klávesnice píše dva háčky/čárky místo jednoho

Zpráva

Hasicz · #1 Příspěvek od **Hasicz** » 05 bře 2025 11:16

Ahoj,
začalo to tím, že počítač mi píše místo jednoho háčku nebo čárky dva ˇˇ nebo ´´ při přepnutí do ENG klávesnice se to neděje. Také se mi občas nastaví režim spánku obrazovky po 10 minutách, což sem nedělal a nechci to tak.
Už několik hodin pročítám a zkouším všechno možné, jenže návody nefungují a už jsem bezradný.
Co je velmi zvláštní, pokud jsem na disku C (systémový) a zaškrtnu že chci zobrazit skryté souboury, všechno spadne, obrazovka zčerná. Musím natvrdo vypnout PC a zapnout, pak vše funguje. Dokonci když jsem mimo C: tak zaškrtnu zobrazit skryté soubory a je to v pohodě, dokud nekliknu na disk C: pak to zase celé zčerná. Budu rád za každou radu. Teˇˇd vše zálohuji a připravuji se na komplet reinstal celého PC, ale tomu bych se rád vyhnul se přiznám.
Stáhl jsem dle návodu FRST64 a když ho spustím jako správce, tak napíše něco o Failed to update (1) a hned se zavře. Takže nejsem schopný sem nahrát log,
zkoušel jsem stáhnout adwcleaner, jenže se po chvilce vypíná.
Combofix nefunguje na W10.
Zkoušel jsem Rkill nic nenašel.
Zkoušel jsem také HijackThis ten něco málo vyplivl:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:08:53, on 05.03.2025
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.19041.4355)
CHROME: 133.0.6943.142

Boot mode: Normal

Running processes:
C:\Intel\i2.exe
C:\Program Files (x86)\ManicTime\ManicTime.exe
C:\Program Files (x86)\Steam\steam.exe
C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.exe
C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\ProgramData\Garmin\CoreService\Downloads\Application\Application_Application.express-windows.7.24.0.0\omt\express\windows\7.24.0.0\22afe0ab08204f06b84a2578b36d0ea1\garminexpressinstaller.exe
C:\Users\janpu\AppData\Local\Temp\{663019F2-464E-421F-9600-D70CEBB22690}\.cr\garminexpressinstaller.exe
C:\Users\janpu\AppData\Local\Temp\{A1D40A62-9955-4BE6-9032-89AFDAFB5169}\.be\GarminExpressInstaller.exe
C:\WINDOWS\SysWOW64\DllHost.exe
D:\01 - Soft\_Logovací porgram\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://go.microsoft.com/fwlink/p/?Link ... id=UE01DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.92\BHO\ie_to_edge_bho.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_441\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_441\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Lightshot] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4 - HKLM\..\Run: [I19B] C:\WINDOWS\twain_32\Brimi19b\Common\TwDsUiLaunch.exe
O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
O4 - HKLM\..\Run: [BrotherSoftwareUpdateNotification] C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe /Autorun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [ManicTimeC34F57B2DA6E6758] C:\Program Files (x86)\ManicTime\ManicTime.exe /minimized
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [GoogleDriveFS] "C:\Program Files\Google\Drive File Stream\104.0.4.0\GoogleDriveFS.exe" --startup_mode
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Spotify] C:\Users\janpu\AppData\Roaming\Spotify\Spotify.exe --autostart --minimized
O4 - HKCU\..\Run: [GoogleUpdaterTaskUser135.0.7023.0] "C:\Users\janpu\AppData\Local\Google\GoogleUpdater\135.0.7023.0\updater.exe" --wake
O4 - HKCU\..\Run: [MicrosoftEdgeAutoLaunch_B290F089DC243CBB434D3F1388B3FDD9] "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
O4 - HKCU\..\Run: [GarminExpress] "C:\Program Files (x86)\Garmin\Express\express.exe" /minimized
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [GoogleDriveFS] C:\Program Files\Google\Drive File Stream\104.0.4.0\GoogleDriveFS.exe --startup_mode (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [GoogleDriveFS] C:\Program Files\Google\Drive File Stream\104.0.4.0\GoogleDriveFS.exe --startup_mode (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [GoogleDriveFS] C:\Program Files\Google\Drive File Stream\104.0.4.0\GoogleDriveFS.exe --startup_mode (User 'Default user')
O4 - Global Startup: Brother iPSMonitor.lnk = C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.exe
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{40fd16de-b690-4570-96d5-47bd9a5faff5}: NameServer = 8.8.8.8,1.1.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{92f86d74-d80c-11e7-8ed6-806e6f6e6963}: NameServer = 8.8.8.8,1.1.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{faadc2b0-a222-44d8-bb08-dc38ca091ec4}: NameServer = 8.8.8.8
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_a3a89 - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: Security Application Management Service (dg) - Unknown owner - C:\Intel\dg.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Epic Online Services (EpicOnlineServices) - Epic Games, Inc. - C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Unknown owner - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: @%systemroot%\system32\GameInputSvc.exe,-101 (GameInputSvc) - Unknown owner - C:\WINDOWS\System32\GameInputSvc.exe (file missing)
O23 - Service: Interní aktualizační služba Google (GoogleUpdaterInternalService135.0.7023.0) (GoogleUpdaterInternalService135.0.7023.0) - Google LLC - C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe
O23 - Service: Aktualizační služba Google (GoogleUpdaterService135.0.7023.0) (GoogleUpdaterService135.0.7023.0) - Google LLC - C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @oem37.inf,%ss_conn_launcher.SvcDesc%;SAMSUNG Mobile USB Connectivity Launcher (ss_conn_launcher_service) - Unknown owner - C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe (file missing)
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
O23 - Service: SAMSUNG Mobile Connectivity Service V2 (ss_conn_service2) - DEVGURU Co., LTD. - C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 13 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: Brother USB Application Controller (USBAppControl) - Unknown owner - C:\Program Files (x86)\Brother\iPrint&Scan\UsbAppControl\USBAppControl.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Brother Workflow Application Controller (WorkflowAppControl) - Unknown owner - C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl\WorkflowAppControl.exe

--
End of file - 14337 bytes

#2 Příspěvek od **JaRon** » 05 bře 2025 12:59

Ahoj,
no bude to zavirene

Restartuj PC do nudzoveho rezimu a skus to vycistit s Adwcleanerom
po dalsom restarte do NR vytvor log FRST

Hasicz · #3 Příspěvek od **Hasicz** » 05 bře 2025 13:52

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23.03.2024 01
Ran by janpu (administrator) on HONZA-PC (MSI MS-7752) (05-03-2025 13:38:58)
Running from C:\Users\janpu\Desktop\_Logovací porgram\FRST64.exe
Loaded Profiles: janpu
Platform: Microsoft Windows 10 Home Version 22H2 19045.5487 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Safe Mode (with Networking)

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-21] (Kilonova LLC -> )
HKLM-x32\...\Run: [I19B] => C:\WINDOWS\twain_32\Brimi19b\Common\TwDsUiLaunch.exe [103152 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4009984 2024-05-31] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3588608 2021-04-02] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM\Software\Policies\...\system: [UploadUserActivities] 0
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\104.0.4.0\GoogleDriveFS.exe [63973984 2025-02-12] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\104.0.4.0\GoogleDriveFS.exe [63973984 2025-02-12] (Google LLC -> Google LLC.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [ManicTimeC34F57B2DA6E6758] => C:\Program Files (x86)\ManicTime\ManicTime.exe [151968 2023-04-19] (Finkit d.o.o. -> Finkit d.o.o.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4435552 2025-01-28] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\104.0.4.0\GoogleDriveFS.exe [63973984 2025-02-12] (Google LLC -> Google LLC.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [479632 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [Spotify] => C:\Users\janpu\AppData\Roaming\Spotify\Spotify.exe [36483400 2025-02-28] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GoogleUpdaterTaskUser135.0.7023.0] => C:\Users\janpu\AppData\Local\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [MicrosoftEdgeAutoLaunch_B290F089DC243CBB434D3F1388B3FDD9] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4088392 2025-02-27] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [28999440 2024-11-06] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Policies\Explorer: []
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {8979b10e-463b-11ec-8f81-d43d7eb13568} - "I:\Setup.exe"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {8979b300-463b-11ec-8f81-d43d7eb13568} - "K:\autorun.exe"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {9f60999e-805a-11ec-8f8d-d43d7eb13568} - "M:\_AUTORUN\AUTORUN.EXE"
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\104.0.4.0\GoogleDriveFS.exe [63973984 2025-02-12] (Google LLC -> Google LLC.)
HKLM\...\Print\Monitors\HP B011 Status Monitor: C:\WINDOWS\System32\hpinkstsB011LM.dll [331664 2012-06-13] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3520 series): C:\WINDOWS\System32\HPDiscoPMB011.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\...\AppCompatFlags\Custom\KONUNG.EXE: [{5e06ebb7-4976-4bd0-96ff-4d953f97c430}.sdb] -> GOG.com Konung
HKLM\Software\...\AppCompatFlags\InstalledSDB\{5e06ebb7-4976-4bd0-96ff-4d953f97c430}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{5e06ebb7-4976-4bd0-96ff-4d953f97c430}.sdb [2015-01-20]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Brother iPSMonitor.lnk [2025-02-11]
ShortcutTarget: Brother iPSMonitor.lnk -> C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.exe (iPSMonitor) [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {D138F6D3-EEA0-4734-9761-E2A33025166D} - \Avast Software\Overseer -> No File <==== ATTENTION
Task: {5F683216-5151-4E6C-BB2D-AC818DCD0C37} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [30992 2024-11-06] (Garmin International, Inc. -> )
Task: {7A21660C-9111-45F8-9069-0AEF153464C6} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem135.0.7023.0{5AE63604-347D-44F1-B060-082F7AE80623} => C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
Task: {381E3890-36D0-46F4-B4E2-A644D73C1E5D} - System32\Tasks\GoogleUser\GoogleUpdater\GoogleUpdaterTaskUser135.0.7023.0{876F45FE-4AD6-4248-AEB4-11D21B07B650} => C:\Users\janpu\AppData\Local\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
Task: {E6D831CC-50BC-4035-984E-4A0DA6C9AF5D} - System32\Tasks\Microsoft\Office\Office Apps Prewarm => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {F4CF132B-CF47-4F94-89EA-10C3CEDC253A} - System32\Tasks\Microsoft\Office\Office Apps Prewarm Recurring => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {98A2AD42-20BB-4878-9909-5ED49B1B9D53} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {D4587D31-C5C2-40F9-8081-740EF334B177} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [67248 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {984D6EF5-BDD0-4413-9058-CC6F6970C97A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {07E695FF-97AC-4A75-A324-C1F5CD462E99} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {DAEE2E8D-776E-41B3-B4DC-A2A6195BD8FC} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {3BF81EDF-DC02-4B6C-BB20-60888588364F} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [194672 2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {DB2EA926-BDB4-4B42-B1D5-14A0E05588A3} - System32\Tasks\Microsoft\Windows\Application Experience\PcaWallpaperAppDetect => C:\WINDOWS\System32\rundll32.exe [89600 2024-07-14] (Microsoft Windows -> Microsoft Corporation) -> %windir%\system32\PcaSvc.dll,PcaWallpaperAppDetect
Task: {04EF195F-BA2F-40B8-9157-F74787CBC81B} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => C:\WINDOWS\system32\clipesu.exe [274952 2025-02-12] (Microsoft Windows -> Microsoft Corporation)
Task: {82DADBFD-99E0-47F2-8C0F-181663FDDEA3} - System32\Tasks\Microsoft\Windows\rempl\shell => %ProgramFiles%\rempl\sedlauncher.exe (No File)
Task: {85B9D243-5AD4-408E-92DE-E6C920231DAB} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager1 => C:\Intel\e.vbs [489 2025-03-05] () [File not signed]
Task: {BC67C6D6-6CD1-49F8-BE40-3C5482059E86} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3q1 => C:\Intel\q2.exe [1173682082 2025-03-05] () [File not signed] <==== ATTENTION
Task: {817EDBF5-75EC-43FE-95BD-BE414A93C0B4} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3x1 => C:\Intel\i2.exe [1207112002 2025-03-05] () [File not signed] <==== ATTENTION
Task: {FDE80188-1D10-4A37-BCB4-2A12073E3F91} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx1x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {07CEE210-EE87-423D-A404-2D3B8E579B65} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx2x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {A0C363FC-1056-42A9-8A7E-435D3A6A0C23} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx3x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f1.log"
Task: {071BA4F9-F185-41A7-AD4E-802B37238177} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx4x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {D8DBEE91-F654-47D0-92D5-FD0BDD5755E7} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx5x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f2.log"
Task: {78C1E051-CEF7-4566-A81C-C019F3FEA9D5} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx6x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {5C3C6E8F-5A56-4B6A-B4F9-85C0E2A23E45} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx2x1 => C:\Intel\logs\p1.exe [1205936452 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p1_1.log" <==== ATTENTION
Task: {1057572F-FEDE-4510-A515-0CF8B981EB79} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx3x1 => C:\Intel\logs\p2.exe [1205950788 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p2_1.log" <==== ATTENTION
Task: {2F0549E9-03D8-4E16-AC0D-37872BD06B25} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx4x1 => C:\Intel\logs\p3.exe [1206091076 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p3_1.log" <==== ATTENTION
Task: {7164802F-7BDC-4FF4-AB31-111FC1DDF32A} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx6x1 => C:\Intel\logs\p6.exe [1206108484 2025-03-02] () [File not signed] -> /UseChromeProfileFolder 1 /ChromeProfileFolder "C:\Users\janpu\AppData\Local\Google\Chrome\User Data" /stab "C:\Intel\logs\p6_1.log" <==== ATTENTION
Task: {51719BB7-0EFD-49C1-9ECE-6AA44A4833E7} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx9x1 => C:\Intel\logs\p7.exe [1206088516 2025-03-02] (Google LLC) [File not signed] -> /stab "C:\Intel\logs\p7_1.log" <==== ATTENTION
Task: {84D6B386-6FDE-4A9B-B3C0-BB15E70390F8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A52AAF48-8506-4276-A2B4-E5BC803C4F01} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FF9C486C-3086-45E4-A7FC-E68256735451} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D27B1CA3-A21E-4C2C-B3DA-E9D339237842} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FDFDE73C-9399-4B2B-AB58-5B1E054E1D07} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {00035BE3-73CE-4A62-9C05-E4D6BB469192} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB" (No File)
Task: {D176E9DA-F6ED-4685-BA42-1DFD3AEA8B0F} - System32\Tasks\OneDrive Startup Task-S-1-5-21-447794926-783580724-1362418113-1001 => C:\Users\janpu\AppData\Local\Microsoft\OneDrive\25.020.0202.0001\OneDriveLauncher.exe [669200 2025-03-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {59618173-4863-48D1-91C1-02F0C08EEB43} - System32\Tasks\update-S-1-5-21-447794926-783580724-1362418113-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {09E486CA-F36E-40FC-AA29-30E9F1A34C8E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\update-S-1-5-21-447794926-783580724-1362418113-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{40fd16de-b690-4570-96d5-47bd9a5faff5}: [NameServer] 8.8.8.8,1.1.1.1
Tcpip\..\Interfaces\{92f86d74-d80c-11e7-8ed6-806e6f6e6963}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{adc844b1-6e4f-478a-8153-e7ba5506b3b7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{b99221cf-b112-4d46-bb60-e6cd1e0564f2}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{faadc2b0-a222-44d8-bb08-dc38ca091ec4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{faadc2b0-a222-44d8-bb08-dc38ca091ec4}: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge Profile: C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default [2025-03-05]
Edge HomePage: Default -> hxxp://www.seznam.cz/
Edge StartupUrls: Default -> "hxxp://www.seznam.cz/","hxxps://web.whatsapp.c ... om/sharing"
Edge Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-04]
Edge Extension: (Edge relevant text changes) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mhhmkoogppocgeaedlcikkhenhagbmnj [2025-03-04]
Edge Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2025-03-05]

FireFox:
========
FF DefaultProfile: 8ji3u4k7.default
FF ProfilePath: C:\Users\janpu\AppData\Roaming\Mozilla\Firefox\Profiles\8ji3u4k7.default [2023-05-24]
FF ProfilePath: C:\Users\janpu\AppData\Roaming\Mozilla\Firefox\Profiles\iedwyphd.default-release [2025-03-05]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google Inc -> Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\dtplugin\npDeployJava1.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\plugin2\npjp2.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default [2025-03-05]
CHR Notifications: Default -> hxxps://app.zonky.cz; hxxps://calendar.google.com; hxxps://drive.google.com
CHR HomePage: Default -> hxxps://www.google.cz/?gfe_rd=cr&ei=C9WLVbPsOui ... gws_rd=ssl
CHR Session Restore: Default -> is enabled.
CHR Extension: (Překladač Google) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-09-09]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-02-28]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2025-02-28]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-23]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-02]
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]
CHR Extension: (Hlídač Shopů) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-02-12]
CHR Extension: (Streak CRM for Gmail) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2025-03-05]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-05-10]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-03-05]
CHR Notifications: Profile 1 -> hxxps://meet.google.com; hxxps://web.whatsapp.com
CHR HomePage: Profile 1 -> hxxp://www.google.com/
CHR StartupUrls: Profile 1 -> "hxxps://www.google.cz/","hxxp://www.seznam.cz/" ... trubin.cz/"
CHR Session Restore: Profile 1 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-03-04]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-03-04]
CHR Extension: (LibreCAD on rollApp) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gbalmmdepliaghihofedeopaacjfcgab [2018-02-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-04]
CHR Extension: (FormApps Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2024-04-16]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-22]
CHR Extension: (Image Size Info) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\oihdhfbfoagfkpcncinlbhfdgpegcigf [2024-07-17]
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]
CHR Extension: (Hlídač Shopů) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-02-12]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10 [2025-02-28]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-02-28]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-09-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-09-16]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11 [2025-02-20]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-02-20]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-01-13]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-01-13]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-01-13]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2 [2022-11-27]
CHR Session Restore: Profile 2 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2022-11-24]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-11-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-11-17]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2022-11-22]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2022-04-19]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-04-19]
CHR Extension: (Streak CRM for Gmail) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2022-04-19]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3 [2024-12-09]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-10-10]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-12-09]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-04-29]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-06-30]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4 [2022-08-31]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-08-31]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-08-31]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2022-08-31]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-31]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5 [2025-03-05]
CHR Session Restore: Profile 5 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-03-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-09-25]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-09-08]
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6 [2024-08-24]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2024-08-24]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-08-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-11-17]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-08-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-11-17]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7 [2024-01-14]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-01-08]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-08]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-01-08]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-01-08]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8 [2024-01-14]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-01-08]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-08]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-01-08]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-01-08]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9 [2024-09-16]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-09-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-09-16]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-09-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-09-16]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\System Profile [2025-03-05]
CHR HKU\S-1-5-21-447794926-783580724-1362418113-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\janpu\AppData\Local\Google\Drive\user_Y3mNHmq0EeuC+9Q9frE1aA\apdfllckaahabafndbhieahigkjlhalf_live.crx <not found>
CHR HKU\S-1-5-21-447794926-783580724-1362418113-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901968 2021-03-19] (BattlEye Innovations e.K. -> )
S2 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [503808 2024-08-05] (Brother Industries, Ltd.) [File not signed]
S2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13617384 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
S2 dg; C:\Intel\dg.exe [1166302370 2025-03-05] () [File not signed] <==== ATTENTION
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4955536 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [784512 2018-09-23] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-11-03] (Epic Games Inc. -> Epic Games, Inc.)
S2 GoogleUpdaterInternalService135.0.7023.0; C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
S2 GoogleUpdaterService135.0.7023.0; C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
S2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe [1447680 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182392 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-11-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [919992 2020-11-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
S2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945264 2017-11-24] (TeamViewer GmbH -> TeamViewer GmbH)
S2 USBAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\UsbAppControl\USBAppControl.exe [11776 2025-01-17] () [File not signed]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe [3199672 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe [141952 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 WorkflowAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl\WorkflowAppControl.exe [18944 2025-01-17] () [File not signed]
S2 FLEXnet Licensing Service; "C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe" [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AWCCDriver; C:\WINDOWS\System32\drivers\AWCCDriver.sys [42456 2021-07-01] (IndiLogic LLC -> Dell Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [63696 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S2 googledrivefs31626; C:\Program Files\Google\Drive File Stream\Drivers\31626\googledrivefs31626.sys [384096 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
S3 MpKsld74d7905; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5A3A9A57-CFD8-4FF1-BC6F-275E65CCDA48}\MpKslDrv.sys [278944 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
S3 Revoflt; C:\WINDOWS\System32\DRIVERS\revoflt.sys [38400 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
S2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [207344 2021-11-15] (Disc Soft Ltd -> Duplex Secure Ltd)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22104 2024-10-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [606624 2024-10-30] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105888 2024-10-30] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-03-05 13:38 - 2025-03-05 13:38 - 000003130 _____ C:\Users\janpu\Desktop\AdwCleaner[C02].txt
2025-03-05 13:36 - 2025-03-05 13:38 - 000141866 _____ C:\WINDOWS\ntbtlog.txt
2025-03-05 13:36 - 2025-03-05 13:38 - 000000000 ____D C:\Users\janpu\Desktop\_Logovací porgram
2025-03-05 13:32 - 2025-03-05 13:32 - 000000000 ____D C:\ProgramData\HP
2025-03-05 11:09 - 2025-03-05 11:11 - 000002620 _____ C:\Users\janpu\Desktop\Rkill.txt
2025-03-05 11:08 - 2025-03-05 11:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2025-03-05 10:24 - 2025-03-05 13:35 - 116916224 _____ C:\WINDOWS\system32\config\SOFTWARE
2025-03-05 10:08 - 2025-03-05 10:24 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2025-03-05 10:05 - 2025-03-05 10:28 - 000000000 ____D C:\Users\janpu\AppData\Roaming\AdwCleaner
2025-03-04 11:52 - 2025-03-04 11:52 - 000000000 ____D C:\Users\Public\Documents\AdobeGCInfo
2025-03-03 15:05 - 2025-03-03 15:05 - 000382054 _____ C:\Users\janpu\Documents\Scan2025-03-03_150448.pdf
2025-03-03 11:59 - 2025-03-03 11:59 - 000000223 _____ C:\Users\janpu\Desktop\Command & Conquer™ Tiberian Sun™ and Firestorm™.url
2025-03-02 20:32 - 2025-03-02 20:32 - 000000016 __RSH C:\$SysReset
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\EnigmaSoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\EnigmaSoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\EnigmaSoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\EnigmaSoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\EnigmaSoft
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\WINDOWS\ReasonLabsAVVPN
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\ReasonLabsAVVPN
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\ProgramData\ReasonLabsAVVPN
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\Program Files\ReasonLabsAVVPN
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\Program Files (x86)\ReasonLabsAVVPN
2025-02-28 16:16 - 2025-02-28 16:16 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
2025-02-28 15:40 - 2025-03-05 08:10 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Office
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\NZXT Cam
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\FRST
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\FRST
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\FRST
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\FRST
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 _____ C:\FRST
2025-02-28 15:28 - 2025-02-28 15:28 - 000000017 __RSH C:\$VtsFFY
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Users\janpu\AppData\Local\FSDART
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Users\Default\AppData\Local\FSDART
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Common Files\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\360
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\AVAST Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\AlibabaProtect
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Users\janpu\AppData\Local\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Users\Default\AppData\Local\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\AVAST Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\AlibabaProtect
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Avast Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\AlibabaProtect
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Avast Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\AlibabaProtect
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\AVAST Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\AlibabaProtect
2025-02-28 14:36 - 2025-02-28 14:36 - 000000000 ___RD C:\Users\janpu\Documents\Inventor Server SDK ACAD 2017
2025-02-28 14:31 - 2025-02-28 18:41 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Autodesk
2025-02-28 09:50 - 2025-02-28 09:50 - 000133238 _____ C:\Users\janpu\Downloads\Beroun-IV.Q 2024 (1).xlsx
2025-02-27 19:56 - 2025-02-27 19:56 - 000134737 _____ C:\Users\janpu\Downloads\Beroun-I.Q 2025.xlsx
2025-02-27 19:52 - 2025-02-27 19:52 - 000148408 _____ C:\Users\janpu\Downloads\Beroun-I.Q 2025 - dof..xlsx
2025-02-25 10:04 - 2025-02-25 10:04 - 000075902 _____ C:\Users\janpu\Documents\Vypis_poplatku-2802703583_za_obdobi_20240101-20241231.pdf
2025-02-20 14:49 - 2025-02-20 14:49 - 000000000 ____D C:\Users\janpu\AppData\Local\Brother_Industries,_Ltd
2025-02-20 11:21 - 2025-02-20 11:21 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Sun
2025-02-20 11:21 - 2025-02-20 11:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2025-02-20 11:21 - 2024-12-04 08:34 - 000178808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2025-02-19 09:57 - 2025-02-19 09:57 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-02-12 17:51 - 2025-02-12 17:51 - 001054478 _____ C:\Users\janpu\Downloads\2025-02-01T06-00 Transakce #9047957271988708-9178706538913776.pdf
2025-02-11 18:02 - 2025-02-11 18:02 - 000336428 _____ C:\Users\janpu\Downloads\priloha_1478410446_0_Dosetreni_PV_Adela_Ticha.pdf
2025-02-09 19:58 - 2025-03-04 10:14 - 000003564 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-447794926-783580724-1362418113-1001

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-03-05 13:36 - 2021-11-15 20:02 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2025-03-05 13:36 - 2020-08-07 17:46 - 000008192 ___SH C:\DumpStack.log.tmp
2025-03-05 13:35 - 2020-08-07 17:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-03-05 13:35 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-03-05 13:35 - 2017-07-04 08:05 - 000000000 _RSHD C:\Intel
2025-03-05 13:35 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-03-05 13:33 - 2021-02-09 09:56 - 000000000 ___RD C:\Users\janpu\Disk Google (linda.abrahamova@gmail.com)
2025-03-05 13:33 - 2018-01-10 10:42 - 000000000 ___RD C:\Users\janpu\Disk Google
2025-03-05 13:33 - 2017-12-03 10:33 - 000000000 ___SD C:\Users\janpu\AppData\Roaming\Microsoft\Credentials
2025-03-05 13:33 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\NVIDIA
2025-03-05 13:31 - 2020-08-07 17:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-03-05 13:31 - 2017-07-04 08:05 - 000000000 ____D C:\Users\janpu
2025-03-05 11:54 - 2020-08-07 17:51 - 001693140 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-03-05 11:54 - 2019-12-07 15:41 - 000716770 _____ C:\WINDOWS\system32\perfh005.dat
2025-03-05 11:54 - 2019-12-07 15:41 - 000144948 _____ C:\WINDOWS\system32\perfc005.dat
2025-03-05 11:54 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\INF
2025-03-05 11:15 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Steam
2025-03-05 11:08 - 2020-08-07 17:53 - 000003624 _____ C:\WINDOWS\system32\Tasks\GarminUpdaterTask
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\Package Cache
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\Garmin
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Garmin
2025-03-05 11:07 - 2017-12-03 14:07 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Word
2025-03-05 11:06 - 2022-08-17 09:52 - 000000000 ____D C:\Users\janpu\AppData\Local\Spotify
2025-03-05 11:06 - 2017-12-03 19:19 - 000000000 ___RD C:\Users\janpu\Documents\04 Nemovitosti
2025-03-05 10:46 - 2022-08-17 09:52 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Spotify
2025-03-05 09:45 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Adobe
2025-03-05 09:37 - 2020-08-07 17:46 - 000629152 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-03-05 09:25 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-03-05 09:18 - 2017-07-04 08:05 - 000000000 ___HD C:\Program Files\WindowsApps
2025-03-05 09:16 - 2017-12-03 14:07 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Excel
2025-03-04 14:00 - 2022-07-25 09:53 - 000000000 ____D C:\Users\janpu\AppData\Roaming\XnView
2025-03-04 14:00 - 2017-12-15 13:46 - 000000000 ____D C:\Users\janpu\AppData\Local\CrashDumps
2025-03-04 14:00 - 2017-12-03 18:57 - 000000000 ____D C:\Users\janpu\AppData\Roaming\uTorrent
2025-03-04 14:00 - 2017-07-04 08:05 - 000000000 ___DC C:\WINDOWS\Panther
2025-03-04 14:00 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2025-03-04 10:14 - 2023-11-15 07:10 - 000002383 _____ C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-03-04 10:14 - 2021-12-13 09:06 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-447794926-783580724-1362418113-1001
2025-03-04 10:14 - 2020-08-07 17:53 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-447794926-783580724-1362418113-1001
2025-03-03 11:59 - 2021-02-05 14:16 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2025-03-01 11:02 - 2018-05-14 17:56 - 000000000 ____D C:\Users\janpu\AppData\Local\D3DSCache
2025-03-01 10:53 - 2020-06-15 07:32 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-02-28 16:48 - 2017-12-03 14:22 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared
2025-02-28 13:49 - 2024-01-20 23:43 - 000000000 ____D C:\Users\janpu\AppData\Local\KrosUsers
2025-02-28 13:09 - 2017-12-03 14:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2017 – Čeština (Czech)
2025-02-28 09:50 - 2017-12-03 10:41 - 000000000 ____D C:\Users\janpu\AppData\Local\Packages
2025-02-20 14:49 - 2024-12-06 10:11 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Brother
2025-02-20 11:03 - 2023-09-05 18:12 - 000000000 ____D C:\Users\janpu\AppData\Roaming\UI Launcher
2025-02-20 10:36 - 2024-02-03 12:25 - 000000000 ___RD C:\Users\janpu\Documents\25 Rodina
2025-02-20 10:32 - 2021-07-24 21:11 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2025-02-19 09:57 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-02-13 10:25 - 2022-11-22 08:00 - 000000000 ___RD C:\Users\janpu\Documents\ebay
2025-02-13 08:54 - 2018-01-07 11:23 - 000000000 ____D C:\Users\janpu\AppData\Roaming\vlc
2025-02-12 22:43 - 2024-07-15 01:17 - 000000000 ____D C:\WINDOWS\system32\compatrel
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-02-12 22:43 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2025-02-12 17:47 - 2021-10-01 23:00 - 000002179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2025-02-12 17:47 - 2021-09-08 19:14 - 000002014 _____ C:\Users\Default\Desktop\Google Slides.lnk
2025-02-12 17:47 - 2021-09-08 19:14 - 000002014 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2025-02-12 17:47 - 2021-09-08 19:14 - 000002002 _____ C:\Users\Default\Desktop\Google Docs.lnk
2025-02-12 13:17 - 2020-04-17 13:39 - 000419228 __RSH C:\bootmgr
2025-02-12 13:16 - 2020-08-07 17:48 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-02-12 12:11 - 2017-12-04 17:15 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-02-12 12:00 - 2017-12-04 17:15 - 209365816 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-02-11 20:04 - 2024-12-06 10:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2025-02-11 00:19 - 2017-12-03 19:17 - 000000000 ___RD C:\Users\janpu\Documents\01 Živnost
2025-02-09 19:53 - 2021-02-05 13:35 - 000000000 ____D C:\Users\janpu\AppData\Local\Steam

==================== Files in the root of some directories ========

2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\360Qua
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\64404Softun
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Advanced SystemCare
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\AdwCleaner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\AlibabaProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\ASUS
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Avast Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\AvastSvcpCP
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Bitdefender
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\ByteFence
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\CoreTemp
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\CryptoTab Browser
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\EMCO Malware Destroyer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\EnigmaSoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\ESET
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\F-Secure
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\FanControl
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\FileViewPro
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\FRST
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\GridinSoft Anti-Malware
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\HP Sure Sense
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Install
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\IOBit Malware Fighter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\IQBIT
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Kaspersky Lab
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\kingsoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Lavasoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Loaris Trojan Remover
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\McAfee.com
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\MSI
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\NoVirusThanks
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\pinterests
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\ProcessTamer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Quick Heal
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\real temp
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\ReasonLabs
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH () C:\Program Files\ReasonLabsAVVPN
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\RogueKiller
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\SaferWeb
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\simplewall
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\SMADAV
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Solvusoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Sophos
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\SpeedFan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Spybot - Search & Destroy 2
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\SpyShelter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\SUPERAntiSpyware
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Symantec
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\Taskexplorer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\TC UP
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\TinyWall
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\TotalAV
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Trend Micro
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\Unhackme
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\wDcLibs
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\Webroot
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\360Qua
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\64404Softun
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Advanced SystemCare
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\AdwCleaner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\AlibabaProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\ASUS
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Avast Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\AvastSvcpCP
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Bitdefender
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\ByteFence
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\CoreTemp
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\CryptoTab Browser
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\EMCO Malware Destroyer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\EnigmaSoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\ESET
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\F-Secure
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\FanControl
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\FileViewPro
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\FRST
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\GridinSoft Anti-Malware
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\HP Sure Sense
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Install
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\IOBit Malware Fighter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\IQBIT
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Kaspersky Lab
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\kingsoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Lavasoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Loaris Trojan Remover
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\McAfee.com
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\MSI
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\NoVirusThanks
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\pinterests
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\ProcessTamer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Quick Heal
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\real temp
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\ReasonLabs
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH () C:\Program Files (x86)\ReasonLabsAVVPN
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\RogueKiller
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\SaferWeb
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\simplewall
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\SMADAV
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Solvusoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Sophos
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\SpeedFan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Spybot - Search & Destroy 2
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\SpyShelter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\SUPERAntiSpyware
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Symantec
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\Taskexplorer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\TC UP
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\TinyWall
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\TotalAV
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Trend Micro
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\Unhackme
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\wDcLibs
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\Webroot
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Common Files\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Common Files\Acronis
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Users\janpu\AppData\Local\ESET
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Users\janpu\AppData\Local\FSDART
2021-07-13 10:31 - 2025-03-04 11:52 - 000000615 _____ () C:\Users\janpu\AppData\Local\oobelibMkey.log
2019-08-26 21:41 - 2022-10-06 20:44 - 000007604 _____ () C:\Users\janpu\AppData\Local\Resmon.ResmonCfg
2024-12-06 10:55 - 2024-12-06 10:55 - 000000000 _____ () C:\Users\janpu\AppData\Local\settingData.dat
2017-12-03 14:00 - 2017-12-03 14:00 - 000000003 _____ () C:\Users\janpu\AppData\Local\updater.log
2017-12-03 14:00 - 2022-03-06 14:09 - 000000424 _____ () C:\Users\janpu\AppData\Local\UserProducts.xml

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

ATTENTION: ==> Could not access BCD. ->

Hasicz · #4 Příspěvek od **Hasicz** » 05 bře 2025 13:54

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23.03.2024 01
Ran by janpu (administrator) on HONZA-PC (MSI MS-7752) (05-03-2025 13:38:58)
Running from C:\Users\janpu\Desktop\_Logovací porgram\FRST64.exe
Loaded Profiles: janpu
Platform: Microsoft Windows 10 Home Version 22H2 19045.5487 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Safe Mode (with Networking)

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-21] (Kilonova LLC -> )
HKLM-x32\...\Run: [I19B] => C:\WINDOWS\twain_32\Brimi19b\Common\TwDsUiLaunch.exe [103152 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4009984 2024-05-31] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3588608 2021-04-02] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM\Software\Policies\...\system: [UploadUserActivities] 0
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\104.0.4.0\GoogleDriveFS.exe [63973984 2025-02-12] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\104.0.4.0\GoogleDriveFS.exe [63973984 2025-02-12] (Google LLC -> Google LLC.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [ManicTimeC34F57B2DA6E6758] => C:\Program Files (x86)\ManicTime\ManicTime.exe [151968 2023-04-19] (Finkit d.o.o. -> Finkit d.o.o.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4435552 2025-01-28] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\104.0.4.0\GoogleDriveFS.exe [63973984 2025-02-12] (Google LLC -> Google LLC.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [479632 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [Spotify] => C:\Users\janpu\AppData\Roaming\Spotify\Spotify.exe [36483400 2025-02-28] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GoogleUpdaterTaskUser135.0.7023.0] => C:\Users\janpu\AppData\Local\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [MicrosoftEdgeAutoLaunch_B290F089DC243CBB434D3F1388B3FDD9] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4088392 2025-02-27] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [28999440 2024-11-06] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Policies\Explorer: []
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {8979b10e-463b-11ec-8f81-d43d7eb13568} - "I:\Setup.exe"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {8979b300-463b-11ec-8f81-d43d7eb13568} - "K:\autorun.exe"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {9f60999e-805a-11ec-8f8d-d43d7eb13568} - "M:\_AUTORUN\AUTORUN.EXE"
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\104.0.4.0\GoogleDriveFS.exe [63973984 2025-02-12] (Google LLC -> Google LLC.)
HKLM\...\Print\Monitors\HP B011 Status Monitor: C:\WINDOWS\System32\hpinkstsB011LM.dll [331664 2012-06-13] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3520 series): C:\WINDOWS\System32\HPDiscoPMB011.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\...\AppCompatFlags\Custom\KONUNG.EXE: [{5e06ebb7-4976-4bd0-96ff-4d953f97c430}.sdb] -> GOG.com Konung
HKLM\Software\...\AppCompatFlags\InstalledSDB\{5e06ebb7-4976-4bd0-96ff-4d953f97c430}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{5e06ebb7-4976-4bd0-96ff-4d953f97c430}.sdb [2015-01-20]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Brother iPSMonitor.lnk [2025-02-11]
ShortcutTarget: Brother iPSMonitor.lnk -> C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.exe (iPSMonitor) [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {D138F6D3-EEA0-4734-9761-E2A33025166D} - \Avast Software\Overseer -> No File <==== ATTENTION
Task: {5F683216-5151-4E6C-BB2D-AC818DCD0C37} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [30992 2024-11-06] (Garmin International, Inc. -> )
Task: {7A21660C-9111-45F8-9069-0AEF153464C6} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem135.0.7023.0{5AE63604-347D-44F1-B060-082F7AE80623} => C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
Task: {381E3890-36D0-46F4-B4E2-A644D73C1E5D} - System32\Tasks\GoogleUser\GoogleUpdater\GoogleUpdaterTaskUser135.0.7023.0{876F45FE-4AD6-4248-AEB4-11D21B07B650} => C:\Users\janpu\AppData\Local\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
Task: {E6D831CC-50BC-4035-984E-4A0DA6C9AF5D} - System32\Tasks\Microsoft\Office\Office Apps Prewarm => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {F4CF132B-CF47-4F94-89EA-10C3CEDC253A} - System32\Tasks\Microsoft\Office\Office Apps Prewarm Recurring => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {98A2AD42-20BB-4878-9909-5ED49B1B9D53} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {D4587D31-C5C2-40F9-8081-740EF334B177} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [67248 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {984D6EF5-BDD0-4413-9058-CC6F6970C97A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {07E695FF-97AC-4A75-A324-C1F5CD462E99} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {DAEE2E8D-776E-41B3-B4DC-A2A6195BD8FC} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {3BF81EDF-DC02-4B6C-BB20-60888588364F} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [194672 2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {DB2EA926-BDB4-4B42-B1D5-14A0E05588A3} - System32\Tasks\Microsoft\Windows\Application Experience\PcaWallpaperAppDetect => C:\WINDOWS\System32\rundll32.exe [89600 2024-07-14] (Microsoft Windows -> Microsoft Corporation) -> %windir%\system32\PcaSvc.dll,PcaWallpaperAppDetect
Task: {04EF195F-BA2F-40B8-9157-F74787CBC81B} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => C:\WINDOWS\system32\clipesu.exe [274952 2025-02-12] (Microsoft Windows -> Microsoft Corporation)
Task: {82DADBFD-99E0-47F2-8C0F-181663FDDEA3} - System32\Tasks\Microsoft\Windows\rempl\shell => %ProgramFiles%\rempl\sedlauncher.exe (No File)
Task: {85B9D243-5AD4-408E-92DE-E6C920231DAB} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager1 => C:\Intel\e.vbs [489 2025-03-05] () [File not signed]
Task: {BC67C6D6-6CD1-49F8-BE40-3C5482059E86} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3q1 => C:\Intel\q2.exe [1173682082 2025-03-05] () [File not signed] <==== ATTENTION
Task: {817EDBF5-75EC-43FE-95BD-BE414A93C0B4} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3x1 => C:\Intel\i2.exe [1207112002 2025-03-05] () [File not signed] <==== ATTENTION
Task: {FDE80188-1D10-4A37-BCB4-2A12073E3F91} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx1x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {07CEE210-EE87-423D-A404-2D3B8E579B65} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx2x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {A0C363FC-1056-42A9-8A7E-435D3A6A0C23} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx3x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f1.log"
Task: {071BA4F9-F185-41A7-AD4E-802B37238177} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx4x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {D8DBEE91-F654-47D0-92D5-FD0BDD5755E7} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx5x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f2.log"
Task: {78C1E051-CEF7-4566-A81C-C019F3FEA9D5} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx6x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {5C3C6E8F-5A56-4B6A-B4F9-85C0E2A23E45} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx2x1 => C:\Intel\logs\p1.exe [1205936452 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p1_1.log" <==== ATTENTION
Task: {1057572F-FEDE-4510-A515-0CF8B981EB79} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx3x1 => C:\Intel\logs\p2.exe [1205950788 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p2_1.log" <==== ATTENTION
Task: {2F0549E9-03D8-4E16-AC0D-37872BD06B25} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx4x1 => C:\Intel\logs\p3.exe [1206091076 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p3_1.log" <==== ATTENTION
Task: {7164802F-7BDC-4FF4-AB31-111FC1DDF32A} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx6x1 => C:\Intel\logs\p6.exe [1206108484 2025-03-02] () [File not signed] -> /UseChromeProfileFolder 1 /ChromeProfileFolder "C:\Users\janpu\AppData\Local\Google\Chrome\User Data" /stab "C:\Intel\logs\p6_1.log" <==== ATTENTION
Task: {51719BB7-0EFD-49C1-9ECE-6AA44A4833E7} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx9x1 => C:\Intel\logs\p7.exe [1206088516 2025-03-02] (Google LLC) [File not signed] -> /stab "C:\Intel\logs\p7_1.log" <==== ATTENTION
Task: {84D6B386-6FDE-4A9B-B3C0-BB15E70390F8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A52AAF48-8506-4276-A2B4-E5BC803C4F01} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FF9C486C-3086-45E4-A7FC-E68256735451} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D27B1CA3-A21E-4C2C-B3DA-E9D339237842} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FDFDE73C-9399-4B2B-AB58-5B1E054E1D07} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {00035BE3-73CE-4A62-9C05-E4D6BB469192} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB" (No File)
Task: {D176E9DA-F6ED-4685-BA42-1DFD3AEA8B0F} - System32\Tasks\OneDrive Startup Task-S-1-5-21-447794926-783580724-1362418113-1001 => C:\Users\janpu\AppData\Local\Microsoft\OneDrive\25.020.0202.0001\OneDriveLauncher.exe [669200 2025-03-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {59618173-4863-48D1-91C1-02F0C08EEB43} - System32\Tasks\update-S-1-5-21-447794926-783580724-1362418113-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {09E486CA-F36E-40FC-AA29-30E9F1A34C8E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\update-S-1-5-21-447794926-783580724-1362418113-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{40fd16de-b690-4570-96d5-47bd9a5faff5}: [NameServer] 8.8.8.8,1.1.1.1
Tcpip\..\Interfaces\{92f86d74-d80c-11e7-8ed6-806e6f6e6963}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{adc844b1-6e4f-478a-8153-e7ba5506b3b7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{b99221cf-b112-4d46-bb60-e6cd1e0564f2}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{faadc2b0-a222-44d8-bb08-dc38ca091ec4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{faadc2b0-a222-44d8-bb08-dc38ca091ec4}: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge Profile: C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default [2025-03-05]
Edge HomePage: Default -> hxxp://www.seznam.cz/
Edge StartupUrls: Default -> "hxxp://www.seznam.cz/","hxxps://web.whatsapp.c ... om/sharing"
Edge Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-04]
Edge Extension: (Edge relevant text changes) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mhhmkoogppocgeaedlcikkhenhagbmnj [2025-03-04]
Edge Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2025-03-05]

FireFox:
========
FF DefaultProfile: 8ji3u4k7.default
FF ProfilePath: C:\Users\janpu\AppData\Roaming\Mozilla\Firefox\Profiles\8ji3u4k7.default [2023-05-24]
FF ProfilePath: C:\Users\janpu\AppData\Roaming\Mozilla\Firefox\Profiles\iedwyphd.default-release [2025-03-05]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google Inc -> Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\dtplugin\npDeployJava1.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\plugin2\npjp2.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default [2025-03-05]
CHR Notifications: Default -> hxxps://app.zonky.cz; hxxps://calendar.google.com; hxxps://drive.google.com
CHR HomePage: Default -> hxxps://www.google.cz/?gfe_rd=cr&ei=C9WLVbPsOui ... gws_rd=ssl
CHR Session Restore: Default -> is enabled.
CHR Extension: (Překladač Google) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-09-09]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-02-28]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2025-02-28]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-23]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-02]
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]
CHR Extension: (Hlídač Shopů) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-02-12]
CHR Extension: (Streak CRM for Gmail) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2025-03-05]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-05-10]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-03-05]
CHR Notifications: Profile 1 -> hxxps://meet.google.com; hxxps://web.whatsapp.com
CHR HomePage: Profile 1 -> hxxp://www.google.com/
CHR StartupUrls: Profile 1 -> "hxxps://www.google.cz/","hxxp://www.seznam.cz/" ... trubin.cz/"
CHR Session Restore: Profile 1 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-03-04]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-03-04]
CHR Extension: (LibreCAD on rollApp) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gbalmmdepliaghihofedeopaacjfcgab [2018-02-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-04]
CHR Extension: (FormApps Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2024-04-16]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-22]
CHR Extension: (Image Size Info) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\oihdhfbfoagfkpcncinlbhfdgpegcigf [2024-07-17]
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]
CHR Extension: (Hlídač Shopů) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-02-12]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10 [2025-02-28]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-02-28]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-09-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-09-16]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11 [2025-02-20]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-02-20]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-01-13]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-01-13]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-01-13]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2 [2022-11-27]
CHR Session Restore: Profile 2 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2022-11-24]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-11-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-11-17]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2022-11-22]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2022-04-19]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-04-19]
CHR Extension: (Streak CRM for Gmail) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2022-04-19]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3 [2024-12-09]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-10-10]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-12-09]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-04-29]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-06-30]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4 [2022-08-31]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-08-31]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-08-31]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2022-08-31]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-31]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5 [2025-03-05]
CHR Session Restore: Profile 5 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-03-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-09-25]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-09-08]
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6 [2024-08-24]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2024-08-24]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-08-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-11-17]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-08-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-11-17]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7 [2024-01-14]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-01-08]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-08]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-01-08]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-01-08]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8 [2024-01-14]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-01-08]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-08]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-01-08]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-01-08]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9 [2024-09-16]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-09-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-09-16]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-09-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-09-16]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\System Profile [2025-03-05]
CHR HKU\S-1-5-21-447794926-783580724-1362418113-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\janpu\AppData\Local\Google\Drive\user_Y3mNHmq0EeuC+9Q9frE1aA\apdfllckaahabafndbhieahigkjlhalf_live.crx <not found>
CHR HKU\S-1-5-21-447794926-783580724-1362418113-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901968 2021-03-19] (BattlEye Innovations e.K. -> )
S2 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [503808 2024-08-05] (Brother Industries, Ltd.) [File not signed]
S2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13617384 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
S2 dg; C:\Intel\dg.exe [1166302370 2025-03-05] () [File not signed] <==== ATTENTION
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4955536 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [784512 2018-09-23] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-11-03] (Epic Games Inc. -> Epic Games, Inc.)
S2 GoogleUpdaterInternalService135.0.7023.0; C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
S2 GoogleUpdaterService135.0.7023.0; C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
S2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe [1447680 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182392 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-11-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [919992 2020-11-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
S2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945264 2017-11-24] (TeamViewer GmbH -> TeamViewer GmbH)
S2 USBAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\UsbAppControl\USBAppControl.exe [11776 2025-01-17] () [File not signed]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe [3199672 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe [141952 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 WorkflowAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl\WorkflowAppControl.exe [18944 2025-01-17] () [File not signed]
S2 FLEXnet Licensing Service; "C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe" [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AWCCDriver; C:\WINDOWS\System32\drivers\AWCCDriver.sys [42456 2021-07-01] (IndiLogic LLC -> Dell Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [63696 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S2 googledrivefs31626; C:\Program Files\Google\Drive File Stream\Drivers\31626\googledrivefs31626.sys [384096 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
S3 MpKsld74d7905; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5A3A9A57-CFD8-4FF1-BC6F-275E65CCDA48}\MpKslDrv.sys [278944 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
S3 Revoflt; C:\WINDOWS\System32\DRIVERS\revoflt.sys [38400 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
S2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [207344 2021-11-15] (Disc Soft Ltd -> Duplex Secure Ltd)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22104 2024-10-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [606624 2024-10-30] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105888 2024-10-30] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-03-05 13:38 - 2025-03-05 13:38 - 000003130 _____ C:\Users\janpu\Desktop\AdwCleaner[C02].txt
2025-03-05 13:36 - 2025-03-05 13:38 - 000141866 _____ C:\WINDOWS\ntbtlog.txt
2025-03-05 13:36 - 2025-03-05 13:38 - 000000000 ____D C:\Users\janpu\Desktop\_Logovací porgram
2025-03-05 13:32 - 2025-03-05 13:32 - 000000000 ____D C:\ProgramData\HP
2025-03-05 11:09 - 2025-03-05 11:11 - 000002620 _____ C:\Users\janpu\Desktop\Rkill.txt
2025-03-05 11:08 - 2025-03-05 11:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2025-03-05 10:24 - 2025-03-05 13:35 - 116916224 _____ C:\WINDOWS\system32\config\SOFTWARE
2025-03-05 10:08 - 2025-03-05 10:24 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2025-03-05 10:05 - 2025-03-05 10:28 - 000000000 ____D C:\Users\janpu\AppData\Roaming\AdwCleaner
2025-03-04 11:52 - 2025-03-04 11:52 - 000000000 ____D C:\Users\Public\Documents\AdobeGCInfo
2025-03-03 15:05 - 2025-03-03 15:05 - 000382054 _____ C:\Users\janpu\Documents\Scan2025-03-03_150448.pdf
2025-03-03 11:59 - 2025-03-03 11:59 - 000000223 _____ C:\Users\janpu\Desktop\Command & Conquer™ Tiberian Sun™ and Firestorm™.url
2025-03-02 20:32 - 2025-03-02 20:32 - 000000016 __RSH C:\$SysReset
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\EnigmaSoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\EnigmaSoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\EnigmaSoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\EnigmaSoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\EnigmaSoft
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\WINDOWS\ReasonLabsAVVPN
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\ReasonLabsAVVPN
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\ProgramData\ReasonLabsAVVPN
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\Program Files\ReasonLabsAVVPN
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\Program Files (x86)\ReasonLabsAVVPN
2025-02-28 16:16 - 2025-02-28 16:16 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
2025-02-28 15:40 - 2025-03-05 08:10 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Office
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\NZXT Cam
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\FRST
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\FRST
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\FRST
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\FRST
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 _____ C:\FRST
2025-02-28 15:28 - 2025-02-28 15:28 - 000000017 __RSH C:\$VtsFFY
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Users\janpu\AppData\Local\FSDART
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Users\Default\AppData\Local\FSDART
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Common Files\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\360
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\AVAST Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\AlibabaProtect
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Users\janpu\AppData\Local\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Users\Default\AppData\Local\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\AVAST Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\AlibabaProtect
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Avast Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\AlibabaProtect
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Avast Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\AlibabaProtect
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\AVAST Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\AlibabaProtect
2025-02-28 14:36 - 2025-02-28 14:36 - 000000000 ___RD C:\Users\janpu\Documents\Inventor Server SDK ACAD 2017
2025-02-28 14:31 - 2025-02-28 18:41 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Autodesk
2025-02-28 09:50 - 2025-02-28 09:50 - 000133238 _____ C:\Users\janpu\Downloads\Beroun-IV.Q 2024 (1).xlsx
2025-02-27 19:56 - 2025-02-27 19:56 - 000134737 _____ C:\Users\janpu\Downloads\Beroun-I.Q 2025.xlsx
2025-02-27 19:52 - 2025-02-27 19:52 - 000148408 _____ C:\Users\janpu\Downloads\Beroun-I.Q 2025 - dof..xlsx
2025-02-25 10:04 - 2025-02-25 10:04 - 000075902 _____ C:\Users\janpu\Documents\Vypis_poplatku-2802703583_za_obdobi_20240101-20241231.pdf
2025-02-20 14:49 - 2025-02-20 14:49 - 000000000 ____D C:\Users\janpu\AppData\Local\Brother_Industries,_Ltd
2025-02-20 11:21 - 2025-02-20 11:21 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Sun
2025-02-20 11:21 - 2025-02-20 11:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2025-02-20 11:21 - 2024-12-04 08:34 - 000178808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2025-02-19 09:57 - 2025-02-19 09:57 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-02-12 17:51 - 2025-02-12 17:51 - 001054478 _____ C:\Users\janpu\Downloads\2025-02-01T06-00 Transakce #9047957271988708-9178706538913776.pdf
2025-02-11 18:02 - 2025-02-11 18:02 - 000336428 _____ C:\Users\janpu\Downloads\priloha_1478410446_0_Dosetreni_PV_Adela_Ticha.pdf
2025-02-09 19:58 - 2025-03-04 10:14 - 000003564 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-447794926-783580724-1362418113-1001

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-03-05 13:36 - 2021-11-15 20:02 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2025-03-05 13:36 - 2020-08-07 17:46 - 000008192 ___SH C:\DumpStack.log.tmp
2025-03-05 13:35 - 2020-08-07 17:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-03-05 13:35 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-03-05 13:35 - 2017-07-04 08:05 - 000000000 _RSHD C:\Intel
2025-03-05 13:35 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-03-05 13:33 - 2021-02-09 09:56 - 000000000 ___RD C:\Users\janpu\Disk Google (linda.abrahamova@gmail.com)
2025-03-05 13:33 - 2018-01-10 10:42 - 000000000 ___RD C:\Users\janpu\Disk Google
2025-03-05 13:33 - 2017-12-03 10:33 - 000000000 ___SD C:\Users\janpu\AppData\Roaming\Microsoft\Credentials
2025-03-05 13:33 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\NVIDIA
2025-03-05 13:31 - 2020-08-07 17:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-03-05 13:31 - 2017-07-04 08:05 - 000000000 ____D C:\Users\janpu
2025-03-05 11:54 - 2020-08-07 17:51 - 001693140 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-03-05 11:54 - 2019-12-07 15:41 - 000716770 _____ C:\WINDOWS\system32\perfh005.dat
2025-03-05 11:54 - 2019-12-07 15:41 - 000144948 _____ C:\WINDOWS\system32\perfc005.dat
2025-03-05 11:54 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\INF
2025-03-05 11:15 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Steam
2025-03-05 11:08 - 2020-08-07 17:53 - 000003624 _____ C:\WINDOWS\system32\Tasks\GarminUpdaterTask
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\Package Cache
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\Garmin
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Garmin
2025-03-05 11:07 - 2017-12-03 14:07 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Word
2025-03-05 11:06 - 2022-08-17 09:52 - 000000000 ____D C:\Users\janpu\AppData\Local\Spotify
2025-03-05 11:06 - 2017-12-03 19:19 - 000000000 ___RD C:\Users\janpu\Documents\04 Nemovitosti
2025-03-05 10:46 - 2022-08-17 09:52 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Spotify
2025-03-05 09:45 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Adobe
2025-03-05 09:37 - 2020-08-07 17:46 - 000629152 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-03-05 09:25 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-03-05 09:18 - 2017-07-04 08:05 - 000000000 ___HD C:\Program Files\WindowsApps
2025-03-05 09:16 - 2017-12-03 14:07 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Excel
2025-03-04 14:00 - 2022-07-25 09:53 - 000000000 ____D C:\Users\janpu\AppData\Roaming\XnView
2025-03-04 14:00 - 2017-12-15 13:46 - 000000000 ____D C:\Users\janpu\AppData\Local\CrashDumps
2025-03-04 14:00 - 2017-12-03 18:57 - 000000000 ____D C:\Users\janpu\AppData\Roaming\uTorrent
2025-03-04 14:00 - 2017-07-04 08:05 - 000000000 ___DC C:\WINDOWS\Panther
2025-03-04 14:00 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2025-03-04 10:14 - 2023-11-15 07:10 - 000002383 _____ C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-03-04 10:14 - 2021-12-13 09:06 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-447794926-783580724-1362418113-1001
2025-03-04 10:14 - 2020-08-07 17:53 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-447794926-783580724-1362418113-1001
2025-03-03 11:59 - 2021-02-05 14:16 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2025-03-01 11:02 - 2018-05-14 17:56 - 000000000 ____D C:\Users\janpu\AppData\Local\D3DSCache
2025-03-01 10:53 - 2020-06-15 07:32 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-02-28 16:48 - 2017-12-03 14:22 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared
2025-02-28 13:49 - 2024-01-20 23:43 - 000000000 ____D C:\Users\janpu\AppData\Local\KrosUsers
2025-02-28 13:09 - 2017-12-03 14:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2017 – Čeština (Czech)
2025-02-28 09:50 - 2017-12-03 10:41 - 000000000 ____D C:\Users\janpu\AppData\Local\Packages
2025-02-20 14:49 - 2024-12-06 10:11 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Brother
2025-02-20 11:03 - 2023-09-05 18:12 - 000000000 ____D C:\Users\janpu\AppData\Roaming\UI Launcher
2025-02-20 10:36 - 2024-02-03 12:25 - 000000000 ___RD C:\Users\janpu\Documents\25 Rodina
2025-02-20 10:32 - 2021-07-24 21:11 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2025-02-19 09:57 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-02-13 10:25 - 2022-11-22 08:00 - 000000000 ___RD C:\Users\janpu\Documents\ebay
2025-02-13 08:54 - 2018-01-07 11:23 - 000000000 ____D C:\Users\janpu\AppData\Roaming\vlc
2025-02-12 22:43 - 2024-07-15 01:17 - 000000000 ____D C:\WINDOWS\system32\compatrel
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-02-12 22:43 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2025-02-12 17:47 - 2021-10-01 23:00 - 000002179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2025-02-12 17:47 - 2021-09-08 19:14 - 000002014 _____ C:\Users\Default\Desktop\Google Slides.lnk
2025-02-12 17:47 - 2021-09-08 19:14 - 000002014 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2025-02-12 17:47 - 2021-09-08 19:14 - 000002002 _____ C:\Users\Default\Desktop\Google Docs.lnk
2025-02-12 13:17 - 2020-04-17 13:39 - 000419228 __RSH C:\bootmgr
2025-02-12 13:16 - 2020-08-07 17:48 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-02-12 12:11 - 2017-12-04 17:15 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-02-12 12:00 - 2017-12-04 17:15 - 209365816 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-02-11 20:04 - 2024-12-06 10:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2025-02-11 00:19 - 2017-12-03 19:17 - 000000000 ___RD C:\Users\janpu\Documents\01 Živnost
2025-02-09 19:53 - 2021-02-05 13:35 - 000000000 ____D C:\Users\janpu\AppData\Local\Steam

==================== Files in the root of some directories ========

2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\360Qua
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\64404Softun
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Advanced SystemCare
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\AdwCleaner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\AlibabaProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\ASUS
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Avast Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\AvastSvcpCP
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Bitdefender
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\ByteFence
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\CoreTemp
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\CryptoTab Browser
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\EMCO Malware Destroyer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\EnigmaSoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\ESET
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\F-Secure
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\FanControl
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\FileViewPro
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\FRST
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\GridinSoft Anti-Malware
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\HP Sure Sense
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Install
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\IOBit Malware Fighter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\IQBIT
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Kaspersky Lab
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\kingsoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Lavasoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Loaris Trojan Remover
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\McAfee.com
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\MSI
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\NoVirusThanks
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\pinterests
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\ProcessTamer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Quick Heal
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\real temp
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\ReasonLabs
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH () C:\Program Files\ReasonLabsAVVPN
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\RogueKiller
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\SaferWeb
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\simplewall
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\SMADAV
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Solvusoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Sophos
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\SpeedFan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Spybot - Search & Destroy 2
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\SpyShelter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\SUPERAntiSpyware
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Symantec
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\Taskexplorer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\TC UP
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\TinyWall
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\TotalAV
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Trend Micro
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\Unhackme
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\wDcLibs
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\Webroot
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\360Qua
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\64404Softun
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Advanced SystemCare
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\AdwCleaner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\AlibabaProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\ASUS
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Avast Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\AvastSvcpCP
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Bitdefender
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\ByteFence
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\CoreTemp
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\CryptoTab Browser
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\EMCO Malware Destroyer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\EnigmaSoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\ESET
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\F-Secure
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\FanControl
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\FileViewPro
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\FRST
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\GridinSoft Anti-Malware
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\HP Sure Sense
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Install
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\IOBit Malware Fighter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\IQBIT
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Kaspersky Lab
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\kingsoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Lavasoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Loaris Trojan Remover
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\McAfee.com
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\MSI
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\NoVirusThanks
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\pinterests
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\ProcessTamer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Quick Heal
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\real temp
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\ReasonLabs
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH () C:\Program Files (x86)\ReasonLabsAVVPN
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\RogueKiller
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\SaferWeb
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\simplewall
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\SMADAV
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Solvusoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Sophos
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\SpeedFan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Spybot - Search & Destroy 2
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\SpyShelter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\SUPERAntiSpyware
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Symantec
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\Taskexplorer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\TC UP
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\TinyWall
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\TotalAV
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Trend Micro
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\Unhackme
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\wDcLibs
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\Webroot
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Common Files\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Common Files\Acronis
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Users\janpu\AppData\Local\ESET
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Users\janpu\AppData\Local\FSDART
2021-07-13 10:31 - 2025-03-04 11:52 - 000000615 _____ () C:\Users\janpu\AppData\Local\oobelibMkey.log
2019-08-26 21:41 - 2022-10-06 20:44 - 000007604 _____ () C:\Users\janpu\AppData\Local\Resmon.ResmonCfg
2024-12-06 10:55 - 2024-12-06 10:55 - 000000000 _____ () C:\Users\janpu\AppData\Local\settingData.dat
2017-12-03 14:00 - 2017-12-03 14:00 - 000000003 _____ () C:\Users\janpu\AppData\Local\updater.log
2017-12-03 14:00 - 2022-03-06 14:09 - 000000424 _____ () C:\Users\janpu\AppData\Local\UserProducts.xml

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

ATTENTION: ==> Could not access BCD. ->

#5 Příspěvek od **JaRon** » 05 bře 2025 16:16

No katastrofa

Ak to chces preinstalovat, napis to hned
Ak ideme odvirovat, OK, ALE bude to trvat dlho

Prvy krok - pouzi v NR fixlist s obsahom:

Start

CloseProcesses:

S2 FLEXnet Licensing Service; "C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe" [X]

S2 dg; C:\Intel\dg.exe [1166302370 2025-03-05] () [File not signed] <==== ATTENTION

Task: {82DADBFD-99E0-47F2-8C0F-181663FDDEA3} - System32\Tasks\Microsoft\Windows\rempl\shell => %ProgramFiles%\rempl\sedlauncher.exe (No File)
Task: {85B9D243-5AD4-408E-92DE-E6C920231DAB} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager1 => C:\Intel\e.vbs [489 2025-03-05] () [File not signed]
Task: {BC67C6D6-6CD1-49F8-BE40-3C5482059E86} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3q1 => C:\Intel\q2.exe [1173682082 2025-03-05] () [File not signed] <==== ATTENTION
Task: {817EDBF5-75EC-43FE-95BD-BE414A93C0B4} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3x1 => C:\Intel\i2.exe [1207112002 2025-03-05] () [File not signed] <==== ATTENTION
Task: {FDE80188-1D10-4A37-BCB4-2A12073E3F91} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx1x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {07CEE210-EE87-423D-A404-2D3B8E579B65} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx2x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {A0C363FC-1056-42A9-8A7E-435D3A6A0C23} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx3x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f1.log"
Task: {071BA4F9-F185-41A7-AD4E-802B37238177} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx4x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {D8DBEE91-F654-47D0-92D5-FD0BDD5755E7} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx5x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f2.log"
Task: {78C1E051-CEF7-4566-A81C-C019F3FEA9D5} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx6x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {5C3C6E8F-5A56-4B6A-B4F9-85C0E2A23E45} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx2x1 => C:\Intel\logs\p1.exe [1205936452 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p1_1.log" <==== ATTENTION
Task: {1057572F-FEDE-4510-A515-0CF8B981EB79} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx3x1 => C:\Intel\logs\p2.exe [1205950788 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p2_1.log" <==== ATTENTION
Task: {2F0549E9-03D8-4E16-AC0D-37872BD06B25} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx4x1 => C:\Intel\logs\p3.exe [1206091076 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p3_1.log" <==== ATTENTION
Task: {7164802F-7BDC-4FF4-AB31-111FC1DDF32A} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx6x1 => C:\Intel\logs\p6.exe [1206108484 2025-03-02] () [File not signed] -> /UseChromeProfileFolder 1 /ChromeProfileFolder "C:\Users\janpu\AppData\Local\Google\Chrome\User Data" /stab "C:\Intel\logs\p6_1.log" <==== ATTENTION
Task: {51719BB7-0EFD-49C1-9ECE-6AA44A4833E7} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx9x1 => C:\Intel\logs\p7.exe [1206088516 2025-03-02] (Google LLC) [File not signed] -> /stab "C:\Intel\logs\p7_1.log" <==== ATTENTION

EmptyTemp:

End

Hasicz · #6 Příspěvek od **Hasicz** » 05 bře 2025 16:22

Dle reakce premyslim: uorimne, ma smysl to cistit, nebo bude lepsi preinstal? Co bys doporucil?

#7 Příspěvek od **JaRon** » 05 bře 2025 16:26

Ak mas funkcny bod obnovy pred 28.2. - obnov
Ak nie skus aspon prvy bod s fixlistom

Hasicz · #8 Příspěvek od **Hasicz** » 06 bře 2025 09:32

Fix result of Farbar Recovery Scan Tool (x64) Version: 23.03.2024 01
Ran by janpu (06-03-2025 09:16:42) Run:1
Running from C:\Users\janpu\Desktop
Loaded Profiles: janpu
Boot Mode: Safe Mode (with Networking)
==============================================

fixlist content:
*****************
Start

CloseProcesses:

S2 FLEXnet Licensing Service; "C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe" [X]

S2 dg; C:\Intel\dg.exe [1166302370 2025-03-05] () [File not signed] <==== ATTENTION

Task: {82DADBFD-99E0-47F2-8C0F-181663FDDEA3} - System32\Tasks\Microsoft\Windows\rempl\shell => %ProgramFiles%\rempl\sedlauncher.exe (No File)
Task: {85B9D243-5AD4-408E-92DE-E6C920231DAB} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager1 => C:\Intel\e.vbs [489 2025-03-05] () [File not signed]
Task: {BC67C6D6-6CD1-49F8-BE40-3C5482059E86} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3q1 => C:\Intel\q2.exe [1173682082 2025-03-05] () [File not signed] <==== ATTENTION
Task: {817EDBF5-75EC-43FE-95BD-BE414A93C0B4} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3x1 => C:\Intel\i2.exe [1207112002 2025-03-05] () [File not signed] <==== ATTENTION
Task: {FDE80188-1D10-4A37-BCB4-2A12073E3F91} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx1x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {07CEE210-EE87-423D-A404-2D3B8E579B65} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx2x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {A0C363FC-1056-42A9-8A7E-435D3A6A0C23} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx3x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f1.log"
Task: {071BA4F9-F185-41A7-AD4E-802B37238177} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx4x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {D8DBEE91-F654-47D0-92D5-FD0BDD5755E7} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx5x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f2.log"
Task: {78C1E051-CEF7-4566-A81C-C019F3FEA9D5} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx6x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {5C3C6E8F-5A56-4B6A-B4F9-85C0E2A23E45} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx2x1 => C:\Intel\logs\p1.exe [1205936452 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p1_1.log" <==== ATTENTION
Task: {1057572F-FEDE-4510-A515-0CF8B981EB79} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx3x1 => C:\Intel\logs\p2.exe [1205950788 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p2_1.log" <==== ATTENTION
Task: {2F0549E9-03D8-4E16-AC0D-37872BD06B25} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx4x1 => C:\Intel\logs\p3.exe [1206091076 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p3_1.log" <==== ATTENTION
Task: {7164802F-7BDC-4FF4-AB31-111FC1DDF32A} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx6x1 => C:\Intel\logs\p6.exe [1206108484 2025-03-02] () [File not signed] -> /UseChromeProfileFolder 1 /ChromeProfileFolder "C:\Users\janpu\AppData\Local\Google\Chrome\User Data" /stab "C:\Intel\logs\p6_1.log" <==== ATTENTION
Task: {51719BB7-0EFD-49C1-9ECE-6AA44A4833E7} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx9x1 => C:\Intel\logs\p7.exe [1206088516 2025-03-02] (Google LLC) [File not signed] -> /stab "C:\Intel\logs\p7_1.log" <==== ATTENTION

EmptyTemp:

End
*****************

Processes closed successfully.
HKLM\System\CurrentControlSet\Services\FLEXnet Licensing Service => removed successfully
FLEXnet Licensing Service => service removed successfully
HKLM\System\CurrentControlSet\Services\dg => removed successfully
dg => service removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{82DADBFD-99E0-47F2-8C0F-181663FDDEA3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{82DADBFD-99E0-47F2-8C0F-181663FDDEA3}" => removed successfully
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\rempl\shell" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\rempl\shell" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{85B9D243-5AD4-408E-92DE-E6C920231DAB}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP Manager1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BC67C6D6-6CD1-49F8-BE40-3C5482059E86}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3q1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP Manager3q1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{817EDBF5-75EC-43FE-95BD-BE414A93C0B4}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3x1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP Manager3x1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FDE80188-1D10-4A37-BCB4-2A12073E3F91}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx1x1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx1x1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{07CEE210-EE87-423D-A404-2D3B8E579B65}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx2x1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx2x1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A0C363FC-1056-42A9-8A7E-435D3A6A0C23}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx3x1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx3x1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{071BA4F9-F185-41A7-AD4E-802B37238177}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx4x1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx4x1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8DBEE91-F654-47D0-92D5-FD0BDD5755E7}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx5x1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx5x1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{78C1E051-CEF7-4566-A81C-C019F3FEA9D5}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx6x1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx6x1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5C3C6E8F-5A56-4B6A-B4F9-85C0E2A23E45}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx2x1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx2x1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1057572F-FEDE-4510-A515-0CF8B981EB79}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx3x1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx3x1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2F0549E9-03D8-4E16-AC0D-37872BD06B25}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx4x1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx4x1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7164802F-7BDC-4FF4-AB31-111FC1DDF32A}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx6x1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx6x1" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{51719BB7-0EFD-49C1-9ECE-6AA44A4833E7}" => not found
Could not move "C:\WINDOWS\System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx9x1" => Scheduled to move on reboot.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx9x1" => removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1835008 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 19529363 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 511473600 B
Windows/system/drivers => 1138080 B
Edge => 0 B
Chrome => 4462054525 B
Firefox => 76630242 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 297139 B
LocalService => 306262 B
NetworkService => 310934 B
janpu => 86854097 B

RecycleBin => 5750 B
EmptyTemp: => 4.8 GB temporary data Removed.

================================

==== End of Fixlog 09:20:23 ====

Hasicz · #9 Příspěvek od **Hasicz** » 06 bře 2025 09:42

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23.03.2024 01
Ran by janpu (administrator) on HONZA-PC (MSI MS-7752) (06-03-2025 09:32:34)
Running from C:\Users\janpu\Desktop\FRST64.exe
Loaded Profiles: janpu
Platform: Microsoft Windows 10 Home Version 22H2 19045.5487 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Safe Mode (with Networking)

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-21] (Kilonova LLC -> )
HKLM-x32\...\Run: [I19B] => C:\WINDOWS\twain_32\Brimi19b\Common\TwDsUiLaunch.exe [103152 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4009984 2024-05-31] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3588608 2021-04-02] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\RunOnce: [*EmptyTemp] => cmd /c rd /q/s C:\FRST\Temp (No File)
HKLM\Software\Policies\...\system: [UploadUserActivities] 0
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe [64393824 2025-03-05] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe [64393824 2025-03-05] (Google LLC -> Google LLC.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [ManicTimeC34F57B2DA6E6758] => C:\Program Files (x86)\ManicTime\ManicTime.exe [151968 2023-04-19] (Finkit d.o.o. -> Finkit d.o.o.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4435552 2025-01-28] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe [64393824 2025-03-05] (Google LLC -> Google LLC.)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [479632 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [Spotify] => C:\Users\janpu\AppData\Roaming\Spotify\Spotify.exe [36483400 2025-02-28] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [MicrosoftEdgeAutoLaunch_B290F089DC243CBB434D3F1388B3FDD9] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4088392 2025-02-27] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [28999440 2024-11-06] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Run: [GoogleUpdaterTaskUser135.0.7023.4] => C:\Users\janpu\AppData\Local\Google\GoogleUpdater\135.0.7023.4\updater.exe [5745760 2025-02-25] (Google LLC -> Google LLC)
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Policies\Explorer: []
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {8979b10e-463b-11ec-8f81-d43d7eb13568} - "I:\Setup.exe"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {8979b300-463b-11ec-8f81-d43d7eb13568} - "K:\autorun.exe"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\MountPoints2: {9f60999e-805a-11ec-8f8d-d43d7eb13568} - "M:\_AUTORUN\AUTORUN.EXE"
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\105.0.1.0\GoogleDriveFS.exe [64393824 2025-03-05] (Google LLC -> Google LLC.)
HKLM\...\Print\Monitors\HP B011 Status Monitor: C:\WINDOWS\System32\hpinkstsB011LM.dll [331664 2012-06-13] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3520 series): C:\WINDOWS\System32\HPDiscoPMB011.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\...\AppCompatFlags\Custom\KONUNG.EXE: [{5e06ebb7-4976-4bd0-96ff-4d953f97c430}.sdb] -> GOG.com Konung
HKLM\Software\...\AppCompatFlags\InstalledSDB\{5e06ebb7-4976-4bd0-96ff-4d953f97c430}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{5e06ebb7-4976-4bd0-96ff-4d953f97c430}.sdb [2015-01-20]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Brother iPSMonitor.lnk [2025-02-11]
ShortcutTarget: Brother iPSMonitor.lnk -> C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.exe (iPSMonitor) [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {D138F6D3-EEA0-4734-9761-E2A33025166D} - \Avast Software\Overseer -> No File <==== ATTENTION
Task: {5F683216-5151-4E6C-BB2D-AC818DCD0C37} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [30992 2024-11-06] (Garmin International, Inc. -> )
Task: {7A21660C-9111-45F8-9069-0AEF153464C6} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem135.0.7023.0{5AE63604-347D-44F1-B060-082F7AE80623} => C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
Task: {DA7525FC-3F50-49FC-89B3-7C4DE2EE832F} - System32\Tasks\GoogleUser\GoogleUpdater\GoogleUpdaterTaskUser135.0.7023.4{E7502C00-005D-4552-A641-D9D9940EC786} => C:\Users\janpu\AppData\Local\Google\GoogleUpdater\135.0.7023.4\updater.exe [5745760 2025-02-25] (Google LLC -> Google LLC)
Task: {E6D831CC-50BC-4035-984E-4A0DA6C9AF5D} - System32\Tasks\Microsoft\Office\Office Apps Prewarm => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {F4CF132B-CF47-4F94-89EA-10C3CEDC253A} - System32\Tasks\Microsoft\Office\Office Apps Prewarm Recurring => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {98A2AD42-20BB-4878-9909-5ED49B1B9D53} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {D4587D31-C5C2-40F9-8081-740EF334B177} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [67248 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {984D6EF5-BDD0-4413-9058-CC6F6970C97A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {07E695FF-97AC-4A75-A324-C1F5CD462E99} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {DAEE2E8D-776E-41B3-B4DC-A2A6195BD8FC} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {3BF81EDF-DC02-4B6C-BB20-60888588364F} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [194672 2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {DB2EA926-BDB4-4B42-B1D5-14A0E05588A3} - System32\Tasks\Microsoft\Windows\Application Experience\PcaWallpaperAppDetect => C:\WINDOWS\System32\rundll32.exe [89600 2024-07-14] (Microsoft Windows -> Microsoft Corporation) -> %windir%\system32\PcaSvc.dll,PcaWallpaperAppDetect
Task: {04EF195F-BA2F-40B8-9157-F74787CBC81B} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => C:\WINDOWS\system32\clipesu.exe [274952 2025-02-12] (Microsoft Windows -> Microsoft Corporation)
Task: {0D642530-7604-435C-87E3-FF0DAFFBDD1A} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager1 => C:\Intel\e.vbs [489 2025-03-06] () [File not signed]
Task: {EC991080-F0A0-4318-A514-4193EE9FCF86} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3q1 => C:\Intel\q2.exe [1173682082 2025-03-05] () [File not signed] <==== ATTENTION
Task: {D8384EA2-5A40-4CB2-B272-FDFECDD66587} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager3x1 => C:\Intel\i2.exe [1207112002 2025-03-05] () [File not signed] <==== ATTENTION
Task: {9A432E05-A5C5-481B-ACA9-09D6D0F69CCE} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx1x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {29446CB0-3B1C-438D-81D3-256DA515D8D7} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx2x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {99B33611-DF2A-4B79-9654-B0668F1A912A} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx3x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f1.log"
Task: {FB826E1E-3C4C-418C-8543-CE684D04D494} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx4x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {7BED6269-0360-448A-B1C0-C21462F8A95E} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx5x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed] -> clipboard addfile "C:\Intel\logs\f2.log"
Task: {DD8C0BE7-E830-45F0-AD42-22F0708306AB} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerBx6x1 => C:\Intel\logs\nc.exe [110080 2017-07-04] () [File not signed]
Task: {437E1111-DA89-4B3F-9339-48FC5BF8D8D1} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx2x1 => C:\Intel\logs\p1.exe [1205936452 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p1_1.log" <==== ATTENTION
Task: {92C949A0-43B3-4CED-B315-3E509D37D2CB} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx3x1 => C:\Intel\logs\p2.exe [1205950788 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p2_1.log" <==== ATTENTION
Task: {0236AF91-8A93-448F-B120-DEC398E1844C} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx4x1 => C:\Intel\logs\p3.exe [1206091076 2025-03-02] () [File not signed] -> /stab "C:\Intel\logs\p3_1.log" <==== ATTENTION
Task: {9152D077-B4E1-4A6A-BE1D-812013DCF2CD} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx6x1 => C:\Intel\logs\p6.exe [1206108484 2025-03-02] () [File not signed] -> /UseChromeProfileFolder 1 /ChromeProfileFolder "C:\Users\janpu\AppData\Local\Google\Chrome\User Data" /stab "C:\Intel\logs\p6_1.log" <==== ATTENTION
Task: {A002858C-912E-456A-AF6E-D70D5CBE76CA} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP ManagerPWSx9x1 => C:\Intel\logs\p7.exe [1206088516 2025-03-02] (Google LLC) [File not signed] -> /stab "C:\Intel\logs\p7_1.log" <==== ATTENTION
Task: {84D6B386-6FDE-4A9B-B3C0-BB15E70390F8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A52AAF48-8506-4276-A2B4-E5BC803C4F01} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FF9C486C-3086-45E4-A7FC-E68256735451} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D27B1CA3-A21E-4C2C-B3DA-E9D339237842} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FDFDE73C-9399-4B2B-AB58-5B1E054E1D07} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {00035BE3-73CE-4A62-9C05-E4D6BB469192} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB" (No File)
Task: {D176E9DA-F6ED-4685-BA42-1DFD3AEA8B0F} - System32\Tasks\OneDrive Startup Task-S-1-5-21-447794926-783580724-1362418113-1001 => C:\Users\janpu\AppData\Local\Microsoft\OneDrive\25.020.0202.0001\OneDriveLauncher.exe [669200 2025-03-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {59618173-4863-48D1-91C1-02F0C08EEB43} - System32\Tasks\update-S-1-5-21-447794926-783580724-1362418113-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {09E486CA-F36E-40FC-AA29-30E9F1A34C8E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\update-S-1-5-21-447794926-783580724-1362418113-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{40fd16de-b690-4570-96d5-47bd9a5faff5}: [NameServer] 8.8.8.8,1.1.1.1
Tcpip\..\Interfaces\{92f86d74-d80c-11e7-8ed6-806e6f6e6963}: [NameServer] 8.8.8.8,1.1.1.1
Tcpip\..\Interfaces\{adc844b1-6e4f-478a-8153-e7ba5506b3b7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{b99221cf-b112-4d46-bb60-e6cd1e0564f2}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{faadc2b0-a222-44d8-bb08-dc38ca091ec4}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{faadc2b0-a222-44d8-bb08-dc38ca091ec4}: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge Profile: C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default [2025-03-05]
Edge HomePage: Default -> hxxp://www.seznam.cz/
Edge StartupUrls: Default -> "hxxp://www.seznam.cz/","hxxps://web.whatsapp.c ... om/sharing"
Edge Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-04]
Edge Extension: (Edge relevant text changes) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mhhmkoogppocgeaedlcikkhenhagbmnj [2025-03-04]
Edge Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\janpu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2025-03-05]

FireFox:
========
FF DefaultProfile: 8ji3u4k7.default
FF ProfilePath: C:\Users\janpu\AppData\Roaming\Mozilla\Firefox\Profiles\8ji3u4k7.default [2023-05-24]
FF ProfilePath: C:\Users\janpu\AppData\Roaming\Mozilla\Firefox\Profiles\iedwyphd.default-release [2025-03-06]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google Inc -> Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\dtplugin\npDeployJava1.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\plugin2\npjp2.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default [2025-03-06]
CHR Notifications: Default -> hxxps://app.zonky.cz; hxxps://calendar.google.com; hxxps://drive.google.com
CHR HomePage: Default -> hxxps://www.google.cz/?gfe_rd=cr&ei=C9WLVbPsOui ... gws_rd=ssl
CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3289075&SearchSource=48&CUI=UN49515189314555504&UM=1","hxxp://www.mystartsearch.com/?type=hp&ts=14262 ... google.cz/"
CHR Session Restore: Default -> is enabled.
CHR Extension: (Překladač Google) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-09-09]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-02-28]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2025-02-28]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-23]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-02]
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]
CHR Extension: (Hlídač Shopů) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-02-12]
CHR Extension: (Streak CRM for Gmail) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2025-03-05]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Guest Profile [2025-03-06]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-03-06]
CHR Notifications: Profile 1 -> hxxps://meet.google.com; hxxps://web.whatsapp.com
CHR HomePage: Profile 1 -> hxxp://www.google.com/
CHR StartupUrls: Profile 1 -> "hxxps://www.google.cz/","hxxp://www.seznam.cz/" ... trubin.cz/"
CHR Session Restore: Profile 1 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-03-05]
CHR Extension: (LibreCAD on rollApp) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gbalmmdepliaghihofedeopaacjfcgab [2018-02-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-04]
CHR Extension: (FormApps Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2024-04-16]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-22]
CHR Extension: (Image Size Info) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\oihdhfbfoagfkpcncinlbhfdgpegcigf [2024-07-17]
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]
CHR Extension: (Hlídač Shopů) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-02-12]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10 [2025-03-06]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-09-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-09-16]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11 [2025-03-06]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-02-20]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-01-13]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-01-13]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-01-13]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2 [2025-03-06]
CHR Session Restore: Profile 2 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2022-11-24]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-11-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-11-17]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2022-11-22]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2022-04-19]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-04-19]
CHR Extension: (Streak CRM for Gmail) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2022-04-19]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3 [2025-03-06]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-10-10]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-12-09]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-04-29]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-06-30]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4 [2025-03-06]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-08-31]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-08-31]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2022-08-31]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-31]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5 [2025-03-06]
CHR Session Restore: Profile 5 -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-03-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-09-25]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-09-08]
CHR Extension: (Crypto Web Extension) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjohlogcennenjhkfclfgaganagadkkm [2024-10-18]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6 [2025-03-06]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2024-08-24]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-08-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-11-17]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-08-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-11-17]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7 [2025-03-06]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-01-08]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-08]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-01-08]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-01-08]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8 [2025-03-06]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-01-08]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-08]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-01-08]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-01-08]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9 [2025-03-06]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-09-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-09-16]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-09-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\janpu\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-09-16]
CHR Profile: C:\Users\janpu\AppData\Local\Google\Chrome\User Data\System Profile [2025-03-06]
CHR HKU\S-1-5-21-447794926-783580724-1362418113-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\janpu\AppData\Local\Google\Drive\user_Y3mNHmq0EeuC+9Q9frE1aA\apdfllckaahabafndbhieahigkjlhalf_live.crx <not found>
CHR HKU\S-1-5-21-447794926-783580724-1362418113-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901968 2021-03-19] (BattlEye Innovations e.K. -> )
S2 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [503808 2024-08-05] (Brother Industries, Ltd.) [File not signed]
S2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13617384 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4955536 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [784512 2018-09-23] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-11-03] (Epic Games Inc. -> Epic Games, Inc.)
S2 GoogleUpdaterInternalService135.0.7023.0; C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
S2 GoogleUpdaterService135.0.7023.0; C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
S2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe [1447680 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182392 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-11-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [919992 2020-11-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
S2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945264 2017-11-24] (TeamViewer GmbH -> TeamViewer GmbH)
S2 USBAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\UsbAppControl\USBAppControl.exe [11776 2025-01-17] () [File not signed]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe [3199672 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe [141952 2024-10-30] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 WorkflowAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl\WorkflowAppControl.exe [18944 2025-01-17] () [File not signed]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AWCCDriver; C:\WINDOWS\System32\drivers\AWCCDriver.sys [42456 2021-07-01] (IndiLogic LLC -> Dell Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [63696 2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S2 googledrivefs31626; C:\Program Files\Google\Drive File Stream\Drivers\31626\googledrivefs31626.sys [384096 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
S3 Revoflt; C:\WINDOWS\System32\DRIVERS\revoflt.sys [38400 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
S2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [207344 2021-11-15] (Disc Soft Ltd -> Duplex Secure Ltd)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22104 2024-10-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [606624 2024-10-30] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105888 2024-10-30] (Microsoft Windows -> Microsoft Corporation)
S3 MpKsld74d7905; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5A3A9A57-CFD8-4FF1-BC6F-275E65CCDA48}\MpKslDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-03-06 09:32 - 2025-03-06 09:34 - 000038067 _____ C:\Users\janpu\Desktop\FRST.txt
2025-03-06 09:16 - 2025-03-06 09:20 - 000011004 _____ C:\Users\janpu\Desktop\Fixlog.txt
2025-03-05 16:44 - 2025-03-05 16:44 - 000065264 _____ C:\Users\janpu\Downloads\priloha_1487660424_2_Jak se poprve prihlasit.pdf
2025-03-05 16:42 - 2025-03-05 16:42 - 000175790 _____ C:\Users\janpu\Downloads\priloha_1487660424_1_Informace o programu.pdf
2025-03-05 16:42 - 2025-03-05 16:42 - 000175790 _____ C:\Users\janpu\Downloads\priloha_1487660424_1_Informace o programu (1).pdf
2025-03-05 16:41 - 2025-03-05 16:41 - 000048026 _____ C:\Users\janpu\Downloads\priloha_1487660424_0_PRIHLASOVACI UDAJE A POPIS PRIHLASENI (1).pdf
2025-03-05 16:36 - 2025-03-05 16:36 - 000382173 _____ C:\Users\janpu\Downloads\priloha_1489468154_0_Dopis VR II MSMT-25_2025-29.pdf
2025-03-05 16:36 - 2025-03-05 16:36 - 000048026 _____ C:\Users\janpu\Downloads\priloha_1487660424_0_PRIHLASOVACI UDAJE A POPIS PRIHLASENI.pdf
2025-03-05 13:36 - 2025-03-06 09:16 - 000283136 _____ C:\WINDOWS\ntbtlog.txt
2025-03-05 13:36 - 2025-03-06 09:16 - 000000000 ____D C:\Users\janpu\Desktop\_Logovací porgram
2025-03-05 13:36 - 2025-03-04 12:08 - 002391552 _____ (Farbar) C:\Users\janpu\Desktop\FRST64.exe
2025-03-05 13:32 - 2025-03-05 13:32 - 000000000 ____D C:\ProgramData\HP
2025-03-05 11:08 - 2025-03-05 11:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2025-03-05 10:24 - 2025-03-06 09:15 - 116916224 _____ C:\WINDOWS\system32\config\SOFTWARE
2025-03-05 10:08 - 2025-03-05 10:24 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2025-03-05 10:05 - 2025-03-05 10:28 - 000000000 ____D C:\Users\janpu\AppData\Roaming\AdwCleaner
2025-03-04 11:52 - 2025-03-04 11:52 - 000000000 ____D C:\Users\Public\Documents\AdobeGCInfo
2025-03-03 15:05 - 2025-03-03 15:05 - 000382054 _____ C:\Users\janpu\Documents\Scan2025-03-03_150448.pdf
2025-03-03 11:59 - 2025-03-03 11:59 - 000000223 _____ C:\Users\janpu\Desktop\Command & Conquer™ Tiberian Sun™ and Firestorm™.url
2025-03-02 20:32 - 2025-03-02 20:32 - 000000016 __RSH C:\$SysReset
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\WINDOWS\EnigmaSoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProgramData\EnigmaSoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files\EnigmaSoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\Unhackme
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\TinyWall
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\real temp
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\Program Files (x86)\EnigmaSoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\ProcessTamer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\kingsoft
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\FanControl
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH C:\EnigmaSoft
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\WINDOWS\ReasonLabsAVVPN
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\ReasonLabsAVVPN
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\ProgramData\ReasonLabsAVVPN
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\Program Files\ReasonLabsAVVPN
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH C:\Program Files (x86)\ReasonLabsAVVPN
2025-02-28 16:16 - 2025-02-28 16:16 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
2025-02-28 15:40 - 2025-03-06 09:05 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Office
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\NZXT Cam
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\FRST
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\WINDOWS\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\FRST
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ProgramData\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\FRST
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\Webroot
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\Taskexplorer
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\SpyShelter
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\SpeedFan
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\SaferWeb
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\FRST
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\Program Files (x86)\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\ByteFence
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\AdwCleaner
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH C:\64404Softun
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 _____ C:\FRST
2025-02-28 15:28 - 2025-02-28 15:28 - 000000017 __RSH C:\$VtsFFY
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\WINDOWS\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Users\janpu\AppData\Local\FSDART
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Users\Default\AppData\Local\FSDART
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ProgramData\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Common Files\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\wDcLibs
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Trend Micro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\TC UP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\SUPERAntiSpyware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Solvusoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\simplewall
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Quick Heal
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Program Files (x86)\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\pinterests
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\MSI
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Loaris Trojan Remover
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\IQBIT
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Install
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\GridinSoft Anti-Malware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\F-Secure
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\FileViewPro
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\EMCO Malware Destroyer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\CoreTemp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\AvastSvcpCP
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\ASUS
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Advanced SystemCare
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\360Qua
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH C:\360
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\AVAST Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\WINDOWS\AlibabaProtect
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Users\janpu\AppData\Local\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Users\Default\AppData\Local\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\AVAST Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\AlibabaProtect
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Avast Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files\AlibabaProtect
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\TotalAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Symantec
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Spybot - Search & Destroy 2
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Sophos
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\SMADAV
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\RogueKiller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\ReasonLabs
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Avast Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Program Files (x86)\AlibabaProtect
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\NoVirusThanks
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\McAfee.com
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Lavasoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Kaspersky Lab
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\IOBit Malware Fighter
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\HP Sure Sense
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ESET
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\CryptoTab Browser
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Bitdefender
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\AVAST Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\AlibabaProtect
2025-02-28 14:36 - 2025-02-28 14:36 - 000000000 ___RD C:\Users\janpu\Documents\Inventor Server SDK ACAD 2017
2025-02-28 14:31 - 2025-02-28 18:41 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Autodesk
2025-02-28 09:50 - 2025-02-28 09:50 - 000133238 _____ C:\Users\janpu\Downloads\Beroun-IV.Q 2024 (1).xlsx
2025-02-27 19:56 - 2025-02-27 19:56 - 000134737 _____ C:\Users\janpu\Downloads\Beroun-I.Q 2025.xlsx
2025-02-27 19:52 - 2025-02-27 19:52 - 000148408 _____ C:\Users\janpu\Downloads\Beroun-I.Q 2025 - dof..xlsx
2025-02-25 10:04 - 2025-02-25 10:04 - 000075902 _____ C:\Users\janpu\Documents\Vypis_poplatku-2802703583_za_obdobi_20240101-20241231.pdf
2025-02-20 14:49 - 2025-02-20 14:49 - 000000000 ____D C:\Users\janpu\AppData\Local\Brother_Industries,_Ltd
2025-02-20 11:21 - 2025-02-20 11:21 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Sun
2025-02-20 11:21 - 2025-02-20 11:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2025-02-20 11:21 - 2024-12-04 08:34 - 000178808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2025-02-19 09:57 - 2025-02-19 09:57 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-02-12 17:51 - 2025-02-12 17:51 - 001054478 _____ C:\Users\janpu\Downloads\2025-02-01T06-00 Transakce #9047957271988708-9178706538913776.pdf
2025-02-11 18:02 - 2025-02-11 18:02 - 000336428 _____ C:\Users\janpu\Downloads\priloha_1478410446_0_Dosetreni_PV_Adela_Ticha.pdf
2025-02-09 19:58 - 2025-03-04 10:14 - 000003564 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-447794926-783580724-1362418113-1001

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-03-06 09:32 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-03-06 09:20 - 2023-07-23 20:43 - 000000000 ____D C:\Users\janpu\AppData\LocalLow\Temp
2025-03-06 09:20 - 2020-08-07 17:51 - 001693140 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-03-06 09:20 - 2019-12-07 15:41 - 000716770 _____ C:\WINDOWS\system32\perfh005.dat
2025-03-06 09:20 - 2019-12-07 15:41 - 000144948 _____ C:\WINDOWS\system32\perfc005.dat
2025-03-06 09:20 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\INF
2025-03-06 09:15 - 2021-11-15 20:02 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2025-03-06 09:15 - 2020-08-07 17:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-03-06 09:15 - 2020-08-07 17:46 - 000008192 ___SH C:\DumpStack.log.tmp
2025-03-06 09:15 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-03-06 09:13 - 2017-07-04 08:05 - 000000000 _RSHD C:\Intel
2025-03-06 09:05 - 2020-08-07 17:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-03-06 08:25 - 2017-12-03 10:33 - 000000000 ___SD C:\Users\janpu\AppData\Roaming\Microsoft\Credentials
2025-03-06 07:34 - 2018-05-14 17:56 - 000000000 ____D C:\Users\janpu\AppData\Local\D3DSCache
2025-03-06 07:33 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-03-05 18:34 - 2021-02-09 09:56 - 000000000 ___RD C:\Users\janpu\Disk Google (linda.abrahamova@gmail.com)
2025-03-05 18:34 - 2018-01-10 10:42 - 000000000 ___RD C:\Users\janpu\Disk Google
2025-03-05 18:33 - 2021-10-01 23:00 - 000002179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2025-03-05 18:33 - 2021-09-08 19:14 - 000002014 _____ C:\Users\Default\Desktop\Google Slides.lnk
2025-03-05 18:33 - 2021-09-08 19:14 - 000002014 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2025-03-05 18:33 - 2021-09-08 19:14 - 000002002 _____ C:\Users\Default\Desktop\Google Docs.lnk
2025-03-05 15:47 - 2017-12-03 14:07 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Word
2025-03-05 14:21 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\NVIDIA
2025-03-05 13:31 - 2017-07-04 08:05 - 000000000 ____D C:\Users\janpu
2025-03-05 11:15 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Steam
2025-03-05 11:08 - 2020-08-07 17:53 - 000003624 _____ C:\WINDOWS\system32\Tasks\GarminUpdaterTask
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\Package Cache
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\ProgramData\Garmin
2025-03-05 11:08 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Garmin
2025-03-05 11:06 - 2022-08-17 09:52 - 000000000 ____D C:\Users\janpu\AppData\Local\Spotify
2025-03-05 11:06 - 2017-12-03 19:19 - 000000000 ___RD C:\Users\janpu\Documents\04 Nemovitosti
2025-03-05 10:46 - 2022-08-17 09:52 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Spotify
2025-03-05 09:45 - 2017-07-04 08:05 - 000000000 ____D C:\Program Files (x86)\Adobe
2025-03-05 09:37 - 2020-08-07 17:46 - 000629152 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-03-05 09:25 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-03-05 09:18 - 2017-07-04 08:05 - 000000000 ___HD C:\Program Files\WindowsApps
2025-03-05 09:16 - 2017-12-03 14:07 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Excel
2025-03-04 14:00 - 2022-07-25 09:53 - 000000000 ____D C:\Users\janpu\AppData\Roaming\XnView
2025-03-04 14:00 - 2017-12-15 13:46 - 000000000 ____D C:\Users\janpu\AppData\Local\CrashDumps
2025-03-04 14:00 - 2017-12-03 18:57 - 000000000 ____D C:\Users\janpu\AppData\Roaming\uTorrent
2025-03-04 14:00 - 2017-07-04 08:05 - 000000000 ___DC C:\WINDOWS\Panther
2025-03-04 14:00 - 2017-07-04 08:05 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2025-03-04 10:14 - 2023-11-15 07:10 - 000002383 _____ C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-03-04 10:14 - 2021-12-13 09:06 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-447794926-783580724-1362418113-1001
2025-03-04 10:14 - 2020-08-07 17:53 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-447794926-783580724-1362418113-1001
2025-03-03 11:59 - 2021-02-05 14:16 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2025-03-01 10:53 - 2020-06-15 07:32 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-02-28 16:48 - 2017-12-03 14:22 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared
2025-02-28 13:49 - 2024-01-20 23:43 - 000000000 ____D C:\Users\janpu\AppData\Local\KrosUsers
2025-02-28 13:09 - 2017-12-03 14:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2017 – Čeština (Czech)
2025-02-28 09:50 - 2017-12-03 10:41 - 000000000 ____D C:\Users\janpu\AppData\Local\Packages
2025-02-20 14:49 - 2024-12-06 10:11 - 000000000 ____D C:\Users\janpu\AppData\Roaming\Brother
2025-02-20 11:03 - 2023-09-05 18:12 - 000000000 ____D C:\Users\janpu\AppData\Roaming\UI Launcher
2025-02-20 10:36 - 2024-02-03 12:25 - 000000000 ___RD C:\Users\janpu\Documents\25 Rodina
2025-02-20 10:32 - 2021-07-24 21:11 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2025-02-19 09:57 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-02-13 10:25 - 2022-11-22 08:00 - 000000000 ___RD C:\Users\janpu\Documents\ebay
2025-02-13 08:54 - 2018-01-07 11:23 - 000000000 ____D C:\Users\janpu\AppData\Roaming\vlc
2025-02-12 22:43 - 2024-07-15 01:17 - 000000000 ____D C:\WINDOWS\system32\compatrel
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-02-12 22:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-02-12 22:43 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2025-02-12 13:17 - 2020-04-17 13:39 - 000419228 __RSH C:\bootmgr
2025-02-12 13:16 - 2020-08-07 17:48 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-02-12 12:11 - 2017-12-04 17:15 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-02-12 12:00 - 2017-12-04 17:15 - 209365816 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-02-11 20:04 - 2024-12-06 10:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2025-02-11 00:19 - 2017-12-03 19:17 - 000000000 ___RD C:\Users\janpu\Documents\01 Živnost
2025-02-09 19:53 - 2021-02-05 13:35 - 000000000 ____D C:\Users\janpu\AppData\Local\Steam

==================== Files in the root of some directories ========

2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\360Qua
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\64404Softun
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Advanced SystemCare
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\AdwCleaner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\AlibabaProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\ASUS
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Avast Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\AvastSvcpCP
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Bitdefender
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\ByteFence
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\CoreTemp
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\CryptoTab Browser
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\EMCO Malware Destroyer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\EnigmaSoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\ESET
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\F-Secure
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\FanControl
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\FileViewPro
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\FRST
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\GridinSoft Anti-Malware
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\HP Sure Sense
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Install
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\IOBit Malware Fighter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\IQBIT
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Kaspersky Lab
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\kingsoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Lavasoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Loaris Trojan Remover
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\McAfee.com
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\MSI
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\NoVirusThanks
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\pinterests
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\ProcessTamer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Quick Heal
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\real temp
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\ReasonLabs
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH () C:\Program Files\ReasonLabsAVVPN
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\RogueKiller
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\SaferWeb
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\simplewall
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\SMADAV
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Solvusoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Sophos
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\SpeedFan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Spybot - Search & Destroy 2
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\SpyShelter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\SUPERAntiSpyware
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\Symantec
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\Taskexplorer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\TC UP
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\TinyWall
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files\TotalAV
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Trend Micro
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files\Unhackme
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\wDcLibs
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files\Webroot
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\360
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\360Qua
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\64404Softun
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Acer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Advanced SystemCare
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\AdwCleaner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\AlibabaProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Alienware
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Alwil Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\ASUS
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Avast
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Avast Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\AvastSvcpCP
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Awesome Miner
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Bitdefender
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\ByteFence
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\CLEVOCO
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Comodo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\ControlCenter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Core Temp
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\CoreTemp
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\CryptoTab Browser
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\DgAgent
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\EMCO Malware Destroyer
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\EnigmaSoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\ESET
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\F-Secure
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\FanControl
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\FileViewPro
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\FRST
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Gigabyte
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\GridinSoft Anti-Malware
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\HitmanPro.Alert
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\HP Sure Sense
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Huawei
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Immunet
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Install
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\IOBit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\IOBit Malware Fighter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\IQBIT
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Kaspersky Lab
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\kingsoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Lavasoft
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Lenovo
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\LG Software
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Loaris Trojan Remover
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Malwarebytes
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Malwarebytes Anti-Exploit
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\McAfee
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\McAfee Security Scan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\McAfee.com
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\MSI
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Net Protector
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Net Protector 202A
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Norton Security
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\NortonInstaller
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\NoVirusThanks
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\NZXT Cam
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Panda Security
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\PCGameBoost
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\PCProtect
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\pinterests
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\ProcessTamer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Quick Heal
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\real temp
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\ReasonLabs
2025-03-02 20:21 - 2025-03-02 20:21 - 000000002 __RSH () C:\Program Files (x86)\ReasonLabsAVVPN
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\RogueKiller
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\SaferWeb
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Seqrite
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\simplewall
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\SMADAV
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\SMArt Defrag
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Solvusoft
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Sophos
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\SpeedFan
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Spybot - Search & Destroy
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Spybot - Search & Destroy 2
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\SpyShelter
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\SUPERAntiSpyware
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\Symantec
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\Taskexplorer
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\TC UP
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\TinyWall
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Program Files (x86)\TotalAV
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Trend Micro
2025-03-02 20:22 - 2025-03-02 20:22 - 000000002 __RSH () C:\Program Files (x86)\Unhackme
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\wDcLibs
2025-02-28 15:29 - 2025-02-28 15:29 - 000000002 __RSH () C:\Program Files (x86)\Webroot
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Wise
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files\Common Files\Acronis
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Program Files (x86)\Common Files\Acronis
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH () C:\Users\janpu\AppData\Local\ESET
2025-02-28 15:28 - 2025-02-28 15:28 - 000000002 __RSH () C:\Users\janpu\AppData\Local\FSDART
2021-07-13 10:31 - 2025-03-04 11:52 - 000000615 _____ () C:\Users\janpu\AppData\Local\oobelibMkey.log
2019-08-26 21:41 - 2022-10-06 20:44 - 000007604 _____ () C:\Users\janpu\AppData\Local\Resmon.ResmonCfg
2024-12-06 10:55 - 2024-12-06 10:55 - 000000000 _____ () C:\Users\janpu\AppData\Local\settingData.dat
2017-12-03 14:00 - 2017-12-03 14:00 - 000000003 _____ () C:\Users\janpu\AppData\Local\updater.log
2017-12-03 14:00 - 2022-03-06 14:09 - 000000424 _____ () C:\Users\janpu\AppData\Local\UserProducts.xml

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

ATTENTION: ==> Could not access BCD. ->

Hasicz · #10 Příspěvek od **Hasicz** » 06 bře 2025 09:43

Při procesu Adition FRST spadne a "neodpovídá" tak nevím, jestli je to celé

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23.03.2024 01
Ran by janpu (06-03-2025 09:34:55)
Running from C:\Users\janpu\Desktop
Microsoft Windows 10 Home Version 22H2 19045.5487 (X64) (2020-08-07 16:53:17)
Boot Mode: Safe Mode (with Networking)
==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-447794926-783580724-1362418113-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-447794926-783580724-1362418113-503 - Limited - Disabled)
Guest (S-1-5-21-447794926-783580724-1362418113-501 - Limited - Disabled)
janpu (S-1-5-21-447794926-783580724-1362418113-1001 - Administrator - Enabled) => C:\Users\janpu
WDAGUtilityAccount (S-1-5-21-447794926-783580724-1362418113-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ANT Drivers Installer x64 (HKLM\...\{FD1A4C7D-D35E-4742-BCEB-1E1104D103C4}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
AppLogLibSetup (HKLM-x32\...\{52FB0C8F-DF05-4C61-AEB6-18C55F8C385F}) (Version: 1.0.3.0 - Brother Industries Ltd.) Hidden
Aslain's WoT Modpack verze 1.27.0.1.12 (HKLM-x32\...\Aslains_WoT_Modpack_Installer_is1) (Version: 1.27.0.1.12 - Aslain)
Backup and Sync from Google (HKLM\...\{696895F7-52C7-4C9E-998B-C7E0CC907092}) (Version: 3.57.4256.0809 - Google, Inc.)
Balíček ovladače systému Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Balíček ovladače systému Windows - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Balíček ovladače systému Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Bontia Studio (HKLM-x32\...\{f9b23ce0-6645-4236-b825-ba692c827bfb}) (Version: 5.3.4361.30804 - Bontia a.s.)
Bontia Studio 5.3 (HKLM-x32\...\{278BD020-1DCD-46C2-B9F6-36E88E10AC64}) (Version: 5.3.4361.0 - Bontia, a.s.) Hidden
Brány Skeldalu pro Windows 1.2 (HKLM-x32\...\Brány Skeldalu_is1) (Version: - Napoleon games)
BrLauncher (HKLM-x32\...\{9416C3F3-10F3-4881-A343-6AF1097728CB}) (Version: 2.0.23.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{190861E7-09C5-42D8-BB4B-0AFB234BCFC1}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{4BDD306E-6382-414C-A1AE-D4D0AFF25373}) (Version: 13.1.0.85 - Brother Industries, Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{fdcfcbcf-53da-4bb6-9094-efcd923dcd0b}) (Version: 13.1.0.85 - Brother Industries, Ltd.)
Brother Port Driver (HKLM-x32\...\{C75FC872-0E00-4C82-90AE-091929F34590}) (Version: 1.0.5.1 - Brother Industries Ltd.) Hidden
Brother Printer Driver (HKLM-x32\...\{A9A83E7D-691F-48C0-8FC0-7702530B0C60}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{3895BDF5-F9F4-42BC-9BC9-6F40702A843A}) (Version: 1.0.18.1 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{8B58D1A2-DFAD-4069-A0C0-7FD272B68BB3}) (Version: 1.0.30.0 - Brother Industries Ltd.) Hidden
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.78.1093 - AB Team, d.o.o.)
CDex - Digital Audio CD Extractor and Converter (HKLM-x32\...\CDex) (Version: 2.24.0.2020 - CDex.mu)
Crypto Native App verze 23.00.8426 (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\{79D8049F-2978-4E91-90BD-3428C8FF2E69}_is1) (Version: 23.00.8426 - TESCO SW a.s.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 11.0.0.1920 - Disc Soft Ltd)
Duplicate Cleaner Pro 4.0.5 (HKLM-x32\...\Duplicate Cleaner Pro) (Version: 4.0.5 - DigitalVolcano Software Ltd)
Elevated Installer (HKLM-x32\...\{164C7EA9-EFD3-4DCE-A297-FFB72D12E457}) (Version: 7.24.0.0 - Garmin Ltd or its subsidiaries) Hidden
Epic Games Launcher (HKLM-x32\...\{E7B62E3F-0F70-4119-89A2-28DE1C3873CC}) (Version: 1.1.163.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.)
Garmin Express (HKLM-x32\...\{206c32b6-b534-4c0c-a074-df1ca53e6e3e}) (Version: 7.24.0.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{50EE2113-6BB9-466F-A71B-FE40DB3139A4}) (Version: 7.24.0.0 - Garmin Ltd or its subsidiaries) Hidden
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 105.0.1.0 - Google LLC)
Google Chrome (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Google Chrome) (Version: 133.0.6943.142 - Google LLC)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
HttpToUsbBridge (HKLM-x32\...\{2EB1E9F3-AAF0-428F-B692-AE824553E2A3}) (Version: 2.5.108.1 - Brother Industries Ltd.)
IrfanView 64 (remove only) (HKLM\...\IrfanView64) (Version: 4.41 - Irfan Skiljan)
Java 8 Update 441 (HKLM-x32\...\{77724AE4-039E-4CA4-87B4-2F32180441F0}) (Version: 8.0.4410.7 - Oracle Corporation)
KaM - The Peasants Rebellion (HKLM-x32\...\KaM - The Peasants Rebellion) (Version: - )
KaM Remake Full r6720 (HKLM-x32\...\{FDE049C8-E4B2-4EB5-A534-CF5C581F5D32}_is1) (Version: - )
Kodi (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Kodi) (Version: 21.1.0.0 - XBMC Foundation)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Konung 2 CZ (HKLM-x32\...\{C2189623-6851-4A1A-B9EE-6B8C2DA7F1AA}) (Version: 1.00 - )
Konung: Legend of the North (HKLM-x32\...\Konung: Legend of the North) (Version: - )
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Legend of the North - Konung (HKLM-x32\...\1455290088_is1) (Version: 2.0.0.2 - GOG.com)
Lightshot-5.5.0.7 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.5.0.7 - Skillbrains)
ManicTime (HKLM-x32\...\{D9E522D9-3345-4230-873A-972974B2CEF4}) (Version: 23.1.1.0 - Finkit d.o.o.)
MediaHuman YouTube to MP3 Converter 3.9.9.97 (HKLM-x32\...\MediaHuman YouTube to MP3 Converter_is1) (Version: 3.9.9.97 - MediaHuman)
Microsoft .NET 6.0.25 - Windows Server Hosting (HKLM-x32\...\{b4a5e26c-84fd-4b01-8d3f-42022169595a}) (Version: 6.0.25.23523 - Microsoft Corporation)
Microsoft .NET 8.0.12 - Windows Server Hosting (HKLM-x32\...\{218673b6-7337-4d49-bc41-b4ccb7e34802}) (Version: 8.0.12.24603 - Microsoft Corporation)
Microsoft .NET Host - 6.0.25 (x64) (HKLM\...\{C7141A99-592B-4226-A4E9-B767C1D0FBAF}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host - 6.0.25 (x86) (HKLM-x32\...\{906F835E-F52B-47C2-A996-A769EB284880}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.12 (x64) (HKLM\...\{C4C6E39D-48AE-426C-960C-46ED3447DDEB}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.12 (x86) (HKLM-x32\...\{874D52B8-B1F4-4D04-8249-8AC6E698CCF5}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.25 (x64) (HKLM\...\{AE86D888-1404-47CC-A7BB-8D86C0503E58}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.25 (x86) (HKLM-x32\...\{73191C34-7ACF-493B-B92E-FE368D8F4071}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.8 (x64) (HKLM\...\{3C3CA326-3F1D-43B7-B0AD-CBC06B2DED5A}) (Version: 48.35.45462 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.12 (x64) (HKLM\...\{C9C872D5-3CA9-4E0E-AF90-1B85325F9243}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.12 (x86) (HKLM-x32\...\{9EC250F3-BC02-4B35-8395-E03A02CD9255}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.25 (x64) (HKLM\...\{3544B2EE-E62F-4D11-B79C-3DDEACE94DA5}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.25 (x64) (HKLM-x32\...\{27a347ca-6c38-495a-888f-37c1198ff412}) (Version: 6.0.25.33019 - Microsoft Corporation)
Microsoft .NET Runtime - 6.0.25 (x86) (HKLM-x32\...\{40f0c93c-19eb-44f5-8ea9-3251a771e053}) (Version: 6.0.25.33019 - Microsoft Corporation)
Microsoft .NET Runtime - 6.0.25 (x86) (HKLM-x32\...\{6D7737C0-9538-48ED-ACB7-688A891417C4}) (Version: 48.100.4028 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.8 (x64) (HKLM\...\{7CEA3ABF-FE24-42AF-ADE6-B4A3EE346743}) (Version: 48.35.45462 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.12 (x64) (HKLM\...\{1E606649-7E56-452F-8AC4-495C70D1E341}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.12 (x86) (HKLM-x32\...\{272C9AEF-D02F-4955-8C11-D9F9198A58EC}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft Access database engine 2010 (English) (HKLM-x32\...\{90140000-00D1-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.25 - Shared Framework (x64) (HKLM-x32\...\{31ca574a-1077-4351-a8ee-021a116af21b}) (Version: 6.0.25.23523 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.25 - Shared Framework (x86) (HKLM-x32\...\{2d7a0942-00d5-4c69-8855-03b6696471f1}) (Version: 6.0.25.23523 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.25 Hosting Bundle Options (HKLM-x32\...\{A10E23CC-4B4B-3F8F-B85D-13C9D3E59F1E}) (Version: 6.0.25.23523 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.25 Shared Framework (x64) (HKLM\...\{EDC7E317-B223-349D-A4E5-D1809F2651AD}) (Version: 6.0.25.23523 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.25 Shared Framework (x86) (HKLM-x32\...\{D64D9894-C4A7-3FA2-BD19-E36F6369803C}) (Version: 6.0.25.23523 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.12 Hosting Bundle Options (HKLM-x32\...\{8C069910-4E69-349B-8840-56F774C92B87}) (Version: 8.0.12.24603 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.12 Shared Framework (x64) (HKLM\...\{2B76FF3A-309D-3050-9C41-C98FB593258D}) (Version: 8.0.12.24603 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.12 Shared Framework (x86) (HKLM-x32\...\{0770B9E3-CA2C-37B8-AD77-7336654A2466}) (Version: 8.0.12.24603 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 133.0.3065.92 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 133.0.3065.92 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2016 - cs-cz (HKLM\...\ProPlusRetail - cs-cz) (Version: 16.0.18429.20158 - Microsoft Corporation)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 18.151.0729.0013 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\OneDriveSetup.exe) (Version: 25.020.0202.0001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34433 (HKLM-x32\...\{804e7d66-ccc2-4c12-84ba-476da31d103d}) (Version: 14.42.34433.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.34.31931 (HKLM-x32\...\{6ba9fb5e-8366-4cc4-bf65-25fe9819b2fc}) (Version: 14.34.31931.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.42.34433 (HKLM-x32\...\{e7802eac-3305-4da0-9378-e55d1ed05518}) (Version: 14.42.34433.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34433 (HKLM\...\{E1902FC6-C423-4719-AB8A-AC7B2694B367}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34433 (HKLM\...\{382F1166-A409-4C5B-9B1E-85ED538B8291}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.34.31931 (HKLM-x32\...\{C2662EFF-06E6-4FD1-9D6D-FDCA91025757}) (Version: 14.34.31931 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.42.34433 (HKLM-x32\...\{C2BB95AA-90F3-4891-81C1-A7E565BB836C}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.25 (x86) (HKLM-x32\...\{2deb241e-99d9-4489-ae8d-4778d470fedd}) (Version: 6.0.25.33020 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 6.0.25 (x86) (HKLM-x32\...\{AF1BA644-A730-46A9-BFE1-C1B79EBBE36D}) (Version: 48.100.4037 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.8 (x64) (HKLM\...\{EB3983F9-3D60-456D-A11A-C1366C79AD3E}) (Version: 48.35.45540 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.8 (x64) (HKLM-x32\...\{ca35acb3-b442-44fb-924c-4448120bf689}) (Version: 6.0.8.31518 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.12 (x86) (HKLM-x32\...\{71e8d0d2-fc5e-4344-b556-0110ef50b6b9}) (Version: 8.0.12.34404 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.12 (x86) (HKLM-x32\...\{CF203BF4-13DE-4A81-8BC8-31B3F4A2CB32}) (Version: 64.48.26178 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 113.0.2 (x64 cs)) (Version: 113.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 113.0.2 - Mozilla)
MSVC80_x64_v2 (HKLM\...\{4D668D4F-FAA2-4726-834C-31F4614F312E}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (HKLM-x32\...\{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}) (Version: 1.0.3.0 - Nokia) Hidden
NetworkRepairTool (HKLM-x32\...\{96CEE8C3-B934-48A4-ADA6-91B7CE8A5002}) (Version: 1.2.17.0 - Brother Industries, Ltd.) Hidden
NVIDIA Ovladač HD audia 1.3.38.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.35 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 456.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 456.71 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18429.20158 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18429.20158 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.255 - Google, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 4.3.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.3.8 - VS Revo Group, Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.43.0 - Samsung Electronics Co., Ltd.)
ScannerUtilityInstaller (HKLM-x32\...\{D65C0754-7790-427F-AD73-D7C644260F57}) (Version: 1.19.9.1 - Brother) Hidden
Settlers 2 GOLD (HKLM-x32\...\Settlers 2 GOLD_is1) (Version: - GOG.com)
SoftwareUpdateNotification (HKLM-x32\...\{E28A6F15-BFBE-4D20-8B5F-6EABAA1E545E}) (Version: 1.0.14.0 - Brother Industries, Ltd.) Hidden
Soldat 1.4.2 (HKLM-x32\...\Soldat_is1) (Version: - Michal Marcinkowski)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Spotify (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Spotify) (Version: 1.2.58.498.g6afe77b7 - Spotify AB)
StatusMonitor (HKLM-x32\...\{5F23FD86-E84F-46BA-B40B-5FD6A6961A70}) (Version: 1.22.37.0 - Brother Industries, Ltd.) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Sweet Home 3D version 5.7 (HKLM\...\Sweet Home 3D_is1) (Version: 5.7 - eTeks)
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.0.5058 - TeamViewer)
TLauncher (HKLM-x32\...\TLauncher) (Version: 2.86 - TLauncher Inc.)
TP-LINK TL-WN722N Driver (HKLM-x32\...\{F9C15685-38A9-46A1-9826-97204015C19C}) (Version: 1.3.1 - TP-LINK)
Trachea OS (HKLM-x32\...\{B413C357-6BE6-A1B7-9187-87BDC3D0F5B3}) (Version: 5.9.252 - SOFTconsult, spol. s r.o.) Hidden
Trachea OS (HKLM-x32\...\TracheaOS) (Version: 5.9.252 - SOFTconsult, spol. s r.o.)
Trust GXT 970 (HKLM-x32\...\{0C6A599B-1C6C-427C-81BF-1908825C95E2}_is1) (Version: 1.0.6 - Trust International B.V.)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.18 - VideoLAN)
Vzum (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\6cfa0c5674100ff8) (Version: 1.0.0.46 - Vzum)
Wargaming.net Game Center (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\Wargaming.net Game Center) (Version: 24.7.1.7647 - Wargaming.net)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
World of Tanks EU (HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\2314027414) (Version: - Wargaming.net)

Packages:
=========

@{MicrosoftWindows.CrossDevice_1.24112.22.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.CrossDevice/CrossDevice.Core/Resources/PackageName} -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24112.22.0_x64__cw5n1h2txyewy [2024-12-14] (Microsoft Windows) [Startup Task]
Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-06] (Autodesk Inc.)
Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.2000.758.0_x64__8wekyb3d8bbwe [2025-01-29] (Microsoft Corporation)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-11-16] (Microsoft Corporation)
Doplněk pro Fotky -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-03-12] (Microsoft Corporation)
Hostitel prostředí v různých zařízeních -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25012.50.0_x64__cw5n1h2txyewy [2025-02-28] (Microsoft Windows)
Microsoft 365 Copilot -> C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2502.1262.0_x64__8wekyb3d8bbwe [2025-03-03] (Microsoft Corporation) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad]
Microsoft Bing -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.1.34.0_x64__8wekyb3d8bbwe [2025-02-14] (Microsoft Corporation)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16 [2025-02-19] ()
Roblox -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.662.536.0_x64__55nm5eh3cm0pr [2025-03-02] (Roblox Corporation)
Rozšíření pro video MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.61931.0_x64__8wekyb3d8bbwe [2023-08-23] (Microsoft Corporation)
Settle Up -> C:\Program Files\WindowsApps\15837bezysoftware.SettleDown_2.6.0.0_x64__szd32vgd5b9q4 [2023-03-26] (Step Up Labs) [MS Ad]
WinZip Universal -> C:\Program Files\WindowsApps\WinZipComputing.WinZipUniversal_1.5.13516.0_x64__3ykzqggjzj4z0 [2019-06-01] (WinZip Computing)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{041F9391-C79D-44EE-AA4E-AF4E029C4B47}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.112\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{1F9E0710-2073-435F-9C1B-F29946205947}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.152\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{2919A592-BF5E-4AF5-A658-84454D70841E}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.202\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{3BC2EF70-3830-43FC-9009-029942FD2DCE}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.372\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.442\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{540C17A8-04F2-4B66-95D7-B2FEF9A19B54}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.423\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{5D44759C-CF3F-433D-9EA0-267E45577C77}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.212\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{62634D95-960B-4834-8E71-A70408AD8FD9}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.34.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{69545769-8D02-4B07-A481-AD374CD8D5D1}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.132\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{6D264B70-DA18-401D-910C-B202D89670C6}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.32\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{75399D28-E622-4973-8752-BC0F7DC47AF3}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.122\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{84EB3779-151B-4C71-AEF0-A0FEE9481401}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.342\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{85D8EE2F-794F-41F0-BB03-49D56A23BEF4}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.372\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{86508D42-E5D7-4D10-9C6F-D427AEEB85B5}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.34.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{8B480070-D37D-4090-A063-7A429F849652}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.92\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{8D422533-936A-4A82-B15C-BD5319AB0026}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.332\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{A2C6CB58-C076-425C-ACB7-6D19D64428CD}\localserver32 -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\133.0.6943.142\notification_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{A804CF1A-91E5-4F0C-9E8C-DB39E74056DD}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.33.23\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{AE9899FA-E21F-4D91-BD1F-59BC10E56CA1}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.292\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{B9C751AA-D9CF-4E09-A270-E5BBD2194F83}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.352\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{BE5C2E39-090F-46A2-AFAA-47540743B4FE}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.102\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{CA07EE63-A212-4373-AE82-FBF92FCA8DCC}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.242\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{CA8FA699-91CD-412F-9D13-9B1222F4370E}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.82\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{CA919489-0396-4164-A6E7-94CDED45A707}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.52\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{DA06AAE8-5748-4509-850F-17AA522F8372}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.273\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{DEDF773D-E27B-485E-8E7D-85C5B0EB5A67}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{E4949BE6-C9FF-4AFA-8672-6127D857418B}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.312\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.372\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{ED0BC9DB-3CE6-49E5-9B2F-590DCEF8C016}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.36.342\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-447794926-783580724-1362418113-1001_Classes\CLSID\{EF076C91-DC9E-43E3-84ED-3D219E065A4F}\InprocServer32 -> C:\Users\janpu\AppData\Local\Google\Update\1.3.35.302\psuser_64.dll => No File
ShellIconOverlayIdentifiers: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2022-02-01] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2022-02-01] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2022-02-01] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\System32\AcSignIcon.dll [2017-10-20] (Autodesk, Inc -> Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2023-09-05] (Autodesk, Inc. -> Autodesk)
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2022-02-01] (Google LLC -> Google)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2021-11-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2022-02-01] (Google LLC -> Google)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\105.0.1.0\drivefsext.dll [2025-03-05] (Google LLC -> Google LLC.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2020-10-01] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2020-09-28] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Linda - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\c8c6ca33f34d36d3\Antonín (zaci.zswagnerka.cz) - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 5"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b37fff5916e5fab1\Nicolas (student.gymberoun.cz) - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 11"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\a2d4e19d7187c685\SekáčHP - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 2"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\425a8c9d83c5b5e\Josefína - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 10"
ShortcutWithArgument: C:\Users\janpu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\158eb60dbf5e676a\Antonín - Chrome.lnk -> C:\Users\janpu\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 3"

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879 [272]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [10]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [10]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [10]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [480]

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

SearchScopes: HKU\S-1-5-21-447794926-783580724-1362418113-1001 -> {FD6EBC6C-6E6A-48D1-833D-16FFA7024BB1} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_37180
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-12-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\ssv.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\jp2ssv.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-02-09] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-09-29 14:46 - 2017-09-29 14:44 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Intel;C:\Intel\m;C:\Intel\logs;C:\WINDOWS;C:\WINDOWS\System32;C:\WINDOWS\sysnative;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\dotnet\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\Users\janpu\AppData\Local\Microsoft\WindowsApps;
HKU\S-1-5-21-447794926-783580724-1362418113-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\janpu\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img1.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "MRT"
HKLM\...\StartupApproved\Run32: => "Adobe Acrobat Speed Launcher"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "MRT"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-447794926-783580724-1362418113-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_B290F089DC243CBB434D3F1388B3FDD9"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{EE5EF259-F9C0-4062-ADE8-F9BD8B6C16AA}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS6EFE\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{715BF791-D541-4582-BBEC-C4C82B8D1F2E}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS6EFE\HPDiagnosticCoreUI.exe => No File
FirewallRules: [UDP Query User{1E09E7F4-0C88-4AF5-A65C-785A0BA1C973}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe => No File
FirewallRules: [TCP Query User{CDA007A6-2C3D-46B0-A64D-9463CE557BFE}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe => No File
FirewallRules: [UDP Query User{47440213-EADE-4965-94F0-4AED1947785A}C:\soldat\soldat.exe] => (Allow) C:\soldat\soldat.exe (Michal Marcinkowski) [File not signed]
FirewallRules: [TCP Query User{2D007354-3591-4D37-8AA3-939A4FBA6C2F}C:\soldat\soldat.exe] => (Allow) C:\soldat\soldat.exe (Michal Marcinkowski) [File not signed]
FirewallRules: [UDP Query User{87E95204-8D40-4230-8DA6-F85D455D632F}E:\03 - games\liero\openlierox\openlierox.exe] => (Allow) E:\03 - games\liero\openlierox\openlierox.exe => No File
FirewallRules: [TCP Query User{4C4453C2-98A1-4B90-A8CD-5BCAFCA4B361}E:\03 - games\liero\openlierox\openlierox.exe] => (Allow) E:\03 - games\liero\openlierox\openlierox.exe => No File
FirewallRules: [UDP Query User{9D0703A7-1FC6-4782-BEB8-91DD64FD35A4}C:\soldat\soldat.exe] => (Allow) C:\soldat\soldat.exe (Michal Marcinkowski) [File not signed]
FirewallRules: [TCP Query User{7EBB6BE5-6797-42B0-9E94-D5CD64D10303}C:\soldat\soldat.exe] => (Allow) C:\soldat\soldat.exe (Michal Marcinkowski) [File not signed]
FirewallRules: [{B685150F-0B6F-4801-9D82-DBE1F4050C92}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5C10\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{12A98782-0BE8-42EA-B320-BAE3D3F8DB21}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5C10\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{64896ED3-DB9F-4929-A92A-E76467659B01}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5B42\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{3A132195-6E92-4B7C-8793-4D7CB74DF1A6}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS5B42\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{0CBAD3FF-D228-4E57-ACD0-FCFA7C884A07}] => (Allow) LPort=5357
FirewallRules: [UDP Query User{DD56FB32-D174-40D1-99E1-9EC4BDCB9E01}C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe => No File
FirewallRules: [TCP Query User{FEF38814-68D2-40D7-9A3A-9A501BAF41BA}C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe => No File
FirewallRules: [UDP Query User{4B9500AC-4EC7-4AD8-A092-E063EB34F49D}C:\users\janpu\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\janpu\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{7BF45458-499F-472B-817A-39F467AB71A8}C:\users\janpu\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\janpu\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{55854B0E-33A6-4C20-A3E7-CE68BC727316}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS6AD3\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{EDF310D3-4F9A-4F24-A578-2AC67DB4656B}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS6AD3\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{CCC6E92A-9ABA-4BEC-914C-8582139B8F89}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{06939272-B84B-43C2-97C8-09D946B3C939}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{894DE0D5-9929-4C71-90FC-EB80735F22AA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{8D47BA0A-B786-4AEC-ACDD-E401E40F6575}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [UDP Query User{78DB000D-7A5E-4617-A688-C105F8493391}C:\users\janpu\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\janpu\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [TCP Query User{475B1519-C719-43B2-BDA5-0B256CF94D6F}C:\users\janpu\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\janpu\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [TCP Query User{0BB9B182-BFCA-455D-9500-FB16AEB9E1EC}C:\users\janpu\appdata\local\google\chrome\application\chrome.exe] => (Allow) C:\users\janpu\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{C30126B8-59FD-41BB-99A5-5F2FFBA37735}C:\users\janpu\appdata\local\google\chrome\application\chrome.exe] => (Allow) C:\users\janpu\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{579E50F3-1AD8-4D73-B722-9B1A6DBFB48A}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{FAD817C5-54A4-4C41-8899-2E1DC54B5236}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{E9A603F3-821A-4C66-8012-B908282D20C4}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{3C9B0B82-C469-498B-AC50-AF19F4166359}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{9F3986B6-B8F6-47A1-A96E-EF992052ACE6}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{EB656C07-CAD8-402D-A8A3-306B0A568FB9}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{6F3CD004-2B46-4FA2-8AB4-D1F13958418D}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{840F0C3B-E8B7-4CEC-858A-CCE587464073}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{D200DFDE-7788-4249-BD2C-3DD58F6461FA}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe => No File
FirewallRules: [UDP Query User{93AEFC2F-D4B2-435E-858C-4E0A038596B9}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe => No File
FirewallRules: [TCP Query User{59D1A408-8BD8-4648-AFAC-4032FC93617E}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [UDP Query User{651D0533-ED78-42A7-9104-382E52071A4D}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [TCP Query User{8F2895E3-A2F2-4D37-A253-22C0006A42F9}C:\program files (x86)\java\jre1.8.0_261\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_261\bin\javaw.exe => No File
FirewallRules: [UDP Query User{4B77BB9E-FEE2-4E67-B940-5D258935697B}C:\program files (x86)\java\jre1.8.0_261\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_261\bin\javaw.exe => No File
FirewallRules: [TCP Query User{DF95C2F7-AC93-46B5-A5A6-E8736C830907}C:\program files (x86)\java\jre1.8.0_271\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_271\bin\javaw.exe => No File
FirewallRules: [UDP Query User{B130F07C-3F13-4B63-83F6-E736EC6419F1}C:\program files (x86)\java\jre1.8.0_271\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_271\bin\javaw.exe => No File
FirewallRules: [{7CBC9156-89E6-4018-A0DE-BFB26208DD30}] => (Allow) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{98FE9B4A-C9F3-4205-AC0A-410438940237}] => (Allow) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{BBB460E4-C7B8-451E-B9D7-89D4FC87F0B3}] => (Allow) C:\Games\World_of_Tanks_EU\WorldOfTanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{A0531D94-107F-4B60-9057-0304CF616B0E}] => (Allow) C:\Games\World_of_Tanks_EU\WorldOfTanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [TCP Query User{2497F7F2-BA7B-4163-ABE0-FD9B1B810180}C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe] => (Block) C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe => No File
FirewallRules: [UDP Query User{7914AD19-5FD4-4CF1-ABF0-D60556965C8D}C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe] => (Block) C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe => No File
FirewallRules: [{736E7451-DE5A-4AFF-9882-DE21B611F06D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{A191D88C-5D7C-4B8F-8180-170455CFA6F2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D107CC8E-3747-47D5-AACC-11E3A164E613}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{88545252-3C60-4E3B-A363-FAF1B538457C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{4AA3F92F-CAF8-4F7A-BCB4-7CEA2D80BB48}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Feudal Alloy\FeudalAlloy.exe () [File not signed]
FirewallRules: [{3D0C8F62-953F-4F7A-A239-0E55799B99BD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Feudal Alloy\FeudalAlloy.exe () [File not signed]
FirewallRules: [{E46B009D-D01C-4446-AD6C-F02975767D41}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{87CAF3B0-7C54-4052-A588-DB87E6A5C787}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D418FEAF-6F9A-4895-8642-B865007D0B9E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B18B33E7-39E4-4EB5-8F25-F5732B0237C9}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B971C822-9FA6-46D5-82FD-FB50DA79B818}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{8C19406B-9B08-4691-AB17-D979FB041A18}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [TCP Query User{6E0D6B87-D92C-47BB-BC3B-686891C0BE21}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe => No File
FirewallRules: [UDP Query User{8BAFB8C2-D8F6-4B6E-BFB1-0402485A185E}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe => No File
FirewallRules: [TCP Query User{2BA53873-1EF7-4FBF-A1C5-3F55214EE7D3}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [UDP Query User{003AA4C1-C9A0-49E5-BFEB-C5524A23C4EB}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [TCP Query User{484CC236-CE3E-4D5A-85C9-CC7A6881C155}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe => No File
FirewallRules: [UDP Query User{A7E29339-75E5-4FEC-82A9-3EC963D40EB3}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe => No File
FirewallRules: [TCP Query User{41C2D152-FCB2-4DB1-B9E5-4E296658F529}C:\users\janpu\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe
FirewallRules: [UDP Query User{45E3E495-BF0A-4DC7-A8D3-79C05523E82E}C:\users\janpu\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe
FirewallRules: [TCP Query User{A0D661BD-C62E-4D51-AB46-25B5E4BD0E78}C:\program files (x86)\java\jre1.8.0_291\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_291\bin\javaw.exe => No File
FirewallRules: [UDP Query User{7D285C3C-508C-48AD-995B-8EB3F233EFE4}C:\program files (x86)\java\jre1.8.0_291\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_291\bin\javaw.exe => No File
FirewallRules: [{D21E7274-1023-4F4D-89C4-FD33083357E2}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{894E2DFC-1795-4BBF-9475-4DBC5F211A11}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{BD7F8674-D23A-4489-854B-7E3A1AA5D8DE}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS4876\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{98274332-E384-4FC9-ADCD-4B35DC5845D7}] => (Allow) C:\Users\janpu\AppData\Local\Temp\7zS4876\HPDiagnosticCoreUI.exe => No File
FirewallRules: [TCP Query User{6F4462F0-AFCD-43B0-A979-FC61BF811956}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe
FirewallRules: [UDP Query User{A50244BF-69A2-408A-8E41-5523E825D416}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe
FirewallRules: [{05EB5A40-BADD-4939-95B0-A25C6C4DEE74}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Konung2\Konung2.exe () [File not signed]
FirewallRules: [{31EDEB19-4B41-490C-8EDC-97965F48989C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Konung2\Konung2.exe () [File not signed]
FirewallRules: [TCP Query User{A1614C35-3677-4D6B-95A9-40FEDF527016}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [UDP Query User{68488382-45D4-46DD-9168-5B19588E7CE0}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [TCP Query User{BD65BCC4-0569-4547-B019-8AC04E20766E}C:\users\janpu\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\janpu\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{E15FD5CD-99D6-49CA-8061-9BB4ACE9ABC6}C:\users\janpu\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\janpu\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{7E3EF45A-35E5-48DF-BAFB-8AE9C23BD1E9}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe
FirewallRules: [UDP Query User{03A87F6F-1B30-4C8F-86A2-BB3CF769D083}C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\janpu\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe
FirewallRules: [{0E0A75B9-7DE2-4340-BF8D-BA4F2F7ED158}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{105CD9C7-46B7-4E24-B761-9F941697AFC6}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{7B7E1768-BBDF-4565-8C6A-B9AC20D49900}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{40C0E4D6-1A2B-4D27-B30D-F8DE085AF82B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{52EA9F4B-40E7-4E5E-8C93-407948E499BE}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{D6ACA124-E19A-4FB9-B91A-5305FD844484}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{B661D2DD-7A7D-486B-8974-32884E35E5D8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Assassins Creed\AssassinsCreed_Game.exe (Ubisoft) [File not signed]
FirewallRules: [{12868C77-4631-4CF3-A491-28047DEFD178}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Assassins Creed\AssassinsCreed_Game.exe (Ubisoft) [File not signed]
FirewallRules: [TCP Query User{6B7DE89A-11A7-4E81-8BB2-7DA9B371DCC5}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [UDP Query User{496CD1EF-60D7-4698-BA34-8564A7E96B63}C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Block) C:\users\janpu\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [TCP Query User{514A309C-EA84-415A-AE6D-5E022B11D3D2}C:\program files (x86)\garmin\express\cefsharp.browsersubprocess.exe] => (Allow) C:\program files (x86)\garmin\express\cefsharp.browsersubprocess.exe (The CefSharp Authors) [File not signed]
FirewallRules: [UDP Query User{FE3F5224-D9C2-47FA-9E83-CC837B671C17}C:\program files (x86)\garmin\express\cefsharp.browsersubprocess.exe] => (Allow) C:\program files (x86)\garmin\express\cefsharp.browsersubprocess.exe (The CefSharp Authors) [File not signed]
FirewallRules: [{DCD7C308-BC45-4C76-8370-3CECBD88CF5E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Plants Vs Zombies\PlantsVsZombies.exe (PopCap Games -> )
FirewallRules: [{8361FB08-E6A1-4340-89C2-11B895E9AC25}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Plants Vs Zombies\PlantsVsZombies.exe (PopCap Games -> )
FirewallRules: [{20DCE62E-C83F-41D0-BD59-F2F03C0B2A3B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9B04AB2A-4E6D-4848-A342-91615660E99F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{875AA0E1-7B80-4CF1-980C-77DC3A97A929}C:\program files (x86)\java\jre-1.8\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre-1.8\bin\javaw.exe => No File
FirewallRules: [UDP Query User{F2A7B976-2417-438A-9F6B-8F1CC62E6A9B}C:\program files (x86)\java\jre-1.8\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre-1.8\bin\javaw.exe => No File
FirewallRules: [TCP Query User{3F8FB561-E370-4646-88DF-267A97BA021B}C:\users\janpu\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe] => (Block) C:\users\janpu\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{6D546D94-9BC5-4F3C-920A-0A7D3E723260}C:\users\janpu\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe] => (Block) C:\users\janpu\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe
FirewallRules: [{A97DFA4D-C7B3-4CB5-8761-F14312A4D649}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1BE9BDBC-4201-42B6-B364-28D23699B985}] => (Allow) LPort=54925
FirewallRules: [TCP Query User{4BD3A83B-F972-4276-9143-9C5E6DC094E7}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [UDP Query User{E5BBC319-F968-4021-A545-0FAA5A3B0632}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [{45BC2A6A-A460-4D9E-AAE8-EE318A829DE2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.136.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BB9AC4D4-F7BF-41DF-A335-D89560DDEB6D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.136.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2589FBA7-CA24-410E-9D96-9B398FFAB3DB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.136.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{CC349BE6-7717-43BE-80C0-4AC73674B450}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.136.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6AED1458-0B1B-4004-95D5-2FF8E95B8412}] => (Allow) LPort=54950
FirewallRules: [{D4AFED58-2EDA-4D78-9E97-7409C23D5851}] => (Allow) LPort=54955
FirewallRules: [{C56DE65F-4D6E-4078-BF67-5B9F986A788D}] => (Allow) C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.exe (iPSMonitor) [File not signed]
FirewallRules: [{18CBCD55-E7E7-443F-BCD0-BFE52F39DB31}] => (Allow) C:\Intel\i.exe () [File not signed]
FirewallRules: [{06DC692E-D62F-41E2-A0FF-D564065524E8}] => (Allow) C:\Intel\i.exe () [File not signed]
FirewallRules: [{8E3DA043-0BD3-4F9B-9408-D9D555182923}] => (Allow) C:\Intel\i1.exe () [File not signed]
FirewallRules: [{9ACF918F-7BDE-4C4E-969E-62A458869AFF}] => (Allow) C:\Intel\i1.exe () [File not signed]
FirewallRules: [{159F11A7-2B92-4BC2-8821-B3B325463202}] => (Allow) C:\Intel\q.exe () [File not signed]
FirewallRules: [{6282808D-AA43-403F-8634-D50C63CC01D8}] => (Allow) C:\Intel\i3.exe () [File not signed]
FirewallRules: [{EED5C83E-4ACC-4051-9BBE-7E8614F478E5}] => (Allow) C:\Intel\q.exe () [File not signed]
FirewallRules: [{0F01A052-6CB2-494D-9BF1-7750687191FF}] => (Allow) C:\Intel\i2.exe () [File not signed]
FirewallRules: [{600B4B68-9965-47F8-8459-96BD1D077548}] => (Allow) C:\Intel\i2.exe () [File not signed]
FirewallRules: [{A14EBC14-812E-4156-9B02-1E7EF3423581}] => (Allow) C:\Intel\i4.exe () [File not signed]
FirewallRules: [{910B8E37-997C-4FA8-970A-669A30697C42}] => (Allow) C:\Intel\m\llm.exe => No File
FirewallRules: [{85EE6BED-A9C2-4EF4-B284-C99A431CF86F}] => (Allow) C:\Intel\m\sbr.exe => No File
FirewallRules: [{6A943F49-C10E-4735-8ACA-E0F080C63745}] => (Allow) C:\Intel\q1.exe () [File not signed]
FirewallRules: [{6B7011E0-62A8-4215-B6AD-B6A06BC1D400}] => (Allow) C:\Intel\m\txr.exe => No File
FirewallRules: [{8FCA84AE-EC80-428F-BEA1-26C71AE43787}] => (Allow) C:\Intel\q2.exe () [File not signed]
FirewallRules: [{58FC9A84-1738-4E93-BD66-E54C2754C3DC}] => (Allow) C:\Intel\q4.exe () [File not signed]
FirewallRules: [{52E2796B-87EF-4B2A-9905-10F44C0CA3D3}] => (Allow) C:\Intel\i4.exe () [File not signed]
FirewallRules: [{1720AD8D-DE0B-485A-859E-426452CB03E7}] => (Allow) C:\Intel\q4.exe () [File not signed]
FirewallRules: [{40DE83A6-E024-49D0-8224-CF06DE05C361}] => (Allow) C:\Intel\m\xrm.exe => No File
FirewallRules: [{F955A898-9520-4FDC-BB45-2E91F892B4A0}] => (Allow) C:\Intel\q1.exe () [File not signed]
FirewallRules: [{843B7278-7C61-4A42-8A3A-9F5EF7B6EBCB}] => (Allow) C:\Intel\m\txr.exe => No File

Hasicz · #11 Příspěvek od **Hasicz** » 06 bře 2025 09:59

Každopádně po provedení fixlistu už klávesnice píše pouze jeden háček i čárku, takže to zabralo. Otázka je, co to způsobilo a jestli je tam ještě něco, případně jak se tomu vyvarovat

#12 Příspěvek od **JaRon** » 06 bře 2025 10:00

2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\AVAST Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Avast
Mas tam plno skrytych adresarov vytvorenych smejdom 28.2. s casmi 15:27 15:28 15:29
Maju atribut RSH
Vsetky najdi a Zmaz - najdes ich v logu frst
Az potom restart a aktualne logy na docistenie

#13 Příspěvek od **altrok** » 06 bře 2025 11:43

Ahoj,
nase diakritika je pro keyloggery problem, proto jsi pozoroval priznaky, jake jsi pozoroval. Od 28.2. si nekdo nechaval posilat vsechno, co na tomto PC pises/delas. Po kompletnim odvirovani zmen vsechny hesla (ukradli ti i ty ulozeny v prohlizecich)... ale az bude PC cistej... JaRon ti da vedet

Me zajima ten malware, takze te poprosim slozku C:\Intel zazipuj s heslem "infected" a nekam mi ji prosim te uploadni (je to jedno... oneDrive, Mega.io, ulozto, ...). Podivam se na to detailneji a pripadne reportneme antivirovym spolecnostem. Ta slozka je skryta, takze kdybys ji nemohl najit, tak napis... ma totiz parametry System a Hidden.

A mam pocit, ze jsi 28.2. po obede crackoval jeden program... ty vis jakej... a tam bych videl pocatek vsech problemu

Hasicz · #14 Příspěvek od **Hasicz** » 06 bře 2025 12:53

Ahoj,

pocit máš správný, jsem jelito a už vyhlížím, kde to koupím origo.
Hesla tedy změním až bude celý proces dokončen, teď to nemá smysl? Nebo aspoň na jiném počítači si změnit aspoň ta důležitá hesla, jako je bankovnictví apod? Předpokládám, že všichni uživatele, kteří byli v tomto PC přihlášení ke chromu jsou na tom stejně, ano?

I teď mě tedy napadá, nebylo by lepší provést čistou instalaci znovu? Bude to ultra porod, bude to bolet, ale nerad bych měl PC něčím zašpiněný, co nepůjde (nebo já to nedokážu) odstranit. Uvažuji také o upgradu na W11, ale stále nevím jestli ano/ne a podle čeho se rozhodnout.

Složku intel jsem objevil, takže jí teď dávám do *.rar, jestli to nevadí, že to nebude zip a někam nasdílím, akorát má 20GB.

Obdivuji pánové vaše dovednosti

Hasicz · #15 Příspěvek od **Hasicz** » 06 bře 2025 12:54

JaRon píše: 06 bře 2025 10:00 2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Avira
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\AVG
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\AVAST Software
2025-02-28 15:27 - 2025-02-28 15:27 - 000000002 __RSH C:\ProgramData\Avast
Mas tam plno skrytych adresarov vytvorenych smejdom 28.2. s casmi 15:27 15:28 15:29
Maju atribut RSH
Vsetky najdi a Zmaz - najdes ich v logu frst
Az potom restart a aktualne logy na docistenie

Ahoj, žádné z těch složek nemohu na disku nalézt, je na to nějaký trik? Zeptám se i tebe, nebylo by opravdu lepší provést novou čistou instalaci? Trošku mě to celé děsí

VIRY.CZ

klávesnice píše dva háčky/čárky místo jednoho

klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho

Re: klávesnice píše dva háčky/čárky místo jednoho