Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-11-2026
Ran by Admin (administrator) on DESKTOP-Q9C497L (Gigabyte Technology Co., Ltd. B650 EAGLE) (06-11-2026 16:53:23)
Running from C:\Users\Admin\Downloads\FRST64.exe
Loaded Profiles: Admin
Platform: Microsoft Windows 11 Pro Version 26H2 26300.9818 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files\Avast Software\Suite\AvastSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswEngSrv.exe
(C:\Program Files\Avast Software\Suite\AvastUI.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\model_host.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\ShadowPlay\nvsphelper64.exe
(C:\Program Files\SteelSeries\GG\apps\engine\SteelSeriesEngine.exe ->) (GN Hearing A/S -> SteelSeries ApS) C:\Program Files\SteelSeries\GG\apps\engine\prism\SteelSeriesPrism.exe
(C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe ->) (GN Hearing A/S -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\apps\engine\SteelSeriesEngine.exe
(C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe ->) (GN Hearing A/S -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe
(C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe ->) (Spotify AB -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\crashpad_handler.exe
(C:\Program Files\XboxService\x64\XboxService.exe ->) (Microsoft Corporation -> ) C:\Program Files\Microsoft GameInput\x64\GameInputRawInputProxy.exe
(C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe ->) (Roblox Corporation -> ) C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxCrashHandler.exe
(C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe ->) (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> The Qt Company Ltd.) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\QtWebEngineProcess.exe <2>
(C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe ->) (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\crashpad_handler.exe
(cmd.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe
(Discord Inc. -> Discord Inc.) C:\Users\Admin\AppData\Local\Discord\app-1.0.9267\Discord.exe <6>
(explorer.exe ->) (GN Hearing A/S -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\AvastUI.exe <4>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <20>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe <5>
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe <4>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\Display.NvContainer\NVDisplay.Container.exe
(Roblox Corporation -> Roblox Corporation) C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Suite\wsc_proxy.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\afwServ.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\AvastSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\DriverUpdSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\TuneupSvc.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Windows\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray_service.AMD64.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Thrustmaster®) C:\Program Files (x86)\Thrustmaster\Thrustmaster FFB Driver\drivers\amd64\tmGAInstall.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsStore_22608.1401.7.0_x64__8wekyb3d8bbwe\StoreDesktopExtension.exe
(sihost.exe ->) (Spotify AB -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe
(Spotify AB -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe <7>
(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\GCC.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.29.380.0_x64__8wekyb3d8bbwe\WindowsPackageManagerServer.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.4019.0_x64__8wekyb3d8bbwe\EdgeGameAssist.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsStore_22608.1401.7.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2611.1001.9.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.264.3.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.195.1006.0007\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc., Sucursal en España) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe [2257752 2024-09-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [SteelSeriesGG] => C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe [195640 2026-11-02] (GN Hearing A/S -> SteelSeries A/S)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Suite\AvLaunch.exe [1082296 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX2] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe [271496 2017-11-02] (Canon Inc. -> CANON INC.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [36981208 2024-12-26] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [VoicemodV3] => C:\Program Files\Voicemod V3\Voicemod.exe [6781384 2026-07-30] (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5823128 2026-10-21] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [RiotClient] => C:\Riot Games\Riot Client\RiotClientServices.exe --launch-background-mode (No File)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [Discord] => C:\Users\Admin\AppData\Local\Discord\Update.exe [1596344 2025-07-28] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [RobloxPlayerBeta] => C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe [144435664 2026-11-06] (Roblox Corporation -> Roblox Corporation)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [MicrosoftEdgeAutoLaunch_5EFC0ECB77A7585FE9DCDD0B2E946A2B] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5453128 2026-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon TS3300 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDG3.DLL [506368 2023-06-05] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3300 series: C:\WINDOWS\system32\CNMLMG3.DLL [1334784 2023-06-05] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files\AVAST Software\Browser\Application\154.0.35638.100\Installer\chrmstp.exe [6413680 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Environment\\UserInitMprLogonScript: -> (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {D96FE9D3-A062-451E-A262-E8F27B492996} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {DC1AB745-BB82-4267-8975-94AD4634EEF5} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {7E4755DF-3462-4437-8A29-1BABA8A020D3} - System32\Tasks\Avast Secure Browser VPS Differential Update => C:\Program Files\AVAST Software\Browser\Application\vps_helper.exe [2624568 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {88C0CD79-24AB-4E19-BCCD-0A902A4D8EBD} - System32\Tasks\Avast Software\Avast Suite Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-suite\icarus.exe [9896952 2026-10-06] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {EB1CF22A-C3C8-48D7-B5AD-CADEFAD8BD5C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [3710456 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {AAB48FED-F247-4DAF-A9DA-41797E58E31B} - System32\Tasks\Avast Software\Suite Emergency Update => C:\Program Files\Avast Software\Suite\AvEmUpdate.exe [5832120 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {1DC3EAFF-937A-474A-B5A1-1CD6D8124A67} - System32\Tasks\AvastBrowserProtectS-1-5-21-1453151362-2910950682-4162620220-1001 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {D91EC3B1-6750-45D1-84E4-3D89FEFD2D19} - System32\Tasks\AvastDefaultBrowserTask => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {C243ACDD-16CB-4B82-A8E1-ABE586CAACE6} - System32\Tasks\AvastDefaultBrowserTask2 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {ED3FFB3C-DC75-47D9-84F5-A54EB9C686FC} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {C4EF9082-66CC-4FCC-8387-3FA09A416CAE} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B2C33B86-FA53-4324-90ED-60D6BBEDBB12} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Admin\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe [16359344 2026-10-18] (ESET, spol. s r.o. -> ESET)
Task: {A4F6A68F-A61D-4CB4-8147-DF8DB891651B} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Admin\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe [16359344 2026-10-18] (ESET, spol. s r.o. -> ESET)
Task: {3207776E-ECEF-4C3A-80F1-97D32B40AB28} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35404904 2024-10-22] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {9233B5EB-4C39-417A-8F59-328D7F48751F} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3656304 2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8AC794DA-D554-4F47-8E3A-3EB8CA8F6CFD} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\ActionCenterDeferralTask-{d0db0f45-e744-4653-806f-9873445b824b} => {AF28889E-B0FD-494C-9FB0-D3B058A96B34}
Task: {FA614F71-5D59-4589-9663-4A62454B405D} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\ActionCenterRefreshForExpirationTask-{83384942-361c-49f4-8b2e-430689df0d92} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
Task: {E950036C-3336-4F90-A15B-71F539D8217F} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\ActionCenterTriggerTask-128000000001627409-render-{a505c6c9-95aa-43bf-9344-9c8ce9ead680} => {F47D8C53-0B74-4A66-959D-367710AB1F84}
Task: {5BA01223-2BE7-4C5C-85E9-DC04EE73A921} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\SoftLandingRefreshForExpirationTask-{e553db43-cee9-476f-a5b4-7d5a3d92b68e} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 06 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 06 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{b3986dfc-a28a-4dfc-bc34-5b43e674da2d}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{da698474-86af-47b9-a1b6-0636e52f4c39}: [DhcpNameServer] 192.168.1.147 192.168.1.147
FireFox:
========
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Edge:
=======
Edge DefaultProfile: Profile 3
Edge Profile: C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3 [2026-11-06]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\bojobppfploabceghnmlahpoonbcbacn [2026-10-20]
Edge Extension: (Dokumenty Google offline) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-26]
Edge Extension: (Edge relevant text changes) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-09-07]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR DefaultProfile: Default
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Suite\aswidsagent.exe [8015800 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Suite\AvastSvc.exe [1051064 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Suite\afwServ.exe [2795448 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Suite\aswToolsSvc.exe [1120184 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastCleanupSvc; C:\Program Files\Avast Software\Suite\TuneupSvc.exe [24096696 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastDriverUpdSvc; C:\Program Files\Avast Software\Suite\DriverUpdSvc.exe [21313464 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\154.0.35638.100\elevation_service.exe [4380736 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Suite\wsc_proxy.exe [56912 2026-11-04] (Avast Software s.r.o. -> AVAST Software)
S3 Denuvo Anti-Cheat Update Service; C:\Program Files\Denuvo Anti-Cheat\denuvo-anti-cheat-update-service.exe [1201304 2026-08-20] (DENUVO GmbH -> Denuvo GmbH)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [1039800 2026-08-18] (Epic Games Inc. -> Epic Games, Inc.)
R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [150640 2023-11-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [2606520 2026-08-29] (Epic Games Inc. -> Epic Games, Inc.)
R2 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [466600 2026-10-19] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
S2 GBTECService; C:\Program Files (x86)\GIGABYTE\GBTECService\OLEDDisplayService.exe [19568 2024-07-04] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460488 2024-04-03] (Canon Inc. -> )
S3 LiveStudioElevationService; C:\Program Files\TikTok LIVE Studio\1.36.6\elevation_service.exe [2522408 2026-09-19] (TikTok Pte. Ltd. -> The Chromium Authors)
R2 logi_lamparray_service; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray_service.AMD64.exe [11567496 2026-04-14] (Logitech Inc -> Logitech, Inc.)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11667696 2026-10-20] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-10-20] (Malwarebytes Inc -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe [2386280 2026-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-08-18] (NVIDIA Corporation -> NVIDIA Corporation)
S3 PlutonQcService; C:\WINDOWS\system32\PlutonQcService.exe [159744 2026-11-04] (Microsoft Windows -> )
S3 RedKard_Rooster; C:\ProgramData\RedKard\Splitgate 2\bin\anticheat.x64.redkard.exe [9678760 2025-07-27] (1047 Games, Inc. -> 1047 Games, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-08-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 SteelSeriesGGUpdateServiceProxy; C:\Program Files\SteelSeries\GG\updateService\SteelSeriesGGUpdateServiceProxy.exe [1587768 2026-10-06] (GN Hearing A/S -> )
R2 tmGAInstall; C:\Program Files (x86)\Thrustmaster\Thrustmaster FFB Driver\drivers\amd64\tmGAInstall.EXE [48344 2018-12-03] (Microsoft Windows Hardware Compatibility Publisher -> Thrustmaster®)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe [5609240 2026-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe [378128 2026-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 XboxService; C:\Program Files\XboxService\x64\XboxService.exe [579752 2026-10-14] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
R2 GigabyteUpdateService; C:\WINDOWS\system32\GigabyteUpdateService.exe [878840 2026-11-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 AppShellElevationService; "C:\Program Files\TikTok LIVE Studio\1.14.2\elevation_service.exe" (No File)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [253024 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [396896 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [317024 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [81504 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswDrvBrg; C:\WINDOWS\System32\drivers\aswDrvBrg.sys [95320 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [29144 2026-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [35936 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [311904 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [641632 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [101472 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [71776 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [862816 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1302624 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [276064 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [484960 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 CTIIO; \??\C:\WINDOWS\system32\drivers\CtiIo64.sys [34920 2024-12-05] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 Denuvo Anti-Cheat; \??\C:\Program Files\Denuvo Anti-Cheat\denuvo-anti-cheat.sys [4973192 2026-08-20] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 gdrv3; \??\C:\WINDOWS\System32\drivers\gdrv3.sys [52440 2024-12-05] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
R3 logi_lamparray; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray.AMD64.sys [89480 2026-04-14] (Logitech Inc -> Logitech, Inc.)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [235624 2026-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-10-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt11.sys [217704 2026-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 MSIO; \??\C:\WINDOWS\system32\drivers\MsIo64.sys [19672 2024-12-05] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 mtkwlex; C:\WINDOWS\System32\drivers\mtkwl6ex.sys [1559944 2022-03-30] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)
S3 RedKard; \??\C:\ProgramData\RedKard\bin\RedKard.sys [5213216 2025-07-26] (1047 Games, Inc. -> )
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_16d0e5f2b3759518\rt68cx21x64.sys [845256 2024-08-21] (Realtek Semiconductor Corp. -> Realtek)
S3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys [539648 2024-03-28] (Microsoft Windows -> Realtek)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [48728 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [61008 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 SteelSeries_Sonar_VAD; C:\WINDOWS\System32\DriverStore\FileRepository\steelseries-sonar-vad.inf_amd64_036e27f3054ae1bc\SteelSeries-Sonar-VAD.sys [95912 2026-05-06] (GN Hearing A/S -> Windows (R) Win 7 DDK provider)
R3 VOICEMOD_Driver; C:\WINDOWS\system32\drivers\mvvad.sys [51840 2024-11-11] (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Windows (R) Win 7 DDK provider)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21632 2026-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [677952 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [144408 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S0 wesp; C:\WINDOWS\System32\drivers\wesp.sys [4355960 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S0 wespelam; C:\WINDOWS\System32\drivers\wesp_elam.sys [1519024 2026-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S1 eocquekn; \??\C:\WINDOWS\system32\drivers\eocquekn.sys (No File)
S3 HWiNFO_202; \??\C:\Users\Admin\AppData\Local\Temp\HWiNFO_x64_202.sys (No File) <==== ATTENTION
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-11-06 16:31 - 2026-11-06 16:31 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-11-06 15:48 - 2026-11-06 15:48 - 000677108 _____ C:\WINDOWS\system32\perfh005.dat
2026-11-06 15:48 - 2026-11-06 15:48 - 000144960 _____ C:\WINDOWS\system32\perfc005.dat
2026-11-05 17:04 - 2026-11-05 17:04 - 000000547 _____ C:\Users\Admin\Downloads\Fixlog.txt
2026-11-05 16:48 - 2026-11-06 16:53 - 000031640 _____ C:\Users\Admin\Downloads\FRST.txt
2026-11-05 16:48 - 2026-11-06 16:53 - 000000000 ____D C:\FRST
2026-11-05 16:47 - 2026-11-05 16:47 - 002457088 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2026-11-04 19:04 - 2026-11-04 19:04 - 000003502 _____ C:\WINDOWS\system32\Tasks\AvastDefaultBrowserTask2
2026-11-04 19:04 - 2026-11-04 19:04 - 000003500 _____ C:\WINDOWS\system32\Tasks\AvastDefaultBrowserTask
2026-11-04 19:04 - 2026-11-04 19:04 - 000002520 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2026-11-04 19:04 - 2026-11-04 19:04 - 000002485 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2026-11-04 19:04 - 2026-11-04 19:04 - 000000000 ____D C:\Users\Admin\AppData\Roaming\xpdf
2026-11-04 19:03 - 2026-11-04 19:03 - 000003844 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2026-11-04 19:03 - 2026-11-04 19:03 - 000003812 _____ C:\WINDOWS\system32\Tasks\AvastBrowserProtectS-1-5-21-1453151362-2910950682-4162620220-1001
2026-11-04 19:03 - 2026-11-04 19:03 - 000003632 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser VPS Differential Update
2026-11-04 19:03 - 2026-11-04 19:03 - 000003260 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2026-11-04 19:02 - 2026-11-04 19:03 - 000000000 ____D C:\Users\Admin\AppData\Local\Avast Software
2026-11-04 19:02 - 2026-11-04 19:02 - 000003510 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineUA
2026-11-04 19:02 - 2026-11-04 19:02 - 000003386 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineCore
2026-11-04 19:02 - 2026-11-04 19:02 - 000002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast One.lnk
2026-11-04 19:02 - 2026-11-04 19:02 - 000002172 _____ C:\Users\Public\Desktop\Avast One.lnk
2026-11-04 19:02 - 2026-11-04 19:02 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2026-11-04 19:02 - 2026-11-04 19:02 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Avast Software
2026-11-04 19:02 - 2026-11-04 19:02 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2026-11-04 19:02 - 2026-11-04 19:00 - 000330168 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2026-11-04 19:00 - 2026-11-04 19:03 - 000000000 ____D C:\Program Files\Avast Software
2026-11-04 19:00 - 2026-11-04 19:00 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2026-11-04 19:00 - 2026-11-04 18:59 - 000056128 _____ (Gen Digital Inc.) C:\WINDOWS\system32\icarus_rvrt.exe
2026-11-04 18:59 - 2026-11-06 15:42 - 000000000 ____D C:\ProgramData\Avast Software
2026-11-04 18:59 - 2026-11-04 18:59 - 001757928 _____ (Gen Digital Inc.) C:\Users\Admin\Downloads\avast_one_premium_security.exe
2026-11-04 18:25 - 2026-11-04 18:25 - 000092642 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-11-04 18:25 - 2026-11-04 18:25 - 000092642 _____ C:\WINDOWS\system32\ctac.json
2026-11-04 18:24 - 2026-11-04 18:24 - 000018208 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-11-01 09:07 - 2026-11-01 09:07 - 000000000 ____D C:\Users\Admin\AppData\Local\WindowsOobeAppHost
2026-10-30 10:21 - 2026-10-30 10:21 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\ttpsandbox
2026-10-30 10:09 - 2026-10-30 10:09 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CapCut
2026-10-25 15:10 - 2026-10-25 15:11 - 000000015 _____ C:\Users\Admin\AppData\Roaming\obs-virtualcam.txt
2026-10-24 16:14 - 2026-10-24 16:14 - 000000000 ____D C:\Program Files\XboxService
2026-10-24 16:13 - 2026-10-24 16:13 - 000000000 ____D C:\Program Files\Microsoft GameInput
2026-10-24 16:13 - 2026-10-24 16:12 - 000526792 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_16.dll.0
2026-10-20 14:42 - 2026-11-04 18:19 - 000000000 ____D C:\Users\Admin\AppData\Local\Malwarebytes
2026-10-20 14:42 - 2026-10-20 14:42 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-10-20 14:42 - 2026-10-20 14:42 - 000002081 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2026-10-20 14:42 - 2026-10-20 14:42 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-10-20 14:42 - 2026-10-20 14:42 - 000000000 ____D C:\Program Files\Malwarebytes
2026-10-20 14:41 - 2026-10-20 14:42 - 002906704 _____ (Malwarebytes) C:\Users\Admin\Downloads\MBSetup-3.3.exe
2026-10-20 13:16 - 2026-10-20 13:16 - 000000000 ____D C:\Users\Admin\Untitled Project
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Public\Documents\Blackmagic Design
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Admin\Documents\Blackmagic Design
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Blackmagic Design
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Admin\AppData\Local\DaVinci Resolve Welcome
2026-10-20 13:12 - 2026-10-20 13:12 - 000000000 ____D C:\ProgramData\Blackmagic Design
2026-10-20 13:09 - 2026-10-20 13:09 - 000000000 ____D C:\Program Files\Blackmagic Design
2026-10-20 12:52 - 2026-10-20 12:52 - 000000000 ____D C:\Users\Admin\AppData\Local\DaVinci Control Panels Setup
2026-10-20 12:49 - 2026-10-20 13:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design
2026-10-20 12:48 - 2026-10-20 13:09 - 000000000 ____D C:\Program Files (x86)\Blackmagic Design
2026-10-18 11:04 - 2026-11-04 18:44 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2026-10-18 11:03 - 2026-11-04 18:52 - 000630744 _____ C:\WINDOWS\ntbtlog.txt
2026-10-18 10:53 - 2026-10-30 09:39 - 000003868 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2026-10-18 10:53 - 2026-10-30 09:39 - 000003426 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2026-10-18 08:38 - 2026-11-04 18:21 - 000001423 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2026-10-18 08:38 - 2026-11-04 18:21 - 000001317 _____ C:\Users\Admin\Desktop\ESET Online Scanner.lnk
2026-10-18 08:38 - 2026-10-18 08:38 - 000000000 ____D C:\Users\Admin\AppData\Local\ESET
2026-10-18 08:37 - 2026-10-18 08:37 - 008423856 _____ (ESET) C:\Users\Admin\Downloads\esetonlinescanner.exe
2026-10-16 18:43 - 2026-10-16 18:43 - 000004985 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-10-16 18:42 - 2026-10-16 18:42 - 000039736 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-10-16 18:42 - 2026-10-16 18:42 - 000039736 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-10-16 18:24 - 2026-08-18 09:37 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 001682664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-10-16 18:24 - 2026-08-18 09:33 - 001592040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 001408744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 001238760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 000676584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 000510696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 032167144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 028094696 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-10-16 18:24 - 2026-08-18 09:32 - 002337512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 001731304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 001068264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 000824040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 000469736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-10-16 18:24 - 2026-08-18 09:32 - 000137032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2026-10-16 18:24 - 2026-08-18 09:31 - 020994792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 005925608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 005796584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 004714728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-10-16 18:24 - 2026-08-18 09:30 - 000572368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-10-16 18:24 - 2026-08-18 09:30 - 000441368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-10-16 18:24 - 2026-08-18 08:54 - 000167436 _____ C:\WINDOWS\system32\nvinfo.pb
2026-10-13 17:09 - 2026-11-05 19:00 - 000000000 ____D C:\Users\Admin\.lyra-cli
2026-10-11 12:38 - 2026-10-11 12:38 - 659217449 _____ C:\Users\Admin\Downloads\1011 (1).mp4
2026-10-11 09:48 - 2026-10-11 09:48 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio.lnk
2026-10-11 09:48 - 2026-10-11 09:48 - 000001052 _____ C:\Users\Public\Desktop\OBS Studio.lnk
2026-10-11 09:48 - 2026-10-11 09:48 - 000000000 ____D C:\ProgramData\obs-studio-hook
2026-10-11 09:47 - 2026-10-11 09:48 - 000000000 ____D C:\Program Files\obs-studio
2026-10-11 09:46 - 2026-10-11 09:46 - 159809104 _____ (OBS Project) C:\Users\Admin\Downloads\OBS-Studio-32.2.2-Windows-x64-Installer.exe
2026-10-10 16:52 - 2026-10-10 16:52 - 000000222 _____ C:\Users\Admin\Desktop\Phasmophobia.url
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-11-06 16:44 - 2025-12-04 18:44 - 000000000 ____D C:\Users\Admin\AppData\Local\Discord
2026-11-06 16:31 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-11-06 16:28 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-11-06 16:24 - 2024-12-05 14:14 - 000000000 ___RD C:\Users\Admin\OneDrive
2026-11-06 15:51 - 2025-09-29 07:43 - 000000000 ____D C:\Users\Admin\AppData\Local\Roblox
2026-11-06 15:48 - 2024-12-05 13:59 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-11-06 15:48 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-11-06 15:44 - 2026-07-27 12:46 - 000001411 _____ C:\Users\Admin\Desktop\Roblox Player.lnk
2026-11-06 15:44 - 2025-09-29 07:43 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2026-11-06 15:44 - 2025-08-04 15:00 - 000000000 ____D C:\Users\Admin\AppData\Roaming\discord
2026-11-06 15:44 - 2025-04-16 13:31 - 000000000 ____D C:\Users\Admin\AppData\Local\VoicemodV3
2026-11-06 15:43 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-11-06 15:42 - 2025-04-10 12:50 - 000003446 _____ C:\WINDOWS\system32\Tasks\GCC
2026-11-06 15:42 - 2024-12-05 14:52 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-11-06 15:42 - 2024-12-05 14:13 - 000089336 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteDownloadAssistant.exe
2026-11-06 15:42 - 2024-12-05 14:09 - 000000000 ____D C:\ProgramData\NVIDIA
2026-11-06 15:42 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-11-06 15:41 - 2024-12-05 14:51 - 000906528 _____ C:\WINDOWS\system32\wpbbin.exe
2026-11-06 15:41 - 2024-12-05 14:51 - 000878840 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteUpdateService.exe
2026-11-06 15:41 - 2024-12-05 14:51 - 000012288 ___SH C:\DumpStack.log.tmp
2026-11-05 20:06 - 2024-04-01 08:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-11-05 20:05 - 2025-05-03 17:30 - 000000000 ____D C:\Program Files (x86)\Steam
2026-11-05 19:25 - 2025-07-27 10:36 - 000000000 ____D C:\Users\Admin\AppData\Local\D3DSCache
2026-11-05 19:01 - 2026-08-02 15:10 - 000000000 ____D C:\Users\Admin\AppData\Roaming\obs-studio
2026-11-05 18:43 - 2024-12-05 14:52 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-11-05 17:49 - 2026-07-27 12:45 - 000001411 _____ C:\Users\Admin\Desktop\Roblox Studio.lnk
2026-11-04 19:55 - 2024-12-05 14:13 - 000000000 ____D C:\Users\Admin\AppData\Local\Packages
2026-11-04 19:49 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-11-04 19:34 - 2026-07-30 09:42 - 000001313 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-11-04 19:34 - 2025-12-04 18:45 - 000002252 _____ C:\Users\Admin\Desktop\Discord.lnk
2026-11-04 19:33 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-11-04 19:08 - 2024-12-05 14:51 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-11-04 19:05 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-11-04 19:03 - 2024-12-05 14:14 - 000000000 ____D C:\Users\Admin\AppData\Local\PlaceholderTileLogoFolder
2026-11-04 19:02 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-11-04 18:56 - 2025-09-15 12:44 - 000000000 ____D C:\Users\Admin\AppData\Roaming\steelseries-gg-client
2026-11-04 18:53 - 2024-12-05 14:52 - 000297192 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-11-04 18:52 - 2025-12-15 15:36 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-11-04 18:52 - 2025-07-11 21:00 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-11-04 18:52 - 2024-04-01 17:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-11-04 18:52 - 2024-04-01 17:31 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\WUModels
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Com
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-11-04 18:52 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2026-11-04 18:39 - 2024-04-01 08:26 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2026-11-04 18:39 - 2024-04-01 08:26 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2026-11-04 18:24 - 2024-12-05 13:56 - 003385856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-11-04 18:14 - 2024-12-05 14:52 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-11-04 18:04 - 2024-12-05 14:52 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{9A89023D-D65A-4B5A-BC02-2CC490EFCB3F}
2026-11-04 18:04 - 2024-12-05 14:52 - 000003644 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{FB04E5EC-C9FC-4D1A-BB04-3AFA51C26365}
2026-11-02 18:31 - 2024-12-05 14:52 - 000002512 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-11-02 18:31 - 2024-12-05 14:52 - 000002344 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-11-02 07:48 - 2025-09-08 09:44 - 000061008 _____ (SteelSeries ApS) C:\WINDOWS\system32\Drivers\sshid.sys
2026-11-02 07:48 - 2025-09-08 09:44 - 000048728 _____ (SteelSeries ApS) C:\WINDOWS\system32\Drivers\ssdevfactory.sys
2026-11-01 09:27 - 2025-01-29 09:43 - 000000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2026-10-31 09:26 - 2026-10-03 10:45 - 000000000 ____D C:\common_attachment
2026-10-31 08:50 - 2026-06-12 18:52 - 000000000 ____D C:\Users\Admin\AppData\Roaming\.minecraft
2026-10-30 12:59 - 2025-02-10 15:28 - 000000000 ____D C:\XboxGames
2026-10-30 12:59 - 2024-12-05 13:55 - 000000000 ____D C:\ProgramData\Packages
2026-10-30 10:09 - 2026-09-29 16:04 - 000001377 _____ C:\Users\Admin\Desktop\CapCut.lnk
2026-10-29 20:33 - 2025-02-05 14:26 - 000003576 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1453151362-2910950682-4162620220-1001
2026-10-29 20:33 - 2024-12-05 14:14 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1453151362-2910950682-4162620220-1001
2026-10-29 20:33 - 2024-12-05 14:14 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1453151362-2910950682-4162620220-1001
2026-10-29 20:33 - 2024-12-05 14:14 - 000002381 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-10-25 13:00 - 2026-07-02 12:02 - 000000000 ____D C:\Users\Admin\Downloads\ACLib
2026-10-24 16:52 - 2026-07-27 15:50 - 000003185 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-10-24 16:12 - 2025-02-10 15:28 - 004671944 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 001223112 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000330184 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000281032 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000166344 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000158152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2026-10-24 16:12 - 2025-02-10 15:28 - 000084424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2026-10-20 14:42 - 2026-05-21 16:13 - 000000000 ____D C:\Users\Admin\AppData\Local\Sentry
2026-10-20 13:45 - 2025-04-16 13:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voicemod V3
2026-10-20 13:45 - 2025-04-16 13:31 - 000000000 ____D C:\Program Files\Voicemod V3
2026-10-20 13:17 - 2024-12-05 14:04 - 000000000 ____D C:\Users\Admin
2026-10-19 20:03 - 2026-05-14 15:22 - 001092224 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\GameInputRedist.dll
2026-10-19 20:02 - 2026-05-14 15:22 - 000873600 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\GameInputRedist.dll
2026-10-18 10:30 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-18 10:30 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-18 10:30 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-18 10:30 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-18 09:34 - 2026-02-03 19:33 - 000000000 ___HD C:\Users\Admin\AppData\Roaming\Name
2026-10-18 08:36 - 2024-12-05 14:16 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-18 08:35 - 2024-12-05 14:16 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-16 19:06 - 2026-10-03 10:37 - 000000000 ____D C:\Users\Admin\Downloads\zasilka-WRF5GENE92ADU67W
2026-10-16 18:24 - 2024-12-05 14:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2026-10-11 09:48 - 2026-08-02 15:10 - 000000000 ____D C:\ProgramData\obs-studio
2026-10-10 16:52 - 2025-05-03 18:38 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
==================== Files in the root of some directories ========
2026-02-14 15:05 - 2026-02-14 15:05 - 000000137 _____ () C:\Users\Admin\AppData\Roaming\EVIL-MONTHLY-1D33CE0FE809.log
2026-10-25 15:10 - 2026-10-25 15:11 - 000000015 _____ () C:\Users\Admin\AppData\Roaming\obs-virtualcam.txt
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
prosím o kontrolu logu - podezření na viry
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 120215
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu logu - podezření na viry
Zdravím!
Abych mohl provést komplexní kontrolu systému, potřebuji vidět ještě log Addition. Najdete ho v C:\Users\Admin\Downloads v souboru addition.txt. Děkuji.
Abych mohl provést komplexní kontrolu systému, potřebuji vidět ještě log Addition. Najdete ho v C:\Users\Admin\Downloads v souboru addition.txt. Děkuji.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosím o kontrolu logu - podezření na viry addition
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-11-2026
Ran by Admin (06-11-2026 16:54:39)
Running from C:\Users\Admin\Downloads
Microsoft Windows 11 Pro Version 26H2 26300.9818 (X64) (2024-12-05 12:55:42)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Admin (S-1-5-21-1453151362-2910950682-4162620220-1001 - Administrators - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-1453151362-2910950682-4162620220-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-1453151362-2910950682-4162620220-503 - Limited - Disabled)
Guest (S-1-5-21-1453151362-2910950682-4162620220-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1453151362-2910950682-4162620220-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Avast One (HKLM\...\Avast Suite) (Version: 26.10.11201.1041 - Gen Digital Inc.)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 154.0.35638.100 - Autoři prohlížeče Avast Secure Browser)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
Blackmagic RAW Common Components (HKLM\...\{89B80C17-5795-45F7-A401-0A5EBE4BBD4E}) (Version: 6.0 - Blackmagic Design)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon IJ Network Scanner Selector EX2 (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX2) (Version: 2.0.10.2 - Canon Inc.)
Canon IJ Printer Assistant Tool (HKLM-x32\...\Canon IJ Printer Assistant Tool) (Version: 1.70.4.30 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.5.5.3 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 6.6.0 - Canon Inc.)
Canon TS3300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_TS3300_series) (Version: 1.03 - Canon Inc.)
CapCut (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\CapCut) (Version: 9.7.0.4153 - Bytedance Pte. Ltd.)
Clownfish Voice Changer (HKLM\...\ClownfishVoiceChanger) (Version: - )
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 156.0.4314.58 - Microsoft Corporation)
DaVinci Resolve (HKLM\...\{E7753090-1295-4993-987E-0914F6550153}) (Version: 21.1.10010 - Blackmagic Design)
DaVinci Resolve Control Panels (HKLM\...\{EDA8A73C-05DC-49ED-9DF5-D29F9317307A}) (Version: 2.3.5.0 - Blackmagic Design)
Denuvo Anti-Cheat (HKLM\...\Denuvo Anti-Cheat) (Version: 6.9.2.7013 - Denuvo GmbH)
Discord (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Discord) (Version: 1.0.9267 - Discord Inc.)
ENE Video Capture Box HAL (HKLM\...\{A096611D-BA11-4A1A-8D09-0A0462D7C8F2}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE Video Capture Box HAL (HKLM-x32\...\{974259bf-3ed1-4cd6-9ed1-40c7f601a786}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE_AIC_Marvell_HAL (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden
ENE_AIC_Marvell_HAL (HKLM-x32\...\{887e18fb-6bc3-4cd4-b34e-32d9ff71bbae}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden
ENE_DRAM_RGB_AIO (HKLM\...\{5D2EC6F2-7EC3-486E-A144-7174E537A148}) (Version: 1.0.14.4 - Ene Tech.) Hidden
ENE_DRAM_RGB_AIO (HKLM-x32\...\{35a6f7ad-3ff5-4bdc-89a5-e166ef586e81}) (Version: 1.0.14.4 - Ene Tech.) Hidden
ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden
ENE_EHD_M2_HAL (HKLM-x32\...\{c1d017c2-8846-4000-9254-5689eccd462e}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden
ENE_External_Device_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.12.7 - ENE Tech) Hidden
ENE_External_Device_HAL (HKLM-x32\...\{a7b1cf47-d8f0-423d-9494-568195f1c864}) (Version: 1.0.12.7 - ENE Tech) Hidden
ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden
ENE_MousePad_HAL (HKLM-x32\...\{bf256b46-8ff7-48be-ab7f-5661e9a0651f}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM-x32\...\{c662a481-d76a-4188-95d2-6eb4ffd55542}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
Epic Games Launcher (HKLM-x32\...\{C5C3EE71-4047-4144-946E-18D500510CB5}) (Version: 1.3.128.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{5122B8BC-D6DF-48FF-8D4E-15A63EEC5073}) (Version: 2.8.1 - Epic Games, Inc.)
Fairlight Audio Accelerator Utility (HKLM\...\FairlightAudioAccelerator_is1) (Version: 1.0.15 - Blackmagic Design)
GBT_MB_Update (HKLM\...\GBT_MB_Update) (Version: 24.10.24.01 - GIGABYTE)
GBT_RGB_Sync_Control 24.10.24.01 (HKLM\...\GBT_RGB_Sync_Control) (Version: 24.10.24.01 - GIGABYTE)
GIGABYTE Control Center 24.10.28.01 (HKLM\...\GIGABYTE Control Center) (Version: 24.10.28.01 - GIGABYTE)
GIGABYTE Performance Library (HKLM\...\MBEasyTune) (Version: 24.10.30.01 - GIGABYTE)
GIGABYTE SSD Firmware Update Tool (HKLM\...\GBTSsdFirmwareUpdate) (Version: 24.06.19.01 - GIGABYTE)
GIGABYTE Storage Library (HKLM\...\MBStorage) (Version: 24.10.24.01 - GIGABYTE)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Malwarebytes version 5.7.3.376 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.7.3.376 - Malwarebytes)
Microsoft .NET Host - 8.0.23 (x64) (HKLM\...\{8CE231CE-B9F2-488A-BC60-FA1CE584B85D}) (Version: 64.92.45415 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.23 (x64) (HKLM\...\{A42EAA28-C0A1-4712-A109-796202435469}) (Version: 64.92.45415 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.23 (x64) (HKLM\...\{39884818-B550-4209-9A49-81F9D21F6012}) (Version: 64.92.45415 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 156.0.4314.58 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 156.0.4314.58 - Microsoft Corporation) Hidden
Microsoft GameInput (HKLM\...\{0DA71DCF-F605-435D-9B16-051DFBE7CB76}) (Version: 4.0.302.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\OneDriveSetup.exe) (Version: 26.195.1006.0007 - Microsoft Corporation)
Microsoft Visual Basic/C++ Runtime (x86) (HKLM-x32\...\{C5E3A69D-D391-45A6-A8FB-00B01E2B010D}) (Version: 1.1.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61135 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61135 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61135 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61135 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{610487D9-3460-328A-9333-219D43A75CC5}) (Version: 10.0.60922 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Microsoft Windows Desktop Runtime - 8.0.23 (x64) (HKLM\...\{29177194-CD94-4A2D-97A4-EF77738E995A}) (Version: 64.92.45458 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.23 (x64) (HKLM-x32\...\{d653912d-5c24-4e13-9238-531257889178}) (Version: 8.0.23.35609 - Microsoft Corporation)
NVIDIA App 11.0.9.251 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.9.251 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.9.12728.38614306 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.9.12728.38614306 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 610.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 610.88 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 32.2.2 - OBS Project)
Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.1.0.1 - Patriot Memory) Hidden
Patriot Viper M2 SSD RGB (HKLM-x32\...\{07236f40-ec25-4646-8cb6-b6aaf1597324}) (Version: 1.1.0.1 - Patriot Memory) Hidden
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9733.1 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 11.20.0729.2024 - Realtek)
Registrace tiskárny (HKLM-x32\...\Canon EISRegistration) (Version: 1.9.2 - Canon Inc.)
Roblox Player for Admin (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\roblox-player) (Version: - Roblox Corporation)
Roblox Studio for Admin (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\roblox-studio) (Version: - Roblox Corporation)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteelSeries GG 123.0.0 (HKLM\...\SteelSeries GG) (Version: 123.0.0 - SteelSeries ApS)
Thrustmaster Force Feedback Driver (HKLM-x32\...\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}) (Version: 2.FFD.2018 - Thrustmaster)
TikTok LIVE Studio (HKLM\...\tiktoklivestudio) (Version: 1.36.6 - TikTok Pte. Ltd.)
Verbatim_SureFireGaming_Product (HKLM\...\{35CB65C6-A7E3-4EE7-AD40-738D70A72164}) (Version: 1.0.3.11 - Verbatim) Hidden
Verbatim_SureFireGaming_Product (HKLM-x32\...\{d601832a-0d94-46ce-9b19-78e8a5887313}) (Version: 1.0.3.11 - Verbatim) Hidden
Voicemod (HKLM\...\{FE519A29-8B15-47C4-BCD6-A513277DC26F}_is1) (Version: 1.6.22 - Voicemod Inc., Sucursal en España)
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version: 20.10 - NCH Software)
WD P40 Game Drive (HKLM\...\{EE55DBAE-ECDD-4ADD-AAB5-23DE848B0996}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden
WD P40 Game Drive (HKLM-x32\...\{72b1a866-fc31-4381-bff3-fa6cd8823777}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden
Xbox Service (HKLM\...\{81F706B1-AB0A-4D88-B2DB-E5BAF88C87C6}) (Version: 4.0.300.0 - Microsoft Corporation)
Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-07-06] ()
Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2026-10-20] ()
Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_2.6.2.0_x64__8wekyb3d8bbwe [2026-10-30] (Microsoft Studios)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-12-09] (NVIDIA Corp.)
OP Auto Clicker - Auto Tap -> C:\Program Files\WindowsApps\38458AutoClicker.OPAutoClicker-AutoTap_4.1.0.0_x64__5e1qkq7gw5abm [2025-12-30] (Auto Clicker)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.51.347.0_x64__dt26b99r8h8gj [2024-12-05] (Realtek Semiconductor Corp)
shellmenua -> C:\Program Files (x86)\NCH Software\Components\Shared\shellmenu [2025-04-12] ()
shellmenub -> C:\Program Files (x86)\NCH Software\Components\Shared\shellmenu [2025-04-12] ()
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0 [2026-07-31] (Spotify AB) [Startup Task]
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2628.101.0_x64__cv1g1gvanyjgm [2026-07-30] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.0.1.0_x64__8wekyb3d8bbwe [2026-05-21] (Microsoft Corp.)
Windows App Runtime DDLM 4000.1049.117.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1049.117.0-x6_4000.1049.117.0_x64__8wekyb3d8bbwe [2026-09-29] (Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1453151362-2910950682-4162620220-1001_Classes\CLSID\{23A5B06E-20BB-4E7E-A0AC-6982ED6A6041}\localserver32 -> C:\Users\Admin\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe (ESET, spol. s r.o. -> ESET)
CustomCLSID: HKU\S-1-5-21-1453151362-2910950682-4162620220-1001_Classes\CLSID\{CFEFC7E6-50F3-4102-9C35-E75445AA6E4D}\localserver32 -> C:\Users\Admin\AppData\Local\Discord\app-1.0.9267\Discord.exe (Discord Inc. -> Discord Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-10-20] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\nvshext.dll [2026-08-18] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-10-20] (Malwarebytes Inc -> Malwarebytes)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2026-10-01 18:17 - 2026-10-01 18:17 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\PlugIns\NVIDIA App\MessageBusRouter.dll] C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\plugins\NVIDIA Overlay\MessageBusRouter.dll
2024-12-05 14:43 - 2026-10-01 18:17 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [4972]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2024-04-01 08:26 - 2026-11-06 15:42 - 000001024 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 gen-webserver.internal www.gen-webserver.internal # gen digital helper server
127.0.0.1 revocation.gen-webserver.internal www.revocation.gen-webserver.internal # gen digital helper server
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.1.254
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
Wi-Fi: MediaTek Wi-Fi 6 MT7921 Wireless LAN Card -> mtkwl6ex.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\OneDrive\Nová složka\Nová složka (2)\d944ab2d46564c0b557588629ee71c82.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX2"
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\StartupApproved\Run: => "Steam"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{F107A820-65BC-45FA-80AD-07EAC90CC6F5}] => (Allow) C:\Program Files\GIGABYTE\Control Center\GCC.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [TCP Query User{4AEFDA78-33A4-48AD-AF77-48425BA9E9C7}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{54525CE8-AAC1-4805-875D-2647462867C3}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{88AB6B4D-6638-4946-9A8A-0905C94B2B81}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [UDP Query User{0C9AF6B4-1058-413C-A184-8A98E94683D0}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [{473685B5-6148-43B2-9219-5B37D747B834}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{63C62BD1-549B-4576-8518-09A9D8545787}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{CDBB6416-F267-4F74-8052-0AE83391AC82}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{D82F45DC-2FC2-45CF-8F86-0120E3031449}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [TCP Query User{CF5A0BAA-0E88-4FE9-AA1D-2530EBC6649A}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{BCCFA34E-8272-4B5E-9F5C-0C702E12ABB5}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D43736FA-29F7-4E4B-BF8E-6889A8D80E12}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{85FBDAE0-0E28-4331-AE92-DD1DF56D2CE5}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D3489764-AE18-45D3-96FA-7529DE34DCE9}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [UDP Query User{3D37AFE3-EAE7-435C-BF55-AD2EE6B4EA1D}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [TCP Query User{CBA17841-71B9-4630-B121-F032E48EE224}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [UDP Query User{315C6DCD-E090-4198-A6C3-462C461D622D}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [{5EC48E1D-2712-4C6B-BB49-4247E5ACE0B5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [{259AC075-D7C3-4196-94AB-8EBA81F77AD5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [TCP Query User{CC99B756-1DBE-43BD-A9AD-AEC246F72999}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{1866190C-7EE2-48D1-BB73-82A04252DCDB}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{1A023ACF-952C-4D59-9FC1-03A9860656F6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [UDP Query User{73B4135B-8C02-42B2-B752-A75AAA30B5E6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [TCP Query User{F1F7BD7A-C3C0-4084-A998-FE8D6DDF145E}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{6F86EDAC-7A90-465C-8AC3-55B95E0F5650}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{CCD34B29-7380-49CD-9730-280319E0CF6D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [UDP Query User{AECC118C-A413-4ABD-A621-398FF0DC465D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [{1E3C90C0-513B-4156-8810-C1D6822AA0EA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Headliners\Headliners.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{F5A74DD9-C729-4955-93D2-233C344A530F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Headliners\Headliners.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [TCP Query User{DD61F478-D5A9-487D-A5DB-01CFCB4A9D4A}C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{40631B60-F8AD-4041-8746-5ADFF94C67B1}C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{C5FEA89E-902E-4CA5-98A4-D31C0B97B321}C:\users\admin\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe] => (Allow) C:\users\admin\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe (Epic Games Inc. -> Epic Games)
FirewallRules: [UDP Query User{1829370C-CCC3-45D9-B7C5-F805262C68F2}C:\users\admin\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe] => (Allow) C:\users\admin\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe (Epic Games Inc. -> Epic Games)
FirewallRules: [TCP Query User{4F504460-E2CE-428B-A9BF-C2C2CDE964B6}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{9F0E2919-C426-4E16-8EA2-EEBF85F1B957}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{2DAB2EC1-F89A-49F0-B85A-963DCEB9D8CA}C:\program files\epic games\ue_5.6\engine\binaries\dotnet\swarmagent.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\dotnet\swarmagent.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{9559BA4D-2902-4431-B151-71BEB6AE37E8}C:\program files\epic games\ue_5.6\engine\binaries\dotnet\swarmagent.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\dotnet\swarmagent.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{BA3992A9-B9FC-4485-9C64-9B366072C793}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{D31DFE94-6334-4EE4-8CD7-F4B369C1EAAB}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{92D5A576-CE3E-4CC8-A152-86F1366A871C}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [UDP Query User{216CDC1E-9286-4C82-B257-8CD85468A712}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [TCP Query User{F2AEAD66-8B45-4BEB-B575-C88E45038B12}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{81A55120-7689-4005-A673-4EE258157004}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{0AF2CC85-4A06-4C44-9CA9-7F4C7354473C}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F82EB1E7-9DD8-48DA-B02E-C243351F60CC}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{173FC992-40BA-4633-89F9-AA2965276ACE}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F0837634-637E-40D8-A950-FB86BC1BC4B4}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{04053482-945F-4027-94CA-EC27D5F2A5F2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [{C37B0009-E50C-481A-BC24-9DD3854AD930}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [TCP Query User{6D834983-8B48-4566-825E-90D4840520D6}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{8A2F0EE0-D927-45B8-9CA9-91D230F26D2C}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{8EFBDF77-A249-45D6-9EDC-15D8BBD9FAF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4A4DE719-4364-4564-A847-AB47B322ECA2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{677EF203-6635-48EF-B562-48CF6411307B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{71A5BBC5-7F7F-4645-B3C2-8B6C9C83A4C6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{01DA68A4-AB3C-4921-A772-95D8D3878B32}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{F7681C02-0091-4DF3-95EE-3EE43C528AC1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{C5CD6181-5E62-4D97-9526-0BC28EB769F4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{6EBFA368-9054-40C9-B7EA-E13E1306CA7A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{DD55A498-15AD-4545-8376-4D75FDCAE3C9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{19AD629F-428A-4833-B643-39C96B116E05}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{BCFF6CAD-2369-42AE-B070-BEBC49D60766}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D12E4076-F5BC-4D07-B73E-35C748E86452}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{D5A10769-CAD3-4C7C-8991-2D703B01B3E6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{46A272F7-EDC0-4061-BF95-B76EE29302EB}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{9A0E4C3A-A4ED-4A71-A2E5-5C4F5958ABEA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{D5F35CE3-D82E-4DF6-A94F-30BF0EF5772C}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{CFDA5567-4DEC-4F40-AC08-795B0A5CA9FA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B644D7E1-E20A-485E-86E9-64419765DEF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{51DFAEBE-9F39-41CD-B4B8-7235A3E14C86}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{61F57EA3-2AEB-420D-B314-4FA96AA3B86B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4EA28662-4E13-4B7A-8052-CEE17FBA55F2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{ED30486E-5490-4100-9023-E7F3F1D169CF}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{8759969D-21A5-4B84-9945-6F03BCF9A2F4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B0E062FB-E7EB-4E18-9F23-3EC08D059BC9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{307A0CB2-60FE-456D-96F4-69268448538D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{4530A273-CE45-4AD5-B5CB-882C3C805C39}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{C5D0C516-CE5C-480E-9711-4E22BD94C55D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{60BC40E1-BC11-4D63-BEDD-F3324C6CABC0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4B9831D5-EB9A-4F4F-A588-EF35B7B77E24}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{C0B50B5C-8132-4B42-A645-2D07FA9DD518}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{A41085B3-DC2E-4212-B5B2-5823212D0359}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{3DD60A03-A2F5-4452-96DF-5418D59D98E9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{E9165354-5981-4589-9CEE-B57F37AE11C1}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [UDP Query User{8966F311-8EB8-4FA2-AF9F-8C5717376EE4}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [{D9A15950-4609-4CE8-857B-AC8BE23F38C4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{D8A08B47-BFC8-458E-81B0-EC2A91D97094}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{3E461FF7-42FD-4394-B2C6-A04519DAEE4A}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D7CF90F2-82B5-488C-97C6-530152E9FB14}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{F5392060-B369-4AD1-8C1E-992166DBE42A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A750FA40-5379-4339-8257-E3513CFCAFD1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{46ED8989-6242-4C2B-AEEC-39C8964E05B0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{8F3391D6-B55C-41BB-A403-E8ACF9C2719E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2361B9AE-52DC-423B-AF73-B7A45A0EDD04}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{D1505DBD-1C57-4B6C-B70B-1A62DDA4D291}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{AD125465-9351-40BC-8D4A-500DD71A6C47}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{709F2DF8-B84C-4498-92EF-4BAA0CB5775A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{BE349F34-3776-4C21-9CA1-2F8BFDF5BF7F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{9128B5E2-70AB-46CB-95F5-C4A5CFDACD76}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{48A26039-1EB8-4A17-BDD7-529BB28C97BA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{5EE62AA5-0DBB-43E1-9C62-5D0576E87330}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{ECF65CBD-7829-48E9-809F-469C48DB3E37}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{2D638882-4852-4A30-81CB-45063FD8D9D1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{409E3A01-EBB9-4AE2-AEB2-E115250DA963}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{FD21D0E7-5FEF-461E-9556-58DA367172AD}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{22A12214-FA25-4FBE-90FF-8453588F1C36}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [UDP Query User{CD95E94D-DD51-4F98-B0D0-C084228FE1F9}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [{215FED96-E7F0-4632-93C1-29A8B8033A50}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{86F3F872-24B6-495B-904B-825B1EC60F10}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{B5E4935C-2D38-420F-8ADA-52621D9B1780}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{707E905E-F114-474A-9494-2AA2F117749A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{EA96767C-B5C3-45D3-99FD-A8477A8D9B18}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4450C1BF-3B23-4E47-B9F5-0B22132FF94D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{8E62F398-08DA-40AC-B1D3-4D6BE3B4A746}] => (Allow) C:\Users\Admin\AppData\Local\Temp\7z989C71F4\MuMuDownloader.exe => No File
FirewallRules: [{D4376C89-15BF-41E8-B2A7-2EF3FF873145}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{8D904F42-721A-47CF-B31D-927EE0853181}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{0B336949-8D11-4842-A19C-A56D630174AF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E6EA77C8-B0C2-4F5E-B051-4F11B299FBDF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BACF7064-9A81-4464-83B9-7B05F32F5212}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B2B9D991-9277-4750-AF9C-CD6F33BF08C6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{6722C416-1E99-441F-9EE9-07C03EDBF692}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E33472CF-E13D-42C0-8AA3-4D17B0179F66}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5FC88935-8940-4240-86A5-3FFCFBAAEB83}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3E17F3C9-BFD7-4850-890A-1AC921FC5690}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{41AE0C84-A940-490E-95A8-31833053EDD0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BED724C3-4A64-49F4-B85E-A34A59598EC2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1DB2C7F8-5EE1-46DB-9B67-943BD45AF7E6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{AD0D2D05-3245-4F66-8B78-666725E5AA69}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{24369CA3-481E-4756-A564-3D2639DB9C2E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7253630C-FB34-4022-B52F-5942B076C431}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PEAK\PEAK.exe () [File not signed]
FirewallRules: [{0B964610-EB3A-408F-9D43-E3B08F449D58}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PEAK\PEAK.exe () [File not signed]
FirewallRules: [{1586AC2A-855C-4F4C-8ACE-3EF5B1E815D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\REPO\REPO.exe () [File not signed]
FirewallRules: [{1F4065D2-4A32-416F-9541-8ACB4B076F95}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\REPO\REPO.exe () [File not signed]
FirewallRules: [{2F2DF462-5930-41A6-929E-020566AE799C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe () [File not signed]
FirewallRules: [{123EFA1D-8149-4E7B-89C8-77DCE46C6567}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe () [File not signed]
FirewallRules: [{577A0973-0603-41CD-8B0F-4F566C9D8EBC}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{767FCD6B-98AF-45AC-A4A6-3FBDFA12706B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{E702068B-0219-4DEF-93C0-366D47CB773F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{AA8D76FC-D381-41C2-9103-BE842936472D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{1002291D-1535-4371-B158-A5F8D897893A}C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe] => (Block) C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe (Epic Games Inc. -> Psyonix, LLC)
FirewallRules: [UDP Query User{8DD37B45-EBA6-4AA4-B74B-0357F4239EA9}C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe] => (Block) C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe (Epic Games Inc. -> Psyonix, LLC)
FirewallRules: [{9E011CFC-2A98-4AE9-BAF6-FFB4B5A9701D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.36.6\TikTok LIVE Studio.exe (TikTok Pte. Ltd. -> TikTok Pte. Ltd.)
FirewallRules: [{378E1F5C-80ED-4C5E-A8EB-ED96BB6822CA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.36.6\TikTok LIVE Studio.exe (TikTok Pte. Ltd. -> TikTok Pte. Ltd.)
FirewallRules: [{07B8FD14-0B81-4624-AFC9-164C30FB1FF3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{7802F457-4446-4B40-AF78-F2FA239B0F3F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [TCP Query User{BD26E197-AC5A-44BC-BCA1-73AE8097FB8C}C:\users\admin\appdata\local\capcut\apps\9.5.0.4050\capcut.exe] => (Block) C:\users\admin\appdata\local\capcut\apps\9.5.0.4050\capcut.exe (Bytedance Pte. Ltd. -> ByteDance)
FirewallRules: [UDP Query User{3362BC92-5483-4020-A3BD-8566E77C4907}C:\users\admin\appdata\local\capcut\apps\9.5.0.4050\capcut.exe] => (Block) C:\users\admin\appdata\local\capcut\apps\9.5.0.4050\capcut.exe (Bytedance Pte. Ltd. -> ByteDance)
FirewallRules: [{10E966BA-A23C-4F1D-81A8-05D6C7646C05}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Fish\How to Fish\How to Fish.exe () [File not signed]
FirewallRules: [{594917C0-5A61-4DE1-86A2-66587A66C4EB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Fish\How to Fish\How to Fish.exe () [File not signed]
FirewallRules: [{8364E44D-8239-4632-AC04-514CF01C4BBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Phasmophobia\Phasmophobia.exe () [File not signed]
FirewallRules: [{2D23DD9A-6465-4D62-B9F1-6CF22CA3B89E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Phasmophobia\Phasmophobia.exe () [File not signed]
FirewallRules: [TCP Query User{62F71AF7-E751-4870-8590-0A25945AA560}C:\users\admin\appdata\local\capcut\apps\9.6.0.4097\capcut.exe] => (Block) C:\users\admin\appdata\local\capcut\apps\9.6.0.4097\capcut.exe (Bytedance Pte. Ltd. -> ByteDance)
FirewallRules: [UDP Query User{1ABA5F83-7558-4EF7-BA37-326F385EBA5F}C:\users\admin\appdata\local\capcut\apps\9.6.0.4097\capcut.exe] => (Block) C:\users\admin\appdata\local\capcut\apps\9.6.0.4097\capcut.exe (Bytedance Pte. Ltd. -> ByteDance)
FirewallRules: [TCP Query User{E8383464-7AD1-4A6A-AF31-121D87B000CD}C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe] => (Allow) C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe (Blackmagic Design Pty Ltd -> Blackmagic Design)
FirewallRules: [UDP Query User{21745D61-77B0-43D9-B9C4-6A48AF62DC54}C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe] => (Allow) C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe (Blackmagic Design Pty Ltd -> Blackmagic Design)
FirewallRules: [{8943C3EE-BFED-422A-9A6B-1F0F37EFCA0C}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{8E10AC50-7DE5-4CB2-BE70-0AA1EB0A067B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{64E9057A-6E84-413D-86DA-5F2DE62F3091}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{701A06C3-9E3F-4800-8649-B2ECFBE58A87}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{C0C6CDBF-38C1-4EF2-A762-919B031A8C4A}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{5A9BC69C-67AE-43D1-AE81-486A9C6FB993}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{A7197D3A-1711-415B-BD30-5F456CF5FE7E}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => No File
FirewallRules: [{3BF4D3B5-79CB-40A1-86EF-47145AC8FC7B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [TCP Query User{1008DB49-8F65-49DD-A16F-852442C6B688}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [UDP Query User{4BC75FDE-D25D-46E9-9D76-62E27D7953B9}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{744DEF89-F7EC-452E-A74E-A26DEE76C2A8}] => (Allow) C:\Program Files\Voicemod V3\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.)
FirewallRules: [{568A7599-4DC9-4517-97C5-9F17A3FE723A}] => (Allow) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc., Sucursal en España)
FirewallRules: [{04160A98-AB84-40D2-8969-03604D55A606}] => (Allow) C:\Program Files\Voicemod V3\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.)
FirewallRules: [{1894A175-FE48-463B-A9E0-13CC19B5E47F}] => (Allow) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc., Sucursal en España)
FirewallRules: [{7A68EA4D-99F1-47A0-A497-AD0E71134B85}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BE16D474-9FFF-4884-86F0-99722C53C960}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1B0CE806-8085-42DF-AAD9-69972A1646B2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DBB0855C-0CA1-472D-95EB-156AA6F87876}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3B9F06A4-7BDA-4EF2-B01B-C5B5C62FECD2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A990D891-C8C1-44B3-B6A1-30622B63D2AF}] => (Allow) C:\Program Files\Avast Software\Suite\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{481ABE8A-35D0-43E3-B848-67ECE7EC2E08}] => (Allow) C:\Program Files\Avast Software\Suite\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{A8D9C8FA-329A-4F03-85F4-9E50034E2D90}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe (Gen Digital Inc. -> Gen Digital Inc.)
==================== Restore Points =========================
01-11-2026 11:07:39 Naplánovaný kontrolní bod
04-11-2026 18:16:03 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (11/04/2026 07:07:55 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
Error: (11/04/2026 07:07:55 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (11/04/2026 07:07:55 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
Error: (11/04/2026 07:07:55 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (11/04/2026 06:55:10 PM) (Source: SteelSeries GG Update Service Proxy) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač
Error: (11/04/2026 06:44:25 PM) (Source: SpotifySessionConnectedTask) (EventID: 100) (User: )
Description: Event-ID 100
Error: (11/04/2026 06:44:25 PM) (Source: SpotifySessionConnectedTask) (EventID: 100) (User: )
Description: Event-ID 100
Error: (11/04/2026 06:44:25 PM) (Source: SpotifySessionConnectedTask) (EventID: 100) (User: )
Description: Event-ID 100
System errors:
=============
Error: (11/06/2026 03:42:04 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024891
Error: (11/06/2026 03:42:04 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024891
Error: (11/05/2026 08:06:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-Q9C497L)
Description: Server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/05/2026 08:06:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-Q9C497L)
Description: Server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/05/2026 08:06:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-Q9C497L)
Description: Server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/05/2026 08:06:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-Q9C497L)
Description: Server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/05/2026 05:06:14 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024891
Error: (11/05/2026 05:06:14 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024891
Windows Defender:
================
TimeCreated : 04.11.2026 18:44:19
Message : Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Microsoft Defender zjistila ch
ybu a došlo k jejímu selhání.
Funkce: Při přístupu
Kód chyby: 0x8007043c
Popis chyby: Tuto službu nelze spustit v nouzovém režimu.
Důvod: Antimalwarové bezpečnostní informace přestaly z neznámých důvodů fungovat. V některých případech
se tento problém dá vyřešit restartováním služby.
TimeCreated : 30.10.2026 12:46:00
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.226.0;1.461.226.0
Verze modulu: 1.1.26090.9
TimeCreated : 29.10.2026 20:41:21
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80004004
Popis chyby: Operace přerušena
Verze bezpečnostních informací: 1.461.226.0;1.461.226.0
Verze modulu: 1.1.26090.9
TimeCreated : 27.10.2026 20:38:15
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.226.0;1.461.226.0
Verze modulu: 1.1.26090.9
TimeCreated : 27.10.2026 17:31:03
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.226.0;1.461.226.0
Verze modulu: 1.1.26090.9
TimeCreated : 26.10.2026 20:15:18
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.118.0;1.461.118.0
Verze modulu: 1.1.26090.9
TimeCreated : 25.10.2026 17:41:48
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.118.0;1.461.118.0
Verze modulu: 1.1.26090.9
TimeCreated : 25.10.2026 16:27:30
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.118.0;1.461.118.0
Verze modulu: 1.1.26090.9
CodeIntegrity:
===============
Date: 2026-11-06 16:55:29
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Avast Software\Suite\AvastSvc.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2026-11-06 16:55:15
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends International, LLC. F32c 09/27/2024
Motherboard: Gigabyte Technology Co., Ltd. B650 EAGLE
Processor: AMD Ryzen 5 7500F 6-Core Processor
Percentage of memory in use: 37%
Total physical RAM: 32373.98 MB
Available physical RAM: 20192.54 MB
Total Virtual: 34421.98 MB
Available Virtual: 20145.5 MB
==================== Drives ================================
Disk 0 - Drive c: () (Fixed) (Total:1862.03 GB) (Free:187.99 GB) (Model: CT2000P3SSD8) NTFS
Disk 0 - \\?\Volume{3990697d-79a5-4710-b5c4-77254586f79f}\ () (Fixed) (Total:890 MB) (Free:79.79 MB) NTFS
Disk 0 - \\?\Volume{59123e19-caa7-40fd-a8a0-3c38794a61b9}\ () (Fixed) (Total:96 MB) (Free:61.36 MB) FAT32
==================== MBR & Partition Table ====================
============================================================
Disk: 0 (Protective MBR) (Size: 1863.02 GB)
Partitions:
===========
Partition Style : GPT
Partition Count : 4
Disk ID : {76BCECEC-BC9B-48F0-A8B9-60CF12F12F20}
Usable Offset : 0.02 MB
Usable Length : 1863.02 GB
Max Partitions : 128
Partition 1
Type : EFI System Partition
Size : 100 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {59123E19-CAA7-40FD-A8A0-3C38794A61B9}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 101 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {B7B3236C-33E9-4EAA-9C13-BE1D7611C0D8}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 1862.03 GB
Offset : 117 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {C9758B50-398B-4A44-A85B-86665D608EB9}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 890 MB
Offset : 1906838 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {3990697D-79A5-4710-B5C4-77254586F79F}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
============================================================
==================== End of Addition.txt =======================
Ran by Admin (06-11-2026 16:54:39)
Running from C:\Users\Admin\Downloads
Microsoft Windows 11 Pro Version 26H2 26300.9818 (X64) (2024-12-05 12:55:42)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Admin (S-1-5-21-1453151362-2910950682-4162620220-1001 - Administrators - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-1453151362-2910950682-4162620220-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-1453151362-2910950682-4162620220-503 - Limited - Disabled)
Guest (S-1-5-21-1453151362-2910950682-4162620220-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1453151362-2910950682-4162620220-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Avast One (HKLM\...\Avast Suite) (Version: 26.10.11201.1041 - Gen Digital Inc.)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 154.0.35638.100 - Autoři prohlížeče Avast Secure Browser)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
Blackmagic RAW Common Components (HKLM\...\{89B80C17-5795-45F7-A401-0A5EBE4BBD4E}) (Version: 6.0 - Blackmagic Design)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon IJ Network Scanner Selector EX2 (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX2) (Version: 2.0.10.2 - Canon Inc.)
Canon IJ Printer Assistant Tool (HKLM-x32\...\Canon IJ Printer Assistant Tool) (Version: 1.70.4.30 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.5.5.3 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 6.6.0 - Canon Inc.)
Canon TS3300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_TS3300_series) (Version: 1.03 - Canon Inc.)
CapCut (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\CapCut) (Version: 9.7.0.4153 - Bytedance Pte. Ltd.)
Clownfish Voice Changer (HKLM\...\ClownfishVoiceChanger) (Version: - )
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 156.0.4314.58 - Microsoft Corporation)
DaVinci Resolve (HKLM\...\{E7753090-1295-4993-987E-0914F6550153}) (Version: 21.1.10010 - Blackmagic Design)
DaVinci Resolve Control Panels (HKLM\...\{EDA8A73C-05DC-49ED-9DF5-D29F9317307A}) (Version: 2.3.5.0 - Blackmagic Design)
Denuvo Anti-Cheat (HKLM\...\Denuvo Anti-Cheat) (Version: 6.9.2.7013 - Denuvo GmbH)
Discord (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Discord) (Version: 1.0.9267 - Discord Inc.)
ENE Video Capture Box HAL (HKLM\...\{A096611D-BA11-4A1A-8D09-0A0462D7C8F2}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE Video Capture Box HAL (HKLM-x32\...\{974259bf-3ed1-4cd6-9ed1-40c7f601a786}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE_AIC_Marvell_HAL (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden
ENE_AIC_Marvell_HAL (HKLM-x32\...\{887e18fb-6bc3-4cd4-b34e-32d9ff71bbae}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden
ENE_DRAM_RGB_AIO (HKLM\...\{5D2EC6F2-7EC3-486E-A144-7174E537A148}) (Version: 1.0.14.4 - Ene Tech.) Hidden
ENE_DRAM_RGB_AIO (HKLM-x32\...\{35a6f7ad-3ff5-4bdc-89a5-e166ef586e81}) (Version: 1.0.14.4 - Ene Tech.) Hidden
ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden
ENE_EHD_M2_HAL (HKLM-x32\...\{c1d017c2-8846-4000-9254-5689eccd462e}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden
ENE_External_Device_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.12.7 - ENE Tech) Hidden
ENE_External_Device_HAL (HKLM-x32\...\{a7b1cf47-d8f0-423d-9494-568195f1c864}) (Version: 1.0.12.7 - ENE Tech) Hidden
ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden
ENE_MousePad_HAL (HKLM-x32\...\{bf256b46-8ff7-48be-ab7f-5661e9a0651f}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM-x32\...\{c662a481-d76a-4188-95d2-6eb4ffd55542}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
Epic Games Launcher (HKLM-x32\...\{C5C3EE71-4047-4144-946E-18D500510CB5}) (Version: 1.3.128.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{5122B8BC-D6DF-48FF-8D4E-15A63EEC5073}) (Version: 2.8.1 - Epic Games, Inc.)
Fairlight Audio Accelerator Utility (HKLM\...\FairlightAudioAccelerator_is1) (Version: 1.0.15 - Blackmagic Design)
GBT_MB_Update (HKLM\...\GBT_MB_Update) (Version: 24.10.24.01 - GIGABYTE)
GBT_RGB_Sync_Control 24.10.24.01 (HKLM\...\GBT_RGB_Sync_Control) (Version: 24.10.24.01 - GIGABYTE)
GIGABYTE Control Center 24.10.28.01 (HKLM\...\GIGABYTE Control Center) (Version: 24.10.28.01 - GIGABYTE)
GIGABYTE Performance Library (HKLM\...\MBEasyTune) (Version: 24.10.30.01 - GIGABYTE)
GIGABYTE SSD Firmware Update Tool (HKLM\...\GBTSsdFirmwareUpdate) (Version: 24.06.19.01 - GIGABYTE)
GIGABYTE Storage Library (HKLM\...\MBStorage) (Version: 24.10.24.01 - GIGABYTE)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Malwarebytes version 5.7.3.376 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.7.3.376 - Malwarebytes)
Microsoft .NET Host - 8.0.23 (x64) (HKLM\...\{8CE231CE-B9F2-488A-BC60-FA1CE584B85D}) (Version: 64.92.45415 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.23 (x64) (HKLM\...\{A42EAA28-C0A1-4712-A109-796202435469}) (Version: 64.92.45415 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.23 (x64) (HKLM\...\{39884818-B550-4209-9A49-81F9D21F6012}) (Version: 64.92.45415 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 156.0.4314.58 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 156.0.4314.58 - Microsoft Corporation) Hidden
Microsoft GameInput (HKLM\...\{0DA71DCF-F605-435D-9B16-051DFBE7CB76}) (Version: 4.0.302.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\OneDriveSetup.exe) (Version: 26.195.1006.0007 - Microsoft Corporation)
Microsoft Visual Basic/C++ Runtime (x86) (HKLM-x32\...\{C5E3A69D-D391-45A6-A8FB-00B01E2B010D}) (Version: 1.1.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61135 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61135 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61135 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61135 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{610487D9-3460-328A-9333-219D43A75CC5}) (Version: 10.0.60922 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Microsoft Windows Desktop Runtime - 8.0.23 (x64) (HKLM\...\{29177194-CD94-4A2D-97A4-EF77738E995A}) (Version: 64.92.45458 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.23 (x64) (HKLM-x32\...\{d653912d-5c24-4e13-9238-531257889178}) (Version: 8.0.23.35609 - Microsoft Corporation)
NVIDIA App 11.0.9.251 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.9.251 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.9.12728.38614306 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.9.12728.38614306 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 610.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 610.88 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 32.2.2 - OBS Project)
Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.1.0.1 - Patriot Memory) Hidden
Patriot Viper M2 SSD RGB (HKLM-x32\...\{07236f40-ec25-4646-8cb6-b6aaf1597324}) (Version: 1.1.0.1 - Patriot Memory) Hidden
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9733.1 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 11.20.0729.2024 - Realtek)
Registrace tiskárny (HKLM-x32\...\Canon EISRegistration) (Version: 1.9.2 - Canon Inc.)
Roblox Player for Admin (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\roblox-player) (Version: - Roblox Corporation)
Roblox Studio for Admin (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\roblox-studio) (Version: - Roblox Corporation)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteelSeries GG 123.0.0 (HKLM\...\SteelSeries GG) (Version: 123.0.0 - SteelSeries ApS)
Thrustmaster Force Feedback Driver (HKLM-x32\...\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}) (Version: 2.FFD.2018 - Thrustmaster)
TikTok LIVE Studio (HKLM\...\tiktoklivestudio) (Version: 1.36.6 - TikTok Pte. Ltd.)
Verbatim_SureFireGaming_Product (HKLM\...\{35CB65C6-A7E3-4EE7-AD40-738D70A72164}) (Version: 1.0.3.11 - Verbatim) Hidden
Verbatim_SureFireGaming_Product (HKLM-x32\...\{d601832a-0d94-46ce-9b19-78e8a5887313}) (Version: 1.0.3.11 - Verbatim) Hidden
Voicemod (HKLM\...\{FE519A29-8B15-47C4-BCD6-A513277DC26F}_is1) (Version: 1.6.22 - Voicemod Inc., Sucursal en España)
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version: 20.10 - NCH Software)
WD P40 Game Drive (HKLM\...\{EE55DBAE-ECDD-4ADD-AAB5-23DE848B0996}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden
WD P40 Game Drive (HKLM-x32\...\{72b1a866-fc31-4381-bff3-fa6cd8823777}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden
Xbox Service (HKLM\...\{81F706B1-AB0A-4D88-B2DB-E5BAF88C87C6}) (Version: 4.0.300.0 - Microsoft Corporation)
Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-07-06] ()
Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2026-10-20] ()
Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_2.6.2.0_x64__8wekyb3d8bbwe [2026-10-30] (Microsoft Studios)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-12-09] (NVIDIA Corp.)
OP Auto Clicker - Auto Tap -> C:\Program Files\WindowsApps\38458AutoClicker.OPAutoClicker-AutoTap_4.1.0.0_x64__5e1qkq7gw5abm [2025-12-30] (Auto Clicker)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.51.347.0_x64__dt26b99r8h8gj [2024-12-05] (Realtek Semiconductor Corp)
shellmenua -> C:\Program Files (x86)\NCH Software\Components\Shared\shellmenu [2025-04-12] ()
shellmenub -> C:\Program Files (x86)\NCH Software\Components\Shared\shellmenu [2025-04-12] ()
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0 [2026-07-31] (Spotify AB) [Startup Task]
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2628.101.0_x64__cv1g1gvanyjgm [2026-07-30] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.0.1.0_x64__8wekyb3d8bbwe [2026-05-21] (Microsoft Corp.)
Windows App Runtime DDLM 4000.1049.117.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1049.117.0-x6_4000.1049.117.0_x64__8wekyb3d8bbwe [2026-09-29] (Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1453151362-2910950682-4162620220-1001_Classes\CLSID\{23A5B06E-20BB-4E7E-A0AC-6982ED6A6041}\localserver32 -> C:\Users\Admin\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe (ESET, spol. s r.o. -> ESET)
CustomCLSID: HKU\S-1-5-21-1453151362-2910950682-4162620220-1001_Classes\CLSID\{CFEFC7E6-50F3-4102-9C35-E75445AA6E4D}\localserver32 -> C:\Users\Admin\AppData\Local\Discord\app-1.0.9267\Discord.exe (Discord Inc. -> Discord Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-10-20] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\nvshext.dll [2026-08-18] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-10-20] (Malwarebytes Inc -> Malwarebytes)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2026-10-01 18:17 - 2026-10-01 18:17 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\PlugIns\NVIDIA App\MessageBusRouter.dll] C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\plugins\NVIDIA Overlay\MessageBusRouter.dll
2024-12-05 14:43 - 2026-10-01 18:17 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [4972]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2024-04-01 08:26 - 2026-11-06 15:42 - 000001024 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 gen-webserver.internal www.gen-webserver.internal # gen digital helper server
127.0.0.1 revocation.gen-webserver.internal www.revocation.gen-webserver.internal # gen digital helper server
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.1.254
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
Wi-Fi: MediaTek Wi-Fi 6 MT7921 Wireless LAN Card -> mtkwl6ex.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\OneDrive\Nová složka\Nová složka (2)\d944ab2d46564c0b557588629ee71c82.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX2"
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\StartupApproved\Run: => "Steam"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{F107A820-65BC-45FA-80AD-07EAC90CC6F5}] => (Allow) C:\Program Files\GIGABYTE\Control Center\GCC.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [TCP Query User{4AEFDA78-33A4-48AD-AF77-48425BA9E9C7}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{54525CE8-AAC1-4805-875D-2647462867C3}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{88AB6B4D-6638-4946-9A8A-0905C94B2B81}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [UDP Query User{0C9AF6B4-1058-413C-A184-8A98E94683D0}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [{473685B5-6148-43B2-9219-5B37D747B834}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{63C62BD1-549B-4576-8518-09A9D8545787}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{CDBB6416-F267-4F74-8052-0AE83391AC82}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{D82F45DC-2FC2-45CF-8F86-0120E3031449}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [TCP Query User{CF5A0BAA-0E88-4FE9-AA1D-2530EBC6649A}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{BCCFA34E-8272-4B5E-9F5C-0C702E12ABB5}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D43736FA-29F7-4E4B-BF8E-6889A8D80E12}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{85FBDAE0-0E28-4331-AE92-DD1DF56D2CE5}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D3489764-AE18-45D3-96FA-7529DE34DCE9}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [UDP Query User{3D37AFE3-EAE7-435C-BF55-AD2EE6B4EA1D}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [TCP Query User{CBA17841-71B9-4630-B121-F032E48EE224}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [UDP Query User{315C6DCD-E090-4198-A6C3-462C461D622D}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [{5EC48E1D-2712-4C6B-BB49-4247E5ACE0B5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [{259AC075-D7C3-4196-94AB-8EBA81F77AD5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [TCP Query User{CC99B756-1DBE-43BD-A9AD-AEC246F72999}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{1866190C-7EE2-48D1-BB73-82A04252DCDB}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{1A023ACF-952C-4D59-9FC1-03A9860656F6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [UDP Query User{73B4135B-8C02-42B2-B752-A75AAA30B5E6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [TCP Query User{F1F7BD7A-C3C0-4084-A998-FE8D6DDF145E}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{6F86EDAC-7A90-465C-8AC3-55B95E0F5650}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{CCD34B29-7380-49CD-9730-280319E0CF6D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [UDP Query User{AECC118C-A413-4ABD-A621-398FF0DC465D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [{1E3C90C0-513B-4156-8810-C1D6822AA0EA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Headliners\Headliners.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{F5A74DD9-C729-4955-93D2-233C344A530F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Headliners\Headliners.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [TCP Query User{DD61F478-D5A9-487D-A5DB-01CFCB4A9D4A}C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{40631B60-F8AD-4041-8746-5ADFF94C67B1}C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{C5FEA89E-902E-4CA5-98A4-D31C0B97B321}C:\users\admin\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe] => (Allow) C:\users\admin\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe (Epic Games Inc. -> Epic Games)
FirewallRules: [UDP Query User{1829370C-CCC3-45D9-B7C5-F805262C68F2}C:\users\admin\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe] => (Allow) C:\users\admin\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe (Epic Games Inc. -> Epic Games)
FirewallRules: [TCP Query User{4F504460-E2CE-428B-A9BF-C2C2CDE964B6}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{9F0E2919-C426-4E16-8EA2-EEBF85F1B957}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{2DAB2EC1-F89A-49F0-B85A-963DCEB9D8CA}C:\program files\epic games\ue_5.6\engine\binaries\dotnet\swarmagent.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\dotnet\swarmagent.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{9559BA4D-2902-4431-B151-71BEB6AE37E8}C:\program files\epic games\ue_5.6\engine\binaries\dotnet\swarmagent.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\dotnet\swarmagent.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{BA3992A9-B9FC-4485-9C64-9B366072C793}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{D31DFE94-6334-4EE4-8CD7-F4B369C1EAAB}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{92D5A576-CE3E-4CC8-A152-86F1366A871C}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [UDP Query User{216CDC1E-9286-4C82-B257-8CD85468A712}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [TCP Query User{F2AEAD66-8B45-4BEB-B575-C88E45038B12}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{81A55120-7689-4005-A673-4EE258157004}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{0AF2CC85-4A06-4C44-9CA9-7F4C7354473C}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F82EB1E7-9DD8-48DA-B02E-C243351F60CC}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{173FC992-40BA-4633-89F9-AA2965276ACE}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F0837634-637E-40D8-A950-FB86BC1BC4B4}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{04053482-945F-4027-94CA-EC27D5F2A5F2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [{C37B0009-E50C-481A-BC24-9DD3854AD930}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [TCP Query User{6D834983-8B48-4566-825E-90D4840520D6}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{8A2F0EE0-D927-45B8-9CA9-91D230F26D2C}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{8EFBDF77-A249-45D6-9EDC-15D8BBD9FAF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4A4DE719-4364-4564-A847-AB47B322ECA2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{677EF203-6635-48EF-B562-48CF6411307B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{71A5BBC5-7F7F-4645-B3C2-8B6C9C83A4C6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{01DA68A4-AB3C-4921-A772-95D8D3878B32}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{F7681C02-0091-4DF3-95EE-3EE43C528AC1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{C5CD6181-5E62-4D97-9526-0BC28EB769F4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{6EBFA368-9054-40C9-B7EA-E13E1306CA7A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{DD55A498-15AD-4545-8376-4D75FDCAE3C9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{19AD629F-428A-4833-B643-39C96B116E05}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{BCFF6CAD-2369-42AE-B070-BEBC49D60766}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D12E4076-F5BC-4D07-B73E-35C748E86452}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{D5A10769-CAD3-4C7C-8991-2D703B01B3E6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{46A272F7-EDC0-4061-BF95-B76EE29302EB}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{9A0E4C3A-A4ED-4A71-A2E5-5C4F5958ABEA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{D5F35CE3-D82E-4DF6-A94F-30BF0EF5772C}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{CFDA5567-4DEC-4F40-AC08-795B0A5CA9FA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B644D7E1-E20A-485E-86E9-64419765DEF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{51DFAEBE-9F39-41CD-B4B8-7235A3E14C86}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{61F57EA3-2AEB-420D-B314-4FA96AA3B86B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4EA28662-4E13-4B7A-8052-CEE17FBA55F2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{ED30486E-5490-4100-9023-E7F3F1D169CF}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{8759969D-21A5-4B84-9945-6F03BCF9A2F4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B0E062FB-E7EB-4E18-9F23-3EC08D059BC9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{307A0CB2-60FE-456D-96F4-69268448538D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{4530A273-CE45-4AD5-B5CB-882C3C805C39}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{C5D0C516-CE5C-480E-9711-4E22BD94C55D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{60BC40E1-BC11-4D63-BEDD-F3324C6CABC0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4B9831D5-EB9A-4F4F-A588-EF35B7B77E24}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{C0B50B5C-8132-4B42-A645-2D07FA9DD518}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{A41085B3-DC2E-4212-B5B2-5823212D0359}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{3DD60A03-A2F5-4452-96DF-5418D59D98E9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{E9165354-5981-4589-9CEE-B57F37AE11C1}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [UDP Query User{8966F311-8EB8-4FA2-AF9F-8C5717376EE4}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [{D9A15950-4609-4CE8-857B-AC8BE23F38C4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{D8A08B47-BFC8-458E-81B0-EC2A91D97094}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{3E461FF7-42FD-4394-B2C6-A04519DAEE4A}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D7CF90F2-82B5-488C-97C6-530152E9FB14}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{F5392060-B369-4AD1-8C1E-992166DBE42A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A750FA40-5379-4339-8257-E3513CFCAFD1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{46ED8989-6242-4C2B-AEEC-39C8964E05B0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{8F3391D6-B55C-41BB-A403-E8ACF9C2719E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2361B9AE-52DC-423B-AF73-B7A45A0EDD04}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{D1505DBD-1C57-4B6C-B70B-1A62DDA4D291}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{AD125465-9351-40BC-8D4A-500DD71A6C47}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{709F2DF8-B84C-4498-92EF-4BAA0CB5775A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{BE349F34-3776-4C21-9CA1-2F8BFDF5BF7F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{9128B5E2-70AB-46CB-95F5-C4A5CFDACD76}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{48A26039-1EB8-4A17-BDD7-529BB28C97BA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{5EE62AA5-0DBB-43E1-9C62-5D0576E87330}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{ECF65CBD-7829-48E9-809F-469C48DB3E37}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{2D638882-4852-4A30-81CB-45063FD8D9D1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{409E3A01-EBB9-4AE2-AEB2-E115250DA963}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{FD21D0E7-5FEF-461E-9556-58DA367172AD}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{22A12214-FA25-4FBE-90FF-8453588F1C36}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [UDP Query User{CD95E94D-DD51-4F98-B0D0-C084228FE1F9}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [{215FED96-E7F0-4632-93C1-29A8B8033A50}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{86F3F872-24B6-495B-904B-825B1EC60F10}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{B5E4935C-2D38-420F-8ADA-52621D9B1780}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{707E905E-F114-474A-9494-2AA2F117749A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{EA96767C-B5C3-45D3-99FD-A8477A8D9B18}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4450C1BF-3B23-4E47-B9F5-0B22132FF94D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{8E62F398-08DA-40AC-B1D3-4D6BE3B4A746}] => (Allow) C:\Users\Admin\AppData\Local\Temp\7z989C71F4\MuMuDownloader.exe => No File
FirewallRules: [{D4376C89-15BF-41E8-B2A7-2EF3FF873145}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{8D904F42-721A-47CF-B31D-927EE0853181}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{0B336949-8D11-4842-A19C-A56D630174AF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E6EA77C8-B0C2-4F5E-B051-4F11B299FBDF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BACF7064-9A81-4464-83B9-7B05F32F5212}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B2B9D991-9277-4750-AF9C-CD6F33BF08C6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{6722C416-1E99-441F-9EE9-07C03EDBF692}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E33472CF-E13D-42C0-8AA3-4D17B0179F66}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5FC88935-8940-4240-86A5-3FFCFBAAEB83}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3E17F3C9-BFD7-4850-890A-1AC921FC5690}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{41AE0C84-A940-490E-95A8-31833053EDD0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BED724C3-4A64-49F4-B85E-A34A59598EC2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1DB2C7F8-5EE1-46DB-9B67-943BD45AF7E6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{AD0D2D05-3245-4F66-8B78-666725E5AA69}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{24369CA3-481E-4756-A564-3D2639DB9C2E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7253630C-FB34-4022-B52F-5942B076C431}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PEAK\PEAK.exe () [File not signed]
FirewallRules: [{0B964610-EB3A-408F-9D43-E3B08F449D58}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PEAK\PEAK.exe () [File not signed]
FirewallRules: [{1586AC2A-855C-4F4C-8ACE-3EF5B1E815D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\REPO\REPO.exe () [File not signed]
FirewallRules: [{1F4065D2-4A32-416F-9541-8ACB4B076F95}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\REPO\REPO.exe () [File not signed]
FirewallRules: [{2F2DF462-5930-41A6-929E-020566AE799C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe () [File not signed]
FirewallRules: [{123EFA1D-8149-4E7B-89C8-77DCE46C6567}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe () [File not signed]
FirewallRules: [{577A0973-0603-41CD-8B0F-4F566C9D8EBC}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{767FCD6B-98AF-45AC-A4A6-3FBDFA12706B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{E702068B-0219-4DEF-93C0-366D47CB773F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{AA8D76FC-D381-41C2-9103-BE842936472D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{1002291D-1535-4371-B158-A5F8D897893A}C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe] => (Block) C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe (Epic Games Inc. -> Psyonix, LLC)
FirewallRules: [UDP Query User{8DD37B45-EBA6-4AA4-B74B-0357F4239EA9}C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe] => (Block) C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe (Epic Games Inc. -> Psyonix, LLC)
FirewallRules: [{9E011CFC-2A98-4AE9-BAF6-FFB4B5A9701D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.36.6\TikTok LIVE Studio.exe (TikTok Pte. Ltd. -> TikTok Pte. Ltd.)
FirewallRules: [{378E1F5C-80ED-4C5E-A8EB-ED96BB6822CA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.36.6\TikTok LIVE Studio.exe (TikTok Pte. Ltd. -> TikTok Pte. Ltd.)
FirewallRules: [{07B8FD14-0B81-4624-AFC9-164C30FB1FF3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{7802F457-4446-4B40-AF78-F2FA239B0F3F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [TCP Query User{BD26E197-AC5A-44BC-BCA1-73AE8097FB8C}C:\users\admin\appdata\local\capcut\apps\9.5.0.4050\capcut.exe] => (Block) C:\users\admin\appdata\local\capcut\apps\9.5.0.4050\capcut.exe (Bytedance Pte. Ltd. -> ByteDance)
FirewallRules: [UDP Query User{3362BC92-5483-4020-A3BD-8566E77C4907}C:\users\admin\appdata\local\capcut\apps\9.5.0.4050\capcut.exe] => (Block) C:\users\admin\appdata\local\capcut\apps\9.5.0.4050\capcut.exe (Bytedance Pte. Ltd. -> ByteDance)
FirewallRules: [{10E966BA-A23C-4F1D-81A8-05D6C7646C05}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Fish\How to Fish\How to Fish.exe () [File not signed]
FirewallRules: [{594917C0-5A61-4DE1-86A2-66587A66C4EB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Fish\How to Fish\How to Fish.exe () [File not signed]
FirewallRules: [{8364E44D-8239-4632-AC04-514CF01C4BBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Phasmophobia\Phasmophobia.exe () [File not signed]
FirewallRules: [{2D23DD9A-6465-4D62-B9F1-6CF22CA3B89E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Phasmophobia\Phasmophobia.exe () [File not signed]
FirewallRules: [TCP Query User{62F71AF7-E751-4870-8590-0A25945AA560}C:\users\admin\appdata\local\capcut\apps\9.6.0.4097\capcut.exe] => (Block) C:\users\admin\appdata\local\capcut\apps\9.6.0.4097\capcut.exe (Bytedance Pte. Ltd. -> ByteDance)
FirewallRules: [UDP Query User{1ABA5F83-7558-4EF7-BA37-326F385EBA5F}C:\users\admin\appdata\local\capcut\apps\9.6.0.4097\capcut.exe] => (Block) C:\users\admin\appdata\local\capcut\apps\9.6.0.4097\capcut.exe (Bytedance Pte. Ltd. -> ByteDance)
FirewallRules: [TCP Query User{E8383464-7AD1-4A6A-AF31-121D87B000CD}C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe] => (Allow) C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe (Blackmagic Design Pty Ltd -> Blackmagic Design)
FirewallRules: [UDP Query User{21745D61-77B0-43D9-B9C4-6A48AF62DC54}C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe] => (Allow) C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe (Blackmagic Design Pty Ltd -> Blackmagic Design)
FirewallRules: [{8943C3EE-BFED-422A-9A6B-1F0F37EFCA0C}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{8E10AC50-7DE5-4CB2-BE70-0AA1EB0A067B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{64E9057A-6E84-413D-86DA-5F2DE62F3091}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{701A06C3-9E3F-4800-8649-B2ECFBE58A87}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{C0C6CDBF-38C1-4EF2-A762-919B031A8C4A}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{5A9BC69C-67AE-43D1-AE81-486A9C6FB993}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{A7197D3A-1711-415B-BD30-5F456CF5FE7E}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => No File
FirewallRules: [{3BF4D3B5-79CB-40A1-86EF-47145AC8FC7B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [TCP Query User{1008DB49-8F65-49DD-A16F-852442C6B688}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [UDP Query User{4BC75FDE-D25D-46E9-9D76-62E27D7953B9}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{744DEF89-F7EC-452E-A74E-A26DEE76C2A8}] => (Allow) C:\Program Files\Voicemod V3\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.)
FirewallRules: [{568A7599-4DC9-4517-97C5-9F17A3FE723A}] => (Allow) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc., Sucursal en España)
FirewallRules: [{04160A98-AB84-40D2-8969-03604D55A606}] => (Allow) C:\Program Files\Voicemod V3\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.)
FirewallRules: [{1894A175-FE48-463B-A9E0-13CC19B5E47F}] => (Allow) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc., Sucursal en España)
FirewallRules: [{7A68EA4D-99F1-47A0-A497-AD0E71134B85}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BE16D474-9FFF-4884-86F0-99722C53C960}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1B0CE806-8085-42DF-AAD9-69972A1646B2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DBB0855C-0CA1-472D-95EB-156AA6F87876}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3B9F06A4-7BDA-4EF2-B01B-C5B5C62FECD2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A990D891-C8C1-44B3-B6A1-30622B63D2AF}] => (Allow) C:\Program Files\Avast Software\Suite\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{481ABE8A-35D0-43E3-B848-67ECE7EC2E08}] => (Allow) C:\Program Files\Avast Software\Suite\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{A8D9C8FA-329A-4F03-85F4-9E50034E2D90}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe (Gen Digital Inc. -> Gen Digital Inc.)
==================== Restore Points =========================
01-11-2026 11:07:39 Naplánovaný kontrolní bod
04-11-2026 18:16:03 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (11/04/2026 07:07:55 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
Error: (11/04/2026 07:07:55 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (11/04/2026 07:07:55 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
Error: (11/04/2026 07:07:55 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (11/04/2026 06:55:10 PM) (Source: SteelSeries GG Update Service Proxy) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač
Error: (11/04/2026 06:44:25 PM) (Source: SpotifySessionConnectedTask) (EventID: 100) (User: )
Description: Event-ID 100
Error: (11/04/2026 06:44:25 PM) (Source: SpotifySessionConnectedTask) (EventID: 100) (User: )
Description: Event-ID 100
Error: (11/04/2026 06:44:25 PM) (Source: SpotifySessionConnectedTask) (EventID: 100) (User: )
Description: Event-ID 100
System errors:
=============
Error: (11/06/2026 03:42:04 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024891
Error: (11/06/2026 03:42:04 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024891
Error: (11/05/2026 08:06:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-Q9C497L)
Description: Server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/05/2026 08:06:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-Q9C497L)
Description: Server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/05/2026 08:06:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-Q9C497L)
Description: Server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/05/2026 08:06:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-Q9C497L)
Description: Server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} se v daném časovém limitu neregistroval u služby DCOM.
Error: (11/05/2026 05:06:14 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024891
Error: (11/05/2026 05:06:14 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024891
Windows Defender:
================
TimeCreated : 04.11.2026 18:44:19
Message : Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Microsoft Defender zjistila ch
ybu a došlo k jejímu selhání.
Funkce: Při přístupu
Kód chyby: 0x8007043c
Popis chyby: Tuto službu nelze spustit v nouzovém režimu.
Důvod: Antimalwarové bezpečnostní informace přestaly z neznámých důvodů fungovat. V některých případech
se tento problém dá vyřešit restartováním služby.
TimeCreated : 30.10.2026 12:46:00
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.226.0;1.461.226.0
Verze modulu: 1.1.26090.9
TimeCreated : 29.10.2026 20:41:21
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80004004
Popis chyby: Operace přerušena
Verze bezpečnostních informací: 1.461.226.0;1.461.226.0
Verze modulu: 1.1.26090.9
TimeCreated : 27.10.2026 20:38:15
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.226.0;1.461.226.0
Verze modulu: 1.1.26090.9
TimeCreated : 27.10.2026 17:31:03
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.226.0;1.461.226.0
Verze modulu: 1.1.26090.9
TimeCreated : 26.10.2026 20:15:18
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.118.0;1.461.118.0
Verze modulu: 1.1.26090.9
TimeCreated : 25.10.2026 17:41:48
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.118.0;1.461.118.0
Verze modulu: 1.1.26090.9
TimeCreated : 25.10.2026 16:27:30
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.118.0;1.461.118.0
Verze modulu: 1.1.26090.9
CodeIntegrity:
===============
Date: 2026-11-06 16:55:29
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Avast Software\Suite\AvastSvc.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2026-11-06 16:55:15
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends International, LLC. F32c 09/27/2024
Motherboard: Gigabyte Technology Co., Ltd. B650 EAGLE
Processor: AMD Ryzen 5 7500F 6-Core Processor
Percentage of memory in use: 37%
Total physical RAM: 32373.98 MB
Available physical RAM: 20192.54 MB
Total Virtual: 34421.98 MB
Available Virtual: 20145.5 MB
==================== Drives ================================
Disk 0 - Drive c: () (Fixed) (Total:1862.03 GB) (Free:187.99 GB) (Model: CT2000P3SSD8) NTFS
Disk 0 - \\?\Volume{3990697d-79a5-4710-b5c4-77254586f79f}\ () (Fixed) (Total:890 MB) (Free:79.79 MB) NTFS
Disk 0 - \\?\Volume{59123e19-caa7-40fd-a8a0-3c38794a61b9}\ () (Fixed) (Total:96 MB) (Free:61.36 MB) FAT32
==================== MBR & Partition Table ====================
============================================================
Disk: 0 (Protective MBR) (Size: 1863.02 GB)
Partitions:
===========
Partition Style : GPT
Partition Count : 4
Disk ID : {76BCECEC-BC9B-48F0-A8B9-60CF12F12F20}
Usable Offset : 0.02 MB
Usable Length : 1863.02 GB
Max Partitions : 128
Partition 1
Type : EFI System Partition
Size : 100 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {59123E19-CAA7-40FD-A8A0-3C38794A61B9}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 101 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {B7B3236C-33E9-4EAA-9C13-BE1D7611C0D8}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 1862.03 GB
Offset : 117 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {C9758B50-398B-4A44-A85B-86665D608EB9}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 890 MB
Offset : 1906838 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {3990697D-79A5-4710-B5C4-77254586F79F}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
============================================================
==================== End of Addition.txt =======================
-
Rudy
- Site Admin
- Příspěvky: 120215
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu logu - podezření na viry
Otevřte poznámkový blok a zkopírujte do něj:
Uložte do C:\Users\Admin\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [4972]
FirewallRules: [TCP Query User{88AB6B4D-6638-4946-9A8A-0905C94B2B81}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [UDP Query User{0C9AF6B4-1058-413C-A184-8A98E94683D0}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [{CDBB6416-F267-4F74-8052-0AE83391AC82}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{D82F45DC-2FC2-45CF-8F86-0120E3031449}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [TCP Query User{CF5A0BAA-0E88-4FE9-AA1D-2530EBC6649A}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{BCCFA34E-8272-4B5E-9F5C-0C702E12ABB5}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D43736FA-29F7-4E4B-BF8E-6889A8D80E12}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{85FBDAE0-0E28-4331-AE92-DD1DF56D2CE5}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D3489764-AE18-45D3-96FA-7529DE34DCE9}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [UDP Query User{3D37AFE3-EAE7-435C-BF55-AD2EE6B4EA1D}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [TCP Query User{CBA17841-71B9-4630-B121-F032E48EE224}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [UDP Query User{315C6DCD-E090-4198-A6C3-462C461D622D}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [{5EC48E1D-2712-4C6B-BB49-4247E5ACE0B5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [{259AC075-D7C3-4196-94AB-8EBA81F77AD5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [TCP Query User{CC99B756-1DBE-43BD-A9AD-AEC246F72999}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{1866190C-7EE2-48D1-BB73-82A04252DCDB}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{1A023ACF-952C-4D59-9FC1-03A9860656F6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [UDP Query User{73B4135B-8C02-42B2-B752-A75AAA30B5E6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [TCP Query User{F1F7BD7A-C3C0-4084-A998-FE8D6DDF145E}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{6F86EDAC-7A90-465C-8AC3-55B95E0F5650}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{CCD34B29-7380-49CD-9730-280319E0CF6D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [UDP Query User{AECC118C-A413-4ABD-A621-398FF0DC465D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [TCP Query User{BA3992A9-B9FC-4485-9C64-9B366072C793}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{D31DFE94-6334-4EE4-8CD7-F4B369C1EAAB}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{92D5A576-CE3E-4CC8-A152-86F1366A871C}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [UDP Query User{216CDC1E-9286-4C82-B257-8CD85468A712}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [TCP Query User{F2AEAD66-8B45-4BEB-B575-C88E45038B12}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{81A55120-7689-4005-A673-4EE258157004}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{0AF2CC85-4A06-4C44-9CA9-7F4C7354473C}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F82EB1E7-9DD8-48DA-B02E-C243351F60CC}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{173FC992-40BA-4633-89F9-AA2965276ACE}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F0837634-637E-40D8-A950-FB86BC1BC4B4}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{8A2F0EE0-D927-45B8-9CA9-91D230F26D2C}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{8EFBDF77-A249-45D6-9EDC-15D8BBD9FAF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4A4DE719-4364-4564-A847-AB47B322ECA2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{677EF203-6635-48EF-B562-48CF6411307B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{71A5BBC5-7F7F-4645-B3C2-8B6C9C83A4C6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{01DA68A4-AB3C-4921-A772-95D8D3878B32}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{F7681C02-0091-4DF3-95EE-3EE43C528AC1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{DD55A498-15AD-4545-8376-4D75FDCAE3C9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{19AD629F-428A-4833-B643-39C96B116E05}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{BCFF6CAD-2369-42AE-B070-BEBC49D60766}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D12E4076-F5BC-4D07-B73E-35C748E86452}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{D5A10769-CAD3-4C7C-8991-2D703B01B3E6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{46A272F7-EDC0-4061-BF95-B76EE29302EB}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{9A0E4C3A-A4ED-4A71-A2E5-5C4F5958ABEA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{D5F35CE3-D82E-4DF6-A94F-30BF0EF5772C}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{CFDA5567-4DEC-4F40-AC08-795B0A5CA9FA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B644D7E1-E20A-485E-86E9-64419765DEF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{51DFAEBE-9F39-41CD-B4B8-7235A3E14C86}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{61F57EA3-2AEB-420D-B314-4FA96AA3B86B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4EA28662-4E13-4B7A-8052-CEE17FBA55F2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{ED30486E-5490-4100-9023-E7F3F1D169CF}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{8759969D-21A5-4B84-9945-6F03BCF9A2F4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B0E062FB-E7EB-4E18-9F23-3EC08D059BC9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{307A0CB2-60FE-456D-96F4-69268448538D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{4530A273-CE45-4AD5-B5CB-882C3C805C39}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{C5D0C516-CE5C-480E-9711-4E22BD94C55D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{60BC40E1-BC11-4D63-BEDD-F3324C6CABC0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4B9831D5-EB9A-4F4F-A588-EF35B7B77E24}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{C0B50B5C-8132-4B42-A645-2D07FA9DD518}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{A41085B3-DC2E-4212-B5B2-5823212D0359}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{3DD60A03-A2F5-4452-96DF-5418D59D98E9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{E9165354-5981-4589-9CEE-B57F37AE11C1}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [UDP Query User{8966F311-8EB8-4FA2-AF9F-8C5717376EE4}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [{D9A15950-4609-4CE8-857B-AC8BE23F38C4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{D8A08B47-BFC8-458E-81B0-EC2A91D97094}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{3E461FF7-42FD-4394-B2C6-A04519DAEE4A}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D7CF90F2-82B5-488C-97C6-530152E9FB14}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{2361B9AE-52DC-423B-AF73-B7A45A0EDD04}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{D1505DBD-1C57-4B6C-B70B-1A62DDA4D291}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{AD125465-9351-40BC-8D4A-500DD71A6C47}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{709F2DF8-B84C-4498-92EF-4BAA0CB5775A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{BE349F34-3776-4C21-9CA1-2F8BFDF5BF7F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{9128B5E2-70AB-46CB-95F5-C4A5CFDACD76}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{48A26039-1EB8-4A17-BDD7-529BB28C97BA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{5EE62AA5-0DBB-43E1-9C62-5D0576E87330}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{ECF65CBD-7829-48E9-809F-469C48DB3E37}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{2D638882-4852-4A30-81CB-45063FD8D9D1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{409E3A01-EBB9-4AE2-AEB2-E115250DA963}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{FD21D0E7-5FEF-461E-9556-58DA367172AD}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{22A12214-FA25-4FBE-90FF-8453588F1C36}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [UDP Query User{CD95E94D-DD51-4F98-B0D0-C084228FE1F9}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [{215FED96-E7F0-4632-93C1-29A8B8033A50}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{86F3F872-24B6-495B-904B-825B1EC60F10}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{B5E4935C-2D38-420F-8ADA-52621D9B1780}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{707E905E-F114-474A-9494-2AA2F117749A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{EA96767C-B5C3-45D3-99FD-A8477A8D9B18}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4450C1BF-3B23-4E47-B9F5-0B22132FF94D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{8E62F398-08DA-40AC-B1D3-4D6BE3B4A746}] => (Allow) C:\Users\Admin\AppData\Local\Temp\7z989C71F4\MuMuDownloader.exe => No File
FirewallRules: [{D4376C89-15BF-41E8-B2A7-2EF3FF873145}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{8D904F42-721A-47CF-B31D-927EE0853181}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{577A0973-0603-41CD-8B0F-4F566C9D8EBC}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{767FCD6B-98AF-45AC-A4A6-3FBDFA12706B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{E702068B-0219-4DEF-93C0-366D47CB773F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{AA8D76FC-D381-41C2-9103-BE842936472D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Environment\\UserInitMprLogonScript: -> (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
S3 AppShellElevationService; "C:\Program Files\TikTok LIVE Studio\1.14.2\elevation_service.exe" (No File)
S1 eocquekn; \??\C:\WINDOWS\system32\drivers\eocquekn.sys (No File)
S3 HWiNFO_202; \??\C:\Users\Admin\AppData\Local\Temp\HWiNFO_x64_202.sys (No File) <==== ATTENTION
C:\DumpStack.log.tmp
EmptyTemp:
Hosts:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosím o kontrolu logu - podezření na viry. toto mi vyskočilo po restartu pc
Fix result of Farbar Recovery Scan Tool (x64) Version: 01-11-2026
Ran by Admin (06-11-2026 19:03:20) Run:2
Running from C:\Users\Admin\Downloads
Loaded Profiles: Admin
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [4972]
FirewallRules: [TCP Query User{88AB6B4D-6638-4946-9A8A-0905C94B2B81}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [UDP Query User{0C9AF6B4-1058-413C-A184-8A98E94683D0}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [{CDBB6416-F267-4F74-8052-0AE83391AC82}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{D82F45DC-2FC2-45CF-8F86-0120E3031449}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [TCP Query User{CF5A0BAA-0E88-4FE9-AA1D-2530EBC6649A}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{BCCFA34E-8272-4B5E-9F5C-0C702E12ABB5}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D43736FA-29F7-4E4B-BF8E-6889A8D80E12}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{85FBDAE0-0E28-4331-AE92-DD1DF56D2CE5}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D3489764-AE18-45D3-96FA-7529DE34DCE9}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [UDP Query User{3D37AFE3-EAE7-435C-BF55-AD2EE6B4EA1D}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [TCP Query User{CBA17841-71B9-4630-B121-F032E48EE224}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [UDP Query User{315C6DCD-E090-4198-A6C3-462C461D622D}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [{5EC48E1D-2712-4C6B-BB49-4247E5ACE0B5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [{259AC075-D7C3-4196-94AB-8EBA81F77AD5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [TCP Query User{CC99B756-1DBE-43BD-A9AD-AEC246F72999}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{1866190C-7EE2-48D1-BB73-82A04252DCDB}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{1A023ACF-952C-4D59-9FC1-03A9860656F6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [UDP Query User{73B4135B-8C02-42B2-B752-A75AAA30B5E6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [TCP Query User{F1F7BD7A-C3C0-4084-A998-FE8D6DDF145E}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{6F86EDAC-7A90-465C-8AC3-55B95E0F5650}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{CCD34B29-7380-49CD-9730-280319E0CF6D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [UDP Query User{AECC118C-A413-4ABD-A621-398FF0DC465D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [TCP Query User{BA3992A9-B9FC-4485-9C64-9B366072C793}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{D31DFE94-6334-4EE4-8CD7-F4B369C1EAAB}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{92D5A576-CE3E-4CC8-A152-86F1366A871C}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [UDP Query User{216CDC1E-9286-4C82-B257-8CD85468A712}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [TCP Query User{F2AEAD66-8B45-4BEB-B575-C88E45038B12}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{81A55120-7689-4005-A673-4EE258157004}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{0AF2CC85-4A06-4C44-9CA9-7F4C7354473C}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F82EB1E7-9DD8-48DA-B02E-C243351F60CC}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{173FC992-40BA-4633-89F9-AA2965276ACE}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F0837634-637E-40D8-A950-FB86BC1BC4B4}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{8A2F0EE0-D927-45B8-9CA9-91D230F26D2C}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{8EFBDF77-A249-45D6-9EDC-15D8BBD9FAF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4A4DE719-4364-4564-A847-AB47B322ECA2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{677EF203-6635-48EF-B562-48CF6411307B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{71A5BBC5-7F7F-4645-B3C2-8B6C9C83A4C6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{01DA68A4-AB3C-4921-A772-95D8D3878B32}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{F7681C02-0091-4DF3-95EE-3EE43C528AC1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{DD55A498-15AD-4545-8376-4D75FDCAE3C9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{19AD629F-428A-4833-B643-39C96B116E05}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{BCFF6CAD-2369-42AE-B070-BEBC49D60766}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D12E4076-F5BC-4D07-B73E-35C748E86452}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{D5A10769-CAD3-4C7C-8991-2D703B01B3E6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{46A272F7-EDC0-4061-BF95-B76EE29302EB}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{9A0E4C3A-A4ED-4A71-A2E5-5C4F5958ABEA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{D5F35CE3-D82E-4DF6-A94F-30BF0EF5772C}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{CFDA5567-4DEC-4F40-AC08-795B0A5CA9FA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B644D7E1-E20A-485E-86E9-64419765DEF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{51DFAEBE-9F39-41CD-B4B8-7235A3E14C86}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{61F57EA3-2AEB-420D-B314-4FA96AA3B86B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4EA28662-4E13-4B7A-8052-CEE17FBA55F2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{ED30486E-5490-4100-9023-E7F3F1D169CF}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{8759969D-21A5-4B84-9945-6F03BCF9A2F4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B0E062FB-E7EB-4E18-9F23-3EC08D059BC9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{307A0CB2-60FE-456D-96F4-69268448538D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{4530A273-CE45-4AD5-B5CB-882C3C805C39}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{C5D0C516-CE5C-480E-9711-4E22BD94C55D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{60BC40E1-BC11-4D63-BEDD-F3324C6CABC0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4B9831D5-EB9A-4F4F-A588-EF35B7B77E24}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{C0B50B5C-8132-4B42-A645-2D07FA9DD518}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{A41085B3-DC2E-4212-B5B2-5823212D0359}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{3DD60A03-A2F5-4452-96DF-5418D59D98E9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{E9165354-5981-4589-9CEE-B57F37AE11C1}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [UDP Query User{8966F311-8EB8-4FA2-AF9F-8C5717376EE4}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [{D9A15950-4609-4CE8-857B-AC8BE23F38C4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{D8A08B47-BFC8-458E-81B0-EC2A91D97094}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{3E461FF7-42FD-4394-B2C6-A04519DAEE4A}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D7CF90F2-82B5-488C-97C6-530152E9FB14}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{2361B9AE-52DC-423B-AF73-B7A45A0EDD04}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{D1505DBD-1C57-4B6C-B70B-1A62DDA4D291}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{AD125465-9351-40BC-8D4A-500DD71A6C47}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{709F2DF8-B84C-4498-92EF-4BAA0CB5775A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{BE349F34-3776-4C21-9CA1-2F8BFDF5BF7F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{9128B5E2-70AB-46CB-95F5-C4A5CFDACD76}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{48A26039-1EB8-4A17-BDD7-529BB28C97BA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{5EE62AA5-0DBB-43E1-9C62-5D0576E87330}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{ECF65CBD-7829-48E9-809F-469C48DB3E37}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{2D638882-4852-4A30-81CB-45063FD8D9D1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{409E3A01-EBB9-4AE2-AEB2-E115250DA963}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{FD21D0E7-5FEF-461E-9556-58DA367172AD}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{22A12214-FA25-4FBE-90FF-8453588F1C36}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [UDP Query User{CD95E94D-DD51-4F98-B0D0-C084228FE1F9}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [{215FED96-E7F0-4632-93C1-29A8B8033A50}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{86F3F872-24B6-495B-904B-825B1EC60F10}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{B5E4935C-2D38-420F-8ADA-52621D9B1780}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{707E905E-F114-474A-9494-2AA2F117749A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{EA96767C-B5C3-45D3-99FD-A8477A8D9B18}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4450C1BF-3B23-4E47-B9F5-0B22132FF94D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{8E62F398-08DA-40AC-B1D3-4D6BE3B4A746}] => (Allow) C:\Users\Admin\AppData\Local\Temp\7z989C71F4\MuMuDownloader.exe => No File
FirewallRules: [{D4376C89-15BF-41E8-B2A7-2EF3FF873145}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{8D904F42-721A-47CF-B31D-927EE0853181}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{577A0973-0603-41CD-8B0F-4F566C9D8EBC}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{767FCD6B-98AF-45AC-A4A6-3FBDFA12706B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{E702068B-0219-4DEF-93C0-366D47CB773F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{AA8D76FC-D381-41C2-9103-BE842936472D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Environment\\UserInitMprLogonScript: -> (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
S3 AppShellElevationService; "C:\Program Files\TikTok LIVE Studio\1.14.2\elevation_service.exe" (No File)
S1 eocquekn; \??\C:\WINDOWS\system32\drivers\eocquekn.sys (No File)
S3 HWiNFO_202; \??\C:\Users\Admin\AppData\Local\Temp\HWiNFO_x64_202.sys (No File) <==== ATTENTION
C:\DumpStack.log.tmp
EmptyTemp:
Hosts:
End
*****************
Processes closed successfully.
C:\Users\Public\Shared Files => ":VersionCache" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{88AB6B4D-6638-4946-9A8A-0905C94B2B81}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0C9AF6B4-1058-413C-A184-8A98E94683D0}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CDBB6416-F267-4F74-8052-0AE83391AC82}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D82F45DC-2FC2-45CF-8F86-0120E3031449}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CF5A0BAA-0E88-4FE9-AA1D-2530EBC6649A}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{BCCFA34E-8272-4B5E-9F5C-0C702E12ABB5}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D43736FA-29F7-4E4B-BF8E-6889A8D80E12}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{85FBDAE0-0E28-4331-AE92-DD1DF56D2CE5}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D3489764-AE18-45D3-96FA-7529DE34DCE9}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3D37AFE3-EAE7-435C-BF55-AD2EE6B4EA1D}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CBA17841-71B9-4630-B121-F032E48EE224}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{315C6DCD-E090-4198-A6C3-462C461D622D}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5EC48E1D-2712-4C6B-BB49-4247E5ACE0B5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{259AC075-D7C3-4196-94AB-8EBA81F77AD5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CC99B756-1DBE-43BD-A9AD-AEC246F72999}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1866190C-7EE2-48D1-BB73-82A04252DCDB}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1A023ACF-952C-4D59-9FC1-03A9860656F6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{73B4135B-8C02-42B2-B752-A75AAA30B5E6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F1F7BD7A-C3C0-4084-A998-FE8D6DDF145E}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6F86EDAC-7A90-465C-8AC3-55B95E0F5650}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CCD34B29-7380-49CD-9730-280319E0CF6D}C:\xboxgames\no man's sky\content\binaries\nms.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{AECC118C-A413-4ABD-A621-398FF0DC465D}C:\xboxgames\no man's sky\content\binaries\nms.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BA3992A9-B9FC-4485-9C64-9B366072C793}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D31DFE94-6334-4EE4-8CD7-F4B369C1EAAB}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{92D5A576-CE3E-4CC8-A152-86F1366A871C}C:\riot games\riot client\riotclientelectron\riot client.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{216CDC1E-9286-4C82-B257-8CD85468A712}C:\riot games\riot client\riotclientelectron\riot client.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F2AEAD66-8B45-4BEB-B575-C88E45038B12}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{81A55120-7689-4005-A673-4EE258157004}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0AF2CC85-4A06-4C44-9CA9-7F4C7354473C}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F82EB1E7-9DD8-48DA-B02E-C243351F60CC}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{173FC992-40BA-4633-89F9-AA2965276ACE}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F0837634-637E-40D8-A950-FB86BC1BC4B4}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8A2F0EE0-D927-45B8-9CA9-91D230F26D2C}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8EFBDF77-A249-45D6-9EDC-15D8BBD9FAF0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4A4DE719-4364-4564-A847-AB47B322ECA2}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{677EF203-6635-48EF-B562-48CF6411307B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{71A5BBC5-7F7F-4645-B3C2-8B6C9C83A4C6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{01DA68A4-AB3C-4921-A772-95D8D3878B32}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F7681C02-0091-4DF3-95EE-3EE43C528AC1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DD55A498-15AD-4545-8376-4D75FDCAE3C9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{19AD629F-428A-4833-B643-39C96B116E05}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BCFF6CAD-2369-42AE-B070-BEBC49D60766}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D12E4076-F5BC-4D07-B73E-35C748E86452}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D5A10769-CAD3-4C7C-8991-2D703B01B3E6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{46A272F7-EDC0-4061-BF95-B76EE29302EB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9A0E4C3A-A4ED-4A71-A2E5-5C4F5958ABEA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D5F35CE3-D82E-4DF6-A94F-30BF0EF5772C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CFDA5567-4DEC-4F40-AC08-795B0A5CA9FA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B644D7E1-E20A-485E-86E9-64419765DEF0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{51DFAEBE-9F39-41CD-B4B8-7235A3E14C86}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{61F57EA3-2AEB-420D-B314-4FA96AA3B86B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4EA28662-4E13-4B7A-8052-CEE17FBA55F2}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{ED30486E-5490-4100-9023-E7F3F1D169CF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8759969D-21A5-4B84-9945-6F03BCF9A2F4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B0E062FB-E7EB-4E18-9F23-3EC08D059BC9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{307A0CB2-60FE-456D-96F4-69268448538D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4530A273-CE45-4AD5-B5CB-882C3C805C39}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C5D0C516-CE5C-480E-9711-4E22BD94C55D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{60BC40E1-BC11-4D63-BEDD-F3324C6CABC0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4B9831D5-EB9A-4F4F-A588-EF35B7B77E24}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C0B50B5C-8132-4B42-A645-2D07FA9DD518}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A41085B3-DC2E-4212-B5B2-5823212D0359}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3DD60A03-A2F5-4452-96DF-5418D59D98E9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E9165354-5981-4589-9CEE-B57F37AE11C1}C:\program files\ldplayer9box\ld9boxheadless.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8966F311-8EB8-4FA2-AF9F-8C5717376EE4}C:\program files\ldplayer9box\ld9boxheadless.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D9A15950-4609-4CE8-857B-AC8BE23F38C4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D8A08B47-BFC8-458E-81B0-EC2A91D97094}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3E461FF7-42FD-4394-B2C6-A04519DAEE4A}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D7CF90F2-82B5-488C-97C6-530152E9FB14}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2361B9AE-52DC-423B-AF73-B7A45A0EDD04}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D1505DBD-1C57-4B6C-B70B-1A62DDA4D291}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AD125465-9351-40BC-8D4A-500DD71A6C47}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{709F2DF8-B84C-4498-92EF-4BAA0CB5775A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BE349F34-3776-4C21-9CA1-2F8BFDF5BF7F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9128B5E2-70AB-46CB-95F5-C4A5CFDACD76}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{48A26039-1EB8-4A17-BDD7-529BB28C97BA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5EE62AA5-0DBB-43E1-9C62-5D0576E87330}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{ECF65CBD-7829-48E9-809F-469C48DB3E37}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2D638882-4852-4A30-81CB-45063FD8D9D1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{409E3A01-EBB9-4AE2-AEB2-E115250DA963}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{FD21D0E7-5FEF-461E-9556-58DA367172AD}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{22A12214-FA25-4FBE-90FF-8453588F1C36}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{CD95E94D-DD51-4F98-B0D0-C084228FE1F9}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{215FED96-E7F0-4632-93C1-29A8B8033A50}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{86F3F872-24B6-495B-904B-825B1EC60F10}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B5E4935C-2D38-420F-8ADA-52621D9B1780}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{707E905E-F114-474A-9494-2AA2F117749A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EA96767C-B5C3-45D3-99FD-A8477A8D9B18}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4450C1BF-3B23-4E47-B9F5-0B22132FF94D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8E62F398-08DA-40AC-B1D3-4D6BE3B4A746}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D4376C89-15BF-41E8-B2A7-2EF3FF873145}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8D904F42-721A-47CF-B31D-927EE0853181}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{577A0973-0603-41CD-8B0F-4F566C9D8EBC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{767FCD6B-98AF-45AC-A4A6-3FBDFA12706B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E702068B-0219-4DEF-93C0-366D47CB773F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AA8D76FC-D381-41C2-9103-BE842936472D}" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
"HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Environment\\UserInitMprLogonScript" => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
HKLM\System\CurrentControlSet\Services\AppShellElevationService => removed successfully
AppShellElevationService => service removed successfully
HKLM\System\CurrentControlSet\Services\eocquekn => removed successfully
eocquekn => service removed successfully
HKLM\System\CurrentControlSet\Services\HWiNFO_202 => removed successfully
HWiNFO_202 => service removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1835008 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 1569893947 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 1326811027 B
Windows/system/drivers => 135166366 B
Edge => 890679409 B
Firefox => 0 B
Opera => 274665138 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 5 B
ProgramData => 987713 B
Public => 0 B
systemprofile => 475349 B
systemprofile32 => 0 B
LocalService => 703541 B
NetworkService => 479469 B
Admin => 52854361002 B
RecycleBin => 310413476 B
EmptyTemp: => 53.43 GB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 06-11-2026 19:18:47)
C:\DumpStack.log.tmp => Could not move
==== End of Fixlog 19:18:47 ====
Ran by Admin (06-11-2026 19:03:20) Run:2
Running from C:\Users\Admin\Downloads
Loaded Profiles: Admin
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [4972]
FirewallRules: [TCP Query User{88AB6B4D-6638-4946-9A8A-0905C94B2B81}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [UDP Query User{0C9AF6B4-1058-413C-A184-8A98E94683D0}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [{CDBB6416-F267-4F74-8052-0AE83391AC82}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{D82F45DC-2FC2-45CF-8F86-0120E3031449}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [TCP Query User{CF5A0BAA-0E88-4FE9-AA1D-2530EBC6649A}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{BCCFA34E-8272-4B5E-9F5C-0C702E12ABB5}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D43736FA-29F7-4E4B-BF8E-6889A8D80E12}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{85FBDAE0-0E28-4331-AE92-DD1DF56D2CE5}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D3489764-AE18-45D3-96FA-7529DE34DCE9}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [UDP Query User{3D37AFE3-EAE7-435C-BF55-AD2EE6B4EA1D}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [TCP Query User{CBA17841-71B9-4630-B121-F032E48EE224}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [UDP Query User{315C6DCD-E090-4198-A6C3-462C461D622D}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [{5EC48E1D-2712-4C6B-BB49-4247E5ACE0B5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [{259AC075-D7C3-4196-94AB-8EBA81F77AD5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [TCP Query User{CC99B756-1DBE-43BD-A9AD-AEC246F72999}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{1866190C-7EE2-48D1-BB73-82A04252DCDB}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{1A023ACF-952C-4D59-9FC1-03A9860656F6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [UDP Query User{73B4135B-8C02-42B2-B752-A75AAA30B5E6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [TCP Query User{F1F7BD7A-C3C0-4084-A998-FE8D6DDF145E}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{6F86EDAC-7A90-465C-8AC3-55B95E0F5650}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{CCD34B29-7380-49CD-9730-280319E0CF6D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [UDP Query User{AECC118C-A413-4ABD-A621-398FF0DC465D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [TCP Query User{BA3992A9-B9FC-4485-9C64-9B366072C793}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{D31DFE94-6334-4EE4-8CD7-F4B369C1EAAB}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{92D5A576-CE3E-4CC8-A152-86F1366A871C}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [UDP Query User{216CDC1E-9286-4C82-B257-8CD85468A712}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [TCP Query User{F2AEAD66-8B45-4BEB-B575-C88E45038B12}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{81A55120-7689-4005-A673-4EE258157004}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{0AF2CC85-4A06-4C44-9CA9-7F4C7354473C}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F82EB1E7-9DD8-48DA-B02E-C243351F60CC}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{173FC992-40BA-4633-89F9-AA2965276ACE}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F0837634-637E-40D8-A950-FB86BC1BC4B4}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{8A2F0EE0-D927-45B8-9CA9-91D230F26D2C}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{8EFBDF77-A249-45D6-9EDC-15D8BBD9FAF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4A4DE719-4364-4564-A847-AB47B322ECA2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{677EF203-6635-48EF-B562-48CF6411307B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{71A5BBC5-7F7F-4645-B3C2-8B6C9C83A4C6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{01DA68A4-AB3C-4921-A772-95D8D3878B32}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{F7681C02-0091-4DF3-95EE-3EE43C528AC1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{DD55A498-15AD-4545-8376-4D75FDCAE3C9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{19AD629F-428A-4833-B643-39C96B116E05}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{BCFF6CAD-2369-42AE-B070-BEBC49D60766}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D12E4076-F5BC-4D07-B73E-35C748E86452}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{D5A10769-CAD3-4C7C-8991-2D703B01B3E6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{46A272F7-EDC0-4061-BF95-B76EE29302EB}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{9A0E4C3A-A4ED-4A71-A2E5-5C4F5958ABEA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{D5F35CE3-D82E-4DF6-A94F-30BF0EF5772C}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{CFDA5567-4DEC-4F40-AC08-795B0A5CA9FA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B644D7E1-E20A-485E-86E9-64419765DEF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{51DFAEBE-9F39-41CD-B4B8-7235A3E14C86}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{61F57EA3-2AEB-420D-B314-4FA96AA3B86B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4EA28662-4E13-4B7A-8052-CEE17FBA55F2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{ED30486E-5490-4100-9023-E7F3F1D169CF}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{8759969D-21A5-4B84-9945-6F03BCF9A2F4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B0E062FB-E7EB-4E18-9F23-3EC08D059BC9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{307A0CB2-60FE-456D-96F4-69268448538D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{4530A273-CE45-4AD5-B5CB-882C3C805C39}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{C5D0C516-CE5C-480E-9711-4E22BD94C55D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{60BC40E1-BC11-4D63-BEDD-F3324C6CABC0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4B9831D5-EB9A-4F4F-A588-EF35B7B77E24}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{C0B50B5C-8132-4B42-A645-2D07FA9DD518}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{A41085B3-DC2E-4212-B5B2-5823212D0359}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{3DD60A03-A2F5-4452-96DF-5418D59D98E9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{E9165354-5981-4589-9CEE-B57F37AE11C1}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [UDP Query User{8966F311-8EB8-4FA2-AF9F-8C5717376EE4}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [{D9A15950-4609-4CE8-857B-AC8BE23F38C4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{D8A08B47-BFC8-458E-81B0-EC2A91D97094}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{3E461FF7-42FD-4394-B2C6-A04519DAEE4A}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D7CF90F2-82B5-488C-97C6-530152E9FB14}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{2361B9AE-52DC-423B-AF73-B7A45A0EDD04}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{D1505DBD-1C57-4B6C-B70B-1A62DDA4D291}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{AD125465-9351-40BC-8D4A-500DD71A6C47}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{709F2DF8-B84C-4498-92EF-4BAA0CB5775A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{BE349F34-3776-4C21-9CA1-2F8BFDF5BF7F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{9128B5E2-70AB-46CB-95F5-C4A5CFDACD76}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{48A26039-1EB8-4A17-BDD7-529BB28C97BA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{5EE62AA5-0DBB-43E1-9C62-5D0576E87330}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{ECF65CBD-7829-48E9-809F-469C48DB3E37}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{2D638882-4852-4A30-81CB-45063FD8D9D1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{409E3A01-EBB9-4AE2-AEB2-E115250DA963}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{FD21D0E7-5FEF-461E-9556-58DA367172AD}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{22A12214-FA25-4FBE-90FF-8453588F1C36}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [UDP Query User{CD95E94D-DD51-4F98-B0D0-C084228FE1F9}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [{215FED96-E7F0-4632-93C1-29A8B8033A50}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{86F3F872-24B6-495B-904B-825B1EC60F10}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{B5E4935C-2D38-420F-8ADA-52621D9B1780}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{707E905E-F114-474A-9494-2AA2F117749A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{EA96767C-B5C3-45D3-99FD-A8477A8D9B18}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4450C1BF-3B23-4E47-B9F5-0B22132FF94D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{8E62F398-08DA-40AC-B1D3-4D6BE3B4A746}] => (Allow) C:\Users\Admin\AppData\Local\Temp\7z989C71F4\MuMuDownloader.exe => No File
FirewallRules: [{D4376C89-15BF-41E8-B2A7-2EF3FF873145}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{8D904F42-721A-47CF-B31D-927EE0853181}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{577A0973-0603-41CD-8B0F-4F566C9D8EBC}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{767FCD6B-98AF-45AC-A4A6-3FBDFA12706B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{E702068B-0219-4DEF-93C0-366D47CB773F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{AA8D76FC-D381-41C2-9103-BE842936472D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Environment\\UserInitMprLogonScript: -> (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
S3 AppShellElevationService; "C:\Program Files\TikTok LIVE Studio\1.14.2\elevation_service.exe" (No File)
S1 eocquekn; \??\C:\WINDOWS\system32\drivers\eocquekn.sys (No File)
S3 HWiNFO_202; \??\C:\Users\Admin\AppData\Local\Temp\HWiNFO_x64_202.sys (No File) <==== ATTENTION
C:\DumpStack.log.tmp
EmptyTemp:
Hosts:
End
*****************
Processes closed successfully.
C:\Users\Public\Shared Files => ":VersionCache" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{88AB6B4D-6638-4946-9A8A-0905C94B2B81}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0C9AF6B4-1058-413C-A184-8A98E94683D0}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CDBB6416-F267-4F74-8052-0AE83391AC82}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D82F45DC-2FC2-45CF-8F86-0120E3031449}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CF5A0BAA-0E88-4FE9-AA1D-2530EBC6649A}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{BCCFA34E-8272-4B5E-9F5C-0C702E12ABB5}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D43736FA-29F7-4E4B-BF8E-6889A8D80E12}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{85FBDAE0-0E28-4331-AE92-DD1DF56D2CE5}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D3489764-AE18-45D3-96FA-7529DE34DCE9}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3D37AFE3-EAE7-435C-BF55-AD2EE6B4EA1D}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CBA17841-71B9-4630-B121-F032E48EE224}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{315C6DCD-E090-4198-A6C3-462C461D622D}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5EC48E1D-2712-4C6B-BB49-4247E5ACE0B5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{259AC075-D7C3-4196-94AB-8EBA81F77AD5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CC99B756-1DBE-43BD-A9AD-AEC246F72999}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1866190C-7EE2-48D1-BB73-82A04252DCDB}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1A023ACF-952C-4D59-9FC1-03A9860656F6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{73B4135B-8C02-42B2-B752-A75AAA30B5E6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F1F7BD7A-C3C0-4084-A998-FE8D6DDF145E}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6F86EDAC-7A90-465C-8AC3-55B95E0F5650}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CCD34B29-7380-49CD-9730-280319E0CF6D}C:\xboxgames\no man's sky\content\binaries\nms.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{AECC118C-A413-4ABD-A621-398FF0DC465D}C:\xboxgames\no man's sky\content\binaries\nms.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BA3992A9-B9FC-4485-9C64-9B366072C793}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D31DFE94-6334-4EE4-8CD7-F4B369C1EAAB}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{92D5A576-CE3E-4CC8-A152-86F1366A871C}C:\riot games\riot client\riotclientelectron\riot client.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{216CDC1E-9286-4C82-B257-8CD85468A712}C:\riot games\riot client\riotclientelectron\riot client.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F2AEAD66-8B45-4BEB-B575-C88E45038B12}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{81A55120-7689-4005-A673-4EE258157004}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0AF2CC85-4A06-4C44-9CA9-7F4C7354473C}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F82EB1E7-9DD8-48DA-B02E-C243351F60CC}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{173FC992-40BA-4633-89F9-AA2965276ACE}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F0837634-637E-40D8-A950-FB86BC1BC4B4}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8A2F0EE0-D927-45B8-9CA9-91D230F26D2C}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8EFBDF77-A249-45D6-9EDC-15D8BBD9FAF0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4A4DE719-4364-4564-A847-AB47B322ECA2}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{677EF203-6635-48EF-B562-48CF6411307B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{71A5BBC5-7F7F-4645-B3C2-8B6C9C83A4C6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{01DA68A4-AB3C-4921-A772-95D8D3878B32}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F7681C02-0091-4DF3-95EE-3EE43C528AC1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DD55A498-15AD-4545-8376-4D75FDCAE3C9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{19AD629F-428A-4833-B643-39C96B116E05}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BCFF6CAD-2369-42AE-B070-BEBC49D60766}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D12E4076-F5BC-4D07-B73E-35C748E86452}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D5A10769-CAD3-4C7C-8991-2D703B01B3E6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{46A272F7-EDC0-4061-BF95-B76EE29302EB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9A0E4C3A-A4ED-4A71-A2E5-5C4F5958ABEA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D5F35CE3-D82E-4DF6-A94F-30BF0EF5772C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CFDA5567-4DEC-4F40-AC08-795B0A5CA9FA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B644D7E1-E20A-485E-86E9-64419765DEF0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{51DFAEBE-9F39-41CD-B4B8-7235A3E14C86}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{61F57EA3-2AEB-420D-B314-4FA96AA3B86B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4EA28662-4E13-4B7A-8052-CEE17FBA55F2}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{ED30486E-5490-4100-9023-E7F3F1D169CF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8759969D-21A5-4B84-9945-6F03BCF9A2F4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B0E062FB-E7EB-4E18-9F23-3EC08D059BC9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{307A0CB2-60FE-456D-96F4-69268448538D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4530A273-CE45-4AD5-B5CB-882C3C805C39}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C5D0C516-CE5C-480E-9711-4E22BD94C55D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{60BC40E1-BC11-4D63-BEDD-F3324C6CABC0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4B9831D5-EB9A-4F4F-A588-EF35B7B77E24}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C0B50B5C-8132-4B42-A645-2D07FA9DD518}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A41085B3-DC2E-4212-B5B2-5823212D0359}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3DD60A03-A2F5-4452-96DF-5418D59D98E9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E9165354-5981-4589-9CEE-B57F37AE11C1}C:\program files\ldplayer9box\ld9boxheadless.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8966F311-8EB8-4FA2-AF9F-8C5717376EE4}C:\program files\ldplayer9box\ld9boxheadless.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D9A15950-4609-4CE8-857B-AC8BE23F38C4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D8A08B47-BFC8-458E-81B0-EC2A91D97094}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3E461FF7-42FD-4394-B2C6-A04519DAEE4A}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D7CF90F2-82B5-488C-97C6-530152E9FB14}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2361B9AE-52DC-423B-AF73-B7A45A0EDD04}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D1505DBD-1C57-4B6C-B70B-1A62DDA4D291}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AD125465-9351-40BC-8D4A-500DD71A6C47}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{709F2DF8-B84C-4498-92EF-4BAA0CB5775A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BE349F34-3776-4C21-9CA1-2F8BFDF5BF7F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9128B5E2-70AB-46CB-95F5-C4A5CFDACD76}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{48A26039-1EB8-4A17-BDD7-529BB28C97BA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5EE62AA5-0DBB-43E1-9C62-5D0576E87330}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{ECF65CBD-7829-48E9-809F-469C48DB3E37}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2D638882-4852-4A30-81CB-45063FD8D9D1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{409E3A01-EBB9-4AE2-AEB2-E115250DA963}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{FD21D0E7-5FEF-461E-9556-58DA367172AD}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{22A12214-FA25-4FBE-90FF-8453588F1C36}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{CD95E94D-DD51-4F98-B0D0-C084228FE1F9}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{215FED96-E7F0-4632-93C1-29A8B8033A50}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{86F3F872-24B6-495B-904B-825B1EC60F10}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B5E4935C-2D38-420F-8ADA-52621D9B1780}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{707E905E-F114-474A-9494-2AA2F117749A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EA96767C-B5C3-45D3-99FD-A8477A8D9B18}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4450C1BF-3B23-4E47-B9F5-0B22132FF94D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8E62F398-08DA-40AC-B1D3-4D6BE3B4A746}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D4376C89-15BF-41E8-B2A7-2EF3FF873145}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8D904F42-721A-47CF-B31D-927EE0853181}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{577A0973-0603-41CD-8B0F-4F566C9D8EBC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{767FCD6B-98AF-45AC-A4A6-3FBDFA12706B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E702068B-0219-4DEF-93C0-366D47CB773F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AA8D76FC-D381-41C2-9103-BE842936472D}" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
"HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Environment\\UserInitMprLogonScript" => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
HKLM\System\CurrentControlSet\Services\AppShellElevationService => removed successfully
AppShellElevationService => service removed successfully
HKLM\System\CurrentControlSet\Services\eocquekn => removed successfully
eocquekn => service removed successfully
HKLM\System\CurrentControlSet\Services\HWiNFO_202 => removed successfully
HWiNFO_202 => service removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1835008 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 1569893947 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 1326811027 B
Windows/system/drivers => 135166366 B
Edge => 890679409 B
Firefox => 0 B
Opera => 274665138 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 5 B
ProgramData => 987713 B
Public => 0 B
systemprofile => 475349 B
systemprofile32 => 0 B
LocalService => 703541 B
NetworkService => 479469 B
Admin => 52854361002 B
RecycleBin => 310413476 B
EmptyTemp: => 53.43 GB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 06-11-2026 19:18:47)
C:\DumpStack.log.tmp => Could not move
==== End of Fixlog 19:18:47 ====
-
Rudy
- Site Admin
- Příspěvky: 120215
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu logu - podezření na viry
Smazáno, log již vypadá čistý.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosím o kontrolu logu - podezření na viry
děkuji za pomoc
-
Rudy
- Site Admin
- Příspěvky: 120215
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu logu - podezření na viry
Nemáte zač! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?