5}G:\program files\00_1.5.1open rails t1.5.1-1435_open rails u2024.12.21-0937\runactivity.exe] => (Allow) G:\program files\00_1.5.1open rails t1.5.1-1435_open rails u2024.12.21-0937\runactivity.exe => No File
FirewallRules: [{32455F0E-158B-432E-A066-32827612F53E}] => (Block) G:\program files\00_1.5.1open rails t1.5.1-1435_open rails u2024.12.21-0937\runactivity.exe => No File
FirewallRules: [{A348782D-9F7D-46DB-B239-814148702FD3}] => (Block) G:\program files\00_1.5.1open rails t1.5.1-1435_open rails u2024.12.21-0937\runactivity.exe => No File
FirewallRules: [TCP Query User{9012651D-775F-4CF5-8D97-9C00D54A836D}G:\program files\open rails t1.5.1-153_open rails u2022.12.20-1421 2022-12-20 14-28-11\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-153_open rails u2022.12.20-1421 2022-12-20 14-28-11\runactivity.exe => No File
FirewallRules: [UDP Query User{A845193B-1AF2-4BB4-8F61-125025DFD1F4}G:\program files\open rails t1.5.1-153_open rails u2022.12.20-1421 2022-12-20 14-28-11\runactivity.exe] => (Allow) G:\program files\open rails t1.5.1-153_open rails u2022.12.20-1421 2022-12-20 14-28-11\runactivity.exe => No File
FirewallRules: [{14B4846A-E8B9-4B6F-AF19-626FA423B43F}] => (Block) G:\program files\open rails t1.5.1-153_open rails u2022.12.20-1421 2022-12-20 14-28-11\runactivity.exe => No File
FirewallRules: [{DAAEF077-55AE-4784-877C-A3718F4CB9B5}] => (Block) G:\program files\open rails t1.5.1-153_open rails u2022.12.20-1421 2022-12-20 14-28-11\runactivity.exe => No File
FirewallRules: [TCP Query User{872AD016-26B2-4187-9FBA-36C5523782FB}G:\program files\open rails t1.5.1-535_open rails u2023.08.08-1022 2023-08-08 11-28-12\runactivity.exe] => (Block) G:\program files\open rails t1.5.1-535_open rails u2023.08.08-1022 2023-08-08 11-28-12\runactivity.exe => No File
FirewallRules: [UDP Query User{2422E037-DBFA-4F7A-A2F7-DBC54C7A8B2E}G:\program files\open rails t1.5.1-535_open rails u2023.08.08-1022 2023-08-08 11-28-12\runactivity.exe] => (Block) G:\program files\open rails t1.5.1-535_open rails u2023.08.08-1022 2023-08-08 11-28-12\runactivity.exe => No File
FirewallRules: [TCP Query User{9D539C19-82A1-45BC-940C-1AA56E04C389}G:\program files\9_12_t1.6-rc4_open rails u2025.07.16-2122\runactivity.exe] => (Allow) G:\program files\9_12_t1.6-rc4_open rails u2025.07.16-2122\runactivity.exe => No File
FirewallRules: [UDP Query User{5BF9D972-A9FC-48D0-AF7F-6FAB96CE8F7E}G:\program files\9_12_t1.6-rc4_open rails u2025.07.16-2122\runactivity.exe] => (Allow) G:\program files\9_12_t1.6-rc4_open rails u2025.07.16-2122\runactivity.exe => No File
FirewallRules: [{54AAB807-0050-453D-85BA-28CEF64212C2}] => (Block) G:\program files\9_12_t1.6-rc4_open rails u2025.07.16-2122\runactivity.exe => No File
FirewallRules: [{4A5FCE73-288D-4FE8-90FF-C79AC30428CE}] => (Block) G:\program files\9_12_t1.6-rc4_open rails u2025.07.16-2122\runactivity.exe => No File
FirewallRules: [TCP Query User{6399CEBD-6140-4E2C-8195-949D65FC1E7C}G:\program files\9_13_t1.6-rc7_open rails u2025.07.29-1938 2025\runactivity.exe] => (Allow) G:\program files\9_13_t1.6-rc7_open rails u2025.07.29-1938 2025\runactivity.exe => No File
FirewallRules: [UDP Query User{81942B0C-E683-4A82-AC2F-355B80E2B26C}G:\program files\9_13_t1.6-rc7_open rails u2025.07.29-1938 2025\runactivity.exe] => (Allow) G:\program files\9_13_t1.6-rc7_open rails u2025.07.29-1938 2025\runactivity.exe => No File
FirewallRules: [{9557CAE3-BB5F-40BF-BD72-B0F1AA933AC8}] => (Block) G:\program files\9_13_t1.6-rc7_open rails u2025.07.29-1938 2025\runactivity.exe => No File
FirewallRules: [{19776E15-B47F-48CD-8C05-9574FD13EF66}] => (Block) G:\program files\9_13_t1.6-rc7_open rails u2025.07.29-1938 2025\runactivity.exe => No File
FirewallRules: [TCP Query User{0AFB80CF-B6E0-4525-9F23-AF9FBDC9FC9A}G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe] => (Allow) G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [UDP Query User{CDED80D6-42F6-465F-855B-12A4BF707C01}G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe] => (Allow) G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{11EFFEF8-5E7A-4752-A606-FF42D4441E2B}] => (Block) G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{6DB074C8-7562-4640-ABD4-F29AA73A4A0A}] => (Block) G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [TCP Query User{DBCB7002-3D03-403E-BC99-D245A9486A7C}G:\program files\open rails u2024.05.30-0007 2024-05-30 01-13-10\runactivity.exe] => (Allow) G:\program files\open rails u2024.05.30-0007 2024-05-30 01-13-10\runactivity.exe => No File
FirewallRules: [UDP Query User{EF144E89-31D6-4472-AC5B-A07359078931}G:\program files\open rails u2024.05.30-0007 2024-05-30 01-13-10\runactivity.exe] => (Allow) G:\program files\open rails u2024.05.30-0007 2024-05-30 01-13-10\runactivity.exe => No File
FirewallRules: [{E897DAC8-2A33-4C8C-AECB-364CAB713D97}] => (Block) G:\program files\open rails u2024.05.30-0007 2024-05-30 01-13-10\runactivity.exe => No File
FirewallRules: [{1014DDF6-1654-4430-836F-97492454A77E}] => (Block) G:\program files\open rails u2024.05.30-0007 2024-05-30 01-13-10\runactivity.exe => No File
FirewallRules: [TCP Query User{C86A32A1-B8AA-4A4A-8FE3-68F960DAFE6F}G:\program files\open rails u2024.04.26-0238 2024-04-26 03-43-27\runactivity.exe] => (Allow) G:\program files\open rails u2024.04.26-0238 2024-04-26 03-43-27\runactivity.exe => No File
FirewallRules: [UDP Query User{84BC9435-42C8-4BC9-B3A6-6BAEFC38D7D6}G:\program files\open rails u2024.04.26-0238 2024-04-26 03-43-27\runactivity.exe] => (Allow) G:\program files\open rails u2024.04.26-0238 2024-04-26 03-43-27\runactivity.exe => No File
FirewallRules: [{65868413-9B70-453E-91E8-2A1CA97F2793}] => (Block) G:\program files\open rails u2024.04.26-0238 2024-04-26 03-43-27\runactivity.exe => No File
FirewallRules: [{0599C0DD-3B28-4151-9731-859B71AED22B}] => (Block) G:\program files\open rails u2024.04.26-0238 2024-04-26 03-43-27\runactivity.exe => No File
FirewallRules: [TCP Query User{3A2ED3CE-4E18-4C28-B39E-C0880EBFBBA0}G:\program files\open rails u2024.05.10-0752 2024-05-10 09-11-18\runactivity.exe] => (Allow) G:\program files\open rails u2024.05.10-0752 2024-05-10 09-11-18\runactivity.exe => No File
FirewallRules: [UDP Query User{9ACBFC33-0EA2-4C76-942B-7359E1E1C0F7}G:\program files\open rails u2024.05.10-0752 2024-05-10 09-11-18\runactivity.exe] => (Allow) G:\program files\open rails u2024.05.10-0752 2024-05-10 09-11-18\runactivity.exe => No File
FirewallRules: [{622E423B-AE06-4023-86AE-D35D71751F7A}] => (Block) G:\program files\open rails u2024.05.10-0752 2024-05-10 09-11-18\runactivity.exe => No File
FirewallRules: [{128F1BCA-9673-44CA-9DF1-E2CCCD28DA62}] => (Block) G:\program files\open rails u2024.05.10-0752 2024-05-10 09-11-18\runactivity.exe => No File
FirewallRules: [TCP Query User{F946F1E4-9586-42F2-8964-9404344B9C0D}G:\program files\open rails u2024.05.01-1522 2024-05-01 16-28-13\runactivity.exe] => (Allow) G:\program files\open rails u2024.05.01-1522 2024-05-01 16-28-13\runactivity.exe => No File
FirewallRules: [UDP Query User{5436BFA3-4F47-47D4-B692-791ACEE19B07}G:\program files\open rails u2024.05.01-1522 2024-05-01 16-28-13\runactivity.exe] => (Allow) G:\program files\open rails u2024.05.01-1522 2024-05-01 16-28-13\runactivity.exe => No File
FirewallRules: [{65FA3F18-ADD6-4D2B-A48F-1A0DB5D46144}] => (Block) G:\program files\open rails u2024.05.01-1522 2024-05-01 16-28-13\runactivity.exe => No File
FirewallRules: [{A162B0CB-35E3-4B46-A4B7-EA9634CC135A}] => (Block) G:\program files\open rails u2024.05.01-1522 2024-05-01 16-28-13\runactivity.exe => No File
FirewallRules: [{B932B083-61B5-4708-9E7D-F965A39CF204}] => (Allow) C:\Users\Mi\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [{A119378C-2826-4540-8809-DC9B2D820B86}] => (Allow) C:\Users\Mi\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [TCP Query User{AF819C56-4592-45F6-9A74-49F86F2F1009}D:\games\railroader.build.18404845\railroader.exe] => (Allow) D:\games\railroader.build.18404845\railroader.exe () [File not signed]
FirewallRules: [UDP Query User{590AED6E-A34F-493D-A73C-88FEC0145FBD}D:\games\railroader.build.18404845\railroader.exe] => (Allow) D:\games\railroader.build.18404845\railroader.exe () [File not signed]
FirewallRules: [{383FA83E-9515-459C-B7C5-4606003CB748}] => (Block) D:\games\railroader.build.18404845\railroader.exe () [File not signed]
FirewallRules: [{9553481E-B4CA-4379-AD11-D20226CE6F81}] => (Block) D:\games\railroader.build.18404845\railroader.exe () [File not signed]
FirewallRules: [TCP Query User{0B5F36B3-3D2E-48AD-B649-9FA185E824F7}D:\games\derail.valley.build.19277896\derailvalley.exe] => (Allow) D:\games\derail.valley.build.19277896\derailvalley.exe () [File not signed]
FirewallRules: [UDP Query User{286E0D37-90F4-4AF7-BF02-B4841BE3AA8B}D:\games\derail.valley.build.19277896\derailvalley.exe] => (Allow) D:\games\derail.valley.build.19277896\derailvalley.exe () [File not signed]
FirewallRules: [{2F3EAB9D-CF29-42FC-8321-59D574959D6B}] => (Block) D:\games\derail.valley.build.19277896\derailvalley.exe () [File not signed]
FirewallRules: [{3C6075ED-5300-47E7-AAFC-7080C1AE9C6B}] => (Block) D:\games\derail.valley.build.19277896\derailvalley.exe () [File not signed]
FirewallRules: [{170E580C-F52B-4590-B2EE-ED2597E359DA}] => (Allow) C:\Users\Mi\AppData\Roaming\utorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [{5CA67D32-4B67-4854-853B-FCBCC8E11891}] => (Allow) C:\Users\Mi\AppData\Roaming\utorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [TCP Query User{AFEAAC5F-2BBF-459E-AC38-143C0D0825D9}D:\games\train-valley\train valley origins.exe] => (Allow) D:\games\train-valley\train valley origins.exe => No File
FirewallRules: [UDP Query User{5F551C61-97DA-40C6-BE12-F92474F0A415}D:\games\train-valley\train valley origins.exe] => (Allow) D:\games\train-valley\train valley origins.exe => No File
FirewallRules: [{BB013C00-9D01-4F88-BA9E-0C1C484F3C64}] => (Block) D:\games\train-valley\train valley origins.exe => No File
FirewallRules: [{7662C757-6A2B-4A5A-ABA6-9FC5CE331C26}] => (Block) D:\games\train-valley\train valley origins.exe => No File
FirewallRules: [TCP Query User{793AC3B9-C248-4EE7-A654-07AA85EE6BA9}D:\games\train-valley origins\train valley origins.exe] => (Allow) D:\games\train-valley origins\train valley origins.exe () [File not signed]
FirewallRules: [UDP Query User{29115835-F314-411C-B85B-A96503048D45}D:\games\train-valley origins\train valley origins.exe] => (Allow) D:\games\train-valley origins\train valley origins.exe () [File not signed]
FirewallRules: [{EC0D3D8A-78C3-4FFA-BDA8-20C9DB1DC16B}] => (Block) D:\games\train-valley origins\train valley origins.exe () [File not signed]
FirewallRules: [{758FD232-2C2D-4869-B2BE-1013607AEAF9}] => (Block) D:\games\train-valley origins\train valley origins.exe () [File not signed]
FirewallRules: [TCP Query User{C885E9F3-CDDF-4236-9950-3A423FF1D35C}D:\program files\gog games\railway empire\railwayempire.exe] => (Allow) D:\program files\gog games\railway empire\railwayempire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [UDP Query User{9C134915-84D5-42F2-9D62-FB9EF65522E3}D:\program files\gog games\railway empire\railwayempire.exe] => (Allow) D:\program files\gog games\railway empire\railwayempire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [{A613A39E-C9F0-4588-8E13-81A018D10A7E}] => (Block) D:\program files\gog games\railway empire\railwayempire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [{FB05C267-B871-4806-A1B3-53F1C44895BA}] => (Block) D:\program files\gog games\railway empire\railwayempire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [{7CD0AEEF-77AE-4D8E-B0DC-99D771146580}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{9D9220CD-9922-40D9-80FA-8EC91D932E5F}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{170325C8-BE93-486C-97AC-AA2C7A476E33}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{23E13E10-D12A-409B-AB22-BD773D5ACB5C}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{0F93DD6A-DBB0-4CEB-A997-72846692B478}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Transport Fever 2\TransportFever2.exe () [File not signed]
FirewallRules: [{5AB7CD86-7825-4D49-AEFD-6DC103F65650}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Transport Fever 2\TransportFever2.exe () [File not signed]
FirewallRules: [{D0C5693F-4D9D-4CD2-9F13-C8B13C581BEB}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Sim Companies\Sim Companies.exe (Sim Companies) [File not signed]
FirewallRules: [{6C6B34FB-921F-4BB1-A753-176609BF2261}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Sim Companies\Sim Companies.exe (Sim Companies) [File not signed]
FirewallRules: [{D24764B3-F05B-4B07-A5F2-976F2D0871AC}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Farm Manager\FarmManager.exe () [File not signed]
FirewallRules: [{DEF59782-FC57-4544-9055-E4A2228791E9}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Farm Manager\FarmManager.exe () [File not signed]
FirewallRules: [{5E97CD05-0AA0-4F7B-BF81-30E1EA5B445A}] => (Allow) D:\Program Files\Nox\bin\Nox.exe (Nox Limited -> Duodian Technology Co. Ltd.)
FirewallRules: [{D37A19B4-9D4C-47AD-A379-D1468EB8BFEE}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe (Nox Limited -> Nox Limited Corporation)
FirewallRules: [{C45400D5-E917-4519-A020-044D6C604474}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Graveyard Keeper\Graveyard Keeper.exe () [File not signed]
FirewallRules: [{48B013A3-9832-48BC-8348-9691AAA850F9}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Graveyard Keeper\Graveyard Keeper.exe () [File not signed]
FirewallRules: [{8FC87640-093E-4C86-A991-5A25B9CCAC8A}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe (Now.gg, INC -> Bluestack Systems, Inc.)
FirewallRules: [{2A578A1B-8F70-428D-8758-66EB7408A3F1}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe => No File
FirewallRules: [{79D5035A-FBE8-482F-8FB9-CF1A5EDDE4FB}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Now.gg, INC -> BlueStack Systems)
FirewallRules: [{AB1B52C7-DD66-4AB2-8F0D-103B85DB6AB9}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe (Now.gg, INC -> The Qt Company Ltd.)
FirewallRules: [{9343EB8E-4F37-4328-A457-4A908740DE4F}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAIRun.exe (Now.gg, INC -> BlueStack Systems)
==================== Restore Points =========================
12-06-2026 17:31:18 Naplánovaný kontrolní bod
30-06-2026 11:49:05 Naplánovaný kontrolní bod
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (07/10/2026 10:19:47 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 54758125
Error: (07/10/2026 10:19:47 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 54758125
Error: (07/10/2026 10:19:47 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (07/06/2026 06:02:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: opencltest.exe, verze: 25.2.7.2, časové razítko: 0x68feaf4c
Název chybujícího modulu: igdrcl64.dll, verze: 20.19.15.4531, časové razítko: 0x57ed260c
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000007a74a
ID chybujícího procesu: 0x29d0
Čas spuštění chybující aplikace: 0x01dd0d60db807dde
Cesta k chybující aplikaci: C:\Program Files\LibreOffice\program\opencltest.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\igdrcl64.dll
ID zprávy: 0f9bb9d5-c78e-4976-9c01-2ada9aca9f03
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (07/06/2026 06:02:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: soffice.bin, verze: 25.2.7.2, časové razítko: 0x68fed0f5
Název chybujícího modulu: igdrcl64.dll, verze: 20.19.15.4531, časové razítko: 0x57ed260c
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000007a74a
ID chybujícího procesu: 0x1b14
Čas spuštění chybující aplikace: 0x01dd0d60d87e2f9b
Cesta k chybující aplikaci: C:\Program Files\LibreOffice\program\soffice.bin
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\igdrcl64.dll
ID zprávy: da3dc65f-d6e2-436f-a93e-f3b4f993b82a
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (07/06/2026 10:08:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: bad_module_info, verze: 0.0.0.0, časové razítko: 0x00000000
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x00007ff994e23080
ID chybujícího procesu: 0x2b88
Čas spuštění chybující aplikace: 0x01dd0d1a4127d09b
Cesta k chybující aplikaci: bad_module_info
Cesta k chybujícímu modulu: unknown
ID zprávy: 6e07c777-1c68-42a2-ad96-02acf63c4895
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (07/04/2026 05:23:46 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (I:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (07/04/2026 05:23:43 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na (G:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
System errors:
=============
Error: (07/11/2026 09:29:56 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_2d26e21 byla ukončena s následující chybou:
Zařízení není připraveno.
Error: (07/11/2026 09:26:47 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_2d26e21 byla ukončena s následující chybou:
Zařízení není připraveno.
Error: (07/10/2026 06:35:40 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_2c80b82 byla ukončena s následující chybou:
Zařízení není připraveno.
Error: (07/10/2026 04:52:01 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_28980d1 byla ukončena s následující chybou:
Zařízení není připraveno.
Error: (07/10/2026 10:19:50 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_2422e6a byla ukončena s následující chybou:
Zařízení není připraveno k použití.
Error: (07/09/2026 06:05:27 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_21ac873 byla ukončena s následující chybou:
Zařízení není připraveno k použití.
Error: (07/08/2026 04:53:16 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_1d3fc8b byla ukončena s následující chybou:
Zařízení není připraveno.
Error: (07/08/2026 12:28:05 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_1cb287b byla ukončena s následující chybou:
Zařízení není připraveno.
Windows Defender:
================
TimeCreated : 10.07.2026 11:29:03
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (C4388B8C-15FC-462D-8498-0717DA9A16FB}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 08.07.2026 17:19:39
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (09F9B587-DA17-4B2D-88D8-AD9F5D5B9BD2}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 06.07.2026 10:12:42
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (275EC0C6-13C1-4527-B0B1-2050100DB91A}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 05.07.2026 11:34:02
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (9B35F837-093C-45BD-AE7C-62CF4A8C781C}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 04.07.2026 10:14:31
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (E4D70523-9EB3-4764-81F0-19AF5D1ABB5D}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 03.07.2026 10:15:10
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (35E18701-16D0-4913-9D41-3876E4C3C9D5}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 01.07.2026 10:22:27
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (72C0977E-B651-4618-B1B6-94FF849E0F07}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 30.06.2026 11:21:04
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (E14DBD42-0AB4-4EAD-8CB2-2270A6DD166A}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
CodeIntegrity:
===============
Date: 2026-07-11 09:34:06
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2026-07-11 09:29:44
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
Date: 2026-07-11 09:27:47
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. F1 ZA 12/11/2014
Motherboard: Gigabyte Technology Co., Ltd. H81M-S2H
Processor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Percentage of memory in use: 26%
Total physical RAM: 16336.03 MB
Available physical RAM: 11927.62 MB
Total Virtual: 18768.03 MB
Available Virtual: 11979.23 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:199.39 GB) (Free:31.38 GB) (Model: Patriot P220 1024GB) NTFS
Drive d: (Data) (Fixed) (Total:753.87 GB) (Free:127.08 GB) (Model: Patriot P220 1024GB) NTFS
Drive e: () (Fixed) (Total:99.56 GB) (Free:17.23 GB) (Model: ST1000DM003-1ER162) NTFS ==>[system with boot components (obtained from drive)]
Drive g: () (Fixed) (Total:831.51 GB) (Free:113.55 GB) (Model: ST1000DM003-1ER162) NTFS
Drive h: () (Fixed) (Total:100 GB) (Free:91.86 GB) (Model: ST500DM002-1BD142) NTFS
Drive i: (Nový svazek) (Fixed) (Total:365.75 GB) (Free:84.8 GB) (Model: ST500DM002-1BD142) NTFS
Drive j: (HUAWEI) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
\\?\Volume{6741ba27-cb49-4044-bf66-822fe3449e04}\ () (Fixed) (Total:0.5 GB) (Free:0.08 GB) NTFS
\\?\Volume{ff47f8f6-0000-0000-0000-f0e318000000}\ () (Fixed) (Total:0.44 GB) (Free:0.11 GB) NTFS
\\?\Volume{ed95946d-90ec-4dd8-bf37-87f597a824ed}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 953.9 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: FF47F8F6)
Partition 1: (Active) - (Size=99.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)
Partition 3: (Not Active) - (Size=831.5 GB) - (Type=05)
==========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 0E0D316F)
Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=365.8 GB) - (Type=0F Extended)
==================== End of Addition.txt =======================
Prosím o kontrolu PC
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Prosím o kontrolu PC
Jestli jsem si spletl vlákno, tak pardon.
Re: Prosím o kontrolu PC
Ahoj,
dobre robis, pred pouzivanim IB treba PC vycistit
1. vycisti PC s Ccleanerom, vcetne registrov
Restart
2. vycisti PC s MBAM - log sem
3. s prikazoveho riadku spusteneho ako spravca zadaj
sfc /scannow
4. vloz aktualne logy frst
dobre robis, pred pouzivanim IB treba PC vycistit
1. vycisti PC s Ccleanerom, vcetne registrov
Restart
2. vycisti PC s MBAM - log sem
3. s prikazoveho riadku spusteneho ako spravca zadaj
sfc /scannow
4. vloz aktualne logy frst
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu PC
Zde https://www.ccleaner.com/cs-cz/ccleaner/builds jsem stáhnul Ccleaner, dal spusti jako správce a nic se nestalo. Zkoušel jsem i offline instalaci a nic.
Takto to vypadalo ve správci úloh
Až jsem stáhnul portable verzi a spustil CCleaner64.exe, tak Ccleaner se spustil a ja pročistil PC.
Takto to vypadalo ve správci úloh
- ccleaner.jpg (101.09 KiB) Zobrazeno 347 x
Re: Prosím o kontrolu PC
Zde https://www.bleepingcomputer.com/downlo ... i-malware/ jsem stáhnul MBAM, ale vůbec nevím jak tam vytvořit log. Něco to oskenovalo a hotovo. Díval jsem se i zde https://forum.viry.cz/viewtopic.php?f=29&t=144868 na tento návod a obrázky chybí a popisováná nastavení tam nejsou. Nevím tedy jak dál postupovat.
- mbam.jpg (60.16 KiB) Zobrazeno 347 x
Re: Prosím o kontrolu PC
1. Ccleaner - pokial sa podarilo vycistit vcetne registrov OK
2. MBAM - taktiez pokial prescanoval a vycistil OK - bez logu sa zaobidem
pokracuj sfc
2. MBAM - taktiez pokial prescanoval a vycistil OK - bez logu sa zaobidem
pokracuj sfc
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu PC
Tento scan trval cca 13hod a já to vypl, protože to bylo nekonečné.
Malwarebytes
www.malwarebytes.com
-Log Details-
Scan Date: 7/13/2026
Scan Time: 5:29 PM
Log File: 959be926-7ecf-11f1-9072-000000000000.json
-Software Information-
Version: 5.5.7.255
Components Version: 157.0.5633
Update Package Version: 1.0.112088
License: Trial
-System Information-
OS: Windows 10 (Build 19045.4046)
CPU: x64
File System: NTFS
User: DESKTOP-8N7P3M7\Mi
-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Cancelled
Objects Scanned: 348 243
Threats Detected: 0
Threats Quarantined: 0
Scan Duration: 13 hr, 57 min, 26 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Files Scanned-
C:\
D:\
E:\
G:\
H:\
I:\
-Scan Details-
Process: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registry Key: 0
(No malicious items detected)
Registry Value: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 0
(No malicious items detected)
File: 0
(No malicious items detected)
Physical Sector: 0
(No malicious items detected)
WMI: 0
(No malicious items detected)
(end)
toto bez kontroly disků
Malwarebytes
www.malwarebytes.com
-Log Details-
Scan Date: 7/14/2026
Scan Time: 4:39 PM
Log File: c6db6ddd-8d69-478e-a0b9-0a80bae308f2.json
-Software Information-
Version: 5.5.7.255
Components Version: 157.0.5633
Update Package Version: 1.0.112088
License: Trial
-System Information-
OS: Windows 10 (Build 19045.4046)
CPU: x64
File System: NTFS
User: DESKTOP-8N7P3M7\Mi
-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 128 196
Threats Detected: 0
Threats Quarantined: 0
Scan Duration: 0 min, 17 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Disabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registry Key: 0
(No malicious items detected)
Registry Value: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 0
(No malicious items detected)
File: 0
(No malicious items detected)
Physical Sector: 0
(No malicious items detected)
WMI: 0
(No malicious items detected)
(end)
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-07-2026 01
Ran by Mi (administrator) on DESKTOP-8N7P3M7 (ATComputers AUTOCONT OFFICEPRO) (14-07-2026 17:00:07)
Running from C:\Users\Mi\Desktop\FRST64.exe
Loaded Profiles: Mi
Platform: Microsoft Windows 10 Pro Version 22H2 19045.4046 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe ->) (Alexey Nicolaychuk -> ) C:\Program Files (x86)\RivaTuner Statistics Server\EncoderServer.exe
(C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe ->) (Alexey Nicolaychuk -> ) C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Windows\SysWOW64\svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(explorer.exe ->) (Gemfor s.r.o. -> Gemfor s.r.o.) C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\Manager.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD64.EXE
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\DDSHelper.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_901d8cfde13e2b8b\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_901d8cfde13e2b8b\Display.NvContainer\NVDisplay.Container.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Alexey Nicolaychuk -> ) C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
(svchost.exe ->) (Gemfor s.r.o. -> Gemfor s.r.o.) C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\Manager.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Skype Software Sarl -> ) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(svchost.exe ->) (Skype Software Sarl -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeApp.exe
==================== Registry (Whitelisted) ===================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16418560 2023-02-10] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [T-Mobile CManager] => C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\Manager.exe [2171520 2017-12-05] (Gemfor s.r.o. -> Gemfor s.r.o.)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [Microsoft Edge Update] => C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.241.15\MicrosoftEdgeUpdateCore.exe [279384 2026-06-20] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [5773976 2026-06-25] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [electron.app.BlueStacks Services] => C:\Users\Mi\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe [162219656 2024-05-08] (Now.gg, INC -> now.gg, Inc.)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {6acedf64-6514-11ef-af0c-ece137e8cf7e} - "J:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7aaa-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7acc-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {a47e8a88-23ce-11ee-aee9-a47831648add} - "K:\Autorun.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> "C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe" --first-run (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {E5897533-8B62-43F9-A56E-088239E4A9D4} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [303024 2026-06-21] (Now.gg, INC -> BlueStack Systems, Inc.)
Task: {C49A3735-D92A-4F65-8D99-8EE57DA3CCE3} - System32\Tasks\CCleanerCrashReporting => G:\Program Files\ccsetup\x64\CCleanerBugReport.exe [6140920 2026-06-19] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "G:\Program Files\ccsetup\LOG" --programpath "G:\Program Files\ccsetup" --guid "" --version "6.41.0.11567" --silent
Task: {2940DF58-89E3-4D31-B5CF-0D42589F6C9C} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem151.0.7910.0{FF72C57D-3D5D-4486-A191-8ACA220FC279} => C:\Program Files (x86)\Google\GoogleUpdater\151.0.7910.0\updater.exe [9600664 2026-06-24] (Google LLC -> Google LLC)
Task: {D44C4E78-5C2D-4D2B-94D2-EABF1616461F} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{9FA8F50E-AF30-45C9-A384-77B961C18A05} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {7D7FA9B8-96D1-47E0-9CB4-592B4F251B2E} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-382369773-1592508727-1391189433-1001Core{22470D11-467B-4882-B361-8EF9055909A5} => C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206944 2026-03-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {334F45D5-A697-4A2B-9EB3-CAAFDBB6803F} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-382369773-1592508727-1391189433-1001UA{671F0508-94A0-4724-ABB5-8BA8B99576AD} => C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206944 2026-03-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {BC58A3B7-C9BC-4923-9410-839F836A906B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-07-02] (Mozilla Corporation -> Mozilla Foundation)
Task: {C592614E-5533-45F7-BD42-31C79E60C02F} - System32\Tasks\Opera scheduled Autoupdate 1676197568 => C:\Users\Mi\AppData\Local\Programs\Opera\launcher.exe [2717592 2023-07-17] (Opera Norway AS -> Opera Software)
Task: {1B29A999-08B1-46D5-8DC6-AACFF38EB236} - System32\Tasks\RTSS => C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe [436544 2022-11-05] (Alexey Nicolaychuk -> )
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\CCleanerCrashReporting.job => G:\Program Files\ccsetup\x64\CCleanerBugReport.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{612b9d4c-0467-4ba5-b335-59ac54fb38a4}: [NameServer] 62.141.16.161 62.141.16.150
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: k8v5djar.default-release -> 308046B0AF4A39CB
FF DefaultProfile: k8v5djar.default-release -> 641D10338ABA448D
FF ProfilePath: C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\eki0xmrp.default [2023-02-12]
FF ProfilePath: C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release [2026-07-14]
FF DownloadDir: G:\Downloads
FF Extension: (New Tab) - C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release\Extensions\newtab@mozilla.org.xpi [2026-07-07]
FF Extension: (uBlock Origin) - C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release\Extensions\uBlock0@raymondhill.net.xpi [2026-07-10]
FF Extension: (Video DownloadHelper) - C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-11-19]
FF Extension: (Download Youtube Subtitles) - C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release\Extensions\{f137c1e1-0bc3-489c-b5b4-9b908a3b5e5c}.xpi [2026-04-02]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [No File]
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Mi\AppData\Local\Microsoft\Edge\User Data\Default [2026-07-14]
Edge DownloadDir: G:\Downloads
Edge Extension: (Dokumenty Google offline) - C:\Users\Mi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-24]
Edge Extension: (Edge relevant text changes) - C:\Users\Mi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-12-27]
Edge DownloadDir: Default -> G:\Downloads
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR Profile: C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable [2026-07-13]
OPR DownloadDir: G:\Downloads
OPR DefaultSearchURL: Opera Stable -> hxxps://www.google.com/search?client=opera&q={s ... utEncoding}
OPR DefaultSearchKeyword: Opera Stable -> g
OPR Extension: (Rich Hints Agent) - C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2026-06-27]
OPR Extension: (Opera Wallet) - C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2025-07-17]
OPR Extension: (Aria) - C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable\Extensions\igpdmclhhlcpoindmhkhillbfhdgoegm [2025-11-27]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2023-02-12]
OPR Extension: (opera-intro) - C:\Users\Mi\AppData\Local\Programs\Opera\100.0.4815.76\resources\opera_intro_extension [2023-07-26] [UpdateUrl:0] <==== ATTENTION
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 LibreOfficeMaintenance; C:\Program Files\LibreOffice\program\update_service.exe [123304 2026-07-06] (The Document Foundation -> The Document Foundation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11506480 2026-07-13] (Malwarebytes Inc -> Malwarebytes)
R2 MbnExt; C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\MbnExt.dll [422608 2017-04-13] (Gemfor s.r.o. -> Gemfor s.r.o.)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-07-13] (Malwarebytes Inc -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe [2150144 2026-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_901d8cfde13e2b8b\Display.NvContainer\NVDisplay.Container.exe [1275600 2025-09-23] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [534472 2024-02-22] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe [4608640 2026-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe [290744 2026-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [436320 2026-06-21] (Microsoft Windows Hardware Compatibility Publisher -> Bluestack System Inc.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [159296 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 ew_hwusbdev; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys [109568 2013-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 ew_usbenumfilter; C:\Windows\System32\drivers\ew_usbenumfilter.sys [14976 2012-12-22] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 huawei_enumerator; C:\Windows\System32\drivers\ew_jubusenum.sys [91648 2013-11-30] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 hwusb_cdcacm; C:\Windows\system32\DRIVERS\ew_cdcacm.sys [125952 2014-07-25] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 hwusb_wwanecm; C:\Windows\System32\drivers\ew_wwanecm.sys [380672 2014-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [82312 2026-06-01] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [235624 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [22120 2026-07-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\Drivers\farflt.sys [215656 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\Drivers\mbam.sys [81000 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [245864 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [190096 2026-07-13] (Malwarebytes Inc -> Malwarebytes)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [21888 2026-06-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [646536 2026-06-23] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [115120 2026-06-23] (Microsoft Windows -> Microsoft Corporation)
R1 YSDrv; C:\Program Files (x86)\Bignox\BigNoxVM\RT\YSDrv.sys [312776 2026-03-31] (Microsoft Windows Hardware Compatibility Publisher -> Nox Limited Corporation)
S1 axbfrsdj; \??\C:\Windows\system32\drivers\axbfrsdj.sys (No File)
S1 hosaiwng; \??\C:\Windows\system32\drivers\hosaiwng.sys (No File)
S1 mlangoti; \??\C:\Windows\system32\drivers\mlangoti.sys (No File)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-07-14 17:00 - 2026-07-14 17:00 - 000017457 _____ C:\Users\Mi\Desktop\FRST.txt
2026-07-14 17:00 - 2026-07-14 17:00 - 000000000 ____D C:\Users\Mi\Desktop\FRST-OlderVersion
2026-07-14 16:55 - 2026-07-14 16:55 - 000001240 _____ C:\Users\Mi\Desktop\Malwarebytes Custom Scan Report 2026-07-14 163908.txt
2026-07-14 07:27 - 2026-07-14 07:27 - 000001295 _____ C:\Users\Mi\Desktop\Malwarebytes Custom Scan Report 2026-07-13 172905.txt
2026-07-13 17:14 - 2026-07-13 17:14 - 000005841 _____ C:\Users\Mi\Desktop\Malwarebytes Threat Scan Report 2026-07-13 123208.txt
2026-07-13 12:30 - 2026-07-13 12:30 - 000190096 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2026-07-13 12:28 - 2026-07-14 17:01 - 000000000 ____D C:\Users\Mi\AppData\Local\Malwarebytes
2026-07-13 12:28 - 2026-07-13 12:28 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-07-13 12:28 - 2026-07-13 12:28 - 000002081 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2026-07-13 12:28 - 2026-07-13 12:28 - 000000000 ____D C:\Users\Mi\AppData\Local\Sentry
2026-07-13 12:27 - 2026-07-13 12:27 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-07-13 12:27 - 2026-07-13 12:27 - 000000000 ____D C:\Program Files\Malwarebytes
2026-07-13 12:14 - 2026-07-13 12:14 - 001408198 _____ C:\Users\Mi\Documents\cc_20260713_121425.reg
2026-07-13 11:37 - 2026-07-13 12:17 - 000000600 _____ C:\Windows\Tasks\CCleanerCrashReporting.job
2026-07-13 11:37 - 2026-07-13 11:37 - 000003314 _____ C:\Windows\system32\Tasks\CCleanerCrashReporting
2026-07-13 11:05 - 2026-07-13 11:05 - 000000000 ____D C:\ProgramData\Piriform
2026-07-12 09:28 - 2026-07-12 18:01 - 000000000 ____D C:\Users\Mi\Desktop\foto hodiny
2026-07-11 10:00 - 2026-07-14 17:00 - 000000000 ____D C:\FRST
2026-07-11 09:59 - 2026-07-14 17:00 - 002451456 _____ (Farbar) C:\Users\Mi\Desktop\FRST64.exe
2026-07-11 09:53 - 2026-07-11 09:54 - 000000031 _____ C:\Users\Mi\Desktop\prihlaseni viry-forum.txt
2026-07-07 17:21 - 2026-07-07 17:21 - 000316235 _____ C:\Users\Mi\Desktop\navod na pouziti budiku.pdf
2026-07-06 12:40 - 2026-07-13 17:01 - 000002103 _____ C:\Users\Mi\Desktop\Moje O₂ - BlueStacks App Player 2.lnk
2026-07-06 12:33 - 2026-07-13 17:01 - 000002131 _____ C:\Users\Mi\Desktop\Můj T-Mobile - BlueStacks App Player 2.lnk
2026-07-06 10:53 - 2026-07-06 10:53 - 000000000 ____D C:\Users\Mi\AppData\Local\HD-MultiInstanceManager
2026-07-06 09:37 - 2026-07-06 09:37 - 000000000 ____D C:\Users\Mi\AppData\Roaming\HD-Player
2026-07-06 09:36 - 2026-07-06 12:45 - 000000000 ____D C:\Users\Mi\AppData\Local\BlueStacks X
2026-07-06 09:36 - 2026-07-06 09:36 - 000000000 ____D C:\Users\Mi\AppData\Local\BSXCache
2026-07-06 09:35 - 2026-07-11 16:43 - 000000000 ____D C:\ProgramData\BlueStacks_nxt
2026-07-06 09:35 - 2026-07-06 17:26 - 000000000 ____D C:\Users\Mi\AppData\Roaming\bluestacks-services
2026-07-06 09:35 - 2026-07-06 09:35 - 000006412 _____ C:\Users\Mi\-1.14-windows.xml
2026-07-06 09:35 - 2026-07-06 09:35 - 000003932 _____ C:\Windows\system32\Tasks\BlueStacksHelper_nxt
2026-07-06 09:35 - 2026-07-06 09:35 - 000002423 _____ C:\Users\Mi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BlueStacks Services.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000002120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueAI.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks 5.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000002057 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks Manager.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000002045 _____ C:\Users\Public\Desktop\BlueStacks Manager.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000001975 _____ C:\Users\Public\Desktop\BlueStacks 5.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000000000 ____D C:\Users\Mi\AppData\Local\HD-Player
2026-07-06 09:35 - 2026-07-06 09:35 - 000000000 ____D C:\Users\Mi\AppData\Local\bluestacks-services-updater
2026-07-06 09:34 - 2026-07-06 09:35 - 000000000 ____D C:\Program Files\BlueStacks_nxt
2026-07-06 09:30 - 2026-07-06 09:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks Store
2026-07-06 09:30 - 2026-07-06 09:30 - 000000000 ____D C:\Program Files (x86)\BlueStacks X
2026-07-02 11:18 - 2026-07-02 11:18 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2026-07-02 09:57 - 2026-07-06 12:42 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-06-15 09:59 - 2026-06-15 10:21 - 000000476 _____ C:\Users\Mi\Desktop\kod hdo elektrika.txt
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-07-14 16:54 - 2024-02-22 16:55 - 000000000 ____D C:\Windows\SystemTemp
2026-07-14 16:48 - 2023-02-12 15:06 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-07-14 16:44 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-07-14 16:44 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2026-07-14 07:28 - 2024-02-06 11:54 - 000000000 ____D C:\ProgramData\NVIDIA
2026-07-14 07:02 - 2023-02-09 17:07 - 000000000 ____D C:\Windows\system32\SleepStudy
2026-07-13 21:33 - 2023-02-12 16:30 - 000007602 _____ C:\Users\Mi\AppData\Local\Resmon.ResmonCfg
2026-07-13 17:01 - 2026-05-08 12:14 - 000001060 _____ C:\Users\Mi\Desktop\Pretty Good Solitaire.lnk
2026-07-13 17:01 - 2026-05-08 09:47 - 000002052 _____ C:\Users\Mi\Desktop\Recommended Software.lnk
2026-07-13 17:01 - 2026-05-08 09:47 - 000002002 _____ C:\Users\Mi\Desktop\Time Stopper.lnk
2026-07-13 17:01 - 2026-05-07 18:01 - 000001169 _____ C:\Users\Mi\Desktop\BVS Solitaire Collection.lnk
2026-07-13 17:01 - 2026-04-05 09:30 - 000002246 _____ C:\Users\Mi\Desktop\30+ Free Patience.lnk
2026-07-13 17:01 - 2025-10-22 19:43 - 000001222 _____ C:\Users\Mi\Desktop\Youtube Downloader HD.lnk
2026-07-13 17:01 - 2025-09-09 11:39 - 000001185 _____ C:\Users\Mi\Desktop\RivaTuner Statistics Server.lnk
2026-07-13 17:01 - 2025-09-09 11:39 - 000001096 _____ C:\Users\Mi\Desktop\OBS Studio.lnk
2026-07-13 17:01 - 2025-09-09 11:39 - 000001052 _____ C:\Users\Mi\Desktop\TeamSpeak 3 Client.lnk
2026-07-13 17:01 - 2025-09-09 11:39 - 000000984 _____ C:\Users\Mi\Desktop\4K Video Downloader+.lnk
2026-07-13 17:01 - 2025-09-09 11:39 - 000000821 _____ C:\Users\Mi\Desktop\Microsoft Edge.lnk
2026-07-13 17:01 - 2025-01-07 11:37 - 000002141 _____ C:\Users\Mi\Desktop\JDownloader 2.lnk
2026-07-13 17:01 - 2024-05-17 12:53 - 000001917 _____ C:\Users\Mi\Desktop\IrfanView 64 Thumbnails.lnk
2026-07-13 17:01 - 2024-05-17 12:53 - 000001043 _____ C:\Users\Mi\Desktop\IrfanView 64.lnk
2026-07-13 17:01 - 2023-08-09 13:25 - 000001140 _____ C:\Users\Mi\Desktop\Chess 2022.lnk
2026-07-13 17:01 - 2023-02-12 12:26 - 000001434 _____ C:\Users\Mi\Desktop\Prohlížeč Opera.lnk
2026-07-13 17:01 - 2023-02-11 17:43 - 000001155 _____ C:\Users\Mi\Desktop\MSI Afterburner.lnk
2026-07-13 17:01 - 2023-02-11 16:53 - 000001205 _____ C:\Users\Mi\Desktop\T-Mobile Internet Manager.lnk
2026-07-13 17:01 - 2023-02-11 14:43 - 000000923 _____ C:\Users\Mi\Desktop\Total Commander.lnk
2026-07-13 17:01 - 2023-02-11 14:43 - 000000603 _____ C:\Users\Mi\Desktop\Total Commander 64 bit.lnk
2026-07-13 16:29 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2026-07-13 12:39 - 2026-02-06 11:03 - 000000000 ____D C:\Users\Mi\AppData\Roaming\utorrent
2026-07-13 12:39 - 2025-10-11 17:41 - 000000000 ____D C:\Polda 6 CZ
2026-07-13 12:39 - 2025-01-08 12:51 - 000000000 ____D C:\Users\Mi\AppData\Roaming\BitTorrent
2026-07-13 12:28 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2026-07-13 12:28 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2026-07-13 12:22 - 2023-02-09 17:13 - 001693656 _____ C:\Windows\system32\PerfStringBackup.INI
2026-07-13 12:22 - 2019-12-07 16:43 - 000716894 _____ C:\Windows\system32\perfh005.dat
2026-07-13 12:22 - 2019-12-07 16:43 - 000145072 _____ C:\Windows\system32\perfc005.dat
2026-07-13 12:17 - 2025-02-20 19:21 - 000000000 ____D C:\Program Files\LibreOffice
2026-07-13 12:17 - 2023-02-09 17:07 - 000008192 ___SH C:\DumpStack.log.tmp
2026-07-13 12:17 - 2023-02-09 17:07 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-07-13 12:16 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2026-07-13 12:01 - 2024-08-12 16:01 - 000000000 ____D C:\Users\Mi\AppData\Local\CrashDumps
2026-07-13 12:01 - 2024-04-05 13:01 - 000000000 ____D C:\Users\Mi\AppData\Roaming\TS3Client
2026-07-13 12:01 - 2023-02-16 13:51 - 000000000 ____D C:\Users\Mi\AppData\Roaming\MPC-HC
2026-07-13 12:01 - 2023-02-09 17:06 - 000000000 ____D C:\Windows\Panther
2026-07-07 10:44 - 2025-02-06 19:58 - 000003564 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-382369773-1592508727-1391189433-1001
2026-07-07 10:44 - 2023-10-14 09:57 - 000002370 _____ C:\Users\Mi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-07-07 10:44 - 2023-02-11 16:55 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-382369773-1592508727-1391189433-1001
2026-07-07 10:44 - 2023-02-09 17:16 - 000003372 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-382369773-1592508727-1391189433-1001
2026-07-06 17:58 - 2025-02-15 19:50 - 000000000 ____D C:\Users\Mi\Desktop\text
2026-07-06 12:42 - 2023-02-12 15:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-07-06 11:28 - 2025-02-13 18:47 - 000000295 _____ C:\Users\Mi\d4ac4633ebd6440fa397b84f1bc94a3c.7z
2026-07-06 11:28 - 2025-02-13 17:56 - 000000000 ____D C:\Users\Mi\AppData\Local\Nox
2026-07-06 11:28 - 2023-02-09 17:12 - 000000000 ____D C:\Users\Mi
2026-07-06 10:32 - 2023-07-06 13:49 - 000000000 ____D C:\Users\Mi\Desktop\obrazky
2026-07-06 09:58 - 2025-02-13 17:58 - 000000000 ____D C:\Users\Mi\.android
2026-07-06 09:57 - 2026-03-31 11:59 - 000000000 ____D C:\Users\Mi\.BigNox
2026-07-06 09:57 - 2025-02-13 17:58 - 000000000 ____D C:\Users\Mi\vmlogs
2026-07-06 09:57 - 2025-02-13 17:58 - 000000000 ____D C:\Users\Mi\AppData\Local\NoxSrv
2026-07-06 09:37 - 2023-02-10 17:06 - 000000000 ____D C:\Users\Mi\AppData\Local\D3DSCache
2026-07-06 09:36 - 2024-02-23 15:02 - 000000000 ____D C:\Users\Mi\AppData\Local\cache
2026-07-06 09:34 - 2026-03-31 12:24 - 000000000 ____D C:\Users\Mi\AppData\Local\Bluestacks
2026-07-02 11:18 - 2023-02-12 15:06 - 000001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-06-23 10:19 - 2023-02-09 17:07 - 000000000 ____D C:\Windows\system32\Drivers\wd
2026-06-20 09:57 - 2023-02-12 17:14 - 000003970 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-382369773-1592508727-1391189433-1001UA{671F0508-94A0-4724-ABB5-8BA8B99576AD}
2026-06-20 09:57 - 2023-02-12 17:14 - 000003898 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-382369773-1592508727-1391189433-1001Core{22470D11-467B-4882-B361-8EF9055909A5}
2026-06-20 09:30 - 2023-02-09 17:07 - 000003640 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-20 09:30 - 2023-02-09 17:07 - 000003514 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== Files in the root of some directories ========
2023-02-11 14:54 - 2023-02-11 14:54 - 000000025 _____ () C:\Users\Mi\AppData\Roaming\alsoft.ini
2023-02-13 13:04 - 2026-03-23 18:27 - 000000000 _____ () C:\Users\Mi\AppData\Roaming\FileIn.cns
2023-02-13 13:04 - 2026-03-23 18:27 - 000000000 _____ () C:\Users\Mi\AppData\Roaming\FileOut.cns
2023-02-12 16:30 - 2026-07-13 21:33 - 000007602 _____ () C:\Users\Mi\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-07-2026 01
Ran by Mi (14-07-2026 17:01:18)
Running from C:\Users\Mi\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.4046 (X64) (2023-02-09 15:09:05)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-382369773-1592508727-1391189433-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-382369773-1592508727-1391189433-503 - Limited - Disabled)
Guest (S-1-5-21-382369773-1592508727-1391189433-501 - Limited - Disabled)
Mi (S-1-5-21-382369773-1592508727-1391189433-1001 - Administrators - Enabled) => C:\Users\Mi
WDAGUtilityAccount (S-1-5-21-382369773-1592508727-1391189433-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Enabled - Up to date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
1.0 (HKLM-x32\...\{AB726D73-E20A-4534-B607-EBB1A3867DD5}_is1) (Version: - ml-train.ucoz.ru)
30+ Free Patience (HKLM-x32\...\30+ Free Patience) (Version: - )
4K Video Downloader+ (HKLM\...\{0007A5D2-DEB9-4811-B201-7DAA9CE75FC7}) (Version: 26.1.5.0370 - Open Media LLC) Hidden
4K Video Downloader+ (HKLM-x32\...\{61d16153-cd60-41d8-bb5c-44bf72a83894}) (Version: 26.1.5.0370 - Open Media LLC)
ActivityChanger 1.5 (HKLM-x32\...\ActivityChanger 1.5) (Version: - )
Age Of Empires 3 CZ verze 1.0 (HKLM-x32\...\{A6502644-790D-4DCB-824F-45C64B22AF4D}_is1) (Version: 1.0 - tomi2k9)
Bandicam (HKLM-x32\...\Bandicam) (Version: 6.0.6.2034 - Bandicam.com)
Bandicam MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandicam.com)
Bestie Tajemstvi zamku Bileho jednorozce v.2015 (HKLM-x32\...\Bestie Tajemstvi zamku Bileho jednorozce v.2015) (Version: v.2015 - Spidla)
BlueStacks (HKLM\...\BlueStacks_nxt) (Version: 5.22.232.1002 - now.gg, Inc.)
BlueStacks Services (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\BlueStacksServices) (Version: 3.0.9 - now.gg, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BVS Solitaire Collection 9.0 (HKLM-x32\...\BVSSOL_is1) (Version: 9.0 - BVS Development Corporation)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7128 - CDBurnerXP)
ConBuilder (HKLM-x32\...\ConBuilder) (Version: 2.04.0007 - WEIruan)
CPUID CPU-Z 2.08 (HKLM\...\CPUID CPU-Z_is1) (Version: 2.08 - CPUID, Inc.)
Černý kocour Sběratelská edice verze 1.0b (HKLM-x32\...\Černý kocour Sběratelská edice_is1) (Version: 1.0b - )
Dáma 2004 (HKLM-x32\...\Dáma 2004 ) (Version: - )
DXTBmp (HKLM-x32\...\{2C1544E4-5DA6-4A72-B1BA-E4692991C1DC}) (Version: 1.00.000 - )
East Coast Express Part 1 (HKLM-x32\...\East Coast Express Part 1) (Version: - )
East Coast Express Part 2 (HKLM-x32\...\East Coast Express Part 2) (Version: - )
Enterprise Part 1 (HKLM-x32\...\Enterprise Part 1) (Version: - )
FFEDIT_Sub v1.2 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\FFEDIT_Sub v1.2) (Version: - )
Ghostscript GPL 10.03.1 (Msi Setup) (HKLM\...\_{476FD34A-6D96-497A-9B55-63F3A9A8B3C0}) (Version: 10.03.1 - Corel Corporation)
Ghostscript GPL 10.03.1 (Msi Setup) (HKLM\...\{476FD34A-6D96-497A-9B55-63F3A9A8B3C0}) (Version: 10.03.1 - Corel Corporation) Hidden
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
Gothic (HKLM-x32\...\1207658682_is1) (Version: 1.08k Hotfix - GOG.com)
HP Prime Virtual Calculator (64 bit) (HKLM\...\{B58605BE-9DED-4176-AE28-870E782755E1}) (Version: 2.1.14730.79 - HP) Hidden
HP Prime Virtual Calculator (HKLM-x32\...\{6cad3ba6-d99a-4bf5-98c6-c4132260fb77}) (Version: 2.1.14730.79 - HP)
Huawei Drivers (HKLM-x32\...\{C82D8932-EB28-4da6-9582-33D515D46F04}) (Version: 5.05.02.00 - )
Hungarotram 1.0 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Hungarotram 1.0) (Version: - )
HWiNFO® 64 (HKLM\...\HWiNFO® 64_is1) (Version: 8.40 - Martin Malik, REALiX s.r.o.)
Chess 2022 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Chess 2022) (Version: 2022.4 - Filip Höfer)
Chessarama (HKLM-x32\...\Chessarama_is1) (Version: - )
Chris Sawyer's Locomotion (HKLM-x32\...\GOGPACKLOCOMOTION_is1) (Version: 2.0.0.8 - GOG.com)
Inno Setup verze 6.2.2 (HKLM-x32\...\Inno Setup 6_is1) (Version: 6.2.2 - jrsoftware.org)
Intel(R) Chipset Device Software (HKLM\...\{B685D0AD-42A8-4A39-9BFE-8C063FA9AF29}) (Version: 10.1.1.8 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{60DC6F22-D268-44F0-8720-200033508384}) (Version: 11.0.0.1158 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{DF17C0DB-76D8-4A45-B26E-674F8455B803}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel® Chipset Device Software (HKLM-x32\...\{c6cff78a-cccb-49d5-be68-ae0ec5f0d48a}) (Version: 10.1.1.8 - Intel(R) Corporation) Hidden
IrfanView 4.67 (64-bit) (HKLM\...\IrfanView64) (Version: 4.67 - Irfan Skiljan)
Irish Enterprise version 2 (HKLM-x32\...\Irish Enterprise version 2) (Version: - Fastline Simulation Ltd)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0.1 - AppWork GmbH)
jewel match atlantis solitaire collectors edition version 1.0 (HKLM-x32\...\{70843751-1911-2019-7777-90091911AAA}_is1) (Version: 1.0 - )
LibreOffice 25.2.0.3 (HKLM\...\{E38AFCD6-BF08-4ECA-AAFF-D6D57FAC1A3A}) (Version: 25.2.0.3 - The Document Foundation)
Link Shell Extension (HKLM\...\HardlinkShellExt) (Version: 3.9.3.5 - Hermann Schinagl)
Loksim3D (HKLM\...\Loksim3D_is1) (Version: 2.11.0 - Loksim3D)
London and South East (HKLM-x32\...\London and South East) (Version: - )
Making Tracks Evesham Route for MSTS (HKLM-x32\...\Making Tracks Evesham Route for MSTS) (Version: v1.0.0 - Making Tracks Rail Simulation Software Limited)
Malwarebytes version 5.5.7.255 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.5.7.255 - Malwarebytes)
Mariáš 3.4 (HKLM-x32\...\{6F42ECD9-A1E6-4FFC-B16D-768F1D70AD30}) (Version: 3.4.0 - Ganttsoft)
Microsoft .NET Host - 6.0.14 (x64) (HKLM\...\{40D4EC44-91F8-4EEE-869E-F4B3E90E6688}) (Version: 48.59.55225 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.15 (x64) (HKLM\...\{4C903F19-B4C3-4D0C-8CC9-D444C511AF1C}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.14 (x64) (HKLM\...\{D1726E78-81F3-40A2-A7AF-6286BAA49B1C}) (Version: 48.59.55225 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.15 (x64) (HKLM\...\{11CCC9F6-77AA-4421-9EAC-BAEC36D96817}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.14 (x64) (HKLM\...\{61202CF9-3B84-4E5A-91A1-2984FAE38259}) (Version: 48.59.55225 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.15 (x64) (HKLM\...\{8731E6E3-AF96-4515-ACEC-DBFB3DF55292}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 131.0.2903.112 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 131.0.2903.112 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Czech) 2007 (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Excel MUI (Czech) 2007 (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Czech) 2007 (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Czech) 2007 (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2007 (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (HKLM-x32\...\{90120000-002C-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Czech) 2007 (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Czech) 2007 (HKLM\...\{90120000-002A-0405-1000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2007 (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\OneDriveSetup.exe) (Version: 26.108.0607.0002 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft Train Simulator (HKLM-x32\...\Train Simulator 1.0) (Version: - )
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual Studio Tools for Applications 2022 (HKLM-x32\...\{5451d67a-bba3-400d-9705-96fb24f27192}) (Version: 17.0.33529 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2022 x64 Hosting Support (HKLM\...\{2472E763-D716-3A63-ACC5-FFAE11F05B71}) (Version: 17.0.33529 - Microsoft Corporation) Hidden
Microsoft Visual Studio Tools for Applications 2022 x86 Hosting Support (HKLM-x32\...\{86B4A90B-3A22-302E-8407-D83DF8D427F7}) (Version: 17.0.33529 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.14 (x64) (HKLM\...\{424D9E0C-14D9-4D4B-9562-845689D972F6}) (Version: 48.59.55235 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.14 (x64) (HKLM-x32\...\{c4558324-5b32-43fc-9ac2-423fee96dae0}) (Version: 6.0.14.32124 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.15 (x64) (HKLM\...\{0E4A7820-FDA4-4250-B7AC-E7A2F7B43B64}) (Version: 64.60.31203 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.15 (x64) (HKLM-x32\...\{5625bb48-295c-4113-bc92-d6a69b19b04c}) (Version: 8.0.15.34718 - Microsoft Corporation)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 152.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 109.0.1 - Mozilla)
MPC-HC 2.0.0 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 2.0.0 - MPC-HC Team)
MSI Afterburner 4.6.5 Beta 4 (HKLM-x32\...\Afterburner) (Version: 4.6.5 Beta 4 - MSI Co., LTD)
MSTS CFR Megapack 10 v1 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MSTS CFR Megapack 10 v1) (Version: - )
MSTS Patch 1.8.0521 CZ (HKLM-x32\...\{587A2120-41D3-11DB-3D6C-00E19E4D4AE1}) (Version: 1.8.052113 - George)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.4.9 - Notepad++ Team)
NoxPlayer (HKLM-x32\...\Nox) (Version: 7.0.6.2 - Duodian Technology Co. Ltd.)
NVIDIA Ovladač HD audia 1.4.5.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.5.0 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 581.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 581.42 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 30.2.3 - OBS Project)
Opera Stable 100.0.4815.76 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Opera 100.0.4815.76) (Version: 100.0.4815.76 - Opera Software)
Oshawa Route 1.0 (HKLM-x32\...\Oshawa Route 1.0) (Version: 1.0 - Maple Leaf Tracks)
paint.net (HKLM\...\{DBC43589-CC32-4502-BBEC-5B931AF4BD2E}) (Version: 5.0.2 - dotPDN LLC)
PARKING TYCOON BUSINESS SIMULATOR (HKLM-x32\...\PARKING TYCOON BUSINESS SIMULATOR_) (Version: - )
Polda 6 CZ v.1.1 (HKLM-x32\...\Polda 6 CZ v.1.1) (Version: v.1.1 - libbi)
Port Royale (HKLM-x32\...\Port Royale_is1) (Version: 1.4 - US-ACTION, s.r.o.)
Port Royale 2 (HKLM-x32\...\Port Royale 2) (Version: - )
Pretty Good Solitaire version 12.4.0 (HKLM-x32\...\Pretty Good Solitaire_is1) (Version: 12.4.0 - Goodsol Development Inc.)
QD DB Umbauwaggons V4.0 (HKLM-x32\...\QD DB Umbauwaggons V4.0) (Version: - )
Railroad Tycoon II Platinum (HKLM-x32\...\1445250876_is1) (Version: 2.0.0.5 - GOG.com)
Railroads Online (HKLM-x32\...\Railroads Online_is1) (Version: - )
Railway Empire - France (HKLM-x32\...\2147483048_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire - Germany (HKLM-x32\...\1455317728_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire - Great Britain & Ireland (HKLM-x32\...\1841852514_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire - Mexico (HKLM-x32\...\1974940689_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire - The Great Lakes (HKLM-x32\...\1740280886_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire (HKLM-x32\...\1556481953_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire: Crossing the Andes (HKLM-x32\...\1212290691_is1) (Version: 1.9.0.24255 - GOG.com)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7727 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.6.8 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.6.8 - VS Revo Group, Ltd.)
RivaTuner Statistics Server 7.3.4 Beta 6 (HKLM-x32\...\RTSS) (Version: 7.3.4 Beta 6 - Unwinder)
Route Riter 7.8 (HKLM-x32\...\Route Riter 7.8) (Version: 7.8.10 - Digital Rails Corporation)
RTrainSim Launcher (HKLM-x32\...\{D85BDD00-2EAD-4A55-9501-B28570A1AC51}) (Version: 1.8 - MaDaDev)
RUNAWAY - A road adventure (HKLM-x32\...\{4B2767BD-9445-4A0C-BB8A-6B8350181B46}) (Version: - )
Sam & Max Save the World (HKLM-x32\...\1409865962_is1) (Version: 1.1.0 - GOG.com)
Samorost 3 (HKLM-x32\...\1452686647_is1) (Version: 1.467.0 - GOG.com)
ScaleRail (HKLM-x32\...\ScaleRail1.77) (Version: 1.77 - 3DTrains)
ScaleRoad (HKLM-x32\...\ScaleRoad1.77) (Version: 1.77 - 3DTrains)
Simon the Sorcerer 2: 25th Anniversary Edition (HKLM-x32\...\1893480337_is1) (Version: 1.2.1 - GOG.com)
Simutrans Game (HKLM-x32\...\Simutrans) (Version: - )
Solas and the White Winter (HKLM-x32\...\Solas and the White Winter_is1) (Version: - )
Spintires (HKLM-x32\...\Spintires_is1) (Version: - )
Station to Station (HKLM-x32\...\Station to Station_is1) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
STP DB ICE3 406 V1.0 (HKLM-x32\...\STP DB ICE3 406 V1.0) (Version: - )
SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.4.6 - Krzysztof Kowalczyk)
Sweet Solitaire School Witch 2 version 1.0 (HKLM-x32\...\{59475593-1911-2019-7777-90091911AAA}_is1) (Version: 1.0 - )
Taroky (HKLM-x32\...\Taroky_is1) (Version: - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.10 - TeamSpeak Systems GmbH)
Time Stopper (HKLM-x32\...\Time Stopper3.00) (Version: 3.00 - DilSoft)
T-Mobile Internet Manager (HKLM-x32\...\T-Mobile Communication Centre) (Version: 2017-12-05@2017-04-13 - Gemfor s.r.o.)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.51 - Ghisler Software GmbH)
Train Store V3.2 (HKLM-x32\...\Train Store V3.2) (Version: - )
Train Valley World (HKLM-x32\...\Train Valley World) (Version: - TiNYiSO)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
WebM Media Foundation Components (HKLM-x32\...\webmmf) (Version: 1.0.1.2 - WebM Project)
WinAce Archiver (HKLM-x32\...\WinAce Archiver) (Version: 2.69 - e-merge GmbH)
WinRAR 6.22 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.22.0 - win.rar GmbH)
Workers & Resources: Soviet Republic - Biomes (HKLM-x32\...\1668945748_is1) (Version: 1.0.0.4.2 - GOG.com)
Workers & Resources: Soviet Republic (HKLM-x32\...\1860281269_is1) (Version: 1.0.0.4.2 - GOG.com)
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
Youtube Downloader HD v. 5.9.9.5 (HKLM-x32\...\Youtube Downloader HD_is1) (Version: - YoutubeDownloaderHD.com)
ZDSimulator version 55.008 (HKLM-x32\...\{1291E1CC-8792-4CE0-BBEB-FA42BA028007}_is1) (Version: 55.008 - ZDSimulator.com.ua)
Менеджер сценариев RTrainSim (HKLM-x32\...\Менеджер сценариев RTrainSim_is1) (Version: 1.0 - Галета Антон)
Packages:
=========
FreeCell v češtině -> C:\Program Files\WindowsApps\TreeCardGames.FreeCellCollectionFree_5.3.2.0_x64__n666hb6ddc5jp [2026-04-04] (TreeCardGames)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2023-02-09] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe [2023-02-10] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe [2023-02-10] (Microsoft Corporation) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.968.0_x64__56jybvy8sckqj [2025-10-12] (NVIDIA Corp.)
Pošta a Kalendář -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2023-02-09] (Microsoft Corporation) [MS Ad]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{5EA43877-C6D8-4885-B77A-C0BB27E94372}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.241.15\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{81093D63-7825-417B-BFC8-ADC63FA4E53D}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.241.15\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{B314A279-F12F-4B54-A0AC-148FA68207CF}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.241.15\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2210608 2006-10-26] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers: [IconOverlayJunction] -> {0A479751-02BC-11d3-A855-0004AC2568FF} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers-x32: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers-x32: [IconOverlayJunction] -> {0A479751-02BC-11d3-A855-0004AC2568FF} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers-x32: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2023-01-27] (Notepad++ -> )
ContextMenuHandlers1: [BB FlashBack 2] -> {A8065B9E-193F-4797-B62D-8F6321E7FCCB} => -> No File
ContextMenuHandlers1: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-05-29] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-05-29] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [ZFAdd] -> {8FF88D27-7BD0-11D1-BFB7-00AA00262A11} => C:\Program Files (x86)\WinAce\arcext.dll [2007-11-08] (e-merge GmbH) [File not signed]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-07-13] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers4-x32: [ZFAdd] -> {8FF88D27-7BD0-11D1-BFB7-00AA00262A11} => C:\Program Files (x86)\WinAce\arcext.dll [2007-11-08] (e-merge GmbH) [File not signed]
ContextMenuHandlers5: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_901d8cfde13e2b8b\nvshext.dll [2025-09-23] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-07-13] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-05-29] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-05-29] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\system32\rtvcvfw64.dll [246272 2012-09-28] () [File not signed]
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\system32\bdmjpeg64.dll [75248 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\system32\bdmpegv64.dll [75272 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\system32\bdmpega64.acm [75784 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\SysWOW64\rtvcvfw32.dll [247296 2012-09-28] () [File not signed]
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\SysWOW64\bdmjpeg.dll [71152 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\SysWOW64\bdmpegv.dll [71176 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\SysWOW64\bdmpega.acm [71176 2017-01-26] (Bandicam Company -> )
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\Mi\Desktop\Nebuch.lnk -> G:\Program Files\Nebuch\LaunchGame.bat ()
Shortcut: C:\Users\Mi\Desktop\Менеджер сценариев RTrainSim.lnk -> G:\Program Files\Менеджер сценариев RTrainSim\ActivityManRTS.exe () <==== Cyrillic
Shortcut: C:\Users\Mi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Link Shell Extension\Donate.lnk -> hxxp://schinagl.priv.at/nt/hardlinkshellext/linkshellextension.htm
Shortcut: C:\Users\Mi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ActivityChanger\ActivityChanger.lnk -> G:\Program Files\Microsoft Games\Train Simulator\ActivityChanger\run_ac.bat (No File)
==================== Loaded Modules (Whitelisted) =============
2014-01-09 14:15 - 2014-01-09 14:15 - 001146880 _____ () [File not signed] C:\Program Files (x86)\Huawei\Drivers\NDISAPI.dll
2022-11-05 12:04 - 2022-11-05 12:04 - 000058368 _____ () [File not signed] C:\Program Files (x86)\RivaTuner Statistics Server\RTFC.dll
2022-11-05 12:04 - 2022-11-05 12:04 - 000074240 _____ () [File not signed] C:\Program Files (x86)\RivaTuner Statistics Server\RTMUI.dll
2022-11-05 12:04 - 2022-11-05 12:04 - 000368640 _____ () [File not signed] C:\Program Files (x86)\RivaTuner Statistics Server\RTUI.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-26] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 11:14 - 2026-02-07 20:09 - 000004136 _____ C:\Windows\system32\drivers\etc\hosts
109.94.209.70 *.fitgirl-repacks.xyz # Fake FitGirl site
109.94.209.70 *.fitgirl-repacks.xyz # Fake FitGirl site
109.94.209.70 fitgirl-repack.org # Fake FitGirl site
109.94.209.70 www.fitgirl-repack.org # Fake FitGirl site
109.94.209.70 fitgirlrepacks.pro # Fake FitGirl site
109.94.209.70 www.fitgirlrepacks.pro # Fake FitGirl site
109.94.209.70 fitgirl-repacks-site.org # Fake FitGirl site
109.94.209.70 www.fitgirl-repacks-site.org # Fake FitGirl site
109.94.209.70 fitgirls-repacks.com # Fake FitGirl site
109.94.209.70 fitgirlrepack.cc # Fake FitGirl site
109.94.209.70 fitgirlrepacks.org # Fake FitGirl site
109.94.209.70 www.fitgirls-repacks.com # Fake FitGirl site
109.94.209.70 www.fitgirlrepack.cc # Fake FitGirl site
109.94.209.70 www.fitgirlrepacks.org # Fake FitGirl site
109.94.209.70 fitgirltorrent.org # Fake FitGirl site
109.94.209.70 www.fitgirltorrent.org # Fake FitGirl site
109.94.209.70 fitgirl-repacks.net # Fake FitGirl site
109.94.209.70 www.fitgirl-repacks.net # Fake FitGirl site
109.94.209.70 fitgirlrepack.net # Fake FitGirl site
109.94.209.70 www.fitgirlrepack.net # Fake FitGirl site
109.94.209.70 fitgirl-repacks.com.de # Fake FitGirl site
109.94.209.70 www.fitgirl-repacks.com.de # Fake FitGirl site
109.94.209.70 fitgirltorrent.com # Fake FitGirl site
109.94.209.70 www.fitgirltorrent.com # Fake FitGirl site
109.94.209.70 fitgirl-repacks.in # Fake FitGirl site
109.94.209.70 fitgirlrepacks.in # Fake FitGirl site
109.94.209.70 www.fitgirlrepacks.in # Fake FitGirl site
109.94.209.70 fitgirlrepacks.co # Fake FitGirl site
109.94.209.70 fitgirl-repacks.cc # Fake FitGirl site
109.94.209.70 fitgirl-repacks.to # Fake FitGirl site
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 62.141.16.161 - 62.141.16.150
Windows Firewall is enabled.
Network Binding:
=============
Mobilní síť 5: HUAWEI Mobile Connect - Network Card #5 -> ew_wwanecm.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: )
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|G:\Program Files\Microsoft Games\Train Simulator\TRAINS\TRAINSET 5\2014 CD Raijet szerelvény
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Polda 6 CZ
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
MSCONFIG\Services: wuauserv => 3
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\StartupApproved\Run: => "electron.app.BlueStacks Services"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{631720E6-225A-474E-959B-442AD9082785}G:\program files\live for speed z\lfs.exe] => (Allow) G:\program files\live for speed z\lfs.exe () [File not signed]
FirewallRules: [UDP Query User{8DD54513-09A8-4366-B626-61B4326E0A10}G:\program files\live for speed z\lfs.exe] => (Allow) G:\program files\live for speed z\lfs.exe () [File not signed]
FirewallRules: [{659841F0-B137-43C4-AC9D-48D36039051D}] => (Block) G:\program files\live for speed z\lfs.exe () [File not signed]
FirewallRules: [{ED235EB1-4518-4334-AD0C-38B4F577DA8B}] => (Block) G:\program files\live for speed z\lfs.exe () [File not signed]
FirewallRules: [{BF61E11A-ADF1-4CC9-A2AD-7C94EEC08891}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{ABD29330-B04D-413B-B479-7AE8D36C0377}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{B3E5A585-2C3B-4894-8E23-A197F433035A}G:\program files\open rails1.5stable\runactivity.exe] => (Allow) G:\program files\open rails1.5stable\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [UDP Query User{BB4033A2-8BCD-46CD-82DB-BAB8C3E0D9BA}G:\program files\open rails1.5stable\runactivity.exe] => (Allow) G:\program files\open rails1.5stable\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{65D1631F-E74C-4B40-8FC1-B60AEB5DA146}] => (Block) G:\program files\open rails1.5stable\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{0FA79A7A-AA7E-4915-93E5-6E44BBFEDC5C}] => (Block) G:\program files\open rails1.5stable\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{D036E904-55DE-4CDA-ACCE-B8661C4D32A1}] => (Allow) C:\Users\Mi\AppData\Local\Programs\Opera\99.0.4788.88\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [TCP Query User{80C70051-5FA9-46E4-A047-5DF0727F985F}C:\users\mi\appdata\local\programs\opera\opera.exe] => (Block) C:\users\mi\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{9CF5C523-D093-42A2-A95D-72A6720BB2E0}C:\users\mi\appdata\local\programs\opera\opera.exe] => (Block) C:\users\mi\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{7653A5C4-CC44-473B-92DF-B8464CE5FB25}] => (Allow) C:\Users\Mi\AppData\Local\Programs\Opera\100.0.4815.76\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{2495A4F4-4711-4DAC-A8CC-78F638C0D4FB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{809EA813-F3AE-4240-863D-639CB587E530}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5F17A198-3C6D-4BA0-ABD8-C45E6B475DCE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F3FD2543-AED5-4DA4-881F-9461A455E822}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{B971455D-D2DB-4EC1-AAF1-24C7A3CDDEFA}C:\program files\hp\hp prime virtual calculator\hpprime.exe] => (Allow) C:\program files\hp\hp prime virtual calculator\hpprime.exe (Moravia Consulting, spol s. r. o. -> )
FirewallRules: [UDP Query User{7F8C2DD3-0D30-45A0-A85A-BE762267D6C8}C:\program files\hp\hp prime virtual calculator\hpprime.exe] => (Allow) C:\program files\hp\hp prime virtual calculator\hpprime.exe (Moravia Consulting, spol s. r. o. -> )
FirewallRules: [{92BB304F-67D8-4704-B3F7-707FDB4E7605}] => (Block) C:\program files\hp\hp prime virtual calculator\hpprime.exe (Moravia Consulting, spol s. r. o. -> )
FirewallRules: [{7AA5BB72-89D5-4FCB-ABF0-90102B35E749}] => (Block) C:\program files\hp\hp prime virtual calculator\hpprime.exe (Moravia Consulting, spol s. r. o. -> )
FirewallRules: [{F62DB9CE-3664-47E1-B343-FBA7ABE86994}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe (Ubisoft Massive -> Ubisoft)
FirewallRules: [{0D84C3D8-9093-4643-9685-58F0FFED0DF3}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe (Ubisoft Massive -> Ubisoft)
FirewallRules: [TCP Query User{4C6EA23F-3117-46C0-B9CF-E9CCAEC36010}G:\program files\microsoft games\train simulator\rts\rts1.exe] => (Allow) G:\program files\microsoft games\train simulator\rts\rts1.exe () [File not signed]
FirewallRules: [UDP Query User{819E1A5B-5784-4962-9B38-6E1AE64E445A}G:\program files\microsoft games\train simulator\rts\rts1.exe] => (Allow) G:\program files\microsoft games\train simulator\rts\rts1.exe () [File not signed]
FirewallRules: [{AD3F1CA2-B7C0-4A13-B722-A73A2FAAE319}] => (Block) G:\program files\microsoft games\train simulator\rts\rts1.exe () [File not signed]
FirewallRules: [{D43CE9D9-C8DF-4204-BBFE-2E7D5B021DB1}] => (Block) G:\program files\microsoft games\train simulator\rts\rts1.exe () [File not signed]
FirewallRules: [{8DDCB23C-AF03-44CD-880E-5CD144610BAC}] => (Allow) C:\Users\Mi\AppData\Roaming\BitTorrent\BitTorrent.exe => No File
FirewallRules: [{2A87FB91-4E2B-4524-B2D9-93D8877BB0FC}] => (Allow) C:\Users\Mi\AppData\Roaming\BitTorrent\BitTorrent.exe => No File
FirewallRules: [TCP Query User{0AFB80CF-B6E0-4525-9F23-AF9FBDC9FC9A}G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe] => (Allow) G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [UDP Query User{CDED80D6-42F6-465F-855B-12A4BF707C01}G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe] => (Allow) G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{11EFFEF8-5E7A-4752-A606-FF42D4441E2B}] => (Block) G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{6DB074C8-7562-4640-ABD4-F29AA73A4A0A}] => (Block) G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{B932B083-61B5-4708-9E7D-F965A39CF204}] => (Allow) C:\Users\Mi\AppData\Roaming\uTorrent\uTorrent.exe => No File
FirewallRules: [{A119378C-2826-4540-8809-DC9B2D820B86}] => (Allow) C:\Users\Mi\AppData\Roaming\uTorrent\uTorrent.exe => No File
FirewallRules: [TCP Query User{AF819C56-4592-45F6-9A74-49F86F2F1009}D:\games\railroader.build.18404845\railroader.exe] => (Allow) D:\games\railroader.build.18404845\railroader.exe () [File not signed]
FirewallRules: [UDP Query User{590AED6E-A34F-493D-A73C-88FEC0145FBD}D:\games\railroader.build.18404845\railroader.exe] => (Allow) D:\games\railroader.build.18404845\railroader.exe () [File not signed]
FirewallRules: [{383FA83E-9515-459C-B7C5-4606003CB748}] => (Block) D:\games\railroader.build.18404845\railroader.exe () [File not signed]
FirewallRules: [{9553481E-B4CA-4379-AD11-D20226CE6F81}] => (Block) D:\games\railroader.build.18404845\railroader.exe () [File not signed]
FirewallRules: [TCP Query User{0B5F36B3-3D2E-48AD-B649-9FA185E824F7}D:\games\derail.valley.build.19277896\derailvalley.exe] => (Allow) D:\games\derail.valley.build.19277896\derailvalley.exe () [File not signed]
FirewallRules: [UDP Query User{286E0D37-90F4-4AF7-BF02-B4841BE3AA8B}D:\games\derail.valley.build.19277896\derailvalley.exe] => (Allow) D:\games\derail.valley.build.19277896\derailvalley.exe () [File not signed]
FirewallRules: [{2F3EAB9D-CF29-42FC-8321-59D574959D6B}] => (Block) D:\games\derail.valley.build.19277896\derailvalley.exe () [File not signed]
FirewallRules: [{3C6075ED-5300-47E7-AAFC-7080C1AE9C6B}] => (Block) D:\games\derail.valley.build.19277896\derailvalley.exe () [File not signed]
FirewallRules: [{170E580C-F52B-4590-B2EE-ED2597E359DA}] => (Allow) C:\Users\Mi\AppData\Roaming\utorrent\uTorrent.exe => No File
FirewallRules: [{5CA67D32-4B67-4854-853B-FCBCC8E11891}] => (Allow) C:\Users\Mi\AppData\Roaming\utorrent\uTorrent.exe => No File
FirewallRules: [TCP Query User{793AC3B9-C248-4EE7-A654-07AA85EE6BA9}D:\games\train-valley origins\train valley origins.exe] => (Allow) D:\games\train-valley origins\train valley origins.exe () [File not signed]
FirewallRules: [UDP Query User{29115835-F314-411C-B85B-A96503048D45}D:\games\train-valley origins\train valley origins.exe] => (Allow) D:\games\train-valley origins\train valley origins.exe () [File not signed]
FirewallRules: [{EC0D3D8A-78C3-4FFA-BDA8-20C9DB1DC16B}] => (Block) D:\games\train-valley origins\train valley origins.exe () [File not signed]
FirewallRules: [{758FD232-2C2D-4869-B2BE-1013607AEAF9}] => (Block) D:\games\train-valley origins\train valley origins.exe () [File not signed]
FirewallRules: [TCP Query User{C885E9F3-CDDF-4236-9950-3A423FF1D35C}D:\program files\gog games\railway empire\railwayempire.exe] => (Allow) D:\program files\gog games\railway empire\railwayempire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [UDP Query User{9C134915-84D5-42F2-9D62-FB9EF65522E3}D:\program files\gog games\railway empire\railwayempire.exe] => (Allow) D:\program files\gog games\railway empire\railwayempire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [{A613A39E-C9F0-4588-8E13-81A018D10A7E}] => (Block) D:\program files\gog games\railway empire\railwayempire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [{FB05C267-B871-4806-A1B3-53F1C44895BA}] => (Block) D:\program files\gog games\railway empire\railwayempire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [{7CD0AEEF-77AE-4D8E-B0DC-99D771146580}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{9D9220CD-9922-40D9-80FA-8EC91D932E5F}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{170325C8-BE93-486C-97AC-AA2C7A476E33}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{23E13E10-D12A-409B-AB22-BD773D5ACB5C}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{0F93DD6A-DBB0-4CEB-A997-72846692B478}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Transport Fever 2\TransportFever2.exe () [File not signed]
FirewallRules: [{5AB7CD86-7825-4D49-AEFD-6DC103F65650}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Transport Fever 2\TransportFever2.exe () [File not signed]
FirewallRules: [{D0C5693F-4D9D-4CD2-9F13-C8B13C581BEB}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Sim Companies\Sim Companies.exe (Sim Companies) [File not signed]
FirewallRules: [{6C6B34FB-921F-4BB1-A753-176609BF2261}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Sim Companies\Sim Companies.exe (Sim Companies) [File not signed]
FirewallRules: [{D24764B3-F05B-4B07-A5F2-976F2D0871AC}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Farm Manager\FarmManager.exe () [File not signed]
FirewallRules: [{DEF59782-FC57-4544-9055-E4A2228791E9}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Farm Manager\FarmManager.exe () [File not signed]
FirewallRules: [{5E97CD05-0AA0-4F7B-BF81-30E1EA5B445A}] => (Allow) D:\Program Files\Nox\bin\Nox.exe (Nox Limited -> Duodian Technology Co. Ltd.)
FirewallRules: [{D37A19B4-9D4C-47AD-A379-D1468EB8BFEE}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe (Nox Limited -> Nox Limited Corporation)
FirewallRules: [{C45400D5-E917-4519-A020-044D6C604474}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Graveyard Keeper\Graveyard Keeper.exe () [File not signed]
FirewallRules: [{48B013A3-9832-48BC-8348-9691AAA850F9}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Graveyard Keeper\Graveyard Keeper.exe () [File not signed]
FirewallRules: [{8FC87640-093E-4C86-A991-5A25B9CCAC8A}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe (Now.gg, INC -> Bluestack Systems, Inc.)
FirewallRules: [{79D5035A-FBE8-482F-8FB9-CF1A5EDDE4FB}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Now.gg, INC -> BlueStack Systems)
FirewallRules: [{AB1B52C7-DD66-4AB2-8F0D-103B85DB6AB9}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe (Now.gg, INC -> The Qt Company Ltd.)
FirewallRules: [{9343EB8E-4F37-4328-A457-4A908740DE4F}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAIRun.exe (Now.gg, INC -> BlueStack Systems)
==================== Restore Points =========================
12-06-2026 17:31:18 Naplánovaný kontrolní bod
30-06-2026 11:49:05 Naplánovaný kontrolní bod
13-07-2026 11:29:34 Naplánovaný kontrolní bod
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (07/14/2026 04:37:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: MBAMService.exe, verze: 3.2.0.1519, časové razítko: 0x69fa7f95
Název chybujícího modulu: ntdll.dll, verze: 10.0.19041.3996, časové razítko: 0x39215800
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000634f6
ID chybujícího procesu: 0xc44
Čas spuštění chybující aplikace: 0x01dd12b256ac5c5f
Cesta k chybující aplikaci: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 7df649a3-5dc4-43b8-b313-9e645256f521
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (07/12/2026 07:15:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 40766
Error: (07/12/2026 07:15:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 40766
Error: (07/12/2026 07:15:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (07/12/2026 06:05:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: wmplayer.exe, verze: 12.0.19041.3636, časové razítko: 0xd2d3ea02
Název chybujícího modulu: combase.dll, verze: 10.0.19041.3636, časové razítko: 0xa11a7083
Kód výjimky: 0xc0000005
Posun chyby: 0x00074b06
ID chybujícího procesu: 0x690
Čas spuštění chybující aplikace: 0x01dd12181c579b10
Cesta k chybující aplikaci: C:\Program Files (x86)\Windows Media Player\wmplayer.exe
Cesta k chybujícímu modulu: C:\Windows\System32\combase.dll
ID zprávy: 3186c63d-21d8-4df5-b1eb-dcc43bcf426d
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (07/11/2026 05:25:25 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (I:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (07/11/2026 05:25:22 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na (G:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (07/11/2026 05:23:37 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na (H:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
System errors:
=============
Error: (07/14/2026 04:37:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Malwarebytes Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.
Error: (07/14/2026 04:31:01 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_328ccea byla ukončena s následující chybou:
Zařízení není připraveno.
Error: (07/13/2026 04:20:23 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_862398 byla ukončena s následující chybou:
Zařízení není připraveno.
Error: (07/13/2026 12:19:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (07/13/2026 12:19:18 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (30000 ms).
Error: (07/13/2026 12:17:16 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba MessagingService_362da byla ukončena s následující chybou:
Zařízení není připraveno k použití.
Error: (07/13/2026 11:58:46 AM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-8N7P3M7)
Description: Nelze spustit server DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Došlo k chybě:
2147942767
při provádění příkazu:
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
Error: (07/13/2026 10:53:44 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_57869ed byla ukončena s následující chybou:
Zařízení není připraveno.
Windows Defender:
================
TimeCreated : 13.07.2026 11:27:31
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (C6930539-61DE-4A64-BFA7-2165DA6F4458}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 12.07.2026 10:09:38
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (AD83C4BC-E0CD-41D8-8465-567575E2D396}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 11.07.2026 10:21:04
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (F8AA5290-09C7-4F7D-ADFF-9D0536524F67}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 10.07.2026 11:29:03
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (C4388B8C-15FC-462D-8498-0717DA9A16FB}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 08.07.2026 17:19:39
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (09F9B587-DA17-4B2D-88D8-AD9F5D5B9BD2}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 06.07.2026 10:12:42
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (275EC0C6-13C1-4527-B0B1-2050100DB91A}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 05.07.2026 11:34:02
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (9B35F837-093C-45BD-AE7C-62CF4A8C781C}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 04.07.2026 10:14:31
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (E4D70523-9EB3-4764-81F0-19AF5D1ABB5D}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
CodeIntegrity:
===============
Date: 2026-07-14 16:53:49
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. F1 ZA 12/11/2014
Motherboard: Gigabyte Technology Co., Ltd. H81M-S2H
Processor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Percentage of memory in use: 35%
Total physical RAM: 16336.03 MB
Available physical RAM: 10514.1 MB
Total Virtual: 18768.03 MB
Available Virtual: 10307.23 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:199.39 GB) (Free:39.36 GB) (Model: Patriot P220 1024GB) NTFS
Drive d: (Data) (Fixed) (Total:753.87 GB) (Free:118.38 GB) (Model: Patriot P220 1024GB) NTFS
Drive e: () (Fixed) (Total:99.56 GB) (Free:17.23 GB) (Model: ST1000DM003-1ER162) NTFS ==>[system with boot components (obtained from drive)]
Drive g: () (Fixed) (Total:831.51 GB) (Free:104.06 GB) (Model: ST1000DM003-1ER162) NTFS
Drive h: () (Fixed) (Total:100 GB) (Free:91.86 GB) (Model: ST500DM002-1BD142) NTFS
Drive i: (Nový svazek) (Fixed) (Total:365.75 GB) (Free:84.8 GB) (Model: ST500DM002-1BD142) NTFS
Drive j: (HUAWEI) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
\\?\Volume{6741ba27-cb49-4044-bf66-822fe3449e04}\ () (Fixed) (Total:0.5 GB) (Free:0.08 GB) NTFS
\\?\Volume{ff47f8f6-0000-0000-0000-f0e318000000}\ () (Fixed) (Total:0.44 GB) (Free:0.11 GB) NTFS
\\?\Volume{ed95946d-90ec-4dd8-bf37-87f597a824ed}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 953.9 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: FF47F8F6)
Partition 1: (Active) - (Size=99.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)
Partition 3: (Not Active) - (Size=831.5 GB) - (Type=05)
==========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 0E0D316F)
Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=365.8 GB) - (Type=0F Extended)
==================== End of Addition.txt =======================
Malwarebytes
www.malwarebytes.com
-Log Details-
Scan Date: 7/13/2026
Scan Time: 5:29 PM
Log File: 959be926-7ecf-11f1-9072-000000000000.json
-Software Information-
Version: 5.5.7.255
Components Version: 157.0.5633
Update Package Version: 1.0.112088
License: Trial
-System Information-
OS: Windows 10 (Build 19045.4046)
CPU: x64
File System: NTFS
User: DESKTOP-8N7P3M7\Mi
-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Cancelled
Objects Scanned: 348 243
Threats Detected: 0
Threats Quarantined: 0
Scan Duration: 13 hr, 57 min, 26 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Files Scanned-
C:\
D:\
E:\
G:\
H:\
I:\
-Scan Details-
Process: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registry Key: 0
(No malicious items detected)
Registry Value: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 0
(No malicious items detected)
File: 0
(No malicious items detected)
Physical Sector: 0
(No malicious items detected)
WMI: 0
(No malicious items detected)
(end)
toto bez kontroly disků
Malwarebytes
www.malwarebytes.com
-Log Details-
Scan Date: 7/14/2026
Scan Time: 4:39 PM
Log File: c6db6ddd-8d69-478e-a0b9-0a80bae308f2.json
-Software Information-
Version: 5.5.7.255
Components Version: 157.0.5633
Update Package Version: 1.0.112088
License: Trial
-System Information-
OS: Windows 10 (Build 19045.4046)
CPU: x64
File System: NTFS
User: DESKTOP-8N7P3M7\Mi
-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 128 196
Threats Detected: 0
Threats Quarantined: 0
Scan Duration: 0 min, 17 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Disabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registry Key: 0
(No malicious items detected)
Registry Value: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 0
(No malicious items detected)
File: 0
(No malicious items detected)
Physical Sector: 0
(No malicious items detected)
WMI: 0
(No malicious items detected)
(end)
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-07-2026 01
Ran by Mi (administrator) on DESKTOP-8N7P3M7 (ATComputers AUTOCONT OFFICEPRO) (14-07-2026 17:00:07)
Running from C:\Users\Mi\Desktop\FRST64.exe
Loaded Profiles: Mi
Platform: Microsoft Windows 10 Pro Version 22H2 19045.4046 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe ->) (Alexey Nicolaychuk -> ) C:\Program Files (x86)\RivaTuner Statistics Server\EncoderServer.exe
(C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe ->) (Alexey Nicolaychuk -> ) C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Windows\SysWOW64\svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(explorer.exe ->) (Gemfor s.r.o. -> Gemfor s.r.o.) C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\Manager.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD64.EXE
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\DDSHelper.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_901d8cfde13e2b8b\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_901d8cfde13e2b8b\Display.NvContainer\NVDisplay.Container.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Alexey Nicolaychuk -> ) C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
(svchost.exe ->) (Gemfor s.r.o. -> Gemfor s.r.o.) C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\Manager.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Skype Software Sarl -> ) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(svchost.exe ->) (Skype Software Sarl -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeApp.exe
==================== Registry (Whitelisted) ===================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16418560 2023-02-10] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [T-Mobile CManager] => C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\Manager.exe [2171520 2017-12-05] (Gemfor s.r.o. -> Gemfor s.r.o.)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [Microsoft Edge Update] => C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.241.15\MicrosoftEdgeUpdateCore.exe [279384 2026-06-20] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [5773976 2026-06-25] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Run: [electron.app.BlueStacks Services] => C:\Users\Mi\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe [162219656 2024-05-08] (Now.gg, INC -> now.gg, Inc.)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {6acedf64-6514-11ef-af0c-ece137e8cf7e} - "J:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7aaa-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7acc-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {a47e8a88-23ce-11ee-aee9-a47831648add} - "K:\Autorun.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> "C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe" --first-run (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {E5897533-8B62-43F9-A56E-088239E4A9D4} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [303024 2026-06-21] (Now.gg, INC -> BlueStack Systems, Inc.)
Task: {C49A3735-D92A-4F65-8D99-8EE57DA3CCE3} - System32\Tasks\CCleanerCrashReporting => G:\Program Files\ccsetup\x64\CCleanerBugReport.exe [6140920 2026-06-19] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "G:\Program Files\ccsetup\LOG" --programpath "G:\Program Files\ccsetup" --guid "" --version "6.41.0.11567" --silent
Task: {2940DF58-89E3-4D31-B5CF-0D42589F6C9C} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem151.0.7910.0{FF72C57D-3D5D-4486-A191-8ACA220FC279} => C:\Program Files (x86)\Google\GoogleUpdater\151.0.7910.0\updater.exe [9600664 2026-06-24] (Google LLC -> Google LLC)
Task: {D44C4E78-5C2D-4D2B-94D2-EABF1616461F} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{9FA8F50E-AF30-45C9-A384-77B961C18A05} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {7D7FA9B8-96D1-47E0-9CB4-592B4F251B2E} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-382369773-1592508727-1391189433-1001Core{22470D11-467B-4882-B361-8EF9055909A5} => C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206944 2026-03-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {334F45D5-A697-4A2B-9EB3-CAAFDBB6803F} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-382369773-1592508727-1391189433-1001UA{671F0508-94A0-4724-ABB5-8BA8B99576AD} => C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206944 2026-03-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {BC58A3B7-C9BC-4923-9410-839F836A906B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-07-02] (Mozilla Corporation -> Mozilla Foundation)
Task: {C592614E-5533-45F7-BD42-31C79E60C02F} - System32\Tasks\Opera scheduled Autoupdate 1676197568 => C:\Users\Mi\AppData\Local\Programs\Opera\launcher.exe [2717592 2023-07-17] (Opera Norway AS -> Opera Software)
Task: {1B29A999-08B1-46D5-8DC6-AACFF38EB236} - System32\Tasks\RTSS => C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe [436544 2022-11-05] (Alexey Nicolaychuk -> )
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\CCleanerCrashReporting.job => G:\Program Files\ccsetup\x64\CCleanerBugReport.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{612b9d4c-0467-4ba5-b335-59ac54fb38a4}: [NameServer] 62.141.16.161 62.141.16.150
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: k8v5djar.default-release -> 308046B0AF4A39CB
FF DefaultProfile: k8v5djar.default-release -> 641D10338ABA448D
FF ProfilePath: C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\eki0xmrp.default [2023-02-12]
FF ProfilePath: C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release [2026-07-14]
FF DownloadDir: G:\Downloads
FF Extension: (New Tab) - C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release\Extensions\newtab@mozilla.org.xpi [2026-07-07]
FF Extension: (uBlock Origin) - C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release\Extensions\uBlock0@raymondhill.net.xpi [2026-07-10]
FF Extension: (Video DownloadHelper) - C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-11-19]
FF Extension: (Download Youtube Subtitles) - C:\Users\Mi\AppData\Roaming\Mozilla\Firefox\Profiles\k8v5djar.default-release\Extensions\{f137c1e1-0bc3-489c-b5b4-9b908a3b5e5c}.xpi [2026-04-02]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [No File]
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Mi\AppData\Local\Microsoft\Edge\User Data\Default [2026-07-14]
Edge DownloadDir: G:\Downloads
Edge Extension: (Dokumenty Google offline) - C:\Users\Mi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-24]
Edge Extension: (Edge relevant text changes) - C:\Users\Mi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-12-27]
Edge DownloadDir: Default -> G:\Downloads
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR Profile: C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable [2026-07-13]
OPR DownloadDir: G:\Downloads
OPR DefaultSearchURL: Opera Stable -> hxxps://www.google.com/search?client=opera&q={s ... utEncoding}
OPR DefaultSearchKeyword: Opera Stable -> g
OPR Extension: (Rich Hints Agent) - C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2026-06-27]
OPR Extension: (Opera Wallet) - C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2025-07-17]
OPR Extension: (Aria) - C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable\Extensions\igpdmclhhlcpoindmhkhillbfhdgoegm [2025-11-27]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\Mi\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2023-02-12]
OPR Extension: (opera-intro) - C:\Users\Mi\AppData\Local\Programs\Opera\100.0.4815.76\resources\opera_intro_extension [2023-07-26] [UpdateUrl:0] <==== ATTENTION
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 LibreOfficeMaintenance; C:\Program Files\LibreOffice\program\update_service.exe [123304 2026-07-06] (The Document Foundation -> The Document Foundation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11506480 2026-07-13] (Malwarebytes Inc -> Malwarebytes)
R2 MbnExt; C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\MbnExt.dll [422608 2017-04-13] (Gemfor s.r.o. -> Gemfor s.r.o.)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-07-13] (Malwarebytes Inc -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe [2150144 2026-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_901d8cfde13e2b8b\Display.NvContainer\NVDisplay.Container.exe [1275600 2025-09-23] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [534472 2024-02-22] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe [4608640 2026-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe [290744 2026-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [436320 2026-06-21] (Microsoft Windows Hardware Compatibility Publisher -> Bluestack System Inc.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [159296 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 ew_hwusbdev; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys [109568 2013-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 ew_usbenumfilter; C:\Windows\System32\drivers\ew_usbenumfilter.sys [14976 2012-12-22] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 huawei_enumerator; C:\Windows\System32\drivers\ew_jubusenum.sys [91648 2013-11-30] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 hwusb_cdcacm; C:\Windows\system32\DRIVERS\ew_cdcacm.sys [125952 2014-07-25] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 hwusb_wwanecm; C:\Windows\System32\drivers\ew_wwanecm.sys [380672 2014-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [82312 2026-06-01] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [235624 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [22120 2026-07-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\Drivers\farflt.sys [215656 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\Drivers\mbam.sys [81000 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [245864 2026-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [190096 2026-07-13] (Malwarebytes Inc -> Malwarebytes)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [21888 2026-06-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [646536 2026-06-23] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [115120 2026-06-23] (Microsoft Windows -> Microsoft Corporation)
R1 YSDrv; C:\Program Files (x86)\Bignox\BigNoxVM\RT\YSDrv.sys [312776 2026-03-31] (Microsoft Windows Hardware Compatibility Publisher -> Nox Limited Corporation)
S1 axbfrsdj; \??\C:\Windows\system32\drivers\axbfrsdj.sys (No File)
S1 hosaiwng; \??\C:\Windows\system32\drivers\hosaiwng.sys (No File)
S1 mlangoti; \??\C:\Windows\system32\drivers\mlangoti.sys (No File)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-07-14 17:00 - 2026-07-14 17:00 - 000017457 _____ C:\Users\Mi\Desktop\FRST.txt
2026-07-14 17:00 - 2026-07-14 17:00 - 000000000 ____D C:\Users\Mi\Desktop\FRST-OlderVersion
2026-07-14 16:55 - 2026-07-14 16:55 - 000001240 _____ C:\Users\Mi\Desktop\Malwarebytes Custom Scan Report 2026-07-14 163908.txt
2026-07-14 07:27 - 2026-07-14 07:27 - 000001295 _____ C:\Users\Mi\Desktop\Malwarebytes Custom Scan Report 2026-07-13 172905.txt
2026-07-13 17:14 - 2026-07-13 17:14 - 000005841 _____ C:\Users\Mi\Desktop\Malwarebytes Threat Scan Report 2026-07-13 123208.txt
2026-07-13 12:30 - 2026-07-13 12:30 - 000190096 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2026-07-13 12:28 - 2026-07-14 17:01 - 000000000 ____D C:\Users\Mi\AppData\Local\Malwarebytes
2026-07-13 12:28 - 2026-07-13 12:28 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-07-13 12:28 - 2026-07-13 12:28 - 000002081 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2026-07-13 12:28 - 2026-07-13 12:28 - 000000000 ____D C:\Users\Mi\AppData\Local\Sentry
2026-07-13 12:27 - 2026-07-13 12:27 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-07-13 12:27 - 2026-07-13 12:27 - 000000000 ____D C:\Program Files\Malwarebytes
2026-07-13 12:14 - 2026-07-13 12:14 - 001408198 _____ C:\Users\Mi\Documents\cc_20260713_121425.reg
2026-07-13 11:37 - 2026-07-13 12:17 - 000000600 _____ C:\Windows\Tasks\CCleanerCrashReporting.job
2026-07-13 11:37 - 2026-07-13 11:37 - 000003314 _____ C:\Windows\system32\Tasks\CCleanerCrashReporting
2026-07-13 11:05 - 2026-07-13 11:05 - 000000000 ____D C:\ProgramData\Piriform
2026-07-12 09:28 - 2026-07-12 18:01 - 000000000 ____D C:\Users\Mi\Desktop\foto hodiny
2026-07-11 10:00 - 2026-07-14 17:00 - 000000000 ____D C:\FRST
2026-07-11 09:59 - 2026-07-14 17:00 - 002451456 _____ (Farbar) C:\Users\Mi\Desktop\FRST64.exe
2026-07-11 09:53 - 2026-07-11 09:54 - 000000031 _____ C:\Users\Mi\Desktop\prihlaseni viry-forum.txt
2026-07-07 17:21 - 2026-07-07 17:21 - 000316235 _____ C:\Users\Mi\Desktop\navod na pouziti budiku.pdf
2026-07-06 12:40 - 2026-07-13 17:01 - 000002103 _____ C:\Users\Mi\Desktop\Moje O₂ - BlueStacks App Player 2.lnk
2026-07-06 12:33 - 2026-07-13 17:01 - 000002131 _____ C:\Users\Mi\Desktop\Můj T-Mobile - BlueStacks App Player 2.lnk
2026-07-06 10:53 - 2026-07-06 10:53 - 000000000 ____D C:\Users\Mi\AppData\Local\HD-MultiInstanceManager
2026-07-06 09:37 - 2026-07-06 09:37 - 000000000 ____D C:\Users\Mi\AppData\Roaming\HD-Player
2026-07-06 09:36 - 2026-07-06 12:45 - 000000000 ____D C:\Users\Mi\AppData\Local\BlueStacks X
2026-07-06 09:36 - 2026-07-06 09:36 - 000000000 ____D C:\Users\Mi\AppData\Local\BSXCache
2026-07-06 09:35 - 2026-07-11 16:43 - 000000000 ____D C:\ProgramData\BlueStacks_nxt
2026-07-06 09:35 - 2026-07-06 17:26 - 000000000 ____D C:\Users\Mi\AppData\Roaming\bluestacks-services
2026-07-06 09:35 - 2026-07-06 09:35 - 000006412 _____ C:\Users\Mi\-1.14-windows.xml
2026-07-06 09:35 - 2026-07-06 09:35 - 000003932 _____ C:\Windows\system32\Tasks\BlueStacksHelper_nxt
2026-07-06 09:35 - 2026-07-06 09:35 - 000002423 _____ C:\Users\Mi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BlueStacks Services.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000002120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueAI.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks 5.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000002057 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks Manager.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000002045 _____ C:\Users\Public\Desktop\BlueStacks Manager.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000001975 _____ C:\Users\Public\Desktop\BlueStacks 5.lnk
2026-07-06 09:35 - 2026-07-06 09:35 - 000000000 ____D C:\Users\Mi\AppData\Local\HD-Player
2026-07-06 09:35 - 2026-07-06 09:35 - 000000000 ____D C:\Users\Mi\AppData\Local\bluestacks-services-updater
2026-07-06 09:34 - 2026-07-06 09:35 - 000000000 ____D C:\Program Files\BlueStacks_nxt
2026-07-06 09:30 - 2026-07-06 09:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks Store
2026-07-06 09:30 - 2026-07-06 09:30 - 000000000 ____D C:\Program Files (x86)\BlueStacks X
2026-07-02 11:18 - 2026-07-02 11:18 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2026-07-02 09:57 - 2026-07-06 12:42 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-06-15 09:59 - 2026-06-15 10:21 - 000000476 _____ C:\Users\Mi\Desktop\kod hdo elektrika.txt
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-07-14 16:54 - 2024-02-22 16:55 - 000000000 ____D C:\Windows\SystemTemp
2026-07-14 16:48 - 2023-02-12 15:06 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-07-14 16:44 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-07-14 16:44 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2026-07-14 07:28 - 2024-02-06 11:54 - 000000000 ____D C:\ProgramData\NVIDIA
2026-07-14 07:02 - 2023-02-09 17:07 - 000000000 ____D C:\Windows\system32\SleepStudy
2026-07-13 21:33 - 2023-02-12 16:30 - 000007602 _____ C:\Users\Mi\AppData\Local\Resmon.ResmonCfg
2026-07-13 17:01 - 2026-05-08 12:14 - 000001060 _____ C:\Users\Mi\Desktop\Pretty Good Solitaire.lnk
2026-07-13 17:01 - 2026-05-08 09:47 - 000002052 _____ C:\Users\Mi\Desktop\Recommended Software.lnk
2026-07-13 17:01 - 2026-05-08 09:47 - 000002002 _____ C:\Users\Mi\Desktop\Time Stopper.lnk
2026-07-13 17:01 - 2026-05-07 18:01 - 000001169 _____ C:\Users\Mi\Desktop\BVS Solitaire Collection.lnk
2026-07-13 17:01 - 2026-04-05 09:30 - 000002246 _____ C:\Users\Mi\Desktop\30+ Free Patience.lnk
2026-07-13 17:01 - 2025-10-22 19:43 - 000001222 _____ C:\Users\Mi\Desktop\Youtube Downloader HD.lnk
2026-07-13 17:01 - 2025-09-09 11:39 - 000001185 _____ C:\Users\Mi\Desktop\RivaTuner Statistics Server.lnk
2026-07-13 17:01 - 2025-09-09 11:39 - 000001096 _____ C:\Users\Mi\Desktop\OBS Studio.lnk
2026-07-13 17:01 - 2025-09-09 11:39 - 000001052 _____ C:\Users\Mi\Desktop\TeamSpeak 3 Client.lnk
2026-07-13 17:01 - 2025-09-09 11:39 - 000000984 _____ C:\Users\Mi\Desktop\4K Video Downloader+.lnk
2026-07-13 17:01 - 2025-09-09 11:39 - 000000821 _____ C:\Users\Mi\Desktop\Microsoft Edge.lnk
2026-07-13 17:01 - 2025-01-07 11:37 - 000002141 _____ C:\Users\Mi\Desktop\JDownloader 2.lnk
2026-07-13 17:01 - 2024-05-17 12:53 - 000001917 _____ C:\Users\Mi\Desktop\IrfanView 64 Thumbnails.lnk
2026-07-13 17:01 - 2024-05-17 12:53 - 000001043 _____ C:\Users\Mi\Desktop\IrfanView 64.lnk
2026-07-13 17:01 - 2023-08-09 13:25 - 000001140 _____ C:\Users\Mi\Desktop\Chess 2022.lnk
2026-07-13 17:01 - 2023-02-12 12:26 - 000001434 _____ C:\Users\Mi\Desktop\Prohlížeč Opera.lnk
2026-07-13 17:01 - 2023-02-11 17:43 - 000001155 _____ C:\Users\Mi\Desktop\MSI Afterburner.lnk
2026-07-13 17:01 - 2023-02-11 16:53 - 000001205 _____ C:\Users\Mi\Desktop\T-Mobile Internet Manager.lnk
2026-07-13 17:01 - 2023-02-11 14:43 - 000000923 _____ C:\Users\Mi\Desktop\Total Commander.lnk
2026-07-13 17:01 - 2023-02-11 14:43 - 000000603 _____ C:\Users\Mi\Desktop\Total Commander 64 bit.lnk
2026-07-13 16:29 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2026-07-13 12:39 - 2026-02-06 11:03 - 000000000 ____D C:\Users\Mi\AppData\Roaming\utorrent
2026-07-13 12:39 - 2025-10-11 17:41 - 000000000 ____D C:\Polda 6 CZ
2026-07-13 12:39 - 2025-01-08 12:51 - 000000000 ____D C:\Users\Mi\AppData\Roaming\BitTorrent
2026-07-13 12:28 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2026-07-13 12:28 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2026-07-13 12:22 - 2023-02-09 17:13 - 001693656 _____ C:\Windows\system32\PerfStringBackup.INI
2026-07-13 12:22 - 2019-12-07 16:43 - 000716894 _____ C:\Windows\system32\perfh005.dat
2026-07-13 12:22 - 2019-12-07 16:43 - 000145072 _____ C:\Windows\system32\perfc005.dat
2026-07-13 12:17 - 2025-02-20 19:21 - 000000000 ____D C:\Program Files\LibreOffice
2026-07-13 12:17 - 2023-02-09 17:07 - 000008192 ___SH C:\DumpStack.log.tmp
2026-07-13 12:17 - 2023-02-09 17:07 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-07-13 12:16 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2026-07-13 12:01 - 2024-08-12 16:01 - 000000000 ____D C:\Users\Mi\AppData\Local\CrashDumps
2026-07-13 12:01 - 2024-04-05 13:01 - 000000000 ____D C:\Users\Mi\AppData\Roaming\TS3Client
2026-07-13 12:01 - 2023-02-16 13:51 - 000000000 ____D C:\Users\Mi\AppData\Roaming\MPC-HC
2026-07-13 12:01 - 2023-02-09 17:06 - 000000000 ____D C:\Windows\Panther
2026-07-07 10:44 - 2025-02-06 19:58 - 000003564 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-382369773-1592508727-1391189433-1001
2026-07-07 10:44 - 2023-10-14 09:57 - 000002370 _____ C:\Users\Mi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-07-07 10:44 - 2023-02-11 16:55 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-382369773-1592508727-1391189433-1001
2026-07-07 10:44 - 2023-02-09 17:16 - 000003372 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-382369773-1592508727-1391189433-1001
2026-07-06 17:58 - 2025-02-15 19:50 - 000000000 ____D C:\Users\Mi\Desktop\text
2026-07-06 12:42 - 2023-02-12 15:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-07-06 11:28 - 2025-02-13 18:47 - 000000295 _____ C:\Users\Mi\d4ac4633ebd6440fa397b84f1bc94a3c.7z
2026-07-06 11:28 - 2025-02-13 17:56 - 000000000 ____D C:\Users\Mi\AppData\Local\Nox
2026-07-06 11:28 - 2023-02-09 17:12 - 000000000 ____D C:\Users\Mi
2026-07-06 10:32 - 2023-07-06 13:49 - 000000000 ____D C:\Users\Mi\Desktop\obrazky
2026-07-06 09:58 - 2025-02-13 17:58 - 000000000 ____D C:\Users\Mi\.android
2026-07-06 09:57 - 2026-03-31 11:59 - 000000000 ____D C:\Users\Mi\.BigNox
2026-07-06 09:57 - 2025-02-13 17:58 - 000000000 ____D C:\Users\Mi\vmlogs
2026-07-06 09:57 - 2025-02-13 17:58 - 000000000 ____D C:\Users\Mi\AppData\Local\NoxSrv
2026-07-06 09:37 - 2023-02-10 17:06 - 000000000 ____D C:\Users\Mi\AppData\Local\D3DSCache
2026-07-06 09:36 - 2024-02-23 15:02 - 000000000 ____D C:\Users\Mi\AppData\Local\cache
2026-07-06 09:34 - 2026-03-31 12:24 - 000000000 ____D C:\Users\Mi\AppData\Local\Bluestacks
2026-07-02 11:18 - 2023-02-12 15:06 - 000001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-06-23 10:19 - 2023-02-09 17:07 - 000000000 ____D C:\Windows\system32\Drivers\wd
2026-06-20 09:57 - 2023-02-12 17:14 - 000003970 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-382369773-1592508727-1391189433-1001UA{671F0508-94A0-4724-ABB5-8BA8B99576AD}
2026-06-20 09:57 - 2023-02-12 17:14 - 000003898 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-382369773-1592508727-1391189433-1001Core{22470D11-467B-4882-B361-8EF9055909A5}
2026-06-20 09:30 - 2023-02-09 17:07 - 000003640 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-20 09:30 - 2023-02-09 17:07 - 000003514 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== Files in the root of some directories ========
2023-02-11 14:54 - 2023-02-11 14:54 - 000000025 _____ () C:\Users\Mi\AppData\Roaming\alsoft.ini
2023-02-13 13:04 - 2026-03-23 18:27 - 000000000 _____ () C:\Users\Mi\AppData\Roaming\FileIn.cns
2023-02-13 13:04 - 2026-03-23 18:27 - 000000000 _____ () C:\Users\Mi\AppData\Roaming\FileOut.cns
2023-02-12 16:30 - 2026-07-13 21:33 - 000007602 _____ () C:\Users\Mi\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-07-2026 01
Ran by Mi (14-07-2026 17:01:18)
Running from C:\Users\Mi\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.4046 (X64) (2023-02-09 15:09:05)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-382369773-1592508727-1391189433-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-382369773-1592508727-1391189433-503 - Limited - Disabled)
Guest (S-1-5-21-382369773-1592508727-1391189433-501 - Limited - Disabled)
Mi (S-1-5-21-382369773-1592508727-1391189433-1001 - Administrators - Enabled) => C:\Users\Mi
WDAGUtilityAccount (S-1-5-21-382369773-1592508727-1391189433-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Enabled - Up to date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
1.0 (HKLM-x32\...\{AB726D73-E20A-4534-B607-EBB1A3867DD5}_is1) (Version: - ml-train.ucoz.ru)
30+ Free Patience (HKLM-x32\...\30+ Free Patience) (Version: - )
4K Video Downloader+ (HKLM\...\{0007A5D2-DEB9-4811-B201-7DAA9CE75FC7}) (Version: 26.1.5.0370 - Open Media LLC) Hidden
4K Video Downloader+ (HKLM-x32\...\{61d16153-cd60-41d8-bb5c-44bf72a83894}) (Version: 26.1.5.0370 - Open Media LLC)
ActivityChanger 1.5 (HKLM-x32\...\ActivityChanger 1.5) (Version: - )
Age Of Empires 3 CZ verze 1.0 (HKLM-x32\...\{A6502644-790D-4DCB-824F-45C64B22AF4D}_is1) (Version: 1.0 - tomi2k9)
Bandicam (HKLM-x32\...\Bandicam) (Version: 6.0.6.2034 - Bandicam.com)
Bandicam MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandicam.com)
Bestie Tajemstvi zamku Bileho jednorozce v.2015 (HKLM-x32\...\Bestie Tajemstvi zamku Bileho jednorozce v.2015) (Version: v.2015 - Spidla)
BlueStacks (HKLM\...\BlueStacks_nxt) (Version: 5.22.232.1002 - now.gg, Inc.)
BlueStacks Services (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\BlueStacksServices) (Version: 3.0.9 - now.gg, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BVS Solitaire Collection 9.0 (HKLM-x32\...\BVSSOL_is1) (Version: 9.0 - BVS Development Corporation)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7128 - CDBurnerXP)
ConBuilder (HKLM-x32\...\ConBuilder) (Version: 2.04.0007 - WEIruan)
CPUID CPU-Z 2.08 (HKLM\...\CPUID CPU-Z_is1) (Version: 2.08 - CPUID, Inc.)
Černý kocour Sběratelská edice verze 1.0b (HKLM-x32\...\Černý kocour Sběratelská edice_is1) (Version: 1.0b - )
Dáma 2004 (HKLM-x32\...\Dáma 2004 ) (Version: - )
DXTBmp (HKLM-x32\...\{2C1544E4-5DA6-4A72-B1BA-E4692991C1DC}) (Version: 1.00.000 - )
East Coast Express Part 1 (HKLM-x32\...\East Coast Express Part 1) (Version: - )
East Coast Express Part 2 (HKLM-x32\...\East Coast Express Part 2) (Version: - )
Enterprise Part 1 (HKLM-x32\...\Enterprise Part 1) (Version: - )
FFEDIT_Sub v1.2 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\FFEDIT_Sub v1.2) (Version: - )
Ghostscript GPL 10.03.1 (Msi Setup) (HKLM\...\_{476FD34A-6D96-497A-9B55-63F3A9A8B3C0}) (Version: 10.03.1 - Corel Corporation)
Ghostscript GPL 10.03.1 (Msi Setup) (HKLM\...\{476FD34A-6D96-497A-9B55-63F3A9A8B3C0}) (Version: 10.03.1 - Corel Corporation) Hidden
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
Gothic (HKLM-x32\...\1207658682_is1) (Version: 1.08k Hotfix - GOG.com)
HP Prime Virtual Calculator (64 bit) (HKLM\...\{B58605BE-9DED-4176-AE28-870E782755E1}) (Version: 2.1.14730.79 - HP) Hidden
HP Prime Virtual Calculator (HKLM-x32\...\{6cad3ba6-d99a-4bf5-98c6-c4132260fb77}) (Version: 2.1.14730.79 - HP)
Huawei Drivers (HKLM-x32\...\{C82D8932-EB28-4da6-9582-33D515D46F04}) (Version: 5.05.02.00 - )
Hungarotram 1.0 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Hungarotram 1.0) (Version: - )
HWiNFO® 64 (HKLM\...\HWiNFO® 64_is1) (Version: 8.40 - Martin Malik, REALiX s.r.o.)
Chess 2022 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Chess 2022) (Version: 2022.4 - Filip Höfer)
Chessarama (HKLM-x32\...\Chessarama_is1) (Version: - )
Chris Sawyer's Locomotion (HKLM-x32\...\GOGPACKLOCOMOTION_is1) (Version: 2.0.0.8 - GOG.com)
Inno Setup verze 6.2.2 (HKLM-x32\...\Inno Setup 6_is1) (Version: 6.2.2 - jrsoftware.org)
Intel(R) Chipset Device Software (HKLM\...\{B685D0AD-42A8-4A39-9BFE-8C063FA9AF29}) (Version: 10.1.1.8 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{60DC6F22-D268-44F0-8720-200033508384}) (Version: 11.0.0.1158 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{DF17C0DB-76D8-4A45-B26E-674F8455B803}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel® Chipset Device Software (HKLM-x32\...\{c6cff78a-cccb-49d5-be68-ae0ec5f0d48a}) (Version: 10.1.1.8 - Intel(R) Corporation) Hidden
IrfanView 4.67 (64-bit) (HKLM\...\IrfanView64) (Version: 4.67 - Irfan Skiljan)
Irish Enterprise version 2 (HKLM-x32\...\Irish Enterprise version 2) (Version: - Fastline Simulation Ltd)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0.1 - AppWork GmbH)
jewel match atlantis solitaire collectors edition version 1.0 (HKLM-x32\...\{70843751-1911-2019-7777-90091911AAA}_is1) (Version: 1.0 - )
LibreOffice 25.2.0.3 (HKLM\...\{E38AFCD6-BF08-4ECA-AAFF-D6D57FAC1A3A}) (Version: 25.2.0.3 - The Document Foundation)
Link Shell Extension (HKLM\...\HardlinkShellExt) (Version: 3.9.3.5 - Hermann Schinagl)
Loksim3D (HKLM\...\Loksim3D_is1) (Version: 2.11.0 - Loksim3D)
London and South East (HKLM-x32\...\London and South East) (Version: - )
Making Tracks Evesham Route for MSTS (HKLM-x32\...\Making Tracks Evesham Route for MSTS) (Version: v1.0.0 - Making Tracks Rail Simulation Software Limited)
Malwarebytes version 5.5.7.255 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.5.7.255 - Malwarebytes)
Mariáš 3.4 (HKLM-x32\...\{6F42ECD9-A1E6-4FFC-B16D-768F1D70AD30}) (Version: 3.4.0 - Ganttsoft)
Microsoft .NET Host - 6.0.14 (x64) (HKLM\...\{40D4EC44-91F8-4EEE-869E-F4B3E90E6688}) (Version: 48.59.55225 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.15 (x64) (HKLM\...\{4C903F19-B4C3-4D0C-8CC9-D444C511AF1C}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.14 (x64) (HKLM\...\{D1726E78-81F3-40A2-A7AF-6286BAA49B1C}) (Version: 48.59.55225 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.15 (x64) (HKLM\...\{11CCC9F6-77AA-4421-9EAC-BAEC36D96817}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.14 (x64) (HKLM\...\{61202CF9-3B84-4E5A-91A1-2984FAE38259}) (Version: 48.59.55225 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.15 (x64) (HKLM\...\{8731E6E3-AF96-4515-ACEC-DBFB3DF55292}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 131.0.2903.112 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 131.0.2903.112 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Czech) 2007 (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Excel MUI (Czech) 2007 (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Czech) 2007 (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Czech) 2007 (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2007 (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (HKLM-x32\...\{90120000-002C-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Czech) 2007 (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Czech) 2007 (HKLM\...\{90120000-002A-0405-1000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2007 (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\OneDriveSetup.exe) (Version: 26.108.0607.0002 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft Train Simulator (HKLM-x32\...\Train Simulator 1.0) (Version: - )
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual Studio Tools for Applications 2022 (HKLM-x32\...\{5451d67a-bba3-400d-9705-96fb24f27192}) (Version: 17.0.33529 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2022 x64 Hosting Support (HKLM\...\{2472E763-D716-3A63-ACC5-FFAE11F05B71}) (Version: 17.0.33529 - Microsoft Corporation) Hidden
Microsoft Visual Studio Tools for Applications 2022 x86 Hosting Support (HKLM-x32\...\{86B4A90B-3A22-302E-8407-D83DF8D427F7}) (Version: 17.0.33529 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.14 (x64) (HKLM\...\{424D9E0C-14D9-4D4B-9562-845689D972F6}) (Version: 48.59.55235 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.14 (x64) (HKLM-x32\...\{c4558324-5b32-43fc-9ac2-423fee96dae0}) (Version: 6.0.14.32124 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.15 (x64) (HKLM\...\{0E4A7820-FDA4-4250-B7AC-E7A2F7B43B64}) (Version: 64.60.31203 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.15 (x64) (HKLM-x32\...\{5625bb48-295c-4113-bc92-d6a69b19b04c}) (Version: 8.0.15.34718 - Microsoft Corporation)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 152.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 109.0.1 - Mozilla)
MPC-HC 2.0.0 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 2.0.0 - MPC-HC Team)
MSI Afterburner 4.6.5 Beta 4 (HKLM-x32\...\Afterburner) (Version: 4.6.5 Beta 4 - MSI Co., LTD)
MSTS CFR Megapack 10 v1 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MSTS CFR Megapack 10 v1) (Version: - )
MSTS Patch 1.8.0521 CZ (HKLM-x32\...\{587A2120-41D3-11DB-3D6C-00E19E4D4AE1}) (Version: 1.8.052113 - George)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.4.9 - Notepad++ Team)
NoxPlayer (HKLM-x32\...\Nox) (Version: 7.0.6.2 - Duodian Technology Co. Ltd.)
NVIDIA Ovladač HD audia 1.4.5.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.5.0 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 581.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 581.42 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 30.2.3 - OBS Project)
Opera Stable 100.0.4815.76 (HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\Opera 100.0.4815.76) (Version: 100.0.4815.76 - Opera Software)
Oshawa Route 1.0 (HKLM-x32\...\Oshawa Route 1.0) (Version: 1.0 - Maple Leaf Tracks)
paint.net (HKLM\...\{DBC43589-CC32-4502-BBEC-5B931AF4BD2E}) (Version: 5.0.2 - dotPDN LLC)
PARKING TYCOON BUSINESS SIMULATOR (HKLM-x32\...\PARKING TYCOON BUSINESS SIMULATOR_) (Version: - )
Polda 6 CZ v.1.1 (HKLM-x32\...\Polda 6 CZ v.1.1) (Version: v.1.1 - libbi)
Port Royale (HKLM-x32\...\Port Royale_is1) (Version: 1.4 - US-ACTION, s.r.o.)
Port Royale 2 (HKLM-x32\...\Port Royale 2) (Version: - )
Pretty Good Solitaire version 12.4.0 (HKLM-x32\...\Pretty Good Solitaire_is1) (Version: 12.4.0 - Goodsol Development Inc.)
QD DB Umbauwaggons V4.0 (HKLM-x32\...\QD DB Umbauwaggons V4.0) (Version: - )
Railroad Tycoon II Platinum (HKLM-x32\...\1445250876_is1) (Version: 2.0.0.5 - GOG.com)
Railroads Online (HKLM-x32\...\Railroads Online_is1) (Version: - )
Railway Empire - France (HKLM-x32\...\2147483048_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire - Germany (HKLM-x32\...\1455317728_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire - Great Britain & Ireland (HKLM-x32\...\1841852514_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire - Mexico (HKLM-x32\...\1974940689_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire - The Great Lakes (HKLM-x32\...\1740280886_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire (HKLM-x32\...\1556481953_is1) (Version: 1.9.0.24255 - GOG.com)
Railway Empire: Crossing the Andes (HKLM-x32\...\1212290691_is1) (Version: 1.9.0.24255 - GOG.com)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7727 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.6.8 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.6.8 - VS Revo Group, Ltd.)
RivaTuner Statistics Server 7.3.4 Beta 6 (HKLM-x32\...\RTSS) (Version: 7.3.4 Beta 6 - Unwinder)
Route Riter 7.8 (HKLM-x32\...\Route Riter 7.8) (Version: 7.8.10 - Digital Rails Corporation)
RTrainSim Launcher (HKLM-x32\...\{D85BDD00-2EAD-4A55-9501-B28570A1AC51}) (Version: 1.8 - MaDaDev)
RUNAWAY - A road adventure (HKLM-x32\...\{4B2767BD-9445-4A0C-BB8A-6B8350181B46}) (Version: - )
Sam & Max Save the World (HKLM-x32\...\1409865962_is1) (Version: 1.1.0 - GOG.com)
Samorost 3 (HKLM-x32\...\1452686647_is1) (Version: 1.467.0 - GOG.com)
ScaleRail (HKLM-x32\...\ScaleRail1.77) (Version: 1.77 - 3DTrains)
ScaleRoad (HKLM-x32\...\ScaleRoad1.77) (Version: 1.77 - 3DTrains)
Simon the Sorcerer 2: 25th Anniversary Edition (HKLM-x32\...\1893480337_is1) (Version: 1.2.1 - GOG.com)
Simutrans Game (HKLM-x32\...\Simutrans) (Version: - )
Solas and the White Winter (HKLM-x32\...\Solas and the White Winter_is1) (Version: - )
Spintires (HKLM-x32\...\Spintires_is1) (Version: - )
Station to Station (HKLM-x32\...\Station to Station_is1) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
STP DB ICE3 406 V1.0 (HKLM-x32\...\STP DB ICE3 406 V1.0) (Version: - )
SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.4.6 - Krzysztof Kowalczyk)
Sweet Solitaire School Witch 2 version 1.0 (HKLM-x32\...\{59475593-1911-2019-7777-90091911AAA}_is1) (Version: 1.0 - )
Taroky (HKLM-x32\...\Taroky_is1) (Version: - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.10 - TeamSpeak Systems GmbH)
Time Stopper (HKLM-x32\...\Time Stopper3.00) (Version: 3.00 - DilSoft)
T-Mobile Internet Manager (HKLM-x32\...\T-Mobile Communication Centre) (Version: 2017-12-05@2017-04-13 - Gemfor s.r.o.)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.51 - Ghisler Software GmbH)
Train Store V3.2 (HKLM-x32\...\Train Store V3.2) (Version: - )
Train Valley World (HKLM-x32\...\Train Valley World) (Version: - TiNYiSO)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
WebM Media Foundation Components (HKLM-x32\...\webmmf) (Version: 1.0.1.2 - WebM Project)
WinAce Archiver (HKLM-x32\...\WinAce Archiver) (Version: 2.69 - e-merge GmbH)
WinRAR 6.22 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.22.0 - win.rar GmbH)
Workers & Resources: Soviet Republic - Biomes (HKLM-x32\...\1668945748_is1) (Version: 1.0.0.4.2 - GOG.com)
Workers & Resources: Soviet Republic (HKLM-x32\...\1860281269_is1) (Version: 1.0.0.4.2 - GOG.com)
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
Youtube Downloader HD v. 5.9.9.5 (HKLM-x32\...\Youtube Downloader HD_is1) (Version: - YoutubeDownloaderHD.com)
ZDSimulator version 55.008 (HKLM-x32\...\{1291E1CC-8792-4CE0-BBEB-FA42BA028007}_is1) (Version: 55.008 - ZDSimulator.com.ua)
Менеджер сценариев RTrainSim (HKLM-x32\...\Менеджер сценариев RTrainSim_is1) (Version: 1.0 - Галета Антон)
Packages:
=========
FreeCell v češtině -> C:\Program Files\WindowsApps\TreeCardGames.FreeCellCollectionFree_5.3.2.0_x64__n666hb6ddc5jp [2026-04-04] (TreeCardGames)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2023-02-09] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe [2023-02-10] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe [2023-02-10] (Microsoft Corporation) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.968.0_x64__56jybvy8sckqj [2025-10-12] (NVIDIA Corp.)
Pošta a Kalendář -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2023-02-09] (Microsoft Corporation) [MS Ad]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{5EA43877-C6D8-4885-B77A-C0BB27E94372}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.241.15\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{81093D63-7825-417B-BFC8-ADC63FA4E53D}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.241.15\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-382369773-1592508727-1391189433-1001_Classes\CLSID\{B314A279-F12F-4B54-A0AC-148FA68207CF}\InprocServer32 -> C:\Users\Mi\AppData\Local\Microsoft\EdgeUpdate\1.3.241.15\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2210608 2006-10-26] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers: [IconOverlayJunction] -> {0A479751-02BC-11d3-A855-0004AC2568FF} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers-x32: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers-x32: [IconOverlayJunction] -> {0A479751-02BC-11d3-A855-0004AC2568FF} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ShellIconOverlayIdentifiers-x32: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2023-01-27] (Notepad++ -> )
ContextMenuHandlers1: [BB FlashBack 2] -> {A8065B9E-193F-4797-B62D-8F6321E7FCCB} => -> No File
ContextMenuHandlers1: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-05-29] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-05-29] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [ZFAdd] -> {8FF88D27-7BD0-11D1-BFB7-00AA00262A11} => C:\Program Files (x86)\WinAce\arcext.dll [2007-11-08] (e-merge GmbH) [File not signed]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-07-13] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers4-x32: [ZFAdd] -> {8FF88D27-7BD0-11D1-BFB7-00AA00262A11} => C:\Program Files (x86)\WinAce\arcext.dll [2007-11-08] (e-merge GmbH) [File not signed]
ContextMenuHandlers5: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_901d8cfde13e2b8b\nvshext.dll [2025-09-23] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2021-01-17] (schinagl.priv.at -> )
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-07-13] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-05-29] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-05-29] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\system32\rtvcvfw64.dll [246272 2012-09-28] () [File not signed]
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\system32\bdmjpeg64.dll [75248 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\system32\bdmpegv64.dll [75272 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\system32\bdmpega64.acm [75784 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\SysWOW64\rtvcvfw32.dll [247296 2012-09-28] () [File not signed]
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\SysWOW64\bdmjpeg.dll [71152 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\SysWOW64\bdmpegv.dll [71176 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\SysWOW64\bdmpega.acm [71176 2017-01-26] (Bandicam Company -> )
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\Mi\Desktop\Nebuch.lnk -> G:\Program Files\Nebuch\LaunchGame.bat ()
Shortcut: C:\Users\Mi\Desktop\Менеджер сценариев RTrainSim.lnk -> G:\Program Files\Менеджер сценариев RTrainSim\ActivityManRTS.exe () <==== Cyrillic
Shortcut: C:\Users\Mi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Link Shell Extension\Donate.lnk -> hxxp://schinagl.priv.at/nt/hardlinkshellext/linkshellextension.htm
Shortcut: C:\Users\Mi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ActivityChanger\ActivityChanger.lnk -> G:\Program Files\Microsoft Games\Train Simulator\ActivityChanger\run_ac.bat (No File)
==================== Loaded Modules (Whitelisted) =============
2014-01-09 14:15 - 2014-01-09 14:15 - 001146880 _____ () [File not signed] C:\Program Files (x86)\Huawei\Drivers\NDISAPI.dll
2022-11-05 12:04 - 2022-11-05 12:04 - 000058368 _____ () [File not signed] C:\Program Files (x86)\RivaTuner Statistics Server\RTFC.dll
2022-11-05 12:04 - 2022-11-05 12:04 - 000074240 _____ () [File not signed] C:\Program Files (x86)\RivaTuner Statistics Server\RTMUI.dll
2022-11-05 12:04 - 2022-11-05 12:04 - 000368640 _____ () [File not signed] C:\Program Files (x86)\RivaTuner Statistics Server\RTUI.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-26] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 11:14 - 2026-02-07 20:09 - 000004136 _____ C:\Windows\system32\drivers\etc\hosts
109.94.209.70 *.fitgirl-repacks.xyz # Fake FitGirl site
109.94.209.70 *.fitgirl-repacks.xyz # Fake FitGirl site
109.94.209.70 fitgirl-repack.org # Fake FitGirl site
109.94.209.70 www.fitgirl-repack.org # Fake FitGirl site
109.94.209.70 fitgirlrepacks.pro # Fake FitGirl site
109.94.209.70 www.fitgirlrepacks.pro # Fake FitGirl site
109.94.209.70 fitgirl-repacks-site.org # Fake FitGirl site
109.94.209.70 www.fitgirl-repacks-site.org # Fake FitGirl site
109.94.209.70 fitgirls-repacks.com # Fake FitGirl site
109.94.209.70 fitgirlrepack.cc # Fake FitGirl site
109.94.209.70 fitgirlrepacks.org # Fake FitGirl site
109.94.209.70 www.fitgirls-repacks.com # Fake FitGirl site
109.94.209.70 www.fitgirlrepack.cc # Fake FitGirl site
109.94.209.70 www.fitgirlrepacks.org # Fake FitGirl site
109.94.209.70 fitgirltorrent.org # Fake FitGirl site
109.94.209.70 www.fitgirltorrent.org # Fake FitGirl site
109.94.209.70 fitgirl-repacks.net # Fake FitGirl site
109.94.209.70 www.fitgirl-repacks.net # Fake FitGirl site
109.94.209.70 fitgirlrepack.net # Fake FitGirl site
109.94.209.70 www.fitgirlrepack.net # Fake FitGirl site
109.94.209.70 fitgirl-repacks.com.de # Fake FitGirl site
109.94.209.70 www.fitgirl-repacks.com.de # Fake FitGirl site
109.94.209.70 fitgirltorrent.com # Fake FitGirl site
109.94.209.70 www.fitgirltorrent.com # Fake FitGirl site
109.94.209.70 fitgirl-repacks.in # Fake FitGirl site
109.94.209.70 fitgirlrepacks.in # Fake FitGirl site
109.94.209.70 www.fitgirlrepacks.in # Fake FitGirl site
109.94.209.70 fitgirlrepacks.co # Fake FitGirl site
109.94.209.70 fitgirl-repacks.cc # Fake FitGirl site
109.94.209.70 fitgirl-repacks.to # Fake FitGirl site
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 62.141.16.161 - 62.141.16.150
Windows Firewall is enabled.
Network Binding:
=============
Mobilní síť 5: HUAWEI Mobile Connect - Network Card #5 -> ew_wwanecm.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: )
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|G:\Program Files\Microsoft Games\Train Simulator\TRAINS\TRAINSET 5\2014 CD Raijet szerelvény
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Polda 6 CZ
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
MSCONFIG\Services: wuauserv => 3
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\StartupApproved\Run: => "electron.app.BlueStacks Services"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{631720E6-225A-474E-959B-442AD9082785}G:\program files\live for speed z\lfs.exe] => (Allow) G:\program files\live for speed z\lfs.exe () [File not signed]
FirewallRules: [UDP Query User{8DD54513-09A8-4366-B626-61B4326E0A10}G:\program files\live for speed z\lfs.exe] => (Allow) G:\program files\live for speed z\lfs.exe () [File not signed]
FirewallRules: [{659841F0-B137-43C4-AC9D-48D36039051D}] => (Block) G:\program files\live for speed z\lfs.exe () [File not signed]
FirewallRules: [{ED235EB1-4518-4334-AD0C-38B4F577DA8B}] => (Block) G:\program files\live for speed z\lfs.exe () [File not signed]
FirewallRules: [{BF61E11A-ADF1-4CC9-A2AD-7C94EEC08891}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{ABD29330-B04D-413B-B479-7AE8D36C0377}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{B3E5A585-2C3B-4894-8E23-A197F433035A}G:\program files\open rails1.5stable\runactivity.exe] => (Allow) G:\program files\open rails1.5stable\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [UDP Query User{BB4033A2-8BCD-46CD-82DB-BAB8C3E0D9BA}G:\program files\open rails1.5stable\runactivity.exe] => (Allow) G:\program files\open rails1.5stable\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{65D1631F-E74C-4B40-8FC1-B60AEB5DA146}] => (Block) G:\program files\open rails1.5stable\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{0FA79A7A-AA7E-4915-93E5-6E44BBFEDC5C}] => (Block) G:\program files\open rails1.5stable\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{D036E904-55DE-4CDA-ACCE-B8661C4D32A1}] => (Allow) C:\Users\Mi\AppData\Local\Programs\Opera\99.0.4788.88\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [TCP Query User{80C70051-5FA9-46E4-A047-5DF0727F985F}C:\users\mi\appdata\local\programs\opera\opera.exe] => (Block) C:\users\mi\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{9CF5C523-D093-42A2-A95D-72A6720BB2E0}C:\users\mi\appdata\local\programs\opera\opera.exe] => (Block) C:\users\mi\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{7653A5C4-CC44-473B-92DF-B8464CE5FB25}] => (Allow) C:\Users\Mi\AppData\Local\Programs\Opera\100.0.4815.76\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{2495A4F4-4711-4DAC-A8CC-78F638C0D4FB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{809EA813-F3AE-4240-863D-639CB587E530}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5F17A198-3C6D-4BA0-ABD8-C45E6B475DCE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F3FD2543-AED5-4DA4-881F-9461A455E822}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{B971455D-D2DB-4EC1-AAF1-24C7A3CDDEFA}C:\program files\hp\hp prime virtual calculator\hpprime.exe] => (Allow) C:\program files\hp\hp prime virtual calculator\hpprime.exe (Moravia Consulting, spol s. r. o. -> )
FirewallRules: [UDP Query User{7F8C2DD3-0D30-45A0-A85A-BE762267D6C8}C:\program files\hp\hp prime virtual calculator\hpprime.exe] => (Allow) C:\program files\hp\hp prime virtual calculator\hpprime.exe (Moravia Consulting, spol s. r. o. -> )
FirewallRules: [{92BB304F-67D8-4704-B3F7-707FDB4E7605}] => (Block) C:\program files\hp\hp prime virtual calculator\hpprime.exe (Moravia Consulting, spol s. r. o. -> )
FirewallRules: [{7AA5BB72-89D5-4FCB-ABF0-90102B35E749}] => (Block) C:\program files\hp\hp prime virtual calculator\hpprime.exe (Moravia Consulting, spol s. r. o. -> )
FirewallRules: [{F62DB9CE-3664-47E1-B343-FBA7ABE86994}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe (Ubisoft Massive -> Ubisoft)
FirewallRules: [{0D84C3D8-9093-4643-9685-58F0FFED0DF3}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe (Ubisoft Massive -> Ubisoft)
FirewallRules: [TCP Query User{4C6EA23F-3117-46C0-B9CF-E9CCAEC36010}G:\program files\microsoft games\train simulator\rts\rts1.exe] => (Allow) G:\program files\microsoft games\train simulator\rts\rts1.exe () [File not signed]
FirewallRules: [UDP Query User{819E1A5B-5784-4962-9B38-6E1AE64E445A}G:\program files\microsoft games\train simulator\rts\rts1.exe] => (Allow) G:\program files\microsoft games\train simulator\rts\rts1.exe () [File not signed]
FirewallRules: [{AD3F1CA2-B7C0-4A13-B722-A73A2FAAE319}] => (Block) G:\program files\microsoft games\train simulator\rts\rts1.exe () [File not signed]
FirewallRules: [{D43CE9D9-C8DF-4204-BBFE-2E7D5B021DB1}] => (Block) G:\program files\microsoft games\train simulator\rts\rts1.exe () [File not signed]
FirewallRules: [{8DDCB23C-AF03-44CD-880E-5CD144610BAC}] => (Allow) C:\Users\Mi\AppData\Roaming\BitTorrent\BitTorrent.exe => No File
FirewallRules: [{2A87FB91-4E2B-4524-B2D9-93D8877BB0FC}] => (Allow) C:\Users\Mi\AppData\Roaming\BitTorrent\BitTorrent.exe => No File
FirewallRules: [TCP Query User{0AFB80CF-B6E0-4525-9F23-AF9FBDC9FC9A}G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe] => (Allow) G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [UDP Query User{CDED80D6-42F6-465F-855B-12A4BF707C01}G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe] => (Allow) G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{11EFFEF8-5E7A-4752-A606-FF42D4441E2B}] => (Block) G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{6DB074C8-7562-4640-ABD4-F29AA73A4A0A}] => (Block) G:\program files\9_14_t1.6-rc7_open rails u2025.08.06-2053\runactivity.exe (James Galloway Ross -> Open Rails)
FirewallRules: [{B932B083-61B5-4708-9E7D-F965A39CF204}] => (Allow) C:\Users\Mi\AppData\Roaming\uTorrent\uTorrent.exe => No File
FirewallRules: [{A119378C-2826-4540-8809-DC9B2D820B86}] => (Allow) C:\Users\Mi\AppData\Roaming\uTorrent\uTorrent.exe => No File
FirewallRules: [TCP Query User{AF819C56-4592-45F6-9A74-49F86F2F1009}D:\games\railroader.build.18404845\railroader.exe] => (Allow) D:\games\railroader.build.18404845\railroader.exe () [File not signed]
FirewallRules: [UDP Query User{590AED6E-A34F-493D-A73C-88FEC0145FBD}D:\games\railroader.build.18404845\railroader.exe] => (Allow) D:\games\railroader.build.18404845\railroader.exe () [File not signed]
FirewallRules: [{383FA83E-9515-459C-B7C5-4606003CB748}] => (Block) D:\games\railroader.build.18404845\railroader.exe () [File not signed]
FirewallRules: [{9553481E-B4CA-4379-AD11-D20226CE6F81}] => (Block) D:\games\railroader.build.18404845\railroader.exe () [File not signed]
FirewallRules: [TCP Query User{0B5F36B3-3D2E-48AD-B649-9FA185E824F7}D:\games\derail.valley.build.19277896\derailvalley.exe] => (Allow) D:\games\derail.valley.build.19277896\derailvalley.exe () [File not signed]
FirewallRules: [UDP Query User{286E0D37-90F4-4AF7-BF02-B4841BE3AA8B}D:\games\derail.valley.build.19277896\derailvalley.exe] => (Allow) D:\games\derail.valley.build.19277896\derailvalley.exe () [File not signed]
FirewallRules: [{2F3EAB9D-CF29-42FC-8321-59D574959D6B}] => (Block) D:\games\derail.valley.build.19277896\derailvalley.exe () [File not signed]
FirewallRules: [{3C6075ED-5300-47E7-AAFC-7080C1AE9C6B}] => (Block) D:\games\derail.valley.build.19277896\derailvalley.exe () [File not signed]
FirewallRules: [{170E580C-F52B-4590-B2EE-ED2597E359DA}] => (Allow) C:\Users\Mi\AppData\Roaming\utorrent\uTorrent.exe => No File
FirewallRules: [{5CA67D32-4B67-4854-853B-FCBCC8E11891}] => (Allow) C:\Users\Mi\AppData\Roaming\utorrent\uTorrent.exe => No File
FirewallRules: [TCP Query User{793AC3B9-C248-4EE7-A654-07AA85EE6BA9}D:\games\train-valley origins\train valley origins.exe] => (Allow) D:\games\train-valley origins\train valley origins.exe () [File not signed]
FirewallRules: [UDP Query User{29115835-F314-411C-B85B-A96503048D45}D:\games\train-valley origins\train valley origins.exe] => (Allow) D:\games\train-valley origins\train valley origins.exe () [File not signed]
FirewallRules: [{EC0D3D8A-78C3-4FFA-BDA8-20C9DB1DC16B}] => (Block) D:\games\train-valley origins\train valley origins.exe () [File not signed]
FirewallRules: [{758FD232-2C2D-4869-B2BE-1013607AEAF9}] => (Block) D:\games\train-valley origins\train valley origins.exe () [File not signed]
FirewallRules: [TCP Query User{C885E9F3-CDDF-4236-9950-3A423FF1D35C}D:\program files\gog games\railway empire\railwayempire.exe] => (Allow) D:\program files\gog games\railway empire\railwayempire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [UDP Query User{9C134915-84D5-42F2-9D62-FB9EF65522E3}D:\program files\gog games\railway empire\railwayempire.exe] => (Allow) D:\program files\gog games\railway empire\railwayempire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [{A613A39E-C9F0-4588-8E13-81A018D10A7E}] => (Block) D:\program files\gog games\railway empire\railwayempire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [{FB05C267-B871-4806-A1B3-53F1C44895BA}] => (Block) D:\program files\gog games\railway empire\railwayempire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [{7CD0AEEF-77AE-4D8E-B0DC-99D771146580}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{9D9220CD-9922-40D9-80FA-8EC91D932E5F}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{170325C8-BE93-486C-97AC-AA2C7A476E33}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{23E13E10-D12A-409B-AB22-BD773D5ACB5C}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{0F93DD6A-DBB0-4CEB-A997-72846692B478}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Transport Fever 2\TransportFever2.exe () [File not signed]
FirewallRules: [{5AB7CD86-7825-4D49-AEFD-6DC103F65650}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Transport Fever 2\TransportFever2.exe () [File not signed]
FirewallRules: [{D0C5693F-4D9D-4CD2-9F13-C8B13C581BEB}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Sim Companies\Sim Companies.exe (Sim Companies) [File not signed]
FirewallRules: [{6C6B34FB-921F-4BB1-A753-176609BF2261}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Sim Companies\Sim Companies.exe (Sim Companies) [File not signed]
FirewallRules: [{D24764B3-F05B-4B07-A5F2-976F2D0871AC}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Farm Manager\FarmManager.exe () [File not signed]
FirewallRules: [{DEF59782-FC57-4544-9055-E4A2228791E9}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Farm Manager\FarmManager.exe () [File not signed]
FirewallRules: [{5E97CD05-0AA0-4F7B-BF81-30E1EA5B445A}] => (Allow) D:\Program Files\Nox\bin\Nox.exe (Nox Limited -> Duodian Technology Co. Ltd.)
FirewallRules: [{D37A19B4-9D4C-47AD-A379-D1468EB8BFEE}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe (Nox Limited -> Nox Limited Corporation)
FirewallRules: [{C45400D5-E917-4519-A020-044D6C604474}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Graveyard Keeper\Graveyard Keeper.exe () [File not signed]
FirewallRules: [{48B013A3-9832-48BC-8348-9691AAA850F9}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Graveyard Keeper\Graveyard Keeper.exe () [File not signed]
FirewallRules: [{8FC87640-093E-4C86-A991-5A25B9CCAC8A}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe (Now.gg, INC -> Bluestack Systems, Inc.)
FirewallRules: [{79D5035A-FBE8-482F-8FB9-CF1A5EDDE4FB}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Now.gg, INC -> BlueStack Systems)
FirewallRules: [{AB1B52C7-DD66-4AB2-8F0D-103B85DB6AB9}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe (Now.gg, INC -> The Qt Company Ltd.)
FirewallRules: [{9343EB8E-4F37-4328-A457-4A908740DE4F}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAIRun.exe (Now.gg, INC -> BlueStack Systems)
==================== Restore Points =========================
12-06-2026 17:31:18 Naplánovaný kontrolní bod
30-06-2026 11:49:05 Naplánovaný kontrolní bod
13-07-2026 11:29:34 Naplánovaný kontrolní bod
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (07/14/2026 04:37:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: MBAMService.exe, verze: 3.2.0.1519, časové razítko: 0x69fa7f95
Název chybujícího modulu: ntdll.dll, verze: 10.0.19041.3996, časové razítko: 0x39215800
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000634f6
ID chybujícího procesu: 0xc44
Čas spuštění chybující aplikace: 0x01dd12b256ac5c5f
Cesta k chybující aplikaci: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 7df649a3-5dc4-43b8-b313-9e645256f521
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (07/12/2026 07:15:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 40766
Error: (07/12/2026 07:15:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 40766
Error: (07/12/2026 07:15:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (07/12/2026 06:05:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: wmplayer.exe, verze: 12.0.19041.3636, časové razítko: 0xd2d3ea02
Název chybujícího modulu: combase.dll, verze: 10.0.19041.3636, časové razítko: 0xa11a7083
Kód výjimky: 0xc0000005
Posun chyby: 0x00074b06
ID chybujícího procesu: 0x690
Čas spuštění chybující aplikace: 0x01dd12181c579b10
Cesta k chybující aplikaci: C:\Program Files (x86)\Windows Media Player\wmplayer.exe
Cesta k chybujícímu modulu: C:\Windows\System32\combase.dll
ID zprávy: 3186c63d-21d8-4df5-b1eb-dcc43bcf426d
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (07/11/2026 05:25:25 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Nový svazek (I:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (07/11/2026 05:25:22 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na (G:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
Error: (07/11/2026 05:23:37 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na (H:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)
System errors:
=============
Error: (07/14/2026 04:37:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Malwarebytes Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.
Error: (07/14/2026 04:31:01 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_328ccea byla ukončena s následující chybou:
Zařízení není připraveno.
Error: (07/13/2026 04:20:23 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_862398 byla ukončena s následující chybou:
Zařízení není připraveno.
Error: (07/13/2026 12:19:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (07/13/2026 12:19:18 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (30000 ms).
Error: (07/13/2026 12:17:16 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba MessagingService_362da byla ukončena s následující chybou:
Zařízení není připraveno k použití.
Error: (07/13/2026 11:58:46 AM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-8N7P3M7)
Description: Nelze spustit server DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Došlo k chybě:
2147942767
při provádění příkazu:
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
Error: (07/13/2026 10:53:44 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_57869ed byla ukončena s následující chybou:
Zařízení není připraveno.
Windows Defender:
================
TimeCreated : 13.07.2026 11:27:31
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (C6930539-61DE-4A64-BFA7-2165DA6F4458}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 12.07.2026 10:09:38
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (AD83C4BC-E0CD-41D8-8465-567575E2D396}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 11.07.2026 10:21:04
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (F8AA5290-09C7-4F7D-ADFF-9D0536524F67}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 10.07.2026 11:29:03
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (C4388B8C-15FC-462D-8498-0717DA9A16FB}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 08.07.2026 17:19:39
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (09F9B587-DA17-4B2D-88D8-AD9F5D5B9BD2}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 06.07.2026 10:12:42
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (275EC0C6-13C1-4527-B0B1-2050100DB91A}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 05.07.2026 11:34:02
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (9B35F837-093C-45BD-AE7C-62CF4A8C781C}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 04.07.2026 10:14:31
(Message : Antivirová ochrana v programu Microsoft Defender šçαń ħãś ŃŚŃ‘ŃŤĐą šţθĎφεð ьĕƒõяė ¢οмφŀèтіõâż.%Ĺ„ %ţŠĉдń ĂŤĂ:%ŃŠ{) (E4D70523-9EB3-4764-81F0-19AF5D1ABB5D}%Đą %ťŞçäη ΤŃрè:%ŃŠAntimalwarovĂ˝ program%Ĺ„ %τЅĉÄņ Рǻřǻмĕτзřş:%вRychlĂ© ) (prohledávánĂ%Đ» %ťЏŝèŗ:%вNT AUTHORITY\SYSTEM%Đ» %ŧŞţор ŔëάŝĎĹ‹:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
CodeIntegrity:
===============
Date: 2026-07-14 16:53:49
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. F1 ZA 12/11/2014
Motherboard: Gigabyte Technology Co., Ltd. H81M-S2H
Processor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Percentage of memory in use: 35%
Total physical RAM: 16336.03 MB
Available physical RAM: 10514.1 MB
Total Virtual: 18768.03 MB
Available Virtual: 10307.23 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:199.39 GB) (Free:39.36 GB) (Model: Patriot P220 1024GB) NTFS
Drive d: (Data) (Fixed) (Total:753.87 GB) (Free:118.38 GB) (Model: Patriot P220 1024GB) NTFS
Drive e: () (Fixed) (Total:99.56 GB) (Free:17.23 GB) (Model: ST1000DM003-1ER162) NTFS ==>[system with boot components (obtained from drive)]
Drive g: () (Fixed) (Total:831.51 GB) (Free:104.06 GB) (Model: ST1000DM003-1ER162) NTFS
Drive h: () (Fixed) (Total:100 GB) (Free:91.86 GB) (Model: ST500DM002-1BD142) NTFS
Drive i: (Nový svazek) (Fixed) (Total:365.75 GB) (Free:84.8 GB) (Model: ST500DM002-1BD142) NTFS
Drive j: (HUAWEI) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
\\?\Volume{6741ba27-cb49-4044-bf66-822fe3449e04}\ () (Fixed) (Total:0.5 GB) (Free:0.08 GB) NTFS
\\?\Volume{ff47f8f6-0000-0000-0000-f0e318000000}\ () (Fixed) (Total:0.44 GB) (Free:0.11 GB) NTFS
\\?\Volume{ed95946d-90ec-4dd8-bf37-87f597a824ed}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 953.9 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: FF47F8F6)
Partition 1: (Active) - (Size=99.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)
Partition 3: (Not Active) - (Size=831.5 GB) - (Type=05)
==========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 0E0D316F)
Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=365.8 GB) - (Type=0F Extended)
==================== End of Addition.txt =======================
Re: Prosím o kontrolu PC
Pouzi fixlist.txt s obsahom:
Start
CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {6acedf64-6514-11ef-af0c-ece137e8cf7e} - "J:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7aaa-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7acc-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {a47e8a88-23ce-11ee-aee9-a47831648add} - "K:\Autorun.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> "C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe" --first-run (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
S1 axbfrsdj; \??\C:\Windows\system32\drivers\axbfrsdj.sys (No File)
S1 hosaiwng; \??\C:\Windows\system32\drivers\hosaiwng.sys (No File)
S1 mlangoti; \??\C:\Windows\system32\drivers\mlangoti.sys (No File)
EmptyTemp:
End
Start
CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {6acedf64-6514-11ef-af0c-ece137e8cf7e} - "J:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7aaa-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7acc-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {a47e8a88-23ce-11ee-aee9-a47831648add} - "K:\Autorun.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> "C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe" --first-run (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
S1 axbfrsdj; \??\C:\Windows\system32\drivers\axbfrsdj.sys (No File)
S1 hosaiwng; \??\C:\Windows\system32\drivers\hosaiwng.sys (No File)
S1 mlangoti; \??\C:\Windows\system32\drivers\mlangoti.sys (No File)
EmptyTemp:
End
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu PC
Fix result of Farbar Recovery Scan Tool (x64) Version: 12-07-2026 01
Ran by Mi (15-07-2026 10:18:23) Run:1
Running from C:\Users\Mi\Desktop
Loaded Profiles: Mi
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {6acedf64-6514-11ef-af0c-ece137e8cf7e} - "J:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7aaa-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7acc-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {a47e8a88-23ce-11ee-aee9-a47831648add} - "K:\Autorun.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> "C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe" --first-run (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
S1 axbfrsdj; \??\C:\Windows\system32\drivers\axbfrsdj.sys (No File)
S1 hosaiwng; \??\C:\Windows\system32\drivers\hosaiwng.sys (No File)
S1 mlangoti; \??\C:\Windows\system32\drivers\mlangoti.sys (No File)
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows Defender\\DisableAntiSpyware => Error setting value.
HKLM\SOFTWARE\Microsoft\Windows Defender\\DisableAntiVirus => Error setting value.
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6acedf64-6514-11ef-af0c-ece137e8cf7e} => removed successfully
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7fda7aaa-aa03-11ed-aed2-ecc8c19aed96} => removed successfully
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7fda7acc-aa03-11ed-aed2-ecc8c19aed96} => removed successfully
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a47e8a88-23ce-11ee-aee9-a47831648add} => removed successfully
HKLM\Software\Microsoft\Active Setup\Installed Components\{49210152-871f-4ffa-961d-a172abcbc09d} => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\System\CurrentControlSet\Services\axbfrsdj => removed successfully
axbfrsdj => service removed successfully
HKLM\System\CurrentControlSet\Services\hosaiwng => removed successfully
hosaiwng => service removed successfully
HKLM\System\CurrentControlSet\Services\mlangoti => removed successfully
mlangoti => service removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 24449143 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 698657173 B
Windows/system/drivers => 12098704 B
Edge => 95414470 B
Firefox => 358760992 B
Opera => 385024 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 200 B
systemprofile32 => 0 B
LocalService => 8686 B
NetworkService => 9862820 B
Mi => 237784074 B
RecycleBin => 3621219 B
EmptyTemp: => 1.3 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 10:21:23 ====
Ran by Mi (15-07-2026 10:18:23) Run:1
Running from C:\Users\Mi\Desktop
Loaded Profiles: Mi
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {6acedf64-6514-11ef-af0c-ece137e8cf7e} - "J:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7aaa-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {7fda7acc-aa03-11ed-aed2-ecc8c19aed96} - "H:\Autorun.exe"
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\...\MountPoints2: {a47e8a88-23ce-11ee-aee9-a47831648add} - "K:\Autorun.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> "C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe" --first-run (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
S1 axbfrsdj; \??\C:\Windows\system32\drivers\axbfrsdj.sys (No File)
S1 hosaiwng; \??\C:\Windows\system32\drivers\hosaiwng.sys (No File)
S1 mlangoti; \??\C:\Windows\system32\drivers\mlangoti.sys (No File)
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows Defender\\DisableAntiSpyware => Error setting value.
HKLM\SOFTWARE\Microsoft\Windows Defender\\DisableAntiVirus => Error setting value.
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6acedf64-6514-11ef-af0c-ece137e8cf7e} => removed successfully
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7fda7aaa-aa03-11ed-aed2-ecc8c19aed96} => removed successfully
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7fda7acc-aa03-11ed-aed2-ecc8c19aed96} => removed successfully
HKU\S-1-5-21-382369773-1592508727-1391189433-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a47e8a88-23ce-11ee-aee9-a47831648add} => removed successfully
HKLM\Software\Microsoft\Active Setup\Installed Components\{49210152-871f-4ffa-961d-a172abcbc09d} => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\System\CurrentControlSet\Services\axbfrsdj => removed successfully
axbfrsdj => service removed successfully
HKLM\System\CurrentControlSet\Services\hosaiwng => removed successfully
hosaiwng => service removed successfully
HKLM\System\CurrentControlSet\Services\mlangoti => removed successfully
mlangoti => service removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 24449143 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 698657173 B
Windows/system/drivers => 12098704 B
Edge => 95414470 B
Firefox => 358760992 B
Opera => 385024 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 200 B
systemprofile32 => 0 B
LocalService => 8686 B
NetworkService => 9862820 B
Mi => 237784074 B
RecycleBin => 3621219 B
EmptyTemp: => 1.3 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 10:21:23 ====
Re: Prosím o kontrolu PC
Myslim, ze kludne mozes ist na IB
P.S. ak budes scanovat s MBAM daj iba disky C: D: a nezaskrtavaj scanovanie archivov
P.S. ak budes scanovat s MBAM daj iba disky C: D: a nezaskrtavaj scanovanie archivov
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu PC
Díky moc za pomoc. Jsem rád, že je vše v pořádku.
Re: Prosím o kontrolu PC
Rado sa stalo 
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Přispějete na provoz fóra?