VIRY.CZ

Zdravím, před pár dny se nám začali lagovat pc hry. CS 2, GTA V. Divné je, že FPS neklesly furt byly při hodnotě 145+ a výš, ale prostě to lagovalo. Když jsem psal ve FIVEM(GTA V) do chatu, tak tam byla odezva od napsaní písmene 8 sekund.
Máme novou grafickou kartu

PC sestava: GPU: QICK RX 6600 XT
INTEL I5 -11400F
16GB RAM
SSD 500 GB
Základovka - ASUS TUF GAMING B560M-PLUS WIFI

Když jsem vložil novou grafickou kartu místo GTX 1060 6GB, tak jsem nepřeinstaloval pc z důvodů dokumentu, které jsem tam musel mít.

Nemůžu vložit log, prý to je delší než jaký je zde limit, tak to dám do přílohy.


Děkuji za pomoc.

Zdarvím!
Toto fórum se nezabývá herní problematikou. Můžeme vám ale PC vyčistit, možná se PC zrychlí. Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Zdravím, vím, že se to nezabývá herní problématikou, ale myslím si, že to dělá nějaký asi vír spíše, ale tak člověk neví


# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2023-07-19.3 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 12-19-2023
# Duration: 00:00:05
# OS: Windows 11 (Build 22621.2861)
# Cleaned: 29
# Failed: 0


***** [ Services ] *****

Deleted WCAssistantService

***** [ Folders ] *****

Deleted C:\Program Files (x86)\Lavasoft\Web Companion
Deleted C:\ProgramData\Application Data\Lavasoft\Web Companion
Deleted C:\ProgramData\IObit\Advanced SystemCare
Deleted C:\ProgramData\Lavasoft\Web Companion
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion
Deleted C:\ProgramData\Packer
Deleted C:\Users\micha\AppData\Local\Lavasoft\WEBCOMPANION.EXE_URL_SIQ0LWF3TZGXP2KHFKLLYBK3IDTBEHNG
Deleted C:\Users\micha\AppData\Roaming\IObit\Advanced SystemCare
Deleted C:\Users\micha\AppData\Roaming\Lavasoft\Web Companion
Deleted C:\Users\micha\AppData\Roaming\Tencent

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\Conduit
Deleted HKCU\Software\Lavasoft\Web Companion
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Web Companion
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Web Companion
Deleted HKLM\Software\Wow6432Node\Conduit
Deleted HKLM\Software\Wow6432Node\Lavasoft\Web Companion
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5deb4e0c-a26b-4d5b-899b-161d7a240bf7}|DisplayIcon
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5deb4e0c-a26b-4d5b-899b-161d7a240bf7}|DisplayName
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5deb4e0c-a26b-4d5b-899b-161d7a240bf7}|UninstallString
Deleted HKLM\System\Setup\FirstBoot\Services\WCAssistantService
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

Deleted AVG Secure Search
Deleted MyStart Search
Deleted MyStart Search
Deleted Search Here
Deleted Search Here

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [2628 octets] - [03/04/2022 16:41:46]
AdwCleaner[C00].txt - [2540 octets] - [03/04/2022 16:41:55]
AdwCleaner[S01].txt - [2548 octets] - [03/04/2022 16:42:33]
AdwCleaner[C01].txt - [2552 octets] - [03/04/2022 16:42:39]
AdwCleaner[S02].txt - [1650 octets] - [03/04/2022 16:42:52]
AdwCleaner[S03].txt - [1711 octets] - [17/04/2022 11:40:16]
AdwCleaner[S04].txt - [1772 octets] - [17/04/2022 11:40:34]
AdwCleaner[S05].txt - [4310 octets] - [19/12/2023 15:10:37]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C05].txt ##########


Děkuji za pomoc.

Ještě přikládám fotku co mi to hodilo po použití adwcleaneru. Toto mi vyskočilo na plochu. Nějaký error.

Děkuji

Bylo toho tam požehnaně. Možná poeškodil registry IOBit. Pokud jste ho vědomě nainstaloval, udělal jste chybu a teď se vymstila. Návod na opravu je zde: https://www-minitool-com.translate.goog ... _tr_pto=sc . Dejte nové logy FRST+Addition.

Takže, mám prvně opravit ten registr a nebo už mám poslat ten log ?

Děkuji.

Dávám na vědomí další chybu. Taktéž nemohu spustit hru na steamu cs 2. Píše mi to, že nemám přístup k tomuto souboru. Takže to vypadá, že to vše způsobuje asi ten registr.

Stačí, když pošlete log a pak (pokud bude třeba), opravíte ten registr. Ta chyba nijak logy neovlivní.

pitrisin píše: 19 pro 2023 17:43 Dávám na vědomí další chybu. Taktéž nemohu spustit hru na steamu cs 2. Píše mi to, že nemám přístup k tomuto souboru. Takže to vypadá, že to vše způsobuje asi ten registr.

Je to možné, ale opravovat hry tu nebudeme. Toto fórum není herní, ale bezpečnostní.

Zasílám logy do přílohy.

Děkuji za pomoc.

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-21-337787295-885085327-400922016-1001\...\Run: [VideoDownloadCapture] => C:\Program Files (x86)\Apowersoft\Video Download Capture 6\Video Download Capture 6.exe /autoStart (No File)
HKU\S-1-5-21-337787295-885085327-400922016-1001\...\MountPoints2: E - "E:\fhm10setup.exe"
HKU\S-1-5-21-337787295-885085327-400922016-1001\...\MountPoints2: {32755366-7013-11ee-b3db-50ebf67840e6} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-337787295-885085327-400922016-1001\...\MountPoints2: {32755be2-7013-11ee-b3db-50ebf67840e6} - "F:\HiSuiteDownLoader.exe"
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {BDBA1FCD-8543-495C-8FB9-237318771F04} - System32\Tasks\GoogleUpdateTaskMachineCore{9957A7C1-837A-4CC8-A2E0-0441D2431D08} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-03-23] (Google LLC -> Google LLC)
Task: {4A83F3FB-12BD-47CD-8604-A065D64EFA46} - System32\Tasks\GoogleUpdateTaskMachineUA{C44AED35-AA20-4B5E-8291-13054B22B67B} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-03-23] (Google LLC -> Google LLC)
Task: {A8CA6F9D-F85F-4D53-9A28-10C43B73BC1C} - System32\Tasks\Christmas Task (One-Time) => "C:\Program Files (x86)\IObit\Driver Booster\9.5.0\xmas.exe" /xr (No File)
Task: {4DA02AF8-25C9-421C-B18C-E7AFA8604DFB} - System32\Tasks\iTop BLACK FRIDAY Task (One-Time) => "C:\Program Files\iTop Screen Recorder\Pub\isrbfr.exe" /isr (No File)
Task: {C79FA680-D56F-4FD7-8523-FD48EBAAE040} - System32\Tasks\Sump Task (One-Time) => "C:\Program Files (x86)\IObit\Driver Booster\9.5.0\sump.exe" /sup2 (No File)
S2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [3413424 2022-06-11] (Lavasoft Software Canada Inc. -> ) <==== ATTENTION
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [22960 2022-06-11] (Lavasoft Software Canada Inc. -> ) <==== ATTENTION
S3 PDFWKRNL; \??\C:\Users\micha\AppData\Local\Temp\USBCPDFW\pdfwkrnl.sys [X] <==== ATTENTION
C:\Users\micha\AppData\Local\Temp
S3 cpuz148; \??\C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys [X]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{C44AED35-AA20-4B5E-8291-13054B22B67B}
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{9957A7C1-837A-4CC8-A2E0-0441D2431D08}
FCheck: C:\WINDOWS\SysWOW64\version_IObitDel.dll [2022-12-16] <==== ATTENTION (zero byte File/Folder)
ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> No File
ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> No File

AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk:C5D586BE93 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk:F208FC6732 [3442]
AlternateDataStreams: C:\Users\micha\Data aplikací:671890e017d8a4fb26004192461213ff [394]
AlternateDataStreams: C:\Users\micha\AppData\Roaming:671890e017d8a4fb26004192461213ff [394]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [8106]
FirewallRules: [UDP Query User{56AB47EA-D434-4BBD-BD72-62909883AE46}D:\gold.rush.the.game.v1.5.8.15125-goldberg\gold rush the game\goldrushthegame.exe] => (Allow) D:\gold.rush.the.game.v1.5.8.15125-goldberg\gold rush the game\goldrushthegame.exe => No File
FirewallRules: [TCP Query User{09780D20-5143-41C5-8B1F-3FA27615E2F5}D:\gold.rush.the.game.v1.5.8.15125-goldberg\gold rush the game\goldrushthegame.exe] => (Allow) D:\gold.rush.the.game.v1.5.8.15125-goldberg\gold rush the game\goldrushthegame.exe => No File
FirewallRules: [{F5BFAD61-F5F7-4FD5-960C-D455E24E2A65}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SUPER PEOPLE Playtest\geegeerun.exe => No File
FirewallRules: [{1F834AA0-3177-4C4C-AA75-AFD79BDA6846}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SUPER PEOPLE Playtest\geegeerun.exe => No File
FirewallRules: [UDP Query User{FC89465D-FFB3-43A4-AB1A-17A0A533251F}D:\turmoil.v3.0.39\turmoil.exe] => (Block) D:\turmoil.v3.0.39\turmoil.exe => No File
FirewallRules: [TCP Query User{4BFA45B8-5A39-4549-91AA-532A2425D47E}D:\turmoil.v3.0.39\turmoil.exe] => (Block) D:\turmoil.v3.0.39\turmoil.exe => No File
FirewallRules: [{09AB3AFB-3521-4755-B0C4-09378D451112}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{1F07D062-4B47-4239-B9F2-141B6A44B8A7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [TCP Query User{B5AFAADF-D222-4E9B-9D4D-B61A8624C82C}D:\superpower.3.v1.0.8-goldberg\exec\clientue4\binaries\win64\clientue4-win64-shipping.exe] => (Block) D:\superpower.3.v1.0.8-goldberg\exec\clientue4\binaries\win64\clientue4-win64-shipping.exe => No File
FirewallRules: [UDP Query User{4DBFE769-2CB7-4B05-89D7-37C79CF70E90}D:\superpower.3.v1.0.8-goldberg\exec\clientue4\binaries\win64\clientue4-win64-shipping.exe] => (Block) D:\superpower.3.v1.0.8-goldberg\exec\clientue4\binaries\win64\clientue4-win64-shipping.exe => No File
FirewallRules: [TCP Query User{0A5A84F4-0CF5-4097-A227-5FCFD4C8E65B}D:\prison simulator\prison simulator.exe] => (Block) D:\prison simulator\prison simulator.exe => No File
FirewallRules: [UDP Query User{81647FFB-5721-4072-B061-1ECB667D035F}D:\prison simulator\prison simulator.exe] => (Block) D:\prison simulator\prison simulator.exe => No File
FirewallRules: [TCP Query User{04242A73-8664-4754-9AF3-C748857257C6}D:\kingdomcomedeliverance\bin\win64mastermasterepicpgo\kingdomcome.exe] => (Allow) D:\kingdomcomedeliverance\bin\win64mastermasterepicpgo\kingdomcome.exe => No File
FirewallRules: [UDP Query User{76673031-60B9-4BFA-BB11-0D681A77BBFA}D:\kingdomcomedeliverance\bin\win64mastermasterepicpgo\kingdomcome.exe] => (Allow) D:\kingdomcomedeliverance\bin\win64mastermasterepicpgo\kingdomcome.exe => No File
FirewallRules: [TCP Query User{8AFBB6AB-86DA-482E-9645-93C8A33F37B5}C:\users\micha\appdata\local\faceit\app-1.31.9\faceit.exe] => (Allow) C:\users\micha\appdata\local\faceit\app-1.31.9\faceit.exe => No File
FirewallRules: [UDP Query User{691B78E5-7C41-4030-8E75-7DF3E12ADEB0}C:\users\micha\appdata\local\faceit\app-1.31.9\faceit.exe] => (Allow) C:\users\micha\appdata\local\faceit\app-1.31.9\faceit.exe => No File
FirewallRules: [TCP Query User{53CB8D08-B4F4-4541-8E44-DFE13D722ADC}D:\stažené soubory\sons.of.the.forest\sons.of.the.forest\sons of the forest\sonsoftheforest.exe] => (Allow) D:\stažené soubory\sons.of.the.forest\sons.of.the.forest\sons of the forest\sonsoftheforest.exe => No File
FirewallRules: [UDP Query User{2B81BB1A-19A6-4E4C-B966-049B9AD9AE5F}D:\stažené soubory\sons.of.the.forest\sons.of.the.forest\sons of the forest\sonsoftheforest.exe] => (Allow) D:\stažené soubory\sons.of.the.forest\sons.of.the.forest\sons of the forest\sonsoftheforest.exe => No File
FirewallRules: [TCP Query User{D2FDA108-9291-4107-AE39-D52416908B36}C:\users\micha\appdata\local\faceit\app-1.31.12\faceit.exe] => (Allow) C:\users\micha\appdata\local\faceit\app-1.31.12\faceit.exe => No File
FirewallRules: [UDP Query User{C39D9B61-B11F-4C64-92B3-A9F0FF976F69}C:\users\micha\appdata\local\faceit\app-1.31.12\faceit.exe] => (Allow) C:\users\micha\appdata\local\faceit\app-1.31.12\faceit.exe => No File
FirewallRules: [TCP Query User{94EECBD0-BD79-47DF-9518-1739008F008C}D:\nová složka\cago\game\bin\win64\cs2.exe] => (Allow) D:\nová složka\cago\game\bin\win64\cs2.exe => No File
FirewallRules: [UDP Query User{762F32E5-883A-4A08-824E-9402D26BA3D4}D:\nová složka\cago\game\bin\win64\cs2.exe] => (Allow) D:\nová složka\cago\game\bin\win64\cs2.exe => No File
FirewallRules: [TCP Query User{26F1093D-1F9A-478F-B3EC-BF71CBC93416}D:\dying light 1 epic games\dyinglight\dyinglightgame.exe] => (Allow) D:\dying light 1 epic games\dyinglight\dyinglightgame.exe => No File
FirewallRules: [UDP Query User{4D21359F-6A73-4342-BB36-01CBBFD2A8E9}D:\dying light 1 epic games\dyinglight\dyinglightgame.exe] => (Allow) D:\dying light 1 epic games\dyinglight\dyinglightgame.exe => No File
FirewallRules: [TCP Query User{859DB7A4-7985-4A24-A948-594E67FF2388}D:\big.ambitions.build.11038881\big ambitions.exe] => (Block) D:\big.ambitions.build.11038881\big ambitions.exe => No File
FirewallRules: [UDP Query User{6F55F4CE-839E-4B0E-8F2C-A7822EDC84FF}D:\big.ambitions.build.11038881\big ambitions.exe] => (Block) D:\big.ambitions.build.11038881\big ambitions.exe => No File
FirewallRules: [TCP Query User{F3AA73BE-82A8-4E27-A1CB-C06EFF59180F}C:\users\micha\appdata\local\faceit\app-1.31.14\faceit.exe] => (Allow) C:\users\micha\appdata\local\faceit\app-1.31.14\faceit.exe => No File
FirewallRules: [UDP Query User{DBF0DF3D-58D0-4B8C-8662-729522B24EF6}C:\users\micha\appdata\local\faceit\app-1.31.14\faceit.exe] => (Allow) C:\users\micha\appdata\local\faceit\app-1.31.14\faceit.exe => No File
FirewallRules: [TCP Query User{43150142-89EA-41B6-AB5A-22F0EFD229CC}C:\users\micha\appdata\local\discord\app-1.0.9013\discord.exe] => (Block) C:\users\micha\appdata\local\discord\app-1.0.9013\discord.exe => No File
FirewallRules: [UDP Query User{DE9AB9F3-916C-449B-80B5-E9A7DEAAB7B4}C:\users\micha\appdata\local\discord\app-1.0.9013\discord.exe] => (Block) C:\users\micha\appdata\local\discord\app-1.0.9013\discord.exe => No File
FirewallRules: [TCP Query User{3444FEE9-ADBD-4039-A2B6-85920484D63B}C:\program files (x86)\the-quarry\smg026\binaries\win64\thequarry-win64-shipping.exe] => (Allow) C:\program files (x86)\the-quarry\smg026\binaries\win64\thequarry-win64-shipping.exe => No File
FirewallRules: [UDP Query User{DCAF675E-9288-41D7-B113-67C0AAB68084}C:\program files (x86)\the-quarry\smg026\binaries\win64\thequarry-win64-shipping.exe] => (Allow) C:\program files (x86)\the-quarry\smg026\binaries\win64\thequarry-win64-shipping.exe => No File
FirewallRules: [TCP Query User{4F4494E0-86CD-4E6F-B1AC-50844DD0191E}D:\outlast 3\midnightghosthunt\midnightghosthunt\binaries\win64\midnightghosthunt-win64-shipping.exe] => (Allow) D:\outlast 3\midnightghosthunt\midnightghosthunt\binaries\win64\midnightghosthunt-win64-shipping.exe => No File
FirewallRules: [UDP Query User{315F7EBE-F549-41D6-BFDA-E5C9600777A6}D:\outlast 3\midnightghosthunt\midnightghosthunt\binaries\win64\midnightghosthunt-win64-shipping.exe] => (Allow) D:\outlast 3\midnightghosthunt\midnightghosthunt\binaries\win64\midnightghosthunt-win64-shipping.exe => No File
FirewallRules: [TCP Query User{57383AD8-668C-4704-A719-9C37F36EBA40}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe => No File
FirewallRules: [UDP Query User{8EF78463-5C71-4791-8AB7-F05CFA670E97}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe => No File
FirewallRules: [TCP Query User{5CF20DBC-0F86-4E7C-8FCA-F55AAF494EF0}D:\games\i am your president\i am your president.exe] => (Block) D:\games\i am your president\i am your president.exe => No File
FirewallRules: [UDP Query User{9C7A2D1C-9E11-494C-8247-2434A0832666}D:\games\i am your president\i am your president.exe] => (Block) D:\games\i am your president\i am your president.exe => No File
FirewallRules: [TCP Query User{97E3BB3D-18B3-4A2B-AF59-46DA6059CED0}D:\car.for.sale.simulator.2023.build.11499307\car for sale simulator 2023.exe] => (Block) D:\car.for.sale.simulator.2023.build.11499307\car for sale simulator 2023.exe => No File
FirewallRules: [UDP Query User{25ED41A6-AB4F-44A6-A15B-D7BCC048E9A0}D:\car.for.sale.simulator.2023.build.11499307\car for sale simulator 2023.exe] => (Block) D:\car.for.sale.simulator.2023.build.11499307\car for sale simulator 2023.exe => No File
FirewallRules: [TCP Query User{0E2FFD1C-9479-4CEA-BAB5-5BF073AF02FE}D:\car.for.sale.simulator.2023.build.11560569\car for sale simulator 2023.exe] => (Block) D:\car.for.sale.simulator.2023.build.11560569\car for sale simulator 2023.exe => No File
FirewallRules: [UDP Query User{02CC0959-0481-4448-9DD3-4CDDE772139B}D:\car.for.sale.simulator.2023.build.11560569\car for sale simulator 2023.exe] => (Block) D:\car.for.sale.simulator.2023.build.11560569\car for sale simulator 2023.exe => No File
FirewallRules: [TCP Query User{5A756B4E-42A9-4D99-B851-9898D2EF298E}D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\cartel tycoon launcher.exe] => (Block) D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\cartel tycoon launcher.exe => No File
FirewallRules: [UDP Query User{5F4FD070-DC4A-4E0F-B93D-A43C992588B2}D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\cartel tycoon launcher.exe] => (Block) D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\cartel tycoon launcher.exe => No File
FirewallRules: [TCP Query User{C81D30F2-8895-4742-BC58-896D057DB828}D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\apps\cartel tycoon\carteltycoon\binaries\win64\carteltycoon-win64-shipping.exe] => (Block) D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\apps\cartel tycoon\carteltycoon\binaries\win64\carteltycoon-win64-shipping.exe => No File
FirewallRules: [UDP Query User{8CB29690-AA33-4FD9-9D4A-729909134343}D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\apps\cartel tycoon\carteltycoon\binaries\win64\carteltycoon-win64-shipping.exe] => (Block) D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\apps\cartel tycoon\carteltycoon\binaries\win64\carteltycoon-win64-shipping.exe => No File
FirewallRules: [TCP Query User{187593BA-3756-47A5-B433-B46DF7788D3B}D:\food.truck.simulator.build.20230129\ftr3\binaries\win64\ftr3-win64-shipping.exe] => (Block) D:\food.truck.simulator.build.20230129\ftr3\binaries\win64\ftr3-win64-shipping.exe => No File
FirewallRules: [UDP Query User{FD748CD8-2AA1-4E75-B648-37BFE9541A58}D:\food.truck.simulator.build.20230129\ftr3\binaries\win64\ftr3-win64-shipping.exe] => (Block) D:\food.truck.simulator.build.20230129\ftr3\binaries\win64\ftr3-win64-shipping.exe => No File
FirewallRules: [TCP Query User{C1EF418D-6EAF-4F83-AC59-D095D5B94E48}C:\users\micha\appdata\local\programs\opera gx\100.0.4815.44\opera.exe] => (Block) C:\users\micha\appdata\local\programs\opera gx\100.0.4815.44\opera.exe => No File
FirewallRules: [UDP Query User{2842846A-9FB5-406E-9619-8C0CAB5252CA}C:\users\micha\appdata\local\programs\opera gx\100.0.4815.44\opera.exe] => (Block) C:\users\micha\appdata\local\programs\opera gx\100.0.4815.44\opera.exe => No File
FirewallRules: [TCP Query User{5C2707A1-489B-4241-BA4A-E5CB11A7B9D9}D:\outlast 3\payday2\payday2_win32_release.exe] => (Allow) D:\outlast 3\payday2\payday2_win32_release.exe => No File
FirewallRules: [UDP Query User{3A965723-EAD3-40D1-968E-FF774C86E13E}D:\outlast 3\payday2\payday2_win32_release.exe] => (Allow) D:\outlast 3\payday2\payday2_win32_release.exe => No File
FirewallRules: [TCP Query User{BE028394-2F9E-40FA-AC9F-0443F83A314F}D:\steamlibrary\steamapps\common\bulanci\bulanci.exe] => (Allow) D:\steamlibrary\steamapps\common\bulanci\bulanci.exe => No File
FirewallRules: [UDP Query User{8170ED9D-E99F-407B-BD52-748E1E1CEC5A}D:\steamlibrary\steamapps\common\bulanci\bulanci.exe] => (Allow) D:\steamlibrary\steamapps\common\bulanci\bulanci.exe => No File
FirewallRules: [{6B517507-BE41-44ED-90B9-5B39EB0F9810}] => (Allow) C:\Users\micha\AppData\Roaming\uTorrent\uTorrent.exe => No File
FirewallRules: [{B1B46CC0-75B8-4ECA-A6CA-2C5DD6752208}] => (Allow) C:\Users\micha\AppData\Roaming\uTorrent\uTorrent.exe => No File
FirewallRules: [{2C999FB7-5ADD-4DDB-91AC-E34ABF02E2C9}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture 6\Video Download Capture 6.exe => No File
FirewallRules: [{509E7F04-460F-452E-BDD9-F2DA71538641}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture 6\Video Download Capture 6.exe => No File
FirewallRules: [{F9791703-1FC3-420E-9288-FEB8B8B6DE12}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture 6\rtmpsrv.exe => No File
FirewallRules: [{37627EE9-C7D3-46F4-AC6A-2DC14AFB34EE}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture 6\rtmpsrv.exe => No File
FirewallRules: [{80291A5D-166B-43B4-AAAA-D1B5D9BD879F}] => (Allow) C:\Program Files\Vuze\Azureus.exe => No File
FirewallRules: [{6173FDAD-7E77-4685-874F-D16438AA577C}] => (Allow) C:\Program Files\Vuze\Azureus.exe => No File
FirewallRules: [TCP Query User{7903FE89-E165-4607-ADF6-53945C926D6F}C:\program files (x86)\v380\v380.exe] => (Allow) C:\program files (x86)\v380\v380.exe => No File
FirewallRules: [UDP Query User{1D8363FE-6E16-44AF-BEAE-774EB2BA02ED}C:\program files (x86)\v380\v380.exe] => (Allow) C:\program files (x86)\v380\v380.exe => No File
FirewallRules: [{82DB6B2F-215E-4FCE-A292-4AE4AE7A365B}] => (Allow) C:\Program Files\BitComet\BitComet.exe => No File
FirewallRules: [{96544A7A-354F-493F-9A1A-FCB398452A37}] => (Allow) C:\Program Files\BitComet\BitComet.exe => No File
FirewallRules: [{C0706E5D-A4BE-466B-889D-F27B1D49B405}] => (Allow) C:\Program Files\BitComet\BitComet.exe => No File
FirewallRules: [{D4304D03-E13A-4F64-91DB-38ABA4323998}] => (Allow) C:\Program Files\BitComet\BitComet.exe => No File

EmptyTemp:
Hosts:
End

Uložte do C:\Users\micha\OneDrive\Plocha jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Zasílám log.

Děkuji


Fix result of Farbar Recovery Scan Tool (x64) Version: 18-12-2023
Ran by micha (19-12-2023 20:02:19) Run:1
Running from C:\Users\micha\OneDrive\Plocha
Loaded Profiles: micha
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKU\S-1-5-21-337787295-885085327-400922016-1001\...\Run: [VideoDownloadCapture] => C:\Program Files (x86)\Apowersoft\Video Download Capture 6\Video Download Capture 6.exe /autoStart (No File)
HKU\S-1-5-21-337787295-885085327-400922016-1001\...\MountPoints2: E - "E:\fhm10setup.exe"
HKU\S-1-5-21-337787295-885085327-400922016-1001\...\MountPoints2: {32755366-7013-11ee-b3db-50ebf67840e6} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-337787295-885085327-400922016-1001\...\MountPoints2: {32755be2-7013-11ee-b3db-50ebf67840e6} - "F:\HiSuiteDownLoader.exe"
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {BDBA1FCD-8543-495C-8FB9-237318771F04} - System32\Tasks\GoogleUpdateTaskMachineCore{9957A7C1-837A-4CC8-A2E0-0441D2431D08} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-03-23] (Google LLC -> Google LLC)
Task: {4A83F3FB-12BD-47CD-8604-A065D64EFA46} - System32\Tasks\GoogleUpdateTaskMachineUA{C44AED35-AA20-4B5E-8291-13054B22B67B} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-03-23] (Google LLC -> Google LLC)
Task: {A8CA6F9D-F85F-4D53-9A28-10C43B73BC1C} - System32\Tasks\Christmas Task (One-Time) => "C:\Program Files (x86)\IObit\Driver Booster\9.5.0\xmas.exe" /xr (No File)
Task: {4DA02AF8-25C9-421C-B18C-E7AFA8604DFB} - System32\Tasks\iTop BLACK FRIDAY Task (One-Time) => "C:\Program Files\iTop Screen Recorder\Pub\isrbfr.exe" /isr (No File)
Task: {C79FA680-D56F-4FD7-8523-FD48EBAAE040} - System32\Tasks\Sump Task (One-Time) => "C:\Program Files (x86)\IObit\Driver Booster\9.5.0\sump.exe" /sup2 (No File)
S2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [3413424 2022-06-11] (Lavasoft Software Canada Inc. -> ) <==== ATTENTION
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [22960 2022-06-11] (Lavasoft Software Canada Inc. -> ) <==== ATTENTION
S3 PDFWKRNL; \??\C:\Users\micha\AppData\Local\Temp\USBCPDFW\pdfwkrnl.sys [X] <==== ATTENTION
C:\Users\micha\AppData\Local\Temp
S3 cpuz148; \??\C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys [X]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{C44AED35-AA20-4B5E-8291-13054B22B67B}
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{9957A7C1-837A-4CC8-A2E0-0441D2431D08}
FCheck: C:\WINDOWS\SysWOW64\version_IObitDel.dll [2022-12-16] <==== ATTENTION (zero byte File/Folder)
ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> No File
ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> No File

AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk:C5D586BE93 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk:F208FC6732 [3442]
AlternateDataStreams: C:\Users\micha\Data aplikací:671890e017d8a4fb26004192461213ff [394]
AlternateDataStreams: C:\Users\micha\AppData\Roaming:671890e017d8a4fb26004192461213ff [394]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [8106]
FirewallRules: [UDP Query User{56AB47EA-D434-4BBD-BD72-62909883AE46}D:\gold.rush.the.game.v1.5.8.15125-goldberg\gold rush the game\goldrushthegame.exe] => (Allow) D:\gold.rush.the.game.v1.5.8.15125-goldberg\gold rush the game\goldrushthegame.exe => No File
FirewallRules: [TCP Query User{09780D20-5143-41C5-8B1F-3FA27615E2F5}D:\gold.rush.the.game.v1.5.8.15125-goldberg\gold rush the game\goldrushthegame.exe] => (Allow) D:\gold.rush.the.game.v1.5.8.15125-goldberg\gold rush the game\goldrushthegame.exe => No File
FirewallRules: [{F5BFAD61-F5F7-4FD5-960C-D455E24E2A65}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SUPER PEOPLE Playtest\geegeerun.exe => No File
FirewallRules: [{1F834AA0-3177-4C4C-AA75-AFD79BDA6846}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SUPER PEOPLE Playtest\geegeerun.exe => No File
FirewallRules: [UDP Query User{FC89465D-FFB3-43A4-AB1A-17A0A533251F}D:\turmoil.v3.0.39\turmoil.exe] => (Block) D:\turmoil.v3.0.39\turmoil.exe => No File
FirewallRules: [TCP Query User{4BFA45B8-5A39-4549-91AA-532A2425D47E}D:\turmoil.v3.0.39\turmoil.exe] => (Block) D:\turmoil.v3.0.39\turmoil.exe => No File
FirewallRules: [{09AB3AFB-3521-4755-B0C4-09378D451112}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{1F07D062-4B47-4239-B9F2-141B6A44B8A7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [TCP Query User{B5AFAADF-D222-4E9B-9D4D-B61A8624C82C}D:\superpower.3.v1.0.8-goldberg\exec\clientue4\binaries\win64\clientue4-win64-shipping.exe] => (Block) D:\superpower.3.v1.0.8-goldberg\exec\clientue4\binaries\win64\clientue4-win64-shipping.exe => No File
FirewallRules: [UDP Query User{4DBFE769-2CB7-4B05-89D7-37C79CF70E90}D:\superpower.3.v1.0.8-goldberg\exec\clientue4\binaries\win64\clientue4-win64-shipping.exe] => (Block) D:\superpower.3.v1.0.8-goldberg\exec\clientue4\binaries\win64\clientue4-win64-shipping.exe => No File
FirewallRules: [TCP Query User{0A5A84F4-0CF5-4097-A227-5FCFD4C8E65B}D:\prison simulator\prison simulator.exe] => (Block) D:\prison simulator\prison simulator.exe => No File
FirewallRules: [UDP Query User{81647FFB-5721-4072-B061-1ECB667D035F}D:\prison simulator\prison simulator.exe] => (Block) D:\prison simulator\prison simulator.exe => No File
FirewallRules: [TCP Query User{04242A73-8664-4754-9AF3-C748857257C6}D:\kingdomcomedeliverance\bin\win64mastermasterepicpgo\kingdomcome.exe] => (Allow) D:\kingdomcomedeliverance\bin\win64mastermasterepicpgo\kingdomcome.exe => No File
FirewallRules: [UDP Query User{76673031-60B9-4BFA-BB11-0D681A77BBFA}D:\kingdomcomedeliverance\bin\win64mastermasterepicpgo\kingdomcome.exe] => (Allow) D:\kingdomcomedeliverance\bin\win64mastermasterepicpgo\kingdomcome.exe => No File
FirewallRules: [TCP Query User{8AFBB6AB-86DA-482E-9645-93C8A33F37B5}C:\users\micha\appdata\local\faceit\app-1.31.9\faceit.exe] => (Allow) C:\users\micha\appdata\local\faceit\app-1.31.9\faceit.exe => No File
FirewallRules: [UDP Query User{691B78E5-7C41-4030-8E75-7DF3E12ADEB0}C:\users\micha\appdata\local\faceit\app-1.31.9\faceit.exe] => (Allow) C:\users\micha\appdata\local\faceit\app-1.31.9\faceit.exe => No File
FirewallRules: [TCP Query User{53CB8D08-B4F4-4541-8E44-DFE13D722ADC}D:\stažené soubory\sons.of.the.forest\sons.of.the.forest\sons of the forest\sonsoftheforest.exe] => (Allow) D:\stažené soubory\sons.of.the.forest\sons.of.the.forest\sons of the forest\sonsoftheforest.exe => No File
FirewallRules: [UDP Query User{2B81BB1A-19A6-4E4C-B966-049B9AD9AE5F}D:\stažené soubory\sons.of.the.forest\sons.of.the.forest\sons of the forest\sonsoftheforest.exe] => (Allow) D:\stažené soubory\sons.of.the.forest\sons.of.the.forest\sons of the forest\sonsoftheforest.exe => No File
FirewallRules: [TCP Query User{D2FDA108-9291-4107-AE39-D52416908B36}C:\users\micha\appdata\local\faceit\app-1.31.12\faceit.exe] => (Allow) C:\users\micha\appdata\local\faceit\app-1.31.12\faceit.exe => No File
FirewallRules: [UDP Query User{C39D9B61-B11F-4C64-92B3-A9F0FF976F69}C:\users\micha\appdata\local\faceit\app-1.31.12\faceit.exe] => (Allow) C:\users\micha\appdata\local\faceit\app-1.31.12\faceit.exe => No File
FirewallRules: [TCP Query User{94EECBD0-BD79-47DF-9518-1739008F008C}D:\nová složka\cago\game\bin\win64\cs2.exe] => (Allow) D:\nová složka\cago\game\bin\win64\cs2.exe => No File
FirewallRules: [UDP Query User{762F32E5-883A-4A08-824E-9402D26BA3D4}D:\nová složka\cago\game\bin\win64\cs2.exe] => (Allow) D:\nová složka\cago\game\bin\win64\cs2.exe => No File
FirewallRules: [TCP Query User{26F1093D-1F9A-478F-B3EC-BF71CBC93416}D:\dying light 1 epic games\dyinglight\dyinglightgame.exe] => (Allow) D:\dying light 1 epic games\dyinglight\dyinglightgame.exe => No File
FirewallRules: [UDP Query User{4D21359F-6A73-4342-BB36-01CBBFD2A8E9}D:\dying light 1 epic games\dyinglight\dyinglightgame.exe] => (Allow) D:\dying light 1 epic games\dyinglight\dyinglightgame.exe => No File
FirewallRules: [TCP Query User{859DB7A4-7985-4A24-A948-594E67FF2388}D:\big.ambitions.build.11038881\big ambitions.exe] => (Block) D:\big.ambitions.build.11038881\big ambitions.exe => No File
FirewallRules: [UDP Query User{6F55F4CE-839E-4B0E-8F2C-A7822EDC84FF}D:\big.ambitions.build.11038881\big ambitions.exe] => (Block) D:\big.ambitions.build.11038881\big ambitions.exe => No File
FirewallRules: [TCP Query User{F3AA73BE-82A8-4E27-A1CB-C06EFF59180F}C:\users\micha\appdata\local\faceit\app-1.31.14\faceit.exe] => (Allow) C:\users\micha\appdata\local\faceit\app-1.31.14\faceit.exe => No File
FirewallRules: [UDP Query User{DBF0DF3D-58D0-4B8C-8662-729522B24EF6}C:\users\micha\appdata\local\faceit\app-1.31.14\faceit.exe] => (Allow) C:\users\micha\appdata\local\faceit\app-1.31.14\faceit.exe => No File
FirewallRules: [TCP Query User{43150142-89EA-41B6-AB5A-22F0EFD229CC}C:\users\micha\appdata\local\discord\app-1.0.9013\discord.exe] => (Block) C:\users\micha\appdata\local\discord\app-1.0.9013\discord.exe => No File
FirewallRules: [UDP Query User{DE9AB9F3-916C-449B-80B5-E9A7DEAAB7B4}C:\users\micha\appdata\local\discord\app-1.0.9013\discord.exe] => (Block) C:\users\micha\appdata\local\discord\app-1.0.9013\discord.exe => No File
FirewallRules: [TCP Query User{3444FEE9-ADBD-4039-A2B6-85920484D63B}C:\program files (x86)\the-quarry\smg026\binaries\win64\thequarry-win64-shipping.exe] => (Allow) C:\program files (x86)\the-quarry\smg026\binaries\win64\thequarry-win64-shipping.exe => No File
FirewallRules: [UDP Query User{DCAF675E-9288-41D7-B113-67C0AAB68084}C:\program files (x86)\the-quarry\smg026\binaries\win64\thequarry-win64-shipping.exe] => (Allow) C:\program files (x86)\the-quarry\smg026\binaries\win64\thequarry-win64-shipping.exe => No File
FirewallRules: [TCP Query User{4F4494E0-86CD-4E6F-B1AC-50844DD0191E}D:\outlast 3\midnightghosthunt\midnightghosthunt\binaries\win64\midnightghosthunt-win64-shipping.exe] => (Allow) D:\outlast 3\midnightghosthunt\midnightghosthunt\binaries\win64\midnightghosthunt-win64-shipping.exe => No File
FirewallRules: [UDP Query User{315F7EBE-F549-41D6-BFDA-E5C9600777A6}D:\outlast 3\midnightghosthunt\midnightghosthunt\binaries\win64\midnightghosthunt-win64-shipping.exe] => (Allow) D:\outlast 3\midnightghosthunt\midnightghosthunt\binaries\win64\midnightghosthunt-win64-shipping.exe => No File
FirewallRules: [TCP Query User{57383AD8-668C-4704-A719-9C37F36EBA40}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe => No File
FirewallRules: [UDP Query User{8EF78463-5C71-4791-8AB7-F05CFA670E97}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe => No File
FirewallRules: [TCP Query User{5CF20DBC-0F86-4E7C-8FCA-F55AAF494EF0}D:\games\i am your president\i am your president.exe] => (Block) D:\games\i am your president\i am your president.exe => No File
FirewallRules: [UDP Query User{9C7A2D1C-9E11-494C-8247-2434A0832666}D:\games\i am your president\i am your president.exe] => (Block) D:\games\i am your president\i am your president.exe => No File
FirewallRules: [TCP Query User{97E3BB3D-18B3-4A2B-AF59-46DA6059CED0}D:\car.for.sale.simulator.2023.build.11499307\car for sale simulator 2023.exe] => (Block) D:\car.for.sale.simulator.2023.build.11499307\car for sale simulator 2023.exe => No File
FirewallRules: [UDP Query User{25ED41A6-AB4F-44A6-A15B-D7BCC048E9A0}D:\car.for.sale.simulator.2023.build.11499307\car for sale simulator 2023.exe] => (Block) D:\car.for.sale.simulator.2023.build.11499307\car for sale simulator 2023.exe => No File
FirewallRules: [TCP Query User{0E2FFD1C-9479-4CEA-BAB5-5BF073AF02FE}D:\car.for.sale.simulator.2023.build.11560569\car for sale simulator 2023.exe] => (Block) D:\car.for.sale.simulator.2023.build.11560569\car for sale simulator 2023.exe => No File
FirewallRules: [UDP Query User{02CC0959-0481-4448-9DD3-4CDDE772139B}D:\car.for.sale.simulator.2023.build.11560569\car for sale simulator 2023.exe] => (Block) D:\car.for.sale.simulator.2023.build.11560569\car for sale simulator 2023.exe => No File
FirewallRules: [TCP Query User{5A756B4E-42A9-4D99-B851-9898D2EF298E}D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\cartel tycoon launcher.exe] => (Block) D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\cartel tycoon launcher.exe => No File
FirewallRules: [UDP Query User{5F4FD070-DC4A-4E0F-B93D-A43C992588B2}D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\cartel tycoon launcher.exe] => (Block) D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\cartel tycoon launcher.exe => No File
FirewallRules: [TCP Query User{C81D30F2-8895-4742-BC58-896D057DB828}D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\apps\cartel tycoon\carteltycoon\binaries\win64\carteltycoon-win64-shipping.exe] => (Block) D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\apps\cartel tycoon\carteltycoon\binaries\win64\carteltycoon-win64-shipping.exe => No File
FirewallRules: [UDP Query User{8CB29690-AA33-4FD9-9D4A-729909134343}D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\apps\cartel tycoon\carteltycoon\binaries\win64\carteltycoon-win64-shipping.exe] => (Block) D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\apps\cartel tycoon\carteltycoon\binaries\win64\carteltycoon-win64-shipping.exe => No File
FirewallRules: [TCP Query User{187593BA-3756-47A5-B433-B46DF7788D3B}D:\food.truck.simulator.build.20230129\ftr3\binaries\win64\ftr3-win64-shipping.exe] => (Block) D:\food.truck.simulator.build.20230129\ftr3\binaries\win64\ftr3-win64-shipping.exe => No File
FirewallRules: [UDP Query User{FD748CD8-2AA1-4E75-B648-37BFE9541A58}D:\food.truck.simulator.build.20230129\ftr3\binaries\win64\ftr3-win64-shipping.exe] => (Block) D:\food.truck.simulator.build.20230129\ftr3\binaries\win64\ftr3-win64-shipping.exe => No File
FirewallRules: [TCP Query User{C1EF418D-6EAF-4F83-AC59-D095D5B94E48}C:\users\micha\appdata\local\programs\opera gx\100.0.4815.44\opera.exe] => (Block) C:\users\micha\appdata\local\programs\opera gx\100.0.4815.44\opera.exe => No File
FirewallRules: [UDP Query User{2842846A-9FB5-406E-9619-8C0CAB5252CA}C:\users\micha\appdata\local\programs\opera gx\100.0.4815.44\opera.exe] => (Block) C:\users\micha\appdata\local\programs\opera gx\100.0.4815.44\opera.exe => No File
FirewallRules: [TCP Query User{5C2707A1-489B-4241-BA4A-E5CB11A7B9D9}D:\outlast 3\payday2\payday2_win32_release.exe] => (Allow) D:\outlast 3\payday2\payday2_win32_release.exe => No File
FirewallRules: [UDP Query User{3A965723-EAD3-40D1-968E-FF774C86E13E}D:\outlast 3\payday2\payday2_win32_release.exe] => (Allow) D:\outlast 3\payday2\payday2_win32_release.exe => No File
FirewallRules: [TCP Query User{BE028394-2F9E-40FA-AC9F-0443F83A314F}D:\steamlibrary\steamapps\common\bulanci\bulanci.exe] => (Allow) D:\steamlibrary\steamapps\common\bulanci\bulanci.exe => No File
FirewallRules: [UDP Query User{8170ED9D-E99F-407B-BD52-748E1E1CEC5A}D:\steamlibrary\steamapps\common\bulanci\bulanci.exe] => (Allow) D:\steamlibrary\steamapps\common\bulanci\bulanci.exe => No File
FirewallRules: [{6B517507-BE41-44ED-90B9-5B39EB0F9810}] => (Allow) C:\Users\micha\AppData\Roaming\uTorrent\uTorrent.exe => No File
FirewallRules: [{B1B46CC0-75B8-4ECA-A6CA-2C5DD6752208}] => (Allow) C:\Users\micha\AppData\Roaming\uTorrent\uTorrent.exe => No File
FirewallRules: [{2C999FB7-5ADD-4DDB-91AC-E34ABF02E2C9}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture 6\Video Download Capture 6.exe => No File
FirewallRules: [{509E7F04-460F-452E-BDD9-F2DA71538641}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture 6\Video Download Capture 6.exe => No File
FirewallRules: [{F9791703-1FC3-420E-9288-FEB8B8B6DE12}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture 6\rtmpsrv.exe => No File
FirewallRules: [{37627EE9-C7D3-46F4-AC6A-2DC14AFB34EE}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture 6\rtmpsrv.exe => No File
FirewallRules: [{80291A5D-166B-43B4-AAAA-D1B5D9BD879F}] => (Allow) C:\Program Files\Vuze\Azureus.exe => No File
FirewallRules: [{6173FDAD-7E77-4685-874F-D16438AA577C}] => (Allow) C:\Program Files\Vuze\Azureus.exe => No File
FirewallRules: [TCP Query User{7903FE89-E165-4607-ADF6-53945C926D6F}C:\program files (x86)\v380\v380.exe] => (Allow) C:\program files (x86)\v380\v380.exe => No File
FirewallRules: [UDP Query User{1D8363FE-6E16-44AF-BEAE-774EB2BA02ED}C:\program files (x86)\v380\v380.exe] => (Allow) C:\program files (x86)\v380\v380.exe => No File
FirewallRules: [{82DB6B2F-215E-4FCE-A292-4AE4AE7A365B}] => (Allow) C:\Program Files\BitComet\BitComet.exe => No File
FirewallRules: [{96544A7A-354F-493F-9A1A-FCB398452A37}] => (Allow) C:\Program Files\BitComet\BitComet.exe => No File
FirewallRules: [{C0706E5D-A4BE-466B-889D-F27B1D49B405}] => (Allow) C:\Program Files\BitComet\BitComet.exe => No File
FirewallRules: [{D4304D03-E13A-4F64-91DB-38ABA4323998}] => (Allow) C:\Program Files\BitComet\BitComet.exe => No File

EmptyTemp:
Hosts:
End
*****************

Processes closed successfully.
"HKU\S-1-5-21-337787295-885085327-400922016-1001\Software\Microsoft\Windows\CurrentVersion\Run\\VideoDownloadCapture" => removed successfully
HKU\S-1-5-21-337787295-885085327-400922016-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E => removed successfully
HKU\S-1-5-21-337787295-885085327-400922016-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{32755366-7013-11ee-b3db-50ebf67840e6} => removed successfully
HKU\S-1-5-21-337787295-885085327-400922016-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{32755be2-7013-11ee-b3db-50ebf67840e6} => removed successfully

"C:\WINDOWS\system32\GroupPolicy\Machine" folder move:

C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\ProgramData\NTUSER.pol => moved successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BDBA1FCD-8543-495C-8FB9-237318771F04}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BDBA1FCD-8543-495C-8FB9-237318771F04}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore{9957A7C1-837A-4CC8-A2E0-0441D2431D08} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore{9957A7C1-837A-4CC8-A2E0-0441D2431D08}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4A83F3FB-12BD-47CD-8604-A065D64EFA46}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4A83F3FB-12BD-47CD-8604-A065D64EFA46}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA{C44AED35-AA20-4B5E-8291-13054B22B67B} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA{C44AED35-AA20-4B5E-8291-13054B22B67B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A8CA6F9D-F85F-4D53-9A28-10C43B73BC1C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A8CA6F9D-F85F-4D53-9A28-10C43B73BC1C}" => removed successfully
C:\WINDOWS\System32\Tasks\Christmas Task (One-Time) => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Christmas Task (One-Time)" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4DA02AF8-25C9-421C-B18C-E7AFA8604DFB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4DA02AF8-25C9-421C-B18C-E7AFA8604DFB}" => removed successfully
C:\WINDOWS\System32\Tasks\iTop BLACK FRIDAY Task (One-Time) => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iTop BLACK FRIDAY Task (One-Time)" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C79FA680-D56F-4FD7-8523-FD48EBAAE040}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C79FA680-D56F-4FD7-8523-FD48EBAAE040}" => removed successfully
C:\WINDOWS\System32\Tasks\Sump Task (One-Time) => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sump Task (One-Time)" => removed successfully
HKLM\System\CurrentControlSet\Services\DCIService => removed successfully
DCIService => service removed successfully
WCAssistantService => service not found.
HKLM\System\CurrentControlSet\Services\PDFWKRNL => removed successfully
PDFWKRNL => service removed successfully

"C:\Users\micha\AppData\Local\Temp" folder move:

Could not move "C:\Users\micha\AppData\Local\Temp" => Scheduled to move on reboot.

HKLM\System\CurrentControlSet\Services\cpuz148 => removed successfully
cpuz148 => service removed successfully
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{C44AED35-AA20-4B5E-8291-13054B22B67B}" => not found
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{9957A7C1-837A-4CC8-A2E0-0441D2431D08}" => not found
C:\WINDOWS\SysWOW64\version_IObitDel.dll => moved successfully
HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\ContextMenu => removed successfully
HKLM\Software\Classes\CLSID\{ee10d625-cc60-30a4-b3df-4b349785be6b} => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\ContextMenu => removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk => ":BE32D07BC5" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk => ":C5D586BE93" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk => ":F208FC6732" ADS removed successfully
C:\Users\micha\Data aplikací => ":671890e017d8a4fb26004192461213ff" ADS removed successfully
"C:\Users\micha\AppData\Roaming" => ":671890e017d8a4fb26004192461213ff" ADS not found.
C:\Users\Public\Shared Files => ":VersionCache" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{56AB47EA-D434-4BBD-BD72-62909883AE46}D:\gold.rush.the.game.v1.5.8.15125-goldberg\gold rush the game\goldrushthegame.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{09780D20-5143-41C5-8B1F-3FA27615E2F5}D:\gold.rush.the.game.v1.5.8.15125-goldberg\gold rush the game\goldrushthegame.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F5BFAD61-F5F7-4FD5-960C-D455E24E2A65}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1F834AA0-3177-4C4C-AA75-AFD79BDA6846}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{FC89465D-FFB3-43A4-AB1A-17A0A533251F}D:\turmoil.v3.0.39\turmoil.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{4BFA45B8-5A39-4549-91AA-532A2425D47E}D:\turmoil.v3.0.39\turmoil.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{09AB3AFB-3521-4755-B0C4-09378D451112}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1F07D062-4B47-4239-B9F2-141B6A44B8A7}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B5AFAADF-D222-4E9B-9D4D-B61A8624C82C}D:\superpower.3.v1.0.8-goldberg\exec\clientue4\binaries\win64\clientue4-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4DBFE769-2CB7-4B05-89D7-37C79CF70E90}D:\superpower.3.v1.0.8-goldberg\exec\clientue4\binaries\win64\clientue4-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0A5A84F4-0CF5-4097-A227-5FCFD4C8E65B}D:\prison simulator\prison simulator.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{81647FFB-5721-4072-B061-1ECB667D035F}D:\prison simulator\prison simulator.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{04242A73-8664-4754-9AF3-C748857257C6}D:\kingdomcomedeliverance\bin\win64mastermasterepicpgo\kingdomcome.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{76673031-60B9-4BFA-BB11-0D681A77BBFA}D:\kingdomcomedeliverance\bin\win64mastermasterepicpgo\kingdomcome.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8AFBB6AB-86DA-482E-9645-93C8A33F37B5}C:\users\micha\appdata\local\faceit\app-1.31.9\faceit.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{691B78E5-7C41-4030-8E75-7DF3E12ADEB0}C:\users\micha\appdata\local\faceit\app-1.31.9\faceit.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{53CB8D08-B4F4-4541-8E44-DFE13D722ADC}D:\stažené soubory\sons.of.the.forest\sons.of.the.forest\sons of the forest\sonsoftheforest.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2B81BB1A-19A6-4E4C-B966-049B9AD9AE5F}D:\stažené soubory\sons.of.the.forest\sons.of.the.forest\sons of the forest\sonsoftheforest.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D2FDA108-9291-4107-AE39-D52416908B36}C:\users\micha\appdata\local\faceit\app-1.31.12\faceit.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C39D9B61-B11F-4C64-92B3-A9F0FF976F69}C:\users\micha\appdata\local\faceit\app-1.31.12\faceit.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{94EECBD0-BD79-47DF-9518-1739008F008C}D:\nová složka\cago\game\bin\win64\cs2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{762F32E5-883A-4A08-824E-9402D26BA3D4}D:\nová složka\cago\game\bin\win64\cs2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{26F1093D-1F9A-478F-B3EC-BF71CBC93416}D:\dying light 1 epic games\dyinglight\dyinglightgame.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4D21359F-6A73-4342-BB36-01CBBFD2A8E9}D:\dying light 1 epic games\dyinglight\dyinglightgame.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{859DB7A4-7985-4A24-A948-594E67FF2388}D:\big.ambitions.build.11038881\big ambitions.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6F55F4CE-839E-4B0E-8F2C-A7822EDC84FF}D:\big.ambitions.build.11038881\big ambitions.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F3AA73BE-82A8-4E27-A1CB-C06EFF59180F}C:\users\micha\appdata\local\faceit\app-1.31.14\faceit.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DBF0DF3D-58D0-4B8C-8662-729522B24EF6}C:\users\micha\appdata\local\faceit\app-1.31.14\faceit.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{43150142-89EA-41B6-AB5A-22F0EFD229CC}C:\users\micha\appdata\local\discord\app-1.0.9013\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DE9AB9F3-916C-449B-80B5-E9A7DEAAB7B4}C:\users\micha\appdata\local\discord\app-1.0.9013\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3444FEE9-ADBD-4039-A2B6-85920484D63B}C:\program files (x86)\the-quarry\smg026\binaries\win64\thequarry-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DCAF675E-9288-41D7-B113-67C0AAB68084}C:\program files (x86)\the-quarry\smg026\binaries\win64\thequarry-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{4F4494E0-86CD-4E6F-B1AC-50844DD0191E}D:\outlast 3\midnightghosthunt\midnightghosthunt\binaries\win64\midnightghosthunt-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{315F7EBE-F549-41D6-BFDA-E5C9600777A6}D:\outlast 3\midnightghosthunt\midnightghosthunt\binaries\win64\midnightghosthunt-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{57383AD8-668C-4704-A719-9C37F36EBA40}C:\counter-strike 1.6\hl.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8EF78463-5C71-4791-8AB7-F05CFA670E97}C:\counter-strike 1.6\hl.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5CF20DBC-0F86-4E7C-8FCA-F55AAF494EF0}D:\games\i am your president\i am your president.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9C7A2D1C-9E11-494C-8247-2434A0832666}D:\games\i am your president\i am your president.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{97E3BB3D-18B3-4A2B-AF59-46DA6059CED0}D:\car.for.sale.simulator.2023.build.11499307\car for sale simulator 2023.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{25ED41A6-AB4F-44A6-A15B-D7BCC048E9A0}D:\car.for.sale.simulator.2023.build.11499307\car for sale simulator 2023.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0E2FFD1C-9479-4CEA-BAB5-5BF073AF02FE}D:\car.for.sale.simulator.2023.build.11560569\car for sale simulator 2023.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{02CC0959-0481-4448-9DD3-4CDDE772139B}D:\car.for.sale.simulator.2023.build.11560569\car for sale simulator 2023.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5A756B4E-42A9-4D99-B851-9898D2EF298E}D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\cartel tycoon launcher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{5F4FD070-DC4A-4E0F-B93D-A43C992588B2}D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\cartel tycoon launcher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C81D30F2-8895-4742-BC58-896D057DB828}D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\apps\cartel tycoon\carteltycoon\binaries\win64\carteltycoon-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8CB29690-AA33-4FD9-9D4A-729909134343}D:\cartel.tycoon.gangs.of.de.ojeda-goldberg\apps\cartel tycoon\carteltycoon\binaries\win64\carteltycoon-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{187593BA-3756-47A5-B433-B46DF7788D3B}D:\food.truck.simulator.build.20230129\ftr3\binaries\win64\ftr3-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{FD748CD8-2AA1-4E75-B648-37BFE9541A58}D:\food.truck.simulator.build.20230129\ftr3\binaries\win64\ftr3-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C1EF418D-6EAF-4F83-AC59-D095D5B94E48}C:\users\micha\appdata\local\programs\opera gx\100.0.4815.44\opera.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2842846A-9FB5-406E-9619-8C0CAB5252CA}C:\users\micha\appdata\local\programs\opera gx\100.0.4815.44\opera.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5C2707A1-489B-4241-BA4A-E5CB11A7B9D9}D:\outlast 3\payday2\payday2_win32_release.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3A965723-EAD3-40D1-968E-FF774C86E13E}D:\outlast 3\payday2\payday2_win32_release.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BE028394-2F9E-40FA-AC9F-0443F83A314F}D:\steamlibrary\steamapps\common\bulanci\bulanci.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8170ED9D-E99F-407B-BD52-748E1E1CEC5A}D:\steamlibrary\steamapps\common\bulanci\bulanci.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6B517507-BE41-44ED-90B9-5B39EB0F9810}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B1B46CC0-75B8-4ECA-A6CA-2C5DD6752208}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2C999FB7-5ADD-4DDB-91AC-E34ABF02E2C9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{509E7F04-460F-452E-BDD9-F2DA71538641}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F9791703-1FC3-420E-9288-FEB8B8B6DE12}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{37627EE9-C7D3-46F4-AC6A-2DC14AFB34EE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{80291A5D-166B-43B4-AAAA-D1B5D9BD879F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6173FDAD-7E77-4685-874F-D16438AA577C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7903FE89-E165-4607-ADF6-53945C926D6F}C:\program files (x86)\v380\v380.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1D8363FE-6E16-44AF-BEAE-774EB2BA02ED}C:\program files (x86)\v380\v380.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{82DB6B2F-215E-4FCE-A292-4AE4AE7A365B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{96544A7A-354F-493F-9A1A-FCB398452A37}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C0706E5D-A4BE-466B-889D-F27B1D49B405}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D4304D03-E13A-4F64-91DB-38ABA4323998}" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 159239232 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 675940337 B
Windows/system/drivers => 28906090 B
Edge => 0 B
Chrome => 791996048 B
Brave => 625600892 B
Firefox => 0 B
Opera => 22989128 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 307540 B
LocalService => 646482 B
NetworkService => 978416 B
micha => 3692580399 B

RecycleBin => 0 B
EmptyTemp: => 5.6 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 19-12-2023 20:06:59)

C:\Users\micha\AppData\Local\Temp => Could not move

==== End of Fixlog 20:07:00 ====

Smazáno. Chod by již měl být rychlejší. A nyní je třeba vyzkoušet ten asus framework a případně opravit podle toho návodu. Další problémy samozřejmě také. Dále bych doproučil nainsrtalovat pořádný AV (postačí nějaký free). Chodíte na P-čka a na to je WinDef občas krátký.

Dobře, děkuji. Vyřešit problém s asus framework se nepodařil, vyzkoušel jsem vše. kromě opravy přes boot. Začal mi házet problém s nedostatkem paměti. Jak u opery tak u BRAVE. Počítač mi háže bluescreen cca. 2x za den možné i více. Měl jsem PC zamarasený od prachu, tak jsem ho zkusil vyfoukat kompresorem, zda-li se to nějak neopraví, ale bohužel to dělá furt. Jinak u toho bluescreenu nebyla žádná chyba. Jenom, že mám kontaktovat podporu windows. Děkuji za pomoc.

Vloz Rudymu info ohladne BSOD https://forum.viry.cz/viewtopic.php?t=120729