Kontrola logu po utoku

Zpráva

plasko · #1 Příspěvek od **plasko** » Včera 17:24

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-11-2026 01
Ran by Plasko (administrator) on PLASKO-PC (11-11-2026 17:18:30)
Running from C:\Users\Plasko\Desktop\FRST64.exe
Loaded Profiles: Plasko & Administrator
Platform: Microsoft Windows 10 Pro Version 22H2 19045.7807 (X64) Language: Čeština (Česká republika) -> Slovenčina (Slovensko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe
(ASUSTeK Computer Inc. -> ) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe
(C:\Games\WoW Cata\Whitemane\whitemane.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\155.0.4283.62\msedgewebview2.exe
(C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe ->) (Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\EOSOverlayRenderer-Win64-Shipping.exe
(C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe ->) (Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <4>
(C:\Program Files (x86)\Google\Chrome Remote Desktop\157.0.8103.41\remoting_host.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome Remote Desktop\157.0.8103.41\remoting_network.exe
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files (x86)\TeamViewer\crashpad_handler.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files (x86)\TeamViewer\crashpad_handler.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files\Avira\Endpoint Protection SDK\SentryEye.exe
(C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.CpuIdRemote64.exe
(C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.DisplayAdapter.exe
(C:\Program Files\Logitech Gaming Software\LCore.exe ->) () [File not signed] C:\Users\Plasko\Documents\LCDSirReal\LCDSirReal.exe
(C:\Program Files\Logitech Gaming Software\LCore.exe ->) (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(C:\Program Files\Logitech Gaming Software\LCore.exe ->) (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe
(C:\Program Files\Logitech Gaming Software\LCore.exe ->) (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(C:\Program Files\Logitech Gaming Software\LCore.exe ->) (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPOP3.exe
(C:\Program Files\Logitech Gaming Software\LCore.exe ->) (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe
(C:\Program Files\Logitech Gaming Software\LCore.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LAClient\laclient.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\Temp\3394BC1E-D54C-45F4-81F1-BD431FAB28B1\DismHost.exe
(Discord Inc. -> Discord Inc.) C:\Users\Plasko\AppData\Local\Discord\app-1.0.9265\Discord.exe <6>
(Dropbox, Inc -> Dropbox, Inc.) C:\Users\Plasko\AppData\Local\AdapEngine.exe
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\EOSOverlayRenderer-Win64-Shipping.exe <4>
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(Epic Games Inc. -> Node.js) C:\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe <2>
(explorer.exe ->) (520D4CDF-A287-4423-AB88-D88CCF7E866D -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_1.26135.3.0_x64__3c1yjt4zspk6g\SmartThings.AVplayer\SmartThings.AVplayer.exe
(explorer.exe ->) (Avira Operations GmbH -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.WebAppHost.exe
(explorer.exe ->) (Disig a.s. -> Disig a.s.) C:\Program Files (x86)\Disig\Web Signer\WebSignerTray.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\totalcmd\TOTALCMD.EXE
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(explorer.exe ->) (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(explorer.exe ->) (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectMonitor.exe
(explorer.exe ->) (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectUI.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(explorer.exe ->) (Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
(explorer.exe ->) (Whitemane) [File not signed] C:\Games\WoW Cata\Whitemane\whitemane.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <44>
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation -> Microsoft Corporation) [File not signed] C:\Users\Plasko\AppData\Local\AVerMedia\Live Gamer Agent\MSBuild.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\155.0.4283.62\msedgewebview2.exe <5>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe <5>
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\GameInputSvc.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <27>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_0afec3f2050014a0\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) () [File not signed] C:\ProgramData\Whitemane\vpn\wm-vpn-helper.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Blizzard\Bonjour Service\mDNSResponder.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ) [File not signed] C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) [File not signed] C:\Program Files (x86)\ASUSTeK Computer Inc\AURA\AsLedService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.07.00\AsusFanControlService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.00.38\atkexComSvc.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe
(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome Remote Desktop\157.0.8103.41\remoting_host.exe
(services.exe ->) (Huawei Technologies Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(services.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\EaseUS\ENS\ensserver.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(services.exe ->) (Intel(R) Extreme Tuning Utility -> Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\GameInputSvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) C:\Windows\System32\CorpZEAWYtiB6bJ16NuLbGCc6CZ6jJdKfb63.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_0afec3f2050014a0\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\MacriumService.exe
(services.exe ->) (Rivet Networks) [File not signed] C:\Program Files\Killer Networking\Network Manager\KillerService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Clonix & CottonCandy) C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe <5>
(svchost.exe ->) () [File not signed] C:\Program Files\Aurora\Aurora.exe
(svchost.exe ->) (520D4CDF-A287-4423-AB88-D88CCF7E866D -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_1.26.6021.0_x64__3c1yjt4zspk6g\SAClient.exe
(svchost.exe ->) (520D4CDF-A287-4423-AB88-D88CCF7E866D -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_1.26135.3.0_x64__3c1yjt4zspk6g\SmartThings.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
(svchost.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.7789_none_7df0ecd27ca2cabd\TiWorker.exe
(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <6>
(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Wildcard Properties LLC -> Epic Games, Inc.) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGameServer.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9269352 2019-04-19] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [17987704 2017-10-20] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [CORSAIR iCUE 4 Software] => C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE Launcher.exe [185384 2022-12-09] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKLM\...\Run: [Reflect UI] => C:\Program Files\Macrium\Common\ReflectUI.exe [11859680 2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
HKLM-x32\...\Run: [] => [X]
HKLM\...\RunOnce: [msedge_cleanup_{C50565E9-CCCF-44B4-BA15-5AC5C6569197}] => C:\Program Files (x86)\Microsoft\Copilot\Application\157.0.4341.42\Installer\setup.exe [6383944 2026-11-07] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\RunOnce: [msedge_cleanup_{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}] => C:\Program Files (x86)\Microsoft\Edge\Application\157.0.4341.46\Installer\setup.exe [6386504 2026-11-11] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\RunOnce: [msedge_cleanup_{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}] => C:\Program Files (x86)\Microsoft\EdgeWebView\Application\157.0.4341.46\Installer\setup.exe [6386504 2026-11-11] (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5823128 2026-10-21] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3149608 2023-03-13] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4299968 2016-07-29] (Disc Soft Ltd -> Disc Soft Ltd)
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [53311928 2026-11-04] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [123262344 2023-05-22] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [CAM] => C:\Program Files (x86)\NZXT\CAM\Launcher\CAM.exe [67662912 2019-07-28] (NZXT, Inc. -> NZXT)
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [] => [X]
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [2125640 2026-11-03] (Overwolf Ltd -> Overwolf Ltd.)
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [Battle.net] => C:\Program Files (x86)\Battle.net\Battle.net.exe [995024 2026-10-26] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [Avira Browser] => C:\Users\Plasko\AppData\Local\Avira\Browser\Update\1.8.1652.5\AviraBrowserUpdateCore.exe (No File)
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [Disig Web Signer] => C:\Program Files (x86)\Disig\Web Signer\WebSignerTray.exe [274296 2026-05-07] (Disig a.s. -> Disig a.s.)
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [MicrosoftEdgeAutoLaunch_851C448428FC530D4138DC2E7ED6209B] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5073224 2026-11-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Plasko\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (No File) <==== ATTENTION
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Plasko\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File) <==== ATTENTION
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\RunOnce: [Uninstall 26.183.0920.0005] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Plasko\AppData\Local\Microsoft\OneDrive\26.183.0920.0005" [289792 2024-05-18] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\MountPoints2: {4f661814-2379-11ee-bbfc-548ca05457b4} - "D:\.\StartModem.exe"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\MountPoints2: {4f661882-2379-11ee-bbfc-548ca05457b4} - "D:\.\StartModem.exe"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\MountPoints2: {4f661a1b-2379-11ee-bbfc-548ca05457b4} - "D:\.\StartModem.exe"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Winlogon: [Shell] C:\Windows\explorer.exe [6153504 2026-10-19] (Microsoft Windows -> Microsoft Corporation) <==== ATTENTION
HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [100352 2007-05-23] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\157.0.8103.40\Installer\chrmstp.exe [8160920 2026-11-09] (Google LLC -> Google LLC)
Startup: C:\Users\Plasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LCDSirReal – odkaz.lnk [2017-12-30]
ShortcutTarget: LCDSirReal – odkaz.lnk -> C:\Users\Plasko\Documents\LCDSirReal\LCDSirReal.exe () [File not signed]
BootExecute:
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy-Firefox: Restriction <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {70aa803b-23c6-4e15-b0a6-b5d5570165b5} - no filepath. <==== ATTENTION
Task: {BC12C833-B6FD-4608-A617-C094A71CB62F} - \Driver Booster SkipUAC (Plasko) -> No File <==== ATTENTION
Task: {EEBEC377-CDDA-4DDE-93A6-89E394124E4B} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {8D3508DA-9281-4E3C-AB69-F1C55BC1FF97} - System32\Tasks\{A05ACD27-E35D-4767-A3E8-3FDF88D4B507} => C:\Windows\System32\pcalua.exe [91136 2026-10-19] (Microsoft Windows -> Microsoft Corporation) -> -a "G:\Program Files (x86)\Lionhead Studios\Black & White 2\white.exe" -d "g:\Program Files (x86)\Lionhead Studios\Black & White 2"
Task: {155ECA40-BCDF-47ED-B2FC-2E1C7AF9BFE8} - System32\Tasks\AdobeAAMUpdater-1.0-PLASKO-PC-Plasko => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (No File) -mode=scheduled (No File)
Task: {76411B08-4ACB-4670-B1F8-271C9E99E722} - System32\Tasks\ArkServerManager\AutoStart_46186a1e7d80983e066623442656c973 => C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Saved\Config\WindowsServer\RunServer.cmd [343 2022-02-06] () [File not signed] ->
Task: {94072717-5251-46C8-AC39-E323B4FD1348} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [1872856 2015-11-30] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {D50574E7-C812-498A-B8BB-71EEEA078F04} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [1316824 2015-11-16] (ASUSTeK Computer Inc. -> )
Task: {A8BA8126-004E-4117-A769-1DD932FAC68C} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [4331288 2015-07-30] (ASUSTeK Computer Inc. -> TODO: <Company name>)
Task: {F1FAC4E3-092C-4354-BE6E-0A515FD8C227} - System32\Tasks\ASUS\Push Notice Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe [3646264 2014-05-28] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {5465EC42-CB43-4612-A56E-2AA8EE51130E} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr.exe [238392 2013-07-24] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {F50229C6-AFFC-4DDC-AC45-9614C4BEC82B} - System32\Tasks\AuroraStartup => C:\Program Files\Aurora\Aurora.exe [9728000 2020-06-13] () [File not signed] -> C:\Program Files\Aurora\-silent
Task: {954F8171-3AD7-4AC5-8DF0-9E6ED8D90175} - System32\Tasks\Avira_FallbackUpdater => C:\Windows\System32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> start AviraFallbackUpdater Delayed=false
Task: {A3A73EB0-9B85-4976-B079-B28DAA920A8B} - System32\Tasks\Avira_Security_Maintenance => Command(1): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> FallbackTelemetry
Task: {A3A73EB0-9B85-4976-B079-B28DAA920A8B} - System32\Tasks\Avira_Security_Maintenance => Command(2): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> ServiceWatchdog
Task: {A3A73EB0-9B85-4976-B079-B28DAA920A8B} - System32\Tasks\Avira_Security_Maintenance => Command(3): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> CrashCollector
Task: {09643841-7D52-480B-87BD-28C9387C2917} - System32\Tasks\Avira_Security_Service_SCM_Watchdog => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe [262648 2026-10-28] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {55CC3E2A-9FA6-4BDB-BD52-E722BFD0C544} - System32\Tasks\Avira_Security_Systray => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe [1799824 2026-10-28] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {C0A69CA4-1A03-4678-8527-A0BEB4512818} - System32\Tasks\Avira_Security_Update => C:\Windows\System32\net.exe [59904 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {9E82112E-B245-4DC9-B4C6-967B4F772CF0} - System32\Tasks\AviraSystemSpeedupVerify => C:\Program Files (x86)\Avira\System Speedup\setup\avira_speedup_setup.exe [37089224 2026-01-29] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {BDDF2CB2-E9DF-417D-8308-36703B7AC826} - System32\Tasks\BaseBase_lts => C:\ProgramData\runnerupload_rc\FrameworkA32.exe [512152 0] () [File not signed] [File is in use] <==== ATTENTION
Task: {051AE664-472E-4BC8-B2E7-A7A192EC3554} - System32\Tasks\CAM.Desktop => C:\Program Files (x86)\NZXT\CAM\CAM.Desktop.exe [344128 2019-07-28] (NZXT, Inc. -> )
Task: {AD9E3A52-4008-47B0-8119-7A4D068008A6} - System32\Tasks\CorelUpdateHelperTask-44CBF3158B0AAFBA52542116F76B320F => C:\Program Files (x86)\Corel\CUH\v2\CUH.EXE [3834384 2024-01-24] (Corel Corporation -> Corel Corporation)
Task: {7AAD1BC9-2AAE-4588-9C7C-05D1E1A29145} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.EXE [3834384 2024-01-24] (Corel Corporation -> Corel Corporation)
Task: {1EC75137-F9FE-402E-AA4C-4D3A758D3057} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem157.0.8089.0{39804D76-4A76-4D6A-B90E-CD42A7BDB0E1} => C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe [9958552 2026-10-06] (Google LLC -> Google LLC)
Task: {D650F6AB-455D-4971-8D48-95476DD1EE33} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {B00F4AD0-D9F4-4B53-8270-9A48EEB173B1} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {94E5A2AC-593D-4206-9DDE-5CA9F50D61C7} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelperOnUnlock => C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {0707F948-CD7B-4009-9283-476E9DB66F90} - System32\Tasks\HostEngineSync => C:\Windows\System32\wscript.exe [181760 2026-04-21] (Microsoft Windows -> Microsoft Corporation) -> //B //NoLogo "C:\Users\Plasko\AppData\Roaming\Microsoft\Crypto\ReceiptArchiver\ReceiptArchiver.wsf"
Task: {DB7919AC-0DBC-4FCF-B8DB-5346A30311F4} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\IntelPTTEKRecertification.exe [855664 2023-12-14] (Intel Corporation -> Intel(R) Corporation)
Task: {05393F7B-A34A-4D43-A2A1-340971216E43} - System32\Tasks\intmgr => C:\ProgramData\runnerupload_rc\FrameworkA32.exe [512152 0] () [File not signed] [File is in use] <==== ATTENTION
Task: {E9E4C3CE-1D18-4CFA-885B-BB3D465A0896} - System32\Tasks\Microsoft\Windows\rempl\shell-compact => %ProgramFiles%\rempl\remsh.exe (No File) /RunCompactOnly (No File)
Task: {34ECD316-C7D7-4CE6-96C1-E5BAA6E367CA} - System32\Tasks\Microsoft\Windows\rempl\shell-restore => %ProgramFiles%\rempl\remsh.exe (No File) /RunRestoreHealthOnly (No File)
Task: {EA9754AF-082A-435E-BA7D-3D29F7CC3109} - System32\Tasks\Microsoft\Windows\rempl\shell-unlock => %ProgramFiles%\rempl\remsh.exe (No File) /RunUsoScanOnly (No File)
Task: {455256CD-ACE6-474B-A963-2F4B4408470F} - System32\Tasks\Microsoft\Windows\rempl\shell-unlock-sih => %ProgramFiles%\rempl\remsh.exe (No File) /RunSihScanOnly (No File)
Task: {C1BAE019-8C63-478D-AEF3-79FDB9316F46} - System32\Tasks\Microsoft\Windows\rempl\shell-unlock-storagesense => %ProgramFiles%\rempl\remsh.exe (No File) /RunStorageSenseTaskOnly (No File)
Task: {4B4C9DE4-4828-4D5E-8C1A-D9958F0A1A1C} - System32\Tasks\Microsoft\Windows\rempl\shell-usoscan => %ProgramFiles%\rempl\remsh.exe (No File) /RunUsoScanOnly (No File)
Task: {742612D4-BE77-4F01-8DFE-49464957D954} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1083008 2026-11-05] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {7A666200-092D-4C0A-BAF0-3BFD271BB2B0} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2873281325-1507384511-3975134512-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1083008 2026-11-05] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {129E2A9D-9248-45F9-AC49-45FBBB3183C1} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-11-05] (Mozilla Corporation -> Mozilla Foundation)
Task: {683C776B-4248-48DE-897E-DA816D459CE0} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [790920 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {808031CF-F376-4CC5-A2AD-149F9B17ECFA} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [790920 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {BAC8B445-01B8-4DDF-8AA4-4C1A64495ABF} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3724680 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C39F7281-03AE-4EAF-87D7-B8C804A7A69F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [702856 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {E980E954-4ED7-466C-9DC2-8DBB38C719C3} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [841096 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7DA93731-390A-444F-9CCC-DFFB6FD8D493} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [841096 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C8B0F7C6-5FDC-4955-AFEF-0AF6B5C61209} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [572808 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C4276580-5EE9-4A08-8EBA-222F0C833FC3} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877448 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1C475B53-C83A-428D-957E-900B7BF4A569} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877448 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) -> "C:\Program Files (x86)\NVIDIA Corporation\Update Core" /noshim
Task: {ED78C02C-1FDA-4EE8-B8ED-16B1EDA090B8} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877448 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) -> "C:\Program Files (x86)\NVIDIA Corporation\Update Core" /noshim
Task: {C026944E-2F20-458A-9156-BD655E5500A9} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877448 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) -> "C:\Program Files (x86)\NVIDIA Corporation\Update Core" /noshim
Task: {6B8F3A69-4A08-43E0-8C55-6BB0B945E885} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2417480 2026-11-03] (Overwolf Ltd -> Overwolf LTD) -> "C:\Program Files (x86)\Overwolf" /RunningFrom Schedule
Task: {E6FACECB-7845-4374-BFCB-0A1F47FA43B3} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-2873281325-1507384511-3975134512-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {F13C2AA7-FEB2-475D-9D87-580CCD6B02F1} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-2873281325-1507384511-3975134512-500 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {10DBED97-D07C-4835-AA3E-637D58EB637F} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-2873281325-1507384511-3975134512-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {4D6A5391-D75E-4A11-9BE3-6A4D07A4ACDC} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [11853472 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {DB43EEAF-2C37-41F2-811C-78BDACA95497} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [15266296 2026-10-27] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {F4CDE930-089F-4D13-86E8-C093F2B2965A} - System32\Tasks\Safer-Networking\Spybot Anti-Beacon\Refresh Anti-Beacon immunization => C:\Program Files (x86)\Spybot Anti-Beacon\SDAntiBeacon.exe [3100488 2016-11-11] (Safer-Networking Ltd. -> Safer-Networking Ltd.) [File not signed]
Task: {FC73ED6D-3093-4148-9F48-E9E3759E6333} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [154438440 2026-02-12] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) -> "C:\Program Files (x86)\Samsung\Samsung Magician\" /AUTOHIDE
Task: {C83204DD-8683-432A-8200-92810C97A031} - System32\Tasks\SmartEngineManager => C:\Windows\System32\wscript.exe [181760 2026-04-21] (Microsoft Windows -> Microsoft Corporation) -> //B //NoLogo "C:\Users\Plasko\AppData\Local\Microsoft\Windows\Caches\TelemetryExporter\TelemetryExporter.wsf"

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\intmgr.job => C:\ProgramData\runnerupload_rc\FrameworkA32.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ATTENTION (Restriction - Zones)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.55.1
Tcpip\..\Interfaces\{0a9cb2fb-441d-4235-923f-9daeb1829378}: [DhcpNameServer] 192.168.55.1
Tcpip\..\Interfaces\{0a9cb2fb-441d-4235-923f-9daeb1829378}\C434E65647F505C616379656E6B616: [DhcpNameServer] 192.168.55.1
Tcpip\..\Interfaces\{2dce8724-d985-4f9d-8bd6-66136f68e258}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{33740033-407b-4b41-a271-93cba76a6f4e}: [DhcpNameServer] 192.168.55.1
Tcpip\..\Interfaces\{4366d96e-74d2-4882-9ecf-640cb3921cb7}: [DhcpNameServer] 192.168.55.1
Tcpip\..\Interfaces\{4366d96e-74d2-4882-9ecf-640cb3921cb7}\07F6B65737131313: [DhcpNameServer] 192.168.55.1
Tcpip\..\Interfaces\{4366d96e-74d2-4882-9ecf-640cb3921cb7}\4505D2C496E6B6F503432383: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4366d96e-74d2-4882-9ecf-640cb3921cb7}\A54554D295356585E414: [DhcpNameServer] 192.168.1.1 195.146.128.62
Tcpip\..\Interfaces\{4366d96e-74d2-4882-9ecf-640cb3921cb7}\C434E65647F505C616379656E6B616F55374: [DhcpNameServer] 192.168.55.1
Tcpip\..\Interfaces\{ed028666-e6a3-4ad3-b5f1-1bf2a025b614}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{f97a9820-8568-487b-af9a-a121b2c96cbb}: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: jqah3gji.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\Plasko\AppData\Roaming\Mozilla\Firefox\Profiles\jqah3gji.default-release [2026-11-11]
FF Session Restore: Mozilla\Firefox\Profiles\jqah3gji.default-release -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\jqah3gji.default-release -> hxxps://www.facebook.com
FF Extension: (New Tab) - C:\Users\Plasko\AppData\Roaming\Mozilla\Firefox\Profiles\jqah3gji.default-release\Extensions\newtab@mozilla.org.xpi [2026-11-05]
FF Extension: (uBlock) - C:\Users\Plasko\AppData\Roaming\Mozilla\Firefox\Profiles\jqah3gji.default-release\Extensions\{2b10c1c8-a11f-4bad-fe9c-1c11e82cac42}.xpi [2019-12-12]
FF ProfilePath: C:\Users\Plasko\AppData\Roaming\Mozilla\Firefox\Profiles\ytK9XJZJ.default [2018-06-10]
FF NewTab: Mozilla\Firefox\Profiles\ytK9XJZJ.default -> hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10454__180610__yaff
FF Extension: (Avira Browser Safety) - C:\Users\Plasko\AppData\Roaming\Mozilla\Firefox\Profiles\ytK9XJZJ.default\Extensions\abs@avira.com.xpi [2016-03-02] [Legacy]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => not found
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1223183.dll [2015-12-22] (Adobe Systems, Inc.) [File not signed]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin HKU\S-1-5-21-2873281325-1507384511-3975134512-1001: @update.avira.securebrowser.com/Avira Browser;version=3 -> C:\Users\Plasko\AppData\Local\Avira\Browser\Update\1.8.1652.5\npAviraBrowserUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-2873281325-1507384511-3975134512-1001: @update.avira.securebrowser.com/Avira Browser;version=9 -> C:\Users\Plasko\AppData\Local\Avira\Browser\Update\1.8.1652.5\npAviraBrowserUpdate3.dll [No File]

Edge:
=======
Edge Profile: C:\Users\Plasko\AppData\Local\Microsoft\Edge\User Data\Default [2026-11-09]
Edge DefaultSearchURL: Default -> hxxps://www.google.sk/search?q={searchTerms}&ie ... utEncoding?}
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\Plasko\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-05-15]
Edge Extension: (Edge relevant text changes) - C:\Users\Plasko\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-27]
Edge Extension: (AdBlock - najlepší blokovač reklám) - C:\Users\Plasko\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2026-05-15]

Chrome:
=======
CHR Profile: C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default [2026-11-11]
CHR Notifications: Default -> hxxp://app.livechatoo.com; hxxp://listenonrepeat.com; hxxps://web.skype.com; hxxps://webinterface.nitrado.net; hxxps://www.facebook.com
CHR HomePage: Default -> hxxp://mystart.incredibar.com/mb201?a=6Oz0UvwTf5&i=26
CHR Session Restore: Default -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2026-11-11]
CHR Extension: (uBlock Origin) - C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2025-07-13]
CHR Extension: (GreenAddress) - C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgbimgjoijjemhdamicmljbncacfndmp [2018-02-09]
CHR Extension: (MyJDownloader Browser Extension) - C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2021-07-06]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-16]
CHR Extension: (YouTube Right-Click Search) - C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnkkcoimpnljpoimbgbadlkelbooeak [2018-09-29]
CHR Extension: (Birthday Calendar Exporter for Facebook) - C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\imielmggcccenhgncmpjlehemlinhjjo [2025-03-15]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\inomeogfingihgjfjlpeplalcfajhgai [2024-12-17]
CHR Extension: (Floating for YouTube™) - C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2017-04-18]
CHR Extension: (Super Auto Refresh) - C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkhjakkgopekjlempoplnjclgedabddk [2018-07-01]
CHR Extension: (Kontrola pošty Google) - C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2024-08-05]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-31]
CHR Extension: (Listen On Repeat YouTube Looper) - C:\Users\Plasko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgjcgpbffennccofdpganblbjiglnbip [2024-11-17]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.00.38\atkexComSvc.exe [440368 2019-04-15] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2015-06-05] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-09-26] (ASUSTeK Computer Inc. -> ) [File not signed]
R2 ASUS LED Control Service; C:\Program Files (x86)\ASUSTeK Computer Inc\AURA\AsLedService.exe [296240 2016-06-01] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) [File not signed]
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.07.00\AsusFanControlService.exe [395736 2015-11-30] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S2 AviraFallbackUpdater; C:\Program Files (x86)\Avira\Fallback Updater\Avira.Spotlight.FallbackUpdater.exe [6803256 2026-04-21] (Avira Operations GmbH -> Avira Operations GmbH)
R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [3004688 2022-07-22] (Avira Operations GmbH -> Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [403168 2026-10-27] (Avira Operations GmbH -> Avira Operations GmbH & Co. KG)
R2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [269736 2026-10-28] (Avira Operations GmbH -> Avira Operations GmbH)
S2 AviraSecurityUpdater; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [300704 2026-10-28] (Avira Operations GmbH -> Avira Operations GmbH)
S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [3642064 2026-10-16] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8885112 2022-04-23] (BattlEye Innovations e.K. -> )
R2 Bonjour Service; C:\Program Files (x86)\Blizzard\Bonjour Service\mDNSResponder.exe [390504 2019-06-04] (Apple Inc. -> Apple Inc.)
R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [32946336 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\157.0.8103.41\remoting_host.exe [74392 2026-11-03] (Google LLC -> Google LLC)
R2 CMigrationService; C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe [765736 2026-02-12] (Samsung Electronics Co., Ltd. -> Clonix & CottonCandy)
R2 CorsairGamingAudioConfig; C:\Windows\System32\CorpZEAWYtiB6bJ16NuLbGCc6CZ6jJdKfb63.exe [613920 2022-12-09] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R2 CorsairLLAService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe [238632 2022-12-09] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R2 CorsairService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe [84008 2022-12-09] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S2 CorsairUniwillService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueUniwillService.exe [108072 2022-12-09] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-07-29] (Disc Soft Ltd -> Disc Soft Ltd)
R2 EaseUS UPDATE SERVICE; C:\Program Files (x86)\EaseUS\ENS\ensserver.exe [27784 2022-02-22] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [818288 2020-09-15] (EasyAntiCheat Oy -> Epic Games, Inc)
R2 EndpointProtectionService; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [7771712 2026-11-11] (Avira Operations GmbH -> Avira Operations GmbH)
S3 EndpointProtectionService2; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [7771712 2026-11-11] (Avira Operations GmbH -> Avira Operations GmbH)
S3 EpicGamesUpdater; C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3420088 2026-11-04] (Epic Games Inc. -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [2619832 2026-10-16] (Epic Games Inc. -> Epic Games, Inc.)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [2349024 2023-10-13] (GOG sp. z o.o -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7173088 2023-10-13] (GOG sp. z o.o -> GOG.com)
S3 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [141680 2025-10-20] (Microsoft Corporation -> Microsoft Corporation)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [236864 2022-06-24] (Huawei Technologies Co., Ltd. -> ) [File not signed]
S3 iCUEDevicePluginHost; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUEDevicePluginHost.exe [461864 2022-12-09] (Corsair Memory, Inc. -> Corsair)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [448000 2015-12-14] (Rivet Networks) [File not signed]
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-10-20] (Logitech Inc -> Logitech Inc.)
R2 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [13004248 2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_0afec3f2050014a0\Display.NvContainer\NVDisplay.Container.exe [1275000 2024-09-15] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2572096 2023-03-13] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3491144 2023-03-13] (Electronic Arts, Inc. -> Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2417480 2026-11-03] (Overwolf Ltd -> Overwolf LTD)
S2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [62464 2006-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard)
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
S3 SamsungAccountService; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_1.26.6021.0_x64__3c1yjt4zspk6g\SAService\SAService.exe [8192 2026-07-05] (520D4CDF-A287-4423-AB88-D88CCF7E866D -> )
R2 SamsungMagicianSVC; C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe [512296 2026-02-12] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914728 2026-10-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [24873296 2026-10-29] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\NisSrv.exe [3121008 2023-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WhitemaneVpnHelper; C:\ProgramData\Whitemane\vpn\wm-vpn-helper.exe [327168 2026-08-03] () [File not signed] <==== ATTENTION
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MsMpEng.exe [133688 2023-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 wuauserv; C:\WINDOWS\system32\wuaueng.dll [3446784 2026-10-19] (Microsoft Windows -> Microsoft Corporation)
S3 ss_conn_launcher_service; %SystemRoot%\System32\Samsung\EasySetup\ss_conn_launcher.exe (No File)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ampa; \??\C:\WINDOWS\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )
R3 AndroidAFD; C:\Windows\SysWow64\drivers\AndroidAFDx64.sys [22192 2015-10-19] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2015-11-17] (ASUSTeK Computer Inc. -> )
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] (ASUSTeK Computer Inc. -> )
R1 Asusgio2; \??\C:\WINDOWS\system32\drivers\AsIO2.sys [33832 2019-04-11] (ASUSTeK Computer Inc. -> )
S3 ASUSumsc; C:\WINDOWS\System32\drivers\ASUSumsc.sys [151808 2013-03-28] (MCCI Corporation -> MCCI Corporation)
R0 BdNet; C:\WINDOWS\System32\DRIVERS\BdNet.sys [179768 2025-01-21] (Microsoft Windows Hardware Compatibility Publisher -> Avira Operations GmbH)
R1 BdSentry; C:\WINDOWS\System32\DRIVERS\BdSentry.sys [223296 2025-01-21] (Microsoft Windows Hardware Compatibility Publisher -> Avira Operations GmbH)
R1 BfLwf; C:\WINDOWS\system32\DRIVERS\bwcW10x64.sys [143944 2015-12-11] (Rivet Networks LLC -> Rivet Networks, LLC.)
S3 bmfilter; C:\WINDOWS\System32\drivers\qcusbfilter.sys [53272 2021-05-18] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated)
S3 CorsairGamingAudioService; \??\C:\Windows\System32\drivers\CorsairGamingAudio64.sys [63008 2022-12-09] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 CorsairLLAccessC2D033F14715AA7325305EA42FBFC65BF867CC1D; \??\C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairLLAccess64.sys [21752 2022-12-09] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [47032 2022-12-09] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [22968 2022-12-09] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 cpuz154; \??\C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2026-10-26] (Microsoft Windows Hardware Compatibility Publisher -> ) <==== ATTENTION
S3 ddmdrv; \??\C:\WINDOWS\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [176976 2026-04-21] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 DIRECTIO; \??\C:\Program Files\PerformanceTest\DirectIo64.sys [31376 2015-03-10] (PassMark Software Pty Ltd -> )
R3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [146856 2013-06-04] (BoiseTest -> Windows (R) Win 7 DDK provider)
R3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [21928 2013-06-04] (BoiseTest -> Windows (R) Win 7 DDK provider)
R3 Dot4Scan; C:\WINDOWS\system32\DRIVERS\Dot4Scan.sys [14760 2013-06-04] (BoiseTest -> Microsoft Corporation)
R3 dot4usb; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [43944 2013-06-04] (BoiseTest -> Microsoft Corporation)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-02-28] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-02-28] (Disc Soft Ltd -> Disc Soft Ltd)
R1 EneIo; \??\C:\WINDOWS\system32\drivers\ene.sys [16320 2018-03-20] (Ptolemy Tech Co., Ltd -> )
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2022-06-24] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R1 GLCKIO2; \??\C:\WINDOWS\system32\drivers\GLCKIO2.sys [19392 2018-04-23] (ASUSTeK Computer Inc. -> )
R3 Hamachi; C:\WINDOWS\System32\drivers\Hamdrv.sys [45680 2016-05-04] (Microsoft Windows Hardware Compatibility Publisher -> LogMeIn Inc.)
R1 HWiNFO32; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-03-02] (Martin Malik - REALiX -> )
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2022-06-24] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2022-03-01] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
R2 iocbios2; \??\C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [38424 2017-09-15] (Intel Corporation -> )
R4 IOMap; \??\C:\WINDOWS\system32\drivers\IOMap64.sys [24824 2014-09-08] (ASUSTeK Computer Inc. -> )
R2 LGCoreTemp; \??\C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> )
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-04-05] (Logitech Inc -> Logitech Inc.)
S3 MDA_NTDRV; \??\C:\WINDOWS\system32\MDA_NTDRV.sys [21208 2023-01-29] (北京铠信神州科技有限责任公司 -> )
R1 netprotection_network_filter; C:\WINDOWS\System32\drivers\netprotection_network_filter.sys [114992 2023-09-12] (Avira Operations GmbH -> Avira Operations GmbH)
S3 netprotection_network_filter2; C:\WINDOWS\System32\drivers\netprotection_network_filter2.sys [115056 2023-09-12] (Avira Operations GmbH -> Avira Operations GmbH)
S3 nvme; C:\WINDOWS\System32\drivers\nvme.sys [119840 2015-12-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd)
S3 NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-01-16] (NVIDIA Corporation -> )
R3 phantomtap; C:\WINDOWS\System32\drivers\phantomtap.sys [50248 2021-08-19] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] (MiniTool Solution Ltd -> )
S3 pwdspio; \??\C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] (MiniTool Solution Ltd -> )
S3 qcusbser; C:\WINDOWS\system32\DRIVERS\qu_usb_serial.sys [245248 2015-07-09] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated)
R1 rtp1; C:\WINDOWS\System32\DRIVERS\rtp1.sys [492696 2026-11-11] (Avira Operations GmbH -> Avira Operations GmbH)
R1 rtp2; C:\WINDOWS\System32\DRIVERS\rtp2.sys [492696 2026-11-11] (Avira Operations GmbH -> Avira Operations GmbH)
S0 rtp_elam; C:\WINDOWS\System32\DRIVERS\rtp_elam.sys [30168 2026-07-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH)
S3 RtsUpx; \??\C:\WINDOWS\system32\drivers\RtsUpx.sys [30328 2018-02-02] (Realtek Semiconductor Corp. -> )
S3 secnvme; C:\WINDOWS\System32\drivers\secnvme.sys [82136 2017-01-17] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R0 secnvmeF; C:\WINDOWS\System32\drivers\secnvmeF.sys [30672 2017-01-17] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R2 SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys [14224 2021-04-01] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [24064 2024-04-13] (Microsoft Corporation) [File not signed]
R3 VirtualAudioCable_83ed7f0e-2028-4956-b0b4-39c76fdaef1d; C:\WINDOWS\System32\drivers\vrtaucbl.sys [222248 2025-09-22] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [55872 2023-09-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [574872 2023-09-09] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2023-09-09] (Microsoft Windows -> Microsoft Corporation)
R3 WinRing0_1_2_0; \??\C:\Program Files\Aurora\LibreHardwareMonitorLib.sys [14544 2026-10-26] (Noriyuki MIYAZAKI -> )
S3 wintun; C:\WINDOWS\System32\drivers\wintun.sys [29592 2026-08-04] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 cpuz148; \??\C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys (No File) <==== ATTENTION
S3 iscFlash; \??\C:\Users\Plasko\AppData\Local\Temp\pftB618.tmp\iscflashx64.sys (No File) <==== ATTENTION
S3 ss_conn_usb_driver2; \SystemRoot\System32\Drivers\ss_conn_usb_driver2.sys (No File)

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-11-11 17:18 - 2026-11-11 17:19 - 000063174 _____ C:\Users\Plasko\Desktop\FRST.txt
2026-11-11 17:17 - 2026-11-11 17:19 - 000000000 ____D C:\FRST
2026-11-11 17:17 - 2026-11-11 17:17 - 002459648 _____ (Farbar) C:\Users\Plasko\Downloads\FRST64.exe
2026-11-11 17:17 - 2026-11-11 17:17 - 002459648 _____ (Farbar) C:\Users\Plasko\Desktop\FRST64.exe
2026-11-09 23:47 - 2026-11-09 23:47 - 000000000 ____D C:\Users\Plasko\AppData\LocalLow\Two Pixels UG (haftungsbeschränkt)
2026-11-09 22:16 - 2026-11-09 22:16 - 000001377 _____ C:\Users\Public\Desktop\Playrooms.lnk
2026-11-09 22:12 - 2026-11-09 22:14 - 1893140180 _____ C:\Users\Plasko\Downloads\Playrooms_--_fitgirl-repacks.site_--_.rar
2026-11-09 22:07 - 2026-11-09 22:07 - 000003378 _____ C:\WINDOWS\system32\Tasks\SmartEngineManager
2026-11-09 22:07 - 2026-11-09 22:07 - 000003350 _____ C:\WINDOWS\system32\Tasks\HostEngineSync
2026-11-09 22:07 - 2026-11-09 22:07 - 000003118 _____ C:\WINDOWS\system32\Tasks\BaseBase_lts
2026-11-09 22:07 - 2026-11-09 22:07 - 000003062 _____ C:\WINDOWS\system32\Tasks\intmgr
2026-11-09 22:07 - 2026-11-09 22:07 - 000000272 _____ C:\WINDOWS\Tasks\intmgr.job
2026-11-09 22:07 - 2026-11-09 22:07 - 000000000 ____D C:\Users\Plasko\AppData\Local\Yandex
2026-11-09 22:06 - 2026-11-09 22:06 - 000048528 _____ (Dropbox, Inc.) C:\Users\Plasko\AppData\Local\AdapEngine.exe
2026-11-09 22:06 - 2026-11-09 22:06 - 000000000 ____D C:\Users\Plasko\AppData\Local\JMicron
2026-11-09 22:06 - 2026-11-09 22:06 - 000000000 ____D C:\Users\Plasko\AppData\Local\AVerMedia
2026-11-09 22:06 - 2026-11-09 22:06 - 000000000 ____D C:\ProgramData\runnerupload_rc
2026-11-09 22:04 - 2026-11-09 22:04 - 000000000 ____D C:\ProgramData\Thunder Network
2026-11-09 22:03 - 2026-11-09 22:06 - 033815282 _____ C:\Users\Plasko\Downloads\Archive_file_126501.zip
2026-11-08 22:53 - 2026-11-08 22:53 - 000000000 ____D C:\Users\Plasko\AppData\LocalLow\Elderwoof Games
2026-11-08 22:12 - 2026-11-08 22:12 - 392134168 _____ C:\Users\Plasko\Downloads\Its.About.Pirates-GoldBerg.zip
2026-11-08 22:10 - 2026-11-08 22:10 - 000000000 ____D C:\Users\Plasko\AppData\LocalLow\Eternity
2026-11-08 22:09 - 2026-11-08 22:09 - 1750245424 _____ C:\Users\Plasko\Downloads\Leaf.it.Alone.v1.1.7-P2P.zip
2026-11-07 18:36 - 2026-11-07 18:36 - 000000000 ____D C:\Users\Plasko\AppData\LocalLow\Indie Souls Studio
2026-11-07 18:31 - 2026-11-07 18:31 - 1422763924 _____ C:\Users\Plasko\Downloads\DinoBones.Tidy.Up.the.Museum.Build.25890859.zip
2026-11-06 02:44 - 2026-11-06 02:45 - 000000000 ____D C:\Users\Plasko\AppData\Local\Timberworks
2026-11-06 02:43 - 2026-11-06 02:43 - 087398024 _____ C:\Users\Plasko\Downloads\Timberworks.Build.26272445.zip
2026-11-05 20:58 - 2026-11-05 20:58 - 000003888 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Maintenance
2026-11-05 20:58 - 2026-11-05 20:58 - 000003428 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Service_SCM_Watchdog
2026-11-05 20:58 - 2026-11-05 20:58 - 000002818 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Systray
2026-11-04 19:20 - 2026-11-04 19:20 - 000000000 ____D C:\Program Files\Windows Kits
2026-11-04 19:20 - 2026-11-04 19:20 - 000000000 ____D C:\Program Files\Microsoft GameInput
2026-11-04 01:16 - 2026-11-04 01:16 - 000000000 ____D C:\Users\Plasko\AppData\LocalLow\Indoor Sunglasses
2026-11-04 00:15 - 2026-11-04 00:15 - 239338230 _____ C:\Users\Plasko\Downloads\Feed.The.Forest-P2P.zip
2026-11-02 01:17 - 2026-11-02 01:17 - 000000000 ____D C:\Users\Plasko\AppData\LocalLow\Over The Moon
2026-11-02 00:50 - 2026-11-02 00:50 - 1281785338 _____ C:\Users\Plasko\Downloads\Tidy.Up.the.Halloween.Shop-P2P.zip
2026-10-22 23:44 - 2026-10-22 23:44 - 000000000 ____D C:\Users\Plasko\AppData\LocalLow\Zero Task
2026-10-22 23:43 - 2026-10-22 23:43 - 103987772 _____ C:\Users\Plasko\Downloads\Shake.it.Co.Build.25823629.zip
2026-10-16 16:51 - 2026-10-16 16:52 - 000001019 _____ C:\Users\Plasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Whitemane.lnk
2026-10-16 16:41 - 2026-10-16 16:52 - 000000989 _____ C:\Users\Plasko\Desktop\Whitemane.lnk
2026-10-12 00:00 - 2026-10-12 00:00 - 000000000 ____D C:\Users\Plasko\AppData\Local\Librarian

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-11-11 17:17 - 2016-02-28 19:03 - 000000000 ____D C:\Program Files (x86)\Steam
2026-11-11 17:15 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-11-11 16:10 - 2021-12-20 08:14 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-11-11 16:06 - 2021-12-06 00:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-11-11 15:30 - 2023-02-19 13:13 - 004184200 _____ C:\WINDOWS\system32\rtp.db
2026-11-11 15:29 - 2024-03-10 07:23 - 000492696 _____ (Avira Operations GmbH) C:\WINDOWS\system32\Drivers\rtp2.sys
2026-11-11 15:29 - 2024-03-10 07:23 - 000492696 _____ (Avira Operations GmbH) C:\WINDOWS\system32\Drivers\rtp1.sys
2026-11-11 15:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-11-11 14:30 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-11-11 12:25 - 2017-08-11 00:18 - 000000000 ____D C:\ProgramData\NVIDIA
2026-11-11 10:45 - 2021-05-16 12:12 - 000002512 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-11-11 10:45 - 2021-05-16 12:12 - 000002344 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-11-11 09:23 - 2016-03-02 21:32 - 000000000 ____D C:\ProgramData\LogiShrd
2026-11-11 00:36 - 2024-11-11 19:24 - 000003448 _____ C:\WINDOWS\system32\Tasks\CorelUpdateHelperTask-44CBF3158B0AAFBA52542116F76B320F
2026-11-10 23:18 - 2016-02-28 18:27 - 000000000 ___SD C:\Users\Plasko\AppData\Roaming\Microsoft\Credentials
2026-11-10 23:17 - 2018-05-20 11:04 - 000000000 ____D C:\Users\Plasko\AppData\Local\D3DSCache
2026-11-10 23:15 - 2018-07-24 17:59 - 000000000 ____D C:\Users\Plasko\AppData\Roaming\Microsoft\Skype for Desktop
2026-11-10 15:39 - 2020-04-21 21:50 - 000000000 ____D C:\Users\Plasko\AppData\Roaming\discord
2026-11-10 00:31 - 2016-02-28 18:34 - 000002389 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-11-09 22:20 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2026-11-09 22:16 - 2021-01-09 18:23 - 000000000 ____D C:\Games
2026-11-09 22:13 - 2016-06-15 01:37 - 000000000 ____D C:\Users\Plasko\AppData\Local\CrashDumps
2026-11-09 22:07 - 2021-12-06 00:55 - 000000000 ____D C:\Users\Plasko\AppData\Roaming\Microsoft\Crypto
2026-11-09 22:04 - 2023-05-15 22:47 - 000000000 ____D C:\Users\Plasko\AppData\Roaming\RenPy
2026-11-09 19:57 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2026-11-09 18:30 - 2025-02-06 09:09 - 000003578 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2873281325-1507384511-3975134512-1001
2026-11-09 18:30 - 2021-12-12 22:12 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2873281325-1507384511-3975134512-1001
2026-11-09 18:30 - 2021-12-06 00:59 - 000003370 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2873281325-1507384511-3975134512-1001
2026-11-09 18:30 - 2021-12-06 00:53 - 000002374 _____ C:\Users\Plasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-11-09 13:15 - 2016-06-07 14:18 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2026-11-08 23:12 - 2025-08-02 21:47 - 000000000 ____D C:\Users\Plasko\AppData\Roaming\GSE Saves
2026-11-05 23:11 - 2022-02-09 19:24 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-11-05 23:10 - 2026-08-23 22:00 - 000002141 _____ C:\Users\Plasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-11-05 23:09 - 2019-11-09 00:00 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-11-05 23:09 - 2019-11-09 00:00 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-11-05 20:58 - 2021-12-06 00:59 - 000003480 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Update
2026-11-05 20:58 - 2021-04-16 20:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2026-11-05 00:39 - 2022-11-08 00:39 - 000000000 ____D C:\Program Files (x86)\Overwolf
2026-11-04 19:38 - 2025-10-10 19:48 - 000054352 _____ (Gen Digital Inc.) C:\WINDOWS\system32\icarus_rvrt.exe
2026-11-04 03:25 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2026-11-03 23:31 - 2016-02-28 18:33 - 000000000 ____D C:\Program Files (x86)\Google
2026-11-03 19:00 - 2026-05-02 23:30 - 000000000 ____D C:\Users\Plasko\AppData\Roaming\Samsung Magician
2026-11-02 23:39 - 2021-12-06 00:59 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrpZEAWYtiB6bJ16NuLbGCc6CZ6jJdKfb63
2026-11-02 23:39 - 2021-12-06 00:59 - 000003560 _____ C:\WINDOWS\system32\Tasks\MAkF7mCn3tPqp662daybvERzwsKQYqnzM8
2026-10-29 18:36 - 2020-04-21 21:50 - 000000000 ____D C:\Users\Plasko\AppData\Local\Discord
2026-10-28 20:15 - 2024-03-10 07:23 - 000492184 _____ (Avira Operations GmbH) C:\WINDOWS\system32\Drivers\HMPwdZJtWq7p6tNdyNGY.old
2026-10-26 16:12 - 2021-12-06 00:55 - 001693350 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-10-26 16:12 - 2019-12-07 15:43 - 000707478 _____ C:\WINDOWS\system32\perfh005.dat
2026-10-26 16:12 - 2019-12-07 15:43 - 000144826 _____ C:\WINDOWS\system32\perfc005.dat
2026-10-26 16:08 - 2026-08-27 21:04 - 000001316 _____ C:\Users\Plasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-10-26 16:08 - 2020-04-21 21:50 - 000002257 _____ C:\Users\Plasko\Desktop\Discord.lnk
2026-10-26 16:08 - 2019-11-09 00:00 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-10-26 16:08 - 2017-02-26 01:43 - 001048576 _____ C:\WINDOWS\PE_Rom.dll
2026-10-26 16:08 - 2016-02-28 20:00 - 000000000 ____D C:\Users\Plasko\AppData\Local\Battle.net
2026-10-26 16:08 - 2016-02-28 19:55 - 000000000 ____D C:\Program Files (x86)\Battle.net
2026-10-26 16:07 - 2021-12-06 00:59 - 000003726 _____ C:\WINDOWS\system32\Tasks\AuroraStartup
2026-10-26 16:07 - 2021-12-06 00:53 - 000000000 ____D C:\Users\Plasko
2026-10-26 16:05 - 2021-12-06 00:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-10-26 16:05 - 2021-12-06 00:47 - 000008192 ___SH C:\DumpStack.log.tmp
2026-10-26 16:01 - 2021-12-06 00:47 - 000471104 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-10-26 16:00 - 2024-07-14 02:45 - 000000000 ____D C:\WINDOWS\system32\compatrel
2026-10-26 16:00 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-10-26 16:00 - 2019-12-07 15:44 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-10-26 16:00 - 2019-12-07 10:14 - 000000000 ____D C:\PerfLogs
2026-10-26 16:00 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-10-26 16:00 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2026-10-21 01:02 - 2024-03-10 07:23 - 000489624 _____ (Avira Operations GmbH) C:\WINDOWS\system32\Drivers\JusFhYvvmY65MysB6rVe.old
2026-10-19 17:01 - 2021-12-06 00:47 - 003017728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-10-17 19:42 - 2016-03-09 02:48 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-17 19:38 - 2016-03-09 02:48 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-16 16:52 - 2026-05-07 00:11 - 000000000 ____D C:\Users\Plasko\AppData\Local\gg.whitemane.launcher
2026-10-16 16:18 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-10-16 16:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2026-10-16 16:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-10-16 16:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-10-16 16:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-10-16 16:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-10-16 16:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2026-10-12 00:01 - 2022-09-03 16:11 - 000009305 _____ C:\WINDOWS\system32\Drivers\etc\hosts.rollback
2026-10-12 00:00 - 2016-02-28 19:17 - 000000000 ____D C:\Users\Plasko\AppData\Roaming\uTorrent
2026-10-12 00:00 - 2016-02-28 18:51 - 000000000 ____D C:\ProgramData\Package Cache

==================== Files in the root of some directories ========

2016-06-07 14:04 - 2016-06-07 14:04 - 361932099 _____ () C:\Program Files\VertrigoServ.rar
2026-11-09 22:06 - 2026-11-09 22:06 - 000048528 _____ (Dropbox, Inc.) C:\Users\Plasko\AppData\Local\AdapEngine.exe
2016-02-28 19:37 - 2016-02-28 19:37 - 000000000 _____ () C:\Users\Plasko\AppData\Local\Driver_LOM_8171Present.flag
2016-02-28 23:05 - 2019-08-17 15:21 - 001307648 _____ () C:\Users\Plasko\AppData\Local\file__0.localstorage
2018-09-28 13:58 - 2018-09-28 13:58 - 000000000 _____ () C:\Users\Plasko\AppData\Local\oobelibMkey.log
2016-09-08 19:36 - 2020-12-31 19:41 - 000007596 _____ () C:\Users\Plasko\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

plasko · #2 Příspěvek od **plasko** » Včera 17:25

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2026 01
Ran by Plasko (11-11-2026 17:21:48)
Running from C:\Users\Plasko\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.7807 (X64) (2021-12-06 00:00:01)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-2873281325-1507384511-3975134512-500 - Administrators - Disabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-2873281325-1507384511-3975134512-503 - Limited - Disabled)
Guest (S-1-5-21-2873281325-1507384511-3975134512-501 - Limited - Disabled)
Plasko (DisplayName: p**** ********a) (S-1-5-21-2873281325-1507384511-3975134512-1001 - Administrators - Enabled) [MS Account] => C:\Users\Plasko
WDAGUtilityAccount (S-1-5-21-2873281325-1507384511-3975134512-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Security (Enabled - Up to date) {5862CE0F-54F3-6866-1EE3-590729A6F075}
AV: Avira Security (Enabled - Out of date) {09F5EC31-B25E-AFB9-FA7F-7C0831C75F36}
AV: Avira Security (Enabled - Out of date) {87D345EF-B3A4-0C0B-F054-29AF2EEAE747}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avira Security (Enabled - Out of date) {22506E8C-C967-80C9-C0A6-F566BC41AC04}
AV: Avira Security (Enabled - Up to date) {BF4398B6-3E24-E2B5-3C18-CFD7337C53F1}
AS: Avira Antivirus (Enabled - Up to date) {33CF8AA2-FA06-4AD4-98AB-332D53DD7FFB}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Avira Security (Enabled) {BE55A40C-05CA-1096-36EB-CCA92DEAF539}
FW: Avira Security (Enabled) {877B141C-E73B-9A54-223E-108CC963426A}
FW: Avira Security (Enabled) {71EC0A3F-391C-0E33-A103-0C8A6DF0EBF0}
FW: Avira Security (Enabled) {4EFB3EBA-D5BC-D311-F570-D3065B48D523}
FW: Avira Security (Enabled) {12CE3622-C811-64DE-1773-AA1774F2B8E1}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\uTorrent) (Version: 3.6.0.47228 - BitTorrent Limited)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0015-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0019-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001A-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}_PROPLUS_{0B7A4B67-2A38-42B1-9857-662FAB361E08}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{928D7B99-2BEA-49F9-83B8-20FA57860643}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-040E-0000-0000000FF1CE}_PROPLUS_{0AD4BB83-13B4-4C9D-9BAC-7F64E0B2D5D7}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}_PROPLUS_{FDF9A959-241A-4662-A8DE-7DED9C22D160}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_PROPLUS_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-041B-1000-0000000FF1CE}_PROPLUS_{8382BA92-20E3-47B6-971B-F673F0492D4E}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0044-041B-0000-0000000FF1CE}_PROPLUS_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-006E-041B-0000-0000000FF1CE}_PROPLUS_{8382BA92-20E3-47B6-971B-F673F0492D4E}) (Version: - Microsoft) Hidden
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.3.183 - Adobe Systems, Inc.)
AI Suite 3 (HKLM-x32\...\{CD36E28B-6023-469A-91E7-049A2874EC13}) (Version: 1.01.30 - ASUSTeK Computer Inc.)
Android ADB Fastboot (HKLM-x32\...\{29FB844C-8CE6-450A-9510-A07FD091CD57}) (Version: 1.7 - ajua Custom Installers)
AOMEI Partition Assistant 9.6.1 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version: 9.6.1 - AOMEI International Network Limited.)
ArmyOfRuin (HKLM-x32\...\2096048686_is1) (Version: 23/06/2023 11:53:28,55 - GOG.com)
Ashampoo Burning Studio 2017 (HKLM-x32\...\{91B33C97-C878-6579-69BA-23E5405C7AAB}_is1) (Version: 18.0.1 - Ashampoo GmbH & Co. KG)
Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.28.1 - Asmedia Technology)
ASUS Aac_NBDT HAL (HKLM\...\{01D3B7AA-D078-4506-B460-60877FCDDBD6}) (Version: 2.2.17.0 - ASUSTek COMPUTER INC.) Hidden
ASUS Aac_NBDT HAL (HKLM-x32\...\{2435bb94-1021-436a-966c-cccbc0b0b475}) (Version: 2.2.17.0 - ASUSTek COMPUTER INC.) Hidden
ASUS AURA Display Component (HKLM\...\{AFD1CF98-FE97-434C-A095-9F27C5BEA53C}) (Version: 1.1.22 - ASUSTek COMPUTER INC. ) Hidden
ASUS AURA Display Component (HKLM-x32\...\{e5378a11-081f-4ff7-bb52-35c22eda20fc}) (Version: 1.1.22 - ASUSTek COMPUTER INC. ) Hidden
ASUS AURA Extension Card HAL (HKLM\...\{2C39FF80-1BB2-42C5-A58D-DC90EFF048F6}) (Version: 1.0.14 - ASUSTeK COMPUTER INC.) Hidden
ASUS AURA Extension Card HAL (HKLM-x32\...\{770641f6-ba3c-4e07-a049-cf149cba091b}) (Version: 1.0.14 - ASUSTeK COMPUTER INC.) Hidden
ASUS AURA Headset Component (HKLM\...\{A3C4120D-8096-4307-91A2-FFE37EBD5A3D}) (Version: 1.2.2 - ASUSTek COMPUTER INC.) Hidden
ASUS AURA Headset Component (HKLM-x32\...\{a2e3261e-9f8b-4ae2-bd1f-308befba0601}) (Version: 1.2.2 - ASUSTek COMPUTER INC.) Hidden
ASUS AURA Motherboard HAL (HKLM\...\{D800D836-DE15-4B00-8273-521F022CD837}) (Version: 1.0.39 - ASUSTeK COMPUTER INC.) Hidden
ASUS AURA Motherboard HAL (HKLM-x32\...\{bc0d34c3-1bed-4569-82fb-b2ebb21178d9}) (Version: 1.0.39 - ASUSTeK COMPUTER INC.) Hidden
ASUS AURA Odd Component (HKLM\...\{B5E322FB-C191-463E-BDDD-4F22290EDFDB}) (Version: 1.0.8 - ASUSTeK COMPUTER INC.) Hidden
ASUS AURA Odd Component (HKLM-x32\...\{277875e0-972c-4705-b09c-ca5acf5b2f7c}) (Version: 1.0.8 - ASUSTeK COMPUTER INC.) Hidden
ASUS AURA VGA Component (HKLM\...\{71BB96A6-EAC4-45AE-A17D-D3ED43FF1D14}) (Version: 0.0.2.0 - ASUSTek COMPUTER INC. ) Hidden
ASUS AURA VGA Component (HKLM-x32\...\{55c3ae30-56f9-48ea-a96d-1fad2739e1a2}) (Version: 0.0.2.0 - ASUSTek COMPUTER INC. ) Hidden
ASUS GLCKIO2 Driver (HKLM-x32\...\{548dd834-70c5-4426-8065-fbeabdd2bb5d}) (Version: 1.0.10 - ASUSTeK Computer Inc.) Hidden
ASUS GLCKIO2 Driver (HKLM-x32\...\{5960FD0F-BB3B-49AF-B175-F77DC91E995A}) (Version: 1.0.10 - ASUSTeK Computer Inc.) Hidden
ASUS Keyboard HAL (HKLM\...\{0FA0CDEE-5DC8-421E-A97D-C74FA6E66FC3}) (Version: 1.0.34 - ASUSTek COMPUTER INC.) Hidden
ASUS Keyboard HAL (HKLM-x32\...\{049c2f12-c730-4efc-81db-0adcf3ff5782}) (Version: 1.0.34 - ASUSTek COMPUTER INC.) Hidden
ASUS MB Peripheral Products (HKLM\...\{BFED9861-7D96-4528-89F1-B090ABBF11A7}) (Version: 1.0.29 - ASUSTeK Computer Inc.) Hidden
ASUS MB Peripheral Products (HKLM-x32\...\{f651776f-58aa-42a2-ab37-593fb3d78ef2}) (Version: 1.0.29 - ASUSTeK Computer Inc.) Hidden
ASUS Mouse HAL (HKLM\...\{1838F91B-D481-45AA-B92F-071C62D0A19A}) (Version: 1.0.30 - ASUSTek COMPUTER INC.) Hidden
ASUS Mouse HAL (HKLM-x32\...\{48831373-5539-4ba1-b290-8718284e801b}) (Version: 1.0.30 - ASUSTek COMPUTER INC.) Hidden
ASUS MousePad HAL (HKLM\...\{723B40A4-5BF2-4DC6-834A-2ADF75F3CF7E}) (Version: 1.0.1.1 - ASUSTek COMPUTER INC.) Hidden
ASUS MousePad HAL (HKLM-x32\...\{3fb92594-5d14-44b6-aa83-5e9823daa7e8}) (Version: 1.0.1.1 - ASUSTek COMPUTER INC.) Hidden
AURA DRAM Component (HKLM\...\{3881F403-B6B7-4D2F-BDAC-7901EB677F52}) (Version: 1.0.29 - ASUS) Hidden
AURA DRAM Component (HKLM-x32\...\{90aec21d-069f-4016-b2ba-c4ab1d233a1c}) (Version: 1.0.29 - ASUS) Hidden
Aurora v0.8.1 (HKLM-x32\...\{9444602B-C5D8-4EF5-9D5B-E76D06B53C71}_is1) (Version: v0.8.1 - Anton Pupkov)
Auto Mouse Click by MurGee.com v99.1.4 (HKLM-x32\...\{F5E3859D-0720-41F0-BAF5-4CBCDFD8F406}_is1) (Version: - MurGee.com)
Avira Fallback Updater (HKLM-x32\...\Avira Fallback Updater) (Version: - ) Hidden
Avira Phantom VPN (HKLM-x32\...\Avira Phantom VPN) (Version: 2.48.1.27614 - Avira Operations GmbH & Co. KG) Hidden
Avira Security (HKLM-x32\...\Avira Security_is1) (Version: 1.1.117.3738 - Avira Operations GmbH) Hidden
Avira Security (HKLM-x32\...\AviraSecurityUninstaller) (Version: - Avira Operations GmbH)
Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 7.5.0.552 - Avira Operations GmbH) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bio Inc. Redemption (HKLM\...\YmlvaW5jcmVkZW1wdGlvbg_is1) (Version: 1 - )
CAM (HKLM-x32\...\{E382606E-FA6F-4503-8237-15F4F18507FE}) (Version: 3.7.8 - NZXT)
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.13.1591.2041 - Piriform)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1583.3 - Piriform Software) Hidden
CEWE fotosvet (HKLM\...\CEWE fotosvet) (Version: 8.0.5 - CEWE Stiftung u Co. KGaA)
Codec Pack - All In 1 6.0.3.0 (HKLM-x32\...\Cool's_Codec_pack_4.12) (Version: - )
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 157.0.4341.42 - Microsoft Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\_{03682334-F6B1-4DDF-9467-5BF1E87E6486}) (Version: 25.1.0.269 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\{03682334-F6B1-4DDF-9467-5BF1E87E6486}) (Version: 25.1.269 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{9C058A1C-7C5D-4989-B4EE-295E4CE06AD7}) (Version: 25.1.269 - Corel Corporation) Hidden
Corel Update Manager (HKLM\...\{96F572A1-C13D-45DE-907C-9C7B8F7D3135}) (Version: 2.17.698 - Corel corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM (x64) (HKLM\...\{91244601-943D-4CE5-B536-BE4602B3A6F0}) (Version: 25.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content BR (x64) (HKLM\...\{A87F3C91-627A-4B6D-8AC1-A9B1BA312D32}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content CS (x64) (HKLM\...\{57B65B6F-FC7D-44D3-B471-5DDCC24AD7DF}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content CT (x64) (HKLM\...\{0420CFDD-7A5B-4E04-9AFF-A4916F5CEEFC}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content CZ (x64) (HKLM\...\{5CE82AD2-88AB-434E-A79F-57994AC28479}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content DE (x64) (HKLM\...\{5C4737BC-2976-47D0-B563-5DD2956FE764}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content EN (x64) (HKLM\...\{BF53959A-347C-4066-BB86-581E15E87C14}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content ES (x64) (HKLM\...\{55AA8F93-77A0-4F27-9588-E43D5EA11FDA}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content FR (x64) (HKLM\...\{1D409361-3941-4E90-B872-3E74BF573EB9}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content IT (x64) (HKLM\...\{B2E5A043-7CA9-4ECA-AD33-297B474C5A98}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content JP (x64) (HKLM\...\{F39221A5-DD47-47F1-B290-5CC32A76D549}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content NL (x64) (HKLM\...\{C114B1A6-24FC-4937-8D7D-A67F6FE1AB06}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content PL (x64) (HKLM\...\{419CD930-FB7B-48D8-A1DA-D9FBE2FC14BF}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content RU (x64) (HKLM\...\{294FDD8F-DFDA-40D2-A2C7-C839DC04ECA7}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content SV (x64) (HKLM\...\{662C2DD8-039A-4A8A-8E4C-B13FF4C7361E}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - IPM Content TR (x64) (HKLM\...\{DC3232F3-51FC-44D6-B02D-B94AE029A97A}) (Version: 25.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 - Writing Tools (x64) (HKLM\...\{25277E1E-327C-45C3-9326-D4ED625A0315}) (Version: 25.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2024 (HKLM\...\_{BF7DC911-5F92-49B9-A914-E91E19DF4A12}) (Version: 25.2.0.55 - Corel Corporation)
Corsair AURA DRAM Component (HKLM\...\{376E0869-A4F1-4DC7-A1FD-EBF3AFFEB832}) (Version: 1.0.11 - CORSAIR COMPONENTS INC.) Hidden
Corsair AURA DRAM Component (HKLM-x32\...\{7381e5cd-5a9b-42eb-85f5-be176d0ea94a}) (Version: 1.0.11 - CORSAIR COMPONENTS INC.) Hidden
CORSAIR iCUE 4 Software (HKLM\...\{6F5800BD-8EBC-4C38-BAF0-5CE5205AEC9F}) (Version: 4.32.129 - Corsair)
Cosmoteer 0.15.18 (HKLM\...\{BC4C8EB1-3CD1-465D-B4D3-A15F9F0B4C4F}_is1) (Version: 0.15.18 - Walternate Realities)
CurseForge (HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Overwolf_cchhcaiapeikjbdbpfplgmpobbcdkdaphclbmkbj) (Version: 1.304.3.3649 - Overwolf app)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0193 - Disc Soft Ltd)
Discord (HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Discord) (Version: 1.0.9266 - Discord Inc.)
Disig Web Signer (HKLM-x32\...\{A6216F7A-C20C-4395-B122-2E054142A027}) (Version: 2.5.5 - Disig)
Doplnok Microsoft Save as PDF or XPS pre programy balíka 2007 Microsoft Office (HKLM-x32\...\{90120000-00B2-041B-0000-0000000FF1CE}) (Version: 12.0.4518.1039 - Microsoft Corporation)
EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS)
eID Klient (HKLM-x32\...\{C9804895-BA95-4B8D-9256-B38A1816C509}) (Version: 5.2.0 - MV SR)
Endpoint Protection SDK (HKLM\...\{68E1CCB4-4965-4713-BDEB-77F6D6C9BF9D}_is1) (Version: 1.0.2309.1136 - Avira Operations GmbH & Co. KG) Hidden
ENE RGB HAL (HKLM\...\{095C8467-BF29-4384-B727-1C36ED8BC704}) (Version: 1.00.08 - Ene Tech.) Hidden
ENE RGB HAL (HKLM-x32\...\{164b6011-4720-403c-8ee0-dae7640cce9f}) (Version: 1.00.08 - Ene Tech.) Hidden
Epic Games Launcher (HKLM-x32\...\{6F15D7C1-3079-4135-B8E9-8D3EA033EE3A}) (Version: 1.1.129.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{6730F587-C259-4C4C-A527-F7FF31D970F8}) (Version: 4.2.1 - Epic Games, Inc.)
Equalizer APO (HKLM\...\EqualizerAPO) (Version: 1.2 - )
Factorio (HKLM-x32\...\Factorio_is1) (Version: - )
Factorio version 1.1.101 (HKLM\...\Factorio_is1) (Version: - )
GALAX GAMER RGB (HKLM\...\{06A16AA8-BBA7-4362-962E-16651962D87C}) (Version: 1.00.02 - Galaxy Microsystems Ltd.) Hidden
GALAX GAMER RGB (HKLM-x32\...\{1257fdeb-ffa3-4e17-9d4b-189075ea3656}) (Version: 1.00.02 - Galaxy Microsystems Ltd.)
Ghostscript GPL 10.01.2 (Msi Setup) (HKLM\...\_{A9752506-6812-4AF9-B0C9-57C328EF7452}) (Version: 10.01.2 - Corel Corporation)
Ghostscript GPL 10.01.2 (Msi Setup) (HKLM\...\{A9752506-6812-4AF9-B0C9-57C328EF7452}) (Version: 10.01.2 - Corel Corporation) Hidden
Ghostscript GPL 10.03.1 (Msi Setup) (HKLM\...\_{476FD34A-6D96-497A-9B55-63F3A9A8B3C0}) (Version: 10.03.1 - Corel Corporation)
Ghostscript GPL 10.03.1 (Msi Setup) (HKLM\...\{476FD34A-6D96-497A-9B55-63F3A9A8B3C0}) (Version: 10.03.1 - Corel Corporation) Hidden
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: 2.0.72.94 - GOG.com)
Google Chrome (HKLM-x32\...\{9439F90C-C1AA-3A82-B394-B42681186C4E}) (Version: 157.0.8103.40 - Google, Inc.)
HandBrake 1.11.0 (HKLM-x32\...\HandBrake) (Version: 1.11.0 - )
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
HiSuite (HKLM-x32\...\Hi Suite) (Version: 11.0.0.650 - Huawei Technologies Co., Ltd.)
Chrome Remote Desktop Host (HKLM-x32\...\{CFE883B2-A8FD-41B5-97A7-79381788D319}) (Version: 157.0.8103.41 - Google LLC)
Intel Processor Diagnostic Tool 64bit (HKLM\...\{E8EB0A84-C19C-4520-8671-56D4D4123D37}) (Version: 3.0.0.25 - Intel Corporation)
Intel(R) Chipset Device Software (HKLM\...\{55398EAC-F58E-4F19-B553-BDF8B9EFD839}) (Version: 10.1.1.9 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1173 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{62260D0F-633D-4B77-B394-BB57DF7223D9}) (Version: 11.0.0.1173 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{EA30CEC3-9CC5-4C80-AE8E-209A6F894961}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{3DF3AC42-174D-4915-9ED2-448AD4338B83}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.0.1042 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{B66F70B4-34E5-429A-9F55-7129E0833A45}) (Version: 14.8.0.1042 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.63.1519.7 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{F94944A8-7BF1-4D63-935D-DAE36FAA3072}) (Version: 30.63.1519.07 - Intel Corporation) Hidden
Intel® Chipset Device Software (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{7D84E343-A23D-451C-B123-0195B2D903A6}) (Version: 1.42.17.0 - Intel Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.41 - Irfan Skiljan)
IsoBuster [64bit] (HKLM\...\IsoBuster64bit_is1) (Version: 5.7 - Smart Projects)
Java(TM) SE Development Kit 17.0.12 (64-bit) (HKLM\...\{DA08718E-972A-58E7-AE7E-C45114C82E13}) (Version: 17.0.12.0 - Oracle Corporation)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Killer Bandwidth Control Filter Driver (HKLM\...\{664C43F0-6C15-4606-9FF9-EBFA89480549}) (Version: 1.1.57.1123 - Rivet Networks) Hidden
Killer E240x Drivers (HKLM\...\{B5583E46-95FA-4D52-AF8A-ECD992FE349A}) (Version: 1.1.57.1123 - Rivet Networks) Hidden
Killer Network Manager (HKLM\...\{B439FA87-1919-407A-8523-264874C600B9}) (Version: 1.1.57.1123 - Rivet Networks) Hidden
Killer Performance Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.57.1123 - Rivet Networks)
Kingston AURA DRAM Component (HKLM\...\{6D2D2DAF-BFE4-45A6-BF40-8A9F7FF54F42}) (Version: 1.0.14 - KINGSTON COMPONENTS INC.) Hidden
Kingston AURA DRAM Component (HKLM-x32\...\{5581facc-367c-46d5-8dd3-40f4ec464220}) (Version: 1.0.14 - KINGSTON COMPONENTS INC.) Hidden
Kodi (HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Kodi) (Version: 21.0.0.0 - XBMC Foundation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LCDSirReal - a multipurpose plugin for the Logitech G13/G15 (HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\LCDSirReal) (Version: - Link Data Stockholm)
Live Gamer Agent (HKLM-x32\...\{A6BE05EA-1357-4EF2-AC5F-0DCD4FCB591C}) (Version: 8.1 - AVerMedia Technologies Inc.)
Logitech Gaming Software (HKLM\...\{690285C2-2481-44FB-8402-162EA970A6DD}) (Version: 8.30.28 - Logitech Inc.) Hidden
Logitech Gaming Software 8.96 (HKLM\...\Logitech Gaming Software) (Version: 8.96.88 - Logitech Inc.)
LogMeIn Hamachi (HKLM-x32\...\{BE82D2D7-6CA2-43B3-8C22-CCF6405806E7}) (Version: 2.2.0.579 - LogMeIn, Inc.) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.579 - LogMeIn, Inc.)
Lust Theory - Season 2 (HKLM-x32\...\1320515406_is1) (Version: 1.0.3 - GOG.com)
Lust Theory: Season 1 (HKLM-x32\...\Lust Theory: Season 1_is1) (Version: - )
Macrium Reflect Free (HKLM\...\{A302C59F-C733-4DA0-9611-1286A9051D15}) (Version: 8.0.7783 - Paramount Software (UK) Ltd.) Hidden
Macrium Reflect Free (HKLM\...\MacriumReflect) (Version: v8.0.7783 - Paramount Software (UK) Ltd.)
Microsoft .NET Host - 10.0.3 (x64) (HKLM\...\{9F813549-A3D9-46C7-8E74-86E9EF8EB50D}) (Version: 80.12.47319 - Microsoft Corporation) Hidden
Microsoft .NET Host - 6.0.36 (x64) (HKLM\...\{D6932D97-36F1-40B8-9CDC-CA8365B21000}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 10.0.3 (x64) (HKLM\...\{94B19E28-2A79-4102-A16F-1B8F59273364}) (Version: 80.12.47319 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.36 (x64) (HKLM\...\{A9E32B25-994B-4856-A12B-0EBED3050410}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 10.0.3 (x64) (HKLM\...\{3BAF1A9E-A7D2-4A66-A4B8-39B451E17F99}) (Version: 80.12.47319 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.36 (x64) (HKLM\...\{C912E33F-956A-4921-9F55-CC11AE8F09AF}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 157.0.4341.46 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 157.0.4341.46 - Microsoft Corporation) Hidden
Microsoft GameInput (HKLM\...\{ECB4BDD1-984C-9F25-299C-A9EF75C14197}) (Version: 10.1.26100.6879 - Microsoft Corporation)
Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Slovak) 2007 (HKLM-x32\...\{90120000-0015-041B-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Slovak) 2007 (HKLM-x32\...\{90120000-0016-041B-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Slovak) 2007 (HKLM-x32\...\{90120000-0044-041B-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Slovak) 2007 (HKLM-x32\...\{90120000-001A-041B-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Slovak) 2007 (HKLM-x32\...\{90120000-0018-041B-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2007 (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (Czech) 2007 (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Hungarian) 2007 (HKLM-x32\...\{90120000-001F-040E-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Slovak) 2007 (HKLM-x32\...\{90120000-002C-041B-0000-0000000FF1CE}) (Version: 12.0.4518.1039 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Slovak) 2007 (HKLM-x32\...\{90120000-0019-041B-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Slovak) 2007 (HKLM\...\{90120000-002A-041B-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Slovak) 2007 (HKLM-x32\...\{90120000-006E-041B-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Slovak) 2007 (HKLM-x32\...\{90120000-001B-041B-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\OneDriveSetup.exe) (Version: 26.198.1011.0006 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual Basic for Applications 7.1 (x64) (HKLM\...\{6EEF60F6-BCD8-41D4-A62B-40BB2594667C}) (Version: 7.1.00.00 - Microsoft Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) English (HKLM\...\{6B008195-9055-4BBA-8D00-D3F7D0297FC1}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34438 (HKLM-x32\...\{b49c10dd-4d54-45f8-ad13-fa25704456a4}) (Version: 14.42.34438.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual Studio Tools for Applications 2022 (HKLM-x32\...\{5451d67a-bba3-400d-9705-96fb24f27192}) (Version: 17.0.33529 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2022 x64 Hosting Support (HKLM\...\{2472E763-D716-3A63-ACC5-FFAE11F05B71}) (Version: 17.0.33529 - Microsoft Corporation) Hidden
Microsoft Visual Studio Tools for Applications 2022 x86 Hosting Support (HKLM-x32\...\{86B4A90B-3A22-302E-8407-D83DF8D427F7}) (Version: 17.0.33529 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 10.0.3 (x64) (HKLM\...\{20AA8F62-C2FF-4DAC-80C0-716515603E37}) (Version: 80.12.47319 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM\...\{61D4736B-3325-4D4A-BD41-8BD206C6A86E}) (Version: 48.144.23186 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM-x32\...\{0532b8f2-12d7-43de-95fc-7b87006758a8}) (Version: 6.0.36.34217 - Microsoft Corporation)
Microsoft Windows Desktop Runtime 10.0.3 (x64) (HKLM-x32\...\{FC1F1CB8-52EE-4489-84B5-2FBF22FB719C}) (Version: 10.0.3.50000 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{810F1419-7760-402E-8772-B4054FAA2B72}) (Version: 1.0.0.0 - Mojang)
Movavi Video Converter (HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Movavi Video Converter) (Version: 24.4.0 - Movavi)
Mozilla Firefox (x64 sk) (HKLM\...\Mozilla Firefox) (Version: 159.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 70.0.1 - Mozilla)
NiceHash Miner 2 0.1.8 (HKLM\...\08059810-bc78-5c10-942c-2092eebb5ec8) (Version: 0.1.8 - NiceHash d.o.o)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.3.2 - Notepad++ Team)
NVIDIA GeForce Experience 3.17.0.126 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.17.0.126 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 560.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 560.94 - NVIDIA Corporation)
NVIDIA Softvér systému s podporou technológie PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.2 (HKLM-x32\...\{EF194FA4-99F4-4C36-AC30-B2C2DE1C170D}) (Version: 4.12.9782 - Apache Software Foundation)
OpenRA (HKLM-x32\...\OpenRA) (Version: - OpenRA developers)
Origin (HKLM-x32\...\Origin) (Version: 10.5.122.52971 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.314.1.1 - Overwolf Ltd.)
PaperScan 3 Professional Edition (HKLM-x32\...\{9520453F-D8E3-4F02-86E0-B65F4ECCDDC7}) (Version: 3.0.127 - ORPALIS)
Plague Inc Evolved (HKLM-x32\...\Plague Inc Evolved_is1) (Version: v.1.19.1.0.build.9770563 - Decepticon)
Playrooms (HKLM-x32\...\Playrooms_is1) (Version: - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8581 - Realtek Semiconductor Corp.)
REDlauncher (HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\{7258BA11-600C-430E-A759-27E2C691A335}-REDlauncher_is1) (Version: - GOG.com)
Returning To Mia (HKLM-x32\...\1604903045_is1) (Version: 1.1.1 - GOG.com)
Revo Uninstaller 2.0.4 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.4 - VS Revo Group, Ltd.)
RimWorld - Biotech (HKLM-x32\...\1865538500_is1) (Version: 1.4.3704 rev874 - GOG.com)
RimWorld - Ideology (HKLM-x32\...\1827857764_is1) (Version: 1.4.3704 rev874 - GOG.com)
RimWorld - Royalty (HKLM-x32\...\1233017772_is1) (Version: 1.4.3704 rev874 - GOG.com)
RimWorld (HKLM-x32\...\1094900565_is1) (Version: 1.4.3704 rev874 - GOG.com)
RimWorld (HKLM-x32\...\RimWorld_is1) (Version: - )
Sample Production Bit Checker x64 (HKLM\...\{1FFA19A6-D46D-4993-B39E-394EB92781A4}) (Version: 1.0.7.0 - Intel Corporation)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 9.0.1.950 - Samsung Electronics)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype verzia 8.98 (HKLM-x32\...\Skype_is1) (Version: 8.98 - Skype Technologies S.A.)
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Storage Manager (HKLM-x32\...\{7D1E582C-34AB-4A3F-81C3-B5CAF5C7D634}) (Version: 2.8 - JMicron Technology Corp.)
Summer with Mia Season 1 (HKLM-x32\...\1908302341_is1) (Version: 1.5.6 - GOG.com)
Sweet Home 3D version 5.7 (HKLM\...\Sweet Home 3D_is1) (Version: 5.7 - eTeks)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.8 - TeamSpeak Systems GmbH)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.83.5 - TeamViewer)
TomTom MyDrive Connect 4.2.10.4148 (HKLM-x32\...\MyDriveConnect) (Version: 4.2.10.4148 - TomTom)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.51 - Ghisler Software GmbH)
Twitch (HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 8.0.0 - Twitch Interactive, Inc.)
Universal Adb Driver (HKLM-x32\...\{C0E08D8D-6076-4117-B644-2AF34F35B757}) (Version: 1.0.4 - ClockworkMod)
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{3BAE4496-6F6C-4330-A8AA-B93D3D346FA5}) (Version: 2.53.0.0 - Microsoft Corporation)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM\...\{F339C545-24DC-4870-AA32-6EB6B0500B95}) (Version: 1.24.0.0 - Microsoft Corporation) Hidden
Virtual Audio Cable (full) (HKLM\...\{83ed7f0e-2028-4956-b0b4-39c76fdaef1d}) (Version: 4.70 - Eugene V. Muzychenko)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
Vortex (HKLM\...\57979c68-f490-55b8-8fed-8b017a5af2fe) (Version: 1.15.2 - Black Tree Gaming Ltd.)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
webOS Dev Manager (HKLM\...\{0E28AF09-C746-4A74-A083-6DAEDC306113}) (Version: 1.99.13 - webosbrew)
Webshare klient (HKLM-x32\...\Webshare klient) (Version: - )
Whitemane (HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Whitemane) (Version: 2.1.51 - Whitemane)
Win32DiskImager version 1.0.0 (HKLM-x32\...\{3DFFA293-DF2C-4B23-92E5-3433BDC310E1}}_is1) (Version: 1.0.0 - ImageWriter Developers)
Windows Kontrola stavu počítača (HKLM\...\{8D6B9DC1-A437-41E0-8DF1-9F37748394AE}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Windows Kontrola stavu počítača (HKLM\...\{DC04D0BB-5702-4932-ACFF-D39065DCB089}) (Version: 3.1.2109.29003 - Microsoft Corporation)
WinRAR 5.80 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.80.0 - win.rar GmbH)
XTUPackage (HKLM-x32\...\{84D11A20-6E7F-4FBB-A2FB-117FCF871040}) (Version: 1.0.0 - ASUSTeK COMPUTER INC.)

Chrome apps:
============
Photopea (HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\7b62756e6b03e6d86ca8b2e8dc5fb9bf) (Version: 1.0 - Google\Chrome)

Packages:
=========
AdBlock -> C:\Program Files\WindowsApps\BetaFish.AdBlock_2.13.0.0_neutral__c1wakc4j0nefm [2026-05-20] (BetaFish)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2023-09-18] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2023-09-18] (Microsoft Corporation) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-08] (NVIDIA Corp.)
Samsung account -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_1.26.6021.0_x64__3c1yjt4zspk6g [2026-10-10] (Samsung Electronics Co. Ltd.)
SmartThings -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_1.26135.3.0_x64__3c1yjt4zspk6g [2026-07-14] (Samsung Electronics Co. Ltd.) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\ChromeHTML: -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) <==== ATTENTION
CustomCLSID: HKU\S-1-5-21-2873281325-1507384511-3975134512-1001_Classes\CLSID\{227C9E8F-71A1-4B23-9076-682A1A8EAAED}\localserver32 -> c:\program files\macrium\common\reflectmonitor.exe (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
CustomCLSID: HKU\S-1-5-21-2873281325-1507384511-3975134512-1001_Classes\CLSID\{43D19D3F-989F-4BB2-91D2-DD6A726BBE25}\InprocServer32 -> C:\Users\Plasko\AppData\Local\Avira\Browser\Update\1.8.1652.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2873281325-1507384511-3975134512-1001_Classes\CLSID\{6B24FFDC-713E-4F9D-AD7A-60DD8D612038}\localserver32 -> C:\Users\Plasko\AppData\Local\Discord\app-1.0.9265\Discord.exe (Discord Inc. -> Discord Inc.)
CustomCLSID: HKU\S-1-5-21-2873281325-1507384511-3975134512-1001_Classes\CLSID\{82A6D7A6-FC2E-4DFD-AAEF-E3BBF9AD71AD}\localserver32 -> C:\Program Files\CEWE\CEWE fotosvet\AutoBookService.exe () [File not signed]
CustomCLSID: HKU\S-1-5-21-2873281325-1507384511-3975134512-1001_Classes\CLSID\{88975AC1-D0AB-445C-9B05-D0D8948931B5}\InprocServer32 -> C:\Users\Plasko\AppData\Local\Avira\Browser\Update\1.8.1652.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2873281325-1507384511-3975134512-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2017-02-12] (Notepad++ -> )
ContextMenuHandlers1: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
ContextMenuHandlers1: [SystemSpeedupFilesMenu] -> {14cb2bd0-2375-3d10-9b5d-5e18865c8959} => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.DLL [2026-01-20] (Avira Operations GmbH -> Avira Operations GmbH)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL [2026-10-28] (Avira Operations GmbH -> Avira Operations GmbH)
ContextMenuHandlers2: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL [2026-10-28] (Avira Operations GmbH -> Avira Operations GmbH)
ContextMenuHandlers4: [SystemSpeedupFoldersMenu] -> {700866bb-c8e9-3e71-b359-abb28baed0e8} => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.DLL [2026-01-20] (Avira Operations GmbH -> Avira Operations GmbH)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_0afec3f2050014a0\nvshext.dll [2024-09-15] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [SystemSpeedupDesktopMenu] -> {0cab5786-30e8-3185-9b3b-ccefbf1b8afe} => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.DLL [2026-01-20] (Avira Operations GmbH -> Avira Operations GmbH)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Plasko\Desktop\Photopea.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=jdklklfpinionkgpmghaghehojplfjio
ShortcutWithArgument: C:\Users\Plasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Floating for YouTube™.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=jjphmlaoffndcnecccgemfdaaoighkel
ShortcutWithArgument: C:\Users\Plasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\GreenAddress.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=dgbimgjoijjemhdamicmljbncacfndmp
ShortcutWithArgument: C:\Users\Plasko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Photopea.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=jdklklfpinionkgpmghaghehojplfjio

==================== Loaded Modules (Whitelisted) =============

2020-07-19 01:18 - 2020-06-13 19:44 - 000104448 _____ () [File not signed] [File is in use] C:\Program Files\Aurora\x64\SBAuroraReactive.dll
2017-01-19 19:05 - 2015-11-18 22:39 - 000883200 _____ () [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\AppTuneDll.dll
2017-01-19 19:05 - 2015-09-01 04:46 - 000507392 _____ () [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\AsKeyboardFocusHooker.dll
2017-01-19 19:05 - 2015-07-30 16:31 - 000236544 _____ () [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4cTDPAction.dll
2017-01-19 19:05 - 2015-07-30 16:31 - 000712192 _____ () [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4DIGIPowerControlAction.dll
2017-01-19 19:05 - 2015-11-18 22:40 - 000864768 _____ () [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4EpuAction.dll
2017-01-19 19:05 - 2015-07-30 16:31 - 000803840 _____ () [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4FanAction.dll
2017-01-19 19:05 - 2015-11-18 22:40 - 000817664 _____ () [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4TurboVEVOAction.dll
2017-01-19 19:05 - 2015-07-30 16:31 - 001893888 _____ () [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\TurboAppDatabase.dll
2017-01-19 19:06 - 2013-11-20 10:10 - 000662016 _____ () [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\aaHMLib.dll
2017-01-19 19:06 - 2013-07-02 10:40 - 000253952 _____ () [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\pngio.dll
2026-01-20 19:33 - 2026-10-30 22:34 - 239983616 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\Win64\libcef.dll
2026-01-20 19:33 - 2026-08-06 18:13 - 000526336 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\Win64\libEGL.dll
2026-01-20 19:33 - 2026-08-06 18:13 - 008949248 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\Win64\libGLESv2.dll
2026-01-20 19:33 - 2026-08-06 18:13 - 005561856 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\Win64\vk_swiftshader.dll
2020-07-19 01:18 - 2020-06-13 19:43 - 000021504 _____ () [File not signed] C:\Program Files\Aurora\CroccatTalkWrapper\win32-x86-64\talkfx-c.dll
2020-07-19 01:18 - 2020-06-13 19:43 - 000015360 _____ () [File not signed] C:\Program Files\Aurora\LightFX_SDK.dll
2017-10-20 04:02 - 2017-10-20 04:02 - 000144896 _____ () [File not signed] C:\Program Files\Logitech Gaming Software\LAClient\libssh2.dll
2017-10-20 04:02 - 2017-10-20 04:02 - 000077824 _____ () [File not signed] C:\Program Files\Logitech Gaming Software\LAClient\zlib.dll
2017-01-19 19:04 - 2015-06-05 12:00 - 000108544 _____ (ASUS) [File not signed] C:\Program Files (x86)\ASUS\AAHM\1.00.22\ASACPI.DLL
2017-01-19 19:05 - 2015-07-30 16:31 - 000108544 _____ (ASUS) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\asacpi.dll
2017-01-19 19:05 - 2014-09-08 07:26 - 000108544 _____ (ASUS) [File not signed] C:\Program Files (x86)\ASUS\AsusFanControlService\1.07.00\AsAcpi.dll
2019-04-17 13:07 - 2026-10-26 16:05 - 000042792 _____ (ASUSTeK Computer Inc. -> ) [File not signed] C:\Program Files (x86)\ASUS\AXSP\4.00.38\PEbiosinterface32.dll
2017-01-19 19:04 - 2015-06-05 12:00 - 000677376 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AAHM\1.00.22\asacpiEx.dll
2017-01-19 19:05 - 2015-07-30 16:31 - 000676864 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\asacpiex.dll
2017-01-19 19:06 - 2013-11-20 10:10 - 000221184 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\AsMultiLang.dll
2017-01-19 19:05 - 2014-09-08 07:26 - 000676864 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AsusFanControlService\1.07.00\asacpiEx.dll
2020-07-19 01:18 - 2020-06-13 19:43 - 000177152 _____ (Creative Lab Pte Ltd.) [File not signed] C:\Program Files\Aurora\x64\ClplLEDController.dll
2020-07-19 01:18 - 2020-06-13 19:43 - 002556928 _____ (Creative Technology Ltd) [File not signed] C:\Program Files\Aurora\x64\CTDrvLedMgr.dll
2020-07-19 01:18 - 2020-06-13 19:43 - 000132096 _____ (Creative Technology Ltd) [File not signed] C:\Program Files\Aurora\x64\CTHID.dll
2020-07-19 01:18 - 2020-06-13 19:43 - 001494528 _____ (Creative Technology Ltd) [File not signed] C:\Program Files\Aurora\x64\CTHIDRpA.dll
2020-07-19 01:18 - 2020-06-13 19:43 - 000112128 _____ (Creative Technology Ltd) [File not signed] C:\Program Files\Aurora\x64\CTIntrfu.dll
2020-07-19 01:18 - 2020-06-13 19:43 - 003389952 _____ (Creative Technology Ltd) [File not signed] C:\Program Files\Aurora\x64\CTLEDMgr.dll
2023-03-29 18:59 - 2022-02-21 09:23 - 000509064 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\EaseUS\ENS\AliyunWrap.DLL
2023-03-29 18:59 - 2022-02-22 15:12 - 000137864 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\EaseUS\ENS\EnsHelper.dll
2023-03-29 18:59 - 2022-02-21 09:23 - 000021672 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\EaseUS\ENS\fsclog.dll
2023-03-29 18:59 - 2022-02-21 09:23 - 000203912 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\EaseUS\ENS\libssh2.dll
2023-03-29 18:59 - 2022-02-22 15:12 - 000098440 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\EaseUS\ENS\register.dll
2023-03-29 18:59 - 2022-02-22 15:12 - 000461448 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\EaseUS\ENS\wpnr.dll
2023-03-29 18:59 - 2022-02-21 09:23 - 000455816 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> Microsoft Corporation) [File not signed] C:\Program Files (x86)\EaseUS\ENS\MSVCP140.dll
2023-03-29 18:59 - 2022-02-21 09:23 - 000081032 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> Microsoft Corporation) [File not signed] C:\Program Files (x86)\EaseUS\ENS\VCRUNTIME140.dll
2023-03-29 18:59 - 2022-02-21 09:23 - 000438408 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> The curl library, hxxps://curl.se/) [File not signed] C:\Program Files (x86)\EaseUS\ENS\libcurl.dll
2023-03-29 18:59 - 2022-02-21 09:23 - 002533000 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Program Files (x86)\EaseUS\ENS\libcrypto-1_1.dll
2023-03-29 18:59 - 2022-02-21 09:23 - 000541320 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Program Files (x86)\EaseUS\ENS\libssl-1_1.dll
2026-11-09 22:08 - 2026-11-09 22:08 - 023449088 _____ (Microsoft Corporation) [File not signed] C:\Users\Plasko\AppData\Local\Temp\MSBuild_00008108\mshtml.dll
2026-01-20 19:33 - 2026-08-06 18:13 - 020807680 _____ (Microsoft(r) Corporation) [File not signed] C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\Win64\dxcompiler.dll
2022-11-22 08:19 - 2022-11-22 08:19 - 000090112 _____ (Silicon Laboratories, Inc.) [File not signed] C:\Program Files\Corsair\CORSAIR iCUE 4 Software\SiUSBXp.dll
2017-10-20 04:02 - 2017-10-20 04:02 - 000355840 _____ (The cURL library, hxxp://curl.haxx.se/) [File not signed] C:\Program Files\Logitech Gaming Software\LAClient\LIBCURL.dll
2026-01-20 19:33 - 2026-10-30 22:34 - 001360384 _____ (The Chromium Authors) [File not signed] C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\Win64\chrome_elf.dll
2023-02-19 13:16 - 2021-09-15 20:49 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Origin\LIBEAY32.dll
2023-02-19 13:16 - 2021-09-15 20:49 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Origin\ssleay32.dll
2017-10-20 04:02 - 2017-10-20 04:02 - 002286747 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\Logitech Gaming Software\LAClient\LIBEAY32.dll
2017-10-20 04:02 - 2017-10-20 04:02 - 000416627 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\Logitech Gaming Software\LAClient\SSLEAY32.dll
2023-02-19 13:16 - 2021-09-15 20:49 - 001611264 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2023-03-15 22:14 - 2021-09-15 20:49 - 005487104 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Core.dll
2023-03-15 22:14 - 2021-09-15 20:49 - 005841920 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Gui.dll
2023-03-15 22:14 - 2021-09-15 20:49 - 001179136 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Network.dll
2023-03-15 22:14 - 2021-09-15 20:49 - 000146432 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5WebSockets.dll
2023-03-15 22:14 - 2021-09-15 20:49 - 005089792 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2023-03-15 22:14 - 2021-09-15 20:49 - 000184832 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Xml.dll
2020-07-19 01:18 - 2020-06-13 19:43 - 001882624 _____ (TODO: <公司名稱>) [File not signed] C:\Program Files\Aurora\SDKDLL.dll
2020-07-19 01:18 - 2020-06-13 19:43 - 000025088 _____ (Wooting Technologies B.V.) [File not signed] C:\Program Files\Aurora\wooting-rgb-sdk.DLL

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`28hfm [0]
AlternateDataStreams: C:\ProgramData\TEMP:9A870F8B [231]
AlternateDataStreams: C:\Users\Public\AppData:CSM [478]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [466]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

SearchScopes: HKU\S-1-5-21-2873281325-1507384511-3975134512-1001 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://search.yahoo.com/yhs/search?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__ch_WCYID10454__180610__yaie&p={searchTerms}

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\localhost -> localhost

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-04-12 00:38 - 2026-11-09 22:07 - 000009341 _____ C:\WINDOWS\system32\drivers\etc\hosts
0.0.0.0 sqm.telemetry.microsoft.com
0.0.0.0 sqm.telemetry.microsoft.com.nsatc.net
0.0.0.0 telecommand.telemetry.microsoft.com
0.0.0.0 telecommand.telemetry.microsoft.com.nsatc.net
0.0.0.0 telemetry.appex.bing.net
0.0.0.0 telemetry.microsoft.com
0.0.0.0 telemetry.urs.microsoft.com
0.0.0.0 vortex-sandbox.data.microsoft.com
0.0.0.0 vortex-win.data.microsoft.com
0.0.0.0 vortex.data.microsoft.com
0.0.0.0 watson.telemetry.microsoft.com
0.0.0.0 watson.telemetry.microsoft.com.nsatc.net
0.0.0.0 watson.ppe.telemetry.microsoft.com
0.0.0.0 wes.df.telemetry.microsoft.com
0.0.0.0 vortex-bn2.metron.live.com.nsatc.net
0.0.0.0 vortex-cy2.metron.live.com.nsatc.net
0.0.0.0 watson.live.com
0.0.0.0 watson.microsoft.com
0.0.0.0 feedback.search.microsoft.com
0.0.0.0 feedback.windows.com
0.0.0.0 corp.sts.microsoft.com
0.0.0.0 diagnostics.support.microsoft.com
0.0.0.0 i1.services.social.microsoft.com
0.0.0.0 i1.services.social.microsoft.com.nsatc.net
0.0.0.0 vortex-bn2.metron.live.com.nsatc.net
0.0.0.0 vortex-cy2.metron.live.com.nsatc.net
0.0.0.0 ca.telemetry.microsoft.com
0.0.0.0 cache.datamart.windows.com
0.0.0.0 spynet2.microsoft.com
0.0.0.0 spynetalt.microsoft.com

There are 143 more lines.

2022-01-29 16:35 - 2022-03-12 16:09 - 000000565 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
92.168.137.196 Q9300-PC.mshome.net # 2022 3 5 11 17 17 46 935

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.55.1
Windows Firewall is enabled.

Network Binding:
=============
Hamachi: LogMeIn Hamachi Virtual Ethernet Adapter -> Hamdrv.sys
Připojení k místní síti: Phantom TAP-Windows Adapter V9 -> phantomtap.sys
Ethernet 2: Intel(R) Ethernet Connection (2) I219-V -> e1d65x64.sys

bf_ndislwf: Killer Bandwidth Control

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Users\Plasko\AppData\Local\Microsoft\WindowsApps;C:\adb;C:\ADB\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\eID_klient\;C:\Program Files (x86)\eID_klient\redist_x64\;C:\Program Files\dotnet\
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
HKU\S-1-5-21-2873281325-1507384511-3975134512-500\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|H:\images\Fallout.4-CODEX\codex-fallout.4.upd.1.3\Update

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "Reflect UI"
HKLM\...\StartupApproved\Run: => "CORSAIR iCUE 4 Software"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "IAStorIcon"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "AdobeGCInvoker-1.0"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\StartupApproved\Run: => "GalaxyClient"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\StartupApproved\Run: => "CAM"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\StartupApproved\Run: => "!BingChatInstaller.exe"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{45BC2411-7072-4052-B53C-CC9C5F3385B9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{B3F479B5-FE43-45D7-8194-3E42F5783C33}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{7F93D83E-C62B-43A5-A769-896721C17511}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{5A20D1CF-FD6B-412D-81B1-75C8B5564F05}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{B371365E-8113-46F9-8F75-7F9AB9066207}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1BAC78B0-1920-46A5-8B55-3D8E34DE23C8}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2FF81C0B-2896-466F-9B49-890010059046}] => (Block) H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe => No File
FirewallRules: [{640F60B5-7C10-46BF-B4F7-149E6D827CAE}] => (Block) H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe => No File
FirewallRules: [UDP Query User{55EE8D1C-80A2-4D12-A315-3099E848B849}H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe] => (Allow) H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe => No File
FirewallRules: [TCP Query User{047B92C3-7FD9-4CEE-9D9E-BE22F4E07CC1}H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe] => (Allow) H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe => No File
FirewallRules: [{77083DEA-69AB-4972-9FFE-03E1DE15A466}] => (Block) F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe => No File
FirewallRules: [{C33EA34F-B0D3-4E86-A16D-2C75A3BE2331}] => (Block) F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{8428AE40-B558-40D5-8A52-CE5A4641CD3F}F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe => No File
FirewallRules: [TCP Query User{F8F0509D-B0BC-45CB-971A-4D3E396C8505}F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe => No File
FirewallRules: [{FF13CFC0-7FB6-4772-A216-7C48F1C54A00}] => (Block) C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\f25fee20-94eb-11ea-a64d-17be303ea466\bins\15.4\nanominer-windows-3.2.2-cuda11\nanominer.exe (Access Denied) [File not signed?]
FirewallRules: [{D00BF2D4-B9AD-446A-AD69-ED3131E59147}] => (Block) C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\f25fee20-94eb-11ea-a64d-17be303ea466\bins\15.4\nanominer-windows-3.2.2-cuda11\nanominer.exe (Access Denied) [File not signed?]
FirewallRules: [UDP Query User{EB063C91-95EA-4D1D-8935-7E83046766F1}C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\f25fee20-94eb-11ea-a64d-17be303ea466\bins\15.4\nanominer-windows-3.2.2-cuda11\nanominer.exe] => (Allow) C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\f25fee20-94eb-11ea-a64d-17be303ea466\bins\15.4\nanominer-windows-3.2.2-cuda11\nanominer.exe (Access Denied) [File not signed?]
FirewallRules: [TCP Query User{FD4CB222-BBC8-46D0-A136-F90BA66AA276}C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\f25fee20-94eb-11ea-a64d-17be303ea466\bins\15.4\nanominer-windows-3.2.2-cuda11\nanominer.exe] => (Allow) C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\f25fee20-94eb-11ea-a64d-17be303ea466\bins\15.4\nanominer-windows-3.2.2-cuda11\nanominer.exe (Access Denied) [File not signed?]
FirewallRules: [{79B20520-EB43-46B8-9770-BFD9F452286E}] => (Block) C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\eda6abd0-94eb-11ea-a64d-17be303ea466\bins\15.2\miniz.exe (Access Denied) [File not signed?]
FirewallRules: [{9311F96B-33C5-4E4A-B7E1-1C653A25EF13}] => (Block) C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\eda6abd0-94eb-11ea-a64d-17be303ea466\bins\15.2\miniz.exe (Access Denied) [File not signed?]
FirewallRules: [UDP Query User{41EE1D9E-F5D0-4D89-9CC9-4FBC08C18B1A}C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\eda6abd0-94eb-11ea-a64d-17be303ea466\bins\15.2\miniz.exe] => (Allow) C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\eda6abd0-94eb-11ea-a64d-17be303ea466\bins\15.2\miniz.exe (Access Denied) [File not signed?]
FirewallRules: [TCP Query User{4F3C00A4-4B5D-4615-A29A-2CB77CA0E4E9}C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\eda6abd0-94eb-11ea-a64d-17be303ea466\bins\15.2\miniz.exe] => (Allow) C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\eda6abd0-94eb-11ea-a64d-17be303ea466\bins\15.2\miniz.exe (Access Denied) [File not signed?]
FirewallRules: [{DD1756B2-FA7B-41FF-95FC-E32D107878B6}] => (Block) C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\15.8\miner.exe (Access Denied) [File not signed?]
FirewallRules: [{7D0E564A-594A-46AD-A989-997CA5A9562D}] => (Block) C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\15.8\miner.exe (Access Denied) [File not signed?]
FirewallRules: [UDP Query User{5BAA59A8-4F1B-4665-BDA1-F7279D2E4FE7}C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\15.8\miner.exe] => (Allow) C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\15.8\miner.exe (Access Denied) [File not signed?]
FirewallRules: [TCP Query User{AE89784F-6C9C-4100-BC35-906AC3FDC89B}C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\15.8\miner.exe] => (Allow) C:\users\plasko\appdata\local\programs\nicehash miner\miner_plugins\e7a58030-94eb-11ea-a64d-17be303ea466\bins\15.8\miner.exe (Access Denied) [File not signed?]
FirewallRules: [{1B38E7BB-D480-45A7-B028-4F4B45D49604}] => (Allow) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe (TomTom International B.V. -> TomTom)
FirewallRules: [{0F696D04-5C7A-45A5-BDDE-F374EA4E842B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Soda Dungeon 2\SodaDungeon2.exe () [File not signed]
FirewallRules: [{33C5D3C1-E770-445E-BA55-9310EBCF61C0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Soda Dungeon 2\SodaDungeon2.exe () [File not signed]
FirewallRules: [{14B869C8-1E5B-4ED8-9D26-592B2A0686A1}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe => No File
FirewallRules: [{B9A6919C-0380-4A99-8163-F189F25A15D2}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe => No File
FirewallRules: [UDP Query User{F32B940A-9331-4593-ADA4-10095A5304E6}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe => No File
FirewallRules: [TCP Query User{282C4D37-D3E8-4F39-B773-3A5222E3C6F8}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe => No File
FirewallRules: [{79B67504-797C-4100-94E5-010CF57205DD}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe => No File
FirewallRules: [{AB6858D8-66DA-486C-9513-9686075C9D21}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe => No File
FirewallRules: [UDP Query User{A1D19718-7EA8-4A96-ACC3-967BF53E4010}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe => No File
FirewallRules: [TCP Query User{2CE9AAFB-E190-4B91-9388-00CC2A1039A6}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe => No File
FirewallRules: [{68009D13-EE1A-4E12-9F59-438C20EA8695}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe => No File
FirewallRules: [{F4342DD4-2333-4D1F-9821-5E759734040C}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe => No File
FirewallRules: [UDP Query User{1A226025-F8AD-496A-8775-C785ED0674D0}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe => No File
FirewallRules: [TCP Query User{CD975AA3-B73B-43F6-84D0-8238A4E04630}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe => No File
FirewallRules: [{078AEA31-2F58-4A4F-B35C-D9B2F5037D97}] => (Block) H:\images\survivingtheaftermath\aftermath64.exe => No File
FirewallRules: [{94AECC61-81F6-46EB-A229-9BA8C617A6C9}] => (Block) H:\images\survivingtheaftermath\aftermath64.exe => No File
FirewallRules: [UDP Query User{9A116849-088D-464A-9A74-5403BE814C66}H:\images\survivingtheaftermath\aftermath64.exe] => (Allow) H:\images\survivingtheaftermath\aftermath64.exe => No File
FirewallRules: [TCP Query User{FF9D74C9-D3E4-47A7-BD23-1B0E100F9827}H:\images\survivingtheaftermath\aftermath64.exe] => (Allow) H:\images\survivingtheaftermath\aftermath64.exe => No File
FirewallRules: [{69D6D85D-A478-46E9-BEC2-D74720AC321E}] => (Allow) LPort=7778
FirewallRules: [{34F93654-EF3A-4438-A74C-1B9F58C21B21}] => (Allow) LPort=7778
FirewallRules: [{E53E64FB-853B-4636-ACA8-B8C0E35ACBEA}] => (Allow) LPort=27015
FirewallRules: [{33C0AC69-CEF5-4D2E-AF04-CE2BAB7B8092}] => (Allow) LPort=27015
FirewallRules: [{C183E49C-2940-4A07-86F8-737DE0030329}] => (Allow) LPort=7777
FirewallRules: [{B0757493-3D73-4BF0-9DBF-CFA9C4A2BA6E}] => (Allow) LPort=7777
FirewallRules: [UDP Query User{085FAB08-EF60-40BC-8127-6A1B0CA42F2F}F:\heroes vi - complete edition\might & magic heroes vi.exe] => (Allow) F:\heroes vi - complete edition\might & magic heroes vi.exe => No File
FirewallRules: [TCP Query User{97576280-0729-4EB4-A4F9-D09123BD1481}F:\heroes vi - complete edition\might & magic heroes vi.exe] => (Allow) F:\heroes vi - complete edition\might & magic heroes vi.exe => No File
FirewallRules: [UDP Query User{87D8286B-AB6A-49F0-BB95-034A0ECEDB02}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe => No File
FirewallRules: [TCP Query User{C68E2DCB-00D2-4ABC-ACB8-5432EFCC395E}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe => No File
FirewallRules: [{D4E4497B-34D1-4BFF-B38A-59EA5F57F25B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D7721CFA-D195-4CF9-B6E8-4881D1D1306F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{29E81C20-31A2-4FA7-A3BC-F347AA9E2899}] => (Allow) C:\Users\Plasko\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [{1596D007-319F-4CDB-BBFF-C4D2E8CDF7AC}] => (Allow) C:\Users\Plasko\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [TCP Query User{C82A4A90-1966-4715-A975-ADABAFAE594B}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [UDP Query User{6BB8D4B7-8E79-4FFC-9CC8-21A6015D6680}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [TCP Query User{A8624365-67D4-4D18-AE63-5C03B59D6545}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe => No File
FirewallRules: [UDP Query User{31DA84A7-8A76-47A9-96D0-5B5088C774B8}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe => No File
FirewallRules: [TCP Query User{C6BCFF53-2401-4519-9F5B-1F78DBE91575}C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe] => (Allow) C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe => No File
FirewallRules: [UDP Query User{E2263D47-9E7F-4E27-A2C4-455D06E26A47}C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe] => (Allow) C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe => No File
FirewallRules: [TCP Query User{6162DB9B-72C9-4792-BEEE-3DFFA247CA51}C:\program files\vertrigoserv\apache\bin\v_apache.exe] => (Allow) C:\program files\vertrigoserv\apache\bin\v_apache.exe => No File
FirewallRules: [UDP Query User{129588E3-1875-4FCB-8814-14B57C42B49F}C:\program files\vertrigoserv\apache\bin\v_apache.exe] => (Allow) C:\program files\vertrigoserv\apache\bin\v_apache.exe => No File
FirewallRules: [{2770FC9D-2C90-47C9-B9AA-9046C58C4E03}] => (Block) C:\program files\vertrigoserv\apache\bin\v_apache.exe => No File
FirewallRules: [{028603F1-241C-40F6-AA44-52241F4A6578}] => (Block) C:\program files\vertrigoserv\apache\bin\v_apache.exe => No File
FirewallRules: [{E0E0E094-362C-4B72-BB0D-0198C964D462}] => (Block) C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe => No File
FirewallRules: [{7E06F0DD-D007-40B3-BFCA-16015480FE8C}] => (Block) C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe => No File
FirewallRules: [TCP Query User{91C30270-E6DB-4B48-9CF9-963FEC09C1E2}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [UDP Query User{73B281E7-7F13-4477-B894-B616EF055C9D}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [{6C860FAC-251E-4322-B850-8F8899AB6B0D}] => (Block) C:\totalcmd\totalcmd.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [{00AD0A5E-E2BE-4270-86FD-C6994274D44C}] => (Block) C:\totalcmd\totalcmd.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [TCP Query User{C76B26B7-C5B0-47BA-BAEB-CA800BE279C7}C:\windows\system32\ftp.exe] => (Allow) C:\windows\system32\ftp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [UDP Query User{651FFE56-5124-401F-9321-17BAE498CC8E}C:\windows\system32\ftp.exe] => (Allow) C:\windows\system32\ftp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{819BBB8B-61B8-41D0-8FD6-DEDC4BB059E0}] => (Block) C:\windows\system32\ftp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{7DA62C18-3989-4C2A-A025-054F358A8DC1}] => (Block) C:\windows\system32\ftp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [TCP Query User{789615DD-EFD0-4B34-AD94-AE1A5B74C17A}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [UDP Query User{6D9EFBA4-4907-4F15-A7F4-042E90A37602}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [TCP Query User{1B731C66-63A8-472C-BDDB-4FAAAB94E6A4}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe => No File
FirewallRules: [UDP Query User{62129439-C5AB-4D64-8205-FD2F6BEB6AED}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe => No File
FirewallRules: [{4FB49818-14AC-4AC1-BBB4-CF749ADEB704}] => (Allow) LPort=9143
FirewallRules: [{054247BA-A0F5-47E0-A726-BD6E7793645C}] => (Allow) LPort=2333
FirewallRules: [TCP Query User{FE686AC4-43FC-4A09-ACD3-EC2B747AFC96}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> )
FirewallRules: [UDP Query User{0E888A89-E13E-4746-ADE0-FFB89C38B62A}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> )
FirewallRules: [TCP Query User{FC0A14B5-CF4C-4F22-B758-1C804E5548AD}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{C9E07D9E-6C49-4E1E-AE6B-7F86BAB8A12D}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{32D36E24-B249-4A59-B36C-7E077E34E10E}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{70C440CD-05AE-4694-945C-EA19C46FD267}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{D039A14B-A944-4635-A50E-59CB461A3C1F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{63F48F12-6771-4F28-B89F-6A9290E86958}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{0057A8BB-7873-40C5-8F11-567744ECDF8B}F:\age of empires 2 cz!!!!\age2_x1.exe] => (Allow) F:\age of empires 2 cz!!!!\age2_x1.exe => No File
FirewallRules: [UDP Query User{66F6C72A-4607-42BB-9640-A0F035F6B4DE}F:\age of empires 2 cz!!!!\age2_x1.exe] => (Allow) F:\age of empires 2 cz!!!!\age2_x1.exe => No File
FirewallRules: [{D01D713A-E10A-4C59-A18D-A6F5B4C00A66}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{678BE354-952D-428B-A47A-2AD73129194F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [TCP Query User{FAE165AF-837B-4684-9559-2C04FAFA9B2B}G:\games\factorio_0.16.49\tests\x64\factorio-test.exe] => (Allow) G:\games\factorio_0.16.49\tests\x64\factorio-test.exe => No File
FirewallRules: [UDP Query User{A7A41287-E4EF-4C99-9410-6D48B5027242}G:\games\factorio_0.16.49\tests\x64\factorio-test.exe] => (Allow) G:\games\factorio_0.16.49\tests\x64\factorio-test.exe => No File
FirewallRules: [TCP Query User{D9F518C8-8F07-4636-A801-9E8EBD01639A}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{5A69CCCD-C144-491A-BEF9-798D2F79BC24}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{08009614-7494-4FE8-9396-29934C216EE5}C:\users\plasko\desktop\ark server\gamedata\steamcmd\steamcmd.exe] => (Allow) C:\users\plasko\desktop\ark server\gamedata\steamcmd\steamcmd.exe (Valve -> Valve Corporation)
FirewallRules: [UDP Query User{C54DCB3C-77AD-4895-B992-0A4DA3C21D0A}C:\users\plasko\desktop\ark server\gamedata\steamcmd\steamcmd.exe] => (Allow) C:\users\plasko\desktop\ark server\gamedata\steamcmd\steamcmd.exe (Valve -> Valve Corporation)
FirewallRules: [{B92DB395-7EAF-44CB-988E-DB1844C1D071}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{5B5C3417-E31C-43C9-820D-4F4BD4AF4D3E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F3B269DB-636F-44D6-87B1-7D8BB935A4E6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{0413ACA6-164B-4E1B-8782-18FF6B8FABBB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C973B638-B6E2-4ABF-A7C4-42139B55E58B}] => (Allow) E:\Games\Warcraft II BNE\Warcraft II BNE.exe => No File
FirewallRules: [{4D4823D8-371B-4397-BCF7-C9C674FC1923}] => (Allow) E:\Games\Warcraft II BNE\Warcraft II BNE_dx.exe => No File
FirewallRules: [{A2FE1957-FDE6-42CF-9B29-CF0D8BD0F6D8}] => (Allow) C:\program files (x86)\nzxt\cam\cam.desktop.exe (NZXT, Inc. -> )
FirewallRules: [{F4F985C2-0E16-4F69-893F-564EABA4E453}] => (Allow) C:\program files (x86)\nzxt\cam\cam.desktop.exe (NZXT, Inc. -> )
FirewallRules: [{0B0CE7E2-630C-427A-8C1E-1A213E879F35}] => (Allow) C:\program files (x86)\nzxt\cam\cam.desktop.exe (NZXT, Inc. -> )
FirewallRules: [{CE7F8103-DEA8-428D-A54F-459E3B6735E3}] => (Allow) C:\program files (x86)\nzxt\cam\cam.desktop.exe (NZXT, Inc. -> )
FirewallRules: [{C4E296CC-985C-414E-A859-DA67A4CCF177}] => (Allow) LPort=38518
FirewallRules: [{4108CA17-5E25-4D94-A836-72073E85E39C}] => (Allow) LPort=9142
FirewallRules: [TCP Query User{FF9610FD-672F-4EDB-B01F-C48BBABEAA01}F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{33DA7485-7FF0-449C-BEB6-6E9AB8D03FCE}F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe => No File
FirewallRules: [TCP Query User{BB5FB413-1CF4-419C-8392-C4CB9E615219}F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{6CD5D0A9-7D07-4E77-B3A6-1C72CC9EC8D5}F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe => No File
FirewallRules: [TCP Query User{91DD2B6A-43C3-452B-8EDF-82ACC7D5AA07}F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{9FA427F5-D9F5-4651-BF98-A3AA4AA0414C}F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe => No File
FirewallRules: [TCP Query User{EBFB6361-C88D-42C6-9EEA-FD1A05F517C0}F:\sightseer\sightseer\p5sserver.exe] => (Allow) F:\sightseer\sightseer\p5sserver.exe => No File
FirewallRules: [UDP Query User{0830B027-16D5-41AD-AF3F-E90D1895A68C}F:\sightseer\sightseer\p5sserver.exe] => (Allow) F:\sightseer\sightseer\p5sserver.exe => No File
FirewallRules: [TCP Query User{C1C0794D-70F6-4E67-A868-2595B3FE2BC0}F:\project 5 sightseer\p5sserver.exe] => (Allow) F:\project 5 sightseer\p5sserver.exe => No File
FirewallRules: [UDP Query User{74485101-B2DC-4746-870B-0AC36A267A70}F:\project 5 sightseer\p5sserver.exe] => (Allow) F:\project 5 sightseer\p5sserver.exe => No File
FirewallRules: [TCP Query User{D75D2E09-6DCE-4E39-9409-09E75C475F87}F:\mashinky v14.06.2019\mashinky.exe] => (Allow) F:\mashinky v14.06.2019\mashinky.exe => No File
FirewallRules: [UDP Query User{C2B7FC07-2A26-40A4-A697-3F2B91DB3486}F:\mashinky v14.06.2019\mashinky.exe] => (Allow) F:\mashinky v14.06.2019\mashinky.exe => No File
FirewallRules: [{652021DF-56ED-44C2-AC02-F00BC38BDE18}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B770507C-3591-4118-B218-EB9EFBECFFD8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{8CF8450F-DCE6-4A37-B608-46CD75A6C791}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{94C8ECA9-1769-4CB1-84CB-F09EC95DAB44}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{D7137628-8401-4298-859A-6F17F36D2B6B}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [UDP Query User{28E5A7F6-42D2-4ED2-9CE6-81517940BE0A}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [TCP Query User{F21D4D3A-4271-448C-9015-FBE1F4E0F3CF}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{A80D42FA-E09E-4DBF-9486-067AB4B88632}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{C7FE2847-4180-4788-86A3-C29D76B9071E}H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe] => (Allow) H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe => No File
FirewallRules: [UDP Query User{2633C37D-45B9-4FD4-80B9-7BEA77D740A9}H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe] => (Allow) H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe => No File
FirewallRules: [{FE71CBBB-0B6C-4D20-91F2-A11B11A9B86E}] => (Allow) H:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe => No File
FirewallRules: [{AB44B033-5A5B-4FA5-860A-1882A3FA8110}] => (Allow) H:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe => No File
FirewallRules: [{5436FB4A-5B40-4002-A192-F5FEA78ABF56}] => (Allow) H:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe => No File
FirewallRules: [{C962EA63-ED9B-4430-88F0-BAE56318D06C}] => (Allow) H:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe => No File
FirewallRules: [{0204321A-05AF-46AC-BE6F-923C6F691CF9}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{923D01BD-8A8B-4120-BF5D-CB4BFCCE7DF5}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{F1597FFC-AFE0-479C-AE05-3A0E7AD2B5F1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Factorio\bin\x64\factorio.exe => No File
FirewallRules: [{E5E0FF6C-BDB9-4BA2-BF0A-441BC614ACBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Factorio\bin\x64\factorio.exe => No File
FirewallRules: [{F002B696-2757-4EC5-AE3A-C1B5483FBF33}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{7B6C603E-189C-4E84-A356-4016A719E39B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{E52B921A-4657-4B2B-A772-D163A1FA95EE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Clicker Heroes\Clicker Heroes.exe () [File not signed]
FirewallRules: [{82F61FE1-2FDC-4D21-B09B-7F9ED1354198}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Clicker Heroes\Clicker Heroes.exe () [File not signed]
FirewallRules: [{8C18ACD2-BF0B-4612-8DF3-0217DE0FF14A}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{DA8BF6D8-DDB9-41FF-B9D7-D9CC3F21AB73}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{D6213BCB-A722-46DF-A7C1-3BD562666438}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{F48E60BC-0450-40BE-8427-0637D1F2C39B}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{090BE039-435E-4A49-A9A1-8690FC4F63AB}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{F5D44328-C4EF-4B88-BC13-050835DECF57}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{F3BC6BD8-41AD-4DFF-8C92-424999FE8240}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{AFF86247-B1A8-4D3F-87E6-3EC8BE7B49DF}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{7C8E56BE-EF61-4144-821D-6B9011F23194}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{F18FA238-5817-452F-A425-954CFA56B7B0}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{47D05047-1B8F-4E29-B320-5719F9A9694E}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{A3E41366-C7C1-4D68-A6A9-D1A7D5150B81}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{E4CF7C1E-41B1-4FEE-B0FD-B164A4958E74}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{75EF9C7C-CBA9-4BBF-85C2-30EAA12DBB88}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{02A749EF-BC51-4014-AD70-16DD00A28FAD}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{46A616D5-5C2E-485B-AC53-3A200844B59C}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{2E9C9FF1-C41B-4472-B2A5-B370A285D3DB}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
FirewallRules: [{2EF2FA6A-C71A-4EA4-BFF1-27D0AEA13990}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
FirewallRules: [{D45C3EE6-2E5F-41AA-8942-38EAFA8646C7}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{C4FCB547-FD9C-42E9-B9FA-23A32CA34863}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{BDDEE868-8C1E-4AC0-8DC8-746CF515152F}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{A5E0776E-A3B4-45C4-B79F-F8975089FB9E}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{3498D118-6E5D-422D-A7DE-A094B9DF37C5}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{523929AC-0BC3-42D0-9021-03EB367E857E}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{B4FB16F3-1CE9-46E1-8E8A-196ACBA2A1CD}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{8166F0DC-74CC-44A1-AACF-08547589A004}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{EA86DB11-1A19-4F9A-A299-46CB9C48F297}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{DB1F4BC4-2E85-407F-931D-52BA2B491081}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{A910D8F8-4DB5-4304-9B20-66366417B5DC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{3E2BFBCD-1A0B-4208-A360-268C398F4CEA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{C857D0C9-174D-49FA-A3EB-736533C17065}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\157.0.8103.41\remoting_network.exe (Google LLC -> Google LLC)
FirewallRules: [{476775A7-FEEC-42D9-B395-1F8708389994}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe => No File
FirewallRules: [{E5A2B8A0-043A-4E1C-9948-1F46C42D21EA}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe => No File
FirewallRules: [{D5F9ACF1-493B-40B1-9E21-9AD88E8FB93F}] => (Block) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe => No File
FirewallRules: [{13EA0C03-0A4F-40C0-8813-AFD0A8A88B9D}] => (Block) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe => No File
FirewallRules: [{947490DF-F950-4A58-8371-F51939218519}] => (Allow) C:\Program Files (x86)\Overwolf\0.314.1.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{D9E5A708-FE61-4881-B78D-21BA807D4A89}] => (Allow) C:\Program Files (x86)\Overwolf\0.314.1.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{AC5C6AD0-A583-475F-BD0B-D1CEE51C9FE4}] => (Block) C:\Program Files (x86)\Overwolf\0.314.1.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{A154B44C-7BCE-4DD8-9CD5-C5AC535687DF}] => (Block) C:\Program Files (x86)\Overwolf\0.314.1.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{050C4027-EF34-43B8-9DB1-C1CA76F9B57C}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\copilotapp.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C5F59F60-22EA-42F1-9DD0-18CB25569C25}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\undocked_copilot\copilotapphost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5F433692-C70A-41C1-8F3A-A4E70F3FD26D}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\undocked_copilot\copilotapphost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0659B9DC-9060-4A7F-8DAA-0641DA33164B}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\undocked_copilot\copilotapphost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8D89D4F6-68D4-4D56-80F6-FB77F1ABCC5A}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\undocked_copilot\copilotapphost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C09B78BD-2156-4896-B117-2A7B157D7F56}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (11/11/2026 01:53:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 17 9.4.6.4.8.3.C.2.D.8.B.1.4.1.7.5.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR Plasko-Pc.local.

Error: (11/11/2026 01:53:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from FE80:0000:0000:0000:5714:1B8D:2C38:4649:5353 19 9.4.6.4.8.3.C.2.D.8.B.1.4.1.7.5.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR Plasko-Pc-2.local.

Error: (11/10/2026 11:37:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname Plasko-Pc-2.local already in use; will try Plasko-Pc-3.local instead

Error: (11/10/2026 11:37:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 0; will deregister 16 Plasko-Pc-2.local. AAAA FE80:0000:0000:0000:A918:73A6:ADCB:EFA0

Error: (11/10/2026 11:37:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.55.101:5353 16 Plasko-Pc-2.local. AAAA 2A06:A281:A67D:0000:3AC6:3E81:5454:FA79

Error: (11/10/2026 11:37:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Ignoring response received before we even began probing: 4 Plasko-Pc-2.local. Addr 192.168.55.101

Error: (11/10/2026 11:37:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ResolveSimultaneousProbe: 01294EA0 Our Record 1 won: 8BABBCBE 16 Plasko-Pc-2.local. AAAA FE80:0000:0000:0000:A918:73A6:ADCB:EFA0

Error: (11/10/2026 11:37:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ResolveSimultaneousProbe: 01294EA0 Pkt Record: F83D87B0 16 Plasko-Pc-2.local. AAAA 2A06:A281:A67D:0000:7033:7296:F898:60AE

System errors:
=============
Error: (11/11/2026 09:24:03 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba Epic Online Services bola ukončená s nasledujúcou chybou služby:
%%75

Error: (11/10/2026 11:37:10 PM) (Source: DCOM) (EventID: 10010) (User: PLASKO-PC)
Description: The server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter did not register with DCOM within the required timeout.

Error: (11/10/2026 05:10:44 PM) (Source: DCOM) (EventID: 10010) (User: PLASKO-PC)
Description: The server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter did not register with DCOM within the required timeout.

Error: (11/10/2026 12:10:47 AM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Error: (11/09/2026 10:12:43 PM) (Source: Schannel) (EventID: 4103) (User: NT AUTHORITY)
Description: A fatal error occurred while creating a TLS Klient credential. The internal error state is 10011.

Error: (11/09/2026 10:12:43 PM) (Source: Schannel) (EventID: 4103) (User: NT AUTHORITY)
Description: A fatal error occurred while creating a TLS Klient credential. The internal error state is 10011.

Error: (11/09/2026 10:12:42 PM) (Source: Schannel) (EventID: 4103) (User: NT AUTHORITY)
Description: A fatal error occurred while creating a TLS Klient credential. The internal error state is 10011.

Error: (11/09/2026 10:12:42 PM) (Source: Schannel) (EventID: 4103) (User: NT AUTHORITY)
Description: A fatal error occurred while creating a TLS Klient credential. The internal error state is 10011.

Windows Defender:
================

TimeCreated : 26.10.2026 16:07:31
Message : Antivirová ochrana v programu Microsoft Defender has detected malware or other potentially unwanted softw
are.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... ck&threati
d=14994&enterprise=0
Name: SettingsModifier:Win32/PossibleHostsFileHijack
ID: 14994
Severity: Střední
Category: Program měnící nastavení
Path: file:_C:\Windows\System32\drivers\etc\hosts
Detection Origin: Místní počítač
Detection Type: Konkrétní
Detection Source: Ochrana v reálném čase
User:
Process Name: C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe
Security intelligence Version: AV: 1.461.55.0, AS: 1.461.55.0, NIS: 1.461.55.0
Engine Version: AM: 1.1.26090.9, NIS: 1.1.26090.9

TimeCreated : 26.10.2026 16:07:06
Message : Antivirová ochrana v programu Microsoft Defender has detected malware or other potentially unwanted softw
are.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... ck&threati
d=14994&enterprise=0
Name: SettingsModifier:Win32/PossibleHostsFileHijack
ID: 14994
Severity: Střední
Category: Program měnící nastavení
Path: file:_C:\Windows\System32\drivers\etc\hosts
Detection Origin: Místní počítač
Detection Type: Konkrétní
Detection Source: Ochrana v reálném čase
User:
Process Name: C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe
Security intelligence Version: AV: 1.461.55.0, AS: 1.461.55.0, NIS: 1.461.55.0
Engine Version: AM: 1.1.26090.9, NIS: 1.1.26090.9

TimeCreated : 26.10.2026 16:02:26
Message : Antivirová ochrana v programu Microsoft Defender has detected malware or other potentially unwanted softw
are.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... ck&threati
d=14994&enterprise=0
Name: SettingsModifier:Win32/PossibleHostsFileHijack
ID: 14994
Severity: Střední
Category: Program měnící nastavení
Path: file:_C:\Windows\System32\drivers\etc\hosts
Detection Origin: Místní počítač
Detection Type: Konkrétní
Detection Source: Ochrana v reálném čase
User:
Process Name: C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe
Security intelligence Version: AV: 1.461.55.0, AS: 1.461.55.0, NIS: 1.461.55.0
Engine Version: AM: 1.1.26090.9, NIS: 1.1.26090.9

CodeIntegrity:
===============
Date: 2026-11-11 17:00:49
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Avira\Endpoint Protection SDK\amsi\x64\avamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 3802 03/15/2018
Motherboard: ASUSTeK COMPUTER INC. MAXIMUS VIII HERO
Processor: Intel(R) Core(TM) i7-6700 CPU @ 3.40GHz
Percentage of memory in use: 55%
Total physical RAM: 32706.64 MB
Available physical RAM: 14436.72 MB
Total Virtual: 46018.64 MB
Available Virtual: 13258.08 MB

==================== Drives ================================

Disk 0 - Drive c: () (Fixed) (Total:475.54 GB) (Free:15.41 GB) (Model: Samsung SSD 950 PRO 512GB) NTFS

Disk 0 - \\?\Volume{b7528e61-b0d8-4e48-b420-de294a9a1066}\ (Obnovení) (Fixed) (Total:450 MB) (Free:436.1 MB) NTFS
Disk 0 - \\?\Volume{38a4ae61-e9a7-4a26-856e-4fbb67a917ab}\ () (Fixed) (Total:862 MB) (Free:153.8 MB) NTFS
Disk 0 - \\?\Volume{353bb99c-9d9c-40c6-be77-d20f5237417b}\ () (Fixed) (Total:96 MB) (Free:67.41 MB) FAT32

==================== MBR & Partition Table ====================

============================================================
Disk: 0 (Protective MBR) (Size: 476.94 GB)

Partitions:
===========
Partition Style : GPT
Partition Count : 5
Disk ID : {3715CE8C-04D0-4BBD-BEB4-DC36765FB870}
Usable Offset : 0.02 MB
Usable Length : 476.94 GB
Max Partitions : 128

Partition 1
Type : Windows Recovery
Size : 450 MB
Offset : 1 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {B7528E61-B0D8-4E48-B420-DE294A9A1066}
GPT Name : Basic data partition
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
Partition 2
Type : EFI System Partition
Size : 100 MB
Offset : 451 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {353BB99C-9D9C-40C6-BE77-D20F5237417B}
GPT Name : EFI system partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 551 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {825F4568-9842-492D-8462-BC51837EE251}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Basic Data Partition
Size : 475.54 GB
Offset : 567 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {5A3B8804-1900-468E-9B68-972B66551B0F}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 5
Type : Windows Recovery
Size : 862 MB
Offset : 487523 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {38A4AE61-E9A7-4A26-856E-4FBB67A917AB}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------

============================================================

==================== End of Addition.txt =======================

#3 Příspěvek od **Rudy** » Včera 18:11

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\ChromeHTML: -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) <==== ATTENTION
CustomCLSID: HKU\S-1-5-21-2873281325-1507384511-3975134512-1001_Classes\CLSID\{88975AC1-D0AB-445C-9B05-D0D8948931B5}\InprocServer32 -> C:\Users\Plasko\AppData\Local\Avira\Browser\Update\1.8.1652.5\psuser_64.dll => No File
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`28hfm [0]
AlternateDataStreams: C:\ProgramData\TEMP:9A870F8B [231]
AlternateDataStreams: C:\Users\Public\AppData:CSM [478]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [466]
FirewallRules: [{2FF81C0B-2896-466F-9B49-890010059046}] => (Block) H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe => No File
FirewallRules: [{640F60B5-7C10-46BF-B4F7-149E6D827CAE}] => (Block) H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe => No File
FirewallRules: [UDP Query User{55EE8D1C-80A2-4D12-A315-3099E848B849}H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe] => (Allow) H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe => No File
FirewallRules: [TCP Query User{047B92C3-7FD9-4CEE-9D9E-BE22F4E07CC1}H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe] => (Allow) H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe => No File
FirewallRules: [{77083DEA-69AB-4972-9FFE-03E1DE15A466}] => (Block) F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe => No File
FirewallRules: [{C33EA34F-B0D3-4E86-A16D-2C75A3BE2331}] => (Block) F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{8428AE40-B558-40D5-8A52-CE5A4641CD3F}F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe => No File
FirewallRules: [TCP Query User{F8F0509D-B0BC-45CB-971A-4D3E396C8505}F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe => No File
FirewallRules: [{14B869C8-1E5B-4ED8-9D26-592B2A0686A1}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe => No File
FirewallRules: [{B9A6919C-0380-4A99-8163-F189F25A15D2}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe => No File
FirewallRules: [UDP Query User{F32B940A-9331-4593-ADA4-10095A5304E6}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe => No File
FirewallRules: [TCP Query User{282C4D37-D3E8-4F39-B773-3A5222E3C6F8}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe => No File
FirewallRules: [{79B67504-797C-4100-94E5-010CF57205DD}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe => No File
FirewallRules: [{AB6858D8-66DA-486C-9513-9686075C9D21}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe => No File
FirewallRules: [UDP Query User{A1D19718-7EA8-4A96-ACC3-967BF53E4010}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe => No File
FirewallRules: [TCP Query User{2CE9AAFB-E190-4B91-9388-00CC2A1039A6}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe => No File
FirewallRules: [{68009D13-EE1A-4E12-9F59-438C20EA8695}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe => No File
FirewallRules: [{F4342DD4-2333-4D1F-9821-5E759734040C}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe => No File
FirewallRules: [UDP Query User{1A226025-F8AD-496A-8775-C785ED0674D0}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe => No File
FirewallRules: [TCP Query User{CD975AA3-B73B-43F6-84D0-8238A4E04630}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe => No File
FirewallRules: [{078AEA31-2F58-4A4F-B35C-D9B2F5037D97}] => (Block) H:\images\survivingtheaftermath\aftermath64.exe => No File
FirewallRules: [{94AECC61-81F6-46EB-A229-9BA8C617A6C9}] => (Block) H:\images\survivingtheaftermath\aftermath64.exe => No File
FirewallRules: [UDP Query User{9A116849-088D-464A-9A74-5403BE814C66}H:\images\survivingtheaftermath\aftermath64.exe] => (Allow) H:\images\survivingtheaftermath\aftermath64.exe => No File
FirewallRules: [TCP Query User{FF9D74C9-D3E4-47A7-BD23-1B0E100F9827}H:\images\survivingtheaftermath\aftermath64.exe] => (Allow) H:\images\survivingtheaftermath\aftermath64.exe => No File
FirewallRules: [UDP Query User{085FAB08-EF60-40BC-8127-6A1B0CA42F2F}F:\heroes vi - complete edition\might & magic heroes vi.exe] => (Allow) F:\heroes vi - complete edition\might & magic heroes vi.exe => No File
FirewallRules: [TCP Query User{97576280-0729-4EB4-A4F9-D09123BD1481}F:\heroes vi - complete edition\might & magic heroes vi.exe] => (Allow) F:\heroes vi - complete edition\might & magic heroes vi.exe => No File
FirewallRules: [UDP Query User{87D8286B-AB6A-49F0-BB95-034A0ECEDB02}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe => No File
FirewallRules: [TCP Query User{C68E2DCB-00D2-4ABC-ACB8-5432EFCC395E}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe => No File
FirewallRules: [TCP Query User{A8624365-67D4-4D18-AE63-5C03B59D6545}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe => No File
FirewallRules: [UDP Query User{31DA84A7-8A76-47A9-96D0-5B5088C774B8}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe => No File
FirewallRules: [TCP Query User{C6BCFF53-2401-4519-9F5B-1F78DBE91575}C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe] => (Allow) C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe => No File
FirewallRules: [UDP Query User{E2263D47-9E7F-4E27-A2C4-455D06E26A47}C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe] => (Allow) C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe => No File
FirewallRules: [TCP Query User{6162DB9B-72C9-4792-BEEE-3DFFA247CA51}C:\program files\vertrigoserv\apache\bin\v_apache.exe] => (Allow) C:\program files\vertrigoserv\apache\bin\v_apache.exe => No File
FirewallRules: [UDP Query User{129588E3-1875-4FCB-8814-14B57C42B49F}C:\program files\vertrigoserv\apache\bin\v_apache.exe] => (Allow) C:\program files\vertrigoserv\apache\bin\v_apache.exe => No File
FirewallRules: [{2770FC9D-2C90-47C9-B9AA-9046C58C4E03}] => (Block) C:\program files\vertrigoserv\apache\bin\v_apache.exe => No File
FirewallRules: [{028603F1-241C-40F6-AA44-52241F4A6578}] => (Block) C:\program files\vertrigoserv\apache\bin\v_apache.exe => No File
FirewallRules: [{E0E0E094-362C-4B72-BB0D-0198C964D462}] => (Block) C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe => No File
FirewallRules: [{7E06F0DD-D007-40B3-BFCA-16015480FE8C}] => (Block) C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe => No File
FirewallRules: [TCP Query User{1B731C66-63A8-472C-BDDB-4FAAAB94E6A4}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe => No File
FirewallRules: [UDP Query User{62129439-C5AB-4D64-8205-FD2F6BEB6AED}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe => No File
FirewallRules: [TCP Query User{0057A8BB-7873-40C5-8F11-567744ECDF8B}F:\age of empires 2 cz!!!!\age2_x1.exe] => (Allow) F:\age of empires 2 cz!!!!\age2_x1.exe => No File
FirewallRules: [UDP Query User{66F6C72A-4607-42BB-9640-A0F035F6B4DE}F:\age of empires 2 cz!!!!\age2_x1.exe] => (Allow) F:\age of empires 2 cz!!!!\age2_x1.exe => No File
FirewallRules: [{D01D713A-E10A-4C59-A18D-A6F5B4C00A66}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{678BE354-952D-428B-A47A-2AD73129194F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [TCP Query User{FAE165AF-837B-4684-9559-2C04FAFA9B2B}G:\games\factorio_0.16.49\tests\x64\factorio-test.exe] => (Allow) G:\games\factorio_0.16.49\tests\x64\factorio-test.exe => No File
FirewallRules: [UDP Query User{A7A41287-E4EF-4C99-9410-6D48B5027242}G:\games\factorio_0.16.49\tests\x64\factorio-test.exe] => (Allow) G:\games\factorio_0.16.49\tests\x64\factorio-test.exe => No File
FirewallRules: [{C973B638-B6E2-4ABF-A7C4-42139B55E58B}] => (Allow) E:\Games\Warcraft II BNE\Warcraft II BNE.exe => No File
FirewallRules: [{4D4823D8-371B-4397-BCF7-C9C674FC1923}] => (Allow) E:\Games\Warcraft II BNE\Warcraft II BNE_dx.exe => No File
FirewallRules: [TCP Query User{FF9610FD-672F-4EDB-B01F-C48BBABEAA01}F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{33DA7485-7FF0-449C-BEB6-6E9AB8D03FCE}F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe => No File
FirewallRules: [TCP Query User{BB5FB413-1CF4-419C-8392-C4CB9E615219}F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{6CD5D0A9-7D07-4E77-B3A6-1C72CC9EC8D5}F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe => No File
FirewallRules: [TCP Query User{91DD2B6A-43C3-452B-8EDF-82ACC7D5AA07}F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{9FA427F5-D9F5-4651-BF98-A3AA4AA0414C}F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe => No File
FirewallRules: [TCP Query User{EBFB6361-C88D-42C6-9EEA-FD1A05F517C0}F:\sightseer\sightseer\p5sserver.exe] => (Allow) F:\sightseer\sightseer\p5sserver.exe => No File
FirewallRules: [UDP Query User{0830B027-16D5-41AD-AF3F-E90D1895A68C}F:\sightseer\sightseer\p5sserver.exe] => (Allow) F:\sightseer\sightseer\p5sserver.exe => No File
FirewallRules: [TCP Query User{C1C0794D-70F6-4E67-A868-2595B3FE2BC0}F:\project 5 sightseer\p5sserver.exe] => (Allow) F:\project 5 sightseer\p5sserver.exe => No File
FirewallRules: [UDP Query User{74485101-B2DC-4746-870B-0AC36A267A70}F:\project 5 sightseer\p5sserver.exe] => (Allow) F:\project 5 sightseer\p5sserver.exe => No File
FirewallRules: [TCP Query User{D75D2E09-6DCE-4E39-9409-09E75C475F87}F:\mashinky v14.06.2019\mashinky.exe] => (Allow) F:\mashinky v14.06.2019\mashinky.exe => No File
FirewallRules: [UDP Query User{C2B7FC07-2A26-40A4-A697-3F2B91DB3486}F:\mashinky v14.06.2019\mashinky.exe] => (Allow) F:\mashinky v14.06.2019\mashinky.exe => No File
FirewallRules: [TCP Query User{C7FE2847-4180-4788-86A3-C29D76B9071E}H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe] => (Allow) H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe => No File
FirewallRules: [UDP Query User{2633C37D-45B9-4FD4-80B9-7BEA77D740A9}H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe] => (Allow) H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe => No File
FirewallRules: [{FE71CBBB-0B6C-4D20-91F2-A11B11A9B86E}] => (Allow) H:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe => No File
FirewallRules: [{AB44B033-5A5B-4FA5-860A-1882A3FA8110}] => (Allow) H:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe => No File
FirewallRules: [{5436FB4A-5B40-4002-A192-F5FEA78ABF56}] => (Allow) H:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe => No File
FirewallRules: [{C962EA63-ED9B-4430-88F0-BAE56318D06C}] => (Allow) H:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe => No File
FirewallRules: [{F1597FFC-AFE0-479C-AE05-3A0E7AD2B5F1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Factorio\bin\x64\factorio.exe => No File
FirewallRules: [{E5E0FF6C-BDB9-4BA2-BF0A-441BC614ACBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Factorio\bin\x64\factorio.exe => No File
FirewallRules: [{8C18ACD2-BF0B-4612-8DF3-0217DE0FF14A}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{DA8BF6D8-DDB9-41FF-B9D7-D9CC3F21AB73}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{D6213BCB-A722-46DF-A7C1-3BD562666438}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{F48E60BC-0450-40BE-8427-0637D1F2C39B}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{090BE039-435E-4A49-A9A1-8690FC4F63AB}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{F5D44328-C4EF-4B88-BC13-050835DECF57}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{F3BC6BD8-41AD-4DFF-8C92-424999FE8240}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{AFF86247-B1A8-4D3F-87E6-3EC8BE7B49DF}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{7C8E56BE-EF61-4144-821D-6B9011F23194}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{F18FA238-5817-452F-A425-954CFA56B7B0}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{47D05047-1B8F-4E29-B320-5719F9A9694E}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{A3E41366-C7C1-4D68-A6A9-D1A7D5150B81}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{E4CF7C1E-41B1-4FEE-B0FD-B164A4958E74}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{75EF9C7C-CBA9-4BBF-85C2-30EAA12DBB88}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{02A749EF-BC51-4014-AD70-16DD00A28FAD}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{46A616D5-5C2E-485B-AC53-3A200844B59C}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{476775A7-FEEC-42D9-B395-1F8708389994}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe => No File
FirewallRules: [{E5A2B8A0-043A-4E1C-9948-1F46C42D21EA}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe => No File
FirewallRules: [{D5F9ACF1-493B-40B1-9E21-9AD88E8FB93F}] => (Block) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe => No File
FirewallRules: [{13EA0C03-0A4F-40C0-8813-AFD0A8A88B9D}] => (Block) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe => No File
C:\Program Files (x86)\Blizzard\Bonjour Service
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [] => [X]
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Plasko\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (No File) <==== ATTENTION
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Plasko\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File) <==== ATTENTION
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\MountPoints2: {4f661814-2379-11ee-bbfc-548ca05457b4} - "D:\.\StartModem.exe"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\MountPoints2: {4f661882-2379-11ee-bbfc-548ca05457b4} - "D:\.\StartModem.exe"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\MountPoints2: {4f661a1b-2379-11ee-bbfc-548ca05457b4} - "D:\.\StartModem.exe"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Winlogon: [Shell] C:\Windows\explorer.exe [6153504 2026-10-19] (Microsoft Windows -> Microsoft Corporation) <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy-Firefox: Restriction <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {70aa803b-23c6-4e15-b0a6-b5d5570165b5} - no filepath. <==== ATTENTION
Task: {BC12C833-B6FD-4608-A617-C094A71CB62F} - \Driver Booster SkipUAC (Plasko) -> No File <==== ATTENTION
Task: {EEBEC377-CDDA-4DDE-93A6-89E394124E4B} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {BDDF2CB2-E9DF-417D-8308-36703B7AC826} - System32\Tasks\BaseBase_lts => C:\ProgramData\runnerupload_rc\FrameworkA32.exe [512152 0] () [File not signed] [File is in use] <==== ATTENTION
Task: {05393F7B-A34A-4D43-A2A1-340971216E43} - System32\Tasks\intmgr => C:\ProgramData\runnerupload_rc\FrameworkA32.exe [512152 0] () [File not signed] [File is in use] <==== ATTENTION
Task: {E9E4C3CE-1D18-4CFA-885B-BB3D465A0896} - System32\Tasks\Microsoft\Windows\rempl\shell-compact => %ProgramFiles%\rempl\remsh.exe (No File) /RunCompactOnly (No File)
Task: {34ECD316-C7D7-4CE6-96C1-E5BAA6E367CA} - System32\Tasks\Microsoft\Windows\rempl\shell-restore => %ProgramFiles%\rempl\remsh.exe (No File) /RunRestoreHealthOnly (No File)
Task: {EA9754AF-082A-435E-BA7D-3D29F7CC3109} - System32\Tasks\Microsoft\Windows\rempl\shell-unlock => %ProgramFiles%\rempl\remsh.exe (No File) /RunUsoScanOnly (No File)
Task: {455256CD-ACE6-474B-A963-2F4B4408470F} - System32\Tasks\Microsoft\Windows\rempl\shell-unlock-sih => %ProgramFiles%\rempl\remsh.exe (No File) /RunSihScanOnly (No File)
Task: {C1BAE019-8C63-478D-AEF3-79FDB9316F46} - System32\Tasks\Microsoft\Windows\rempl\shell-unlock-storagesense => %ProgramFiles%\rempl\remsh.exe (No File) /RunStorageSenseTaskOnly (No File)
Task: {4B4C9DE4-4828-4D5E-8C1A-D9958F0A1A1C} - System32\Tasks\Microsoft\Windows\rempl\shell-usoscan => %ProgramFiles%\rempl\remsh.exe (No File) /RunUsoScanOnly (No File)
FF Plugin HKU\S-1-5-21-2873281325-1507384511-3975134512-1001: @update.avira.securebrowser.com/Avira Browser;version=3 -> C:\Users\Plasko\AppData\Local\Avira\Browser\Update\1.8.1652.5\npAviraBrowserUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-2873281325-1507384511-3975134512-1001: @update.avira.securebrowser.com/Avira Browser;version=9 -> C:\Users\Plasko\AppData\Local\Avira\Browser\Update\1.8.1652.5\npAviraBrowserUpdate3.dll [No File]
R2 WhitemaneVpnHelper; C:\ProgramData\Whitemane\vpn\wm-vpn-helper.exe [327168 2026-08-03] () [File not signed] <==== ATTENTION
S3 ss_conn_launcher_service; %SystemRoot%\System32\Samsung\EasySetup\ss_conn_launcher.exe (No File)
R3 cpuz154; \??\C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2026-10-26] (Microsoft Windows Hardware Compatibility Publisher -> ) <==== ATTENTION
R4 IOMap; \??\C:\WINDOWS\system32\drivers\IOMap64.sys [24824 2014-09-08] (ASUSTeK Computer Inc. -> )
R2 LGCoreTemp; \??\C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> )
S3 cpuz148; \??\C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys (No File) <==== ATTENTION
S3 iscFlash; \??\C:\Users\Plasko\AppData\Local\Temp\pftB618.tmp\iscflashx64.sys (No File) <==== ATTENTION
S3 ss_conn_usb_driver2; \SystemRoot\System32\Drivers\ss_conn_usb_driver2.sys (No File)
C:\WINDOWS\system32\Tasks\MicrpZEAWYtiB6bJ16NuLbGCc6CZ6jJdKfb63
C:\WINDOWS\system32\Tasks\MAkF7mCn3tPqp662daybvERzwsKQYqnzM8
C:\DumpStack.log.tmp

EmptyTemp:
Hosts:

End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

plasko · #4 Příspěvek od **plasko** » Včera 19:52

Avira FRST sice hodila do karanteny ale myslim ze uz to stihol dokoncit.

Fix result of Farbar Recovery Scan Tool (x64) Version: 10-11-2026 01
Ran by Plasko (11-11-2026 19:49:43) Run:1
Running from C:\Users\Plasko\Desktop
Loaded Profiles: Plasko & Administrator
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\ChromeHTML: -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) <==== ATTENTION
CustomCLSID: HKU\S-1-5-21-2873281325-1507384511-3975134512-1001_Classes\CLSID\{88975AC1-D0AB-445C-9B05-D0D8948931B5}\InprocServer32 -> C:\Users\Plasko\AppData\Local\Avira\Browser\Update\1.8.1652.5\psuser_64.dll => No File
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`28hfm [0]
AlternateDataStreams: C:\ProgramData\TEMP:9A870F8B [231]
AlternateDataStreams: C:\Users\Public\AppData:CSM [478]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [466]
FirewallRules: [{2FF81C0B-2896-466F-9B49-890010059046}] => (Block) H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe => No File
FirewallRules: [{640F60B5-7C10-46BF-B4F7-149E6D827CAE}] => (Block) H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe => No File
FirewallRules: [UDP Query User{55EE8D1C-80A2-4D12-A315-3099E848B849}H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe] => (Allow) H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe => No File
FirewallRules: [TCP Query User{047B92C3-7FD9-4CEE-9D9E-BE22F4E07CC1}H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe] => (Allow) H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe => No File
FirewallRules: [{77083DEA-69AB-4972-9FFE-03E1DE15A466}] => (Block) F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe => No File
FirewallRules: [{C33EA34F-B0D3-4E86-A16D-2C75A3BE2331}] => (Block) F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{8428AE40-B558-40D5-8A52-CE5A4641CD3F}F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe => No File
FirewallRules: [TCP Query User{F8F0509D-B0BC-45CB-971A-4D3E396C8505}F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe => No File
FirewallRules: [{14B869C8-1E5B-4ED8-9D26-592B2A0686A1}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe => No File
FirewallRules: [{B9A6919C-0380-4A99-8163-F189F25A15D2}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe => No File
FirewallRules: [UDP Query User{F32B940A-9331-4593-ADA4-10095A5304E6}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe => No File
FirewallRules: [TCP Query User{282C4D37-D3E8-4F39-B773-3A5222E3C6F8}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe => No File
FirewallRules: [{79B67504-797C-4100-94E5-010CF57205DD}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe => No File
FirewallRules: [{AB6858D8-66DA-486C-9513-9686075C9D21}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe => No File
FirewallRules: [UDP Query User{A1D19718-7EA8-4A96-ACC3-967BF53E4010}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe => No File
FirewallRules: [TCP Query User{2CE9AAFB-E190-4B91-9388-00CC2A1039A6}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe => No File
FirewallRules: [{68009D13-EE1A-4E12-9F59-438C20EA8695}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe => No File
FirewallRules: [{F4342DD4-2333-4D1F-9821-5E759734040C}] => (Block) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe => No File
FirewallRules: [UDP Query User{1A226025-F8AD-496A-8775-C785ED0674D0}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe => No File
FirewallRules: [TCP Query User{CD975AA3-B73B-43F6-84D0-8238A4E04630}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe] => (Allow) H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe => No File
FirewallRules: [{078AEA31-2F58-4A4F-B35C-D9B2F5037D97}] => (Block) H:\images\survivingtheaftermath\aftermath64.exe => No File
FirewallRules: [{94AECC61-81F6-46EB-A229-9BA8C617A6C9}] => (Block) H:\images\survivingtheaftermath\aftermath64.exe => No File
FirewallRules: [UDP Query User{9A116849-088D-464A-9A74-5403BE814C66}H:\images\survivingtheaftermath\aftermath64.exe] => (Allow) H:\images\survivingtheaftermath\aftermath64.exe => No File
FirewallRules: [TCP Query User{FF9D74C9-D3E4-47A7-BD23-1B0E100F9827}H:\images\survivingtheaftermath\aftermath64.exe] => (Allow) H:\images\survivingtheaftermath\aftermath64.exe => No File
FirewallRules: [UDP Query User{085FAB08-EF60-40BC-8127-6A1B0CA42F2F}F:\heroes vi - complete edition\might & magic heroes vi.exe] => (Allow) F:\heroes vi - complete edition\might & magic heroes vi.exe => No File
FirewallRules: [TCP Query User{97576280-0729-4EB4-A4F9-D09123BD1481}F:\heroes vi - complete edition\might & magic heroes vi.exe] => (Allow) F:\heroes vi - complete edition\might & magic heroes vi.exe => No File
FirewallRules: [UDP Query User{87D8286B-AB6A-49F0-BB95-034A0ECEDB02}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe => No File
FirewallRules: [TCP Query User{C68E2DCB-00D2-4ABC-ACB8-5432EFCC395E}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe => No File
FirewallRules: [TCP Query User{A8624365-67D4-4D18-AE63-5C03B59D6545}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe => No File
FirewallRules: [UDP Query User{31DA84A7-8A76-47A9-96D0-5B5088C774B8}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe => No File
FirewallRules: [TCP Query User{C6BCFF53-2401-4519-9F5B-1F78DBE91575}C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe] => (Allow) C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe => No File
FirewallRules: [UDP Query User{E2263D47-9E7F-4E27-A2C4-455D06E26A47}C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe] => (Allow) C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe => No File
FirewallRules: [TCP Query User{6162DB9B-72C9-4792-BEEE-3DFFA247CA51}C:\program files\vertrigoserv\apache\bin\v_apache.exe] => (Allow) C:\program files\vertrigoserv\apache\bin\v_apache.exe => No File
FirewallRules: [UDP Query User{129588E3-1875-4FCB-8814-14B57C42B49F}C:\program files\vertrigoserv\apache\bin\v_apache.exe] => (Allow) C:\program files\vertrigoserv\apache\bin\v_apache.exe => No File
FirewallRules: [{2770FC9D-2C90-47C9-B9AA-9046C58C4E03}] => (Block) C:\program files\vertrigoserv\apache\bin\v_apache.exe => No File
FirewallRules: [{028603F1-241C-40F6-AA44-52241F4A6578}] => (Block) C:\program files\vertrigoserv\apache\bin\v_apache.exe => No File
FirewallRules: [{E0E0E094-362C-4B72-BB0D-0198C964D462}] => (Block) C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe => No File
FirewallRules: [{7E06F0DD-D007-40B3-BFCA-16015480FE8C}] => (Block) C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe => No File
FirewallRules: [TCP Query User{1B731C66-63A8-472C-BDDB-4FAAAB94E6A4}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe => No File
FirewallRules: [UDP Query User{62129439-C5AB-4D64-8205-FD2F6BEB6AED}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe] => (Allow) F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe => No File
FirewallRules: [TCP Query User{0057A8BB-7873-40C5-8F11-567744ECDF8B}F:\age of empires 2 cz!!!!\age2_x1.exe] => (Allow) F:\age of empires 2 cz!!!!\age2_x1.exe => No File
FirewallRules: [UDP Query User{66F6C72A-4607-42BB-9640-A0F035F6B4DE}F:\age of empires 2 cz!!!!\age2_x1.exe] => (Allow) F:\age of empires 2 cz!!!!\age2_x1.exe => No File
FirewallRules: [{D01D713A-E10A-4C59-A18D-A6F5B4C00A66}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{678BE354-952D-428B-A47A-2AD73129194F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [TCP Query User{FAE165AF-837B-4684-9559-2C04FAFA9B2B}G:\games\factorio_0.16.49\tests\x64\factorio-test.exe] => (Allow) G:\games\factorio_0.16.49\tests\x64\factorio-test.exe => No File
FirewallRules: [UDP Query User{A7A41287-E4EF-4C99-9410-6D48B5027242}G:\games\factorio_0.16.49\tests\x64\factorio-test.exe] => (Allow) G:\games\factorio_0.16.49\tests\x64\factorio-test.exe => No File
FirewallRules: [{C973B638-B6E2-4ABF-A7C4-42139B55E58B}] => (Allow) E:\Games\Warcraft II BNE\Warcraft II BNE.exe => No File
FirewallRules: [{4D4823D8-371B-4397-BCF7-C9C674FC1923}] => (Allow) E:\Games\Warcraft II BNE\Warcraft II BNE_dx.exe => No File
FirewallRules: [TCP Query User{FF9610FD-672F-4EDB-B01F-C48BBABEAA01}F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{33DA7485-7FF0-449C-BEB6-6E9AB8D03FCE}F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe => No File
FirewallRules: [TCP Query User{BB5FB413-1CF4-419C-8392-C4CB9E615219}F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{6CD5D0A9-7D07-4E77-B3A6-1C72CC9EC8D5}F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe => No File
FirewallRules: [TCP Query User{91DD2B6A-43C3-452B-8EDF-82ACC7D5AA07}F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{9FA427F5-D9F5-4651-BF98-A3AA4AA0414C}F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe] => (Allow) F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe => No File
FirewallRules: [TCP Query User{EBFB6361-C88D-42C6-9EEA-FD1A05F517C0}F:\sightseer\sightseer\p5sserver.exe] => (Allow) F:\sightseer\sightseer\p5sserver.exe => No File
FirewallRules: [UDP Query User{0830B027-16D5-41AD-AF3F-E90D1895A68C}F:\sightseer\sightseer\p5sserver.exe] => (Allow) F:\sightseer\sightseer\p5sserver.exe => No File
FirewallRules: [TCP Query User{C1C0794D-70F6-4E67-A868-2595B3FE2BC0}F:\project 5 sightseer\p5sserver.exe] => (Allow) F:\project 5 sightseer\p5sserver.exe => No File
FirewallRules: [UDP Query User{74485101-B2DC-4746-870B-0AC36A267A70}F:\project 5 sightseer\p5sserver.exe] => (Allow) F:\project 5 sightseer\p5sserver.exe => No File
FirewallRules: [TCP Query User{D75D2E09-6DCE-4E39-9409-09E75C475F87}F:\mashinky v14.06.2019\mashinky.exe] => (Allow) F:\mashinky v14.06.2019\mashinky.exe => No File
FirewallRules: [UDP Query User{C2B7FC07-2A26-40A4-A697-3F2B91DB3486}F:\mashinky v14.06.2019\mashinky.exe] => (Allow) F:\mashinky v14.06.2019\mashinky.exe => No File
FirewallRules: [TCP Query User{C7FE2847-4180-4788-86A3-C29D76B9071E}H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe] => (Allow) H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe => No File
FirewallRules: [UDP Query User{2633C37D-45B9-4FD4-80B9-7BEA77D740A9}H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe] => (Allow) H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe => No File
FirewallRules: [{FE71CBBB-0B6C-4D20-91F2-A11B11A9B86E}] => (Allow) H:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe => No File
FirewallRules: [{AB44B033-5A5B-4FA5-860A-1882A3FA8110}] => (Allow) H:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe => No File
FirewallRules: [{5436FB4A-5B40-4002-A192-F5FEA78ABF56}] => (Allow) H:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe => No File
FirewallRules: [{C962EA63-ED9B-4430-88F0-BAE56318D06C}] => (Allow) H:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe => No File
FirewallRules: [{F1597FFC-AFE0-479C-AE05-3A0E7AD2B5F1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Factorio\bin\x64\factorio.exe => No File
FirewallRules: [{E5E0FF6C-BDB9-4BA2-BF0A-441BC614ACBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Factorio\bin\x64\factorio.exe => No File
FirewallRules: [{8C18ACD2-BF0B-4612-8DF3-0217DE0FF14A}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{DA8BF6D8-DDB9-41FF-B9D7-D9CC3F21AB73}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{D6213BCB-A722-46DF-A7C1-3BD562666438}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{F48E60BC-0450-40BE-8427-0637D1F2C39B}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{090BE039-435E-4A49-A9A1-8690FC4F63AB}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{F5D44328-C4EF-4B88-BC13-050835DECF57}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{F3BC6BD8-41AD-4DFF-8C92-424999FE8240}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{AFF86247-B1A8-4D3F-87E6-3EC8BE7B49DF}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{7C8E56BE-EF61-4144-821D-6B9011F23194}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{F18FA238-5817-452F-A425-954CFA56B7B0}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{47D05047-1B8F-4E29-B320-5719F9A9694E}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{A3E41366-C7C1-4D68-A6A9-D1A7D5150B81}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{E4CF7C1E-41B1-4FEE-B0FD-B164A4958E74}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{75EF9C7C-CBA9-4BBF-85C2-30EAA12DBB88}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{02A749EF-BC51-4014-AD70-16DD00A28FAD}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{46A616D5-5C2E-485B-AC53-3A200844B59C}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{476775A7-FEEC-42D9-B395-1F8708389994}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe => No File
FirewallRules: [{E5A2B8A0-043A-4E1C-9948-1F46C42D21EA}] => (Allow) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe => No File
FirewallRules: [{D5F9ACF1-493B-40B1-9E21-9AD88E8FB93F}] => (Block) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe => No File
FirewallRules: [{13EA0C03-0A4F-40C0-8813-AFD0A8A88B9D}] => (Block) C:\Program Files (x86)\Overwolf\0.311.0.6\OverwolfBrowser.exe => No File
C:\Program Files (x86)\Blizzard\Bonjour Service
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Run: [] => [X]
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Plasko\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (No File) <==== ATTENTION
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Plasko\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File) <==== ATTENTION
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\MountPoints2: {4f661814-2379-11ee-bbfc-548ca05457b4} - "D:\.\StartModem.exe"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\MountPoints2: {4f661882-2379-11ee-bbfc-548ca05457b4} - "D:\.\StartModem.exe"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\MountPoints2: {4f661a1b-2379-11ee-bbfc-548ca05457b4} - "D:\.\StartModem.exe"
HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\...\Winlogon: [Shell] C:\Windows\explorer.exe [6153504 2026-10-19] (Microsoft Windows -> Microsoft Corporation) <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy-Firefox: Restriction <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {70aa803b-23c6-4e15-b0a6-b5d5570165b5} - no filepath. <==== ATTENTION
Task: {BC12C833-B6FD-4608-A617-C094A71CB62F} - \Driver Booster SkipUAC (Plasko) -> No File <==== ATTENTION
Task: {EEBEC377-CDDA-4DDE-93A6-89E394124E4B} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {BDDF2CB2-E9DF-417D-8308-36703B7AC826} - System32\Tasks\BaseBase_lts => C:\ProgramData\runnerupload_rc\FrameworkA32.exe [512152 0] () [File not signed] [File is in use] <==== ATTENTION
Task: {05393F7B-A34A-4D43-A2A1-340971216E43} - System32\Tasks\intmgr => C:\ProgramData\runnerupload_rc\FrameworkA32.exe [512152 0] () [File not signed] [File is in use] <==== ATTENTION
Task: {E9E4C3CE-1D18-4CFA-885B-BB3D465A0896} - System32\Tasks\Microsoft\Windows\rempl\shell-compact => %ProgramFiles%\rempl\remsh.exe (No File) /RunCompactOnly (No File)
Task: {34ECD316-C7D7-4CE6-96C1-E5BAA6E367CA} - System32\Tasks\Microsoft\Windows\rempl\shell-restore => %ProgramFiles%\rempl\remsh.exe (No File) /RunRestoreHealthOnly (No File)
Task: {EA9754AF-082A-435E-BA7D-3D29F7CC3109} - System32\Tasks\Microsoft\Windows\rempl\shell-unlock => %ProgramFiles%\rempl\remsh.exe (No File) /RunUsoScanOnly (No File)
Task: {455256CD-ACE6-474B-A963-2F4B4408470F} - System32\Tasks\Microsoft\Windows\rempl\shell-unlock-sih => %ProgramFiles%\rempl\remsh.exe (No File) /RunSihScanOnly (No File)
Task: {C1BAE019-8C63-478D-AEF3-79FDB9316F46} - System32\Tasks\Microsoft\Windows\rempl\shell-unlock-storagesense => %ProgramFiles%\rempl\remsh.exe (No File) /RunStorageSenseTaskOnly (No File)
Task: {4B4C9DE4-4828-4D5E-8C1A-D9958F0A1A1C} - System32\Tasks\Microsoft\Windows\rempl\shell-usoscan => %ProgramFiles%\rempl\remsh.exe (No File) /RunUsoScanOnly (No File)
FF Plugin HKU\S-1-5-21-2873281325-1507384511-3975134512-1001: @update.avira.securebrowser.com/Avira Browser;version=3 -> C:\Users\Plasko\AppData\Local\Avira\Browser\Update\1.8.1652.5\npAviraBrowserUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-2873281325-1507384511-3975134512-1001: @update.avira.securebrowser.com/Avira Browser;version=9 -> C:\Users\Plasko\AppData\Local\Avira\Browser\Update\1.8.1652.5\npAviraBrowserUpdate3.dll [No File]
R2 WhitemaneVpnHelper; C:\ProgramData\Whitemane\vpn\wm-vpn-helper.exe [327168 2026-08-03] () [File not signed] <==== ATTENTION
S3 ss_conn_launcher_service; %SystemRoot%\System32\Samsung\EasySetup\ss_conn_launcher.exe (No File)
R3 cpuz154; \??\C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2026-10-26] (Microsoft Windows Hardware Compatibility Publisher -> ) <==== ATTENTION
R4 IOMap; \??\C:\WINDOWS\system32\drivers\IOMap64.sys [24824 2014-09-08] (ASUSTeK Computer Inc. -> )
R2 LGCoreTemp; \??\C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> )
S3 cpuz148; \??\C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys (No File) <==== ATTENTION
S3 iscFlash; \??\C:\Users\Plasko\AppData\Local\Temp\pftB618.tmp\iscflashx64.sys (No File) <==== ATTENTION
S3 ss_conn_usb_driver2; \SystemRoot\System32\Drivers\ss_conn_usb_driver2.sys (No File)
C:\WINDOWS\system32\Tasks\MicrpZELkorMwhkkpShF5PvT8YnqRCupnLTNG
C:\WINDOWS\system32\Tasks\MA1Yryr7jzsZZirVKuBYAPjzLLvJx7RzM8
C:\DumpStack.log.tmp

EmptyTemp:
Hosts:

End
*****************

Processes closed successfully.
"HKU\S-1-5-21-2873281325-1507384511-3975134512-1001_Classes\ChromeHTML" => removed successfully
"HKU\S-1-5-21-2873281325-1507384511-3975134512-1001_Classes\CLSID\{88975AC1-D0AB-445C-9B05-D0D8948931B5}" => removed successfully
C:\ProgramData\Reprise => ":wupeogjxlctlfudivq`qsp`28hfm" ADS removed successfully
C:\ProgramData\TEMP => ":9A870F8B" ADS removed successfully
C:\Users\Public\AppData => ":CSM" ADS removed successfully
C:\Users\Public\Shared Files => ":VersionCache" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2FF81C0B-2896-466F-9B49-890010059046}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{640F60B5-7C10-46BF-B4F7-149E6D827CAE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{55EE8D1C-80A2-4D12-A315-3099E848B849}H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{047B92C3-7FD9-4CEE-9D9E-BE22F4E07CC1}H:\dyson.sphere.program.v0.6.15.5618\dspgame.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{77083DEA-69AB-4972-9FFE-03E1DE15A466}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C33EA34F-B0D3-4E86-A16D-2C75A3BE2331}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8428AE40-B558-40D5-8A52-CE5A4641CD3F}F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F8F0509D-B0BC-45CB-971A-4D3E396C8505}F:\heroes of the storm\versions\base84249\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{14B869C8-1E5B-4ED8-9D26-592B2A0686A1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B9A6919C-0380-4A99-8163-F189F25A15D2}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F32B940A-9331-4593-ADA4-10095A5304E6}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{282C4D37-D3E8-4F39-B773-3A5222E3C6F8}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{79B67504-797C-4100-94E5-010CF57205DD}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AB6858D8-66DA-486C-9513-9686075C9D21}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A1D19718-7EA8-4A96-ACC3-967BF53E4010}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2CE9AAFB-E190-4B91-9388-00CC2A1039A6}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\soviet64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{68009D13-EE1A-4E12-9F59-438C20EA8695}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F4342DD4-2333-4D1F-9821-5E759734040C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1A226025-F8AD-496A-8775-C785ED0674D0}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CD975AA3-B73B-43F6-84D0-8238A4E04630}H:\download\rôzne súbory\workers.and.resources.soviet.republic.v0.8.0.22\setupapplication soviet.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{078AEA31-2F58-4A4F-B35C-D9B2F5037D97}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{94AECC61-81F6-46EB-A229-9BA8C617A6C9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9A116849-088D-464A-9A74-5403BE814C66}H:\images\survivingtheaftermath\aftermath64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FF9D74C9-D3E4-47A7-BD23-1B0E100F9827}H:\images\survivingtheaftermath\aftermath64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{085FAB08-EF60-40BC-8127-6A1B0CA42F2F}F:\heroes vi - complete edition\might & magic heroes vi.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{97576280-0729-4EB4-A4F9-D09123BD1481}F:\heroes vi - complete edition\might & magic heroes vi.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{87D8286B-AB6A-49F0-BB95-034A0ECEDB02}C:\program files (x86)\kodi\kodi.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C68E2DCB-00D2-4ABC-ACB8-5432EFCC395E}C:\program files (x86)\kodi\kodi.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A8624365-67D4-4D18-AE63-5C03B59D6545}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{31DA84A7-8A76-47A9-96D0-5B5088C774B8}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C6BCFF53-2401-4519-9F5B-1F78DBE91575}C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E2263D47-9E7F-4E27-A2C4-455D06E26A47}C:\program files\vertrigoserv\mysql\bin\v_mysqld.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{6162DB9B-72C9-4792-BEEE-3DFFA247CA51}C:\program files\vertrigoserv\apache\bin\v_apache.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{129588E3-1875-4FCB-8814-14B57C42B49F}C:\program files\vertrigoserv\apache\bin\v_apache.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2770FC9D-2C90-47C9-B9AA-9046C58C4E03}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{028603F1-241C-40F6-AA44-52241F4A6578}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E0E0E094-362C-4B72-BB0D-0198C964D462}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7E06F0DD-D007-40B3-BFCA-16015480FE8C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1B731C66-63A8-472C-BDDB-4FAAAB94E6A4}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{62129439-C5AB-4D64-8205-FD2F6BEB6AED}F:\might and magic heroes vii\binaries\win64\mmh7game-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0057A8BB-7873-40C5-8F11-567744ECDF8B}F:\age of empires 2 cz!!!!\age2_x1.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{66F6C72A-4607-42BB-9640-A0F035F6B4DE}F:\age of empires 2 cz!!!!\age2_x1.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D01D713A-E10A-4C59-A18D-A6F5B4C00A66}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{678BE354-952D-428B-A47A-2AD73129194F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FAE165AF-837B-4684-9559-2C04FAFA9B2B}G:\games\factorio_0.16.49\tests\x64\factorio-test.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A7A41287-E4EF-4C99-9410-6D48B5027242}G:\games\factorio_0.16.49\tests\x64\factorio-test.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C973B638-B6E2-4ABF-A7C4-42139B55E58B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4D4823D8-371B-4397-BCF7-C9C674FC1923}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FF9610FD-672F-4EDB-B01F-C48BBABEAA01}F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{33DA7485-7FF0-449C-BEB6-6E9AB8D03FCE}F:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BB5FB413-1CF4-419C-8392-C4CB9E615219}F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6CD5D0A9-7D07-4E77-B3A6-1C72CC9EC8D5}F:\heroes of the storm\versions\base75792\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{91DD2B6A-43C3-452B-8EDF-82ACC7D5AA07}F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9FA427F5-D9F5-4651-BF98-A3AA4AA0414C}F:\heroes of the storm\versions\base76003\heroesofthestorm_x64.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{EBFB6361-C88D-42C6-9EEA-FD1A05F517C0}F:\sightseer\sightseer\p5sserver.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0830B027-16D5-41AD-AF3F-E90D1895A68C}F:\sightseer\sightseer\p5sserver.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C1C0794D-70F6-4E67-A868-2595B3FE2BC0}F:\project 5 sightseer\p5sserver.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{74485101-B2DC-4746-870B-0AC36A267A70}F:\project 5 sightseer\p5sserver.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D75D2E09-6DCE-4E39-9409-09E75C475F87}F:\mashinky v14.06.2019\mashinky.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C2B7FC07-2A26-40A4-A697-3F2B91DB3486}F:\mashinky v14.06.2019\mashinky.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C7FE2847-4180-4788-86A3-C29D76B9071E}H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2633C37D-45B9-4FD4-80B9-7BEA77D740A9}H:\songs of conquest v0 75 3\songs.of.conquest.v0.75.3\game\songsofconquest.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FE71CBBB-0B6C-4D20-91F2-A11B11A9B86E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AB44B033-5A5B-4FA5-860A-1882A3FA8110}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5436FB4A-5B40-4002-A192-F5FEA78ABF56}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C962EA63-ED9B-4430-88F0-BAE56318D06C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F1597FFC-AFE0-479C-AE05-3A0E7AD2B5F1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E5E0FF6C-BDB9-4BA2-BF0A-441BC614ACBA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8C18ACD2-BF0B-4612-8DF3-0217DE0FF14A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DA8BF6D8-DDB9-41FF-B9D7-D9CC3F21AB73}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D6213BCB-A722-46DF-A7C1-3BD562666438}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F48E60BC-0450-40BE-8427-0637D1F2C39B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{090BE039-435E-4A49-A9A1-8690FC4F63AB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F5D44328-C4EF-4B88-BC13-050835DECF57}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F3BC6BD8-41AD-4DFF-8C92-424999FE8240}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AFF86247-B1A8-4D3F-87E6-3EC8BE7B49DF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7C8E56BE-EF61-4144-821D-6B9011F23194}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F18FA238-5817-452F-A425-954CFA56B7B0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{47D05047-1B8F-4E29-B320-5719F9A9694E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A3E41366-C7C1-4D68-A6A9-D1A7D5150B81}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E4CF7C1E-41B1-4FEE-B0FD-B164A4958E74}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{75EF9C7C-CBA9-4BBF-85C2-30EAA12DBB88}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{02A749EF-BC51-4014-AD70-16DD00A28FAD}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{46A616D5-5C2E-485B-AC53-3A200844B59C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{476775A7-FEEC-42D9-B395-1F8708389994}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E5A2B8A0-043A-4E1C-9948-1F46C42D21EA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D5F9ACF1-493B-40B1-9E21-9AD88E8FB93F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{13EA0C03-0A4F-40C0-8813-AFD0A8A88B9D}" => removed successfully

"C:\Program Files (x86)\Blizzard\Bonjour Service" Folder move:

C:\Program Files (x86)\Blizzard\Bonjour Service\mDNSResponder.exe => moved successfully
C:\Program Files (x86)\Blizzard\Bonjour Service => moved successfully

"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
"HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" => removed successfully
"HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Delete Cached Update Binary" => removed successfully
"HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Delete Cached Standalone Update Binary" => removed successfully
"HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4f661814-2379-11ee-bbfc-548ca05457b4}" => removed successfully
"HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4f661882-2379-11ee-bbfc-548ca05457b4}" => removed successfully
"HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4f661a1b-2379-11ee-bbfc-548ca05457b4}" => removed successfully
"HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell" => removed successfully

"C:\WINDOWS\system32\GroupPolicy\Machine" Folder move:

C:\WINDOWS\system32\GroupPolicy\Machine\Registry.pol => moved successfully
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully

C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\Program Files\Mozilla Firefox\distribution\policies.json => moved successfully
C:\ProgramData\NTUSER.pol => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{70aa803b-23c6-4e15-b0a6-b5d5570165b5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BC12C833-B6FD-4608-A617-C094A71CB62F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BC12C833-B6FD-4608-A617-C094A71CB62F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (Plasko)" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EEBEC377-CDDA-4DDE-93A6-89E394124E4B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EEBEC377-CDDA-4DDE-93A6-89E394124E4B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BDDF2CB2-E9DF-417D-8308-36703B7AC826}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BDDF2CB2-E9DF-417D-8308-36703B7AC826}" => removed successfully
C:\WINDOWS\System32\Tasks\BaseBase_lts => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BaseBase_lts" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{05393F7B-A34A-4D43-A2A1-340971216E43}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{05393F7B-A34A-4D43-A2A1-340971216E43}" => removed successfully
C:\WINDOWS\System32\Tasks\intmgr => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\intmgr" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E9E4C3CE-1D18-4CFA-885B-BB3D465A0896}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E9E4C3CE-1D18-4CFA-885B-BB3D465A0896}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\rempl\shell-compact => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\rempl\shell-compact" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{34ECD316-C7D7-4CE6-96C1-E5BAA6E367CA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34ECD316-C7D7-4CE6-96C1-E5BAA6E367CA}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\rempl\shell-restore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\rempl\shell-restore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EA9754AF-082A-435E-BA7D-3D29F7CC3109}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EA9754AF-082A-435E-BA7D-3D29F7CC3109}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\rempl\shell-unlock => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\rempl\shell-unlock" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{455256CD-ACE6-474B-A963-2F4B4408470F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{455256CD-ACE6-474B-A963-2F4B4408470F}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\rempl\shell-unlock-sih => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\rempl\shell-unlock-sih" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C1BAE019-8C63-478D-AEF3-79FDB9316F46}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C1BAE019-8C63-478D-AEF3-79FDB9316F46}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\rempl\shell-unlock-storagesense => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\rempl\shell-unlock-storagesense" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4B4C9DE4-4828-4D5E-8C1A-D9958F0A1A1C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B4C9DE4-4828-4D5E-8C1A-D9958F0A1A1C}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\rempl\shell-usoscan => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\rempl\shell-usoscan" => removed successfully
"HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\Software\MozillaPlugins\@update.avira.securebrowser.com/Avira Browser;version=3" => removed successfully
"C:\Users\Plasko\AppData\Local\Avira\Browser\Update\1.8.1652.5\npAviraBrowserUpdate3.dll" => not found
"HKU\S-1-5-21-2873281325-1507384511-3975134512-1001\Software\MozillaPlugins\@update.avira.securebrowser.com/Avira Browser;version=9" => removed successfully
"C:\Users\Plasko\AppData\Local\Avira\Browser\Update\1.8.1652.5\npAviraBrowserUpdate3.dll" => not found
"HKLM\System\CurrentControlSet\Services\WhitemaneVpnHelper" => removed successfully
WhitemaneVpnHelper => service removed successfully
"HKLM\System\CurrentControlSet\Services\ss_conn_launcher_service" => removed successfully
ss_conn_launcher_service => service removed successfully
cpuz154 => Service stopped successfully.
"HKLM\System\CurrentControlSet\Services\cpuz154" => removed successfully
cpuz154 => service removed successfully
IOMap => Unable to stop service.
HKLM\System\CurrentControlSet\Services\IOMap => not found
IOMap => service removed successfully
LGCoreTemp => Service stopped successfully.
"HKLM\System\CurrentControlSet\Services\LGCoreTemp" => removed successfully
LGCoreTemp => service removed successfully
"HKLM\System\CurrentControlSet\Services\cpuz148" => removed successfully
cpuz148 => service removed successfully
"HKLM\System\CurrentControlSet\Services\iscFlash" => removed successfully
iscFlash => service removed successfully
"HKLM\System\CurrentControlSet\Services\ss_conn_usb_driver2" => removed successfully
ss_conn_usb_driver2 => service removed successfully
"C:\WINDOWS\system32\Tasks\MicrpZELkorMwhkkpShF5PvT8YnqRCupnLTNG" => not found
"C:\WINDOWS\system32\Tasks\MA1Yryr7jzsZZirVKuBYAPjzLLvJx7RzM8" => not found
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.

C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

FlushDNS => completed

#5 Příspěvek od **Rudy** » Včera 20:43

Smazáno. Některé AV se s FRST nesnáší, je to v podstatě utilita, se kterou je možné poškodit systém. Pokud jsou problémy tohoto typu, pak je třeba AV vypnout po dobu chodu FRST. Log již vypadá OK.

plasko · #6 Příspěvek od **plasko** » Včera 22:03

Dakujem velmi pekne. Poprosim o uzamknutie

#7 Příspěvek od **Rudy** » Dnes 08:46

Nemáte zač!

VIRY.CZ

Kontrola logu po utoku

Kontrola logu po utoku

Re: Kontrola logu po utoku

Re: Kontrola logu po utoku

Re: Kontrola logu po utoku

Re: Kontrola logu po utoku

Re: Kontrola logu po utoku

Re: Kontrola logu po utoku