klávesnice píše dva háčky/čárky místo jednoho

Zpráva

#16 Příspěvek od **JaRon** » 06 bře 2025 13:14

Mozes pouzit napr. Total Commander apod. - zaskrtnes zobrazit skryte a systemove subory,
das zoradit podla datumu a mazeeees

Pokial chces cistu instalaciu aj to je moznost
Dokoncenie odvirenia vidim ako casovo menej narocnejsie
Rozhodnut sa musis sam

Hasicz · #17 Příspěvek od **Hasicz** » 06 bře 2025 13:38

Stáhl jsem TC, zaškrtl zobrazit skrytý, i zobrazit systémové, ale stále tam žádná z těch složek označených RSH atributem není.

Dal jsem i v exploreru zobrazit skryté a systémové a nic.

Dělám něco špatně?

Díky

#18 Příspěvek od **altrok** » 06 bře 2025 14:01

Jsou to soubory. Ne složky

Se zmenou hesel bych jeste chvili vydrzel... ty kriticke (banky/crypto) z jineho PC klidne zmen.

Reinstal jak chceš. Ja si myslim, ze to odvirovat dokazeme, jen to nebude pristim fixlistem

Hasicz · #19 Příspěvek od **Hasicz** » 06 bře 2025 15:50

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-03-2025
Ran by janpu (administrator) on HONZA-PC (MSI MS-7752) (06-03-2025 15:37:17)
Running from C:\Users\janpu\Desktop\FRST64.exe
Loaded Profiles: janpu
Platform: Microsoft Windows 10 Home Version 22H2 19045.5487 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Safe Mode (with Networking)

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Windows\HelpPane.exe ->) (Google LLC -> Google LLC) C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe <19>
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\HelpPane.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(winlogon.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\userinit.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-21] (Kilonova LLC -> )
HKLM-x32\...\Run: [I19B] => C:\WINDOWS\twain_32\Brimi19b\Common\TwDsUiLaunch.exe [103152 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4009984 2024-05-31] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3588608 2021-04-02] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM\Software\Policies\...\system: [UploadUserActivities] 0
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe [64393824 2025-03-05] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe [64393824 2025-03-05] (Google LLC -> Google LLC.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [ManicTimeC34F57B2DA6E6758] => C:\Program Files (x86)\ManicTime\ManicTime.exe [151968 2023-04-19] (Finkit d.o.o. -> Finkit d.o.o.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4435552 2025-01-28] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe [64393824 2025-03-05] (Google LLC -> Google LLC.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [479632 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [Spotify] => C:\Users\janpu\AppData\Roaming\Spotify\Spotify.exe [36483400 2025-02-28] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [MicrosoftEdgeAutoLaunch_B290F089DC243CBB434D3F1388B3FDD9] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4088392 2025-02-27] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [28999440 2024-11-06] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GoogleUpdaterTaskUser135.0.7023.4] => C:\Users\janpu\AppData\Local\Google\GoogleUpdater\135.0.7023.4\updater.exe [5745760 2025-02-25] (Google LLC -> Google LLC)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Policies\Explorer: []
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {8979b10e-463b-11ec-8f81-d43d7eb13568} - "I:\Setup.exe"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {8979b300-463b-11ec-8f81-d43d7eb13568} - "K:\autorun.exe"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {9f60999e-805a-11ec-8f8d-d43d7eb13568} - "M:\_AUTORUN\AUTORUN.EXE"
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe [64393824 2025-03-05] (Google LLC -> Google LLC.)
HKLM\...\Print\Monitors\HP B011 Status Monitor: C:\WINDOWS\System32\hpinkstsB011LM.dll [331664 2012-06-13] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3520 series): C:\WINDOWS\System32\HPDiscoPMB011.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\...\AppCompatFlags\Custom\KONUNG.EXE: [{5e06ebb7-4976-4bd0-96ff-4d953f97c430}.sdb] -> GOG.com Konung
HKLM\Software\...\AppCompatFlags\InstalledSDB\{5e06ebb7-4976-4bd0-96ff-4d953f97c430}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{5e06ebb7-4976-4bd0-96ff-4d953f97c430}.sdb [2015-01-20]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Brother iPSMonitor.lnk [2025-02-11]
ShortcutTarget: Brother iPSMonitor.lnk -> C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.exe (iPSMonitor) [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {D138F6D3-EEA0-4734-9761-E2A33025166D} - \Avast Software\Overseer -> No File <==== ATTENTION
Task: {5F683216-5151-4E6C-BB2D-AC818DCD0C37} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [30992 2024-11-06] (Garmin International, Inc. -> )
Task: {7A21660C-9111-45F8-9069-0AEF153464C6} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem135.0.7023.0{5AE63604-347D-44F1-B060-082F7AE80623} => C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
Task: {DA7525FC-3F50-49FC-89B3-7C4DE2EE832F} - System32\Tasks\GoogleUser\GoogleUpdater\GoogleUpdaterTaskUser135.0.7023.4{E7502C00-005D-4552-A641-D9D9940EC786} => C:\Users\janpu\AppData\Local\Google\GoogleUpdater\135.0.7023.4\updater.exe [5745760 2025-02-25] (Google LLC -> Google LLC)
Task: {E6D831CC-50BC-4035-984E-4A0DA6C9AF5D} - System32\Tasks\Microsoft\Office\Office Apps Prewarm => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {F4CF132B-CF47-4F94-89EA-10C3CEDC253A} - System32\Tasks\Microsoft\Office\Office Apps Prewarm Recurring => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {98A2AD42-20BB-4878-9909-5ED49B1B9D53} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {D4587D31-C5C2-40F9-8081-740EF334B177} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [67248 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {984D6EF5-BDD0-4413-9058-CC6F6970C97A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {07E695FF-97AC-4A75-A324-C1F5CD462E99} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {DAEE2E8D-776E-41B3-B4DC-A2A6195BD8FC} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {3BF81EDF-DC02-4B6C-BB20-60888588364F} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [194672 2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {0D642530-7604-435C-87E3-FF0DAFFBDD1A} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager1 => C:\Intel\e.vbs [489 2025-03-06] () [File not signed]
Task: {EC991080-F0A0-4318-A514-4193EE9FCF86} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3q1 => C:\Intel\q2.exe [1173682082 2025-03-05] () [File not signed] <==== ATTENTION
Task: {D8384EA2-5A40-4CB2-B272-FDFECDD66587} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3x1 => C:\Intel\i2.exe [1207112002 2025-03-05] () [File not signed] <==== ATTENTION
Task: {9A432E05-A5C5-481B-ACA9-09D6D0F69CCE} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx1x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {29446CB0-3B1C-438D-81D3-256DA515D8D7} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx2x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {99B33611-DF2A-4B79-9654-B0668F1A912A} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx3x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f1.log"
Task: {FB826E1E-3C4C-418C-8543-CE684D04D494} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx4x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {7BED6269-0360-448A-B1C0-C21462F8A95E} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx5x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f2.log"
Task: {DD8C0BE7-E830-45F0-AD42-22F0708306AB} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx6x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {437E1111-DA89-4B3F-9339-48FC5BF8D8D1} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx2x1 => C:\Intel\logs\p1.exe [1205936452 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p1_1.log" <==== ATTENTION
Task: {92C949A0-43B3-4CED-B315-3E509D37D2CB} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx3x1 => C:\Intel\logs\p2.exe [1205950788 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p2_1.log" <==== ATTENTION
Task: {0236AF91-8A93-448F-B120-DEC398E1844C} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx4x1 => C:\Intel\logs\p3.exe [1206091076 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p3_1.log" <==== ATTENTION
Task: {9152D077-B4E1-4A6A-BE1D-812013DCF2CD} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx6x1 => C:\Intel\logs\p6.exe [1206108484 2025-03-02] () [File not signed] -> /UseChromeProfileFolder 1 /ChromeProfileFolder "C:\Users\janpu\AppData\Local\Google\Chrome\User Data" /stab "C:\Intel\logs\p6_1.log" <==== ATTENTION
Task: {A002858C-912E-456A-AF6E-D70D5CBE76CA} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx9x1 => C:\Intel\logs\p7.exe [1206088516 2025-03-02] (Google LLC) [File not signed] -> /stab "C:\Intel\logs\p7_1.log" <==== ATTENTION
Task: {16F6DB12-5C5A-4292-BBF6-C4BEBE1AD88B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B745F724-91C2-4A70-8C3C-0DD99CBDBAE9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5222F27E-3FD8-43A1-A8EE-2C65BB39F0BF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {50F8BD85-9D4A-455C-A3BF-0CD35115E48A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FDFDE73C-9399-4B2B-AB58-5B1E054E1D07} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {00035BE3-73CE-4A62-9C05-E4D6BB469192} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB" (No File)
Task: {D176E9DA-F6ED-4685-BA42-1DFD3AEA8B0F} - System32\Tasks\OneDrive Startup Task-S-1-5-21-447794926-783580724-1362418113-1001 => C:\Users\janpu\AppData\Local\Microsoft\OneDrive\25.020.0202.0001\OneDriveLauncher.exe [669200 2025-03-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {59618173-4863-48D1-91C1-02F0C08EEB43} - System32\Tasks\update-S-1-5-21-447794926-783580724-1362418113-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {09E486CA-F36E-40FC-AA29-30E9F1A34C8E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\update-S-1-5-21-447794926-783580724-1362418113-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{40fd16de-b690-4570-96d5-47bd9a5faff5}: [NameServer] 8.8.8.8,1.1.1.1
Tcpip\..\Interfaces\{92f86d74-d80c-11e7-8ed6-806e6f6e6963}: [NameServer] 8.8.8.8,1.1.1.1
Tcpip\..\Interfaces\{adc844b1-6e4f-478a-8153-e7ba5506b3b7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{b99221cf-b112-4d46-bb60-e6cd1e0564f2}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{faadc2b0-a222-44d8-bb08-dc38ca091ec4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{faadc2b0-a222-44d8-bb08-dc38ca091ec4}: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge Profile: C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default [2025-03-06]
Edge HomePage: Default -> hxxp://www.seznam.cz/
Edge StartupUrls: Default -> "hxxp://www.seznam.cz/","hxxps://web.whatsapp.c ... om/sharing"
Edge Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-04]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Edge relevant text changes) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx
Edge Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mhhmkoogppocgeaedlcikkhenhagbmnj [2025-03-04]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx
Edge Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2025-03-05]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx

FireFox:
========
FF DefaultProfile: 8ji3u4k7.default
FF ProfilePath: C:\Users\janpu\AppData\Roaming\Mozilla\Firefox\Profiles\8ji3u4k7.default [2023-05-24]
FF ProfilePath: C:\Users\janpu\AppData\Roaming\Mozilla\Firefox\Profiles\iedwyphd.default-release [2025-03-06]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google Inc -> Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\dtplugin\npDeployJava1.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\plugin2\npjp2.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default [2025-03-06]
CHR Notifications: Default -> hxxps://app.zonky.cz; hxxps://calendar.google.com; hxxps://drive.google.com
CHR HomePage: Default -> hxxps://www.google.cz/?gfe_rd=cr&ei=C9WLVbPsOui ... gws_rd=ssl
CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3289075&SearchSource=48&CUI=UN49515189314555504&UM=1","hxxp://www.mystartsearch.com/?type=hp&ts=14262 ... google.cz/"
CHR Session Restore: Default -> is enabled.
CHR Extension: (Překladač Google) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-09-09]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-02-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (LastPass: Free Password Manager) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2025-02-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-23]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-02]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Hlídač Shopů) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-02-12]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Streak CRM for Gmail) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2025-03-05]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Guest Profile [2025-03-06]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-03-06]
CHR Notifications: Profile 1 -> hxxps://meet.google.com; hxxps://web.whatsapp.com
CHR HomePage: Profile 1 -> hxxp://www.google.com/
CHR StartupUrls: Profile 1 -> "hxxps://www.google.cz/","hxxp://www.seznam.cz/" ... trubin.cz/"
CHR Session Restore: Profile 1 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-03-05]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (LibreCAD on rollApp) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gbalmmdepliaghihofedeopaacjfcgab [2018-02-03]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-04]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (FormApps Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2024-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-22]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Image Size Info) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\oihdhfbfoagfkpcncinlbhfdgpegcigf [2024-07-17]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Hlídač Shopů) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-02-12]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10 [2025-03-06]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-09-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-09-16]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11 [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-02-20]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-01-13]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-01-13]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-01-13]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2 [2025-03-06]
CHR Session Restore: Profile 2 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2022-11-24]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-11-24]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-11-17]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (LastPass: Free Password Manager) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2022-11-22]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2022-04-19]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-04-19]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Streak CRM for Gmail) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2022-04-19]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3 [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-10-10]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-12-09]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-04-29]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-06-30]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4 [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-08-31]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-08-31]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2022-08-31]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-31]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5 [2025-03-06]
CHR Session Restore: Profile 5 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-03-03]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-09-25]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-09-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6 [2025-03-06]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2024-08-24]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-08-24]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-11-17]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-08-24]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-11-17]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7 [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8 [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9 [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-09-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-09-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-09-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-09-16]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\System Profile [2025-03-06]
CHR HKU\S-1-5-21-447794926-783580724-1362418113-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\janpu\AppData\Local\Google\Drive\user_Y3mNHmq0EeuC+9Q9frE1aA\apdfllckaahabafndbhieahigkjlhalf_live.crx <not found>
CHR HKU\S-1-5-21-447794926-783580724-1362418113-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901968 2021-03-19] (BattlEye Innovations e.K. -> )
S2 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [503808 2024-08-05] (Brother Industries, Ltd.) [File not signed]
S2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13617384 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4955536 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [784512 2018-09-23] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-11-03] (Epic Games Inc. -> Epic Games, Inc.)
S2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe [1926976 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182392 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-11-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [919992 2020-11-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
S2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945264 2017-11-24] (TeamViewer GmbH -> TeamViewer GmbH)
S2 USBAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\UsbAppControl\USBAppControl.exe [11776 2025-01-17] () [File not signed]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe [4352456 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe [270056 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 WorkflowAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl\WorkflowAppControl.exe [18944 2025-01-17] () [File not signed]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AWCCDriver; C:\WINDOWS\System32\drivers\AWCCDriver.sys [42456 2021-07-01] (IndiLogic LLC -> Dell Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [63696 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S2 googledrivefs31626; C:\Program Files\Google\Drive File Stream\Drivers\31626\googledrivefs31626.sys [384096 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [278944 2025-03-06] (Microsoft Windows -> Microsoft Corporation)
S3 Revoflt; C:\WINDOWS\System32\DRIVERS\revoflt.sys [38400 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
S2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [207344 2021-11-15] (Disc Soft Ltd -> Duplex Secure Ltd)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20016 2025-03-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [601520 2025-03-06] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100768 2025-03-06] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

Error Reading file: "C:\ProgramData\Desktop\TLauncher.lnk"
Error Reading file: "C:\ProgramData\Desktop\Steam.lnk"
Error Reading file: "C:\ProgramData\Desktop\Settlers 2 GOLD.lnk"
Error Reading file: "C:\ProgramData\Desktop\Konung.lnk"
Error Reading file: "C:\ProgramData\Desktop\KaM Remake1.lnk"
Error Reading file: "C:\ProgramData\Desktop\desktop.ini"
Error Reading file: "C:\ProgramData\Desktop\Brány Skeldalu.lnk"
2025-03-06 15:37 - 2025-03-06 15:39 - 000040767 _____ C:\Users\janpu\Desktop\FRST.txt
2025-03-06 15:23 - 2025-03-06 15:38 - 000000000 ____D C:\FRST
2025-03-06 13:25 - 2025-03-06 13:56 - 000000000 ____D C:\Users\janpu\AppData\Local\GHISLER
2025-03-06 13:25 - 2025-03-06 13:25 - 000000899 _____ C:\Users\janpu\Desktop\Total Commander 64 bit.lnk
2025-03-06 13:25 - 2025-03-06 13:25 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2025-03-06 13:25 - 2025-03-06 13:25 - 000000000 ____D C:\Users\janpu\AppData\Roaming\GHISLER
2025-03-06 13:25 - 2025-03-06 13:25 - 000000000 ____D C:\Program Files\totalcmd
2025-03-06 12:59 - 2025-03-06 13:15 - 3127622943 _____ C:\Users\janpu\Desktop\Intel.rar
2025-03-05 16:44 - 2025-03-05 16:44 - 000065264 _____ C:\Users\janpu\Downloads\priloha_1487660424_2_Jak se poprve prihlasit.pdf
2025-03-05 16:42 - 2025-03-05 16:42 - 000175790 _____ C:\Users\janpu\Downloads\priloha_1487660424_1_Informace o programu.pdf
2025-03-05 16:42 - 2025-03-05 16:42 - 000175790 _____ C:\Users\janpu\Downloads\priloha_1487660424_1_Informace o programu (1).pdf
2025-03-05 16:41 - 2025-03-05 16:41 - 000048026 _____ C:\Users\janpu\Downloads\priloha_1487660424_0_PRIHLASOVACI UDAJE A POPIS PRIHLASENI (1).pdf
2025-03-05 16:36 - 2025-03-05 16:36 - 000382173 _____ C:\Users\janpu\Downloads\priloha_1489468154_0_Dopis VR II MSMT-25_2025-29.pdf
2025-03-05 16:36 - 2025-03-05 16:36 - 000048026 _____ C:\Users\janpu\Downloads\priloha_1487660424_0_PRIHLASOVACI UDAJE A POPIS PRIHLASENI.pdf
2025-03-05 13:36 - 2025-03-06 15:37 - 000705564 _____ C:\WINDOWS\ntbtlog.txt
2025-03-05 13:36 - 2025-03-06 15:34 - 000000000 ____D C:\Users\janpu\Desktop\_Logovací porgram
2025-03-05 13:36 - 2025-03-06 15:23 - 002404352 _____ (Farbar) C:\Users\janpu\Desktop\FRST64.exe
2025-03-05 13:32 - 2025-03-05 13:32 - 000000000 ____D C:\ProgramData\HP
2025-03-05 11:08 - 2025-03-05 11:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2025-03-05 10:24 - 2025-03-06 15:36 - 116916224 _____ C:\WINDOWS\system32\config\SOFTWARE
2025-03-05 10:08 - 2025-03-05 10:24 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2025-03-05 10:05 - 2025-03-05 10:28 - 000000000 ____D C:\Users\janpu\AppData\Roaming\AdwCleaner
2025-03-04 11:52 - 2025-03-04 11:52 - 000000000 ____D C:\Users\Public\Documents\AdobeGCInfo
2025-03-03 15:05 - 2025-03-03 15:05 - 000382054 _____ C:\Users\janpu\Documents\Scan2025-03-03_150448.pdf
2025-03-03 11:59 - 2025-03-03 11:59 - 000000223 _____ C:\Users\janpu\Desktop\Command & Conquer™ Tiberian Sun™ and Firestorm™.url
2025-02-28 16:16 - 2025-02-28 16:16 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
2025-02-28 15:40 - 2025-03-06 09:05 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Office
2025-02-28 14:36 - 2025-02-28 14:36 - 000000000 ___RD C:\Users\janpu\Documents\Inventor Server SDK ACAD 2017
2025-02-28 14:31 - 2025-02-28 18:41 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Autodesk
2025-02-28 09:50 - 2025-02-28 09:50 - 000133238 _____ C:\Users\janpu\Downloads\Beroun-IV.Q 2024 (1).xlsx
2025-02-27 19:56 - 2025-02-27 19:56 - 000134737 _____ C:\Users\janpu\Downloads\Beroun-I.Q 2025.xlsx
2025-02-27 19:52 - 2025-02-27 19:52 - 000148408 _____ C:\Users\janpu\Downloads\Beroun-I.Q 2025 - dof..xlsx
2025-02-25 10:04 - 2025-02-25 10:04 - 000075902 _____ C:\Users\janpu\Documents\Vypis_poplatku-2802703583_za_obdobi_20240101-20241231.pdf
2025-02-20 14:49 - 2025-02-20 14:49 - 000000000 ____D C:\Users\janpu\AppData\Local\Brother_Industries,_Ltd
2025-02-20 11:21 - 2025-02-20 11:21 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Sun
2025-02-20 11:21 - 2025-02-20 11:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2025-02-20 11:21 - 2024-12-04 08:34 - 000178808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2025-02-19 09:57 - 2025-02-19 09:57 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-02-12 17:51 - 2025-02-12 17:51 - 001054478 _____ C:\Users\janpu\Downloads\2025-02-01T06-00 Transakce #9047957271988708-9178706538913776.pdf
2025-02-11 18:02 - 2025-02-11 18:02 - 000336428 _____ C:\Users\janpu\Downloads\priloha_1478410446_0_Dosetreni_PV_Adela_Ticha.pdf
2025-02-09 19:58 - 2025-03-04 10:14 - 000003564 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-447794926-783580724-1362418113-1001

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-03-06 15:36 - 2021-11-15 20:02 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2025-03-06 15:36 - 2020-08-07 17:46 - 000008192 ___SH C:\DumpStack.log.tmp
2025-03-06 15:36 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-03-06 15:34 - 2020-08-07 17:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-03-06 15:26 - 2020-08-07 17:51 - 001693140 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-03-06 15:26 - 2019-12-07 15:41 - 000716770 _____ C:\WINDOWS\system32\perfh005.dat
2025-03-06 15:26 - 2019-12-07 15:41 - 000144948 _____ C:\WINDOWS\system32\perfc005.dat
2025-03-06 15:26 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\INF
2025-03-06 15:24 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-03-06 15:23 - 2021-02-09 09:56 - 000000000 ___RD C:\Users\janpu\Disk Google (linda.abrahamova@gmail.com)
2025-03-06 15:23 - 2018-01-10 10:42 - 000000000 ___RD C:\Users\janpu\Disk Google
2025-03-06 15:22 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\NVIDIA
2025-03-06 14:49 - 2017-12-03 10:33 - 000000000 ___SD C:\Users\janpu\AppData\Roaming\Microsoft\Credentials
2025-03-06 12:21 - 2020-08-07 17:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-03-06 09:57 - 2018-02-14 20:52 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-03-06 09:51 - 2017-07-04 08:05 - 000000000 ___HD C:\Program Files\WindowsApps
2025-03-06 09:51 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-03-06 09:49 - 2018-05-14 17:56 - 000000000 ____D C:\Users\janpu\AppData\Local\D3DSCache
2025-03-06 09:32 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-03-06 09:20 - 2023-07-23 20:43 - 000000000 ____D C:\Users\janpu\AppData\LocalLow\Temp
2025-03-06 09:13 - 2017-07-04 08:05 - 000000000 _RSHD C:\Intel
2025-03-05 18:33 - 2021-10-01 23:00 - 000002179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2025-03-05 18:33 - 2021-09-08 19:14 - 000002014 _____ C:\Users\Default\Desktop\Google Slides.lnk
2025-03-05 18:33 - 2021-09-08 19:14 - 000002014 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2025-03-05 18:33 - 2021-09-08 19:14 - 000002002 _____ C:\Users\Default\Desktop\Google Docs.lnk
2025-03-05 15:47 - 2017-12-03 14:07 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Word
2025-03-05 13:31 - 2017-07-04 08:05 - 000000000 ____D C:\Users\janpu
2025-03-05 11:15 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Steam
2025-03-05 11:08 - 2020-08-07 17:53 - 000003624 _____ C:\WINDOWS\system32\Tasks\GarminUpdaterTask
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\Package Cache
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\Garmin
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Garmin
2025-03-05 11:06 - 2022-08-17 09:52 - 000000000 ____D C:\Users\janpu\AppData\Local\Spotify
2025-03-05 11:06 - 2017-12-03 19:19 - 000000000 ___RD C:\Users\janpu\Documents\04 Nemovitosti
2025-03-05 10:46 - 2022-08-17 09:52 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Spotify
2025-03-05 09:45 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Adobe
2025-03-05 09:37 - 2020-08-07 17:46 - 000629152 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-03-05 09:16 - 2017-12-03 14:07 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Excel
2025-03-04 14:00 - 2022-07-25 09:53 - 000000000 ____D C:\Users\janpu\AppData\Roaming\XnView
2025-03-04 14:00 - 2017-12-15 13:46 - 000000000 ____D C:\Users\janpu\AppData\Local\CrashDumps
2025-03-04 14:00 - 2017-12-03 18:57 - 000000000 ____D C:\Users\janpu\AppData\Roaming\uTorrent
2025-03-04 14:00 - 2017-07-04 08:05 - 000000000 ___DC C:\WINDOWS\Panther
2025-03-04 14:00 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2025-03-04 10:14 - 2023-11-15 07:10 - 000002383 _____ C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-03-04 10:14 - 2021-12-13 09:06 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-447794926-783580724-1362418113-1001
2025-03-04 10:14 - 2020-08-07 17:53 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-447794926-783580724-1362418113-1001
2025-03-03 11:59 - 2021-02-05 14:16 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2025-03-01 10:53 - 2020-06-15 07:32 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-02-28 16:48 - 2017-12-03 14:22 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared
2025-02-28 13:49 - 2024-01-20 23:43 - 000000000 ____D C:\Users\janpu\AppData\Local\KrosUsers
2025-02-28 13:09 - 2017-12-03 14:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2017 – Čeština (Czech)
2025-02-28 09:50 - 2017-12-03 10:41 - 000000000 ____D C:\Users\janpu\AppData\Local\Packages
2025-02-20 14:49 - 2024-12-06 10:11 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Brother
2025-02-20 11:03 - 2023-09-05 18:12 - 000000000 ____D C:\Users\janpu\AppData\Roaming\UI Launcher
2025-02-20 10:36 - 2024-02-03 12:25 - 000000000 ___RD C:\Users\janpu\Documents\25 Rodina
2025-02-20 10:32 - 2021-07-24 21:11 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2025-02-19 09:57 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-02-13 10:25 - 2022-11-22 08:00 - 000000000 ___RD C:\Users\janpu\Documents\ebay
2025-02-13 08:54 - 2018-01-07 11:23 - 000000000 ____D C:\Users\janpu\AppData\Roaming\vlc
2025-02-12 22:43 - 2024-07-15 01:17 - 000000000 ____D C:\WINDOWS\system32\compatrel
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-02-12 22:43 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2025-02-12 13:17 - 2020-04-17 13:39 - 000419228 __RSH C:\bootmgr
2025-02-12 13:16 - 2020-08-07 17:48 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-02-12 12:11 - 2017-12-04 17:15 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-02-12 12:00 - 2017-12-04 17:15 - 209365816 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-02-11 20:04 - 2024-12-06 10:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2025-02-11 00:19 - 2017-12-03 19:17 - 000000000 ___RD C:\Users\janpu\Documents\01 Živnost
2025-02-09 19:53 - 2021-02-05 13:35 - 000000000 ____D C:\Users\janpu\AppData\Local\Steam

==================== Files in the root of some directories ========

2021-07-13 10:31 - 2025-03-04 11:52 - 000000615 _____ () C:\Users\janpu\AppData\Local\oobelibMkey.log
2019-08-26 21:41 - 2022-10-06 20:44 - 000007604 _____ () C:\Users\janpu\AppData\Local\Resmon.ResmonCfg
2024-12-06 10:55 - 2024-12-06 10:55 - 000000000 _____ () C:\Users\janpu\AppData\Local\settingData.dat
2017-12-03 14:00 - 2017-12-03 14:00 - 000000003 _____ () C:\Users\janpu\AppData\Local\updater.log
2017-12-03 14:00 - 2022-03-06 14:09 - 000000424 _____ () C:\Users\janpu\AppData\Local\UserProducts.xml

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Hasicz · #20 Příspěvek od **Hasicz** » 06 bře 2025 15:50

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-03-2025
Ran by janpu (06-03-2025 15:40:05)
Running from C:\Users\janpu\Desktop
Microsoft Windows 10 Home Version 22H2 19045.5487 (X64) (2020-08-07 16:53:17)
Boot Mode: Safe Mode (with Networking)
==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-447794926-783580724-1362418113-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-447794926-783580724-1362418113-503 - Limited - Disabled)
Guest (S-1-5-21-447794926-783580724-1362418113-501 - Limited - Disabled)
janpu (S-1-5-21-447794926-783580724-1362418113-1001 - Administrator - Enabled) => C:\Users\janpu
WDAGUtilityAccount (S-1-5-21-447794926-783580724-1362418113-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ANT Drivers Installer x64 (HKLM\...\{FD1A4C7D-D35E-4742-BCEB-1E1104D103C4}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
AppLogLibSetup (HKLM-x32\...\{52FB0C8F-DF05-4C61-AEB6-18C55F8C385F}) (Version: 1.0.3.0 - Brother Industries Ltd.) Hidden
Aslain's WoT Modpack verze 1.27.0.1.12 (HKLM-x32\...\Aslains_WoT_Modpack_Installer_is1) (Version: 1.27.0.1.12 - Aslain)
Backup and Sync from Google (HKLM\...\{696895F7-52C7-4C9E-998B-C7E0CC907092}) (Version: 3.57.4256.0809 - Google, Inc.)
Balíček ovladače systému Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Balíček ovladače systému Windows - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Balíček ovladače systému Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Bontia Studio (HKLM-x32\...\{f9b23ce0-6645-4236-b825-ba692c827bfb}) (Version: 5.3.4361.30804 - Bontia a.s.)
Bontia Studio 5.3 (HKLM-x32\...\{278BD020-1DCD-46C2-B9F6-36E88E10AC64}) (Version: 5.3.4361.0 - Bontia, a.s.) Hidden
Brány Skeldalu pro Windows 1.2 (HKLM-x32\...\Brány Skeldalu_is1) (Version: - Napoleon games)
BrLauncher (HKLM-x32\...\{9416C3F3-10F3-4881-A343-6AF1097728CB}) (Version: 2.0.23.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{190861E7-09C5-42D8-BB4B-0AFB234BCFC1}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{4BDD306E-6382-414C-A1AE-D4D0AFF25373}) (Version: 13.1.0.85 - Brother Industries, Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{fdcfcbcf-53da-4bb6-9094-efcd923dcd0b}) (Version: 13.1.0.85 - Brother Industries, Ltd.)
Brother Port Driver (HKLM-x32\...\{C75FC872-0E00-4C82-90AE-091929F34590}) (Version: 1.0.5.1 - Brother Industries Ltd.) Hidden
Brother Printer Driver (HKLM-x32\...\{A9A83E7D-691F-48C0-8FC0-7702530B0C60}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{3895BDF5-F9F4-42BC-9BC9-6F40702A843A}) (Version: 1.0.18.1 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{8B58D1A2-DFAD-4069-A0C0-7FD272B68BB3}) (Version: 1.0.30.0 - Brother Industries Ltd.) Hidden
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.78.1093 - AB Team, d.o.o.)
CDex - Digital Audio CD Extractor and Converter (HKLM-x32\...\CDex) (Version: 2.24.0.2020 - CDex.mu)
Crypto Native App verze 23.00.8426 (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\{79D8049F-2978-4E91-90BD-3428C8FF2E69}_is1) (Version: 23.00.8426 - TESCO SW a.s.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 11.0.0.1920 - Disc Soft Ltd)
Duplicate Cleaner Pro 4.0.5 (HKLM-x32\...\Duplicate Cleaner Pro) (Version: 4.0.5 - DigitalVolcano Software Ltd)
Elevated Installer (HKLM-x32\...\{164C7EA9-EFD3-4DCE-A297-FFB72D12E457}) (Version: 7.24.0.0 - Garmin Ltd or its subsidiaries) Hidden
Epic Games Launcher (HKLM-x32\...\{E7B62E3F-0F70-4119-89A2-28DE1C3873CC}) (Version: 1.1.163.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.)
Garmin Express (HKLM-x32\...\{206c32b6-b534-4c0c-a074-df1ca53e6e3e}) (Version: 7.24.0.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{50EE2113-6BB9-466F-A71B-FE40DB3139A4}) (Version: 7.24.0.0 - Garmin Ltd or its subsidiaries) Hidden
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 105.0.1.0 - Google LLC)
Google Chrome (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Google Chrome) (Version: 133.0.6943.142 - Google LLC)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
HttpToUsbBridge (HKLM-x32\...\{2EB1E9F3-AAF0-428F-B692-AE824553E2A3}) (Version: 2.5.108.1 - Brother Industries Ltd.)
IrfanView 64 (remove only) (HKLM\...\IrfanView64) (Version: 4.41 - Irfan Skiljan)
Java 8 Update 441 (HKLM-x32\...\{77724AE4-039E-4CA4-87B4-2F32180441F0}) (Version: 8.0.4410.7 - Oracle Corporation)
KaM - The Peasants Rebellion (HKLM-x32\...\KaM - The Peasants Rebellion) (Version: - )
KaM Remake Full r6720 (HKLM-x32\...\{FDE049C8-E4B2-4EB5-A534-CF5C581F5D32}_is1) (Version: - )
Kodi (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Kodi) (Version: 21.1.0.0 - XBMC Foundation)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Konung 2 CZ (HKLM-x32\...\{C2189623-6851-4A1A-B9EE-6B8C2DA7F1AA}) (Version: 1.00 - )
Konung: Legend of the North (HKLM-x32\...\Konung: Legend of the North) (Version: - )
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Legend of the North - Konung (HKLM-x32\...\1455290088_is1) (Version: 2.0.0.2 - GOG.com)
Lightshot-5.5.0.7 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.5.0.7 - Skillbrains)
ManicTime (HKLM-x32\...\{D9E522D9-3345-4230-873A-972974B2CEF4}) (Version: 23.1.1.0 - Finkit d.o.o.)
MediaHuman YouTube to MP3 Converter 3.9.9.97 (HKLM-x32\...\MediaHuman YouTube to MP3 Converter_is1) (Version: 3.9.9.97 - MediaHuman)
Microsoft .NET 6.0.25 - Windows Server Hosting (HKLM-x32\...\{b4a5e26c-84fd-4b01-8d3f-42022169595a}) (Version: 6.0.25.23523 - Microsoft Corporation)
Microsoft .NET 8.0.12 - Windows Server Hosting (HKLM-x32\...\{218673b6-7337-4d49-bc41-b4ccb7e34802}) (Version: 8.0.12.24603 - Microsoft Corporation)
Microsoft .NET Host - 6.0.25 (x64) (HKLM\...\{C7141A99-592B-4226-A4E9-B767C1D0FBAF}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host - 6.0.25 (x86) (HKLM-x32\...\{906F835E-F52B-47C2-A996-A769EB284880}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.12 (x64) (HKLM\...\{C4C6E39D-48AE-426C-960C-46ED3447DDEB}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.12 (x86) (HKLM-x32\...\{874D52B8-B1F4-4D04-8249-8AC6E698CCF5}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.25 (x64) (HKLM\...\{AE86D888-1404-47CC-A7BB-8D86C0503E58}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.25 (x86) (HKLM-x32\...\{73191C34-7ACF-493B-B92E-FE368D8F4071}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.8 (x64) (HKLM\...\{3C3CA326-3F1D-43B7-B0AD-CBC06B2DED5A}) (Version: 48.35.45462 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.12 (x64) (HKLM\...\{C9C872D5-3CA9-4E0E-AF90-1B85325F9243}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.12 (x86) (HKLM-x32\...\{9EC250F3-BC02-4B35-8395-E03A02CD9255}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.25 (x64) (HKLM\...\{3544B2EE-E62F-4D11-B79C-3DDEACE94DA5}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.25 (x64) (HKLM-x32\...\{27a347ca-6c38-495a-888f-37c1198ff412}) (Version: 6.0.25.33019 - Microsoft Corporation)
Microsoft .NET Runtime - 6.0.25 (x86) (HKLM-x32\...\{40f0c93c-19eb-44f5-8ea9-3251a771e053}) (Version: 6.0.25.33019 - Microsoft Corporation)
Microsoft .NET Runtime - 6.0.25 (x86) (HKLM-x32\...\{6D7737C0-9538-48ED-ACB7-688A891417C4}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.8 (x64) (HKLM\...\{7CEA3ABF-FE24-42AF-ADE6-B4A3EE346743}) (Version: 48.35.45462 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.12 (x64) (HKLM\...\{1E606649-7E56-452F-8AC4-495C70D1E341}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.12 (x86) (HKLM-x32\...\{272C9AEF-D02F-4955-8C11-D9F9198A58EC}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft Access database engine 2010 (English) (HKLM-x32\...\{90140000-00D1-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.25 - Shared Framework (x64) (HKLM-x32\...\{31ca574a-1077-4351-a8ee-021a116af21b}) (Version: 6.0.25.23523 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.25 - Shared Framework (x86) (HKLM-x32\...\{2d7a0942-00d5-4c69-8855-03b6696471f1}) (Version: 6.0.25.23523 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.25 Hosting Bundle Options (HKLM-x32\...\{A10E23CC-4B4B-3F8F-B85D-13C9D3E59F1E}) (Version: 6.0.25.23523 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.25 Shared Framework (x64) (HKLM\...\{EDC7E317-B223-349D-A4E5-D1809F2651AD}) (Version: 6.0.25.23523 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.25 Shared Framework (x86) (HKLM-x32\...\{D64D9894-C4A7-3FA2-BD19-E36F6369803C}) (Version: 6.0.25.23523 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.12 Hosting Bundle Options (HKLM-x32\...\{8C069910-4E69-349B-8840-56F774C92B87}) (Version: 8.0.12.24603 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.12 Shared Framework (x64) (HKLM\...\{2B76FF3A-309D-3050-9C41-C98FB593258D}) (Version: 8.0.12.24603 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.12 Shared Framework (x86) (HKLM-x32\...\{0770B9E3-CA2C-37B8-AD77-7336654A2466}) (Version: 8.0.12.24603 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 133.0.3065.92 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 133.0.3065.92 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2016 - cs-cz (HKLM\...\ProPlusRetail - cs-cz) (Version: 16.0.18429.20158 - Microsoft Corporation)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 18.151.0729.0013 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\OneDriveSetup.exe) (Version: 25.020.0202.0001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34433 (HKLM-x32\...\{804e7d66-ccc2-4c12-84ba-476da31d103d}) (Version: 14.42.34433.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.34.31931 (HKLM-x32\...\{6ba9fb5e-8366-4cc4-bf65-25fe9819b2fc}) (Version: 14.34.31931.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.42.34433 (HKLM-x32\...\{e7802eac-3305-4da0-9378-e55d1ed05518}) (Version: 14.42.34433.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34433 (HKLM\...\{E1902FC6-C423-4719-AB8A-AC7B2694B367}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34433 (HKLM\...\{382F1166-A409-4C5B-9B1E-85ED538B8291}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.34.31931 (HKLM-x32\...\{C2662EFF-06E6-4FD1-9D6D-FDCA91025757}) (Version: 14.34.31931 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.42.34433 (HKLM-x32\...\{C2BB95AA-90F3-4891-81C1-A7E565BB836C}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.25 (x86) (HKLM-x32\...\{2deb241e-99d9-4489-ae8d-4778d470fedd}) (Version: 6.0.25.33020 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 6.0.25 (x86) (HKLM-x32\...\{AF1BA644-A730-46A9-BFE1-C1B79EBBE36D}) (Version: 48.100.4037 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.8 (x64) (HKLM\...\{EB3983F9-3D60-456D-A11A-C1366C79AD3E}) (Version: 48.35.45540 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.8 (x64) (HKLM-x32\...\{ca35acb3-b442-44fb-924c-4448120bf689}) (Version: 6.0.8.31518 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.12 (x86) (HKLM-x32\...\{71e8d0d2-fc5e-4344-b556-0110ef50b6b9}) (Version: 8.0.12.34404 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.12 (x86) (HKLM-x32\...\{CF203BF4-13DE-4A81-8BC8-31B3F4A2CB32}) (Version: 64.48.26178 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 113.0.2 (x64 cs)) (Version: 113.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 113.0.2 - Mozilla)
MSVC80_x64_v2 (HKLM\...\{4D668D4F-FAA2-4726-834C-31F4614F312E}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (HKLM-x32\...\{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}) (Version: 1.0.3.0 - Nokia) Hidden
NetworkRepairTool (HKLM-x32\...\{96CEE8C3-B934-48A4-ADA6-91B7CE8A5002}) (Version: 1.2.17.0 - Brother Industries, Ltd.) Hidden
NVIDIA Ovladač HD audia 1.3.38.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.35 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 456.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 456.71 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18429.20158 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18429.20158 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.255 - Google, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 4.3.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.3.8 - VS Revo Group, Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.43.0 - Samsung Electronics Co., Ltd.)
ScannerUtilityInstaller (HKLM-x32\...\{D65C0754-7790-427F-AD73-D7C644260F57}) (Version: 1.19.9.1 - Brother) Hidden
Settlers 2 GOLD (HKLM-x32\...\Settlers 2 GOLD_is1) (Version: - GOG.com)
SoftwareUpdateNotification (HKLM-x32\...\{E28A6F15-BFBE-4D20-8B5F-6EABAA1E545E}) (Version: 1.0.14.0 - Brother Industries, Ltd.) Hidden
Soldat 1.4.2 (HKLM-x32\...\Soldat_is1) (Version: - Michal Marcinkowski)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Spotify (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Spotify) (Version: 1.2.58.498.g6afe77b7 - Spotify AB)
StatusMonitor (HKLM-x32\...\{5F23FD86-E84F-46BA-B40B-5FD6A6961A70}) (Version: 1.22.37.0 - Brother Industries, Ltd.) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Sweet Home 3D version 5.7 (HKLM\...\Sweet Home 3D_is1) (Version: 5.7 - eTeks)
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.0.5058 - TeamViewer)
TLauncher (HKLM-x32\...\TLauncher) (Version: 2.86 - TLauncher Inc.)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.51 - Ghisler Software GmbH)
TP-LINK TL-WN722N Driver (HKLM-x32\...\{F9C15685-38A9-46A1-9826-97204015C19C}) (Version: 1.3.1 - TP-LINK)
Trachea OS (HKLM-x32\...\{B413C357-6BE6-A1B7-9187-87BDC3D0F5B3}) (Version: 5.9.252 - SOFTconsult, spol. s r.o.) Hidden
Trachea OS (HKLM-x32\...\TracheaOS) (Version: 5.9.252 - SOFTconsult, spol. s r.o.)
Trust GXT 970 (HKLM-x32\...\{0C6A599B-1C6C-427C-81BF-1908825C95E2}_is1) (Version: 1.0.6 - Trust International B.V.)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.18 - VideoLAN)
Vzum (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\6cfa0c5674100ff8) (Version: 1.0.0.46 - Vzum)
Wargaming.net Game Center (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Wargaming.net Game Center) (Version: 24.7.1.7647 - Wargaming.net)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
World of Tanks EU (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\2314027414) (Version: - Wargaming.net)

Packages:
=========
Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-06] (Autodesk Inc.)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-11-16] (Microsoft Corporation)
Doplněk pro Fotky -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-03-12] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16 [2025-02-19] ()
Roblox -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.662.536.0_x64__55nm5eh3cm0pr [2025-03-02] (Roblox Corporation)
Settle Up -> C:\Program Files\WindowsApps\15837bezysoftware.SettleDown_2.6.0.0_x64__szd32vgd5b9q4 [2023-03-26] (Step Up Labs) [MS Ad]
WinZip Universal -> C:\Program Files\WindowsApps\WinZipComputing.WinZipUniversal_1.5.13516.0_x64__3ykzqggjzj4z0 [2019-06-01] (WinZip Computing)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{041F9391-C79D-44EE-AA4E-AF4E029C4B47}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.112\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{1F9E0710-2073-435F-9C1B-F29946205947}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.152\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{2919A592-BF5E-4AF5-A658-84454D70841E}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.202\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{3BC2EF70-3830-43FC-9009-029942FD2DCE}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.372\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.442\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{540C17A8-04F2-4B66-95D7-B2FEF9A19B54}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.423\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{5D44759C-CF3F-433D-9EA0-267E45577C77}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.212\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{62634D95-960B-4834-8E71-A70408AD8FD9}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.34.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{69545769-8D02-4B07-A481-AD374CD8D5D1}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.132\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{6D264B70-DA18-401D-910C-B202D89670C6}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.32\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{75399D28-E622-4973-8752-BC0F7DC47AF3}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.122\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{84EB3779-151B-4C71-AEF0-A0FEE9481401}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.342\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{85D8EE2F-794F-41F0-BB03-49D56A23BEF4}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.372\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{86508D42-E5D7-4D10-9C6F-D427AEEB85B5}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.34.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{8B480070-D37D-4090-A063-7A429F849652}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.92\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{8D422533-936A-4A82-B15C-BD5319AB0026}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.332\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{A2C6CB58-C076-425C-ACB7-6D19D64428CD}\localserver32 -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\133.0.6943.142\notification_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{A804CF1A-91E5-4F0C-9E8C-DB39E74056DD}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.33.23\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{AE9899FA-E21F-4D91-BD1F-59BC10E56CA1}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.292\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{B9C751AA-D9CF-4E09-A270-E5BBD2194F83}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.352\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{BE5C2E39-090F-46A2-AFAA-47540743B4FE}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.102\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{CA07EE63-A212-4373-AE82-FBF92FCA8DCC}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.242\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{CA8FA699-91CD-412F-9D13-9B1222F4370E}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.82\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{CA919489-0396-4164-A6E7-94CDED45A707}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.52\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{DA06AAE8-5748-4509-850F-17AA522F8372}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.273\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{DEDF773D-E27B-485E-8E7D-85C5B0EB5A67}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{E4949BE6-C9FF-4AFA-8672-6127D857418B}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.312\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.372\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{ED0BC9DB-3CE6-49E5-9B2F-590DCEF8C016}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.342\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{EF076C91-DC9E-43E3-84ED-3D219E065A4F}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.302\psuser_64.dll => No File
ShellIconOverlayIdentifiers: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2022-02-01] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2022-02-01] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2022-02-01] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\System32\AcSignIcon.dll [2017-10-20] (Autodesk, Inc -> Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2023-09-05] (Autodesk, Inc. -> Autodesk)
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2022-02-01] (Google LLC -> Google)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2022-02-01] (Google LLC -> Google)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2020-10-01] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2020-09-28] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Linda - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\c8c6ca33f34d36d3\Antonín (zaci.zswagnerka.cz) - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 5"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b37fff5916e5fab1\Nicolas (student.gymberoun.cz) - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 11"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\a2d4e19d7187c685\SekáčHP - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 2"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\425a8c9d83c5b5e\Josefína - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 10"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\158eb60dbf5e676a\Antonín - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 3"

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879 [272]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [10]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [10]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [10]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [480]

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

SearchScopes: HKU\S-1-5-21-447794926-783580724-1362418113-1001 -> {FD6EBC6C-6E6A-48D1-833D-16FFA7024BB1} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_37180
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\ssv.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\jp2ssv.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-09-29 14:46 - 2017-09-29 14:44 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Intel;C:\Intel\m;C:\Intel\logs;C:\WINDOWS;C:\WINDOWS\System32;C:\WINDOWS\sysnative;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\dotnet\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\Users\janpu\AppData\Local\Microsoft\WindowsApps;
HKU\S-1-5-21-447794926-783580724-1362418113-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\janpu\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img1.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "MRT"
HKLM\...\StartupApproved\Run32: => "Adobe Acrobat Speed Launcher"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "MRT"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_B290F089DC243CBB434D3F1388B3FDD9"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{EE5EF259-F9C0-4062-ADE8-F9BD8B6C16AA}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS6EFE\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{715BF791-D541-4582-BBEC-C4C82B8D1F2E}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS6EFE\HPDiagnosticCoreUI.exe => No File
FirewallRules: [UDP Query User{1E09E7F4-0C88-4AF5-A65C-785A0BA1C973}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe => No File
FirewallRules: [TCP Query User{CDA007A6-2C3D-46B0-A64D-9463CE557BFE}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe => No File
FirewallRules: [UDP Query User{47440213-EADE-4965-94F0-4AED1947785A}C:\soldat\soldat.exe] => (Allow) C:\soldat\soldat.exe (Michal Marcinkowski) [File not signed]
FirewallRules: [TCP Query User{2D007354-3591-4D37-8AA3-939A4FBA6C2F}C:\soldat\soldat.exe] => (Allow) C:\soldat\soldat.exe (Michal Marcinkowski) [File not signed]
FirewallRules: [UDP Query User{87E95204-8D40-4230-8DA6-F85D455D632F}E:\03 - games\liero\openlierox\openlierox.exe] => (Allow) E:\03 - games\liero\openlierox\openlierox.exe => No File
FirewallRules: [TCP Query User{4C4453C2-98A1-4B90-A8CD-5BCAFCA4B361}E:\03 - games\liero\openlierox\openlierox.exe] => (Allow) E:\03 - games\liero\openlierox\openlierox.exe => No File
FirewallRules: [UDP Query User{9D0703A7-1FC6-4782-BEB8-91DD64FD35A4}C:\soldat\soldat.exe] => (Allow) C:\soldat\soldat.exe (Michal Marcinkowski) [File not signed]
FirewallRules: [TCP Query User{7EBB6BE5-6797-42B0-9E94-D5CD64D10303}C:\soldat\soldat.exe] => (Allow) C:\soldat\soldat.exe (Michal Marcinkowski) [File not signed]
FirewallRules: [{B685150F-0B6F-4801-9D82-DBE1F4050C92}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5C10\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{12A98782-0BE8-42EA-B320-BAE3D3F8DB21}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5C10\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{64896ED3-DB9F-4929-A92A-E76467659B01}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5B42\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{3A132195-6E92-4B7C-8793-4D7CB74DF1A6}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5B42\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{0CBAD3FF-D228-4E57-ACD0-FCFA7C884A07}] => (Allow) LPort=5357
FirewallRules: [UDP Query User{DD56FB32-D174-40D1-99E1-9EC4BDCB9E01}C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe => No File
FirewallRules: [TCP Query User{FEF38814-68D2-40D7-9A3A-9A501BAF41BA}C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe => No File
FirewallRules: [UDP Query User{4B9500AC-4EC7-4AD8-A092-E063EB34F49D}C:\users\janpu\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\janpu\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{7BF45458-499F-472B-817A-39F467AB71A8}C:\users\janpu\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\janpu\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{55854B0E-33A6-4C20-A3E7-CE68BC727316}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS6AD3\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{EDF310D3-4F9A-4F24-A578-2AC67DB4656B}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS6AD3\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{CCC6E92A-9ABA-4BEC-914C-8582139B8F89}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{06939272-B84B-43C2-97C8-09D946B3C939}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{894DE0D5-9929-4C71-90FC-EB80735F22AA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{8D47BA0A-B786-4AEC-ACDD-E401E40F6575}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [UDP Query User{78DB000D-7A5E-4617-A688-C105F8493391}C:\users\janpu\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\janpu\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [TCP Query User{475B1519-C719-43B2-BDA5-0B256CF94D6F}C:\users\janpu\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\janpu\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [TCP Query User{0BB9B182-BFCA-455D-9500-FB16AEB9E1EC}C:\users\janpu\appdata\local\google\chrome\application\chrome.exe] => (Allow) C:\users\janpu\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{C30126B8-59FD-41BB-99A5-5F2FFBA37735}C:\users\janpu\appdata\local\google\chrome\application\chrome.exe] => (Allow) C:\users\janpu\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{579E50F3-1AD8-4D73-B722-9B1A6DBFB48A}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{FAD817C5-54A4-4C41-8899-2E1DC54B5236}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{E9A603F3-821A-4C66-8012-B908282D20C4}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{3C9B0B82-C469-498B-AC50-AF19F4166359}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{9F3986B6-B8F6-47A1-A96E-EF992052ACE6}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{EB656C07-CAD8-402D-A8A3-306B0A568FB9}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{6F3CD004-2B46-4FA2-8AB4-D1F13958418D}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{840F0C3B-E8B7-4CEC-858A-CCE587464073}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{D200DFDE-7788-4249-BD2C-3DD58F6461FA}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe => No File
FirewallRules: [UDP Query User{93AEFC2F-D4B2-435E-858C-4E0A038596B9}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe => No File
FirewallRules: [TCP Query User{59D1A408-8BD8-4648-AFAC-4032FC93617E}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [UDP Query User{651D0533-ED78-42A7-9104-382E52071A4D}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [TCP Query User{8F2895E3-A2F2-4D37-A253-22C0006A42F9}C:\program files (x86)\java\jre1.8.0_261\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_261\bin\javaw.exe => No File
FirewallRules: [UDP Query User{4B77BB9E-FEE2-4E67-B940-5D258935697B}C:\program files (x86)\java\jre1.8.0_261\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_261\bin\javaw.exe => No File
FirewallRules: [TCP Query User{DF95C2F7-AC93-46B5-A5A6-E8736C830907}C:\program files (x86)\java\jre1.8.0_271\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_271\bin\javaw.exe => No File
FirewallRules: [UDP Query User{B130F07C-3F13-4B63-83F6-E736EC6419F1}C:\program files (x86)\java\jre1.8.0_271\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_271\bin\javaw.exe => No File
FirewallRules: [{7CBC9156-89E6-4018-A0DE-BFB26208DD30}] => (Allow) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{98FE9B4A-C9F3-4205-AC0A-410438940237}] => (Allow) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{BBB460E4-C7B8-451E-B9D7-89D4FC87F0B3}] => (Allow) C:\Games\World_of_Tanks_EU\WorldOfTanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{A0531D94-107F-4B60-9057-0304CF616B0E}] => (Allow) C:\Games\World_of_Tanks_EU\WorldOfTanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [TCP Query User{2497F7F2-BA7B-4163-ABE0-FD9B1B810180}C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe] => (Block) C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe => No File
FirewallRules: [UDP Query User{7914AD19-5FD4-4CF1-ABF0-D60556965C8D}C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe] => (Block) C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe => No File
FirewallRules: [{736E7451-DE5A-4AFF-9882-DE21B611F06D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{A191D88C-5D7C-4B8F-8180-170455CFA6F2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D107CC8E-3747-47D5-AACC-11E3A164E613}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{88545252-3C60-4E3B-A363-FAF1B538457C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{4AA3F92F-CAF8-4F7A-BCB4-7CEA2D80BB48}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Feudal Alloy\FeudalAlloy.exe () [File not signed]
FirewallRules: [{3D0C8F62-953F-4F7A-A239-0E55799B99BD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Feudal Alloy\FeudalAlloy.exe () [File not signed]
FirewallRules: [{E46B009D-D01C-4446-AD6C-F02975767D41}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{87CAF3B0-7C54-4052-A588-DB87E6A5C787}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D418FEAF-6F9A-4895-8642-B865007D0B9E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B18B33E7-39E4-4EB5-8F25-F5732B0237C9}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B971C822-9FA6-46D5-82FD-FB50DA79B818}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{8C19406B-9B08-4691-AB17-D979FB041A18}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [TCP Query User{6E0D6B87-D92C-47BB-BC3B-686891C0BE21}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe => No File
FirewallRules: [UDP Query User{8BAFB8C2-D8F6-4B6E-BFB1-0402485A185E}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe => No File
FirewallRules: [TCP Query User{2BA53873-1EF7-4FBF-A1C5-3F55214EE7D3}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [UDP Query User{003AA4C1-C9A0-49E5-BFEB-C5524A23C4EB}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [TCP Query User{484CC236-CE3E-4D5A-85C9-CC7A6881C155}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe => No File
FirewallRules: [UDP Query User{A7E29339-75E5-4FEC-82A9-3EC963D40EB3}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe => No File
FirewallRules: [TCP Query User{41C2D152-FCB2-4DB1-B9E5-4E296658F529}C:\users\janpu\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe
FirewallRules: [UDP Query User{45E3E495-BF0A-4DC7-A8D3-79C05523E82E}C:\users\janpu\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe
FirewallRules: [TCP Query User{A0D661BD-C62E-4D51-AB46-25B5E4BD0E78}C:\program files (x86)\java\jre1.8.0_291\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_291\bin\javaw.exe => No File
FirewallRules: [UDP Query User{7D285C3C-508C-48AD-995B-8EB3F233EFE4}C:\program files (x86)\java\jre1.8.0_291\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_291\bin\javaw.exe => No File
FirewallRules: [{D21E7274-1023-4F4D-89C4-FD33083357E2}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{894E2DFC-1795-4BBF-9475-4DBC5F211A11}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{BD7F8674-D23A-4489-854B-7E3A1AA5D8DE}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS4876\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{98274332-E384-4FC9-ADCD-4B35DC5845D7}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS4876\HPDiagnosticCoreUI.exe => No File
FirewallRules: [TCP Query User{6F4462F0-AFCD-43B0-A979-FC61BF811956}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe
FirewallRules: [UDP Query User{A50244BF-69A2-408A-8E41-5523E825D416}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe
FirewallRules: [{05EB5A40-BADD-4939-95B0-A25C6C4DEE74}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Konung2\Konung2.exe () [File not signed]
FirewallRules: [{31EDEB19-4B41-490C-8EDC-97965F48989C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Konung2\Konung2.exe () [File not signed]
FirewallRules: [TCP Query User{A1614C35-3677-4D6B-95A9-40FEDF527016}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [UDP Query User{68488382-45D4-46DD-9168-5B19588E7CE0}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [TCP Query User{BD65BCC4-0569-4547-B019-8AC04E20766E}C:\users\janpu\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\janpu\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{E15FD5CD-99D6-49CA-8061-9BB4ACE9ABC6}C:\users\janpu\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\janpu\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{7E3EF45A-35E5-48DF-BAFB-8AE9C23BD1E9}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe
FirewallRules: [UDP Query User{03A87F6F-1B30-4C8F-86A2-BB3CF769D083}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe
FirewallRules: [{0E0A75B9-7DE2-4340-BF8D-BA4F2F7ED158}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{105CD9C7-46B7-4E24-B761-9F941697AFC6}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{7B7E1768-BBDF-4565-8C6A-B9AC20D49900}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{40C0E4D6-1A2B-4D27-B30D-F8DE085AF82B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{52EA9F4B-40E7-4E5E-8C93-407948E499BE}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{D6ACA124-E19A-4FB9-B91A-5305FD844484}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{B661D2DD-7A7D-486B-8974-32884E35E5D8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Assassins Creed\AssassinsCreed_Game.exe (Ubisoft) [File not signed]
FirewallRules: [{12868C77-4631-4CF3-A491-28047DEFD178}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Assassins Creed\AssassinsCreed_Game.exe (Ubisoft) [File not signed]
FirewallRules: [TCP Query User{6B7DE89A-11A7-4E81-8BB2-7DA9B371DCC5}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [UDP Query User{496CD1EF-60D7-4698-BA34-8564A7E96B63}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [TCP Query User{514A309C-EA84-415A-AE6D-5E022B11D3D2}C:\program files (x86)\garmin\express\cefsharp.browsersubprocess.exe] => (Allow) C:\program files (x86)\garmin\express\cefsharp.browsersubprocess.exe (The CefSharp Authors) [File not signed]
FirewallRules: [UDP Query User{FE3F5224-D9C2-47FA-9E83-CC837B671C17}C:\program files (x86)\garmin\express\cefsharp.browsersubprocess.exe] => (Allow) C:\program files (x86)\garmin\express\cefsharp.browsersubprocess.exe (The CefSharp Authors) [File not signed]
FirewallRules: [{DCD7C308-BC45-4C76-8370-3CECBD88CF5E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Plants Vs Zombies\PlantsVsZombies.exe (PopCap Games -> )
FirewallRules: [{8361FB08-E6A1-4340-89C2-11B895E9AC25}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Plants Vs Zombies\PlantsVsZombies.exe (PopCap Games -> )
FirewallRules: [{20DCE62E-C83F-41D0-BD59-F2F03C0B2A3B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9B04AB2A-4E6D-4848-A342-91615660E99F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{875AA0E1-7B80-4CF1-980C-77DC3A97A929}C:\program files (x86)\java\jre-1.8\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre-1.8\bin\javaw.exe => No File
FirewallRules: [UDP Query User{F2A7B976-2417-438A-9F6B-8F1CC62E6A9B}C:\program files (x86)\java\jre-1.8\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre-1.8\bin\javaw.exe => No File
FirewallRules: [TCP Query User{3F8FB561-E370-4646-88DF-267A97BA021B}C:\users\janpu\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe] => (Block) C:\users\janpu\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{6D546D94-9BC5-4F3C-920A-0A7D3E723260}C:\users\janpu\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe] => (Block) C:\users\janpu\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe
FirewallRules: [{A97DFA4D-C7B3-4CB5-8761-F14312A4D649}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1BE9BDBC-4201-42B6-B364-28D23699B985}] => (Allow) LPort=54925
FirewallRules: [TCP Query User{4BD3A83B-F972-4276-9143-9C5E6DC094E7}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [UDP Query User{E5BBC319-F968-4021-A545-0FAA5A3B0632}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [{6AED1458-0B1B-4004-95D5-2FF8E95B8412}] => (Allow) LPort=54950
FirewallRules: [{D4AFED58-2EDA-4D78-9E97-7409C23D5851}] => (Allow) LPort=54955
FirewallRules: [{C56DE65F-4D6E-4078-BF67-5B9F986A788D}] => (Allow) C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.exe (iPSMonitor) [File not signed]
FirewallRules: [{18CBCD55-E7E7-443F-BCD0-BFE52F39DB31}] => (Allow) C:\Intel\i.exe () [File not signed]
FirewallRules: [{06DC692E-D62F-41E2-A0FF-D564065524E8}] => (Allow) C:\Intel\i.exe () [File not signed]
FirewallRules: [{8E3DA043-0BD3-4F9B-9408-D9D555182923}] => (Allow) C:\Intel\i1.exe () [File not signed]
FirewallRules: [{9ACF918F-7BDE-4C4E-969E-62A458869AFF}] => (Allow) C:\Intel\i1.exe () [File not signed]
FirewallRules: [{159F11A7-2B92-4BC2-8821-B3B325463202}] => (Allow) C:\Intel\q.exe () [File not signed]
FirewallRules: [{6282808D-AA43-403F-8634-D50C63CC01D8}] => (Allow) C:\Intel\i3.exe () [File not signed]
FirewallRules: [{EED5C83E-4ACC-4051-9BBE-7E8614F478E5}] => (Allow) C:\Intel\q.exe () [File not signed]
FirewallRules: [{0F01A052-6CB2-494D-9BF1-7750687191FF}] => (Allow) C:\Intel\i2.exe () [File not signed]
FirewallRules: [{600B4B68-9965-47F8-8459-96BD1D077548}] => (Allow) C:\Intel\i2.exe () [File not signed]
FirewallRules: [{A14EBC14-812E-4156-9B02-1E7EF3423581}] => (Allow) C:\Intel\i4.exe () [File not signed]
FirewallRules: [{910B8E37-997C-4FA8-970A-669A30697C42}] => (Allow) C:\Intel\m\llm.exe => No File
FirewallRules: [{85EE6BED-A9C2-4EF4-B284-C99A431CF86F}] => (Allow) C:\Intel\m\sbr.exe => No File
FirewallRules: [{6A943F49-C10E-4735-8ACA-E0F080C63745}] => (Allow) C:\Intel\q1.exe () [File not signed]
FirewallRules: [{6B7011E0-62A8-4215-B6AD-B6A06BC1D400}] => (Allow) C:\Intel\m\txr.exe => No File
FirewallRules: [{8FCA84AE-EC80-428F-BEA1-26C71AE43787}] => (Allow) C:\Intel\q2.exe () [File not signed]
FirewallRules: [{58FC9A84-1738-4E93-BD66-E54C2754C3DC}] => (Allow) C:\Intel\q4.exe () [File not signed]
FirewallRules: [{52E2796B-87EF-4B2A-9905-10F44C0CA3D3}] => (Allow) C:\Intel\i4.exe () [File not signed]
FirewallRules: [{1720AD8D-DE0B-485A-859E-426452CB03E7}] => (Allow) C:\Intel\q4.exe () [File not signed]
FirewallRules: [{40DE83A6-E024-49D0-8224-CF06DE05C361}] => (Allow) C:\Intel\m\xrm.exe => No File
FirewallRules: [{F955A898-9520-4FDC-BB45-2E91F892B4A0}] => (Allow) C:\Intel\q1.exe () [File not signed]
FirewallRules: [{843B7278-7C61-4A42-8A3A-9F5EF7B6EBCB}] => (Allow) C:\Intel\m\txr.exe => No File
FirewallRules: [{53FE646A-D00A-4B8B-BB7C-CC8849EDB0D0}] => (Allow) C:\Intel\q3.exe () [File not signed]

Hasicz · #21 Příspěvek od **Hasicz** » 06 bře 2025 15:51

Uf, tak smazáno snad vše co jsem našel.

#22 Příspěvek od **JaRon** » 06 bře 2025 17:24

SUPER, vycisti PC s NPE https://support.norton.com/sp/static/ex ... s/npe.html
Ja skusim vytvorit mozno zaverecny fixlist

#23 Příspěvek od **JaRon** » 06 bře 2025 17:49

tak snad posledny fixlist - aj s navodom

Tvorba fixlistu pro FRST
•Spustte poznamkovy blok (Start-spustit-notepad)
•Zkopirujte skript >>

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:
FirewallRules: [{18CBCD55-E7E7-443F-BCD0-BFE52F39DB31}] => (Allow) C:\Intel\i.exe () [File not signed]
FirewallRules: [{06DC692E-D62F-41E2-A0FF-D564065524E8}] => (Allow) C:\Intel\i.exe () [File not signed]
FirewallRules: [{8E3DA043-0BD3-4F9B-9408-D9D555182923}] => (Allow) C:\Intel\i1.exe () [File not signed]
FirewallRules: [{9ACF918F-7BDE-4C4E-969E-62A458869AFF}] => (Allow) C:\Intel\i1.exe () [File not signed]
FirewallRules: [{159F11A7-2B92-4BC2-8821-B3B325463202}] => (Allow) C:\Intel\q.exe () [File not signed]
FirewallRules: [{6282808D-AA43-403F-8634-D50C63CC01D8}] => (Allow) C:\Intel\i3.exe () [File not signed]
FirewallRules: [{EED5C83E-4ACC-4051-9BBE-7E8614F478E5}] => (Allow) C:\Intel\q.exe () [File not signed]
FirewallRules: [{0F01A052-6CB2-494D-9BF1-7750687191FF}] => (Allow) C:\Intel\i2.exe () [File not signed]
FirewallRules: [{600B4B68-9965-47F8-8459-96BD1D077548}] => (Allow) C:\Intel\i2.exe () [File not signed]
FirewallRules: [{A14EBC14-812E-4156-9B02-1E7EF3423581}] => (Allow) C:\Intel\i4.exe () [File not signed]
FirewallRules: [{910B8E37-997C-4FA8-970A-669A30697C42}] => (Allow) C:\Intel\m\llm.exe => No File
FirewallRules: [{85EE6BED-A9C2-4EF4-B284-C99A431CF86F}] => (Allow) C:\Intel\m\sbr.exe => No File
FirewallRules: [{6A943F49-C10E-4735-8ACA-E0F080C63745}] => (Allow) C:\Intel\q1.exe () [File not signed]
FirewallRules: [{6B7011E0-62A8-4215-B6AD-B6A06BC1D400}] => (Allow) C:\Intel\m\txr.exe => No File
FirewallRules: [{8FCA84AE-EC80-428F-BEA1-26C71AE43787}] => (Allow) C:\Intel\q2.exe () [File not signed]
FirewallRules: [{58FC9A84-1738-4E93-BD66-E54C2754C3DC}] => (Allow) C:\Intel\q4.exe () [File not signed]
FirewallRules: [{52E2796B-87EF-4B2A-9905-10F44C0CA3D3}] => (Allow) C:\Intel\i4.exe () [File not signed]
FirewallRules: [{1720AD8D-DE0B-485A-859E-426452CB03E7}] => (Allow) C:\Intel\q4.exe () [File not signed]
FirewallRules: [{40DE83A6-E024-49D0-8224-CF06DE05C361}] => (Allow) C:\Intel\m\xrm.exe => No File
FirewallRules: [{F955A898-9520-4FDC-BB45-2E91F892B4A0}] => (Allow) C:\Intel\q1.exe () [File not signed]
FirewallRules: [{843B7278-7C61-4A42-8A3A-9F5EF7B6EBCB}] => (Allow) C:\Intel\m\txr.exe => No File
FirewallRules: [{53FE646A-D00A-4B8B-BB7C-CC8849EDB0D0}] => (Allow) C:\Intel\q3.exe () [File not signed]
FirewallRules: [{0E0A75B9-7DE2-4340-BF8D-BA4F2F7ED158}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{105CD9C7-46B7-4E24-B761-9F941697AFC6}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{7B7E1768-BBDF-4565-8C6A-B9AC20D49900}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{40C0E4D6-1A2B-4D27-B30D-F8DE085AF82B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{52EA9F4B-40E7-4E5E-8C93-407948E499BE}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{D6ACA124-E19A-4FB9-B91A-5305FD844484}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{BD7F8674-D23A-4489-854B-7E3A1AA5D8DE}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS4876\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{98274332-E384-4FC9-ADCD-4B35DC5845D7}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS4876\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{B685150F-0B6F-4801-9D82-DBE1F4050C92}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5C10\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{12A98782-0BE8-42EA-B320-BAE3D3F8DB21}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5C10\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{64896ED3-DB9F-4929-A92A-E76467659B01}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5B42\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{3A132195-6E92-4B7C-8793-4D7CB74DF1A6}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5B42\HPDiagnosticCoreUI.exe => No File
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879 [272]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [10]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [10]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [10]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [480]
Task: {0D642530-7604-435C-87E3-FF0DAFFBDD1A} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager1 => C:\Intel\e.vbs [489 2025-03-06] () [File not signed]
Task: {EC991080-F0A0-4318-A514-4193EE9FCF86} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3q1 => C:\Intel\q2.exe [1173682082 2025-03-05] () [File not signed] <==== ATTENTION
Task: {D8384EA2-5A40-4CB2-B272-FDFECDD66587} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3x1 => C:\Intel\i2.exe [1207112002 2025-03-05] () [File not signed] <==== ATTENTION
Task: {9A432E05-A5C5-481B-ACA9-09D6D0F69CCE} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx1x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {29446CB0-3B1C-438D-81D3-256DA515D8D7} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx2x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {99B33611-DF2A-4B79-9654-B0668F1A912A} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx3x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f1.log"
Task: {FB826E1E-3C4C-418C-8543-CE684D04D494} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx4x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {7BED6269-0360-448A-B1C0-C21462F8A95E} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx5x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f2.log"
Task: {DD8C0BE7-E830-45F0-AD42-22F0708306AB} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx6x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {437E1111-DA89-4B3F-9339-48FC5BF8D8D1} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx2x1 => C:\Intel\logs\p1.exe [1205936452 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p1_1.log" <==== ATTENTION
Task: {92C949A0-43B3-4CED-B315-3E509D37D2CB} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx3x1 => C:\Intel\logs\p2.exe [1205950788 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p2_1.log" <==== ATTENTION
Task: {0236AF91-8A93-448F-B120-DEC398E1844C} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx4x1 => C:\Intel\logs\p3.exe [1206091076 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p3_1.log" <==== ATTENTION
Task: {9152D077-B4E1-4A6A-BE1D-812013DCF2CD} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx6x1 => C:\Intel\logs\p6.exe [1206108484 2025-03-02] () [File not signed] -> /UseChromeProfileFolder 1 /ChromeProfileFolder "C:\Users\janpu\AppData\Local\Google\Chrome\User Data" /stab "C:\Intel\logs\p6_1.log" <==== ATTENTION
Task: {A002858C-912E-456A-AF6E-D70D5CBE76CA} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx9x1 => C:\Intel\logs\p7.exe [1206088516 2025-03-02] (Google LLC) [File not signed] -> /stab "C:\Intel\logs\p7_1.log" <==== ATTENTION

Task: {D138F6D3-EEA0-4734-9761-E2A33025166D} - \Avast Software\Overseer -> No File <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Policies\Explorer: []
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {8979b10e-463b-11ec-8f81-d43d7eb13568} - "I:\Setup.exe"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {8979b300-463b-11ec-8f81-d43d7eb13568} - "K:\autorun.exe"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {9f60999e-805a-11ec-8f8d-d43d7eb13568} - "M:\_AUTORUN\AUTORUN.EXE" 


EmptyTemp:
Reboot:
End

•Ulozte vytvoreny TXT jako fixlist.txt
•Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe
•Kliknete na Fix
•Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Hasicz · #24 Příspěvek od **Hasicz** » 06 bře 2025 21:44

Ten NPE tedy vymazal i FRST, takže sem ho znova stáhnul.

Fix result of Farbar Recovery Scan Tool (x64) Version: 06-03-2025
Ran by janpu (06-03-2025 21:30:29) Run:1
Running from C:\Users\janpu\Desktop
Loaded Profiles: janpu
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
FirewallRules: [{18CBCD55-E7E7-443F-BCD0-BFE52F39DB31}] => (Allow) C:\Intel\i.exe () [File not signed]
FirewallRules: [{06DC692E-D62F-41E2-A0FF-D564065524E8}] => (Allow) C:\Intel\i.exe () [File not signed]
FirewallRules: [{8E3DA043-0BD3-4F9B-9408-D9D555182923}] => (Allow) C:\Intel\i1.exe () [File not signed]
FirewallRules: [{9ACF918F-7BDE-4C4E-969E-62A458869AFF}] => (Allow) C:\Intel\i1.exe () [File not signed]
FirewallRules: [{159F11A7-2B92-4BC2-8821-B3B325463202}] => (Allow) C:\Intel\q.exe () [File not signed]
FirewallRules: [{6282808D-AA43-403F-8634-D50C63CC01D8}] => (Allow) C:\Intel\i3.exe () [File not signed]
FirewallRules: [{EED5C83E-4ACC-4051-9BBE-7E8614F478E5}] => (Allow) C:\Intel\q.exe () [File not signed]
FirewallRules: [{0F01A052-6CB2-494D-9BF1-7750687191FF}] => (Allow) C:\Intel\i2.exe () [File not signed]
FirewallRules: [{600B4B68-9965-47F8-8459-96BD1D077548}] => (Allow) C:\Intel\i2.exe () [File not signed]
FirewallRules: [{A14EBC14-812E-4156-9B02-1E7EF3423581}] => (Allow) C:\Intel\i4.exe () [File not signed]
FirewallRules: [{910B8E37-997C-4FA8-970A-669A30697C42}] => (Allow) C:\Intel\m\llm.exe => No File
FirewallRules: [{85EE6BED-A9C2-4EF4-B284-C99A431CF86F}] => (Allow) C:\Intel\m\sbr.exe => No File
FirewallRules: [{6A943F49-C10E-4735-8ACA-E0F080C63745}] => (Allow) C:\Intel\q1.exe () [File not signed]
FirewallRules: [{6B7011E0-62A8-4215-B6AD-B6A06BC1D400}] => (Allow) C:\Intel\m\txr.exe => No File
FirewallRules: [{8FCA84AE-EC80-428F-BEA1-26C71AE43787}] => (Allow) C:\Intel\q2.exe () [File not signed]
FirewallRules: [{58FC9A84-1738-4E93-BD66-E54C2754C3DC}] => (Allow) C:\Intel\q4.exe () [File not signed]
FirewallRules: [{52E2796B-87EF-4B2A-9905-10F44C0CA3D3}] => (Allow) C:\Intel\i4.exe () [File not signed]
FirewallRules: [{1720AD8D-DE0B-485A-859E-426452CB03E7}] => (Allow) C:\Intel\q4.exe () [File not signed]
FirewallRules: [{40DE83A6-E024-49D0-8224-CF06DE05C361}] => (Allow) C:\Intel\m\xrm.exe => No File
FirewallRules: [{F955A898-9520-4FDC-BB45-2E91F892B4A0}] => (Allow) C:\Intel\q1.exe () [File not signed]
FirewallRules: [{843B7278-7C61-4A42-8A3A-9F5EF7B6EBCB}] => (Allow) C:\Intel\m\txr.exe => No File
FirewallRules: [{53FE646A-D00A-4B8B-BB7C-CC8849EDB0D0}] => (Allow) C:\Intel\q3.exe () [File not signed]
FirewallRules: [{0E0A75B9-7DE2-4340-BF8D-BA4F2F7ED158}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{105CD9C7-46B7-4E24-B761-9F941697AFC6}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{7B7E1768-BBDF-4565-8C6A-B9AC20D49900}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{40C0E4D6-1A2B-4D27-B30D-F8DE085AF82B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{52EA9F4B-40E7-4E5E-8C93-407948E499BE}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{D6ACA124-E19A-4FB9-B91A-5305FD844484}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{BD7F8674-D23A-4489-854B-7E3A1AA5D8DE}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS4876\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{98274332-E384-4FC9-ADCD-4B35DC5845D7}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS4876\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{B685150F-0B6F-4801-9D82-DBE1F4050C92}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5C10\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{12A98782-0BE8-42EA-B320-BAE3D3F8DB21}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5C10\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{64896ED3-DB9F-4929-A92A-E76467659B01}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5B42\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{3A132195-6E92-4B7C-8793-4D7CB74DF1A6}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5B42\HPDiagnosticCoreUI.exe => No File
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879 [272]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [10]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [10]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [10]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [480]
Task: {0D642530-7604-435C-87E3-FF0DAFFBDD1A} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager1 => C:\Intel\e.vbs [489 2025-03-06] () [File not signed]
Task: {EC991080-F0A0-4318-A514-4193EE9FCF86} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3q1 => C:\Intel\q2.exe [1173682082 2025-03-05] () [File not signed] <==== ATTENTION
Task: {D8384EA2-5A40-4CB2-B272-FDFECDD66587} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3x1 => C:\Intel\i2.exe [1207112002 2025-03-05] () [File not signed] <==== ATTENTION
Task: {9A432E05-A5C5-481B-ACA9-09D6D0F69CCE} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx1x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {29446CB0-3B1C-438D-81D3-256DA515D8D7} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx2x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {99B33611-DF2A-4B79-9654-B0668F1A912A} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx3x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f1.log"
Task: {FB826E1E-3C4C-418C-8543-CE684D04D494} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx4x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {7BED6269-0360-448A-B1C0-C21462F8A95E} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx5x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f2.log"
Task: {DD8C0BE7-E830-45F0-AD42-22F0708306AB} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx6x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {437E1111-DA89-4B3F-9339-48FC5BF8D8D1} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx2x1 => C:\Intel\logs\p1.exe [1205936452 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p1_1.log" <==== ATTENTION
Task: {92C949A0-43B3-4CED-B315-3E509D37D2CB} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx3x1 => C:\Intel\logs\p2.exe [1205950788 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p2_1.log" <==== ATTENTION
Task: {0236AF91-8A93-448F-B120-DEC398E1844C} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx4x1 => C:\Intel\logs\p3.exe [1206091076 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p3_1.log" <==== ATTENTION
Task: {9152D077-B4E1-4A6A-BE1D-812013DCF2CD} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx6x1 => C:\Intel\logs\p6.exe [1206108484 2025-03-02] () [File not signed] -> /UseChromeProfileFolder 1 /ChromeProfileFolder "C:\Users\janpu\AppData\Local\Google\Chrome\User Data" /stab "C:\Intel\logs\p6_1.log" <==== ATTENTION
Task: {A002858C-912E-456A-AF6E-D70D5CBE76CA} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx9x1 => C:\Intel\logs\p7.exe [1206088516 2025-03-02] (Google LLC) [File not signed] -> /stab "C:\Intel\logs\p7_1.log" <==== ATTENTION

Task: {D138F6D3-EEA0-4734-9761-E2A33025166D} - \Avast Software\Overseer -> No File <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Policies\Explorer: []
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {8979b10e-463b-11ec-8f81-d43d7eb13568} - "I:\Setup.exe"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {8979b300-463b-11ec-8f81-d43d7eb13568} - "K:\autorun.exe"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {9f60999e-805a-11ec-8f8d-d43d7eb13568} - "M:\_AUTORUN\AUTORUN.EXE"

EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{18CBCD55-E7E7-443F-BCD0-BFE52F39DB31}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{06DC692E-D62F-41E2-A0FF-D564065524E8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8E3DA043-0BD3-4F9B-9408-D9D555182923}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9ACF918F-7BDE-4C4E-969E-62A458869AFF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{159F11A7-2B92-4BC2-8821-B3B325463202}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6282808D-AA43-403F-8634-D50C63CC01D8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EED5C83E-4ACC-4051-9BBE-7E8614F478E5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0F01A052-6CB2-494D-9BF1-7750687191FF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{600B4B68-9965-47F8-8459-96BD1D077548}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A14EBC14-812E-4156-9B02-1E7EF3423581}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{910B8E37-997C-4FA8-970A-669A30697C42}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{85EE6BED-A9C2-4EF4-B284-C99A431CF86F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6A943F49-C10E-4735-8ACA-E0F080C63745}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6B7011E0-62A8-4215-B6AD-B6A06BC1D400}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8FCA84AE-EC80-428F-BEA1-26C71AE43787}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{58FC9A84-1738-4E93-BD66-E54C2754C3DC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{52E2796B-87EF-4B2A-9905-10F44C0CA3D3}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1720AD8D-DE0B-485A-859E-426452CB03E7}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{40DE83A6-E024-49D0-8224-CF06DE05C361}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F955A898-9520-4FDC-BB45-2E91F892B4A0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{843B7278-7C61-4A42-8A3A-9F5EF7B6EBCB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{53FE646A-D00A-4B8B-BB7C-CC8849EDB0D0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0E0A75B9-7DE2-4340-BF8D-BA4F2F7ED158}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{105CD9C7-46B7-4E24-B761-9F941697AFC6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7B7E1768-BBDF-4565-8C6A-B9AC20D49900}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{40C0E4D6-1A2B-4D27-B30D-F8DE085AF82B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{52EA9F4B-40E7-4E5E-8C93-407948E499BE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D6ACA124-E19A-4FB9-B91A-5305FD844484}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BD7F8674-D23A-4489-854B-7E3A1AA5D8DE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{98274332-E384-4FC9-ADCD-4B35DC5845D7}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B685150F-0B6F-4801-9D82-DBE1F4050C92}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{12A98782-0BE8-42EA-B320-BAE3D3F8DB21}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{64896ED3-DB9F-4929-A92A-E76467659B01}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3A132195-6E92-4B7C-8793-4D7CB74DF1A6}" => removed successfully
C:\ProgramData\Reprise => ":wupeogjxldtlfudivq`qsp`27hfm" ADS removed successfully
C:\ProgramData\TEMP => ":56E2E879" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini => ":B1DA6C571C" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk => ":A1B76439FE" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk => ":BE32D07BC5" ADS removed successfully
C:\Users\Public\Shared Files => ":VersionCache" ADS removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0D642530-7604-435C-87E3-FF0DAFFBDD1A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0D642530-7604-435C-87E3-FF0DAFFBDD1A}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP Manager1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EC991080-F0A0-4318-A514-4193EE9FCF86}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EC991080-F0A0-4318-A514-4193EE9FCF86}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3q1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP Manager3q1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D8384EA2-5A40-4CB2-B272-FDFECDD66587}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8384EA2-5A40-4CB2-B272-FDFECDD66587}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP Manager3x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9A432E05-A5C5-481B-ACA9-09D6D0F69CCE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9A432E05-A5C5-481B-ACA9-09D6D0F69CCE}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx1x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx1x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{29446CB0-3B1C-438D-81D3-256DA515D8D7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{29446CB0-3B1C-438D-81D3-256DA515D8D7}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx2x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx2x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{99B33611-DF2A-4B79-9654-B0668F1A912A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{99B33611-DF2A-4B79-9654-B0668F1A912A}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx3x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx3x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FB826E1E-3C4C-418C-8543-CE684D04D494}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FB826E1E-3C4C-418C-8543-CE684D04D494}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx4x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx4x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7BED6269-0360-448A-B1C0-C21462F8A95E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7BED6269-0360-448A-B1C0-C21462F8A95E}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx5x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx5x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DD8C0BE7-E830-45F0-AD42-22F0708306AB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD8C0BE7-E830-45F0-AD42-22F0708306AB}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx6x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx6x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{437E1111-DA89-4B3F-9339-48FC5BF8D8D1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{437E1111-DA89-4B3F-9339-48FC5BF8D8D1}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx2x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx2x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{92C949A0-43B3-4CED-B315-3E509D37D2CB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{92C949A0-43B3-4CED-B315-3E509D37D2CB}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx3x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx3x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0236AF91-8A93-448F-B120-DEC398E1844C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0236AF91-8A93-448F-B120-DEC398E1844C}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx4x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx4x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9152D077-B4E1-4A6A-BE1D-812013DCF2CD}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9152D077-B4E1-4A6A-BE1D-812013DCF2CD}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx6x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx6x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A002858C-912E-456A-AF6E-D70D5CBE76CA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A002858C-912E-456A-AF6E-D70D5CBE76CA}" => removed successfully
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx9x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx9x1" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{D138F6D3-EEA0-4734-9761-E2A33025166D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D138F6D3-EEA0-4734-9761-E2A33025166D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Avast Software\Overseer" => removed successfully

"C:\WINDOWS\system32\GroupPolicy\Machine" Folder move:

C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\ProgramData\NTUSER.pol => moved successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKU\S-1-5-21-447794926-783580724-1362418113-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\" => removed successfully
HKU\S-1-5-21-447794926-783580724-1362418113-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8979b10e-463b-11ec-8f81-d43d7eb13568} => removed successfully
HKU\S-1-5-21-447794926-783580724-1362418113-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8979b300-463b-11ec-8f81-d43d7eb13568} => removed successfully
HKU\S-1-5-21-447794926-783580724-1362418113-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9f60999e-805a-11ec-8f8d-d43d7eb13568} => removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 786432 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 13763066 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 9071251 B
Edge => 0 B
Chrome => 770493339 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 1180 B
janpu => 357843 B

RecycleBin => 3141837270 B
EmptyTemp: => 3.7 GB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 21:31:13 ====

#25 Příspěvek od **altrok** » 06 bře 2025 21:48

Super, to vypada hezky. Dej nam prosim te jeste nove logy FRST.txt i Addition.txt

Podarilo se ti zaheslovany archiv z C:\Intel nekam uploadnout?

Pouzivas jen Windows Defender - zkontroluj si, ze v nem nejsou vyjimky (casto si malware dela vyjimky v antivirech, aby jejich slozku ignoroval).

Hasicz · #26 Příspěvek od **Hasicz** » 06 bře 2025 22:07

intel.rar uploaduju, za chvilku sem hodim odkaz. Ještě koukám, že je tu jeden soubor 2025-02-12 13:17 - 2020-04-17 13:39 - 000419228 __RSH C:\bootmgr který má atribut RSH, a nesmazal jsem ho. Mám ho také smazat?

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-03-2025
Ran by janpu (administrator) on HONZA-PC (MSI MS-7752) (06-03-2025 21:55:45)
Running from C:\Users\janpu\Desktop\FRST64.exe
Loaded Profiles: janpu
Platform: Microsoft Windows 10 Home Version 22H2 19045.5487 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe
(C:\Program Files (x86)\Garmin\Express\express.exe ->) (The CefSharp Authors) [File not signed] C:\Program Files (x86)\Garmin\Express\CefSharp.BrowserSubprocess.exe <2>
(C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\105.0.1.0\crashpad_handler.exe
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(explorer.exe ->) (Finkit d.o.o. -> Finkit d.o.o.) C:\Program Files (x86)\ManicTime\ManicTime.exe
(explorer.exe ->) (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Express\express.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe <37>
(explorer.exe ->) (Google LLC -> Google LLC.) C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe <7>
(explorer.exe ->) (iPSMonitor) [File not signed] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Kilonova LLC -> Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) () [File not signed] C:\Program Files (x86)\Brother\iPrint&Scan\UsbAppControl\USBAppControl.exe
(services.exe ->) () [File not signed] C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl\WorkflowAppControl.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\BrYNSvc.exe
(services.exe ->) (Flexera Software LLC -> Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(services.exe ->) (TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2501.1.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-21] (Kilonova LLC -> )
HKLM-x32\...\Run: [I19B] => C:\WINDOWS\twain_32\Brimi19b\Common\TwDsUiLaunch.exe [103152 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4009984 2024-05-31] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3588608 2021-04-02] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM\Software\Policies\...\system: [UploadUserActivities] 0
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe [64393824 2025-03-05] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe [64393824 2025-03-05] (Google LLC -> Google LLC.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [ManicTimeC34F57B2DA6E6758] => C:\Program Files (x86)\ManicTime\ManicTime.exe [151968 2023-04-19] (Finkit d.o.o. -> Finkit d.o.o.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4435552 2025-01-28] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe [64393824 2025-03-05] (Google LLC -> Google LLC.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [479632 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [Spotify] => C:\Users\janpu\AppData\Roaming\Spotify\Spotify.exe [36483400 2025-02-28] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [MicrosoftEdgeAutoLaunch_B290F089DC243CBB434D3F1388B3FDD9] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4088392 2025-02-27] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [28999440 2024-11-06] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GoogleUpdaterTaskUser135.0.7023.4] => C:\Users\janpu\AppData\Local\Google\GoogleUpdater\135.0.7023.4\updater.exe [5745760 2025-02-25] (Google LLC -> Google LLC)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe [64393824 2025-03-05] (Google LLC -> Google LLC.)
HKLM\...\Print\Monitors\HP B011 Status Monitor: C:\WINDOWS\System32\hpinkstsB011LM.dll [331664 2012-06-13] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3520 series): C:\WINDOWS\System32\HPDiscoPMB011.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\...\AppCompatFlags\Custom\KONUNG.EXE: [{5e06ebb7-4976-4bd0-96ff-4d953f97c430}.sdb] -> GOG.com Konung
HKLM\Software\...\AppCompatFlags\InstalledSDB\{5e06ebb7-4976-4bd0-96ff-4d953f97c430}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{5e06ebb7-4976-4bd0-96ff-4d953f97c430}.sdb [2015-01-20]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Brother iPSMonitor.lnk [2025-02-11]
ShortcutTarget: Brother iPSMonitor.lnk -> C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.exe (iPSMonitor) [File not signed]

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {5F683216-5151-4E6C-BB2D-AC818DCD0C37} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [30992 2024-11-06] (Garmin International, Inc. -> )
Task: {7A21660C-9111-45F8-9069-0AEF153464C6} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem135.0.7023.0{5AE63604-347D-44F1-B060-082F7AE80623} => C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
Task: {DA7525FC-3F50-49FC-89B3-7C4DE2EE832F} - System32\Tasks\GoogleUser\GoogleUpdater\GoogleUpdaterTaskUser135.0.7023.4{E7502C00-005D-4552-A641-D9D9940EC786} => C:\Users\janpu\AppData\Local\Google\GoogleUpdater\135.0.7023.4\updater.exe [5745760 2025-02-25] (Google LLC -> Google LLC)
Task: {E6D831CC-50BC-4035-984E-4A0DA6C9AF5D} - System32\Tasks\Microsoft\Office\Office Apps Prewarm => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {F4CF132B-CF47-4F94-89EA-10C3CEDC253A} - System32\Tasks\Microsoft\Office\Office Apps Prewarm Recurring => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {98A2AD42-20BB-4878-9909-5ED49B1B9D53} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {D4587D31-C5C2-40F9-8081-740EF334B177} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [67248 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {984D6EF5-BDD0-4413-9058-CC6F6970C97A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {07E695FF-97AC-4A75-A324-C1F5CD462E99} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {DAEE2E8D-776E-41B3-B4DC-A2A6195BD8FC} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {3BF81EDF-DC02-4B6C-BB20-60888588364F} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [194672 2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {16F6DB12-5C5A-4292-BBF6-C4BEBE1AD88B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B745F724-91C2-4A70-8C3C-0DD99CBDBAE9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5222F27E-3FD8-43A1-A8EE-2C65BB39F0BF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {50F8BD85-9D4A-455C-A3BF-0CD35115E48A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FDFDE73C-9399-4B2B-AB58-5B1E054E1D07} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {00035BE3-73CE-4A62-9C05-E4D6BB469192} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB" (No File)
Task: {D176E9DA-F6ED-4685-BA42-1DFD3AEA8B0F} - System32\Tasks\OneDrive Startup Task-S-1-5-21-447794926-783580724-1362418113-1001 => C:\Users\janpu\AppData\Local\Microsoft\OneDrive\25.020.0202.0001\OneDriveLauncher.exe [669200 2025-03-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {59618173-4863-48D1-91C1-02F0C08EEB43} - System32\Tasks\update-S-1-5-21-447794926-783580724-1362418113-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {09E486CA-F36E-40FC-AA29-30E9F1A34C8E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\update-S-1-5-21-447794926-783580724-1362418113-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{40fd16de-b690-4570-96d5-47bd9a5faff5}: [NameServer] 8.8.8.8,1.1.1.1
Tcpip\..\Interfaces\{92f86d74-d80c-11e7-8ed6-806e6f6e6963}: [NameServer] 8.8.8.8,1.1.1.1
Tcpip\..\Interfaces\{adc844b1-6e4f-478a-8153-e7ba5506b3b7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{b99221cf-b112-4d46-bb60-e6cd1e0564f2}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{faadc2b0-a222-44d8-bb08-dc38ca091ec4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{faadc2b0-a222-44d8-bb08-dc38ca091ec4}: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge Profile: C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default [2025-03-06]
Edge HomePage: Default -> hxxp://www.seznam.cz/
Edge StartupUrls: Default -> "hxxp://www.seznam.cz/","hxxps://web.whatsapp.c ... om/sharing"
Edge Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-04]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Edge relevant text changes) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx
Edge Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mhhmkoogppocgeaedlcikkhenhagbmnj [2025-03-04]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx
Edge Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2025-03-05]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx

FireFox:
========
FF DefaultProfile: 8ji3u4k7.default
FF ProfilePath: C:\Users\janpu\AppData\Roaming\Mozilla\Firefox\Profiles\8ji3u4k7.default [2025-03-06]
FF ProfilePath: C:\Users\janpu\AppData\Roaming\Mozilla\Firefox\Profiles\iedwyphd.default-release [2025-03-06]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google Inc -> Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\dtplugin\npDeployJava1.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\plugin2\npjp2.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default [2025-03-06]
CHR Notifications: Default -> hxxps://app.zonky.cz; hxxps://calendar.google.com; hxxps://drive.google.com
CHR HomePage: Default -> hxxps://www.google.cz/?gfe_rd=cr&ei=C9WLVbPsOui ... gws_rd=ssl
CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3289075&SearchSource=48&CUI=UN49515189314555504&UM=1","hxxp://www.mystartsearch.com/?type=hp&ts=14262 ... google.cz/"
CHR Session Restore: Default -> is enabled.
CHR Extension: (Překladač Google) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-09-09]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-02-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (LastPass: Free Password Manager) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2025-02-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-23]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-02]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Hlídač Shopů) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-02-12]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Streak CRM for Gmail) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2025-03-05]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Guest Profile [2025-03-06]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-03-06]
CHR Notifications: Profile 1 -> hxxps://meet.google.com; hxxps://web.whatsapp.com
CHR HomePage: Profile 1 -> hxxp://www.google.com/
CHR StartupUrls: Profile 1 -> "hxxps://www.google.cz/","hxxp://www.seznam.cz/" ... trubin.cz/"
CHR Session Restore: Profile 1 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-03-05]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (LibreCAD on rollApp) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gbalmmdepliaghihofedeopaacjfcgab [2018-02-03]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-04]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (FormApps Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2024-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-22]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Image Size Info) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\oihdhfbfoagfkpcncinlbhfdgpegcigf [2024-07-17]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Hlídač Shopů) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-02-12]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10 [2025-03-06]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-09-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-09-16]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11 [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-02-20]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-01-13]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-01-13]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-01-13]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2 [2025-03-06]
CHR Session Restore: Profile 2 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2022-11-24]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-11-24]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-11-17]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (LastPass: Free Password Manager) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2022-11-22]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2022-04-19]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-04-19]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Streak CRM for Gmail) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2022-04-19]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3 [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-10-10]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-12-09]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-04-29]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-06-30]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4 [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-08-31]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-08-31]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2022-08-31]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-31]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5 [2025-03-06]
CHR Session Restore: Profile 5 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-03-03]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-09-25]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-09-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6 [2025-03-06]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2024-08-24]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-08-24]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-11-17]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-08-24]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-11-17]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7 [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8 [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-01-08]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9 [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-09-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-09-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-09-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-09-16]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\System Profile [2025-03-06]
CHR HKU\S-1-5-21-447794926-783580724-1362418113-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\janpu\AppData\Local\Google\Drive\user_Y3mNHmq0EeuC+9Q9frE1aA\apdfllckaahabafndbhieahigkjlhalf_live.crx <not found>
CHR HKU\S-1-5-21-447794926-783580724-1362418113-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901968 2021-03-19] (BattlEye Innovations e.K. -> )
R2 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [503808 2024-08-05] (Brother Industries, Ltd.) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13617384 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4955536 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [784512 2018-09-23] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-11-03] (Epic Games Inc. -> Epic Games, Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe [1926976 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182392 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-11-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [919992 2020-11-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945264 2017-11-24] (TeamViewer GmbH -> TeamViewer GmbH)
R2 USBAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\UsbAppControl\USBAppControl.exe [11776 2025-01-17] () [File not signed]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe [4352456 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe [270056 2025-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WorkflowAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl\WorkflowAppControl.exe [18944 2025-01-17] () [File not signed]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AWCCDriver; C:\WINDOWS\System32\drivers\AWCCDriver.sys [42456 2021-07-01] (IndiLogic LLC -> Dell Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [63696 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 googledrivefs31626; C:\Program Files\Google\Drive File Stream\Drivers\31626\googledrivefs31626.sys [384096 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [278944 2025-03-06] (Microsoft Windows -> Microsoft Corporation)
S3 Revoflt; C:\WINDOWS\System32\DRIVERS\revoflt.sys [38400 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [207344 2021-11-15] (Disc Soft Ltd -> Duplex Secure Ltd)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20016 2025-03-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [601520 2025-03-06] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100768 2025-03-06] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

Error Reading file: "C:\ProgramData\Desktop\TLauncher.lnk"
Error Reading file: "C:\ProgramData\Desktop\Steam.lnk"
Error Reading file: "C:\ProgramData\Desktop\Settlers 2 GOLD.lnk"
Error Reading file: "C:\ProgramData\Desktop\Konung.lnk"
Error Reading file: "C:\ProgramData\Desktop\KaM Remake1.lnk"
Error Reading file: "C:\ProgramData\Desktop\desktop.ini"
Error Reading file: "C:\ProgramData\Desktop\Brány Skeldalu.lnk"
2025-03-06 21:40 - 2025-03-06 21:40 - 000000008 _____ C:\ProgramData\ntuser.pol
2025-03-06 21:29 - 2025-03-06 21:29 - 002404352 _____ (Farbar) C:\Users\janpu\Desktop\FRST64.exe
2025-03-06 17:50 - 2025-03-06 17:50 - 000007990 _____ C:\ProgramData\SMRResults540.dat
2025-03-06 17:28 - 2025-03-06 17:28 - 000119048 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SMR540.SYS.bak
2025-03-06 17:28 - 2025-03-06 17:28 - 000000000 ____D C:\Users\janpu\AppData\Local\NPE
2025-03-06 17:28 - 2025-03-06 17:28 - 000000000 ____D C:\ProgramData\Norton
2025-03-06 15:37 - 2025-03-06 21:56 - 000040542 _____ C:\Users\janpu\Desktop\FRST.txt
2025-03-06 15:23 - 2025-03-06 21:56 - 000000000 ____D C:\FRST
2025-03-06 13:25 - 2025-03-06 13:56 - 000000000 ____D C:\Users\janpu\AppData\Local\GHISLER
2025-03-06 13:25 - 2025-03-06 13:25 - 000000899 _____ C:\Users\janpu\Desktop\Total Commander 64 bit.lnk
2025-03-06 13:25 - 2025-03-06 13:25 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2025-03-06 13:25 - 2025-03-06 13:25 - 000000000 ____D C:\Users\janpu\AppData\Roaming\GHISLER
2025-03-06 13:25 - 2025-03-06 13:25 - 000000000 ____D C:\Program Files\totalcmd
2025-03-06 12:59 - 2025-03-06 13:15 - 3127622943 _____ C:\Users\janpu\Desktop\Intel.rar
2025-03-05 16:44 - 2025-03-05 16:44 - 000065264 _____ C:\Users\janpu\Downloads\priloha_1487660424_2_Jak se poprve prihlasit.pdf
2025-03-05 16:42 - 2025-03-05 16:42 - 000175790 _____ C:\Users\janpu\Downloads\priloha_1487660424_1_Informace o programu.pdf
2025-03-05 16:42 - 2025-03-05 16:42 - 000175790 _____ C:\Users\janpu\Downloads\priloha_1487660424_1_Informace o programu (1).pdf
2025-03-05 16:41 - 2025-03-05 16:41 - 000048026 _____ C:\Users\janpu\Downloads\priloha_1487660424_0_PRIHLASOVACI UDAJE A POPIS PRIHLASENI (1).pdf
2025-03-05 16:36 - 2025-03-05 16:36 - 000382173 _____ C:\Users\janpu\Downloads\priloha_1489468154_0_Dopis VR II MSMT-25_2025-29.pdf
2025-03-05 16:36 - 2025-03-05 16:36 - 000048026 _____ C:\Users\janpu\Downloads\priloha_1487660424_0_PRIHLASOVACI UDAJE A POPIS PRIHLASENI.pdf
2025-03-05 13:36 - 2025-03-06 21:55 - 000000000 ____D C:\Users\janpu\Desktop\_Logovací porgram
2025-03-05 13:36 - 2025-03-06 15:37 - 000705564 _____ C:\WINDOWS\ntbtlog.txt
2025-03-05 13:32 - 2025-03-05 13:32 - 000000000 ____D C:\ProgramData\HP
2025-03-05 11:08 - 2025-03-05 11:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2025-03-05 10:24 - 2025-03-06 21:39 - 116916224 _____ C:\WINDOWS\system32\config\SOFTWARE
2025-03-05 10:08 - 2025-03-05 10:24 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2025-03-05 10:05 - 2025-03-05 10:28 - 000000000 ____D C:\Users\janpu\AppData\Roaming\AdwCleaner
2025-03-04 11:52 - 2025-03-04 11:52 - 000000000 ____D C:\Users\Public\Documents\AdobeGCInfo
2025-03-03 15:05 - 2025-03-03 15:05 - 000382054 _____ C:\Users\janpu\Documents\Scan2025-03-03_150448.pdf
2025-03-03 11:59 - 2025-03-03 11:59 - 000000223 _____ C:\Users\janpu\Desktop\Command & Conquer™ Tiberian Sun™ and Firestorm™.url
2025-02-28 16:16 - 2025-02-28 16:16 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
2025-02-28 15:40 - 2025-03-06 09:05 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Office
2025-02-28 14:36 - 2025-02-28 14:36 - 000000000 ___RD C:\Users\janpu\Documents\Inventor Server SDK ACAD 2017
2025-02-28 14:31 - 2025-02-28 18:41 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Autodesk
2025-02-28 09:50 - 2025-02-28 09:50 - 000133238 _____ C:\Users\janpu\Downloads\Beroun-IV.Q 2024 (1).xlsx
2025-02-27 19:56 - 2025-02-27 19:56 - 000134737 _____ C:\Users\janpu\Downloads\Beroun-I.Q 2025.xlsx
2025-02-27 19:52 - 2025-02-27 19:52 - 000148408 _____ C:\Users\janpu\Downloads\Beroun-I.Q 2025 - dof..xlsx
2025-02-25 10:04 - 2025-02-25 10:04 - 000075902 _____ C:\Users\janpu\Documents\Vypis_poplatku-2802703583_za_obdobi_20240101-20241231.pdf
2025-02-20 14:49 - 2025-02-20 14:49 - 000000000 ____D C:\Users\janpu\AppData\Local\Brother_Industries,_Ltd
2025-02-20 11:21 - 2025-02-20 11:21 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Sun
2025-02-20 11:21 - 2025-02-20 11:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2025-02-20 11:21 - 2024-12-04 08:34 - 000178808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2025-02-19 09:57 - 2025-02-19 09:57 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-02-12 17:51 - 2025-02-12 17:51 - 001054478 _____ C:\Users\janpu\Downloads\2025-02-01T06-00 Transakce #9047957271988708-9178706538913776.pdf
2025-02-11 18:02 - 2025-02-11 18:02 - 000336428 _____ C:\Users\janpu\Downloads\priloha_1478410446_0_Dosetreni_PV_Adela_Ticha.pdf
2025-02-09 19:58 - 2025-03-04 10:14 - 000003564 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-447794926-783580724-1362418113-1001

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-03-06 21:57 - 2017-12-03 10:33 - 000000000 ___SD C:\Users\janpu\AppData\Roaming\Microsoft\Credentials
2025-03-06 21:46 - 2020-08-07 17:51 - 001693140 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-03-06 21:46 - 2019-12-07 15:41 - 000716770 _____ C:\WINDOWS\system32\perfh005.dat
2025-03-06 21:46 - 2019-12-07 15:41 - 000144948 _____ C:\WINDOWS\system32\perfc005.dat
2025-03-06 21:46 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\INF
2025-03-06 21:41 - 2021-02-09 09:56 - 000000000 ___RD C:\Users\janpu\Disk Google (linda.abrahamova@gmail.com)
2025-03-06 21:41 - 2018-01-10 10:42 - 000000000 ___RD C:\Users\janpu\Disk Google
2025-03-06 21:40 - 2020-08-07 17:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-03-06 21:40 - 2020-08-07 17:46 - 000008192 ___SH C:\DumpStack.log.tmp
2025-03-06 21:40 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-03-06 21:40 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\NVIDIA
2025-03-06 21:39 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-03-06 21:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2025-03-06 21:30 - 2017-09-29 14:46 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2025-03-06 21:27 - 2020-08-07 17:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-03-06 18:02 - 2018-05-14 17:56 - 000000000 ____D C:\Users\janpu\AppData\Local\D3DSCache
2025-03-06 17:50 - 2017-07-04 08:05 - 000000000 _RSHD C:\Intel
2025-03-06 17:50 - 2017-07-04 08:05 - 000000000 ____D C:\Soldat
2025-03-06 17:50 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\TracheaOS
2025-03-06 15:36 - 2021-11-15 20:02 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2025-03-06 09:57 - 2018-02-14 20:52 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-03-06 09:51 - 2017-07-04 08:05 - 000000000 ___HD C:\Program Files\WindowsApps
2025-03-06 09:51 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-03-06 09:32 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-03-06 09:20 - 2023-07-23 20:43 - 000000000 ____D C:\Users\janpu\AppData\LocalLow\Temp
2025-03-05 18:33 - 2021-10-01 23:00 - 000002179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2025-03-05 18:33 - 2021-09-08 19:14 - 000002014 _____ C:\Users\Default\Desktop\Google Slides.lnk
2025-03-05 18:33 - 2021-09-08 19:14 - 000002014 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2025-03-05 18:33 - 2021-09-08 19:14 - 000002002 _____ C:\Users\Default\Desktop\Google Docs.lnk
2025-03-05 15:47 - 2017-12-03 14:07 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Word
2025-03-05 13:31 - 2017-07-04 08:05 - 000000000 ____D C:\Users\janpu
2025-03-05 11:15 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Steam
2025-03-05 11:08 - 2020-08-07 17:53 - 000003624 _____ C:\WINDOWS\system32\Tasks\GarminUpdaterTask
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\Package Cache
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\Garmin
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Garmin
2025-03-05 11:06 - 2022-08-17 09:52 - 000000000 ____D C:\Users\janpu\AppData\Local\Spotify
2025-03-05 11:06 - 2017-12-03 19:19 - 000000000 ___RD C:\Users\janpu\Documents\04 Nemovitosti
2025-03-05 10:46 - 2022-08-17 09:52 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Spotify
2025-03-05 09:45 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Adobe
2025-03-05 09:37 - 2020-08-07 17:46 - 000629152 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-03-05 09:16 - 2017-12-03 14:07 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Excel
2025-03-04 14:00 - 2022-07-25 09:53 - 000000000 ____D C:\Users\janpu\AppData\Roaming\XnView
2025-03-04 14:00 - 2017-12-15 13:46 - 000000000 ____D C:\Users\janpu\AppData\Local\CrashDumps
2025-03-04 14:00 - 2017-12-03 18:57 - 000000000 ____D C:\Users\janpu\AppData\Roaming\uTorrent
2025-03-04 14:00 - 2017-07-04 08:05 - 000000000 ___DC C:\WINDOWS\Panther
2025-03-04 14:00 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2025-03-04 10:14 - 2023-11-15 07:10 - 000002383 _____ C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-03-04 10:14 - 2021-12-13 09:06 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-447794926-783580724-1362418113-1001
2025-03-04 10:14 - 2020-08-07 17:53 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-447794926-783580724-1362418113-1001
2025-03-03 11:59 - 2021-02-05 14:16 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2025-03-01 10:53 - 2020-06-15 07:32 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-02-28 16:48 - 2017-12-03 14:22 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared
2025-02-28 13:49 - 2024-01-20 23:43 - 000000000 ____D C:\Users\janpu\AppData\Local\KrosUsers
2025-02-28 13:09 - 2017-12-03 14:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2017 – Čeština (Czech)
2025-02-28 09:50 - 2017-12-03 10:41 - 000000000 ____D C:\Users\janpu\AppData\Local\Packages
2025-02-20 14:49 - 2024-12-06 10:11 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Brother
2025-02-20 11:03 - 2023-09-05 18:12 - 000000000 ____D C:\Users\janpu\AppData\Roaming\UI Launcher
2025-02-20 10:36 - 2024-02-03 12:25 - 000000000 ___RD C:\Users\janpu\Documents\25 Rodina
2025-02-20 10:32 - 2021-07-24 21:11 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2025-02-19 09:57 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-02-13 10:25 - 2022-11-22 08:00 - 000000000 ___RD C:\Users\janpu\Documents\ebay
2025-02-13 08:54 - 2018-01-07 11:23 - 000000000 ____D C:\Users\janpu\AppData\Roaming\vlc
2025-02-12 22:43 - 2024-07-15 01:17 - 000000000 ____D C:\WINDOWS\system32\compatrel
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-02-12 22:43 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2025-02-12 13:17 - 2020-04-17 13:39 - 000419228 __RSH C:\bootmgr
2025-02-12 13:16 - 2020-08-07 17:48 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-02-12 12:11 - 2017-12-04 17:15 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-02-12 12:00 - 2017-12-04 17:15 - 209365816 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-02-11 20:04 - 2024-12-06 10:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2025-02-11 00:19 - 2017-12-03 19:17 - 000000000 ___RD C:\Users\janpu\Documents\01 Živnost
2025-02-09 19:53 - 2021-02-05 13:35 - 000000000 ____D C:\Users\janpu\AppData\Local\Steam

==================== Files in the root of some directories ========

2025-03-06 17:50 - 2025-03-06 17:50 - 000007990 _____ () C:\ProgramData\SMRResults540.dat
2021-07-13 10:31 - 2025-03-04 11:52 - 000000615 _____ () C:\Users\janpu\AppData\Local\oobelibMkey.log
2019-08-26 21:41 - 2022-10-06 20:44 - 000007604 _____ () C:\Users\janpu\AppData\Local\Resmon.ResmonCfg
2024-12-06 10:55 - 2024-12-06 10:55 - 000000000 _____ () C:\Users\janpu\AppData\Local\settingData.dat
2017-12-03 14:00 - 2017-12-03 14:00 - 000000003 _____ () C:\Users\janpu\AppData\Local\updater.log
2017-12-03 14:00 - 2022-03-06 14:09 - 000000424 _____ () C:\Users\janpu\AppData\Local\UserProducts.xml

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Hasicz · #27 Příspěvek od **Hasicz** » 06 bře 2025 22:09

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-03-2025
Ran by janpu (06-03-2025 21:57:43)
Running from C:\Users\janpu\Desktop
Microsoft Windows 10 Home Version 22H2 19045.5487 (X64) (2020-08-07 16:53:17)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-447794926-783580724-1362418113-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-447794926-783580724-1362418113-503 - Limited - Disabled)
Guest (S-1-5-21-447794926-783580724-1362418113-501 - Limited - Disabled)
janpu (S-1-5-21-447794926-783580724-1362418113-1001 - Administrator - Enabled) => C:\Users\janpu
WDAGUtilityAccount (S-1-5-21-447794926-783580724-1362418113-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ANT Drivers Installer x64 (HKLM\...\{FD1A4C7D-D35E-4742-BCEB-1E1104D103C4}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
AppLogLibSetup (HKLM-x32\...\{52FB0C8F-DF05-4C61-AEB6-18C55F8C385F}) (Version: 1.0.3.0 - Brother Industries Ltd.) Hidden
Aslain's WoT Modpack verze 1.27.0.1.12 (HKLM-x32\...\Aslains_WoT_Modpack_Installer_is1) (Version: 1.27.0.1.12 - Aslain)
Backup and Sync from Google (HKLM\...\{696895F7-52C7-4C9E-998B-C7E0CC907092}) (Version: 3.57.4256.0809 - Google, Inc.)
Balíček ovladače systému Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Balíček ovladače systému Windows - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Balíček ovladače systému Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Bontia Studio (HKLM-x32\...\{f9b23ce0-6645-4236-b825-ba692c827bfb}) (Version: 5.3.4361.30804 - Bontia a.s.)
Bontia Studio 5.3 (HKLM-x32\...\{278BD020-1DCD-46C2-B9F6-36E88E10AC64}) (Version: 5.3.4361.0 - Bontia, a.s.) Hidden
Brány Skeldalu pro Windows 1.2 (HKLM-x32\...\Brány Skeldalu_is1) (Version: - Napoleon games)
BrLauncher (HKLM-x32\...\{9416C3F3-10F3-4881-A343-6AF1097728CB}) (Version: 2.0.23.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{190861E7-09C5-42D8-BB4B-0AFB234BCFC1}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{4BDD306E-6382-414C-A1AE-D4D0AFF25373}) (Version: 13.1.0.85 - Brother Industries, Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{fdcfcbcf-53da-4bb6-9094-efcd923dcd0b}) (Version: 13.1.0.85 - Brother Industries, Ltd.)
Brother Port Driver (HKLM-x32\...\{C75FC872-0E00-4C82-90AE-091929F34590}) (Version: 1.0.5.1 - Brother Industries Ltd.) Hidden
Brother Printer Driver (HKLM-x32\...\{A9A83E7D-691F-48C0-8FC0-7702530B0C60}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{3895BDF5-F9F4-42BC-9BC9-6F40702A843A}) (Version: 1.0.18.1 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{8B58D1A2-DFAD-4069-A0C0-7FD272B68BB3}) (Version: 1.0.30.0 - Brother Industries Ltd.) Hidden
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.78.1093 - AB Team, d.o.o.)
CDex - Digital Audio CD Extractor and Converter (HKLM-x32\...\CDex) (Version: 2.24.0.2020 - CDex.mu)
Crypto Native App verze 23.00.8426 (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\{79D8049F-2978-4E91-90BD-3428C8FF2E69}_is1) (Version: 23.00.8426 - TESCO SW a.s.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 11.0.0.1920 - Disc Soft Ltd)
Duplicate Cleaner Pro 4.0.5 (HKLM-x32\...\Duplicate Cleaner Pro) (Version: 4.0.5 - DigitalVolcano Software Ltd)
Elevated Installer (HKLM-x32\...\{164C7EA9-EFD3-4DCE-A297-FFB72D12E457}) (Version: 7.24.0.0 - Garmin Ltd or its subsidiaries) Hidden
Epic Games Launcher (HKLM-x32\...\{E7B62E3F-0F70-4119-89A2-28DE1C3873CC}) (Version: 1.1.163.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.)
Garmin Express (HKLM-x32\...\{206c32b6-b534-4c0c-a074-df1ca53e6e3e}) (Version: 7.24.0.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{50EE2113-6BB9-466F-A71B-FE40DB3139A4}) (Version: 7.24.0.0 - Garmin Ltd or its subsidiaries) Hidden
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 105.0.1.0 - Google LLC)
Google Chrome (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Google Chrome) (Version: 133.0.6943.142 - Google LLC)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
HttpToUsbBridge (HKLM-x32\...\{2EB1E9F3-AAF0-428F-B692-AE824553E2A3}) (Version: 2.5.108.1 - Brother Industries Ltd.)
IrfanView 64 (remove only) (HKLM\...\IrfanView64) (Version: 4.41 - Irfan Skiljan)
Java 8 Update 441 (HKLM-x32\...\{77724AE4-039E-4CA4-87B4-2F32180441F0}) (Version: 8.0.4410.7 - Oracle Corporation)
KaM - The Peasants Rebellion (HKLM-x32\...\KaM - The Peasants Rebellion) (Version: - )
KaM Remake Full r6720 (HKLM-x32\...\{FDE049C8-E4B2-4EB5-A534-CF5C581F5D32}_is1) (Version: - )
Kodi (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Kodi) (Version: 21.1.0.0 - XBMC Foundation)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Konung 2 CZ (HKLM-x32\...\{C2189623-6851-4A1A-B9EE-6B8C2DA7F1AA}) (Version: 1.00 - )
Konung: Legend of the North (HKLM-x32\...\Konung: Legend of the North) (Version: - )
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Legend of the North - Konung (HKLM-x32\...\1455290088_is1) (Version: 2.0.0.2 - GOG.com)
Lightshot-5.5.0.7 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.5.0.7 - Skillbrains)
ManicTime (HKLM-x32\...\{D9E522D9-3345-4230-873A-972974B2CEF4}) (Version: 23.1.1.0 - Finkit d.o.o.)
MediaHuman YouTube to MP3 Converter 3.9.9.97 (HKLM-x32\...\MediaHuman YouTube to MP3 Converter_is1) (Version: 3.9.9.97 - MediaHuman)
Microsoft .NET 6.0.25 - Windows Server Hosting (HKLM-x32\...\{b4a5e26c-84fd-4b01-8d3f-42022169595a}) (Version: 6.0.25.23523 - Microsoft Corporation)
Microsoft .NET 8.0.12 - Windows Server Hosting (HKLM-x32\...\{218673b6-7337-4d49-bc41-b4ccb7e34802}) (Version: 8.0.12.24603 - Microsoft Corporation)
Microsoft .NET Host - 6.0.25 (x64) (HKLM\...\{C7141A99-592B-4226-A4E9-B767C1D0FBAF}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host - 6.0.25 (x86) (HKLM-x32\...\{906F835E-F52B-47C2-A996-A769EB284880}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.12 (x64) (HKLM\...\{C4C6E39D-48AE-426C-960C-46ED3447DDEB}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.12 (x86) (HKLM-x32\...\{874D52B8-B1F4-4D04-8249-8AC6E698CCF5}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.25 (x64) (HKLM\...\{AE86D888-1404-47CC-A7BB-8D86C0503E58}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.25 (x86) (HKLM-x32\...\{73191C34-7ACF-493B-B92E-FE368D8F4071}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.8 (x64) (HKLM\...\{3C3CA326-3F1D-43B7-B0AD-CBC06B2DED5A}) (Version: 48.35.45462 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.12 (x64) (HKLM\...\{C9C872D5-3CA9-4E0E-AF90-1B85325F9243}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.12 (x86) (HKLM-x32\...\{9EC250F3-BC02-4B35-8395-E03A02CD9255}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.25 (x64) (HKLM\...\{3544B2EE-E62F-4D11-B79C-3DDEACE94DA5}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.25 (x64) (HKLM-x32\...\{27a347ca-6c38-495a-888f-37c1198ff412}) (Version: 6.0.25.33019 - Microsoft Corporation)
Microsoft .NET Runtime - 6.0.25 (x86) (HKLM-x32\...\{40f0c93c-19eb-44f5-8ea9-3251a771e053}) (Version: 6.0.25.33019 - Microsoft Corporation)
Microsoft .NET Runtime - 6.0.25 (x86) (HKLM-x32\...\{6D7737C0-9538-48ED-ACB7-688A891417C4}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.8 (x64) (HKLM\...\{7CEA3ABF-FE24-42AF-ADE6-B4A3EE346743}) (Version: 48.35.45462 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.12 (x64) (HKLM\...\{1E606649-7E56-452F-8AC4-495C70D1E341}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.12 (x86) (HKLM-x32\...\{272C9AEF-D02F-4955-8C11-D9F9198A58EC}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft Access database engine 2010 (English) (HKLM-x32\...\{90140000-00D1-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.25 - Shared Framework (x64) (HKLM-x32\...\{31ca574a-1077-4351-a8ee-021a116af21b}) (Version: 6.0.25.23523 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.25 - Shared Framework (x86) (HKLM-x32\...\{2d7a0942-00d5-4c69-8855-03b6696471f1}) (Version: 6.0.25.23523 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.25 Hosting Bundle Options (HKLM-x32\...\{A10E23CC-4B4B-3F8F-B85D-13C9D3E59F1E}) (Version: 6.0.25.23523 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.25 Shared Framework (x64) (HKLM\...\{EDC7E317-B223-349D-A4E5-D1809F2651AD}) (Version: 6.0.25.23523 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.25 Shared Framework (x86) (HKLM-x32\...\{D64D9894-C4A7-3FA2-BD19-E36F6369803C}) (Version: 6.0.25.23523 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.12 Hosting Bundle Options (HKLM-x32\...\{8C069910-4E69-349B-8840-56F774C92B87}) (Version: 8.0.12.24603 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.12 Shared Framework (x64) (HKLM\...\{2B76FF3A-309D-3050-9C41-C98FB593258D}) (Version: 8.0.12.24603 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.12 Shared Framework (x86) (HKLM-x32\...\{0770B9E3-CA2C-37B8-AD77-7336654A2466}) (Version: 8.0.12.24603 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 133.0.3065.92 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 133.0.3065.92 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2016 - cs-cz (HKLM\...\ProPlusRetail - cs-cz) (Version: 16.0.18429.20158 - Microsoft Corporation)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 18.151.0729.0013 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\OneDriveSetup.exe) (Version: 25.020.0202.0001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34433 (HKLM-x32\...\{804e7d66-ccc2-4c12-84ba-476da31d103d}) (Version: 14.42.34433.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.34.31931 (HKLM-x32\...\{6ba9fb5e-8366-4cc4-bf65-25fe9819b2fc}) (Version: 14.34.31931.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.42.34433 (HKLM-x32\...\{e7802eac-3305-4da0-9378-e55d1ed05518}) (Version: 14.42.34433.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34433 (HKLM\...\{E1902FC6-C423-4719-AB8A-AC7B2694B367}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34433 (HKLM\...\{382F1166-A409-4C5B-9B1E-85ED538B8291}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.34.31931 (HKLM-x32\...\{C2662EFF-06E6-4FD1-9D6D-FDCA91025757}) (Version: 14.34.31931 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.42.34433 (HKLM-x32\...\{C2BB95AA-90F3-4891-81C1-A7E565BB836C}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.25 (x86) (HKLM-x32\...\{2deb241e-99d9-4489-ae8d-4778d470fedd}) (Version: 6.0.25.33020 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 6.0.25 (x86) (HKLM-x32\...\{AF1BA644-A730-46A9-BFE1-C1B79EBBE36D}) (Version: 48.100.4037 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.8 (x64) (HKLM\...\{EB3983F9-3D60-456D-A11A-C1366C79AD3E}) (Version: 48.35.45540 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.8 (x64) (HKLM-x32\...\{ca35acb3-b442-44fb-924c-4448120bf689}) (Version: 6.0.8.31518 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.12 (x86) (HKLM-x32\...\{71e8d0d2-fc5e-4344-b556-0110ef50b6b9}) (Version: 8.0.12.34404 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.12 (x86) (HKLM-x32\...\{CF203BF4-13DE-4A81-8BC8-31B3F4A2CB32}) (Version: 64.48.26178 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 113.0.2 (x64 cs)) (Version: 113.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 113.0.2 - Mozilla)
MSVC80_x64_v2 (HKLM\...\{4D668D4F-FAA2-4726-834C-31F4614F312E}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (HKLM-x32\...\{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}) (Version: 1.0.3.0 - Nokia) Hidden
NetworkRepairTool (HKLM-x32\...\{96CEE8C3-B934-48A4-ADA6-91B7CE8A5002}) (Version: 1.2.17.0 - Brother Industries, Ltd.) Hidden
NVIDIA Ovladač HD audia 1.3.38.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.35 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 456.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 456.71 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18429.20158 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18429.20158 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.255 - Google, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 4.3.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.3.8 - VS Revo Group, Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.43.0 - Samsung Electronics Co., Ltd.)
ScannerUtilityInstaller (HKLM-x32\...\{D65C0754-7790-427F-AD73-D7C644260F57}) (Version: 1.19.9.1 - Brother) Hidden
Settlers 2 GOLD (HKLM-x32\...\Settlers 2 GOLD_is1) (Version: - GOG.com)
SoftwareUpdateNotification (HKLM-x32\...\{E28A6F15-BFBE-4D20-8B5F-6EABAA1E545E}) (Version: 1.0.14.0 - Brother Industries, Ltd.) Hidden
Soldat 1.4.2 (HKLM-x32\...\Soldat_is1) (Version: - Michal Marcinkowski)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Spotify (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Spotify) (Version: 1.2.58.498.g6afe77b7 - Spotify AB)
StatusMonitor (HKLM-x32\...\{5F23FD86-E84F-46BA-B40B-5FD6A6961A70}) (Version: 1.22.37.0 - Brother Industries, Ltd.) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Sweet Home 3D version 5.7 (HKLM\...\Sweet Home 3D_is1) (Version: 5.7 - eTeks)
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.0.5058 - TeamViewer)
TLauncher (HKLM-x32\...\TLauncher) (Version: 2.86 - TLauncher Inc.)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.51 - Ghisler Software GmbH)
TP-LINK TL-WN722N Driver (HKLM-x32\...\{F9C15685-38A9-46A1-9826-97204015C19C}) (Version: 1.3.1 - TP-LINK)
Trachea OS (HKLM-x32\...\{B413C357-6BE6-A1B7-9187-87BDC3D0F5B3}) (Version: 5.9.252 - SOFTconsult, spol. s r.o.) Hidden
Trachea OS (HKLM-x32\...\TracheaOS) (Version: 5.9.252 - SOFTconsult, spol. s r.o.)
Trust GXT 970 (HKLM-x32\...\{0C6A599B-1C6C-427C-81BF-1908825C95E2}_is1) (Version: 1.0.6 - Trust International B.V.)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.18 - VideoLAN)
Vzum (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\6cfa0c5674100ff8) (Version: 1.0.0.46 - Vzum)
Wargaming.net Game Center (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Wargaming.net Game Center) (Version: 24.7.1.7647 - Wargaming.net)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
World of Tanks EU (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\2314027414) (Version: - Wargaming.net)

Packages:
=========
Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-06] (Autodesk Inc.)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-11-16] (Microsoft Corporation)
Doplněk pro Fotky -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-03-12] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16 [2025-02-19] ()
Roblox -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.662.536.0_x64__55nm5eh3cm0pr [2025-03-02] (Roblox Corporation)
Settle Up -> C:\Program Files\WindowsApps\15837bezysoftware.SettleDown_2.6.0.0_x64__szd32vgd5b9q4 [2023-03-26] (Step Up Labs) [MS Ad]
WinZip Universal -> C:\Program Files\WindowsApps\WinZipComputing.WinZipUniversal_1.5.13516.0_x64__3ykzqggjzj4z0 [2019-06-01] (WinZip Computing)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{041F9391-C79D-44EE-AA4E-AF4E029C4B47}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.112\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{1F9E0710-2073-435F-9C1B-F29946205947}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.152\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{2919A592-BF5E-4AF5-A658-84454D70841E}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.202\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{3BC2EF70-3830-43FC-9009-029942FD2DCE}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.372\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.442\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{540C17A8-04F2-4B66-95D7-B2FEF9A19B54}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.423\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{5D44759C-CF3F-433D-9EA0-267E45577C77}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.212\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{62634D95-960B-4834-8E71-A70408AD8FD9}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.34.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{69545769-8D02-4B07-A481-AD374CD8D5D1}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.132\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{6D264B70-DA18-401D-910C-B202D89670C6}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.32\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{75399D28-E622-4973-8752-BC0F7DC47AF3}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.122\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{84EB3779-151B-4C71-AEF0-A0FEE9481401}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.342\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{85D8EE2F-794F-41F0-BB03-49D56A23BEF4}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.372\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{86508D42-E5D7-4D10-9C6F-D427AEEB85B5}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.34.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{8B480070-D37D-4090-A063-7A429F849652}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.92\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{8D422533-936A-4A82-B15C-BD5319AB0026}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.332\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{A2C6CB58-C076-425C-ACB7-6D19D64428CD}\localserver32 -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\133.0.6943.142\notification_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{A804CF1A-91E5-4F0C-9E8C-DB39E74056DD}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.33.23\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{AE9899FA-E21F-4D91-BD1F-59BC10E56CA1}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.292\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{B9C751AA-D9CF-4E09-A270-E5BBD2194F83}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.352\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{BE5C2E39-090F-46A2-AFAA-47540743B4FE}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.102\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{CA07EE63-A212-4373-AE82-FBF92FCA8DCC}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.242\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{CA8FA699-91CD-412F-9D13-9B1222F4370E}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.82\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{CA919489-0396-4164-A6E7-94CDED45A707}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.52\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{DA06AAE8-5748-4509-850F-17AA522F8372}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.273\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{DEDF773D-E27B-485E-8E7D-85C5B0EB5A67}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{E4949BE6-C9FF-4AFA-8672-6127D857418B}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.312\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.372\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{ED0BC9DB-3CE6-49E5-9B2F-590DCEF8C016}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.342\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{EF076C91-DC9E-43E3-84ED-3D219E065A4F}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.302\psuser_64.dll => No File
ShellIconOverlayIdentifiers: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2022-02-01] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2022-02-01] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2022-02-01] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\System32\AcSignIcon.dll [2017-10-20] (Autodesk, Inc -> Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2023-09-05] (Autodesk, Inc. -> Autodesk)
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2022-02-01] (Google LLC -> Google)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2022-02-01] (Google LLC -> Google)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2020-10-01] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2020-09-28] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Linda - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\c8c6ca33f34d36d3\Antonín (zaci.zswagnerka.cz) - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 5"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b37fff5916e5fab1\Nicolas (student.gymberoun.cz) - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 11"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\a2d4e19d7187c685\SekáčHP - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 2"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\425a8c9d83c5b5e\Josefína - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 10"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\158eb60dbf5e676a\Antonín - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 3"

==================== Loaded Modules (Whitelisted) =============

2025-01-10 17:44 - 2025-01-10 17:44 - 000601088 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\ADKCore.dll
2025-01-10 17:44 - 2025-01-10 17:44 - 000006144 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\BfLogger.dll
2025-01-10 17:44 - 2025-01-10 17:44 - 000018432 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\BfPlatformLib.Windows.dll
2025-01-10 17:44 - 2025-01-10 17:44 - 000024064 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\BRAppDevKitCommon.dll
2025-01-17 14:19 - 2025-01-17 14:19 - 000374784 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\BRAppDevKitQuery2.dll
2025-01-10 17:44 - 2025-01-10 17:44 - 000004608 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\BRDevKitQuery2CommonDataLib.dll
2025-01-17 14:20 - 2025-01-17 14:20 - 000175616 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\cs\Rodem.UI.Wpf.Resources.resources.dll
2015-02-22 14:00 - 2015-02-22 14:00 - 000323072 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Google.ProtocolBuffers.dll
2016-08-17 21:38 - 2016-08-17 21:38 - 000080896 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\MvvmCross.Core.dll
2016-08-17 21:38 - 2016-08-17 21:38 - 000080384 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\MvvmCross.Platform.dll
2025-01-17 16:23 - 2025-01-17 16:23 - 000286208 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Rodem.ADK.WinDesktop.dll
2025-01-10 17:44 - 2025-01-10 17:44 - 000081408 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Rodem.Common.dll
2025-01-10 17:44 - 2025-01-10 17:44 - 000375808 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Rodem.Functions.dll
2025-01-10 17:44 - 2025-01-10 17:44 - 000135168 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Rodem.Libraries.Common.dll
2025-01-17 16:23 - 2025-01-17 16:23 - 000204800 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Rodem.Libraries.WinDesktop.dll
2025-01-17 14:19 - 2025-01-17 14:19 - 000150016 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Rodem.Libraries.Windows.dll
2025-01-10 17:44 - 2025-01-10 17:44 - 001428480 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Rodem.ProtocolBuffers.dll
2025-01-17 14:19 - 2025-01-17 14:19 - 001000960 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Rodem.UI.Wpf.Resources.dll
2020-11-26 21:38 - 2020-11-26 21:38 - 000961536 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Garmin\Express\CefSharp.BrowserSubprocess.Core.dll
2020-11-26 21:38 - 2020-11-26 21:38 - 001446400 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Garmin\Express\CefSharp.Core.dll
2017-05-08 04:35 - 2017-05-08 04:35 - 000325632 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Garmin\Express\GpsImgWrapper.dll
2016-11-25 10:18 - 2016-11-25 10:18 - 000139264 _____ () [File not signed] C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2024-08-05 09:02 - 2024-08-05 09:02 - 000801792 _____ () [File not signed] C:\Program Files (x86)\Browny02\BrMonitor.dll
2024-06-10 13:09 - 2024-06-10 13:09 - 000021504 _____ () [File not signed] C:\Program Files (x86)\Browny02\OfferingService.dll
2020-11-18 03:14 - 2020-11-18 03:14 - 117340672 _____ () [File not signed] C:\Program Files (x86)\Garmin\Express\libcef.dll
2020-11-18 01:40 - 2020-11-18 01:40 - 000323072 _____ () [File not signed] C:\Program Files (x86)\Garmin\Express\libegl.dll
2020-11-18 01:40 - 2020-11-18 01:40 - 005441536 _____ () [File not signed] C:\Program Files (x86)\Garmin\Express\libglesv2.dll
2023-08-16 11:19 - 2023-04-19 12:28 - 000167424 _____ () [File not signed] C:\Users\janpu\AppData\Local\Finkit\ManicTime\Plugins\Cache\ManicTime.DocumentTracker.Brave\Lib\UIAComWrapper.dll
2023-08-16 11:19 - 2023-01-10 21:13 - 001391104 _____ () [File not signed] C:\Users\janpu\AppData\Local\Finkit\ManicTime\Plugins\Cache\ManicTime.Storage.Sqlite\Lib\runtimes\win-x86\native\e_sqlcipher.dll
2024-12-06 10:07 - 2019-09-26 16:19 - 000121344 _____ () [File not signed] C:\WINDOWS\system32\BrNetSti.dll
2025-01-17 16:23 - 2025-01-17 16:23 - 000028672 _____ (AppControl) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\AppControl.dll
2019-10-07 16:25 - 2019-10-07 16:25 - 000014336 _____ (Autofac) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\Autofac.Extensions.DependencyInjection\5.0.1.0\Autofac.Extensions.DependencyInjection.dll
2019-08-15 14:05 - 2019-08-15 14:05 - 000230912 _____ (Autofac) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\Autofac\4.9.4.0\Autofac.dll
2025-01-17 16:23 - 2025-01-17 16:23 - 001005568 _____ (Brother Industries, Ltd.) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\BRAdmin.Common.dll
2025-01-17 16:23 - 2025-01-17 16:23 - 001836544 _____ (Brother Industries, Ltd.) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\BRAdmin.PF.dll
2025-01-10 17:44 - 2025-01-10 17:44 - 000007680 _____ (Brother Industries, Ltd.) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\BrotherUpdateCheck.dll
2025-01-10 17:44 - 2025-01-10 17:44 - 000044032 _____ (Brother Industries, Ltd.) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\BrotherUpdateCheck.PCL.dll
2025-01-10 17:44 - 2025-01-10 17:44 - 001313280 _____ (Brother Industries, Ltd.) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Rodem.UI.Core.dll
2019-06-04 12:33 - 2019-06-04 12:33 - 000143872 _____ (daxnet) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\Irony.NetCore\1.1.11.0\Irony.dll
2023-01-03 08:45 - 2023-01-03 08:45 - 000073216 _____ (Dominick Baier;Brock Allen) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\IdentityModel.OidcClient\5.2.1.0\IdentityModel.OidcClient.dll
2021-12-26 11:44 - 2021-12-26 11:44 - 000116736 _____ (Dominick Baier;Brock Allen) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\IdentityModel\6.0.0.0\IdentityModel.dll
2023-04-19 12:37 - 2023-04-19 12:37 - 000067072 _____ (Finkit d.o.o.) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\Finkit.ManicTime.Common.O\2023.1.1.0\Finkit.ManicTime.Common.O.dll
2023-04-19 12:34 - 2023-04-19 12:34 - 000631808 _____ (Finkit d.o.o.) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\Finkit.ManicTime.Common\2023.1.1.0\Finkit.ManicTime.Common.dll
2023-04-19 12:34 - 2023-04-19 12:34 - 000910848 _____ (Finkit d.o.o.) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\Finkit.ManicTime.Tracker\2023.1.1.0\Finkit.ManicTime.Tracker.dll
2023-04-19 12:37 - 2023-04-19 12:37 - 000240640 _____ (Finkit d.o.o.) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\ManicTime.Client.Tracker.Win\2023.1.1.0\ManicTime.Client.Tracker.Win.dll
2023-04-19 12:33 - 2023-04-19 12:33 - 003563520 _____ (Finkit.ManicTime.Shared) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\Finkit.ManicTime.Shared\4.0.0.0\Finkit.ManicTime.Shared.dll
2017-05-08 04:35 - 2017-05-08 04:35 - 000343552 _____ (Garmin International, Inc.) [File not signed] C:\Program Files (x86)\Garmin\Express\IMG_GPSMAP.dll
2023-02-04 23:39 - 2023-02-04 23:39 - 000165888 _____ (GitHub Community) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\Vanara.Core\3.4.13.0\Vanara.Core.dll
2023-02-04 23:39 - 2023-02-04 23:39 - 000604160 _____ (GitHub Community) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\Vanara.PInvoke.Shared\3.4.13.0\Vanara.PInvoke.Shared.dll
2023-02-04 23:39 - 2023-02-04 23:39 - 000027648 _____ (GitHub Community) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\Vanara.PInvoke.WTSApi32\3.4.13.0\Vanara.PInvoke.WTSApi32.dll
2021-03-27 11:46 - 2021-03-27 11:46 - 000103424 _____ (hardcodet.net) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Hardcodet.NotifyIcon.Wpf.dll
2025-01-17 16:23 - 2025-01-17 16:23 - 000019968 _____ (iPSMonitor) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\cs\iPSMonitor.resources.dll
2025-01-17 16:23 - 2025-01-17 16:23 - 000992256 _____ (iPSMonitor) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.dll
2023-04-19 12:33 - 2023-04-19 12:33 - 000004608 _____ (ManicTime.Api) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\ManicTime.Api\4.0.0.0\ManicTime.Api.dll
2023-04-19 12:37 - 2023-04-19 12:37 - 001630208 _____ (ManicTime.Client) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\ManicTime.Client\4.0.0.0\ManicTime.Client.dll
2023-04-19 12:37 - 2023-04-19 12:37 - 000925184 _____ (ManicTime.Client.Tracker) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\ManicTime.Client.Tracker\4.0.0.0\ManicTime.Client.Tracker.dll
2023-04-19 12:28 - 2023-04-19 12:28 - 000440832 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\ManicTime\hostfxr.dll
2021-04-17 11:03 - 2021-04-17 11:03 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2021-04-17 11:03 - 2021-04-17 11:03 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
2022-11-10 23:30 - 2022-11-10 23:30 - 000135168 _____ (neuecc xin9le okazuki) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\ReactiveProperty.dll
2025-01-17 16:23 - 2025-01-17 16:23 - 000018432 _____ (Rodem.Notifier.Services) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Rodem.Notifier.Services.dll
2025-01-17 16:23 - 2025-01-17 16:23 - 000045568 _____ (Rodem.UI.Grpc) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Rodem.UI.Grpc.dll
2025-01-17 16:23 - 2025-01-17 16:23 - 000008704 _____ (Rodem.UI.Grpc.Server) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Rodem.UI.Grpc.Server.dll
2023-03-28 13:36 - 2023-03-28 13:36 - 002030080 _____ (Six Labors) [File not signed] [File is in use] C:\Program Files (x86)\ManicTime\Lib\SixLabors.ImageSharp\3.0.1.0\SixLabors.ImageSharp.dll
2023-08-16 11:19 - 2023-01-10 21:21 - 000005120 _____ (SourceGear) [File not signed] C:\Users\janpu\AppData\Local\Finkit\ManicTime\Plugins\Cache\ManicTime.Storage.Sqlite\Lib\SQLitePCLRaw.batteries_v2.dll
2023-08-16 11:19 - 2023-01-10 21:18 - 000050688 _____ (SourceGear) [File not signed] C:\Users\janpu\AppData\Local\Finkit\ManicTime\Plugins\Cache\ManicTime.Storage.Sqlite\Lib\SQLitePCLRaw.core.dll
2023-08-16 11:19 - 2023-01-10 21:18 - 000036352 _____ (SourceGear) [File not signed] C:\Users\janpu\AppData\Local\Finkit\ManicTime\Plugins\Cache\ManicTime.Storage.Sqlite\Lib\SQLitePCLRaw.provider.e_sqlcipher.dll
2023-08-16 11:19 - 2018-12-11 19:00 - 000257536 _____ (sta.blockhead, jonashouben) [File not signed] C:\Users\janpu\AppData\Local\Finkit\ManicTime\Plugins\Cache\ManicTime.DocumentTracker.Socket\Lib\websocket-sharp-standard.dll
2022-07-25 16:40 - 2022-07-25 16:40 - 000258048 _____ (The Apache Software Foundation) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\log4net.dll
2020-11-18 01:39 - 2020-11-18 01:39 - 000843264 _____ (The Chromium Authors) [File not signed] C:\Program Files (x86)\Garmin\Express\chrome_elf.dll
2021-01-30 06:29 - 2021-01-30 06:29 - 000067584 _____ (Unity Open Source Project) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Unity.Abstractions.dll
2021-01-30 06:40 - 2021-01-30 06:40 - 000148480 _____ (Unity Open Source Project) [File not signed] [File is in use] C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\Unity.Container.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

SearchScopes: HKU\S-1-5-21-447794926-783580724-1362418113-1001 -> {FD6EBC6C-6E6A-48D1-833D-16FFA7024BB1} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_37180
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\ssv.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\jp2ssv.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-09-29 14:46 - 2017-09-29 14:44 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Intel;C:\Intel\m;C:\Intel\logs;C:\WINDOWS;C:\WINDOWS\System32;C:\WINDOWS\sysnative;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\dotnet\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\Users\janpu\AppData\Local\Microsoft\WindowsApps;
HKU\S-1-5-21-447794926-783580724-1362418113-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\janpu\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img1.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "MRT"
HKLM\...\StartupApproved\Run32: => "Adobe Acrobat Speed Launcher"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "MRT"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_B290F089DC243CBB434D3F1388B3FDD9"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{EE5EF259-F9C0-4062-ADE8-F9BD8B6C16AA}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS6EFE\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{715BF791-D541-4582-BBEC-C4C82B8D1F2E}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS6EFE\HPDiagnosticCoreUI.exe => No File
FirewallRules: [UDP Query User{1E09E7F4-0C88-4AF5-A65C-785A0BA1C973}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe => No File
FirewallRules: [TCP Query User{CDA007A6-2C3D-46B0-A64D-9463CE557BFE}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe => No File
FirewallRules: [UDP Query User{47440213-EADE-4965-94F0-4AED1947785A}C:\soldat\soldat.exe] => (Allow) C:\soldat\soldat.exe => No File
FirewallRules: [TCP Query User{2D007354-3591-4D37-8AA3-939A4FBA6C2F}C:\soldat\soldat.exe] => (Allow) C:\soldat\soldat.exe => No File
FirewallRules: [UDP Query User{87E95204-8D40-4230-8DA6-F85D455D632F}E:\03 - games\liero\openlierox\openlierox.exe] => (Allow) E:\03 - games\liero\openlierox\openlierox.exe => No File
FirewallRules: [TCP Query User{4C4453C2-98A1-4B90-A8CD-5BCAFCA4B361}E:\03 - games\liero\openlierox\openlierox.exe] => (Allow) E:\03 - games\liero\openlierox\openlierox.exe => No File
FirewallRules: [UDP Query User{9D0703A7-1FC6-4782-BEB8-91DD64FD35A4}C:\soldat\soldat.exe] => (Allow) C:\soldat\soldat.exe => No File
FirewallRules: [TCP Query User{7EBB6BE5-6797-42B0-9E94-D5CD64D10303}C:\soldat\soldat.exe] => (Allow) C:\soldat\soldat.exe => No File
FirewallRules: [{0CBAD3FF-D228-4E57-ACD0-FCFA7C884A07}] => (Allow) LPort=5357
FirewallRules: [UDP Query User{DD56FB32-D174-40D1-99E1-9EC4BDCB9E01}C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe => No File
FirewallRules: [TCP Query User{FEF38814-68D2-40D7-9A3A-9A501BAF41BA}C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe => No File
FirewallRules: [UDP Query User{4B9500AC-4EC7-4AD8-A092-E063EB34F49D}C:\users\janpu\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\janpu\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{7BF45458-499F-472B-817A-39F467AB71A8}C:\users\janpu\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\janpu\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{55854B0E-33A6-4C20-A3E7-CE68BC727316}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS6AD3\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{EDF310D3-4F9A-4F24-A578-2AC67DB4656B}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS6AD3\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{CCC6E92A-9ABA-4BEC-914C-8582139B8F89}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{06939272-B84B-43C2-97C8-09D946B3C939}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{894DE0D5-9929-4C71-90FC-EB80735F22AA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{8D47BA0A-B786-4AEC-ACDD-E401E40F6575}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [UDP Query User{78DB000D-7A5E-4617-A688-C105F8493391}C:\users\janpu\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\janpu\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [TCP Query User{475B1519-C719-43B2-BDA5-0B256CF94D6F}C:\users\janpu\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\janpu\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [TCP Query User{0BB9B182-BFCA-455D-9500-FB16AEB9E1EC}C:\users\janpu\appdata\local\google\chrome\application\chrome.exe] => (Allow) C:\users\janpu\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{C30126B8-59FD-41BB-99A5-5F2FFBA37735}C:\users\janpu\appdata\local\google\chrome\application\chrome.exe] => (Allow) C:\users\janpu\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{579E50F3-1AD8-4D73-B722-9B1A6DBFB48A}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{FAD817C5-54A4-4C41-8899-2E1DC54B5236}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{E9A603F3-821A-4C66-8012-B908282D20C4}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{3C9B0B82-C469-498B-AC50-AF19F4166359}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{9F3986B6-B8F6-47A1-A96E-EF992052ACE6}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{EB656C07-CAD8-402D-A8A3-306B0A568FB9}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{6F3CD004-2B46-4FA2-8AB4-D1F13958418D}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{840F0C3B-E8B7-4CEC-858A-CCE587464073}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{D200DFDE-7788-4249-BD2C-3DD58F6461FA}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe => No File
FirewallRules: [UDP Query User{93AEFC2F-D4B2-435E-858C-4E0A038596B9}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe => No File
FirewallRules: [TCP Query User{59D1A408-8BD8-4648-AFAC-4032FC93617E}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [UDP Query User{651D0533-ED78-42A7-9104-382E52071A4D}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [TCP Query User{8F2895E3-A2F2-4D37-A253-22C0006A42F9}C:\program files (x86)\java\jre1.8.0_261\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_261\bin\javaw.exe => No File
FirewallRules: [UDP Query User{4B77BB9E-FEE2-4E67-B940-5D258935697B}C:\program files (x86)\java\jre1.8.0_261\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_261\bin\javaw.exe => No File
FirewallRules: [TCP Query User{DF95C2F7-AC93-46B5-A5A6-E8736C830907}C:\program files (x86)\java\jre1.8.0_271\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_271\bin\javaw.exe => No File
FirewallRules: [UDP Query User{B130F07C-3F13-4B63-83F6-E736EC6419F1}C:\program files (x86)\java\jre1.8.0_271\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_271\bin\javaw.exe => No File
FirewallRules: [{7CBC9156-89E6-4018-A0DE-BFB26208DD30}] => (Allow) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{98FE9B4A-C9F3-4205-AC0A-410438940237}] => (Allow) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{BBB460E4-C7B8-451E-B9D7-89D4FC87F0B3}] => (Allow) C:\Games\World_of_Tanks_EU\WorldOfTanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{A0531D94-107F-4B60-9057-0304CF616B0E}] => (Allow) C:\Games\World_of_Tanks_EU\WorldOfTanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [TCP Query User{2497F7F2-BA7B-4163-ABE0-FD9B1B810180}C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe] => (Block) C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe => No File
FirewallRules: [UDP Query User{7914AD19-5FD4-4CF1-ABF0-D60556965C8D}C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe] => (Block) C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe => No File
FirewallRules: [{736E7451-DE5A-4AFF-9882-DE21B611F06D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{A191D88C-5D7C-4B8F-8180-170455CFA6F2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D107CC8E-3747-47D5-AACC-11E3A164E613}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{88545252-3C60-4E3B-A363-FAF1B538457C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{4AA3F92F-CAF8-4F7A-BCB4-7CEA2D80BB48}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Feudal Alloy\FeudalAlloy.exe () [File not signed]
FirewallRules: [{3D0C8F62-953F-4F7A-A239-0E55799B99BD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Feudal Alloy\FeudalAlloy.exe () [File not signed]
FirewallRules: [{E46B009D-D01C-4446-AD6C-F02975767D41}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{87CAF3B0-7C54-4052-A588-DB87E6A5C787}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D418FEAF-6F9A-4895-8642-B865007D0B9E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B18B33E7-39E4-4EB5-8F25-F5732B0237C9}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B971C822-9FA6-46D5-82FD-FB50DA79B818}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{8C19406B-9B08-4691-AB17-D979FB041A18}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [TCP Query User{6E0D6B87-D92C-47BB-BC3B-686891C0BE21}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe => No File
FirewallRules: [UDP Query User{8BAFB8C2-D8F6-4B6E-BFB1-0402485A185E}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe => No File
FirewallRules: [TCP Query User{2BA53873-1EF7-4FBF-A1C5-3F55214EE7D3}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [UDP Query User{003AA4C1-C9A0-49E5-BFEB-C5524A23C4EB}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [TCP Query User{484CC236-CE3E-4D5A-85C9-CC7A6881C155}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe => No File
FirewallRules: [UDP Query User{A7E29339-75E5-4FEC-82A9-3EC963D40EB3}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe => No File
FirewallRules: [TCP Query User{41C2D152-FCB2-4DB1-B9E5-4E296658F529}C:\users\janpu\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe
FirewallRules: [UDP Query User{45E3E495-BF0A-4DC7-A8D3-79C05523E82E}C:\users\janpu\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe
FirewallRules: [TCP Query User{A0D661BD-C62E-4D51-AB46-25B5E4BD0E78}C:\program files (x86)\java\jre1.8.0_291\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_291\bin\javaw.exe => No File
FirewallRules: [UDP Query User{7D285C3C-508C-48AD-995B-8EB3F233EFE4}C:\program files (x86)\java\jre1.8.0_291\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_291\bin\javaw.exe => No File
FirewallRules: [{D21E7274-1023-4F4D-89C4-FD33083357E2}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{894E2DFC-1795-4BBF-9475-4DBC5F211A11}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [TCP Query User{6F4462F0-AFCD-43B0-A979-FC61BF811956}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe
FirewallRules: [UDP Query User{A50244BF-69A2-408A-8E41-5523E825D416}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe
FirewallRules: [{05EB5A40-BADD-4939-95B0-A25C6C4DEE74}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Konung2\Konung2.exe () [File not signed]
FirewallRules: [{31EDEB19-4B41-490C-8EDC-97965F48989C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Konung2\Konung2.exe () [File not signed]
FirewallRules: [TCP Query User{A1614C35-3677-4D6B-95A9-40FEDF527016}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [UDP Query User{68488382-45D4-46DD-9168-5B19588E7CE0}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [TCP Query User{BD65BCC4-0569-4547-B019-8AC04E20766E}C:\users\janpu\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\janpu\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{E15FD5CD-99D6-49CA-8061-9BB4ACE9ABC6}C:\users\janpu\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\janpu\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{7E3EF45A-35E5-48DF-BAFB-8AE9C23BD1E9}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe
FirewallRules: [UDP Query User{03A87F6F-1B30-4C8F-86A2-BB3CF769D083}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe
FirewallRules: [{B661D2DD-7A7D-486B-8974-32884E35E5D8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Assassins Creed\AssassinsCreed_Game.exe (Ubisoft) [File not signed]
FirewallRules: [{12868C77-4631-4CF3-A491-28047DEFD178}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Assassins Creed\AssassinsCreed_Game.exe (Ubisoft) [File not signed]
FirewallRules: [TCP Query User{6B7DE89A-11A7-4E81-8BB2-7DA9B371DCC5}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [UDP Query User{496CD1EF-60D7-4698-BA34-8564A7E96B63}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [TCP Query User{514A309C-EA84-415A-AE6D-5E022B11D3D2}C:\program files (x86)\garmin\express\cefsharp.browsersubprocess.exe] => (Allow) C:\program files (x86)\garmin\express\cefsharp.browsersubprocess.exe (The CefSharp Authors) [File not signed]
FirewallRules: [UDP Query User{FE3F5224-D9C2-47FA-9E83-CC837B671C17}C:\program files (x86)\garmin\express\cefsharp.browsersubprocess.exe] => (Allow) C:\program files (x86)\garmin\express\cefsharp.browsersubprocess.exe (The CefSharp Authors) [File not signed]
FirewallRules: [{DCD7C308-BC45-4C76-8370-3CECBD88CF5E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Plants Vs Zombies\PlantsVsZombies.exe (PopCap Games -> )
FirewallRules: [{8361FB08-E6A1-4340-89C2-11B895E9AC25}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Plants Vs Zombies\PlantsVsZombies.exe (PopCap Games -> )
FirewallRules: [{20DCE62E-C83F-41D0-BD59-F2F03C0B2A3B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9B04AB2A-4E6D-4848-A342-91615660E99F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{875AA0E1-7B80-4CF1-980C-77DC3A97A929}C:\program files (x86)\java\jre-1.8\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre-1.8\bin\javaw.exe => No File
FirewallRules: [UDP Query User{F2A7B976-2417-438A-9F6B-8F1CC62E6A9B}C:\program files (x86)\java\jre-1.8\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre-1.8\bin\javaw.exe => No File
FirewallRules: [TCP Query User{3F8FB561-E370-4646-88DF-267A97BA021B}C:\users\janpu\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe] => (Block) C:\users\janpu\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{6D546D94-9BC5-4F3C-920A-0A7D3E723260}C:\users\janpu\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe] => (Block) C:\users\janpu\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe
FirewallRules: [{A97DFA4D-C7B3-4CB5-8761-F14312A4D649}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1BE9BDBC-4201-42B6-B364-28D23699B985}] => (Allow) LPort=54925
FirewallRules: [TCP Query User{4BD3A83B-F972-4276-9143-9C5E6DC094E7}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [UDP Query User{E5BBC319-F968-4021-A545-0FAA5A3B0632}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [{6AED1458-0B1B-4004-95D5-2FF8E95B8412}] => (Allow) LPort=54950
FirewallRules: [{D4AFED58-2EDA-4D78-9E97-7409C23D5851}] => (Allow) LPort=54955
FirewallRules: [{C56DE65F-4D6E-4078-BF67-5B9F986A788D}] => (Allow) C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.exe (iPSMonitor) [File not signed]
FirewallRules: [{6EDBD278-FD33-4194-89A8-56DDFC77ED70}] => (Allow) C:\Intel\q2.exe => No File
FirewallRules: [{AB3CACFC-2742-486B-B0E8-5780013001B7}] => (Allow) C:\Intel\c.exe => No File
FirewallRules: [{8970D069-0F6D-415C-BCFB-96CBCDD75EB9}] => (Allow) C:\Intel\m\wmr.exe => No File
FirewallRules: [{6F6ADE5A-1FF4-4B23-A47B-A58AA4C036E7}] => (Allow) C:\Intel\m\sbr.exe => No File
FirewallRules: [{9A13C727-13C6-4F7A-9E1D-B70F39C7B9AF}] => (Allow) C:\Intel\i3.exe () [File not signed]
FirewallRules: [{D4FFE963-0471-42CA-AF77-C15801ABF059}] => (Allow) C:\Intel\m\nmb.exe => No File
FirewallRules: [{2418D839-32DB-4AED-B00F-31489F992D3C}] => (Allow) C:\Intel\m\nmb.exe => No File
FirewallRules: [{051F66C2-817C-4619-84B6-1CB823E85583}] => (Allow) C:\Intel\c.exe => No File
FirewallRules: [{5000EBE1-C5F2-40E8-98EF-B1A656ADD61C}] => (Allow) C:\Intel\m\xrm.exe => No File
FirewallRules: [{2FE4D6B2-4ED6-407B-B482-31C296419EF1}] => (Allow) C:\Intel\m\llm.exe => No File
FirewallRules: [{FD51033B-D0F6-470A-AEB7-319FE26DAF62}] => (Allow) C:\Intel\m\wmr.exe => No File
FirewallRules: [{AB2F5D68-E8F0-4470-83F6-8367AAC89358}] => (Allow) C:\Intel\q3.exe () [File not signed]
FirewallRules: [{D5DA943C-29DC-42F3-992B-53E2F263D661}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\133.0.3065.92\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7D27D894-002C-4ED4-9CFE-356F4A17B1A7}] => (Allow) C:\Intel\i.exe () [File not signed]
FirewallRules: [{270523BB-E8C3-4E21-AACF-F73FA10E6B5A}] => (Allow) C:\Intel\i.exe () [File not signed]
FirewallRules: [{E3915ACE-0F26-4648-AA69-2F084D8AAC95}] => (Allow) C:\Intel\i1.exe () [File not signed]
FirewallRules: [{2423DE1E-C6A2-4092-8C30-B171FA2EE3A1}] => (Allow) C:\Intel\i1.exe () [File not signed]
FirewallRules: [{E54A4D91-BAE2-4BA2-8F14-C0C25436F16A}] => (Allow) C:\Intel\i2.exe => No File
FirewallRules: [{787D91B0-3B3C-4EB0-96D8-95B55DFD22E5}] => (Allow) C:\Intel\i2.exe => No File
FirewallRules: [{36A4CD14-D576-4AE9-B715-BC1294280653}] => (Allow) C:\Intel\i3.exe () [File not signed]
FirewallRules: [{4707C5F1-D3D8-46C4-98F0-62DBDBDBF79B}] => (Allow) C:\Intel\i3.exe () [File not signed]
FirewallRules: [{10FC1BE0-0965-435F-85F0-D49DB4B332EF}] => (Allow) C:\Intel\i4.exe () [File not signed]
FirewallRules: [{1368E902-4555-47DE-8B30-52DC2EB94FCF}] => (Allow) C:\Intel\i4.exe () [File not signed]
FirewallRules: [{12A8C52C-F7BD-403E-8B43-B78EE106045D}] => (Allow) C:\Intel\q.exe () [File not signed]
FirewallRules: [{8E2C9A33-9D2D-4269-9558-6A788C012974}] => (Allow) C:\Intel\q.exe () [File not signed]
FirewallRules: [{10612FB1-0380-421B-B082-B8BA26B1E8F5}] => (Allow) C:\Intel\q1.exe () [File not signed]
FirewallRules: [{7F88402D-5603-4E7C-91FC-6E920619F911}] => (Allow) C:\Intel\q1.exe () [File not signed]
FirewallRules: [{7AAD5D16-CE29-48C5-94C9-8BDE8C223BCF}] => (Allow) C:\Intel\q2.exe => No File
FirewallRules: [{402D99D1-2A5C-4C39-8072-25E3B604C5D5}] => (Allow) C:\Intel\q2.exe => No File
FirewallRules: [{6BCEF6D2-65AB-47A0-82CA-8346FF3A5ED2}] => (Allow) C:\Intel\q3.exe () [File not signed]
FirewallRules: [{B401BD38-CE8D-48FF-8DA8-81996A75DE21}] => (Allow) C:\Intel\q3.exe () [File not signed]
FirewallRules: [{43943638-1AE6-4EBD-BC97-B78DB97E42CC}] => (Allow) C:\Intel\q4.exe () [File not signed]
FirewallRules: [{CFE62A2F-1BFE-47C3-ADF2-4C58AD81879A}] => (Allow) C:\Intel\c.exe => No File
FirewallRules: [{F39E5E9E-FA06-4152-8480-13950A591C82}] => (Allow) C:\Intel\q4.exe () [File not signed]
FirewallRules: [{DC96F5F0-1829-4B34-9A1F-43C4B5520D90}] => (Allow) C:\Intel\c.exe => No File
FirewallRules: [{79D20E49-B035-46DE-8320-2ED5F4002E41}] => (Allow) C:\Intel\m\nmb.exe => No File
FirewallRules: [{0E451DA1-936E-44A7-93C1-53D788839942}] => (Allow) C:\Intel\m\nmb.exe => No File
FirewallRules: [{B37EA342-2929-4FF4-9EB2-FE4450D8B54C}] => (Allow) C:\Intel\m\xrm.exe => No File
FirewallRules: [{ABE610FD-6AB4-42CF-98B5-F3DAB5732B95}] => (Allow) C:\Intel\m\xrm.exe => No File
FirewallRules: [{2697A203-CBE5-4584-A8B2-28F68EB9C240}] => (Allow) C:\Intel\m\txr.exe => No File
FirewallRules: [{66E559FD-D056-422C-976C-8C3D407D8699}] => (Allow) C:\Intel\m\txr.exe => No File
FirewallRules: [{067275A7-E275-4F43-B729-6CE7DA770E9D}] => (Allow) C:\Intel\m\llm.exe => No File
FirewallRules: [{09501BA8-20E3-4D5A-83F5-197D72588058}] => (Allow) C:\Intel\m\llm.exe => No File
FirewallRules: [{489379E5-1935-48AD-892E-1B0719CC06BC}] => (Allow) C:\Intel\m\wmr.exe => No File
FirewallRules: [{6498C4B4-0B40-4A27-944B-C7140B82BB65}] => (Allow) C:\Intel\m\wmr.exe => No File
FirewallRules: [{3DD58EE7-77CC-432E-9143-F82BD402FDAE}] => (Allow) C:\Intel\m\sbr.exe => No File
FirewallRules: [{03BBD594-D7BA-4C85-BE2B-3ED6639F9824}] => (Allow) C:\Intel\m\sbr.exe => No File
FirewallRules: [{0168E55C-4D6D-4E22-B295-6AECD938BAF8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Tiberian Sun\SUN.EXE (Electronic Arts, Inc. -> )
FirewallRules: [{01B1B41B-1E9E-4916-A38A-0C1664003812}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Tiberian Sun\SUN.EXE (Electronic Arts, Inc. -> )
FirewallRules: [{0471E871-712D-437B-B756-4C3BAB445F13}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Tiberian Sun\FinalSun\FinalSun.exe (Electronic Arts, Inc. -> Electronic Arts, Inc.)
FirewallRules: [{7CA40135-2620-480C-ABAE-46252A3EEF86}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Tiberian Sun\FinalSun\FinalSun.exe (Electronic Arts, Inc. -> Electronic Arts, Inc.)
FirewallRules: [{16BDD679-4EC2-497D-B384-707933138F7C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Tiberian Sun\Game.exe (Electronic Arts, Inc. -> Electronic Arts Inc.)
FirewallRules: [{76E67B3D-34C7-408D-98C6-F55A6D638FA7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Command & Conquer Tiberian Sun\Game.exe (Electronic Arts, Inc. -> Electronic Arts Inc.)
FirewallRules: [{E38DFA95-F84E-4E54-9F8F-067BB562CBF8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.137.3425.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{DBF6017E-40C6-472B-8784-69EA2DD5F604}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.137.3425.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{FAA61CB8-44C9-4161-A9A7-A3BBE8D04946}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.137.3425.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3E9B48DE-7BFD-4DA2-9E2A-F616944316C0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.137.3425.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

==================== Restore Points =========================

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (03/06/2025 09:40:13 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Start Broadcast Receiver Server...

Error: (03/06/2025 09:40:13 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Wait Workflow Commands request from device.

Error: (03/06/2025 09:40:13 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Start Server...

Error: (03/06/2025 09:40:13 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: AppControlNamedPipeServer pipeName...AppControlServicePipe

Error: (03/06/2025 09:40:13 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Start Server...

Error: (03/06/2025 09:40:13 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Host.AddressList[1]: 192.168.0.146

Error: (03/06/2025 09:40:13 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Host.AddressList[0]: fe80::87b4:e995:466e:8bc5%17

Error: (03/06/2025 09:40:13 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Host.AddressList.Length: 2

System errors:
=============
Error: (03/06/2025 09:42:12 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Zprostředkovatel monitorování Ochrany System Guard v režimu runtime byla ukončena s následující chybou:
%%3489660935

Error: (03/06/2025 09:42:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (03/06/2025 09:42:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (30000 ms).

Error: (03/06/2025 09:30:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Zabezpečení Windows byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.

Error: (03/06/2025 09:30:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Disc Soft Lite Bus Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/06/2025 09:30:29 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (03/06/2025 09:30:29 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba TeamViewer 13 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 2000 milisekund: Restartovat službu.

Error: (03/06/2025 09:30:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Brother Workflow Application Controller byla neočekávaně ukončena. Tento stav nastal již 1krát.

Windows Defender:
================
Date: 2025-03-06 10:15:07
Description:
Antivirová ochrana v programu Microsoft Defender scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2025-03-03 15:48:52
Description:
Antivirová ochrana v programu Microsoft Defender scan has been stopped before completion.
Scan Type: Antimalwarový program
Scan Parameters: Rychlé prohledávání

Date: 2025-03-02 20:33:23
Description:
Antivirová ochrana v programu Microsoft Defender scan has been stopped before completion.
Scan Type: Antimalwarový program
Scan Parameters: Rychlé prohledávání

Date: 2025-02-28 13:15:15
Description:
Antivirová ochrana v programu Microsoft Defender has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Name: HackTool:Win32/Keygen!pz
Severity: Vysoké
Category: Nástroj
Path: file:_E:\disk CHinaski\03 - soft\ostatní\AutoCAD 2017 CZ\Autodesk AutoCAD 2017 (x64)(CZ)\Crack\xf-adsk2017_x64\xf-adsk2017_x64.exe
Detection Origin: Místní počítač
Detection Type: Konkrétní
Detection Source: Ochrana v reálném čase
Process Name: C:\Windows\explorer.exe
Security intelligence Version: AV: 1.423.156.0, AS: 1.423.156.0, NIS: 1.423.156.0
Engine Version: AM: 1.1.25010.7, NIS: 1.1.25010.7

Date: 2025-02-27 15:14:32
Description:
Antivirová ochrana v programu Microsoft Defender scan has been stopped before completion.
Scan Type: Antimalwarový program
Scan Parameters: Rychlé prohledávání
Event[0]:

Date: 2025-03-06 15:47:00
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.423.257.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.25010.7
Error code: 0x8007043c
Error description: Tuto službu nelze spustit v nouzovém režimu.

Date: 2025-03-06 15:36:56
Description:
Microsoft Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x8007043c
Error description: Tuto službu nelze spustit v nouzovém režimu.
Reason: Antimalware security intelligence has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.

Date: 2025-03-06 14:08:42
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.423.253.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.25010.7
Error code: 0x8007043c
Error description: Tuto službu nelze spustit v nouzovém režimu.

Date: 2025-03-06 13:58:34
Description:
Microsoft Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x8007043c
Error description: Tuto službu nelze spustit v nouzovém režimu.
Reason: Antimalware security intelligence has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.

Date: 2025-03-06 11:11:47
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.423.252.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.25010.7
Error code: 0x8007043c
Error description: Tuto službu nelze spustit v nouzovém režimu.

CodeIntegrity:
===============
Date: 2023-11-22 11:41:54
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2023-10-29 22:22:01
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2023-09-14 22:56:14
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2023-09-05 19:16:01
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\ImmersiveControlPanel\SystemSettings.exe) attempted to load \Device\HarddiskVolume1\Program Files\Google\Drive File Stream\80.0.1.0\crashpad_handler.exe that did not meet the Microsoft signing level requirements.

Date: 2023-08-27 20:29:46
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\ProgramData\Microsoft\Windows Defender\Platform\4.18.23070.1004-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

BIOS: American Megatrends Inc. V2.12 09/29/2013
Motherboard: MSI Z77A-G45 (MS-7752)
Processor: Intel(R) Core(TM) i5-3350P CPU @ 3.10GHz
Percentage of memory in use: 29%
Total physical RAM: 24525.68 MB
Available physical RAM: 17185.44 MB
Total Virtual: 28109.68 MB
Available Virtual: 19786.07 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:446.63 GB) (Free:168.21 GB) (Model: KINGSTON SA400S37480G) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (Data) (Fixed) (Total:931.5 GB) (Free:357.83 GB) (Model: WDC WD10JFCX-68N6GN0) NTFS
Drive e: (Zálohy) (Fixed) (Total:931.5 GB) (Free:308.06 GB) (Model: WDC WD10EZRX-00L4HB0) NTFS
Drive g: (puncochar.honza@gmail.com - G...) (Fixed) (Total:100 GB) (Free:32.22 GB) (Model: KINGSTON SA400S37480G) FAT32
Drive h: (linda.abrahamova@gmail.com - ...) (Fixed) (Total:100 GB) (Free:32.22 GB) (Model: KINGSTON SA400S37480G) FAT32

\\?\Volume{00015b59-0000-0000-0000-20a86f000000}\ () (Fixed) (Total:0.5 GB) (Free:0.08 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 447.1 GB) (Disk ID: 00015B59)
Partition 1: (Active) - (Size=446.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=514 MB) - (Type=27)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: BA09F425)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=0F Extended)

==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: B68F374D)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=0F Extended)

==================== End of Addition.txt =======================

Hasicz · #28 Příspěvek od **Hasicz** » 06 bře 2025 22:15

Soubor intel.rar zde
xxxxxxxx
snad se mi podařilo to zaheslovat správně, tuto funkci moc nepoužívám

Až si to táhnete, dejte prosím vědět, smažu to z uložto zase pryč.

Díky

#29 Příspěvek od **JaRon** » 06 bře 2025 22:18

Bootmgr je OK

Je to na dobrej ceste
Zajtra tu nebudem - mozte spolupracovat s kolegom

#30 Příspěvek od **altrok** » 06 bře 2025 23:57

Soubor nenalezen (link jsem smazal jen pro jistotu... ale mam ho ulozeny). Zkus mi ten archiv vytvorit jeste jednou, ale trosku jinak. Nezajimaji me mega velke soubory (predpokladam, ze budou v C:\Intel\logs ), takze mi do zipu dej jen ty mensi. No a duvod toho zaheslovani jsou antivirove enginy na strane poskytovatele, kam soubor uploadujes. Klidne se mohlo stat, ze archiv (rar) nebyl zaheslovany, po uploadu se do nej skener ulozta podival, nasel tam vir a smazal ho. Kdyby tam bylo heslo, nedostal by se tam

Pokracovani zitra, klidne mi link na stazeni hod do mailu.

VIRY.CZ

klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho