Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-11-2026
Ran by micha (administrator) on MICHAL (LENOVO 82K2) (06-11-2026 19:19:31)
Running from C:\Users\micha\Desktop\FRST64.exe
Loaded Profiles: micha & SQLTELEMETRY & MSSQLSERVER
Platform: Microsoft Windows 11 Home Version 26H2 26300.9818 (X64) Language: Slovenčina (Slovensko)
Default browser: "C:\Users\micha\AppData\Local\Programs\Opera\opera.exe" -noautoupdate -- "%1"
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() [File not signed] C:\Users\micha\AppData\Local\Temp\scoped_dir25148_331441044\AnyDesk.exe <4>
(Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\httpd.exe
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantage-(LenovoGamingSystemAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastUI.exe
(C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\NIWebServiceContainer.exe
(C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\NIWebServiceContainer.exe <2>
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Dism\DismHost.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSSrcExt.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Program Files\WindowsApps\MSTeams_26276.513.5241.9675_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe
(drivers\lenovo\UDC\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\AppProvisioningPlugin.exe
(drivers\lenovo\UDC\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\CoreTelemetryPlugin.exe
(drivers\lenovo\UDC\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\MessagingPlugin.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\FnHotkeyCapsLKNumLK.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\FnHotkeyUtility.exe
(DriverStore\FileRepository\u0417253.inf_amd64_a9b363c4f94f001d\B417132\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0417253.inf_amd64_a9b363c4f94f001d\B417132\atieclxx.exe
(explorer.exe ->) (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI Error Reporting\nierserver.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9366beb5d0043df3\RtkAudUService64.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe <2>
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastUI.exe <3>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <8>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe <12>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.198.1011.0006\OneDrive.Sync.Service.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoNotificationUx.exe
(NahimicService.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicAPO4Volume.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvlti.inf_amd64_360580ba71c61256\Display.NvContainer\NVDisplay.Container.exe
(Opera Norway AS -> Opera Software) C:\Users\micha\AppData\Local\Programs\Opera\assistant\browser_assistant.exe <2>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9366beb5d0043df3\RtkAudUService64.exe
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0417253.inf_amd64_a9b363c4f94f001d\B417132\atiesrxx.exe
(services.exe ->) (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\httpd.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Driver Updater\DriverUpdSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (Intel Corporation -> ) C:\altera_lite\24.1std\quartus\bin64\jtagserver.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\lenovo\UDC\Service\UDClientService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncHelper.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\sqlceip.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.) C:\Windows\System32\mtkbtsvc.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\niauth\niauth_daemon.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Windows\SysWOW64\lkads.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Windows\SysWOW64\lktsrv.exe
(services.exe ->) (National Instruments Corporation -> National Instruments, Inc.) C:\Windows\SysWOW64\lkcitdl.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvlti.inf_amd64_360580ba71c61256\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9366beb5d0043df3\RtkAudUService64.exe
(services.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicService.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(SteelSeries France SASU -> A-Volute) C:\Users\micha\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe
(svchost.exe ->) (21E1B422-257A-44A2-9C8F-379165856473 -> ) C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.15.0_x64__w2gh52qy24etm\Nahimic3.exe
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.4019.0_x64__8wekyb3d8bbwe\EdgeGameAssist.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.398.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.9815_none_a4f69e6b77712a7f\TiWorker.exe
(svchost.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicSvc64.exe
(svchost.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\SysWOW64\NahimicSvc32.exe
(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <7>
(ZONER software, a.s. -> ZONER software) C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9366beb5d0043df3\RtkAudUService64.exe [1987544 2024-08-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AVG Driver Updater UI] => C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe [8457392 2026-11-02] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [1082296 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [742536 2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe" [132820840 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725648 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5823128 2026-10-21] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [Advanced SystemCare] => "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto (No File)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [Discord] => C:\Users\micha\AppData\Local\Discord\Update.exe [1516408 2025-05-05] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [53241784 2026-10-30] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [Microsoft.Lists] => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\OneDrive.Sync.Service.exe [970088 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [AvastBrowserAutoLaunch_E8760D060CAF6C1EB31EBFCD30386D60] => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [563416 2015-07-12] (ZONER software, a.s. -> ZONER software)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [MicrosoftEdgeAutoLaunch_ED02E366447D09E4F124EF89B233D989] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5453128 2026-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [Opera Browser Assistant] => C:\Users\micha\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [8159176 2026-11-03] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-629165207-329108147-321633127-1004\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725648 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725648 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725648 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP be2a Status Monitor: C:\Windows\system32\hpinkstsbe2aLM.dll [468576 2018-06-15] (Hewlett Packard -> HP Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files\AVAST Software\Browser\Application\154.0.35638.100\Installer\chrmstp.exe [6413680 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NI Error Reporting.lnk [2036-09-13]
ShortcutTarget: NI Error Reporting.lnk -> C:\Program Files (x86)\National Instruments\Shared\NI Error Reporting\nierserver.exe (National Instruments Corporation -> National Instruments Corporation)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {018DEE60-023C-48A2-81DB-22B236FC606A} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {1DA7A364-7C44-41F5-9E34-434D9387A64F} - \Lenovo\ImController\TimeBasedEvents\4d512b2b-5816-4dbb-8b6e-fceadf6240f9 -> No File <==== ATTENTION
Task: {B1414019-02C2-4710-A68B-C0FFC6FEE6E7} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {3B6D0ADD-E435-4330-BE12-F41C89A1AFCD} - System32\Tasks\ASC_PerformanceMonitor => "C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/Task <==== ATTENTION
Task: {01EA17DE-0CC3-473F-B36D-2052E03CAB34} - System32\Tasks\ASC_SkipUac_micha => "C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/SkipUac <==== ATTENTION
Task: {DBE41F73-91CD-4CA9-ADEF-00163864FB98} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {E3F5698F-D9B6-4191-8EDA-EF1795C53EF4} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {6340907A-94FE-4EE5-8DFF-3DC48BD65E06} - System32\Tasks\Avast Secure Browser VPS Differential Update => C:\Program Files\AVAST Software\Browser\Application\vps_helper.exe [2624568 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {6B4CB134-7141-4003-A298-51C4A634EB80} - System32\Tasks\Avast Software\Avast Antivirus Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-av\icarus.exe [9896952 2026-10-06] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {142D153E-E01E-4686-BAFA-2094E90638FC} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5832120 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {55E07C02-7A9A-40D6-BBDA-8749A01B295F} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [3710456 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {599681F5-DAD2-4779-B05A-125D592E3280} - System32\Tasks\AvastBrowserProtectS-1-5-21-629165207-329108147-321633127-1001 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {E3229ACB-F0DB-4C0E-BC7A-0A64344B385E} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {AE98E50E-4A1A-47C4-B168-E1FBB4EF0600} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {2E43E98C-707C-43CB-878B-93118CB6770E} - System32\Tasks\AVG\AVG Driver Updater BugReport => C:\Program Files\AVG\Driver Updater\AvBugReport.exe [6516400 2026-11-02] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) -> --send "dumps|report" --silent --product 149 --programpath "C:\Program Files\AVG\Driver Updater" --configpath "C:\ProgramData\AVG\Driver Updater" --path "C:\ProgramData\AVG\Driver Updater\log" --path "C:\ProgramData\AVG\Icarus\Logs" --logpath "C:\ProgramData\AVG\Driver Updater\log" --guid f3a29657- (the data entry has 27 more characters).
Task: {508AC345-C34E-4E70-8088-69F815FB1808} - System32\Tasks\AVG\AVG Driver Updater Update => C:\Program Files\Common Files\AVG\Icarus\avg-du\icarus.exe [15263736 2026-10-29] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {2E36519E-2A59-4607-86C2-82561D8DE8F7} - System32\Tasks\CCleaner 7 - Skip UAC - S-1-5-21-629165207-329108147-321633127-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {419ED9B3-1C90-454B-BD6A-8F45C2E66ED8} - System32\Tasks\Lenovo\LenovoNowLauncher => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.exe [469472 2026-07-03] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\/task
Task: {9CE1E86C-CF4D-4743-B931-B859BAA337F6} - System32\Tasks\Lenovo\LenovoNowQuarterlyLaunch => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [472544 2026-07-03] (Lenovo -> Lenovo)
Task: {A4795F90-5DCA-40F2-9E22-83D194B81AB2} - System32\Tasks\Lenovo\LenovoNowTask => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [472544 2026-07-03] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\$(EventData)
Task: {E83B3AAA-E592-4678-9234-87DABFEA5C7F} - System32\Tasks\Lenovo\UDC\Lenovo UDC Diagnostic Scan => C:\WINDOWS\system32\sc.exe [102400 2025-09-22] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 210
Task: {E9CBAE85-E50A-485F-BD2F-254B3688D6A5} - System32\Tasks\Lenovo\UDC\Lenovo UDC Lazy Deployment => C:\WINDOWS\system32\sc.exe [102400 2025-09-22] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 221
Task: {44CDA2F0-D5B6-4376-B90A-AAC0FBB83178} - System32\Tasks\Lenovo\UDC\Lenovo UDC Maintainance Task => C:\WINDOWS\system32\sc.exe [102400 2025-09-22] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 220
Task: {D88C8E51-DC62-4D13-BD84-F59D82DA0BC7} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [259000 2026-08-26] (Lenovo -> Lenovo Group Ltd.)
Task: {0D1B5895-653B-498A-BB26-2BEDB5743307} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [102400 2025-09-22] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {A9A3C10C-8D1F-4C24-8161-ADCEC4F73393} - System32\Tasks\Lenovo\Vantage\Schedule\AiCoreAddinDailyOtaTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {709D2521-0680-4E73-B8A6-763D2766C409} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {1598F49C-16BB-42AA-AFDA-4FC37B5B9AB4} - System32\Tasks\Lenovo\Vantage\Schedule\ConsumerAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {6395B50A-CE60-47A0-8ECB-AF0E79DCCDD0} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {DD53D321-98D0-4CDD-98B3-68F0D71DA1E4} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {A9D6807C-EDC2-4AD7-8EBA-7600CDD4CE8E} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin_Pulsation => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {62BB0E63-9BC0-4F43-9688-F6004127D848} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {60364B9B-F60B-4ACD-9B63-0BDF1B6A7918} - System32\Tasks\Lenovo\Vantage\Schedule\IdeaNotebookAddinDailyEvent => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {D4CC633D-A5C2-4270-8567-E7EB5BDE656A} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {163ECFF9-1B33-4C2A-AAA4-30941E5FC652} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBatteryPartSalesMonthlyToast => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {36B85C65-C6DF-4A01-917C-820A92840BCC} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {18AF5686-9782-4A46-88A1-57129FD03436} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSupportContextEngineDaily => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {5C25A7FB-BE07-444B-89B5-AD8351FB22B3} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSupportHealthReportSchedule => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {0930E279-3F33-42C5-9956-1D1CE1163069} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {C9884A05-0037-40CE-B792-99D27B45DF33} - System32\Tasks\Lenovo\Vantage\Schedule\SettingsWidgetAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {32DE45B6-29A5-4C03-9F35-A88D399A765F} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {41B8F677-DBE3-4EEB-A013-3EEF10DA0BC8} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {37C59049-9CA4-475A-994C-3A21D0824BD2} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.1.0.67\x86\IdleScheduleEventAction.exe [173536 2026-11-02] (Lenovo -> )
Task: {7C3B8ADD-6AED-4308-8134-00E99215DCAB} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {F3A6FCE6-74E9-4A88-BE2B-D5FF01C41364} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [17009032 2025-09-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {989EE33B-3786-4865-8385-A4BC153FEF3C} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29024664 2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {8B49AC50-45F4-4A7E-9702-6A63ADA190DC} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [70528 2025-09-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {A67D16C7-4D38-4215-8097-53DF852C6DDF} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29024664 2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {B122B97E-8EDB-4E6A-B4A4-C5FD39027F87} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313744 2025-09-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {D82EAC2C-7384-4A14-98B9-FDBD3AB25C5E} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313744 2025-09-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {17362701-A6B9-421A-8D67-0ED09B340996} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [1365272 2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {0D034505-0AEB-4B94-8A81-EA37D789336C} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [256440 2025-11-02] (Microsoft Corporation -> Microsoft)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {E64726D6-D089-40AF-B95C-EF7C49E69F00} - System32\Tasks\NahimicTask32 => C:\Windows\System32\..\SysWOW64\NahimicSvc32.exe [1118128 2024-08-20] (SteelSeries France SASU -> Nahimic)
Task: {D8351202-F0F6-4722-BA0F-360AE77F493E} - System32\Tasks\NahimicTask64 => C:\Windows\System32\.\NahimicSvc64.exe [1438128 2024-08-20] (SteelSeries France SASU -> Nahimic)
Task: {DA4184AC-0A83-4018-9870-72C650594FEF} - System32\Tasks\NIUpdateServiceCheckTask => C:\Program Files (x86)\National Instruments\Shared\Update Service\NIUpdateService.exe [864032 2015-06-04] (National Instruments Corporation -> National Instruments)
Task: {BCC8148B-39C5-4D72-891F-F5663D898084} - System32\Tasks\NIUpdateServiceStartupTask => C:\Program Files (x86)\National Instruments\Shared\Update Service\NIUpdateService.exe [864032 2015-06-04] (National Instruments Corporation -> National Instruments)
Task: {06B8759C-51DB-4E94-8D0F-B9CB69577ACD} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NVIDIA App\NvDriverUpdateCheck" -l 3 -f "C:\ProgramData\NVIDIA Corporation\NVIDIA App\NvDriverUpdateCheck.log"
Task: {D652E268-0B7C-475A-A33D-874A33A8D805} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => "C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe" (No File)
Task: {8051ABA7-BC9F-470C-B89E-1C101F8770AB} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {99AF0AEC-9469-4AB1-B25D-5B2C3E53EECA} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-629165207-329108147-321633127-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {5CF2BC4D-F7E9-4961-8F5A-1C0B8ACA23FA} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-629165207-329108147-321633127-1002 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {A0F9CD5C-B19D-4121-A520-6B0F7ABA7D6C} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-629165207-329108147-321633127-1004 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {9CD6D12B-589B-4F07-A632-9E0D1F0DDFD8} - System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1001 => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\OneDriveLauncher.exe [878480 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {5676A77B-688B-403B-B2D1-2EB5CC6344B3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002 => C:\Program Files\Microsoft OneDrive\25.140.0720.0001_1\OneDriveLauncher.exe /startInstances (No File)
Task: {ED6B2241-2376-4EED-8F17-E86582DB578D} - System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1004 => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\OneDriveLauncher.exe [878480 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {9EE57CD3-9A30-4496-A4FC-416A8A894E12} - System32\Tasks\Opera scheduled assistant Autoupdate 1742120147 => C:\Users\micha\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [7987144 2026-11-03] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Users\micha\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {BAF593A2-2584-4CC1-9B76-0C725E1748BF} - System32\Tasks\Opera scheduled Autoupdate 1742120147 => C:\Users\micha\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [7987144 2026-11-03] (Opera Norway AS -> Opera Software)
Task: {8A94ED98-7240-4877-8F69-CE97E2D7C2E0} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-629165207-329108147-321633127-1001 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [65536 2026-05-13] (Microsoft Windows -> Microsoft Corporation)
Task: {7CDBCCD8-5733-4F4F-8476-05EC1ED3CE8C} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-629165207-329108147-321633127-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {A92EC435-0286-4E80-88C5-4EC52BC1DA26} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-629165207-329108147-321633127-1004 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {2D66D9A7-200D-4745-8955-361051CAE231} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {EFD227E3-F7E2-4011-96E4-D030707A6D4E} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {1E0CABDA-9D5A-4F15-8B1C-965AC7190E85} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-629165207-329108147-321633127-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {EEF8E8E7-2813-4FCB-A275-6881B9A8EC91} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [11853472 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {980C6E34-5350-4E6F-9223-EDEB7DD355B5} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [15266296 2026-10-27] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {BE0A33F1-2692-4CBC-BACC-4C2C10C284FD} - System32\Tasks\SoftLanding\S-1-5-21-629165207-329108147-321633127-1001\SoftLandingRefreshForExpirationTask-{367ef553-b30f-4908-adbb-64f81fec41a2} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 1.1.1.1 8.8.8.8
Tcpip\..\Interfaces\{696a6fba-59ab-40bd-9d0d-79f3f8dff46e}: [DhcpNameServer] 1.1.1.1 8.8.8.8
Tcpip\..\Interfaces\{6bf67b78-81c1-440e-8a70-f23bc9a4956e}\35053554: [DhcpNameServer] 192.168.96.1
Tcpip\..\Interfaces\{6bf67b78-81c1-440e-8a70-f23bc9a4956e}\75966496: [DhcpNameServer] 192.168.88.1
Tcpip\..\Interfaces\{6bf67b78-81c1-440e-8a70-f23bc9a4956e}\759664960276575637470235053554: [DhcpNameServer] 192.168.54.1
Tcpip\..\Interfaces\{6bf67b78-81c1-440e-8a70-f23bc9a4956e}\E4F6478696E676020586F6E6560282331692020527F602: [DhcpNameServer] 10.26.158.74
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.503.2 -> C:\Program Files\Java\jre1.8.0_503\bin\dtplugin\npDeployJava1.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.503.2 -> C:\Program Files\Java\jre1.8.0_503\bin\plugin2\npjp2.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2025-07-13] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\micha\AppData\Local\Microsoft\Edge\User Data\Default [2026-11-06]
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\micha\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-26]
Edge Extension: (Edge relevant text changes) - C:\Users\micha\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-03-16]
Opera:
=======
OPR DefaultProfile: Default
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8015800 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [1051064 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2795448 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [1120184 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\154.0.35638.100\elevation_service.exe [4380736 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2026-11-02] (Avast Software s.r.o. -> AVAST Software)
R2 AVGDriverUpdSvc; C:\Program Files\AVG\Driver Updater\DriverUpdSvc.exe [20871344 2026-11-02] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
R2 AzureAttestService; C:\Program Files\Microsoft\AzureAttestService\AzureAttestService.dll [152312 2019-08-19] (Microsoft Windows -> Microsoft Corporation)
R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [32946336 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13287776 2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
S3 EpicGamesUpdater; C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3420088 2026-10-30] (Epic Games Inc. -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [2619832 2026-10-05] (Epic Games Inc. -> Epic Games, Inc.)
R3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncHelper.exe [3815312 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
R2 JTAGServer; C:\altera_lite\24.1std\quartus\bin64\jtagserver.exe [461192 2025-03-06] (Intel Corporation -> )
R2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe [199744 2026-03-09] (Lenovo -> Lenovo)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe [44096 2026-09-21] (Lenovo -> Lenovo)
R2 LkCitadelServer; C:\Windows\SysWOW64\lkcitdl.exe [695136 2014-08-07] (National Instruments Corporation -> National Instruments, Inc.)
R2 lkClassAds; C:\Windows\SysWOW64\lkads.exe [53544 2015-06-01] (National Instruments Corporation -> National Instruments Corporation)
R2 lkTimeSync; C:\Windows\SysWOW64\lktsrv.exe [63792 2015-06-01] (National Instruments Corporation -> National Instruments Corporation)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe [2386280 2026-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [722848 2022-10-08] (Microsoft Corporation -> Microsoft Corporation)
R2 MTKBTSVC; C:\WINDOWS\System32\mtkbtsvc.exe [544568 2026-09-07] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)
R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [1910192 2024-08-20] (SteelSeries France SASU -> Nahimic)
R2 NIApplicationWebServer; C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [57184 2015-06-03] (National Instruments Corporation -> National Instruments Corporation)
S4 NIApplicationWebServer64; C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [80736 2015-06-03] (National Instruments Corporation -> National Instruments Corporation)
R2 niauth; C:\Program Files (x86)\National Instruments\Shared\niauth\niauth_daemon.exe [571712 2015-06-02] (National Instruments Corporation -> National Instruments Corporation)
R2 NIDomainService; C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe [399152 2015-06-01] (National Instruments Corporation -> National Instruments Corporation)
S3 NILM License Manager; C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\lmgrd.exe [1427688 2010-08-02] (National Instruments Corporation -> Macrovision Corporation)
R2 nimDNSResponder; C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [320368 2014-06-06] (National Instruments Corporation -> National Instruments Corporation)
R2 NiSvcLoc; C:\Program Files (x86)\National Instruments\Shared\niSvcLoc\nisvcloc.exe [89928 2015-06-02] (National Instruments Corporation -> National Instruments Corporation)
R2 NISystemWebServer; C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe [57168 2015-06-03] (National Instruments Corporation -> National Instruments Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_360580ba71c61256\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.198.1011.0006\OneDriveUpdaterService.exe [4114280 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
R2 PEMHTTPD-x64; C:\Program Files\edb\pem\httpd\apache\bin\httpd.exe [31232 2025-07-30] (Apache Software Foundation) [File not signed]
S3 PlutonQcService; C:\WINDOWS\system32\PlutonQcService.exe [159744 2026-11-02] (Microsoft Windows -> )
S2 postgresql-x64-18; C:\Program Files\PostgreSQL\18\bin\pg_ctl.exe [130560 2026-03-05] (PostgreSQL Global Development Group) [File not signed]
S3 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [726952 2022-10-08] (Microsoft Corporation -> Microsoft Corporation)
R2 SQLTELEMETRY; C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\sqlceip.exe [300968 2022-10-08] (Microsoft Corporation -> Microsoft Corporation)
R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [72632 2026-08-26] (Lenovo -> Lenovo Group Ltd.)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [768312 2026-08-13] (Oracle America, Inc. -> Oracle and/or its affiliates)
S3 VSInstallerElevationService; C:\Program Files (x86)\Microsoft Visual Studio\Installer\VSInstallerElevationService.exe [43432 2025-11-02] (Microsoft Corporation -> Microsoft)
S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [163456 2025-08-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe [5609240 2026-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe [378128 2026-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 AdvancedSystemCareService18; "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe" (No File) <==== ATTENTION
S3 FvSvc; "C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe" -service (No File)
S2 ImControllerService; %SystemRoot%\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (No File)
S2 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA Corporation\NVIDIA App\NvContainer\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -ert
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 ACPIVPC; C:\WINDOWS\System32\DriverStore\FileRepository\acpivpc.inf_amd64_07db38bc9e02b27d\AcpiVpc.sys [52800 2026-06-16] (Lenovo -> Lenovo)
R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrmgr.sys [25672 2024-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0417253.inf_amd64_a9b363c4f94f001d\B417132\amdkmdag.sys [106597288 2025-07-14] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R2 amd_dpfc; C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_360580ba71c61256\amd_dpfc.sys [47848 2026-10-20] (NVIDIA Corporation -> Advanced Micro Devices)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [253024 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [396896 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [317024 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [81504 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswDrvBrg; C:\WINDOWS\System32\drivers\aswDrvBrg.sys [95320 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [29144 2026-11-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [35936 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [311904 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [641632 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [101472 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [71776 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [862816 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1302624 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [276064 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [484960 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 cpuz154; \??\C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2026-11-01] (Microsoft Windows Hardware Compatibility Publisher -> ) <==== ATTENTION
R3 FBNetFilter; C:\WINDOWS\System32\drivers\FBNetFlt.sys [60784 2023-12-06] (Lenovo -> Lenovo)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [240960 2026-11-02] (Microsoft Windows -> Microsoft Corporation)
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-10-29] (Microsoft Windows -> Microsoft Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [154976 2026-11-02] (Microsoft Windows -> Microsoft Corporation)
R3 MTKBTFilterX64; C:\WINDOWS\System32\DriverStore\FileRepository\mtkbtfilter.inf_amd64_2e4758412000012d\mtkbtfilterx.sys [637896 2026-09-07] (MEDIATEK INC. -> MediaTek Inc.)
R3 mtkwlex; C:\WINDOWS\System32\DriverStore\FileRepository\mtkwl6ex.inf_amd64_0917e824e67faf49\mtkwl6ex.sys [2140616 2026-09-07] (MEDIATEK INC. -> MediaTek Inc.)
R3 NahimicBTLink; C:\WINDOWS\System32\drivers\NahimicBTLink.sys [95856 2024-08-20] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [95896 2024-08-20] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
S3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys [47240 2024-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvpcf; C:\WINDOWS\System32\drivers\nvpcf.sys [246272 2024-07-04] (NVIDIA Corporation -> NVIDIA Corporation)
S4 RsFx0700; C:\WINDOWS\System32\DRIVERS\RsFx0700.sys [298392 2022-10-08] (Microsoft Corporation -> Microsoft Corporation)
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_a246455e93c40570\rt68cx21x64.sys [942120 2026-07-27] (Realtek Semiconductor Corp. -> Realtek)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [51192 2025-03-16] (OpenVPN Inc. -> The OpenVPN Project)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [254568 2026-08-13] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [264880 2026-08-13] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxSup; C:\WINDOWS\system32\DRIVERS\VBoxSup.sys [1090736 2026-08-13] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [204432 2026-08-13] (Oracle America, Inc. -> Oracle and/or its affiliates)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2025-09-22] (Microsoft Windows -> Microsoft Corporation)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-29] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21632 2026-10-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [677952 2026-10-29] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [144408 2026-10-29] (Microsoft Windows -> Microsoft Corporation)
S0 wesp; C:\WINDOWS\System32\drivers\wesp.sys [4355960 2026-11-02] (Microsoft Windows -> Microsoft Corporation)
S0 wespelam; C:\WINDOWS\System32\drivers\wesp_elam.sys [1519024 2026-11-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys (No File)
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys (No File)
S3 iobit_monitor_server2021; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys (No File)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2036-09-13 17:21 - 2036-09-13 17:21 - 000000000 ____D C:\Users\micha\Documents\National Instruments
2036-09-13 17:21 - 2036-09-13 17:21 - 000000000 ____D C:\Users\micha\Documents\LabVIEW Data
2036-09-13 17:17 - 2036-09-13 17:17 - 000000000 ____D C:\Users\micha\AppData\Roaming\National Instruments
2036-09-13 17:11 - 2036-09-13 17:11 - 000000000 ____D C:\Users\micha\AppData\Local\National Instruments
2036-09-13 17:11 - 2036-09-13 17:11 - 000000000 ____D C:\Program Files (x86)\HI-TECH Software
2036-09-13 17:11 - 2025-09-22 16:20 - 000000000 ____D C:\Users\micha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HI-TECH Software
2036-09-13 17:10 - 2036-09-13 17:10 - 000001258 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NI Ultiboard 14.0.lnk
2036-09-13 17:10 - 2036-09-13 17:10 - 000001253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NI Multisim 14.0.lnk
2036-09-13 17:10 - 2036-09-13 17:10 - 000000000 ____D C:\Users\Public\Documents\National Instruments
2036-09-13 17:09 - 2025-09-22 17:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\National Instruments
2036-09-13 17:08 - 2036-09-13 17:11 - 000000000 ____D C:\Program Files (x86)\National Instruments
2036-09-13 17:08 - 2036-09-13 17:08 - 000001455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NI Launcher.lnk
2036-09-13 17:08 - 2036-09-13 17:08 - 000000000 ____D C:\Program Files\National Instruments
2036-09-13 17:08 - 2025-09-22 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\cvirte
2036-09-13 17:08 - 2025-09-22 17:17 - 000000000 ____D C:\WINDOWS\system32\cvirte
2036-09-13 17:04 - 2025-09-22 16:22 - 000000000 ____D C:\ProgramData\National Instruments
2036-09-13 17:01 - 2036-09-13 17:01 - 000000000 ____D C:\National Instruments Downloads
2026-11-06 19:19 - 2026-11-06 19:20 - 000057972 _____ C:\Users\micha\Desktop\FRST.txt
2026-11-06 19:18 - 2026-11-06 19:19 - 000000000 ____D C:\FRST
2026-11-06 19:17 - 2026-11-06 19:18 - 002457088 _____ (Farbar) C:\Users\micha\Desktop\FRST64.exe
2026-11-06 19:15 - 2026-11-06 19:15 - 000000000 ____D C:\Users\micha\AppData\Roaming\AnyDesk
2026-11-06 19:14 - 2026-11-06 19:14 - 008553912 _____ (AnyDesk Software GmbH) C:\Users\micha\Desktop\AnyDesk.exe
2026-11-06 19:08 - 2026-11-06 19:08 - 000001387 _____ C:\Users\micha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prehliadač Opera.lnk
2026-11-04 21:36 - 2026-11-05 20:53 - 000002716 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-11-04 21:36 - 2026-11-04 21:36 - 000002022 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-11-03 16:07 - 2026-11-06 19:13 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-11-03 16:07 - 2026-11-05 20:53 - 000002212 _____ C:\WINDOWS\system32\Tasks\NahimicTask32
2026-11-03 16:07 - 2026-11-05 20:53 - 000002192 _____ C:\WINDOWS\system32\Tasks\NahimicTask64
2026-11-03 09:05 - 2026-11-03 09:05 - 000282208 _____ C:\Users\micha\Downloads\i349852v1n1_PTMO-i349852-VLAN-002.pka_en-US_0b5fe45d-d90a-4592-97cd-360d547f52da.pka
2026-11-02 20:20 - 2026-11-02 20:20 - 000017002 _____ C:\Users\micha\quartus2.qreg
2026-11-02 20:20 - 2026-11-02 20:20 - 000000016 ____H C:\Users\micha\i3q6bSoc4a0
2026-11-02 18:11 - 2026-11-03 16:01 - 000003500 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2026-11-02 18:11 - 2026-11-03 16:01 - 000003070 _____ C:\WINDOWS\system32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2026-11-02 18:11 - 2026-11-02 18:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2026-11-02 18:11 - 2026-10-07 23:44 - 001456752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2026-11-02 18:11 - 2026-10-07 23:44 - 001256048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2026-11-02 18:11 - 2026-10-07 23:20 - 000192232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2026-11-02 18:11 - 2026-10-07 23:20 - 000168680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap32v.dll
2026-11-02 15:17 - 2026-11-02 15:17 - 000000000 ____D C:\Users\micha\AppData\Roaming\xpdf
2026-11-02 15:16 - 2026-11-02 15:16 - 000003844 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2026-11-02 15:16 - 2026-11-02 15:16 - 000003770 _____ C:\WINDOWS\system32\Tasks\AvastBrowserProtectS-1-5-21-629165207-329108147-321633127-1001
2026-11-02 15:16 - 2026-11-02 15:16 - 000003614 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser VPS Differential Update
2026-11-02 15:16 - 2026-11-02 15:16 - 000003260 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2026-11-02 15:16 - 2026-11-02 15:16 - 000002547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2026-11-02 15:16 - 2026-11-02 15:16 - 000002512 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2026-11-02 15:14 - 2026-11-02 15:16 - 000000000 ____D C:\Users\micha\AppData\Local\Avast Software
2026-11-02 15:14 - 2026-11-02 15:14 - 000003494 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineUA
2026-11-02 15:14 - 2026-11-02 15:14 - 000003370 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineCore
2026-11-02 15:14 - 2026-11-02 15:14 - 000000000 ____D C:\Users\micha\AppData\Roaming\Avast Software
2026-11-02 15:14 - 2026-11-02 15:14 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2026-11-02 15:13 - 2026-11-05 18:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2026-11-02 15:13 - 2026-11-02 15:13 - 000002215 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2026-11-02 15:13 - 2026-11-02 15:13 - 000002203 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2026-11-02 15:13 - 2026-11-02 15:11 - 000330168 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2026-11-02 15:11 - 2026-11-02 15:15 - 000000000 ____D C:\Program Files\Avast Software
2026-11-02 15:11 - 2026-11-02 15:11 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2026-11-02 15:10 - 2026-11-02 15:32 - 000000000 ____D C:\ProgramData\Avast Software
2026-11-02 15:02 - 2026-11-05 14:13 - 000000000 ____D C:\KVRT2020_Data
2026-11-02 15:01 - 2026-11-02 15:02 - 122012544 _____ (AO Kaspersky Lab) C:\Users\micha\Desktop\KVRT.exe
2026-11-02 14:57 - 2026-11-02 14:57 - 000092642 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-11-02 14:57 - 2026-11-02 14:57 - 000092642 _____ C:\WINDOWS\system32\ctac.json
2026-11-02 14:56 - 2026-11-02 14:56 - 000018208 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-11-02 14:52 - 2026-11-03 16:01 - 000002454 _____ C:\WINDOWS\system32\Tasks\CCleaner 7 - Skip UAC - S-1-5-21-629165207-329108147-321633127-1001
2026-11-02 14:52 - 2026-11-02 14:52 - 000002161 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 7.lnk
2026-11-02 14:52 - 2026-11-02 14:52 - 000002149 _____ C:\Users\Public\Desktop\CCleaner 7.lnk
2026-11-02 14:52 - 2026-11-02 14:52 - 000000000 ____D C:\WINDOWS\system32\Tasks\Piriform
2026-11-02 14:52 - 2026-11-02 14:52 - 000000000 ____D C:\Users\micha\AppData\Roaming\CCleaner
2026-11-02 14:51 - 2026-11-02 14:51 - 000000000 ____D C:\ProgramData\Piriform
2026-11-02 14:51 - 2026-11-02 14:51 - 000000000 ____D C:\Program Files\Piriform
2026-11-02 14:51 - 2026-11-02 14:51 - 000000000 ____D C:\Program Files\Common Files\Piriform
2026-11-02 14:17 - 2026-11-02 14:18 - 000000000 ____D C:\AdwCleaner
2026-11-02 14:16 - 2026-11-02 14:16 - 009630992 _____ (Malwarebytes) C:\Users\micha\Desktop\adwcleaner.exe
2026-11-02 14:15 - 2026-11-02 14:15 - 000002189 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Driver Updater.lnk
2026-11-02 14:15 - 2026-11-02 14:15 - 000002177 _____ C:\Users\Public\Desktop\AVG Driver Updater.lnk
2026-11-02 14:15 - 2026-11-02 14:15 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVG
2026-11-02 14:15 - 2026-11-02 14:15 - 000000000 ____D C:\Users\micha\AppData\Roaming\AVG
2026-11-02 14:14 - 2026-11-02 15:32 - 000000000 ____D C:\ProgramData\AVG
2026-11-02 14:14 - 2026-11-02 14:14 - 000054352 _____ (Gen Digital Inc.) C:\WINDOWS\system32\icarus_rvrt.exe
2026-11-02 14:14 - 2026-11-02 14:14 - 000000000 ____D C:\Program Files\Common Files\AVG
2026-11-02 14:14 - 2026-11-02 14:14 - 000000000 ____D C:\Program Files\AVG
2026-10-29 11:10 - 2026-10-29 11:10 - 000000223 _____ C:\Users\micha\Desktop\SWAT Commander.url
2026-10-27 10:54 - 2026-10-27 10:54 - 000000000 ____D C:\Users\micha\.config
2026-10-27 10:53 - 2026-10-27 10:53 - 000000020 _____ C:\Users\micha\.lesshst
2026-10-27 10:06 - 2026-10-27 10:06 - 000000079 _____ C:\Users\micha\.gitconfig
2026-10-26 11:05 - 2026-10-26 11:05 - 152453120 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2026-10-26 11:05 - 2026-10-26 11:05 - 007340032 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2026-10-26 11:05 - 2026-10-26 11:05 - 001810432 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2026-10-26 11:05 - 2026-10-26 11:05 - 000077824 _____ C:\WINDOWS\system32\config\SAM.iobit
2026-10-26 11:05 - 2026-10-26 11:05 - 000045056 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2026-10-26 09:54 - 2026-11-03 16:01 - 000003930 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1742120147
2026-10-26 09:54 - 2026-11-03 16:01 - 000003660 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1742120147
2026-10-20 23:22 - 2026-10-20 23:22 - 032265960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 022490848 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 021020392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 006181608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 005930728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 004835048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 002803248 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 002803248 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 002403888 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 002403888 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 002345192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001736424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001711336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 001695280 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001695280 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001597160 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001555688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001510448 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001510448 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001242344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001088232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 000839912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000685288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000560200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000513768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000477928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 000429992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-10-19 18:19 - 2026-10-19 18:19 - 000181309 _____ C:\WINDOWS\system32\nvinfo.pb
2026-10-19 07:10 - 2026-11-02 15:31 - 154664960 _____ C:\WINDOWS\system32\config\SOFTWARE
2026-10-19 07:10 - 2026-11-02 15:31 - 002097152 _____ C:\WINDOWS\system32\config\DEFAULT
2026-10-19 07:10 - 2026-11-02 15:31 - 000077824 _____ C:\WINDOWS\system32\config\SAM
2026-10-19 07:10 - 2026-11-02 15:31 - 000045056 _____ C:\WINDOWS\system32\config\SECURITY
2026-10-19 07:10 - 2026-10-19 07:10 - 073764864 _____ C:\WINDOWS\system32\config\COMPONENTS.iodefrag.bak
2026-10-13 21:30 - 2026-10-13 21:30 - 000039736 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-10-13 21:30 - 2026-10-13 21:30 - 000039736 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-10-13 21:30 - 2026-10-13 21:30 - 000004985 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-10-11 21:01 - 2026-10-11 21:01 - 000000000 ____D C:\Users\micha\Documents\Vlastné šablóny balíka Office
2026-10-11 17:49 - 2026-10-11 17:49 - 000000110 ____H C:\Users\micha\Desktop\833037938_2471151210043374_8903366600469563742_n.jpg.uid-zps
2026-10-09 06:57 - 2026-10-09 06:57 - 057319424 _____ C:\WINDOWS\system32\config\COMPONENTS.iobit
2026-10-07 10:46 - 2026-10-07 10:46 - 000000000 ____D C:\Users\micha\Documents\TMA
2026-10-07 09:57 - 2026-10-07 09:57 - 000000016 _____ C:\Users\micha\.emulator_console_auth_token
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-11-06 19:20 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-11-06 19:19 - 2025-03-16 11:15 - 000000000 ____D C:\Users\micha\AppData\Local\Programs\Opera
2026-11-06 19:16 - 2025-03-20 12:00 - 000000000 ____D C:\Program Files (x86)\Steam
2026-11-06 19:13 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-11-06 19:13 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-11-06 19:08 - 2026-09-17 15:33 - 000002906 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-11-06 19:07 - 2025-03-17 18:13 - 000000630 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2026-11-06 00:11 - 2025-09-22 16:18 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-11-05 23:26 - 2025-03-16 11:12 - 000000000 ____D C:\Users\micha\AppData\Local\D3DSCache
2026-11-05 20:54 - 2025-03-16 11:13 - 000000000 ___RD C:\Users\micha\OneDrive
2026-11-05 20:53 - 2025-12-14 16:24 - 000003064 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1004
2026-11-05 20:53 - 2025-12-14 16:24 - 000003058 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-629165207-329108147-321633127-1004
2026-11-05 20:53 - 2025-09-22 16:26 - 000003058 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-629165207-329108147-321633127-1001
2026-11-05 20:53 - 2025-09-22 16:26 - 000003054 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1001
2026-11-05 18:08 - 2026-03-24 11:14 - 000000000 ____D C:\Users\micha\AppData\Roaming\paradox-launcher-v2
2026-11-04 21:36 - 2025-03-17 18:20 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-11-04 21:36 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-11-04 21:09 - 2025-05-22 10:46 - 000000000 ____D C:\Users\micha\AppData\Roaming\discord
2026-11-04 20:56 - 2026-09-09 20:39 - 000001316 _____ C:\Users\micha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-11-04 20:56 - 2025-05-22 10:46 - 000002255 _____ C:\Users\micha\Desktop\Discord.lnk
2026-11-04 20:56 - 2025-05-22 10:45 - 000000000 ____D C:\Users\micha\AppData\Local\Discord
2026-11-04 19:43 - 2025-03-16 11:40 - 000000000 ____D C:\Users\micha\AppData\Roaming\Microsoft\Word
2026-11-04 19:27 - 2025-03-16 11:12 - 000000000 ____D C:\Users\micha\AppData\Local\Packages
2026-11-04 12:21 - 2025-04-07 10:13 - 000000000 ____D C:\Users\micha\AppData\Roaming\Code
2026-11-04 12:21 - 2025-04-07 10:12 - 000000000 ____D C:\Users\micha\AppData\Local\Programs\Microsoft VS Code
2026-11-04 11:07 - 2022-05-25 20:06 - 000000000 ____D C:\ProgramData\Packages
2026-11-04 11:00 - 2026-09-19 18:55 - 000000000 ____D C:\Users\micha\AppData\Local\copilot
2026-11-04 10:59 - 2026-09-23 10:09 - 000000000 ____D C:\Users\micha\.android
2026-11-03 16:31 - 2025-09-22 16:29 - 000961518 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-11-03 16:31 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-11-03 16:07 - 2025-09-22 16:26 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-11-03 16:07 - 2025-09-22 16:22 - 000006716 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-11-03 16:07 - 2025-09-22 16:20 - 000000000 ____D C:\Users\micha
2026-11-03 16:07 - 2024-06-02 04:24 - 000000000 ____D C:\ProgramData\NVIDIA
2026-11-03 16:07 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2026-11-03 16:07 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-11-03 16:06 - 2026-09-17 20:21 - 000012288 ___SH C:\DumpStack.log.tmp
2026-11-03 16:06 - 2025-09-22 16:18 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-11-03 16:01 - 2025-09-22 16:26 - 000003620 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-11-03 16:01 - 2025-09-22 16:26 - 000003486 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-11-03 16:01 - 2025-09-22 16:26 - 000003142 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002
2026-11-03 16:01 - 2025-09-22 16:26 - 000003118 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-629165207-329108147-321633127-1002
2026-11-03 16:01 - 2025-09-22 16:26 - 000002880 _____ C:\WINDOWS\system32\Tasks\NIUpdateServiceCheckTask
2026-11-03 16:01 - 2025-09-22 16:26 - 000002702 _____ C:\WINDOWS\system32\Tasks\ASC_PerformanceMonitor
2026-11-03 16:01 - 2025-09-22 16:26 - 000002592 _____ C:\WINDOWS\system32\Tasks\ASC_SkipUac_micha
2026-11-03 16:01 - 2025-09-22 16:26 - 000002560 _____ C:\WINDOWS\system32\Tasks\NIUpdateServiceStartupTask
2026-11-03 09:05 - 2026-04-01 12:38 - 000000000 ____D C:\Users\micha\Cisco Packet Tracer 9.0.0
2026-11-03 09:04 - 2025-03-31 11:10 - 000000348 _____ C:\Users\micha\.packettracer
2026-11-02 18:23 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-11-02 18:13 - 2025-03-16 11:12 - 000000000 ____D C:\Users\micha\AppData\Local\NVIDIA Corporation
2026-11-02 18:11 - 2024-06-02 04:24 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2026-11-02 18:11 - 2024-06-02 04:24 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2026-11-02 15:31 - 2024-04-01 08:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-11-02 15:24 - 2025-09-22 16:18 - 000481736 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\WUModels
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-11-02 15:22 - 2025-12-16 09:58 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-11-02 15:22 - 2025-09-22 17:13 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-11-02 15:22 - 2024-04-01 17:35 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-11-02 15:22 - 2024-04-01 17:35 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Com
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-11-02 15:22 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2026-11-02 15:16 - 2025-03-16 11:13 - 000000000 ____D C:\Users\micha\AppData\Local\PlaceholderTileLogoFolder
2026-11-02 15:13 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-11-02 14:58 - 2025-03-16 11:14 - 000000000 ____D C:\Users\micha\AppData\Local\CrashDumps
2026-11-02 14:56 - 2025-09-22 16:20 - 003385856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-11-02 14:36 - 2022-05-25 20:06 - 000002531 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-11-02 14:31 - 2025-03-18 19:09 - 000000000 ____D C:\Users\micha\AppData\LocalLow\NVIDIA
2026-11-02 14:30 - 2024-06-02 04:24 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2026-11-02 14:18 - 2025-12-08 22:27 - 000000000 ____D C:\Users\WsiAccount\AppData\Roaming\IObit
2026-11-02 14:18 - 2025-12-08 22:27 - 000000000 ____D C:\Users\WsiAccount\AppData\LocalLow\IObit
2026-11-02 14:18 - 2025-09-22 17:14 - 000000000 ____D C:\WINDOWS\Lenovo
2026-11-02 14:18 - 2025-09-22 16:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Lenovo
2026-11-02 14:18 - 2025-03-28 17:47 - 000000000 ____D C:\Users\micha\AppData\LocalLow\IObit
2026-11-02 14:18 - 2025-03-28 17:47 - 000000000 ____D C:\Program Files (x86)\IObit
2026-11-02 14:18 - 2025-03-28 17:46 - 000000000 ____D C:\Users\micha\AppData\Roaming\IObit
2026-11-02 14:18 - 2025-03-28 17:46 - 000000000 ____D C:\ProgramData\IObit
2026-11-02 14:18 - 2025-03-16 11:13 - 000000000 ____D C:\Users\micha\AppData\Local\Lenovo
2026-11-02 14:18 - 2024-06-02 04:16 - 000000000 ____D C:\ProgramData\Lenovo
2026-11-02 14:17 - 2024-06-02 04:26 - 000000000 ____D C:\WINDOWS\system32\SONiX
2026-11-01 19:58 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-11-01 19:54 - 2025-09-22 17:11 - 000002078 _____ C:\WINDOWS\SysWOW64\pubfreeware.ini
2026-11-01 19:12 - 2025-03-28 17:48 - 000000780 _____ C:\ProgramData\pdinst.ini
2026-11-01 18:39 - 2026-10-04 19:57 - 000000000 ____D C:\Users\micha\IdeaProjects
2026-10-30 15:54 - 2025-03-28 17:48 - 000000000 ____D C:\ProgramData\ProductData3
2026-10-29 14:58 - 2025-03-27 12:09 - 000000000 ____D C:\Users\micha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2026-10-29 11:23 - 2022-05-25 20:05 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-10-29 11:11 - 2025-03-20 12:01 - 000000000 ____D C:\Users\micha\AppData\Local\Steam
2026-10-28 17:00 - 2025-09-25 07:11 - 000000000 ____D C:\Users\micha\.VirtualBox
2026-10-27 10:04 - 2025-03-27 12:17 - 000000000 ____D C:\Users\micha\PycharmProjects
2026-10-26 12:21 - 2025-03-24 21:11 - 000007952 _____ C:\WINDOWS\system32\Drivers\mtkRunTimeDataWdi.bin
2026-10-26 11:07 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2026-10-22 09:15 - 2025-04-14 11:48 - 000000000 ____D C:\Users\micha\Documents\Packet Tracer
2026-10-21 10:47 - 2026-09-16 10:14 - 000000000 ____D C:\Users\micha\PMACourse01
2026-10-19 07:12 - 2024-04-01 17:34 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-19 07:12 - 2024-04-01 17:34 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-19 07:12 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-19 07:12 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-19 07:10 - 2026-03-17 20:45 - 143560704 _____ C:\WINDOWS\system32\config\SOFTWARE.iodefrag.bak
2026-10-19 07:10 - 2026-03-17 20:45 - 007335936 _____ C:\WINDOWS\system32\config\DRIVERS.iodefrag.bak
2026-10-19 07:10 - 2026-03-17 20:45 - 001794048 _____ C:\WINDOWS\system32\config\DEFAULT.iodefrag.bak
2026-10-19 07:10 - 2026-03-17 20:45 - 000077824 _____ C:\WINDOWS\system32\config\SAM.iodefrag.bak
2026-10-19 07:10 - 2026-03-17 20:45 - 000045056 _____ C:\WINDOWS\system32\config\SECURITY.iodefrag.bak
2026-10-19 07:10 - 2024-06-02 04:21 - 000000000 ____D C:\Program Files\AMD
2026-10-15 17:12 - 2025-03-23 20:07 - 000000000 ____D C:\Users\micha\Documents\Projekty škola
2026-10-14 10:23 - 2026-09-16 10:14 - 000000000 ____D C:\Users\micha\.expo
2026-10-14 09:58 - 2025-04-07 10:13 - 000000000 ____D C:\Users\micha\.vscode
2026-10-13 21:52 - 2025-03-17 19:35 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-13 21:20 - 2025-03-17 19:35 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-08 12:31 - 2025-12-15 19:09 - 000000000 ____D C:\Users\micha\Documents\SQL
2026-10-08 12:18 - 2025-10-02 19:46 - 000000000 ____D C:\Users\micha\Documents\DSY
2026-10-08 12:18 - 2025-09-22 11:41 - 000000000 ____D C:\Users\micha\AppData\Roaming\Microsoft\Access
2026-10-07 23:43 - 2024-06-02 04:25 - 000301168 _____ C:\WINDOWS\system32\FvSDK_x64.dll
2026-10-07 23:43 - 2024-06-02 04:25 - 000274032 _____ C:\WINDOWS\SysWOW64\FvSDK_x86.dll
==================== Files in the root of some directories ========
2026-04-01 12:34 - 2026-04-01 12:37 - 300966272 _____ (Cisco Systems, Inc. ) C:\Users\micha\CiscoPacketTracer_900_win_64bit.exe
2026-04-09 07:15 - 2026-04-09 07:15 - 001359904 _____ (Microsoft Corporation) C:\Users\micha\MSTeamsSetup.exe
2026-03-17 12:40 - 2026-03-17 12:40 - 044156088 _____ (EnterpriseDB) C:\Users\micha\pemhttpd.exe
2026-03-17 12:40 - 2026-03-17 12:40 - 371789096 _____ (PostgreSQL Global Development Group) C:\Users\micha\postgresql_18.exe
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Prosim o kontrolu logu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Prosim o kontrolu logu
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-11-2026
Ran by micha (06-11-2026 19:21:30)
Running from C:\Users\micha\Desktop
Microsoft Windows 11 Home Version 26H2 26300.9818 (X64) (2025-09-22 15:26:26)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-629165207-329108147-321633127-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-629165207-329108147-321633127-503 - Limited - Disabled)
Guest (S-1-5-21-629165207-329108147-321633127-501 - Limited - Disabled)
micha (DisplayName: M****** J) (S-1-5-21-629165207-329108147-321633127-1001 - Administrators - Enabled) [MS Account] => C:\Users\micha
WDAGUtilityAccount (S-1-5-21-629165207-329108147-321633127-504 - Limited - Disabled)
WsiAccount (S-1-5-21-629165207-329108147-321633127-1004 - Limited - Disabled) => C:\Users\WsiAccount
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: McAfee (Enabled - Up to date) {0BE13B34-492A-21C0-AE43-C1742279CCB6}
FW: McAfee (Enabled) {33DABA11-0345-2098-851C-6841DCAA8BCD}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Android Studio (HKLM\...\Android Studio) (Version: 2026.1 - Google LLC)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 26.10.11201.3859 - Gen Digital Inc.)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 154.0.35638.100 - Autori prehliadača Avast Secure Browser)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
AVG Driver Updater (HKLM\...\AVG Driver Updater) (Version: 26.9.6925.16748 - Gen Digital Inc.)
Browser for SQL Server 2022 (HKLM-x32\...\{FDB357D5-CC78-480A-8D26-C15D1A877642}) (Version: 16.0.1000.6 - Microsoft Corporation)
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.13.1591.2041 - Piriform)
Cisco Packet Tracer 8.2.2 64Bit (HKLM\...\Cisco Packet Tracer 8.2.2 64Bit_is1) (Version: 8.2.2.400 - Cisco Systems, Inc.)
Cisco Packet Tracer 9.0.0 64Bit (HKLM\...\Cisco Packet Tracer 9.0.0 64Bit_is1) (Version: 9.0.0.810 - Cisco Systems, Inc.)
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 156.0.4314.58 - Microsoft Corporation)
DiagnosticsHub_CollectionService (HKLM\...\{C762588C-06DE-496A-8ADF-EBDBD49E37B5}) (Version: 17.14.36412 - Microsoft Corporation) Hidden
Discord (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Discord) (Version: 1.0.9267 - Discord Inc.)
Eclipse Temurin JDK with Hotspot 25.0.4.1+1 (x64) (HKLM\...\{43C4DD34-D4BD-4A01-B688-3D8EAAABD8BC}) (Version: 25.0.4.101 - Eclipse Adoptium)
eLynx lab v2.2.7 (HKLM-x32\...\eLynx lab_is1) (Version: - eLynx project)
Epic Games Launcher (HKLM-x32\...\{6CD543FB-BFB8-47DC-8320-12A0885B94E2}) (Version: 1.3.155.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{E81CA011-E9A8-42B8-A4C0-11F66BE56D6C}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{8CD570F8-C05E-4B41-8EAB-24329D11928D}) (Version: 4.0.1 - Epic Games, Inc.)
Git (HKLM\...\Git_is1) (Version: 2.51.0 - The Git Development Community)
HI-TECH C Compiler for the PIC10/12/16 MCUs V9.82PL0 (HKLM-x32\...\PICC 9.82) (Version: 9.82 - HI-TECH Software)
HI-TECH C51-lite V9.60PL0 (HKLM-x32\...\HC51 9.60PL0) (Version: 9.60 - HI-TECH Software)
IntelliJ IDEA 2026.2.2 (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\IntelliJ IDEA 2026.2.2) (Version: 262.10315.125 - JetBrains s.r.o.)
Java 8 Update 503 (64-bit) (HKLM\...\{77124AE4-039E-4CA4-87B4-2F64180503F0}) (Version: 8.0.5030.1 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{60e762c3-a30e-4a24-ac32-35fc9aa84805}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Legion Arena (HKLM-x32\...\Legion Arena_is1) (Version: 1.3.1.1 - Lenovo Group Ltd.)
Lenovo Now (HKLM-x32\...\{622FA116-13E7-4BB6-839C-A3E0E3ECDFE6}_is1) (Version: 4.8.0.54 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 5.1.2609.9 - Lenovo Group Ltd.)
Microsoft 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft 365 - sk-sk (HKLM\...\O365HomePremRetail - sk-sk) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 156.0.4314.58 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 156.0.4314.58 - Microsoft Corporation) Hidden
Microsoft ODBC Driver 17 for SQL Server (HKLM\...\{0E0F96AC-80DE-4400-A40C-429D63293651}) (Version: 17.10.6.1 - Microsoft Corporation)
Microsoft Office 2016 Professional Plus - sk-sk (HKLM\...\ProPlusRetail - sk-sk) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft OLE DB Driver for SQL Server (HKLM\...\{76EB75D2-CCF6-41A9-90B6-922DE9146276}) (Version: 18.7.4.0 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.198.1011.0006 - Microsoft Corporation)
Microsoft OneNote - cs-cz (HKLM\...\OneNoteFreeRetail - cs-cz) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft OneNote - en-us (HKLM\...\OneNoteFreeRetail - en-us) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft OneNote - sk-sk (HKLM\...\OneNoteFreeRetail - sk-sk) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft SQL Server 2022 (64-bit) (HKLM\...\Microsoft SQL Server SQL2022) (Version: - Microsoft Corporation)
Microsoft SQL Server 2022 RsFx Driver (HKLM\...\{629C8FC9-3763-4C58-8264-5288AE34AFEF}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
Microsoft SQL Server 2022 Setup (English) (HKLM\...\{BF4D8C4B-D931-4D62-A7ED-8A34B2FC0D1B}) (Version: 16.0.1000.6 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.26.25904 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.145.0 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 3.14.2086.54749 - Microsoft Corporation)
Microsoft Visual Studio Setup Configuration (HKLM-x32\...\{D07657AA-968C-4629-BD6C-1B52AF825EA7}) (Version: 3.12.2140.44225 - Microsoft Corporation) Hidden
Microsoft Visual Studio Setup WMI Provider (HKLM-x32\...\{49727420-70BA-4495-9405-31F8D711CB5A}) (Version: 3.12.2140.44225 - Microsoft Corporation) Hidden
Microsoft VSS Writer for SQL Server 2022 (HKLM\...\{AB5D8778-81F3-47E2-87A4-35E776CD664B}) (Version: 16.0.1000.6 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
National Instruments Software (HKLM-x32\...\NI Uninstaller) (Version: - National Instruments)
Node.js (HKLM\...\{0463EF6C-7AE0-4657-970D-FD4634A98A35}) (Version: 22.20.0 - Node.js Foundation)
NVIDIA App 11.0.9.565 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.9.565 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.9.12728.38614306 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.9.12728.38614306 - NVIDIA Corporation)
NVIDIA Grafický ovládač 555.99 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 555.99 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{46ED2B64-85C7-4E1F-920C-A555B21F2E4C}) (Version: 9.11.1111 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.19127.20154 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.19029.20208 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.7571.2072 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.7571.2072 - Microsoft Corporation) Hidden
Opera Stable 139.0.6053.38 (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Opera 139.0.6053.38) (Version: 139.0.6053.38 - Opera Software)
Oracle VirtualBox 7.2.16 (HKLM\...\{0BAEEEB4-2170-4A32-ACA3-691102D224E8}) (Version: 7.2.16 - Oracle and/or its affiliates)
Paradox Launcher v2 (HKLM\...\{BCBAAF27-1C19-48A5-8DEF-258E46D93FE0}) (Version: 2.4.0 - Paradox Interactive)
PEM-HTTPD 2.4.65 (HKLM\...\PEM-HTTPD 2.4.65-1) (Version: 2.4.65-1 - EnterpriseDB)
PostgreSQL 18 (HKLM\...\PostgreSQL 18) (Version: 18.3-2 - PostgreSQL Global Development Group)
Postman x64 12.2.0 (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Postman) (Version: 12.2.0 - Postman)
PyCharm 2026.2.2 (HKLM\...\PyCharm 2026.2.2) (Version: 262.10315.174 - JetBrains s.r.o.)
Python 3.12.6 (64-bit) (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\{316e3b12-1191-47df-b9d4-dcf0bf2f6cc4}) (Version: 3.12.6150.0 - Python Software Foundation)
Python 3.12.6 Core Interpreter (64-bit) (HKLM\...\{901B913C-FA63-48D2-9842-7D7676739378}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Development Libraries (64-bit) (HKLM\...\{2F4E9933-7587-4D85-9BA1-F2903AFB36D8}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Documentation (64-bit) (HKLM\...\{46673E63-1CA8-43EA-B73B-AC20DDD77C5A}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Executables (64-bit) (HKLM\...\{537B2AF5-504B-4303-99CB-FDE56F47AA51}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 pip Bootstrap (64-bit) (HKLM\...\{1D520CE1-F09A-4A26-B110-52081FEA0AB9}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Standard Library (64-bit) (HKLM\...\{1DAEF824-881A-49C6-B91E-1D28877FF18D}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Tcl/Tk Support (64-bit) (HKLM\...\{08A1963D-07D1-4620-929C-385F6A307772}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Test Suite (64-bit) (HKLM\...\{3334B843-864F-4F04-A635-5D2FD5840AD5}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.14.7 (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\pymanager-pythoncore-3.14-64) (Version: 3.14-64 - Python Software Foundation)
Python Launcher (HKLM-x32\...\{C7213DDA-56FA-4C9E-BA0C-1C907366F456}) (Version: 3.13.2150.0 - Python Software Foundation)
Quartus Prime Lite Edition (Free) 24.1std.0.1077 (HKLM\...\Quartus Prime Lite Edition (Free) 24.1std.0.1077) (Version: 24.1std - Altera Corporation)
SQL Server 2022 Batch Parser (HKLM\...\{7EFD8B19-A9E6-41CF-A96F-B9B6E30EC345}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Common Files (HKLM\...\{6A68D32C-4C0D-4847-B70C-58E6B4D76A12}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Common Files (HKLM\...\{8770AF64-BB4B-4404-BDD6-6AF8E4C461FC}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Connection Info (HKLM\...\{770DA7F2-817B-4AA6-9160-08BB658ABDC6}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Connection Info (HKLM\...\{EAC54B82-7A37-4A9E-8953-474316BD40F6}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Database Engine Services (HKLM\...\{6621C765-569C-4D46-A8E9-C69A47971357}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Database Engine Services (HKLM\...\{C4CF167C-4739-4A3A-8D75-59C9C5F135CA}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Database Engine Shared (HKLM\...\{161B8D12-C41B-4ACF-9BB5-E1FEE6788869}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Database Engine Shared (HKLM\...\{D6E82158-05B9-4A18-A624-EA135BC77766}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 DMF (HKLM\...\{5AB77D4E-9E5F-4627-B78B-129A5EC2858A}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 DMF (HKLM\...\{DCA0C2D6-83BF-41AE-B1AB-C4181002DE40}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Shared Management Objects (HKLM\...\{12618131-AA9A-4DAE-9387-CE4417955B9F}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Shared Management Objects (HKLM\...\{6F8242AA-1B25-421C-8E45-FC5978D9AA3A}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Shared Management Objects Extensions (HKLM\...\{35EC6145-E333-42DB-BCB3-380DF6140C11}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Shared Management Objects Extensions (HKLM\...\{A0F7ACBA-075F-4BC7-A85A-5DC301FCEC74}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 SQL Diagnostics (HKLM\...\{0CEFE958-E71A-4171-9DEF-77E9234A5613}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 XEvent (HKLM\...\{94AEB0A0-365C-449B-B573-D2ECB353EB06}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 XEvent (HKLM\...\{BD8B7339-7559-4FC3-95E6-264324D45235}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server Management Studio 21 (HKLM-x32\...\04513577) (Version: 21.6.17 - Microsoft Corporation)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Sublime Text (HKLM\...\Sublime Text_is1) (Version: - Sublime HQ Pty Ltd)
TLauncher (HKLM-x32\...\TLauncher) (Version: 2.9316 - TLauncher Inc.)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.51 - Ghisler Software GmbH)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)
vs_communitymsires (HKLM-x32\...\{2817364B-A3DE-472C-BF19-F19B6997061F}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_communitysharedmsi (HKLM-x32\...\{71498EE6-F94E-4061-9DD5-55925CA8A74F}) (Version: 17.14.36025 - Microsoft Corporation) Hidden
vs_communityx64msi (HKLM\...\{3873679C-FA03-4101-97E9-107D67C568B8}) (Version: 17.14.36025 - Microsoft Corporation) Hidden
vs_CoreEditorFonts (HKLM-x32\...\{1851460E-0E63-4117-B5BA-25A2F045801B}) (Version: 17.7.40001 - Microsoft Corporation)
vs_filehandler_amd64 (HKLM-x32\...\{22EE1419-B47E-44B8-A635-868746946079}) (Version: 17.14.36024 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{6C7D0172-7367-4F0C-95DB-6021765B58EA}) (Version: 17.14.36024 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{D331F4E7-BC3B-47BE-BB56-5F33895F9347}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_githubprotocolhandlermsi (HKLM-x32\...\{29297AFE-9D24-4DFE-ACAF-D90090D905CF}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_minshellinteropsharedmsi (HKLM-x32\...\{537F07C8-0EC6-41A5-BB91-750FA3CAA110}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_minshellinteropx64msi (HKLM\...\{B797608C-8536-46EF-95D8-8474139EA43A}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{EC049978-2176-47C6-B99B-2C64AD6F6828}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_minshellsharedmsi (HKLM-x32\...\{F6E69DD8-7652-4CC6-8A4F-485A16012B5B}) (Version: 17.14.36024 - Microsoft Corporation) Hidden
vs_minshellx64msi (HKLM\...\{51FD170D-69D2-4D5E-A9D1-53FD1F394FD7}) (Version: 17.14.36301 - Microsoft Corporation) Hidden
vs_ssmsprotocolselectormsi (HKLM-x32\...\{73328FDB-39A8-4A80-B933-805F1B233F94}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_vswebprotocolselectormsi (HKLM-x32\...\{B4B3AA16-E828-4577-A9F2-629E1A95FE4A}) (Version: 17.14.36323 - Microsoft Corporation) Hidden
Windows Driver Package - Altera (WinUSB) JTAG cables (10/13/2018 ) (HKLM\...\39825C61306F438661AC1C2E61A69F2BF353552A) (Version: 10/13/2018 - Altera)
Zoner Photo Studio 17 (HKLM\...\ZonerPhotoStudio17_SK_is1) (Version: 17.0.1.12 - ZONER software)
Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m [2025-08-10] (Advanced Micro Devices Inc.) [Startup Task]
Dropbox promotion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.38.0_x64__xbfy0k16fey96 [2026-07-28] (Dropbox Inc.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.7.18.0_x64__5grkq8ppsgwt4 [2025-05-17] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2608.43.0_x64__k1h2ywk1493x8 [2026-09-23] (LENOVO INC.)
LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_3.0.43.0_x64__w1wdnht996qgy [2026-02-06] (LinkedIn) [Startup Task]
Local Artificial Intelligence Manager -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2025-09-13] ()
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-03-17] (Microsoft Corp.)
Microsoft Journal -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJournal_1.0.127.0_x64__8wekyb3d8bbwe [2025-12-15] (Microsoft Corporation)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_56.20201.588.0_x64__8wekyb3d8bbwe [2026-02-18] (Microsoft Corporation)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2025-12-08] ()
Nahimic -> C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.15.0_x64__w2gh52qy24etm [2026-09-10] (A-Volute)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-06] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2025-12-08] ()
Python Install Manager -> C:\Program Files\WindowsApps\PythonSoftwareFoundation.PythonManager_26.4.240.0_x64__3847v3x7pw1km [2026-10-13] (Python Software Foundation)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.50.323.0_x64__dt26b99r8h8gj [2025-09-15] (Realtek Semiconductor Corp)
Visual Studio Code -> C:\Users\micha\AppData\Local\Programs\Microsoft VS Code\a717861c07\appx [2026-11-04] ()
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.6.4.0_x64__8wekyb3d8bbwe [2026-11-03] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-629165207-329108147-321633127-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\micha\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (SteelSeries France SASU -> A-Volute)
CustomCLSID: HKU\S-1-5-21-629165207-329108147-321633127-1001_Classes\CLSID\{BEA218D2-6950-497B-9434-61683EC065FE}\InprocServer32 -> C:\Users\micha\AppData\Local\Programs\Python\Launcher\pyshellext.amd64.dll (Python Software Foundation -> Python Software Foundation)
CustomCLSID: HKU\S-1-5-21-629165207-329108147-321633127-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\micha\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.26.25904\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-629165207-329108147-321633127-1001_Classes\CLSID\{FAD9FE0A-F40E-4CEF-B3AB-A26F1EFEA56C}\localserver32 -> C:\Users\micha\AppData\Local\Discord\app-1.0.9267\Discord.exe (Discord Inc. -> Discord Inc.)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> No File
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_360580ba71c61256\nvshext.dll [2026-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2012-01-26 09:36 - 2012-01-26 09:36 - 000278528 ____R () [File not signed] C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\xerces-depdom_2_6.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000602624 _____ () [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\pcre2-8.dll
2025-03-16 11:27 - 2014-09-09 12:30 - 000603648 _____ () [File not signed] C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\SpiderMonkey.dll
2024-06-02 04:17 - 2024-06-02 04:17 - 000000000 ____L () [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2024-06-02 04:17 - 2024-06-02 04:17 - 000000000 ____L () [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
2012-01-26 09:36 - 2012-01-26 09:36 - 002359296 ____R (Apache Software Foundation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\xerces-c_2_6.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000217600 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\libapr-1.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000036864 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\libapriconv-1.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000301056 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\libaprutil-1.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000467456 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\libhttpd.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000016896 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_access_compat.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000015360 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_actions.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000022016 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_alias.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000013312 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_allowmethods.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000014336 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_asis.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000018432 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_auth_basic.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000017408 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authn_core.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000015872 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authn_file.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000024576 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authz_core.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000016896 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authz_groupfile.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000017408 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authz_host.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000013312 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authz_user.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000038912 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_autoindex.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000027648 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_cgi.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000016384 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_dir.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000014336 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_env.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000050176 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_include.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000030720 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_isapi.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000032256 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_log_config.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000023552 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_mime.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000036352 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_negotiation.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000018432 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_setenvif.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000025600 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_socache_shmcb.so
2026-11-06 19:15 - 2026-11-06 19:15 - 000394240 _____ (Google Inc.) [File not signed] C:\Users\micha\AppData\Local\Temp\scoped_dir25148_331441044\gcapi.dll
2014-05-15 10:19 - 2014-05-15 10:19 - 001409024 _____ (National Instruments Corp.) [File not signed] C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\nilmClient.dll
2015-06-01 21:16 - 2015-06-01 21:16 - 000560640 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\LogosXT\nilxtcor.dll
2015-06-01 21:17 - 2015-06-01 21:17 - 000227840 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\LogosXT\nipspxts.dll
2014-06-19 22:21 - 2014-06-19 22:21 - 000218624 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI System Configuration\nisyscfgExpert.dll
2015-05-14 14:46 - 2015-05-14 14:46 - 000033792 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libappweb.dll
2015-04-28 10:37 - 2015-04-28 10:37 - 000057856 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libappwebcore.dll
2015-04-28 10:37 - 2015-04-28 10:37 - 000153088 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libhttp.dll
2015-04-28 10:37 - 2015-04-28 10:37 - 000175616 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libmpr.dll
2015-04-28 10:37 - 2015-04-28 10:37 - 000091136 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libpcre.dll
2015-06-02 16:52 - 2015-06-02 16:52 - 000270336 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niauth.dll
2015-02-06 16:10 - 2015-02-06 16:10 - 000033792 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niconf.dll
2015-02-06 16:10 - 2015-02-06 16:10 - 000056832 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niesp.dll
2015-06-03 08:53 - 2015-06-03 08:53 - 000247296 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_nisessmgr.dll
2015-06-03 08:54 - 2015-06-03 08:54 - 000570880 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niws.dll
2015-06-03 08:54 - 2015-06-03 08:54 - 000413184 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ws_runtime.dll
2015-06-02 16:52 - 2015-06-02 16:52 - 000456704 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NIAuth\niauth.dll
2015-06-02 16:50 - 2015-06-02 16:50 - 000264704 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NIAuth\niPortableRegistry.dll
2015-04-07 11:32 - 2015-04-07 11:32 - 001056768 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\nissl\NIlibeay32.dll
2015-04-07 13:21 - 2015-04-07 13:21 - 000237568 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\nissl\NIssleay32.dll
2015-06-02 17:07 - 2015-06-02 17:07 - 000097280 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\nissl\nisslinit.dll
2015-06-01 21:01 - 2015-06-01 21:01 - 000257024 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\Security\nidm_client_thinauth.dll
2015-06-03 08:50 - 2015-06-03 08:50 - 000095232 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\TraceEngine\ni_traceengine.dll
2015-05-14 14:12 - 2015-05-14 14:12 - 000134656 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSAuthSvc\niauthsvc.dll
2015-06-08 10:59 - 2015-06-08 10:59 - 000030208 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSDeploySvc\deploysvc.dll
2015-06-02 17:07 - 2015-06-02 17:07 - 000194048 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSSSLAdmin\ssladminsvc.dll
2015-06-02 17:07 - 2015-06-02 17:07 - 000093696 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSSslAdmin\ssladminsvc_logos.dll
2015-06-03 08:53 - 2015-06-03 08:53 - 000221184 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSSysAdmin\sysadminsvc.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_503\bin\ssv.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_503\bin\jp2ssv.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2022-05-07 06:24 - 2026-11-03 16:07 - 000001022 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 gen-webserver.internal www.gen-webserver.internal # gen digital helper server
127.0.0.1 revocation.gen-webserver.internal www.revocation.gen-webserver.internal # gen digital helper server
2025-03-17 18:13 - 2026-11-06 19:07 - 000000630 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.137.198 Watch.mshome.net # 2026 10 0 18 20 57 21 251
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 1.1.1.1 - 8.8.8.8
Windows Firewall is enabled.
Network Binding:
=============
Ethernet 2: VirtualBox Host-Only Ethernet Adapter -> VBoxNetAdp6.sys
Wi-Fi: MediaTek Wi-Fi 6 MT7921 Wireless LAN Card -> mtkwl6ex.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
vms_vsf: Hyper-V Virtual Switch Extension Filter
oracle_VBoxNetLwf: VirtualBox NDIS6 Bridged Networking Driver
ms_l1vhlwf: Nested Network Virtualization
vms_vsp: Hyper-V Virtual Switch Extension Protocol
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Eclipse Adoptium\jdk-25.0.4.101-hotspot\bin;C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Git\cmd;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\nodejs\;C:\Program Files (x86)\Microsoft SQL Server\160\Tools\Binn\;C:\Program Files\Microsoft SQL Server\160\Tools\Binn\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\Microsoft SQL Server\160\DTS\Binn\;C:\Program Files\NVIDIA Corporation\NVIDIA App\NvDLISR
HKU\S-1-5-21-629165207-329108147-321633127-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img19.jpg
HKU\S-1-5-21-629165207-329108147-321633127-1004\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\micha\AppData\Local\JetBrains\PyCharm2024.3
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\micha\PycharmProjects\PythonProject
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\micha\AppData\Local\JetBrains\PyCharm2026.2
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\micha\Documents\VS code\Programovanie
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\StartupApproved\Run: => "Zoner Photo Studio Autoupdate"
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\StartupApproved\Run: => "Advanced SystemCare"
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\StartupApproved\Run: => "Steam"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{DF58609B-7294-4D7B-8E9A-A4EABA727F0B}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{8A3BB187-468E-4D84-9792-02A814D0A23C}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{E9F3CA92-CAD3-46F6-BDA4-C9D733553497}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{CD4A55A3-AC69-4910-B11D-11764353D2A1}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{4F08CF52-B016-4A68-944C-1304C9C0BE35}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{C229CA86-D1D2-4089-A45B-2E31E803BAF1}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{22EC3136-CADE-4416-9D77-F40268D55AD2}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{3B848BF1-A2CB-49D8-BEDD-6E15C4BDB929}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{A9C2A7E2-75FE-4C61-8B15-6FCD44513AE3}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{9BA38FE3-625C-482A-AA42-5A3E587E9149}] => (Allow) C:\altera_lite\24.1std\quartus\bin64\jtagserver.exe (Intel Corporation -> )
FirewallRules: [{CDC7E3CF-0913-443D-B034-4B13FE945DBD}] => (Allow) C:\altera_lite\24.1std\quartus\bin64\jtagserver.exe (Intel Corporation -> )
FirewallRules: [UDP Query User{6264AA5D-B828-45B4-9C38-476B6ABBA4CC}C:\users\micha\appdata\local\programs\microsoft vs code\code.exe] => (Allow) C:\users\micha\appdata\local\programs\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{C84D22BD-AEBD-42E4-A9DC-6947F10F065C}C:\users\micha\appdata\local\programs\microsoft vs code\code.exe] => (Allow) C:\users\micha\appdata\local\programs\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6D9F35F0-BE4F-4C24-A281-9E2D98515541}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E218B530-FBFA-4BFF-9509-96B3AE7AE066}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A76F343F-1BA3-414B-B8DF-45F5D1C3607C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{7A1B89FA-3F6D-4785-AF06-3981E3752D31}C:\users\micha\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Block) C:\users\micha\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe (Microsoft) [File not signed]
FirewallRules: [TCP Query User{0BF04AF7-A50D-4D11-B1B9-FD780B9942A0}C:\users\micha\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Block) C:\users\micha\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe (Microsoft) [File not signed]
FirewallRules: [UDP Query User{955B0EFF-70AD-4BF1-9D8F-A692F5AF1813}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe
FirewallRules: [TCP Query User{1385B21F-5EE5-4C82-9C08-A875DFABDB96}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{466D89BF-57D5-497C-A28E-009030F811F1}C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
FirewallRules: [TCP Query User{FD5AFA73-86C4-4502-91C2-63D194528B74}C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
FirewallRules: [{0079FFA1-04DF-49EC-BFEA-0159DACF5286}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\tf_win64.exe (Valve Corp. -> )
FirewallRules: [{A9FD8FFA-A5E5-48EE-88A7-8103FF00FEC6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\tf_win64.exe (Valve Corp. -> )
FirewallRules: [{D68C58E7-18EA-4EB7-AADC-81A3B15C643A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FC19E3FB-575A-4E41-BD11-A873614D4B8A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{BA657413-DCCD-47FB-8C85-1EBCF77FCABA}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D59041B2-4235-4F79-9BD3-4F35CD5DD34B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{690FB62C-0104-4F91-9564-052D0DECF7B8}] => (Allow) C:\Program Files\Zoner\Photo Studio 17\Program32\MediaServer.exe (ZONER software, a.s. -> ZONER software)
FirewallRules: [{8DD5E146-CF27-437A-B71E-91670CE49436}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25045.406.3471.2143_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{423D4BF7-1011-4C23-8ADD-A1653A9CF26C}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25045.406.3471.2143_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CD7A12EC-7BF8-402D-94E5-C807820A22BC}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25045.406.3471.2143_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7C1E29A3-A2F7-4A58-A786-A31F2BAD7E82}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25045.406.3471.2143_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{17A3E8BB-677A-4DB7-9BDE-18859E4771EE}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{C8E490EA-ABD8-4638-B233-62A6AA0087A2}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [TCP Query User{C31D6E99-A40C-4188-8CE3-FBABB1B80AC0}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe (OpenJS Foundation -> Node.js)
FirewallRules: [UDP Query User{E0DD0F5D-A3D3-455F-B33E-B06F4AF20617}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe (OpenJS Foundation -> Node.js)
FirewallRules: [TCP Query User{E2139229-33FE-4DC7-9EF8-F55763007F14}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{05C1A0D5-7487-4773-AE49-E36C9935A124}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{663AEA2F-902E-4D19-B03D-30B8EA05516C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BloonsTD6\BloonsTD6.exe () [File not signed]
FirewallRules: [{A0318B35-EA48-4522-9114-BE58F0BC1777}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BloonsTD6\BloonsTD6.exe () [File not signed]
FirewallRules: [{9B4DDA2C-B943-45DF-81AE-A47D7B2C45D0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Inscryption\Inscryption.exe () [File not signed]
FirewallRules: [{C5223E68-0BE9-4A0A-9EBB-DB3C3F4B9051}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Inscryption\Inscryption.exe () [File not signed]
FirewallRules: [TCP Query User{974BE155-2FD5-471D-AFE5-31B63D802B25}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.91-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.91-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{60667E24-5E05-4E53-B44B-1B5300B35445}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.91-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.91-windows-x64\bin\java.exe
FirewallRules: [TCP Query User{7BC9EDFE-4379-42A1-88D2-79FECCBEC20E}C:\users\micha\appdata\local\postman\app-12.2.0\postman.exe] => (Allow) C:\users\micha\appdata\local\postman\app-12.2.0\postman.exe (Postman, Inc. -> Postman)
FirewallRules: [UDP Query User{42798A19-790A-4050-9CDA-02EBC1913352}C:\users\micha\appdata\local\postman\app-12.2.0\postman.exe] => (Allow) C:\users\micha\appdata\local\postman\app-12.2.0\postman.exe (Postman, Inc. -> Postman)
FirewallRules: [TCP Query User{C1934F5D-3240-405A-9ED7-9836518E78E0}C:\program files\edb\pem\httpd\apache\bin\httpd.exe] => (Allow) C:\program files\edb\pem\httpd\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [UDP Query User{A70B10F8-A673-42FA-B2BD-4D5851843A3E}C:\program files\edb\pem\httpd\apache\bin\httpd.exe] => (Allow) C:\program files\edb\pem\httpd\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [{1C386E3F-FCFC-4FEF-8DA5-90989988298A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{68886664-64C1-4974-9E1A-5B91E2AD576C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FDAC9348-8BAB-4ACB-8054-4841C876F6EA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{B9CFEE85-6C8E-4E9F-B61B-D4D7F7292FE0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{BC3C20F2-CC01-4F44-9AF6-D6A40437478A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe (Paradox Interactive AB (publ) -> Paradox Interactive)
FirewallRules: [{5BEE4A46-9869-43DF-885E-30BEC850EF40}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe (Paradox Interactive AB (publ) -> Paradox Interactive)
FirewallRules: [TCP Query User{3E53E240-DDFC-4429-BA57-31E02875C4FE}C:\program files\cisco packet tracer 9.0.0\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 9.0.0\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
FirewallRules: [UDP Query User{0A502970-5CFD-4326-AA9F-1745BD8CE7B6}C:\program files\cisco packet tracer 9.0.0\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 9.0.0\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
FirewallRules: [{CD8A6D21-1AB9-487A-B125-6276D7D6A004}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_26072.402.4558.5431_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FA0D22F1-1082-464C-B429-44474A28FA37}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_26072.402.4558.5431_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{BC05DBB9-0EF3-4BD4-B3BF-383B52C3C652}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{110D9115-0DF8-4492-A0F5-F697171661CC}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
FirewallRules: [{AA04BA89-6F7D-4BB2-B525-E3D748A22C48}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe (Valve Corp. -> )
FirewallRules: [{DF7A39F8-38D4-47B4-B820-6690C00BFD70}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe (Valve Corp. -> )
FirewallRules: [{7D8B1522-3D1D-4C9A-8D88-7816B099449E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe () [File not signed]
FirewallRules: [{DDBE5966-D598-4F25-9B65-26EA4A94DF30}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe () [File not signed]
FirewallRules: [TCP Query User{16F2F205-F63B-4297-B5BD-BB27AA2E15DA}C:\users\micha\appdata\local\programs\intellij idea 2026.2.2\bin\idea64.exe] => (Allow) C:\users\micha\appdata\local\programs\intellij idea 2026.2.2\bin\idea64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [UDP Query User{582E622B-BA3F-40EE-AE7E-5BA915276028}C:\users\micha\appdata\local\programs\intellij idea 2026.2.2\bin\idea64.exe] => (Allow) C:\users\micha\appdata\local\programs\intellij idea 2026.2.2\bin\idea64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{99EA7900-62D7-4DB3-A1AA-5016BE873971}C:\program files\jetbrains\pycharm 2026.2.2\bin\pycharm64.exe] => (Allow) C:\program files\jetbrains\pycharm 2026.2.2\bin\pycharm64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [UDP Query User{FBDE3CF4-9FC5-4C9B-A52F-641F8E8F135E}C:\program files\jetbrains\pycharm 2026.2.2\bin\pycharm64.exe] => (Allow) C:\program files\jetbrains\pycharm 2026.2.2\bin\pycharm64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{B195982F-1321-4028-95DC-5102B1B4E365}C:\users\micha\appdata\local\android\sdk\platform-tools\adb.exe] => (Allow) C:\users\micha\appdata\local\android\sdk\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [UDP Query User{B4903444-8D65-4593-8DA4-2C53F294AEB8}C:\users\micha\appdata\local\android\sdk\platform-tools\adb.exe] => (Allow) C:\users\micha\appdata\local\android\sdk\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [TCP Query User{D41385FC-5BDB-4DB4-A6C9-4EBD879BA9D4}C:\program files\eclipse adoptium\jdk-25.0.4.101-hotspot\bin\java.exe] => (Block) C:\program files\eclipse adoptium\jdk-25.0.4.101-hotspot\bin\java.exe
FirewallRules: [UDP Query User{4FC53775-D291-465F-85BF-11C30E7B0BDE}C:\program files\eclipse adoptium\jdk-25.0.4.101-hotspot\bin\java.exe] => (Block) C:\program files\eclipse adoptium\jdk-25.0.4.101-hotspot\bin\java.exe
FirewallRules: [{08A23015-74A4-4559-9EDF-62CED49645F9}] => (Allow) C:\Users\micha\AppData\Local\Programs\Opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{1D285236-7F51-4CFE-9A1F-15C71E47F0F3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SWAT Commander\SWATCommander.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{99572972-C58E-49DE-80E1-2E7F255E4108}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SWAT Commander\SWATCommander.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{A660BF8C-40DE-4A11-AB0A-3737334194A1}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\copilotapp.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C63C2341-225A-43E4-91AB-884F166A7AEE}] => (Allow) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
FirewallRules: [{359580F3-C26C-4991-9D35-80A79ECEB38B}] => (Allow) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
FirewallRules: [{32825F58-FCFB-4273-8E85-49AF8A6D5DB1}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{D935F929-6D12-4B83-9063-C1458DDA00B9}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{055BCF61-E858-4B11-9C40-E23FEBCC6BD6}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe (Gen Digital Inc. -> Gen Digital Inc.)
==================== Restore Points =========================
05-11-2026 21:00:00 Windows Update
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (11/06/2026 07:13:15 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Názov chybnej aplikácie: UDClientService.exe, verzia: 26.8.0.29, časová značka: 0x6a8d70b8
Názov modulu s poruchou: DeployAgent.dll, verzia: 26.8.0.29, časová značka: 0x6a8d6fde
Kód výnimky: 0xc0000005
Odchýlka poruchy: 0x0000000000002c97
Id poruchového procesu: 0x2048
Čas spustenia poruchovej aplikácie: 0x1dd6ba4ff20882d
Cesta k poruchovej aplikácii: C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe
Cesta k poruchovému modulu: C:\WINDOWS\System32\drivers\Lenovo\udc\Service\DeployAgent.dll
Id správy: 521bb7e1-3c55-4049-963f-098e1fb6596b
Plný názov chybného balíka:
Identifikátor poruchovej aplikácie vzťahujúci sa na balík:
Error: (11/05/2026 02:08:17 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 12) (User: MICHAL)
Description: Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy-2147023878
Error: (11/05/2026 09:57:40 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: Local Hostname Michal.local already in use; will try Michal-2.local instead
Error: (11/05/2026 09:57:40 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 Michal.local. Addr 10.106.69.68
Error: (11/05/2026 09:57:40 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 10.106.69.74:5353 16 Michal.local. AAAA FE80:0000:0000:0000:415E:85F2:ADA6:0609
Error: (11/05/2026 09:57:39 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 16 Michal.local. AAAA FE80:0000:0000:0000:C3DE:5D41:8B06:0F7A
Error: (11/05/2026 09:57:39 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 10.106.69.74:5353 4 Michal.local. Addr 10.106.69.74
Error: (11/05/2026 09:57:39 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 4 Michal.local. Addr 10.106.69.68
System errors:
=============
Error: (11/06/2026 07:13:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Universal Device Client Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 60000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.
Error: (11/06/2026 07:07:13 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: An unexpected error was encountered attempting to retrieve the BitLocker volume master key during restart.
Error: (11/06/2026 07:07:13 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: An unexpected error was encountered attempting to retrieve the BitLocker volume master key during restart.
Error: (11/05/2026 09:00:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Zlyhanie inštalácie: Systému Windows sa nepodarilo nainštalovať nasledujúcu aktualizáciu. Vyskytla sa chyba (0x80073d02 = The package could not be installed because resources it modifies are currently in use.): 9WZDNCRFJ4MV-E046963F.LENOVOCOMPANION.
Error: (11/05/2026 06:10:48 PM) (Source: DCOM) (EventID: 10010) (User: MICHAL)
Description: The server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter did not register with DCOM within the required timeout.
Error: (11/05/2026 06:00:31 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: An unexpected error was encountered attempting to retrieve the BitLocker volume master key during restart.
Error: (11/05/2026 06:00:31 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: An unexpected error was encountered attempting to retrieve the BitLocker volume master key during restart.
Error: (11/05/2026 02:10:11 PM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
Windows Defender:
================
TimeCreated : 1. 11. 2026 20:00:50
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {11C7DF50-2C6A-4D1F-81B9-D0F608533C6D}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: RPC connection rundown
TimeCreated : 29. 10. 2026 19:04:18
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {23E5FAA9-7936-44F6-96BD-5281FB87A422}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: RPC connection rundown
TimeCreated : 29. 10. 2026 18:36:19
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {11F749F6-5B26-432D-B9D3-67384874EACE}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: RPC connection rundown
TimeCreated : 28. 10. 2026 16:21:18
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {B434AF80-F64B-46F4-BD3C-1651CF91051F}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days
TimeCreated : 25. 10. 2026 21:55:06
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {A98041B3-BFB0-4805-A31B-764D2C72F54A}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days
TimeCreated : 20. 10. 2026 18:59:41
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {2426E4B8-50AD-44D0-8906-84E41F7F8732}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days
TimeCreated : 18. 10. 2026 18:40:43
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {2707F598-45AF-4131-99F9-BD11EE07EF2C}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days
CodeIntegrity:
===============
Date: 2026-11-04 10:59:16
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe) attempted to load \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\AudioDevProps2.dll that did not meet the Microsoft signing level requirements.
Date: 2026-11-02 15:13:44
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Avast Software\Avast\AvastSvc.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2026-10-31 21:53:28
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\UUS\amd64\WaaSMedicAgent.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.
Date: 2026-10-28 17:14:56
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\155.0.4283.62\msedgewebview2.exe) attempted to load \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\AudioDevProps2.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: LENOVO H3CN47WW(V3.05) 04/15/2024
Motherboard: LENOVO LNVNB161216
Processor: AMD Ryzen 5 5500H with Radeon Graphics
Percentage of memory in use: 51%
Total physical RAM: 15724.06 MB
Available physical RAM: 7642.48 MB
Total Virtual: 45892.82 MB
Available Virtual: 32494.77 MB
==================== Drives ================================
Disk 0 - Drive c: (Windows-SSD) (Fixed) (Total:474.72 GB) (Free:94.75 GB) (Model: Micron MTFDKCD512QFM-1BD1AABLA) (Protected) NTFS
Disk 0 - \\?\Volume{8831c590-bb6f-4454-9847-71cf171e7858}\ (WINRE_DRV) (Fixed) (Total:1.95 GB) (Free:1.14 GB) NTFS
Disk 0 - \\?\Volume{c1558bfc-d20b-413d-be21-da047cfabd15}\ (SYSTEM_DRV) (Fixed) (Total:256 MB) (Free:217.92 MB) FAT32
==================== MBR & Partition Table ====================
============================================================
Disk: 0 (Size: 476.94 GB) (Disk ID: 34F54B0C)
Partitions:
===========
Partition Style : GPT
Partition Count : 4
Disk ID : {FA270037-248E-4B70-8A9D-FB3028657F61}
Usable Offset : 0.02 MB
Usable Length : 476.94 GB
Max Partitions : 128
Partition 1
Type : EFI System Partition
Size : 260 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {C1558BFC-D20B-413D-BE21-DA047CFABD15}
GPT Name : EFI system partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 261 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {278ED644-18D5-4FCA-9342-2F3A2B617824}
GPT Name : Microsoft reserved partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 474.72 GB
Offset : 277 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {CD51B503-9B86-4127-91C0-E68A1B8F7A47}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 1.95 GB
Offset : 486386 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {8831C590-BB6F-4454-9847-71CF171E7858}
GPT Name : Basic data partition
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
============================================================
==================== End of Addition.txt =======================
Ran by micha (06-11-2026 19:21:30)
Running from C:\Users\micha\Desktop
Microsoft Windows 11 Home Version 26H2 26300.9818 (X64) (2025-09-22 15:26:26)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-629165207-329108147-321633127-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-629165207-329108147-321633127-503 - Limited - Disabled)
Guest (S-1-5-21-629165207-329108147-321633127-501 - Limited - Disabled)
micha (DisplayName: M****** J) (S-1-5-21-629165207-329108147-321633127-1001 - Administrators - Enabled) [MS Account] => C:\Users\micha
WDAGUtilityAccount (S-1-5-21-629165207-329108147-321633127-504 - Limited - Disabled)
WsiAccount (S-1-5-21-629165207-329108147-321633127-1004 - Limited - Disabled) => C:\Users\WsiAccount
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: McAfee (Enabled - Up to date) {0BE13B34-492A-21C0-AE43-C1742279CCB6}
FW: McAfee (Enabled) {33DABA11-0345-2098-851C-6841DCAA8BCD}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Android Studio (HKLM\...\Android Studio) (Version: 2026.1 - Google LLC)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 26.10.11201.3859 - Gen Digital Inc.)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 154.0.35638.100 - Autori prehliadača Avast Secure Browser)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
AVG Driver Updater (HKLM\...\AVG Driver Updater) (Version: 26.9.6925.16748 - Gen Digital Inc.)
Browser for SQL Server 2022 (HKLM-x32\...\{FDB357D5-CC78-480A-8D26-C15D1A877642}) (Version: 16.0.1000.6 - Microsoft Corporation)
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.13.1591.2041 - Piriform)
Cisco Packet Tracer 8.2.2 64Bit (HKLM\...\Cisco Packet Tracer 8.2.2 64Bit_is1) (Version: 8.2.2.400 - Cisco Systems, Inc.)
Cisco Packet Tracer 9.0.0 64Bit (HKLM\...\Cisco Packet Tracer 9.0.0 64Bit_is1) (Version: 9.0.0.810 - Cisco Systems, Inc.)
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 156.0.4314.58 - Microsoft Corporation)
DiagnosticsHub_CollectionService (HKLM\...\{C762588C-06DE-496A-8ADF-EBDBD49E37B5}) (Version: 17.14.36412 - Microsoft Corporation) Hidden
Discord (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Discord) (Version: 1.0.9267 - Discord Inc.)
Eclipse Temurin JDK with Hotspot 25.0.4.1+1 (x64) (HKLM\...\{43C4DD34-D4BD-4A01-B688-3D8EAAABD8BC}) (Version: 25.0.4.101 - Eclipse Adoptium)
eLynx lab v2.2.7 (HKLM-x32\...\eLynx lab_is1) (Version: - eLynx project)
Epic Games Launcher (HKLM-x32\...\{6CD543FB-BFB8-47DC-8320-12A0885B94E2}) (Version: 1.3.155.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{E81CA011-E9A8-42B8-A4C0-11F66BE56D6C}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{8CD570F8-C05E-4B41-8EAB-24329D11928D}) (Version: 4.0.1 - Epic Games, Inc.)
Git (HKLM\...\Git_is1) (Version: 2.51.0 - The Git Development Community)
HI-TECH C Compiler for the PIC10/12/16 MCUs V9.82PL0 (HKLM-x32\...\PICC 9.82) (Version: 9.82 - HI-TECH Software)
HI-TECH C51-lite V9.60PL0 (HKLM-x32\...\HC51 9.60PL0) (Version: 9.60 - HI-TECH Software)
IntelliJ IDEA 2026.2.2 (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\IntelliJ IDEA 2026.2.2) (Version: 262.10315.125 - JetBrains s.r.o.)
Java 8 Update 503 (64-bit) (HKLM\...\{77124AE4-039E-4CA4-87B4-2F64180503F0}) (Version: 8.0.5030.1 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{60e762c3-a30e-4a24-ac32-35fc9aa84805}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Legion Arena (HKLM-x32\...\Legion Arena_is1) (Version: 1.3.1.1 - Lenovo Group Ltd.)
Lenovo Now (HKLM-x32\...\{622FA116-13E7-4BB6-839C-A3E0E3ECDFE6}_is1) (Version: 4.8.0.54 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 5.1.2609.9 - Lenovo Group Ltd.)
Microsoft 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft 365 - sk-sk (HKLM\...\O365HomePremRetail - sk-sk) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 156.0.4314.58 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 156.0.4314.58 - Microsoft Corporation) Hidden
Microsoft ODBC Driver 17 for SQL Server (HKLM\...\{0E0F96AC-80DE-4400-A40C-429D63293651}) (Version: 17.10.6.1 - Microsoft Corporation)
Microsoft Office 2016 Professional Plus - sk-sk (HKLM\...\ProPlusRetail - sk-sk) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft OLE DB Driver for SQL Server (HKLM\...\{76EB75D2-CCF6-41A9-90B6-922DE9146276}) (Version: 18.7.4.0 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.198.1011.0006 - Microsoft Corporation)
Microsoft OneNote - cs-cz (HKLM\...\OneNoteFreeRetail - cs-cz) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft OneNote - en-us (HKLM\...\OneNoteFreeRetail - en-us) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft OneNote - sk-sk (HKLM\...\OneNoteFreeRetail - sk-sk) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft SQL Server 2022 (64-bit) (HKLM\...\Microsoft SQL Server SQL2022) (Version: - Microsoft Corporation)
Microsoft SQL Server 2022 RsFx Driver (HKLM\...\{629C8FC9-3763-4C58-8264-5288AE34AFEF}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
Microsoft SQL Server 2022 Setup (English) (HKLM\...\{BF4D8C4B-D931-4D62-A7ED-8A34B2FC0D1B}) (Version: 16.0.1000.6 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.26.25904 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.145.0 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 3.14.2086.54749 - Microsoft Corporation)
Microsoft Visual Studio Setup Configuration (HKLM-x32\...\{D07657AA-968C-4629-BD6C-1B52AF825EA7}) (Version: 3.12.2140.44225 - Microsoft Corporation) Hidden
Microsoft Visual Studio Setup WMI Provider (HKLM-x32\...\{49727420-70BA-4495-9405-31F8D711CB5A}) (Version: 3.12.2140.44225 - Microsoft Corporation) Hidden
Microsoft VSS Writer for SQL Server 2022 (HKLM\...\{AB5D8778-81F3-47E2-87A4-35E776CD664B}) (Version: 16.0.1000.6 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
National Instruments Software (HKLM-x32\...\NI Uninstaller) (Version: - National Instruments)
Node.js (HKLM\...\{0463EF6C-7AE0-4657-970D-FD4634A98A35}) (Version: 22.20.0 - Node.js Foundation)
NVIDIA App 11.0.9.565 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.9.565 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.9.12728.38614306 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.9.12728.38614306 - NVIDIA Corporation)
NVIDIA Grafický ovládač 555.99 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 555.99 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{46ED2B64-85C7-4E1F-920C-A555B21F2E4C}) (Version: 9.11.1111 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.19127.20154 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.19029.20208 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.7571.2072 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.7571.2072 - Microsoft Corporation) Hidden
Opera Stable 139.0.6053.38 (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Opera 139.0.6053.38) (Version: 139.0.6053.38 - Opera Software)
Oracle VirtualBox 7.2.16 (HKLM\...\{0BAEEEB4-2170-4A32-ACA3-691102D224E8}) (Version: 7.2.16 - Oracle and/or its affiliates)
Paradox Launcher v2 (HKLM\...\{BCBAAF27-1C19-48A5-8DEF-258E46D93FE0}) (Version: 2.4.0 - Paradox Interactive)
PEM-HTTPD 2.4.65 (HKLM\...\PEM-HTTPD 2.4.65-1) (Version: 2.4.65-1 - EnterpriseDB)
PostgreSQL 18 (HKLM\...\PostgreSQL 18) (Version: 18.3-2 - PostgreSQL Global Development Group)
Postman x64 12.2.0 (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Postman) (Version: 12.2.0 - Postman)
PyCharm 2026.2.2 (HKLM\...\PyCharm 2026.2.2) (Version: 262.10315.174 - JetBrains s.r.o.)
Python 3.12.6 (64-bit) (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\{316e3b12-1191-47df-b9d4-dcf0bf2f6cc4}) (Version: 3.12.6150.0 - Python Software Foundation)
Python 3.12.6 Core Interpreter (64-bit) (HKLM\...\{901B913C-FA63-48D2-9842-7D7676739378}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Development Libraries (64-bit) (HKLM\...\{2F4E9933-7587-4D85-9BA1-F2903AFB36D8}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Documentation (64-bit) (HKLM\...\{46673E63-1CA8-43EA-B73B-AC20DDD77C5A}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Executables (64-bit) (HKLM\...\{537B2AF5-504B-4303-99CB-FDE56F47AA51}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 pip Bootstrap (64-bit) (HKLM\...\{1D520CE1-F09A-4A26-B110-52081FEA0AB9}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Standard Library (64-bit) (HKLM\...\{1DAEF824-881A-49C6-B91E-1D28877FF18D}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Tcl/Tk Support (64-bit) (HKLM\...\{08A1963D-07D1-4620-929C-385F6A307772}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Test Suite (64-bit) (HKLM\...\{3334B843-864F-4F04-A635-5D2FD5840AD5}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.14.7 (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\pymanager-pythoncore-3.14-64) (Version: 3.14-64 - Python Software Foundation)
Python Launcher (HKLM-x32\...\{C7213DDA-56FA-4C9E-BA0C-1C907366F456}) (Version: 3.13.2150.0 - Python Software Foundation)
Quartus Prime Lite Edition (Free) 24.1std.0.1077 (HKLM\...\Quartus Prime Lite Edition (Free) 24.1std.0.1077) (Version: 24.1std - Altera Corporation)
SQL Server 2022 Batch Parser (HKLM\...\{7EFD8B19-A9E6-41CF-A96F-B9B6E30EC345}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Common Files (HKLM\...\{6A68D32C-4C0D-4847-B70C-58E6B4D76A12}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Common Files (HKLM\...\{8770AF64-BB4B-4404-BDD6-6AF8E4C461FC}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Connection Info (HKLM\...\{770DA7F2-817B-4AA6-9160-08BB658ABDC6}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Connection Info (HKLM\...\{EAC54B82-7A37-4A9E-8953-474316BD40F6}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Database Engine Services (HKLM\...\{6621C765-569C-4D46-A8E9-C69A47971357}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Database Engine Services (HKLM\...\{C4CF167C-4739-4A3A-8D75-59C9C5F135CA}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Database Engine Shared (HKLM\...\{161B8D12-C41B-4ACF-9BB5-E1FEE6788869}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Database Engine Shared (HKLM\...\{D6E82158-05B9-4A18-A624-EA135BC77766}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 DMF (HKLM\...\{5AB77D4E-9E5F-4627-B78B-129A5EC2858A}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 DMF (HKLM\...\{DCA0C2D6-83BF-41AE-B1AB-C4181002DE40}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Shared Management Objects (HKLM\...\{12618131-AA9A-4DAE-9387-CE4417955B9F}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Shared Management Objects (HKLM\...\{6F8242AA-1B25-421C-8E45-FC5978D9AA3A}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Shared Management Objects Extensions (HKLM\...\{35EC6145-E333-42DB-BCB3-380DF6140C11}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Shared Management Objects Extensions (HKLM\...\{A0F7ACBA-075F-4BC7-A85A-5DC301FCEC74}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 SQL Diagnostics (HKLM\...\{0CEFE958-E71A-4171-9DEF-77E9234A5613}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 XEvent (HKLM\...\{94AEB0A0-365C-449B-B573-D2ECB353EB06}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 XEvent (HKLM\...\{BD8B7339-7559-4FC3-95E6-264324D45235}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server Management Studio 21 (HKLM-x32\...\04513577) (Version: 21.6.17 - Microsoft Corporation)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Sublime Text (HKLM\...\Sublime Text_is1) (Version: - Sublime HQ Pty Ltd)
TLauncher (HKLM-x32\...\TLauncher) (Version: 2.9316 - TLauncher Inc.)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.51 - Ghisler Software GmbH)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)
vs_communitymsires (HKLM-x32\...\{2817364B-A3DE-472C-BF19-F19B6997061F}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_communitysharedmsi (HKLM-x32\...\{71498EE6-F94E-4061-9DD5-55925CA8A74F}) (Version: 17.14.36025 - Microsoft Corporation) Hidden
vs_communityx64msi (HKLM\...\{3873679C-FA03-4101-97E9-107D67C568B8}) (Version: 17.14.36025 - Microsoft Corporation) Hidden
vs_CoreEditorFonts (HKLM-x32\...\{1851460E-0E63-4117-B5BA-25A2F045801B}) (Version: 17.7.40001 - Microsoft Corporation)
vs_filehandler_amd64 (HKLM-x32\...\{22EE1419-B47E-44B8-A635-868746946079}) (Version: 17.14.36024 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{6C7D0172-7367-4F0C-95DB-6021765B58EA}) (Version: 17.14.36024 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{D331F4E7-BC3B-47BE-BB56-5F33895F9347}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_githubprotocolhandlermsi (HKLM-x32\...\{29297AFE-9D24-4DFE-ACAF-D90090D905CF}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_minshellinteropsharedmsi (HKLM-x32\...\{537F07C8-0EC6-41A5-BB91-750FA3CAA110}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_minshellinteropx64msi (HKLM\...\{B797608C-8536-46EF-95D8-8474139EA43A}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{EC049978-2176-47C6-B99B-2C64AD6F6828}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_minshellsharedmsi (HKLM-x32\...\{F6E69DD8-7652-4CC6-8A4F-485A16012B5B}) (Version: 17.14.36024 - Microsoft Corporation) Hidden
vs_minshellx64msi (HKLM\...\{51FD170D-69D2-4D5E-A9D1-53FD1F394FD7}) (Version: 17.14.36301 - Microsoft Corporation) Hidden
vs_ssmsprotocolselectormsi (HKLM-x32\...\{73328FDB-39A8-4A80-B933-805F1B233F94}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_vswebprotocolselectormsi (HKLM-x32\...\{B4B3AA16-E828-4577-A9F2-629E1A95FE4A}) (Version: 17.14.36323 - Microsoft Corporation) Hidden
Windows Driver Package - Altera (WinUSB) JTAG cables (10/13/2018 ) (HKLM\...\39825C61306F438661AC1C2E61A69F2BF353552A) (Version: 10/13/2018 - Altera)
Zoner Photo Studio 17 (HKLM\...\ZonerPhotoStudio17_SK_is1) (Version: 17.0.1.12 - ZONER software)
Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m [2025-08-10] (Advanced Micro Devices Inc.) [Startup Task]
Dropbox promotion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.38.0_x64__xbfy0k16fey96 [2026-07-28] (Dropbox Inc.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.7.18.0_x64__5grkq8ppsgwt4 [2025-05-17] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2608.43.0_x64__k1h2ywk1493x8 [2026-09-23] (LENOVO INC.)
LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_3.0.43.0_x64__w1wdnht996qgy [2026-02-06] (LinkedIn) [Startup Task]
Local Artificial Intelligence Manager -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2025-09-13] ()
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-03-17] (Microsoft Corp.)
Microsoft Journal -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJournal_1.0.127.0_x64__8wekyb3d8bbwe [2025-12-15] (Microsoft Corporation)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_56.20201.588.0_x64__8wekyb3d8bbwe [2026-02-18] (Microsoft Corporation)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2025-12-08] ()
Nahimic -> C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.15.0_x64__w2gh52qy24etm [2026-09-10] (A-Volute)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-06] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2025-12-08] ()
Python Install Manager -> C:\Program Files\WindowsApps\PythonSoftwareFoundation.PythonManager_26.4.240.0_x64__3847v3x7pw1km [2026-10-13] (Python Software Foundation)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.50.323.0_x64__dt26b99r8h8gj [2025-09-15] (Realtek Semiconductor Corp)
Visual Studio Code -> C:\Users\micha\AppData\Local\Programs\Microsoft VS Code\a717861c07\appx [2026-11-04] ()
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.6.4.0_x64__8wekyb3d8bbwe [2026-11-03] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-629165207-329108147-321633127-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\micha\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (SteelSeries France SASU -> A-Volute)
CustomCLSID: HKU\S-1-5-21-629165207-329108147-321633127-1001_Classes\CLSID\{BEA218D2-6950-497B-9434-61683EC065FE}\InprocServer32 -> C:\Users\micha\AppData\Local\Programs\Python\Launcher\pyshellext.amd64.dll (Python Software Foundation -> Python Software Foundation)
CustomCLSID: HKU\S-1-5-21-629165207-329108147-321633127-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\micha\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.26.25904\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-629165207-329108147-321633127-1001_Classes\CLSID\{FAD9FE0A-F40E-4CEF-B3AB-A26F1EFEA56C}\localserver32 -> C:\Users\micha\AppData\Local\Discord\app-1.0.9267\Discord.exe (Discord Inc. -> Discord Inc.)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> No File
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_360580ba71c61256\nvshext.dll [2026-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2012-01-26 09:36 - 2012-01-26 09:36 - 000278528 ____R () [File not signed] C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\xerces-depdom_2_6.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000602624 _____ () [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\pcre2-8.dll
2025-03-16 11:27 - 2014-09-09 12:30 - 000603648 _____ () [File not signed] C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\SpiderMonkey.dll
2024-06-02 04:17 - 2024-06-02 04:17 - 000000000 ____L () [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2024-06-02 04:17 - 2024-06-02 04:17 - 000000000 ____L () [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
2012-01-26 09:36 - 2012-01-26 09:36 - 002359296 ____R (Apache Software Foundation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\xerces-c_2_6.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000217600 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\libapr-1.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000036864 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\libapriconv-1.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000301056 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\libaprutil-1.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000467456 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\libhttpd.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000016896 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_access_compat.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000015360 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_actions.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000022016 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_alias.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000013312 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_allowmethods.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000014336 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_asis.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000018432 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_auth_basic.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000017408 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authn_core.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000015872 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authn_file.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000024576 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authz_core.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000016896 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authz_groupfile.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000017408 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authz_host.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000013312 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authz_user.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000038912 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_autoindex.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000027648 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_cgi.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000016384 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_dir.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000014336 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_env.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000050176 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_include.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000030720 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_isapi.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000032256 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_log_config.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000023552 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_mime.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000036352 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_negotiation.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000018432 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_setenvif.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000025600 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_socache_shmcb.so
2026-11-06 19:15 - 2026-11-06 19:15 - 000394240 _____ (Google Inc.) [File not signed] C:\Users\micha\AppData\Local\Temp\scoped_dir25148_331441044\gcapi.dll
2014-05-15 10:19 - 2014-05-15 10:19 - 001409024 _____ (National Instruments Corp.) [File not signed] C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\nilmClient.dll
2015-06-01 21:16 - 2015-06-01 21:16 - 000560640 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\LogosXT\nilxtcor.dll
2015-06-01 21:17 - 2015-06-01 21:17 - 000227840 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\LogosXT\nipspxts.dll
2014-06-19 22:21 - 2014-06-19 22:21 - 000218624 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI System Configuration\nisyscfgExpert.dll
2015-05-14 14:46 - 2015-05-14 14:46 - 000033792 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libappweb.dll
2015-04-28 10:37 - 2015-04-28 10:37 - 000057856 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libappwebcore.dll
2015-04-28 10:37 - 2015-04-28 10:37 - 000153088 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libhttp.dll
2015-04-28 10:37 - 2015-04-28 10:37 - 000175616 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libmpr.dll
2015-04-28 10:37 - 2015-04-28 10:37 - 000091136 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libpcre.dll
2015-06-02 16:52 - 2015-06-02 16:52 - 000270336 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niauth.dll
2015-02-06 16:10 - 2015-02-06 16:10 - 000033792 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niconf.dll
2015-02-06 16:10 - 2015-02-06 16:10 - 000056832 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niesp.dll
2015-06-03 08:53 - 2015-06-03 08:53 - 000247296 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_nisessmgr.dll
2015-06-03 08:54 - 2015-06-03 08:54 - 000570880 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niws.dll
2015-06-03 08:54 - 2015-06-03 08:54 - 000413184 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ws_runtime.dll
2015-06-02 16:52 - 2015-06-02 16:52 - 000456704 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NIAuth\niauth.dll
2015-06-02 16:50 - 2015-06-02 16:50 - 000264704 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NIAuth\niPortableRegistry.dll
2015-04-07 11:32 - 2015-04-07 11:32 - 001056768 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\nissl\NIlibeay32.dll
2015-04-07 13:21 - 2015-04-07 13:21 - 000237568 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\nissl\NIssleay32.dll
2015-06-02 17:07 - 2015-06-02 17:07 - 000097280 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\nissl\nisslinit.dll
2015-06-01 21:01 - 2015-06-01 21:01 - 000257024 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\Security\nidm_client_thinauth.dll
2015-06-03 08:50 - 2015-06-03 08:50 - 000095232 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\TraceEngine\ni_traceengine.dll
2015-05-14 14:12 - 2015-05-14 14:12 - 000134656 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSAuthSvc\niauthsvc.dll
2015-06-08 10:59 - 2015-06-08 10:59 - 000030208 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSDeploySvc\deploysvc.dll
2015-06-02 17:07 - 2015-06-02 17:07 - 000194048 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSSSLAdmin\ssladminsvc.dll
2015-06-02 17:07 - 2015-06-02 17:07 - 000093696 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSSslAdmin\ssladminsvc_logos.dll
2015-06-03 08:53 - 2015-06-03 08:53 - 000221184 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSSysAdmin\sysadminsvc.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_503\bin\ssv.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_503\bin\jp2ssv.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2022-05-07 06:24 - 2026-11-03 16:07 - 000001022 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 gen-webserver.internal www.gen-webserver.internal # gen digital helper server
127.0.0.1 revocation.gen-webserver.internal www.revocation.gen-webserver.internal # gen digital helper server
2025-03-17 18:13 - 2026-11-06 19:07 - 000000630 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.137.198 Watch.mshome.net # 2026 10 0 18 20 57 21 251
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 1.1.1.1 - 8.8.8.8
Windows Firewall is enabled.
Network Binding:
=============
Ethernet 2: VirtualBox Host-Only Ethernet Adapter -> VBoxNetAdp6.sys
Wi-Fi: MediaTek Wi-Fi 6 MT7921 Wireless LAN Card -> mtkwl6ex.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
vms_vsf: Hyper-V Virtual Switch Extension Filter
oracle_VBoxNetLwf: VirtualBox NDIS6 Bridged Networking Driver
ms_l1vhlwf: Nested Network Virtualization
vms_vsp: Hyper-V Virtual Switch Extension Protocol
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Eclipse Adoptium\jdk-25.0.4.101-hotspot\bin;C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Git\cmd;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\nodejs\;C:\Program Files (x86)\Microsoft SQL Server\160\Tools\Binn\;C:\Program Files\Microsoft SQL Server\160\Tools\Binn\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\Microsoft SQL Server\160\DTS\Binn\;C:\Program Files\NVIDIA Corporation\NVIDIA App\NvDLISR
HKU\S-1-5-21-629165207-329108147-321633127-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img19.jpg
HKU\S-1-5-21-629165207-329108147-321633127-1004\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\micha\AppData\Local\JetBrains\PyCharm2024.3
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\micha\PycharmProjects\PythonProject
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\micha\AppData\Local\JetBrains\PyCharm2026.2
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\micha\Documents\VS code\Programovanie
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\StartupApproved\Run: => "Zoner Photo Studio Autoupdate"
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\StartupApproved\Run: => "Advanced SystemCare"
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\StartupApproved\Run: => "Steam"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{DF58609B-7294-4D7B-8E9A-A4EABA727F0B}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{8A3BB187-468E-4D84-9792-02A814D0A23C}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{E9F3CA92-CAD3-46F6-BDA4-C9D733553497}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{CD4A55A3-AC69-4910-B11D-11764353D2A1}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{4F08CF52-B016-4A68-944C-1304C9C0BE35}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{C229CA86-D1D2-4089-A45B-2E31E803BAF1}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{22EC3136-CADE-4416-9D77-F40268D55AD2}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{3B848BF1-A2CB-49D8-BEDD-6E15C4BDB929}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{A9C2A7E2-75FE-4C61-8B15-6FCD44513AE3}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{9BA38FE3-625C-482A-AA42-5A3E587E9149}] => (Allow) C:\altera_lite\24.1std\quartus\bin64\jtagserver.exe (Intel Corporation -> )
FirewallRules: [{CDC7E3CF-0913-443D-B034-4B13FE945DBD}] => (Allow) C:\altera_lite\24.1std\quartus\bin64\jtagserver.exe (Intel Corporation -> )
FirewallRules: [UDP Query User{6264AA5D-B828-45B4-9C38-476B6ABBA4CC}C:\users\micha\appdata\local\programs\microsoft vs code\code.exe] => (Allow) C:\users\micha\appdata\local\programs\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{C84D22BD-AEBD-42E4-A9DC-6947F10F065C}C:\users\micha\appdata\local\programs\microsoft vs code\code.exe] => (Allow) C:\users\micha\appdata\local\programs\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6D9F35F0-BE4F-4C24-A281-9E2D98515541}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E218B530-FBFA-4BFF-9509-96B3AE7AE066}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A76F343F-1BA3-414B-B8DF-45F5D1C3607C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{7A1B89FA-3F6D-4785-AF06-3981E3752D31}C:\users\micha\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Block) C:\users\micha\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe (Microsoft) [File not signed]
FirewallRules: [TCP Query User{0BF04AF7-A50D-4D11-B1B9-FD780B9942A0}C:\users\micha\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Block) C:\users\micha\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe (Microsoft) [File not signed]
FirewallRules: [UDP Query User{955B0EFF-70AD-4BF1-9D8F-A692F5AF1813}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe
FirewallRules: [TCP Query User{1385B21F-5EE5-4C82-9C08-A875DFABDB96}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{466D89BF-57D5-497C-A28E-009030F811F1}C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
FirewallRules: [TCP Query User{FD5AFA73-86C4-4502-91C2-63D194528B74}C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
FirewallRules: [{0079FFA1-04DF-49EC-BFEA-0159DACF5286}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\tf_win64.exe (Valve Corp. -> )
FirewallRules: [{A9FD8FFA-A5E5-48EE-88A7-8103FF00FEC6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\tf_win64.exe (Valve Corp. -> )
FirewallRules: [{D68C58E7-18EA-4EB7-AADC-81A3B15C643A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FC19E3FB-575A-4E41-BD11-A873614D4B8A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{BA657413-DCCD-47FB-8C85-1EBCF77FCABA}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D59041B2-4235-4F79-9BD3-4F35CD5DD34B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{690FB62C-0104-4F91-9564-052D0DECF7B8}] => (Allow) C:\Program Files\Zoner\Photo Studio 17\Program32\MediaServer.exe (ZONER software, a.s. -> ZONER software)
FirewallRules: [{8DD5E146-CF27-437A-B71E-91670CE49436}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25045.406.3471.2143_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{423D4BF7-1011-4C23-8ADD-A1653A9CF26C}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25045.406.3471.2143_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CD7A12EC-7BF8-402D-94E5-C807820A22BC}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25045.406.3471.2143_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7C1E29A3-A2F7-4A58-A786-A31F2BAD7E82}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25045.406.3471.2143_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{17A3E8BB-677A-4DB7-9BDE-18859E4771EE}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{C8E490EA-ABD8-4638-B233-62A6AA0087A2}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [TCP Query User{C31D6E99-A40C-4188-8CE3-FBABB1B80AC0}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe (OpenJS Foundation -> Node.js)
FirewallRules: [UDP Query User{E0DD0F5D-A3D3-455F-B33E-B06F4AF20617}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe (OpenJS Foundation -> Node.js)
FirewallRules: [TCP Query User{E2139229-33FE-4DC7-9EF8-F55763007F14}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{05C1A0D5-7487-4773-AE49-E36C9935A124}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{663AEA2F-902E-4D19-B03D-30B8EA05516C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BloonsTD6\BloonsTD6.exe () [File not signed]
FirewallRules: [{A0318B35-EA48-4522-9114-BE58F0BC1777}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BloonsTD6\BloonsTD6.exe () [File not signed]
FirewallRules: [{9B4DDA2C-B943-45DF-81AE-A47D7B2C45D0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Inscryption\Inscryption.exe () [File not signed]
FirewallRules: [{C5223E68-0BE9-4A0A-9EBB-DB3C3F4B9051}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Inscryption\Inscryption.exe () [File not signed]
FirewallRules: [TCP Query User{974BE155-2FD5-471D-AFE5-31B63D802B25}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.91-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.91-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{60667E24-5E05-4E53-B44B-1B5300B35445}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.91-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.91-windows-x64\bin\java.exe
FirewallRules: [TCP Query User{7BC9EDFE-4379-42A1-88D2-79FECCBEC20E}C:\users\micha\appdata\local\postman\app-12.2.0\postman.exe] => (Allow) C:\users\micha\appdata\local\postman\app-12.2.0\postman.exe (Postman, Inc. -> Postman)
FirewallRules: [UDP Query User{42798A19-790A-4050-9CDA-02EBC1913352}C:\users\micha\appdata\local\postman\app-12.2.0\postman.exe] => (Allow) C:\users\micha\appdata\local\postman\app-12.2.0\postman.exe (Postman, Inc. -> Postman)
FirewallRules: [TCP Query User{C1934F5D-3240-405A-9ED7-9836518E78E0}C:\program files\edb\pem\httpd\apache\bin\httpd.exe] => (Allow) C:\program files\edb\pem\httpd\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [UDP Query User{A70B10F8-A673-42FA-B2BD-4D5851843A3E}C:\program files\edb\pem\httpd\apache\bin\httpd.exe] => (Allow) C:\program files\edb\pem\httpd\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [{1C386E3F-FCFC-4FEF-8DA5-90989988298A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{68886664-64C1-4974-9E1A-5B91E2AD576C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FDAC9348-8BAB-4ACB-8054-4841C876F6EA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{B9CFEE85-6C8E-4E9F-B61B-D4D7F7292FE0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{BC3C20F2-CC01-4F44-9AF6-D6A40437478A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe (Paradox Interactive AB (publ) -> Paradox Interactive)
FirewallRules: [{5BEE4A46-9869-43DF-885E-30BEC850EF40}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe (Paradox Interactive AB (publ) -> Paradox Interactive)
FirewallRules: [TCP Query User{3E53E240-DDFC-4429-BA57-31E02875C4FE}C:\program files\cisco packet tracer 9.0.0\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 9.0.0\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
FirewallRules: [UDP Query User{0A502970-5CFD-4326-AA9F-1745BD8CE7B6}C:\program files\cisco packet tracer 9.0.0\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 9.0.0\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
FirewallRules: [{CD8A6D21-1AB9-487A-B125-6276D7D6A004}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_26072.402.4558.5431_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FA0D22F1-1082-464C-B429-44474A28FA37}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_26072.402.4558.5431_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{BC05DBB9-0EF3-4BD4-B3BF-383B52C3C652}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{110D9115-0DF8-4492-A0F5-F697171661CC}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
FirewallRules: [{AA04BA89-6F7D-4BB2-B525-E3D748A22C48}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe (Valve Corp. -> )
FirewallRules: [{DF7A39F8-38D4-47B4-B820-6690C00BFD70}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe (Valve Corp. -> )
FirewallRules: [{7D8B1522-3D1D-4C9A-8D88-7816B099449E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe () [File not signed]
FirewallRules: [{DDBE5966-D598-4F25-9B65-26EA4A94DF30}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe () [File not signed]
FirewallRules: [TCP Query User{16F2F205-F63B-4297-B5BD-BB27AA2E15DA}C:\users\micha\appdata\local\programs\intellij idea 2026.2.2\bin\idea64.exe] => (Allow) C:\users\micha\appdata\local\programs\intellij idea 2026.2.2\bin\idea64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [UDP Query User{582E622B-BA3F-40EE-AE7E-5BA915276028}C:\users\micha\appdata\local\programs\intellij idea 2026.2.2\bin\idea64.exe] => (Allow) C:\users\micha\appdata\local\programs\intellij idea 2026.2.2\bin\idea64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{99EA7900-62D7-4DB3-A1AA-5016BE873971}C:\program files\jetbrains\pycharm 2026.2.2\bin\pycharm64.exe] => (Allow) C:\program files\jetbrains\pycharm 2026.2.2\bin\pycharm64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [UDP Query User{FBDE3CF4-9FC5-4C9B-A52F-641F8E8F135E}C:\program files\jetbrains\pycharm 2026.2.2\bin\pycharm64.exe] => (Allow) C:\program files\jetbrains\pycharm 2026.2.2\bin\pycharm64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{B195982F-1321-4028-95DC-5102B1B4E365}C:\users\micha\appdata\local\android\sdk\platform-tools\adb.exe] => (Allow) C:\users\micha\appdata\local\android\sdk\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [UDP Query User{B4903444-8D65-4593-8DA4-2C53F294AEB8}C:\users\micha\appdata\local\android\sdk\platform-tools\adb.exe] => (Allow) C:\users\micha\appdata\local\android\sdk\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [TCP Query User{D41385FC-5BDB-4DB4-A6C9-4EBD879BA9D4}C:\program files\eclipse adoptium\jdk-25.0.4.101-hotspot\bin\java.exe] => (Block) C:\program files\eclipse adoptium\jdk-25.0.4.101-hotspot\bin\java.exe
FirewallRules: [UDP Query User{4FC53775-D291-465F-85BF-11C30E7B0BDE}C:\program files\eclipse adoptium\jdk-25.0.4.101-hotspot\bin\java.exe] => (Block) C:\program files\eclipse adoptium\jdk-25.0.4.101-hotspot\bin\java.exe
FirewallRules: [{08A23015-74A4-4559-9EDF-62CED49645F9}] => (Allow) C:\Users\micha\AppData\Local\Programs\Opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{1D285236-7F51-4CFE-9A1F-15C71E47F0F3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SWAT Commander\SWATCommander.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{99572972-C58E-49DE-80E1-2E7F255E4108}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SWAT Commander\SWATCommander.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{A660BF8C-40DE-4A11-AB0A-3737334194A1}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\copilotapp.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C63C2341-225A-43E4-91AB-884F166A7AEE}] => (Allow) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
FirewallRules: [{359580F3-C26C-4991-9D35-80A79ECEB38B}] => (Allow) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
FirewallRules: [{32825F58-FCFB-4273-8E85-49AF8A6D5DB1}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{D935F929-6D12-4B83-9063-C1458DDA00B9}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{055BCF61-E858-4B11-9C40-E23FEBCC6BD6}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe (Gen Digital Inc. -> Gen Digital Inc.)
==================== Restore Points =========================
05-11-2026 21:00:00 Windows Update
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (11/06/2026 07:13:15 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Názov chybnej aplikácie: UDClientService.exe, verzia: 26.8.0.29, časová značka: 0x6a8d70b8
Názov modulu s poruchou: DeployAgent.dll, verzia: 26.8.0.29, časová značka: 0x6a8d6fde
Kód výnimky: 0xc0000005
Odchýlka poruchy: 0x0000000000002c97
Id poruchového procesu: 0x2048
Čas spustenia poruchovej aplikácie: 0x1dd6ba4ff20882d
Cesta k poruchovej aplikácii: C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe
Cesta k poruchovému modulu: C:\WINDOWS\System32\drivers\Lenovo\udc\Service\DeployAgent.dll
Id správy: 521bb7e1-3c55-4049-963f-098e1fb6596b
Plný názov chybného balíka:
Identifikátor poruchovej aplikácie vzťahujúci sa na balík:
Error: (11/05/2026 02:08:17 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 12) (User: MICHAL)
Description: Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy-2147023878
Error: (11/05/2026 09:57:40 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: Local Hostname Michal.local already in use; will try Michal-2.local instead
Error: (11/05/2026 09:57:40 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 Michal.local. Addr 10.106.69.68
Error: (11/05/2026 09:57:40 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 10.106.69.74:5353 16 Michal.local. AAAA FE80:0000:0000:0000:415E:85F2:ADA6:0609
Error: (11/05/2026 09:57:39 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 16 Michal.local. AAAA FE80:0000:0000:0000:C3DE:5D41:8B06:0F7A
Error: (11/05/2026 09:57:39 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 10.106.69.74:5353 4 Michal.local. Addr 10.106.69.74
Error: (11/05/2026 09:57:39 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 4 Michal.local. Addr 10.106.69.68
System errors:
=============
Error: (11/06/2026 07:13:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Universal Device Client Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 60000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.
Error: (11/06/2026 07:07:13 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: An unexpected error was encountered attempting to retrieve the BitLocker volume master key during restart.
Error: (11/06/2026 07:07:13 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: An unexpected error was encountered attempting to retrieve the BitLocker volume master key during restart.
Error: (11/05/2026 09:00:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Zlyhanie inštalácie: Systému Windows sa nepodarilo nainštalovať nasledujúcu aktualizáciu. Vyskytla sa chyba (0x80073d02 = The package could not be installed because resources it modifies are currently in use.): 9WZDNCRFJ4MV-E046963F.LENOVOCOMPANION.
Error: (11/05/2026 06:10:48 PM) (Source: DCOM) (EventID: 10010) (User: MICHAL)
Description: The server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter did not register with DCOM within the required timeout.
Error: (11/05/2026 06:00:31 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: An unexpected error was encountered attempting to retrieve the BitLocker volume master key during restart.
Error: (11/05/2026 06:00:31 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: An unexpected error was encountered attempting to retrieve the BitLocker volume master key during restart.
Error: (11/05/2026 02:10:11 PM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
Windows Defender:
================
TimeCreated : 1. 11. 2026 20:00:50
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {11C7DF50-2C6A-4D1F-81B9-D0F608533C6D}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: RPC connection rundown
TimeCreated : 29. 10. 2026 19:04:18
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {23E5FAA9-7936-44F6-96BD-5281FB87A422}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: RPC connection rundown
TimeCreated : 29. 10. 2026 18:36:19
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {11F749F6-5B26-432D-B9D3-67384874EACE}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: RPC connection rundown
TimeCreated : 28. 10. 2026 16:21:18
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {B434AF80-F64B-46F4-BD3C-1651CF91051F}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days
TimeCreated : 25. 10. 2026 21:55:06
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {A98041B3-BFB0-4805-A31B-764D2C72F54A}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days
TimeCreated : 20. 10. 2026 18:59:41
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {2426E4B8-50AD-44D0-8906-84E41F7F8732}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days
TimeCreated : 18. 10. 2026 18:40:43
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {2707F598-45AF-4131-99F9-BD11EE07EF2C}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days
CodeIntegrity:
===============
Date: 2026-11-04 10:59:16
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe) attempted to load \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\AudioDevProps2.dll that did not meet the Microsoft signing level requirements.
Date: 2026-11-02 15:13:44
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Avast Software\Avast\AvastSvc.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2026-10-31 21:53:28
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\UUS\amd64\WaaSMedicAgent.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.
Date: 2026-10-28 17:14:56
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\155.0.4283.62\msedgewebview2.exe) attempted to load \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\AudioDevProps2.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: LENOVO H3CN47WW(V3.05) 04/15/2024
Motherboard: LENOVO LNVNB161216
Processor: AMD Ryzen 5 5500H with Radeon Graphics
Percentage of memory in use: 51%
Total physical RAM: 15724.06 MB
Available physical RAM: 7642.48 MB
Total Virtual: 45892.82 MB
Available Virtual: 32494.77 MB
==================== Drives ================================
Disk 0 - Drive c: (Windows-SSD) (Fixed) (Total:474.72 GB) (Free:94.75 GB) (Model: Micron MTFDKCD512QFM-1BD1AABLA) (Protected) NTFS
Disk 0 - \\?\Volume{8831c590-bb6f-4454-9847-71cf171e7858}\ (WINRE_DRV) (Fixed) (Total:1.95 GB) (Free:1.14 GB) NTFS
Disk 0 - \\?\Volume{c1558bfc-d20b-413d-be21-da047cfabd15}\ (SYSTEM_DRV) (Fixed) (Total:256 MB) (Free:217.92 MB) FAT32
==================== MBR & Partition Table ====================
============================================================
Disk: 0 (Size: 476.94 GB) (Disk ID: 34F54B0C)
Partitions:
===========
Partition Style : GPT
Partition Count : 4
Disk ID : {FA270037-248E-4B70-8A9D-FB3028657F61}
Usable Offset : 0.02 MB
Usable Length : 476.94 GB
Max Partitions : 128
Partition 1
Type : EFI System Partition
Size : 260 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {C1558BFC-D20B-413D-BE21-DA047CFABD15}
GPT Name : EFI system partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 261 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {278ED644-18D5-4FCA-9342-2F3A2B617824}
GPT Name : Microsoft reserved partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 474.72 GB
Offset : 277 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {CD51B503-9B86-4127-91C0-E68A1B8F7A47}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 1.95 GB
Offset : 486386 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {8831C590-BB6F-4454-9847-71CF171E7858}
GPT Name : Basic data partition
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
============================================================
==================== End of Addition.txt =======================
-
Rudy
- Site Admin
- Příspěvky: 120203
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosim o kontrolu logu
Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:
Otevřte poznámkový blok a zkopírujte do něj:
Uložte do C:\Users\micha\Desktop jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
ContextMenuHandlers3: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> No File
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll -> No File
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {018DEE60-023C-48A2-81DB-22B236FC606A} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {1DA7A364-7C44-41F5-9E34-434D9387A64F} - \Lenovo\ImController\TimeBasedEvents\4d512b2b-5816-4dbb-8b6e-fceadf6240f9 -> No File <==== ATTENTION
Task: {B1414019-02C2-4710-A68B-C0FFC6FEE6E7} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {3B6D0ADD-E435-4330-BE12-F41C89A1AFCD} - System32\Tasks\ASC_PerformanceMonitor => "C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/Task <==== ATTENTION
Task: {01EA17DE-0CC3-473F-B36D-2052E03CAB34} - System32\Tasks\ASC_SkipUac_micha => "C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/SkipUac <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {D652E268-0B7C-475A-A33D-874A33A8D805} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => "C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe" (No File)
Task: {5676A77B-688B-403B-B2D1-2EB5CC6344B3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002 => C:\Program Files\Microsoft OneDrive\25.140.0720.0001_1\OneDriveLauncher.exe /startInstances (No File)
S2 AdvancedSystemCareService18; "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe" (No File) <==== ATTENTION
S3 FvSvc; "C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe" -service (No File)
S2 ImControllerService; %SystemRoot%\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (No File)
S3 cpuz154; \??\C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2026-11-01] (Microsoft Windows Hardware Compatibility Publisher -> ) <==== ATTENTION
S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys (No File)
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys (No File)
S3 iobit_monitor_server2021; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys (No File)
C:\DumpStack.log.tmp
EmptyTemp:
Hosts:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosim o kontrolu logu
Fix result of Farbar Recovery Scan Tool (x64) Version: 01-11-2026
Ran by micha (06-11-2026 20:39:45) Run:1
Running from C:\Users\micha\Desktop
Loaded Profiles: micha & WsiAccount & SQLTELEMETRY & MSSQLSERVER
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
ContextMenuHandlers3: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> No File
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll -> No File
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {018DEE60-023C-48A2-81DB-22B236FC606A} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {1DA7A364-7C44-41F5-9E34-434D9387A64F} - \Lenovo\ImController\TimeBasedEvents\4d512b2b-5816-4dbb-8b6e-fceadf6240f9 -> No File <==== ATTENTION
Task: {B1414019-02C2-4710-A68B-C0FFC6FEE6E7} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {3B6D0ADD-E435-4330-BE12-F41C89A1AFCD} - System32\Tasks\ASC_PerformanceMonitor => "C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/Task <==== ATTENTION
Task: {01EA17DE-0CC3-473F-B36D-2052E03CAB34} - System32\Tasks\ASC_SkipUac_micha => "C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/SkipUac <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {D652E268-0B7C-475A-A33D-874A33A8D805} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => "C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe" (No File)
Task: {5676A77B-688B-403B-B2D1-2EB5CC6344B3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002 => C:\Program Files\Microsoft OneDrive\25.140.0720.0001_1\OneDriveLauncher.exe /startInstances (No File)
S2 AdvancedSystemCareService18; "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe" (No File) <==== ATTENTION
S3 FvSvc; "C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe" -service (No File)
S2 ImControllerService; %SystemRoot%\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (No File)
S3 cpuz154; \??\C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2026-11-01] (Microsoft Windows Hardware Compatibility Publisher -> ) <==== ATTENTION
S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys (No File)
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys (No File)
S3 iobit_monitor_server2021; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys (No File)
C:\DumpStack.log.tmp
EmptyTemp:
Hosts:
End
*****************
Processes closed successfully.
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\Advanced SystemCare => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\NvAppDesktopContext => removed successfully
HKLM\Software\Classes\CLSID\{F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Delete Cached Standalone Update Binary" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Edge => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{018DEE60-023C-48A2-81DB-22B236FC606A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{018DEE60-023C-48A2-81DB-22B236FC606A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1DA7A364-7C44-41F5-9E34-434D9387A64F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1DA7A364-7C44-41F5-9E34-434D9387A64F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\TimeBasedEvents\4d512b2b-5816-4dbb-8b6e-fceadf6240f9" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B1414019-02C2-4710-A68B-C0FFC6FEE6E7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B1414019-02C2-4710-A68B-C0FFC6FEE6E7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\Lenovo iM Controller Monitor" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3B6D0ADD-E435-4330-BE12-F41C89A1AFCD}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B6D0ADD-E435-4330-BE12-F41C89A1AFCD}" => removed successfully
C:\WINDOWS\System32\Tasks\ASC_PerformanceMonitor => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC_PerformanceMonitor" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{01EA17DE-0CC3-473F-B36D-2052E03CAB34}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{01EA17DE-0CC3-473F-B36D-2052E03CAB34}" => removed successfully
C:\WINDOWS\System32\Tasks\ASC_SkipUac_micha => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC_SkipUac_micha" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunUpdateNotificationMgr" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D652E268-0B7C-475A-A33D-874A33A8D805}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D652E268-0B7C-475A-A33D-874A33A8D805}" => removed successfully
C:\WINDOWS\System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5676A77B-688B-403B-B2D1-2EB5CC6344B3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5676A77B-688B-403B-B2D1-2EB5CC6344B3}" => removed successfully
C:\WINDOWS\System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002" => removed successfully
HKLM\System\CurrentControlSet\Services\AdvancedSystemCareService18 => removed successfully
AdvancedSystemCareService18 => service removed successfully
HKLM\System\CurrentControlSet\Services\FvSvc => removed successfully
FvSvc => service removed successfully
HKLM\System\CurrentControlSet\Services\ImControllerService => removed successfully
ImControllerService => service removed successfully
HKLM\System\CurrentControlSet\Services\cpuz154 => removed successfully
cpuz154 => service removed successfully
HKLM\System\CurrentControlSet\Services\AscFileFilter => removed successfully
AscFileFilter => service removed successfully
HKLM\System\CurrentControlSet\Services\AscRegistryFilter => removed successfully
AscRegistryFilter => service removed successfully
HKLM\System\CurrentControlSet\Services\iobit_monitor_server2021 => removed successfully
iobit_monitor_server2021 => service removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 4282855 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 563446886 B
Windows/system/drivers => 144835350 B
Edge => 19854349 B
Firefox => 0 B
Opera => 2183482192 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 5 B
ProgramData => 989185 B
Public => 0 B
systemprofile => 2235976471 B
systemprofile32 => 476915 B
LocalService => 1449717 B
NetworkService => 16389 B
micha => 582044242 B
WsiAccount => 3378363 B
SQLTELEMETRY => 5 B
MSSQLSERVER => 5 B
RecycleBin => 0 B
EmptyTemp: => 5.35 GB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 06-11-2026 20:45:46)
C:\DumpStack.log.tmp => Could not move
==== End of Fixlog 20:45:46 ====
Ran by micha (06-11-2026 20:39:45) Run:1
Running from C:\Users\micha\Desktop
Loaded Profiles: micha & WsiAccount & SQLTELEMETRY & MSSQLSERVER
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
ContextMenuHandlers3: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> No File
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll -> No File
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {018DEE60-023C-48A2-81DB-22B236FC606A} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {1DA7A364-7C44-41F5-9E34-434D9387A64F} - \Lenovo\ImController\TimeBasedEvents\4d512b2b-5816-4dbb-8b6e-fceadf6240f9 -> No File <==== ATTENTION
Task: {B1414019-02C2-4710-A68B-C0FFC6FEE6E7} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {3B6D0ADD-E435-4330-BE12-F41C89A1AFCD} - System32\Tasks\ASC_PerformanceMonitor => "C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/Task <==== ATTENTION
Task: {01EA17DE-0CC3-473F-B36D-2052E03CAB34} - System32\Tasks\ASC_SkipUac_micha => "C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/SkipUac <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {D652E268-0B7C-475A-A33D-874A33A8D805} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => "C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe" (No File)
Task: {5676A77B-688B-403B-B2D1-2EB5CC6344B3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002 => C:\Program Files\Microsoft OneDrive\25.140.0720.0001_1\OneDriveLauncher.exe /startInstances (No File)
S2 AdvancedSystemCareService18; "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe" (No File) <==== ATTENTION
S3 FvSvc; "C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe" -service (No File)
S2 ImControllerService; %SystemRoot%\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (No File)
S3 cpuz154; \??\C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2026-11-01] (Microsoft Windows Hardware Compatibility Publisher -> ) <==== ATTENTION
S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys (No File)
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys (No File)
S3 iobit_monitor_server2021; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys (No File)
C:\DumpStack.log.tmp
EmptyTemp:
Hosts:
End
*****************
Processes closed successfully.
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\Advanced SystemCare => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\NvAppDesktopContext => removed successfully
HKLM\Software\Classes\CLSID\{F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Delete Cached Standalone Update Binary" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Edge => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{018DEE60-023C-48A2-81DB-22B236FC606A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{018DEE60-023C-48A2-81DB-22B236FC606A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1DA7A364-7C44-41F5-9E34-434D9387A64F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1DA7A364-7C44-41F5-9E34-434D9387A64F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\TimeBasedEvents\4d512b2b-5816-4dbb-8b6e-fceadf6240f9" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B1414019-02C2-4710-A68B-C0FFC6FEE6E7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B1414019-02C2-4710-A68B-C0FFC6FEE6E7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\Lenovo iM Controller Monitor" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3B6D0ADD-E435-4330-BE12-F41C89A1AFCD}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B6D0ADD-E435-4330-BE12-F41C89A1AFCD}" => removed successfully
C:\WINDOWS\System32\Tasks\ASC_PerformanceMonitor => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC_PerformanceMonitor" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{01EA17DE-0CC3-473F-B36D-2052E03CAB34}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{01EA17DE-0CC3-473F-B36D-2052E03CAB34}" => removed successfully
C:\WINDOWS\System32\Tasks\ASC_SkipUac_micha => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC_SkipUac_micha" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunUpdateNotificationMgr" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D652E268-0B7C-475A-A33D-874A33A8D805}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D652E268-0B7C-475A-A33D-874A33A8D805}" => removed successfully
C:\WINDOWS\System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5676A77B-688B-403B-B2D1-2EB5CC6344B3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5676A77B-688B-403B-B2D1-2EB5CC6344B3}" => removed successfully
C:\WINDOWS\System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002" => removed successfully
HKLM\System\CurrentControlSet\Services\AdvancedSystemCareService18 => removed successfully
AdvancedSystemCareService18 => service removed successfully
HKLM\System\CurrentControlSet\Services\FvSvc => removed successfully
FvSvc => service removed successfully
HKLM\System\CurrentControlSet\Services\ImControllerService => removed successfully
ImControllerService => service removed successfully
HKLM\System\CurrentControlSet\Services\cpuz154 => removed successfully
cpuz154 => service removed successfully
HKLM\System\CurrentControlSet\Services\AscFileFilter => removed successfully
AscFileFilter => service removed successfully
HKLM\System\CurrentControlSet\Services\AscRegistryFilter => removed successfully
AscRegistryFilter => service removed successfully
HKLM\System\CurrentControlSet\Services\iobit_monitor_server2021 => removed successfully
iobit_monitor_server2021 => service removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 4282855 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 563446886 B
Windows/system/drivers => 144835350 B
Edge => 19854349 B
Firefox => 0 B
Opera => 2183482192 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 5 B
ProgramData => 989185 B
Public => 0 B
systemprofile => 2235976471 B
systemprofile32 => 476915 B
LocalService => 1449717 B
NetworkService => 16389 B
micha => 582044242 B
WsiAccount => 3378363 B
SQLTELEMETRY => 5 B
MSSQLSERVER => 5 B
RecycleBin => 0 B
EmptyTemp: => 5.35 GB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 06-11-2026 20:45:46)
C:\DumpStack.log.tmp => Could not move
==== End of Fixlog 20:45:46 ====
-
Rudy
- Site Admin
- Příspěvky: 120203
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosim o kontrolu logu
Smazáno, log již vypadá OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosim o kontrolu logu
Ďakujem Rudy.
Přispějete na provoz fóra?