Žádný problém není akorát preventivní kontrola. Děkuji
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-07-2025
Ran by mikoa (administrator) on MIKOA (ATComputers X-DIABLO GAMER) (21-07-2025 15:05:26)
Running from C:\Users\mikoa\Downloads\FRST64.exe
Loaded Profiles: mikoa
Platform: Microsoft Windows 11 Home Version 24H2 26100.4652 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <8>
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\Program Files\WindowsApps\Microsoft.GamingServices_29.103.2001.0_x64__8wekyb3d8bbwe\gamingservices.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\xgamehelper.exe
(C:\Users\mikoa\AppData\Local\Discord\app-1.0.9200\Discord.exe ->) (Opera Norway AS -> Opera Software) C:\Users\mikoa\AppData\Local\Programs\Opera\opera.exe <21>
(C:\Users\mikoa\AppData\Local\Programs\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\mikoa\AppData\Local\Programs\Opera\119.0.5497.141\opera_crashreporter.exe
(Discord Inc. -> Discord Inc.) C:\Users\mikoa\AppData\Local\Discord\app-1.0.9200\Discord.exe <6>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <10>
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <21>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Panda Security S.L. -> Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> Asustek Computer Inc.) C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.03.12\atkexComSvc.exe
(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <4>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_08efa4f6500ab001\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Panda Security S.L. -> Panda Security S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\pselamsvc.exe
(services.exe ->) (Panda Security S.L. -> Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(services.exe ->) (Panda Security S.L. -> Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
(services.exe ->) (Panda Security S.L. -> Panda Security, S.L.U.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_5fb296660a9719a9\RtkAudUService64.exe <2>
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2527.2.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (83564403-0B26-46B8-9D84-040F43691D31 -> ) C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj\RtkUWP.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.3336.0_x64__8wekyb3d8bbwe\EdgeGameAssist.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2507.1001.9.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.73.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_5fb296660a9719a9\RtkAudUService64.exe [3498408 2022-07-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [186984 2022-11-02] (Panda Security S.L. -> Panda Security, S.L.)
HKLM\...\RunOnce: [msedge_cleanup_{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}] => C:\Program Files (x86)\Microsoft\Edge\Application\138.0.3351.95\Installer\setup.exe [7363664 2025-07-17] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\RunOnce: [msedge_cleanup_{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}] => C:\Program Files (x86)\Microsoft\EdgeWebView\Application\138.0.3351.95\Installer\setup.exe [7363664 2025-07-17] (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4698720 2025-06-28] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\Run: [MicrosoftEdgeAutoLaunch_2D2B6870C9A9D7F35059D3C24C3F4492] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4113480 2025-07-16] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\Run: [Discord] => C:\Users\mikoa\AppData\Local\Discord\Update.exe [1526552 2024-09-09] (Discord Inc. -> GitHub)
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\Run: [] => [X]
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\Run: [Opera Browser Assistant] => C:\Users\mikoa\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4536216 2025-04-14] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\mikoa\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\138.0.7204.158\Installer\chrmstp.exe [2025-07-18] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\138.1.80.122\Installer\chrmstp.exe [2025-07-16] (Brave Software, Inc. -> Brave Software, Inc.)
Startup: C:\Users\mikoa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Poslat do aplikace OneNote.lnk [2024-08-13]
ShortcutTarget: Poslat do aplikace OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {008CA05D-5CB3-4A4A-8960-7C59BFFB669F} - no filepath. <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - \Microsoft\Windows\Location\Notifications -> No File <==== ATTENTION
Task: {0FEA63EB-603B-47C4-B703-A41CB107ACF2} - no filepath. <==== ATTENTION
Task: {111BA509-2A82-4884-99E3-F886AE4D6284} - no filepath. <==== ATTENTION
Task: {12D757C8-8C63-425A-B598-8BA304AA145F} - no filepath. <==== ATTENTION
Task: {224B5003-08BE-4AE5-83EB-97CF9EAE944A} - no filepath. <==== ATTENTION
Task: {304A3D37-85D3-4BAE-A367-E1E73B2DD4D9} - no filepath. <==== ATTENTION
Task: {641493E6-3968-4444-9D65-B6246895087D} - \Microsoft\Windows\Windows Media Sharing\UpdateLibrary -> No File <==== ATTENTION
Task: {64C1DD41-99E9-4ACF-A979-65C01D4B45EC} - no filepath. <==== ATTENTION
Task: {706E5975-5AE3-4FC0-9FA3-17601822DE64} - no filepath. <==== ATTENTION
Task: {76BDF487-DB81-45B2-8D85-7BE3A77647B9} - \Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask -> No File <==== ATTENTION
Task: {8C3448DB-3DEB-4DDC-8C2B-2CEFCA6B9A6B} - no filepath. <==== ATTENTION
Task: {998AB667-0AE6-435A-92C5-B03E4536D80C} - no filepath. <==== ATTENTION
Task: {BD77BB84-7FFA-4686-9D76-F8FC55C41C5A} - no filepath. <==== ATTENTION
Task: {BE719ACF-5BB7-44A1-AE3F-A82F13D45D47} - no filepath. <==== ATTENTION
Task: {C03132B5-43BF-4204-8C45-38EC29AFE7F7} - no filepath. <==== ATTENTION
Task: {E7AA15AC-0893-4795-9483-98AE4CA08147} - no filepath. <==== ATTENTION
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - no filepath. <==== ATTENTION
Task: {53FB972C-30DE-44FA-AE98-AE23B16EFE83} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2025-03-21] (Adobe Inc. -> Adobe Inc.)
Task: {3CC577D7-4070-4BB0-8842-46175BA4C11A} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{6DB7013E-DCEE-4232-A3EA-0C5448654641} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167440 2024-12-18] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {51D06F57-1829-4DE4-BD56-41D9C40AD039} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{9313CD38-A19E-432F-82A5-D6AA5A8F7200} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167440 2024-12-18] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {1B49D38D-2EBB-483D-8FC9-BDB330C3C750} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem140.0.7272.0{E187A8F6-67FD-4682-8276-BD14C4964F0B} => C:\Program Files (x86)\Google\GoogleUpdater\140.0.7272.0\updater.exe [6836832 2025-07-01] (Google LLC -> Google LLC)
Task: {F42D5EE8-B78F-4D20-93C8-72204E8F925C} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [15515976 2025-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {0E6F070A-01D7-48F9-87E0-2514534415E9} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28583832 2025-07-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {5215A0AD-3E2A-437C-AE68-2DB03BB8CA02} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [70000 2025-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {87E377EA-FC47-48AA-AE33-3795C4072A2C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28583832 2025-07-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {065BA15F-6398-426F-9B84-690C526CDD3D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [311560 2025-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {FBBD57C2-F0AA-44D0-9D26-A70DD4D3483F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [311560 2025-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {A623495E-0DBC-4896-AD38-9202221980D5} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [229176 2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {FD9DD50F-6495-490F-A489-BD087E298DE0} - System32\Tasks\Microsoft\Office\Office Startup Boost => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [311560 2025-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {4BCB9359-E9EF-430D-B4F3-400DDE365F91} - System32\Tasks\Microsoft\Office\Office Startup Boost Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [311560 2025-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {6AD92914-7DEC-44FE-BC04-A15AF596D84D} - System32\Tasks\Opera GX scheduled Autoupdate 1746276107 => C:\Users\mikoa\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe [6087560 2025-07-05] (Opera Norway AS -> Opera Software)
Task: {8648FA75-1A33-428A-AC27-41C59BC09FA0} - System32\Tasks\Opera scheduled assistant Autoupdate 1745988088 => C:\Users\mikoa\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [6073240 2025-06-26] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\mikoa\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {C1538E27-3443-4B51-95F2-4911A89365E3} - System32\Tasks\Opera scheduled Autoupdate 1745988085 => C:\Users\mikoa\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [6073240 2025-06-26] (Opera Norway AS -> Opera Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1f3cd9cd-1593-4c3a-aa41-afcebb1e4066}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1f3cd9cd-1593-4c3a-aa41-afcebb1e4066}\255646D69602E45647: [DhcpNameServer] 192.168.232.152
Tcpip\..\Interfaces\{1f3cd9cd-1593-4c3a-aa41-afcebb1e4066}\94E464F435F5D4963716: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{1f3cd9cd-1593-4c3a-aa41-afcebb1e4066}\F4E65605C6573702E4F627460233025374: [DhcpNameServer] 10.39.64.208
Tcpip\..\Interfaces\{bd043528-d6ff-4af1-88b1-3302ff9a88d8}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\mikoa\AppData\Local\Microsoft\Edge\User Data\Default [2025-07-21]
Edge HomePage: Default -> hxxp://www.google.cz/
Edge StartupUrls: Default -> "hxxp://www.google.cz/"
Edge Extension: (Dokumenty Google offline) - C:\Users\mikoa\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-04]
Edge Extension: (Dark Reader) - C:\Users\mikoa\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ifoakfbpdcdoeenechcleahebpibofpc [2025-07-04]
Edge Extension: (Edge relevant text changes) - C:\Users\mikoa\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-25]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-07-20] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-07-15] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-07-20] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Default [2025-07-21]
CHR Notifications: Default -> hxxps://lyrania.co.uk; hxxps://pendoria.net; hxxps://www.avabur.com
CHR Session Restore: Default -> is enabled.
CHR Extension: (Tampermonkey) - C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2024-12-11]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-07-18]
CHR Extension: (Dark Reader) - C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2025-07-04]
CHR Extension: (Dokumenty Google offline) - C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-13]
CHR Extension: (Ad Skip Master for Youtube) - C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Default\Extensions\imlalpfjijneacdcjgjmphcpmlhkhkho [2025-03-21]
CHR Extension: (Eneba - Seamless Keys Activation and Cheap Games Offers) - C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbdedfhlakcdbjeepmdkbbobcmgcbeid [2025-05-27]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-12-30]
CHR Profile: C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Guest Profile [2025-05-01]
CHR Profile: C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-07-12]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-06-28]
CHR Extension: (Dokumenty Google offline) - C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-08]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-12-30]
CHR Profile: C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Profile 3 [2025-05-05]
CHR Notifications: Profile 3 -> hxxps://pendoria.net
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-05-01]
CHR Extension: (Dokumenty Google offline) - C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-27]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-10-09]
CHR Profile: C:\Users\mikoa\AppData\Local\Google\Chrome\User Data\System Profile [2025-07-18]
CHR HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
Opera:
=======
OPR DefaultProfile: Default
StartMenuInternet: (HKU\S-1-5-21-2161308482-1726367771-1223172082-1001) Opera GXStable - "C:\Users\mikoa\AppData\Local\Programs\Opera GX\opera.exe"
Brave:
=======
BRA Profile: C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2025-05-01]
BRA Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-04-23]
BRA Extension: (Brave Ad Block Updater (AdGuard URL Tracking Protection Filters (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\acjngemejiflkehbcbomjgkbfhjlgioh [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2025-04-23]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2025-04-23]
BRA Extension: (Brave Ad Block Updater (EasyList Finnish (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\afggnigkiebjlahlhcjgjahbhfikcipa [2025-04-23]
BRA Extension: (Brave Ad Block Updater (YouTube Anti-Shorts (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\almolcgbkikkhliiibfjkohebgklegam [2025-04-23]
BRA Extension: (Brave NTP background images) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Oficjalne Polskie Filtry Przeciwko Alertom o Adblocku (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\beeceepafhbchnbfdkfalfipoancnjkm [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2025-04-23]
BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Romanian Ad (ROad) (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\cgmhmpbimmakidhlkcnnehhicoclofep [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Fanboy's Anti-chat Apps (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\cjoooeeofnfjohnalnghhmdlalopplja [2025-04-23]
BRA Extension: (Brave Ad Block Updater (YouTube Mobile Distractions (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpapfkpkeaajehipopnaiihfmbfbnkdp [2025-04-23]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2024-12-21]
BRA Extension: (Brave Ad Block Updater (Eesti Saitidele Kohandatud (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\dcfccddjfmckaigemleendolfmmaaiii [2025-04-23]
BRA Extension: (Brave Ad Block Updater (EasyList Italy (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\eaidcpcfnepdmmhbglgjhpjdfodkdcki [2025-04-23]
BRA Extension: (Brave NTP sponsored images) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2025-04-23]
BRA Extension: (Brave Ad Block Updater (AdGuard Chinese (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\fbljdmoohhbifebddjnbbljgencmpjlb [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Bulgarian (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\fdmemomgcgpopbhhmdkdedkphkglhopj [2025-04-23]
BRA Extension: (Brave Ad Block Updater (EasyList Spanish (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\fejmaeodjeekfldnbegjagemjgnmhfof [2025-04-23]
BRA Extension: (Brave Ad Block Updater (IndianList (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\femdbljnkmindcakmnbjhfefepeaicnm [2025-04-23]
BRA Extension: (Brave Ad Block Updater (AdGuard Français (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\flnkmpokemfpaajmiimmjeiandgoodgg [2025-04-23]
BRA Extension: (Brave Ad Block Updater (EasyList Lithuania (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\fmddkdeghohhfoglgdpkhlnfgmmffklg [2025-04-23]
BRA Extension: (Brave Ad Block Updater (YousList (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\gdlpebjigadbdpjpfpdbmogebilelnbh [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Frellwit's Swedish (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\ggjlfgjhaeedkajcdpomeidjlniafdnp [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Adguard Turkish (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\gomenlogbembmkbghmaoledggliepdef [2025-04-23]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2024-12-18]
BRA Extension: (Brave Ad Block Updater (Latvian (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\hkeaopcnlcfbmbogejmbipnnopjlpiph [2025-04-23]
BRA Extension: (Brave Ad Block Updater (EasyList China (中文) (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\hmnnhojoekmmehfpmeegehbmifiijobb [2025-04-23]
BRA Extension: (Brave Ads Resources) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\iejekkikpddbbockoldagmfcdbffomfc [2025-03-21]
BRA Extension: (Brave Ad Block Updater (BitBlock Дополнительная подписка фильтров (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\iiglahilpgmhlcogkkihklnbcjjgpddl [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Fanboy's Korean (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\iihfaghdnbilkdhmmnnkebhodfgeaopd [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Macedonian filters (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\jbjcimgbgpgbgkjalhlhgldfflklfgef [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Brave Experimental Adblock Rules (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\jcfckfokjmopfomnoebdkdhbhcgjfnbi [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Adguard Russian (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\jiajbjlakknofnkmlokcbanjbajpbdkl [2025-04-23]
BRA Extension: (Brave Ad Block Updater (EasyList Thailand (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\johkmlmpfakcaopiapbmcocgpkabdmed [2025-04-23]
BRA Extension: (Brave Ad Block Updater (EasyList Hebrew (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\kdakdkdknmkkafefhcbngpinlfoopoej [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Fanboy's Anti-Newsletter (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\kdddfellohomdnfkdhombbddhojklibj [2025-04-23]
BRA Extension: (Brave Ad Block Updater (PersianBlocker (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\keclkbppmfihehggeadflldbjpolcpgf [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Dandelion Sprout's Nordic (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\kjdbffhfijkonelaglifggkchhmgmeli [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Blocklists Anti-Porn (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\lbnibkdpkdjnookgfeogjdanfenekmpe [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Hufilter (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\ldnolaledjfkfgpjkbkcfjiaejeeanmh [2025-04-23]
BRA Extension: (Brave Ad Block Updater (EasyList Germany (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\lfmefmifdjlfneapckmpkinmlofjehbp [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Adguard Japanese filters 日本用フィルタ (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\llgjaaddopeckcifdceaaadmemagkepi [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Adguard Spanish/Portuguese (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\meimhmgfbckapkbbbdaoefgnbppmkodp [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Brave Twitch Adblock Rules (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\mhccgcegedfkhdbfbgllfkkcjhgkoinc [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Bypass Paywalls Clean Filters (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\mjhbdghipcamfoojbeikdojibeelbmil [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Liste AR (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\mpgdjfnjjmglioiflfioiappfbdbkeno [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Fanboy's Social (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\nbkknaieglghmocpollinelcggiehfco [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Oficjalne Polskie Filtry do AdBlocka (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\ngcohbdfildjnmfnicgdipopmlhdcokg [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Slovenian (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\nnpbcdahaefknppiijdmnckpdgojejck [2025-04-23]
BRA Extension: (Brave Ad Block Updater (CJX's Annoyance (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\npcnkjiaolpnapjleimicclmdcccoeme [2025-04-23]
BRA Extension: (Brave Ad Block Updater (EasyList Czech and Slovak (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\oegebjahecghlckbhkmojgnpcgdeajdi [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Icelandic (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\oimegboipnkgekgoccmlljjlhhbjaoil [2025-04-23]
BRA Extension: (Brave Ad Block Updater (ABPindo (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\olkjbfppmeijhkjhjjmfdbloighaigmh [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Fanboy's Annoyances + uBO Annoyances (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\omoaeaghhgmiojkeaemjkpkmelmalbgo [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Greek AdBlock (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\onooookdmjmijocbeafcldnbfiaobhjk [2025-04-23]
BRA Extension: (Brave Ad Block Updater (ABPVN (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\ooamlicohiiaodkaemgoimcihidbedmp [2025-04-23]
BRA Extension: (Brave Ad Block Updater (Adguard Dutch (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\oojedkppeblkjkcdlmlahnhndjmbicoi [2025-04-23]
BRA Extension: (Brave Ad Block Updater (YouTube Mobile Recommendations (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\phdmgpanpejkbmbljlhcehpadabljfbk [2025-04-23]
BRA Extension: (Brave Ad Block Updater (RU AdList Дополнительная региональная подписка (plaintext))) - C:\Users\mikoa\AppData\Local\BraveSoftware\Brave-Browser\User Data\phmomndefejccjmpiehbogokakkmnmgb [2025-04-23]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2025-03-21] (Adobe Inc. -> Adobe Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.03.12\atkexComSvc.exe [908648 2024-09-03] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
R2 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [503144 2024-11-01] (ASUSTeK COMPUTER INC. -> Asustek Computer Inc.)
S2 AsusUpdateCheck; C:\WINDOWS\System32\AsusUpdateCheck.exe [845256 2025-07-13] (ASUSTeK Computer Inc. -> )
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [18991400 2025-04-09] (BattlEye Innovations e.K. -> )
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167440 2024-12-18] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\138.1.80.122\elevation_service.exe [3198544 2025-07-16] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167440 2024-12-18] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13045088 2025-07-10] (Microsoft Corporation -> Microsoft Corporation)
S3 Denuvo Anti-Cheat Update Service; C:\Program Files\Denuvo Anti-Cheat\denuvo-anti-cheat-update-service.exe [1220696 2025-07-08] (DENUVO GmbH -> Denuvo GmbH)
R3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [19098784 2025-07-17] (Electronic Arts, Inc. -> Electronic Arts)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [964336 2024-10-28] (EasyAntiCheat Oy -> Epic Games, Inc.)
S3 EpicGamesUpdater; C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3071392 2025-06-22] (Epic Games Inc. -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-08-02] (Epic Games Inc. -> Epic Games, Inc.)
S3 LibreOfficeMaintenance; C:\Program Files\LibreOffice\program\update_service.exe [123320 2025-01-24] (The Document Foundation -> The Document Foundation)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe [2009608 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [119560 2023-10-05] (Panda Security S.L. -> Panda Security, S.L.)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_08efa4f6500ab001\Display.NvContainer\NVDisplay.Container.exe [1275552 2025-06-25] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Panda VPN Service; C:\Program Files (x86)\Panda Security\Panda Security Protection\Hydra.Sdk.Windows.Service.exe [320848 2017-11-19] (AnchorFree Inc -> )
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [84176 2019-02-19] (Panda Security S.L. -> Panda Security, S.L.)
R2 pselamsvc; C:\Program Files (x86)\Panda Security\Panda Security Protection\pselamsvc.exe [195736 2023-04-13] (Panda Security S.L. -> Panda Security S.L.)
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [81424 2023-10-05] (Panda Security S.L. -> Panda Security, S.L.U.)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [7733736 2025-04-11] (Rockstar Games, Inc. -> Rockstar Games)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\NisSrv.exe [4538400 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe [278320 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [12770648 2025-05-22] (KRAFTON, Inc. -> KRAFTON, Inc.)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [90792 2024-10-01] (Microsoft Windows Hardware Compatibility Publisher -> Adguard Software Limited)
R3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2017-11-16] (AnchorFree Inc -> The OpenVPN Project)
R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [36928 2022-09-16] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
R3 AmdTools64; C:\WINDOWS\System32\drivers\AmdTools64.sys [63392 2020-06-16] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 Asusgio3; C:\Windows\system32\drivers\AsIO3.sys [58936 2024-11-01] (ASUSTeK COMPUTER INC. -> Asustek Computer Inc.)
S3 Btcsrusb; C:\WINDOWS\System32\Drivers\btcusb.sys [53488 2024-01-06] (IVT CORPORATION -> IVT Corporation.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [573440 2024-12-15] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2024-12-15] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2024-12-15] (Microsoft Corporation) [File not signed]
S3 BTWDPAN; C:\WINDOWS\System32\drivers\btwdpan.sys [84008 2024-01-14] (Broadcom Corporation -> Broadcom Corporation.)
S3 Denuvo Anti-Cheat; C:\Program Files\Denuvo Anti-Cheat\denuvo-anti-cheat.sys [3795136 2025-07-08] (Microsoft Windows Hardware Compatibility Publisher -> Denuvo GmbH)
S3 DPIDEFil; C:\WINDOWS\System32\drivers\DPIDEFil.sys [53608 2024-01-06] (NEC Personal Computers, Ltd. -> NEC Personal Computers, Ltd.)
R0 FlashBoot; C:\WINDOWS\System32\drivers\FlashBoot.sys [17616 2024-01-06] (Challenger Backup Solutions, LLC -> Challenger Backup Solutions, LLC)
S3 gunfwfp; C:\Windows\System32\drivers\gunfwfp.sys [101440 2024-03-28] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 hostpacket; C:\Windows\System32\drivers\hostpacket.sys [38472 2023-08-15] (Microsoft Windows Hardware Compatibility Publisher -> GEARUP PORTAL PTE. LTD.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [331168 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [19672 2023-12-10] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R1 NNSDNS; C:\WINDOWS\system32\DRIVERS\NNSDNS.sys [146184 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSHTTP; C:\WINDOWS\system32\DRIVERS\NNSHTTP.sys [215264 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSHTTPS; C:\WINDOWS\system32\DRIVERS\NNSHTTPS.sys [128744 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSIDS; C:\WINDOWS\system32\DRIVERS\NNSIDS.sys [146664 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSNAHSL; C:\WINDOWS\system32\DRIVERS\NNSNAHSL.sys [151152 2022-10-10] (Microsoft Windows Hardware Compatibility Publisher -> Panda Security, S.L.)
R1 NNSNHWFP; C:\WINDOWS\system32\DRIVERS\NNSNHWFP.sys [211208 2022-12-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSPICC; C:\WINDOWS\system32\DRIVERS\NNSPICC.sys [164568 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSPOP3; C:\WINDOWS\system32\DRIVERS\NNSPOP3.sys [137960 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSPROT; C:\WINDOWS\system32\DRIVERS\NNSPROT.sys [407264 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSPRV; C:\WINDOWS\system32\DRIVERS\NNSPRV.sys [575720 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSSMTP; C:\WINDOWS\system32\DRIVERS\NNSSMTP.sys [125672 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSSTRM; C:\WINDOWS\system32\DRIVERS\NNSSTRM.sys [335064 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R0 nvme; C:\WINDOWS\System32\drivers\nvme.sys [96360 2024-01-06] (Phison Electronics Corporation -> Windows (R) Win 7 DDK provider)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys [47240 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
R2 PSINAflt; C:\WINDOWS\system32\DRIVERS\PSINAflt.sys [198376 2022-11-02] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
S0 psinelam; C:\WINDOWS\System32\DRIVERS\psinelam.sys [37952 2024-10-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Panda Security, S.L.)
R2 PSINFile; C:\WINDOWS\System32\DRIVERS\PSINFile.sys [176360 2022-11-02] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 PSINKNC; C:\WINDOWS\system32\DRIVERS\PSINKNC.sys [218856 2022-11-02] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R2 PSINProc; C:\WINDOWS\System32\DRIVERS\PSINProc.sys [150760 2022-11-02] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R2 PSINProt; C:\WINDOWS\system32\DRIVERS\PSINProt.sys [162536 2022-11-02] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R2 PSINReg; C:\WINDOWS\system32\DRIVERS\PSINReg.sys [130280 2022-11-02] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
U3 PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [63360 2023-12-18] (Microsoft Windows Hardware Compatibility Publisher -> Panda Security, S.L.U.)
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_fbf50634f3ddb33d\rt68cx21x64.sys [779728 2023-12-05] (Realtek Semiconductor Corp. -> Realtek)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [20016 2025-04-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [605576 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100744 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
S3 cpuz158; \??\C:\WINDOWS\temp\cpuz158\cpuz158_x64.sys [X] <==== ATTENTION
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-07-21 14:58 - 2025-07-21 15:04 - 000066504 _____ C:\Users\mikoa\Downloads\Addition.txt
2025-07-21 14:57 - 2025-07-21 15:06 - 000043488 _____ C:\Users\mikoa\Downloads\FRST.txt
2025-07-21 14:56 - 2025-07-21 15:05 - 000000000 ____D C:\FRST
2025-07-21 14:55 - 2025-07-21 14:55 - 002409472 _____ (Farbar) C:\Users\mikoa\Downloads\FRST64.exe
2025-07-21 14:44 - 2025-07-21 14:47 - 000000704 _____ C:\Users\mikoa\OneDrive\Dokumenty\BD4A84FEBA51468FA92A8363505AED87.json
2025-07-21 14:44 - 2025-07-21 14:44 - 000000000 ____D C:\Users\mikoa\AppData\Local\ODE3
2025-07-21 12:31 - 2025-07-21 12:31 - 000772904 _____ C:\WINDOWS\system32\perfh015.dat
2025-07-21 12:31 - 2025-07-21 12:31 - 000711764 _____ C:\WINDOWS\system32\perfh005.dat
2025-07-21 12:31 - 2025-07-21 12:31 - 000159930 _____ C:\WINDOWS\system32\perfc015.dat
2025-07-21 12:31 - 2025-07-21 12:31 - 000152978 _____ C:\WINDOWS\system32\perfc005.dat
2025-07-20 09:27 - 2025-07-20 09:27 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-07-19 11:05 - 2025-07-19 11:05 - 000000000 ____D C:\Users\mikoa\Downloads\TheElderScrollsIVOblivion(Remastered)_V0.1
2025-07-19 11:04 - 2025-07-19 11:04 - 002816565 _____ C:\Users\mikoa\Downloads\TheElderScrollsIVOblivion(Remastered)_V0.1.rar
2025-07-19 10:56 - 2025-07-19 11:43 - 000000023 _____ C:\WINDOWS\BlendSettings.ini
2025-07-19 10:54 - 2025-07-19 10:54 - 000000000 ____D C:\Users\mikoa\AppData\Local\Oblivion
2025-07-19 08:32 - 2025-07-19 11:06 - 000001349 _____ C:\Users\mikoa\Desktop\The Elder Scrolls IV Oblivion Remastered.lnk
2025-07-09 05:17 - 2025-07-21 13:11 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-07-04 19:59 - 2025-06-25 14:17 - 002072424 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2025-07-04 19:59 - 2025-06-25 14:17 - 002072424 _____ C:\WINDOWS\system32\vulkaninfo.exe
2025-07-04 19:59 - 2025-06-25 14:17 - 001614184 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-07-04 19:59 - 2025-06-25 14:17 - 001614184 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2025-07-04 19:59 - 2025-06-25 14:17 - 001576800 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2025-07-04 19:59 - 2025-06-25 14:17 - 001576800 _____ C:\WINDOWS\system32\vulkan-1.dll
2025-07-04 19:59 - 2025-06-25 14:17 - 001389952 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2025-07-04 19:59 - 2025-06-25 14:17 - 001389952 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2025-07-04 19:59 - 2025-06-25 14:17 - 000477800 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2025-07-04 19:59 - 2025-06-25 14:17 - 000374912 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2025-07-04 19:59 - 2025-06-25 14:13 - 001259656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2025-07-04 19:59 - 2025-06-25 14:13 - 000674440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2025-07-04 19:59 - 2025-06-25 14:13 - 000508552 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2025-07-04 19:59 - 2025-06-25 14:12 - 026004632 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2025-07-04 19:59 - 2025-06-25 14:12 - 002313856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2025-07-04 19:59 - 2025-06-25 14:12 - 001713288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2025-07-04 19:59 - 2025-06-25 14:12 - 001568904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2025-07-04 19:59 - 2025-06-25 14:12 - 001220232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2025-07-04 19:59 - 2025-06-25 14:12 - 001053296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2025-07-04 19:59 - 2025-06-25 14:12 - 000942208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2025-07-04 19:59 - 2025-06-25 14:12 - 000809584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2025-07-04 19:59 - 2025-06-25 14:12 - 000467608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2025-07-04 19:59 - 2025-06-25 14:11 - 023035016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2025-07-04 19:59 - 2025-06-25 14:11 - 020516976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2025-07-04 19:59 - 2025-06-25 14:11 - 007322728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2025-07-04 19:59 - 2025-06-25 14:11 - 005239920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2025-07-04 19:59 - 2025-06-25 14:11 - 003993704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2025-07-04 19:58 - 2025-06-25 14:11 - 005917832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2025-07-04 19:58 - 2025-06-25 14:11 - 000853632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2025-07-04 19:58 - 2025-06-25 14:10 - 005602096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2025-07-04 19:58 - 2025-06-25 14:10 - 004902176 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2025-07-04 19:58 - 2025-06-25 04:36 - 000143026 _____ C:\WINDOWS\system32\nvinfo.pb
2025-06-29 17:14 - 2025-06-29 17:14 - 000000000 ____D C:\WINDOWS\system32\ruxim
2025-06-29 16:28 - 2025-06-29 16:28 - 000073956 _____ C:\WINDOWS\SysWOW64\ctac.json
2025-06-29 16:28 - 2025-06-29 16:28 - 000073956 _____ C:\WINDOWS\system32\ctac.json
2025-06-29 16:28 - 2025-06-29 16:28 - 000033519 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-06-29 16:28 - 2025-06-29 16:28 - 000033519 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-06-27 04:36 - 2025-06-27 04:36 - 000000000 ____D C:\Users\mikoa\Downloads\PvPmt2 Client 20.06
2025-06-26 15:02 - 2025-06-26 15:02 - 000000000 ____D C:\ProgramData\KONAMI
2025-06-26 15:01 - 2025-07-09 01:06 - 000000000 ____D C:\Program Files\Denuvo Anti-Cheat
2025-06-26 15:01 - 2025-06-26 15:01 - 000000000 ____D C:\Users\mikoa\OneDrive\Dokumenty\KONAMI
2025-06-26 14:58 - 2025-06-26 15:08 - 3076533325 _____ C:\Users\mikoa\Downloads\PvPmt2 Client 20.06.rar
2025-06-26 11:52 - 2025-06-28 03:07 - 000000223 _____ C:\Users\mikoa\Desktop\eFootball™.url
2025-06-24 14:56 - 2025-06-24 14:56 - 000000222 _____ C:\Users\mikoa\Desktop\Zaklínač 3 Divoký hon.url
2025-06-22 03:16 - 2025-06-22 03:16 - 000000222 _____ C:\Users\mikoa\Desktop\911 Operator.url
2025-06-22 02:59 - 2025-06-22 02:59 - 000000000 ____D C:\Users\mikoa\AppData\LocalLow\Bureau 81
2025-06-22 02:56 - 2025-06-22 02:56 - 000000000 ____D C:\Users\mikoa\Downloads\TheOperator_V0.6
2025-06-22 02:55 - 2025-06-22 02:55 - 001049066 _____ C:\Users\mikoa\Downloads\TheOperator_V0.6.7z
2025-06-22 02:55 - 2025-06-22 02:55 - 001049066 _____ C:\Users\mikoa\Downloads\TheOperator_V0.6 (1).7z
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-07-21 15:05 - 2024-09-16 10:13 - 000000000 ____D C:\Users\mikoa\AppData\Local\Discord
2025-07-21 14:59 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2025-07-21 14:54 - 2023-12-26 01:49 - 000000000 ____D C:\Program Files (x86)\Steam
2025-07-21 14:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-07-21 14:32 - 2025-04-30 06:41 - 000004206 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1745988085
2025-07-21 14:32 - 2025-04-30 06:41 - 000001397 _____ C:\Users\mikoa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2025-07-21 14:31 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-07-21 14:27 - 2023-11-22 09:17 - 000000000 ____D C:\ProgramData\NVIDIA
2025-07-21 13:17 - 2025-04-09 23:13 - 000000000 ____D C:\Program Files\Common Files\PUBG
2025-07-21 12:31 - 2024-12-15 07:03 - 002625504 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-07-21 12:15 - 2024-09-16 10:13 - 000000000 ____D C:\Users\mikoa\AppData\Roaming\discord
2025-07-21 08:54 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-07-20 09:27 - 2023-11-22 09:18 - 000000000 ____D C:\Program Files\Microsoft Office
2025-07-20 09:25 - 2023-12-26 01:41 - 000000000 ____D C:\Users\mikoa\AppData\Local\D3DSCache
2025-07-20 07:55 - 2024-12-15 07:01 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2025-07-20 07:55 - 2024-10-22 16:19 - 000002080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2025-07-20 07:55 - 2024-10-22 16:19 - 000002068 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2025-07-20 07:55 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-07-20 07:55 - 2023-12-26 01:41 - 000000000 ____D C:\Users\mikoa\AppData\Local\Packages
2025-07-20 07:55 - 2023-11-22 09:13 - 000000000 ____D C:\ProgramData\Packages
2025-07-19 15:03 - 2023-12-26 12:34 - 000000000 ____D C:\Users\mikoa\AppData\Roaming\WeMod
2025-07-19 11:44 - 2023-12-26 03:47 - 000000000 ____D C:\Users\mikoa\AppData\Local\CrashDumps
2025-07-19 11:35 - 2025-01-04 00:13 - 000000000 ____D C:\Users\mikoa\AppData\Local\WeMod
2025-07-19 11:35 - 2023-12-26 12:34 - 000002212 _____ C:\Users\mikoa\Desktop\WeMod.lnk
2025-07-19 11:35 - 2023-12-26 12:34 - 000000000 ____D C:\Users\mikoa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WeMod
2025-07-19 11:35 - 2023-12-26 12:34 - 000000000 ____D C:\Users\mikoa\AppData\Local\SquirrelTemp
2025-07-19 10:54 - 2023-12-27 04:28 - 000000000 ____D C:\Users\mikoa\OneDrive\Dokumenty\My Games
2025-07-19 05:06 - 2024-01-05 06:30 - 000000000 ____D C:\XboxGames
2025-07-18 11:42 - 2023-12-30 18:14 - 000002254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-07-17 23:47 - 2023-11-22 09:11 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-07-17 23:47 - 2023-11-22 09:11 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2025-07-17 20:50 - 2024-02-01 23:56 - 000000000 ____D C:\ProgramData\EA Desktop
2025-07-17 08:14 - 2024-09-16 10:13 - 000002254 _____ C:\Users\mikoa\Desktop\Discord.lnk
2025-07-16 19:18 - 2024-12-18 15:12 - 000002371 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2025-07-16 19:18 - 2024-12-18 15:12 - 000002330 _____ C:\Users\Public\Desktop\Brave.lnk
2025-07-15 10:32 - 2025-03-18 14:07 - 000403832 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_8.dll
2025-07-15 10:32 - 2024-01-05 06:30 - 002918776 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2025-07-15 10:32 - 2024-01-05 06:30 - 000817552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2025-07-15 10:32 - 2024-01-05 06:30 - 000272760 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2025-07-15 10:32 - 2024-01-05 06:30 - 000244088 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2025-07-15 10:32 - 2024-01-05 06:30 - 000166264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2025-07-15 10:32 - 2024-01-05 06:30 - 000121208 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2025-07-15 10:32 - 2024-01-05 06:30 - 000076176 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2025-07-15 00:45 - 2025-03-18 14:07 - 000378432 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_8.dll.0
2025-07-15 00:45 - 2024-01-05 06:30 - 000796224 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll.0
2025-07-13 21:53 - 2024-12-15 06:47 - 000000000 ____D C:\Users\mikoa
2025-07-13 11:10 - 2024-12-15 07:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-07-13 11:10 - 2024-12-15 07:00 - 000011388 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-07-13 11:10 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-07-13 11:10 - 2024-01-06 08:46 - 000901328 _____ () C:\WINDOWS\system32\wpbbin.exe
2025-07-13 11:10 - 2024-01-06 08:46 - 000845256 _____ C:\WINDOWS\system32\AsusUpdateCheck.exe
2025-07-13 11:10 - 2023-11-22 09:10 - 000012288 ___SH C:\DumpStack.log.tmp
2025-07-11 00:17 - 2024-02-15 08:46 - 000000000 ____D C:\Users\mikoa\OneDrive\Dokumenty\The Witcher 3
2025-07-09 09:03 - 2024-12-15 06:58 - 000629728 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-07-09 09:02 - 2024-12-15 06:35 - 000000000 ____D C:\WINDOWS\system32\Drivers\en-GB
2025-07-09 09:02 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-07-09 09:02 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-07-09 09:02 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2025-07-09 09:02 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-07-09 09:02 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-07-09 09:02 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-07-09 09:02 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-07-09 09:02 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-07-09 09:02 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-07-09 09:02 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-07-09 09:02 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\schemas
2025-07-09 09:02 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-07-09 05:11 - 2024-12-15 07:00 - 003384320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-07-09 03:00 - 2024-01-02 19:00 - 000000000 ____D C:\Users\mikoa\OneDrive\Dokumenty\TrackMania
2025-07-07 04:07 - 2023-12-26 06:15 - 000000000 ____D C:\Users\mikoa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2025-07-06 17:05 - 2025-05-03 14:41 - 000004218 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1746276107
2025-07-06 17:05 - 2025-05-03 14:41 - 000001426 _____ C:\Users\mikoa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera GX.lnk
2025-07-04 20:02 - 2023-12-26 01:41 - 000000000 ____D C:\Users\mikoa\AppData\Local\NVIDIA
2025-06-29 17:14 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-06-29 17:14 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-06-29 17:14 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2025-06-29 17:14 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-06-29 17:14 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-06-29 17:14 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-06-29 17:14 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-06-29 17:14 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-06-29 17:14 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-06-29 17:14 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-06-29 17:14 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2025-06-25 21:36 - 2024-02-01 23:56 - 000002256 _____ C:\Users\Public\Desktop\EA.lnk
2025-06-22 03:18 - 2025-04-01 01:18 - 000000000 ____D C:\Users\mikoa\AppData\LocalLow\JutsuGames
==================== Files in the root of some directories ========
2024-08-04 03:44 - 2024-08-04 03:44 - 000000273 _____ () C:\ProgramData\fontcacheev1.dat
2024-02-07 06:02 - 2024-02-07 06:02 - 000004334 _____ () C:\Users\mikoa\AppData\Local\885259240
2024-06-14 04:47 - 2024-06-14 04:50 - 000000084 _____ () C:\Users\mikoa\AppData\Local\Autosofted License.txt
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-07-2025
Ran by mikoa (21-07-2025 14:58:34)
Running from C:\Users\mikoa\Downloads
Microsoft Windows 11 Home Version 24H2 26100.4652 (X64) (2024-12-15 05:01:42)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2161308482-1726367771-1223172082-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2161308482-1726367771-1223172082-503 - Limited - Disabled)
Guest (S-1-5-21-2161308482-1726367771-1223172082-501 - Limited - Disabled)
mikoa (S-1-5-21-2161308482-1726367771-1223172082-1001 - Administrator - Enabled) => C:\Users\mikoa
WDAGUtilityAccount (S-1-5-21-2161308482-1726367771-1223172082-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Panda Dome (Enabled - Up to date) {8404BB29-B609-D604-AF5C-6806F0482FD3}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 25.001.20577 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601110}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.130 - Advanced Micro Devices, Inc.) Hidden
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 5.08.02.027 - Advanced Micro Devices, Inc.)
AMD PCI Driver (HKLM-x32\...\{80EC3CEE-2940-42A1-A776-B5D810D39F1E}) (Version: 1.0.0.90 - Advanced Micro Devices, Inc.) Hidden
AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.24.0.0 - Advanced Micro Devices, Inc.) Hidden
AMD Ryzen Balanced Driver (HKLM-x32\...\{A171D320-C42C-4F3B-A2D8-C6A09F6788CC}) (Version: 8.0.0.13 - Advanced Micro Devices, Inc.) Hidden
AMD SBxxx SMBus Driver (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.38 - Advanced Micro Devices, Inc.) Hidden
AMD_Chipset_Drivers (HKLM-x32\...\{94dc9043-935f-4e10-ac8b-5ce0ac055188}) (Version: 5.08.02.027 - Advanced Micro Devices, Inc.) Hidden
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 138.1.80.122 - Autoři prohlížeče Brave)
Core Epic (HKLM\...\{B51E6DE5-9A25-47E6-9806-24B4C62D42A6}) (Version: 1.3.1.0 - Manticore Games)
Core Epic Installer (HKLM-x32\...\{531451dd-91d4-4b27-a171-1b9c7f325969}) (Version: 1.3.0.0 - Manticore Games) Hidden
Denuvo Anti-Cheat (HKLM\...\Denuvo Anti-Cheat) (Version: 6.7.0.8498 - Denuvo GmbH)
Discord (HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\Discord) (Version: 1.0.9163 - Discord Inc.)
EA app (HKLM\...\{C2622085-ABD2-49E5-8AB9-D3D6A642C091}) (Version: 13.511.0.6024 - Electronic Arts) Hidden
EA app (HKLM-x32\...\{c1fc3f5a-7e4f-46db-9593-1fc94dd7ed86}) (Version: 13.511.0.6024 - Electronic Arts)
Epic Games Launcher (HKLM-x32\...\{B85FAA6E-A9AA-4655-9029-E1A4EDC05E1A}) (Version: 1.3.93.0 - Epic Games, Inc.)
Epic Online Services (HKLM-x32\...\{57A956AB-4BCC-45C6-9B40-957E4E125568}) (Version: 2.0.44.0 - Epic Games, Inc.)
FiveM (HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\CitizenFX_FiveM) (Version: - Cfx.re)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 138.0.7204.158 - Google LLC)
Half-Life 2 + Episode 1 a 2 (CZ Dabing) (HKLM-x32\...\FPD_HL2+E1+E2_is1) (Version: 1.0 - Fénix ProDabing)
Cheat Engine 7.5 (HKLM\...\Cheat Engine_is1) (Version: - Cheat Engine)
Indiana Jones: GC CZ v1.9 (HKLM-x32\...\Indiana Jones: GC CZ) (Version: 1.9 - Squiee)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LibreOffice 25.2.0.3 (HKLM\...\{E38AFCD6-BF08-4ECA-AAFF-D6D57FAC1A3A}) (Version: 25.2.0.3 - The Document Foundation)
Microsoft .NET Host - 6.0.16 (x64) (HKLM\...\{1D0AC7F1-2B34-44AF-91F6-88757D768DA7}) (Version: 48.67.58427 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.15 (x64) (HKLM\...\{4C903F19-B4C3-4D0C-8CC9-D444C511AF1C}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.16 (x64) (HKLM\...\{B8537ACA-B210-4DF5-B928-E41CEB76723D}) (Version: 48.67.58427 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.6 (x64) (HKLM\...\{089493D9-430B-4210-8A47-8F611288F461}) (Version: 48.27.42327 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.15 (x64) (HKLM\...\{11CCC9F6-77AA-4421-9EAC-BAEC36D96817}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.16 (x64) (HKLM\...\{C71E93D2-B8B4-4858-B2A1-4C967DBC1C5F}) (Version: 48.67.58427 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.16 (x64) (HKLM-x32\...\{2a8d0f2b-911b-4b58-8252-46b29e7a4590}) (Version: 6.0.16.32323 - Microsoft Corporation)
Microsoft .NET Runtime - 6.0.6 (x64) (HKLM\...\{00478901-CD97-4A20-8FF3-3276865A2B44}) (Version: 48.27.42327 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.15 (x64) (HKLM\...\{8731E6E3-AF96-4515-ACEC-DBFB3DF55292}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.15 (x64) (HKLM-x32\...\{c40cfd22-dfe6-4ea1-9994-a42d11989e6d}) (Version: 8.0.15.34714 - Microsoft Corporation)
Microsoft 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.18925.20168 - Microsoft Corporation)
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.18925.20168 - Microsoft Corporation)
Microsoft 365 - sk-sk (HKLM\...\O365HomePremRetail - sk-sk) (Version: 16.0.18925.20168 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 138.0.3351.95 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 138.0.3351.95 - Microsoft Corporation) Hidden
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.24.14501 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34433 (HKLM-x32\...\{804e7d66-ccc2-4c12-84ba-476da31d103d}) (Version: 14.42.34433.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.42.34433 (HKLM-x32\...\{e7802eac-3305-4da0-9378-e55d1ed05518}) (Version: 14.42.34433.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34433 (HKLM\...\{E1902FC6-C423-4719-AB8A-AC7B2694B367}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34433 (HKLM\...\{382F1166-A409-4C5B-9B1E-85ED538B8291}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.42.34433 (HKLM-x32\...\{84E3E712-6343-484B-8B6C-9F145F019A70}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.42.34433 (HKLM-x32\...\{C2BB95AA-90F3-4891-81C1-A7E565BB836C}) (Version: 14.42.34433 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.6 (x64) (HKLM\...\{B9E46F95-AC34-4943-AFE2-B72EFD56C6C0}) (Version: 48.27.42342 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.6 (x64) (HKLM-x32\...\{aad3b888-fde2-48c0-95c2-2f7a729283fb}) (Version: 6.0.6.31318 - Microsoft Corporation)
NVIDIA FrameView SDK 1.4.10624.35034762 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.4.10624.35034762 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.28.0.417 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.28.0.417 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.4.3.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.3.2 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 576.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 576.88 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
Odinstalovat překlad (HKLM-x32\...\{A786F192-A558-4EB9-A3DF-8FD5BD05DCEB}}_is1) (Version: 1.03 - Jetro, Coffin Corner, Ralph Shepard)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18925.20168 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18925.20168 - Microsoft Corporation) Hidden
Opera GX Stable 119.0.5497.186 (HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\Opera GX 119.0.5497.186) (Version: 119.0.5497.186 - Opera Software)
Opera Stable 120.0.5543.93 (HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\Opera 120.0.5543.93) (Version: 120.0.5543.93 - Opera Software)
Panda Devices Agent (HKLM-x32\...\{DB0164A2-ADE9-4FEE-B080-D506BDD6427F}) (Version: 1.08.09 - Panda Security) Hidden
Panda Devices Agent (HKLM-x32\...\Panda Devices Agent) (Version: 1.03.09 - Panda Security) Hidden
Panda Dome (HKLM\...\{630F9340-5F88-4B76-85F5-5EBEC8443520}) (Version: 12.12.50 - Panda Security) Hidden
Panda Dome (HKLM-x32\...\Panda Universal Agent Endpoint) (Version: 22.03.02.0000 - Panda Security)
Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 3.0.0.0 - Advanced Micro Devices, Inc.) Hidden
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9381.1 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 11.9.0614.2022 - Realtek)
REDlauncher (HKLM-x32\...\{6C25C853-BFDE-43DB-B5C1-CCCB67BD9533}) (Version: 3.2.1.1 - CD Projekt RED) Hidden
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.102.2423 - Rockstar Games)
Rockstar Games SDK (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.4.0.71 - Rockstar Games)
ROGFontInstaller (HKLM\...\{605108C1-153E-43D8-8A67-7CE326B00ECA}) (Version: 1.0.0 - ASUS)
Satisfactory CZ v1.5 (HKLM-x32\...\Satisfactory CZ) (Version: 1.5 - Squiee)
Satisfactory Mod Manager (HKLM\...\Satisfactory Mod Manager) (Version: 3.0.3 - Satisfactory Modding)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Trust GXT929 HELOX_black (HKLM-x32\...\{51CD6743-D090-495C-9C75-EC227B5B3ED8}_is1) (Version: 1.0 - Trust)
UE4 Prerequisites (x64) (HKLM\...\{1729B0A9-0490-418B-A565-89B4D5BC8F2D}) (Version: 1.2.0.0 - Epic Games, Inc.) Hidden
WeMod (HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\WeMod) (Version: 10.22.1 - WeMod)
WinRAR 7.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.10.0 - win.rar GmbH)
Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-12] ()
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3912.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-12] ()
@{MicrosoftWindows.57074904.InpApp_1000.26100.4484.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57074904.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074904.InpApp_cw5n1h2txyewy [2025-07-09] (Microsoft Windows)
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2025-07-20] ()
Balíček prostředí funkcí systému Windows -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074904.InpApp_cw5n1h2txyewy [2025-07-09] (Microsoft Windows)
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2505.23002.0_x64__8wekyb3d8bbwe [2025-06-18] (Microsoft Corporation) [Startup Task]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-12-15] (Microsoft Corp.)
Microsoft Sonia (Natural) - English (United Kingdom) -> C:\Program Files\WindowsApps\MicrosoftWindows.Voice.en-GB.Sonia.1_1.0.4.0_x64__cw5n1h2txyewy [2025-06-03] (Microsoft Windows)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_55.20610.576.0_x64__8wekyb3d8bbwe [2025-07-01] (Microsoft Corporation)
Minecraft Education -> C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.21.1000.0_x64__8wekyb3d8bbwe [2025-04-24] (Microsoft Studios)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.968.0_x64__56jybvy8sckqj [2025-06-12] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2025-07-20] ()
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2024-12-15] (Realtek Semiconductor Corp)
Speech Pack - English (United Kingdom) -> C:\Program Files\WindowsApps\MicrosoftWindows.Speech.en-GB.1_1.0.14.0_x64__cw5n1h2txyewy [2025-07-01] (Microsoft Windows)
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.268.528.0_x64__zpdnekdrzrea0 [2025-07-17] (Spotify AB) [Startup Task]
The Elder Scrolls IV: Oblivion Remastered -> C:\Program Files\WindowsApps\BethesdaSoftworks.ProjectAltar_1.0.12.0_x64__3275kfvn8vcwc [2025-07-19] (Bethesda Softworks)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2527.2.0_x64__cv1g1gvanyjgm [2025-07-10] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-01-23] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_7000.522.1444.0_x64__8wekyb3d8bbwe [2025-06-26] (Microsoft Corp.)
WinRAR -> C:\Program Files\WinRAR [2025-03-19] (win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2161308482-1726367771-1223172082-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2161308482-1726367771-1223172082-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000}\localserver32 -> "C:\Program Files\Proton\VPN\v3.2.9\ProtonVPN.exe" -ToastActivated => No File
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2025-07-15] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers1: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAShell.dll [2023-01-02] (Panda Security S.L. -> Panda Security, S.L.)
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_08efa4f6500ab001\nvshext.dll [2025-06-25] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAShell.dll [2023-01-02] (Panda Security S.L. -> Panda Security, S.L.)
ContextMenuHandlers6: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAShell.dll [2023-01-02] (Panda Security S.L. -> Panda Security, S.L.)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\mikoa\Desktop\miko - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Default"
ShortcutWithArgument: C:\Users\mikoa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Ella - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\mikoa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\225bb61db2f318c1\Ahola (Práce) - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 3"
==================== Loaded Modules (Whitelisted) =============
2025-07-16 00:44 - 2025-07-16 00:44 - 000030720 _____ (Adobe Systems Inc.) [File not signed] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\cs_cz\Acrobat Elements\ContextMenuShim64.cze
2023-11-22 09:18 - 2023-11-22 09:18 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2023-11-22 09:18 - 2023-11-22 09:18 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
2025-07-17 20:49 - 2025-07-17 20:49 - 002849280 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libcrypto-1_1-x64.dll
2025-07-17 20:49 - 2025-07-17 20:49 - 000685056 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libssl-1_1-x64.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\mikoa\Data aplikací:c15540c89c88cd704ccd25de5f07f873 [394]
AlternateDataStreams: C:\Users\mikoa\AppData\Roaming:c15540c89c88cd704ccd25de5f07f873 [394]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSUAService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PSUAService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2022-05-07 07:24 - 2024-12-20 14:03 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
2024-05-31 02:50 - 2024-05-31 02:50 - 000000433 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.1.1
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
Ethernet 2: AnchorFree TAP-Windows Adapter V9 -> aftap0901.sys
Wi-Fi: Realtek 8821CE Wireless LAN 802.11ac PCI-E NIC -> rtwlane.sys
NNSNAHSL: Network Activity Hook Server LightWeight Filter Driver
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\Control Panel\Desktop\\Wallpaper -> c:\users\mikoa\downloads\pexels-visit-greenland-108649-360912.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\StartupApproved\StartupFolder: => "Poslat do aplikace OneNote.lnk"
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_2D2B6870C9A9D7F35059D3C24C3F4492"
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\StartupApproved\Run: => "EADM"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{2960E17F-389D-453A-B313-9477AF912B35}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7432733B-43FE-417A-96A3-A7676845492D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{B92514C2-C334-4F0F-8B05-3CE8998BF874}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{1A1DE5DD-90C2-4FA6-9118-B13C0D482F66}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C13A687C-E007-484E-B16A-1707330B2A7E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{4BD2F07B-BDB5-4016-BE52-D6694DF8CEA6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{0F0006E3-4E98-4D08-B96D-BD65162A233A}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [{200CF43E-F9E2-4D99-9999-BF1A5BDA6CB5}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [{5892F77F-402A-47DF-B480-12DA8A8C5983}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [{6C9A340C-D4A9-4DAB-8EE5-7967CF3B6AB8}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [UDP Query User{CBFC73BA-0556-44B1-AD95-08CEF8A4879E}C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe] => (Allow) C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{15816BF5-FDB4-4B41-9DA6-D265ADEC92FE}C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe] => (Allow) C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{24C076B5-C080-4D28-A685-80C165431BE5}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{5F8C3521-0797-4287-A401-6578E7E7E7F3}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{D721376C-52AE-4D7F-8E6C-4A04BDF23ED9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Satisfactory\FactoryGameSteam.exe (Coffee Stain Studios AB -> Epic Games, Inc.)
FirewallRules: [{0AD3A7FF-BFAC-4FC0-9553-490C90B297D3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Satisfactory\FactoryGameSteam.exe (Coffee Stain Studios AB -> Epic Games, Inc.)
FirewallRules: [UDP Query User{ED40CA93-672D-4B3E-BBC4-1343DC3F947F}D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [TCP Query User{6866D156-0196-4802-9304-897E207068BD}D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [UDP Query User{B1D1CDAE-D8F4-4D3B-BE6B-5658F39F79AE}C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe => No File
FirewallRules: [TCP Query User{4F3D54FB-C10C-4B25-8D29-CA285FE8DDE7}C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe => No File
FirewallRules: [UDP Query User{4DAC71A1-6DE9-4BCC-9BAF-58EB5D02739F}C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe => No File
FirewallRules: [TCP Query User{E223D10F-2D7F-4BB4-9E82-2810CE190762}C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe => No File
FirewallRules: [{C5BF8890-1B3F-41AA-8389-371B823A07E9}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24193.1905.3048.7590_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E81B2C4E-7A0F-4E00-9D99-A5E70BB2B543}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24193.1905.3048.7590_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C397B059-53F7-4650-9E96-F0DB4A44925F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe => No File
FirewallRules: [{07B637F5-DBF1-40F7-A64F-018B8CFC2466}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe => No File
FirewallRules: [UDP Query User{8216C4D1-4F69-4AD5-AD3E-ED909173E36B}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe => No File
FirewallRules: [TCP Query User{492E87E6-D702-458E-92B2-155CF43B4EB2}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe => No File
FirewallRules: [UDP Query User{2B7E8473-2355-4CBF-B6E5-A6A4B1879FDE}C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe => No File
FirewallRules: [TCP Query User{56463C62-4604-40BA-93D3-D1D59B133F05}C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe => No File
FirewallRules: [{A6B37737-9713-4D3E-B4D5-7C348EF304FB}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Days Gone\BendGame\Binaries\Win64\DaysGone.exe => No File
FirewallRules: [{9F859840-2CA2-4CC0-86CE-5678659A988F}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Days Gone\BendGame\Binaries\Win64\DaysGone.exe => No File
FirewallRules: [UDP Query User{71A37C5B-35AA-4F40-9E86-CAE0AAB27113}C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe] => (Allow) C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe => No File
FirewallRules: [TCP Query User{0EDD6A75-BFBC-4D46-9B6A-00075248C472}C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe] => (Allow) C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe => No File
FirewallRules: [UDP Query User{A387DBD9-E790-4F14-9096-5D3B283BE254}D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe] => (Allow) D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe => No File
FirewallRules: [TCP Query User{0271D40D-FD09-4131-A7A0-5DA1C1098AC6}D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe] => (Allow) D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe => No File
FirewallRules: [UDP Query User{EF3598D1-23CB-43DE-9D19-415D0280BF3A}C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe] => (Allow) C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{0E7D21DF-5958-4ADE-BBAC-E69FE8D484F7}C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe] => (Allow) C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{8FE912E8-0ACE-45E2-A6BA-2CECD525D93D}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [TCP Query User{EC5689BA-1D37-45ED-A475-D5F4A31C8557}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [UDP Query User{F54BF501-71D9-44AF-8B85-F27C750D4C7B}D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe] => (Allow) D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{6DDB137E-7434-44F9-866C-DA06D7A9F4B2}D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe] => (Allow) D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{D2E0B2F1-DB8B-44C7-B40B-6F990B93FF30}D:\hry\rage\fallout\gtav\gta5.exe] => (Allow) D:\hry\rage\fallout\gtav\gta5.exe => No File
FirewallRules: [TCP Query User{F90BBEBB-102F-45D7-A7A1-ABDCEE2B17D5}D:\hry\rage\fallout\gtav\gta5.exe] => (Allow) D:\hry\rage\fallout\gtav\gta5.exe => No File
FirewallRules: [UDP Query User{062A878F-7EB4-4361-898E-DD1A2067DC37}C:\program files (x86)\steam\steamapps\common\trackmania united\tmforever.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\trackmania united\tmforever.exe () [File not signed]
FirewallRules: [TCP Query User{246434BB-F878-41C9-951E-A14A26803EEE}C:\program files (x86)\steam\steamapps\common\trackmania united\tmforever.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\trackmania united\tmforever.exe () [File not signed]
FirewallRules: [UDP Query User{46AE8F54-3B55-46A2-9DD5-54B8DB5B4119}D:\program files (x86)\steam\steamapps\common\satisfactory\engine\binaries\win64\factorygame-win64-shipping.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\satisfactory\engine\binaries\win64\factorygame-win64-shipping.exe => No File
FirewallRules: [TCP Query User{B94AF6D3-4E5A-4472-9E3A-01D287F72594}D:\program files (x86)\steam\steamapps\common\satisfactory\engine\binaries\win64\factorygame-win64-shipping.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\satisfactory\engine\binaries\win64\factorygame-win64-shipping.exe => No File
FirewallRules: [{4CC3FDE0-3C72-47D3-94E3-EB8C62CF8F55}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{40FD6207-0C62-44A1-B3E1-0053642E17F0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{E0942281-4947-4112-8321-27BCB48E7166}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{93591FAA-D9D5-4B3F-A128-4E20517A1883}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [UDP Query User{600CC7C4-3F55-4BFC-830D-A3BB258F6320}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{702B9E7C-6043-41DE-B860-AF5409067207}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{566E62D4-1BC0-4BE9-90A7-35D39A521B80}] => (Allow) C:\Users\mikoa\AppData\Local\Temp\ACFL\ACSetup\ACSetup.exe => No File
FirewallRules: [{8D56E5FC-5B67-4112-B410-9565C1167D5A}] => (Allow) C:\Users\mikoa\AppData\Local\Temp\ACFL\ACSetup\ACSetup.exe => No File
FirewallRules: [{BA6BC5D3-B146-461A-8DA4-57331620C523}] => (Allow) C:\Users\mikoa\AppData\Local\Packages\B9ECED6F.ArmouryCrate_qmba6cd70vzyy\LocalState\GridUpdateFile\ASUSGCDriverUpdateClient.exe => No File
FirewallRules: [TCP Query User{25D49523-D672-4A97-AE99-2B748DC771B4}C:\games\core\gtav\gta5.exe] => (Allow) C:\games\core\gtav\gta5.exe => No File
FirewallRules: [UDP Query User{4F190AF6-4C36-4D5C-940E-056F6741ACC8}C:\games\core\gtav\gta5.exe] => (Allow) C:\games\core\gtav\gta5.exe => No File
FirewallRules: [TCP Query User{8B2ED572-3D90-4BF2-B332-41EA0B6DD138}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{04C15749-215B-401D-AD6D-9146DD2C4E10}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{B307768A-B63F-44B7-BEFD-DE8239010AF1}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [UDP Query User{483EAA90-D6E7-4FB9-BC69-41EECAB2E713}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [TCP Query User{049E600D-19EE-4E55-BD22-E92A584D4E59}C:\games\core\kingdomcomedeliverance2\bin\win64mastermasterepicpgo\kingdomcome.exe] => (Allow) C:\games\core\kingdomcomedeliverance2\bin\win64mastermasterepicpgo\kingdomcome.exe (Warhorse Studios sro) [File not signed]
FirewallRules: [UDP Query User{B7C2B5CF-6726-4E26-8D2A-F7C29809DFF1}C:\games\core\kingdomcomedeliverance2\bin\win64mastermasterepicpgo\kingdomcome.exe] => (Allow) C:\games\core\kingdomcomedeliverance2\bin\win64mastermasterepicpgo\kingdomcome.exe (Warhorse Studios sro) [File not signed]
FirewallRules: [TCP Query User{B6C4AC1D-DD92-4CD6-9ED8-9D71B4E66754}C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe => No File
FirewallRules: [UDP Query User{8E9BE3C6-87EC-480C-AC71-D6D883CC0A41}C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe => No File
FirewallRules: [TCP Query User{A6E3B0B7-79B4-493D-B893-5C039B35D083}C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe => No File
FirewallRules: [UDP Query User{3EB197EA-23D7-4F1E-B027-B18EFC2914CE}C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe => No File
FirewallRules: [TCP Query User{FFF033C2-A7A8-428E-98C8-89341A5F4EB9}C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe] => (Block) C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe => No File
FirewallRules: [UDP Query User{D1E32CEC-7127-4D4A-9747-A689F3E1CCFB}C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe] => (Block) C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe => No File
FirewallRules: [TCP Query User{A8D4518B-76FC-42CE-A30C-1BA00C43BCE4}C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe] => (Allow) C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe => No File
FirewallRules: [UDP Query User{588388E2-70A2-4345-8F88-B63B47A75FA5}C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe] => (Allow) C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe => No File
FirewallRules: [{33E89E03-7030-4CAA-8F39-AF4115F54D80}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rustler\Launcher\Launcher.exe => No File
FirewallRules: [{A4A8F401-73D9-43D1-9D40-7B623422FE4F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rustler\Launcher\Launcher.exe => No File
FirewallRules: [{CA4B7373-FE42-4DF2-BE18-028FE34A9185}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (KRAFTON, Inc. -> KRAFTON, Inc.)
FirewallRules: [{C58A5D4F-CE87-4C27-83BF-AF2C48F8EA08}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (KRAFTON, Inc. -> KRAFTON, Inc.)
FirewallRules: [TCP Query User{E6CDE90A-5CF9-4C9E-8343-663A9BC830F5}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (KRAFTON, Inc. -> KRAFTON, Inc.)
FirewallRules: [UDP Query User{0EA7DC82-512A-44A2-A4B2-90F13C1C61FB}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (KRAFTON, Inc. -> KRAFTON, Inc.)
FirewallRules: [{12FEA17E-43FE-4461-8B3F-B3D6F93BC3A9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Red Dead Redemption 2\PlayRDR2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{E2D374D1-9D56-4D9F-BB19-16A4206B0619}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Red Dead Redemption 2\PlayRDR2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [TCP Query User{5F4F7585-E71A-469E-BA2D-FBF65A418590}C:\program files (x86)\steam\steamapps\common\red dead redemption 2\rdr2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [UDP Query User{C6C1D433-C28A-472A-A7D2-118A812F3565}C:\program files (x86)\steam\steamapps\common\red dead redemption 2\rdr2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{91B2E796-39A0-4E3F-8EF4-D0E9C8124524}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.21.1000.0_x64__8wekyb3d8bbwe\Minecraft.Windows.exe (Microsoft Corporation -> )
FirewallRules: [{2244B45B-0E39-4E70-BE04-E0D432493E42}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.21.1000.0_x64__8wekyb3d8bbwe\Minecraft.Windows.exe (Microsoft Corporation -> )
FirewallRules: [TCP Query User{D854419E-90E7-4D56-9B05-A8554156B627}C:\users\mikoa\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\mikoa\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{081C31E9-708F-446A-8957-C50B6FD9206A}C:\users\mikoa\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\mikoa\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{99B9E276-35C4-468B-935B-09F9C3BCB845}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sniper Ghost Warrior\Sniper_x86.exe (City Interactive) [File not signed]
FirewallRules: [{3E8428C9-899B-4867-A37A-43E1E8AC12C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sniper Ghost Warrior\Sniper_x86.exe (City Interactive) [File not signed]
FirewallRules: [{02AC0609-0122-4281-8FDD-A5C3FCDDAFC7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Detroit Become Human\DetroitBecomeHuman.exe () [File not signed]
FirewallRules: [{A4DCFBDE-AA7F-49B0-BBA2-1EB152C1707A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Detroit Become Human\DetroitBecomeHuman.exe () [File not signed]
FirewallRules: [{2BFCCFA5-60D0-460B-810D-2074E39A8B0E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\911 Operator\911.exe () [File not signed]
FirewallRules: [{6A8FB42F-90E4-4614-B01D-7A0658DF67C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\911 Operator\911.exe () [File not signed]
FirewallRules: [{96274877-F885-4522-B3F4-587DF39D8F4D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\911 Operator\CallEditor.exe () [File not signed]
FirewallRules: [{EF38B491-5BD3-429C-AAA2-D9E52D2B4B7A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\911 Operator\CallEditor.exe () [File not signed]
FirewallRules: [{C6C88024-16AA-49D4-A997-A37ACC064E78}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher 3\REDprelauncher.exe (GOG sp. z o.o -> GOG.com)
FirewallRules: [{CF40F9D4-430C-445B-9CCC-F4A9365DC89F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher 3\REDprelauncher.exe (GOG sp. z o.o -> GOG.com)
FirewallRules: [{30DB01E8-B080-4165-A660-35A447A601CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\eFootball\eFootball\Binaries\Win64\eFootball.exe (Konami Digital Entertainment Co., Ltd.) [File not signed]
FirewallRules: [{1CE1B029-DF90-4167-9BEB-14A9025CF124}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\eFootball\eFootball\Binaries\Win64\eFootball.exe (Konami Digital Entertainment Co., Ltd.) [File not signed]
FirewallRules: [{D7413C18-4EDF-47EE-9F75-E1B3DB1D7EA4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EDA211C1-CAD9-46DD-844A-18B22C37F120}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [{48C53008-81A2-4BF9-9F83-2B14447A64C3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.268.528.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{7DEE2502-BF10-46C6-A8E8-141097683196}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.268.528.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{18893990-BAB6-4AB0-BE8A-1374E9564DBA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.268.528.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{F609DD06-2A3C-4C1E-BAEC-C62985EAEF92}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.268.528.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{66200B87-6B65-4B3C-89A5-B0670686FAC5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.268.528.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{42FE5453-5D16-4622-B4EE-AC92B764B80C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.268.528.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{19BC7224-B940-49B2-9018-C03AE15B6095}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.268.528.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{8913A81E-C0C1-43CB-A960-7E306980E16D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.268.528.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{B743F7C8-29C5-496A-8096-7C9EED67D574}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.268.528.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{C254C467-72DF-4295-B07B-569AC720DD12}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.268.528.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{B4D4014D-A2E5-4CF2-83ED-EBEC964B1868}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{2F206FC9-5F16-47D6-B0AF-E35EF2CAE3BB}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{7A274A52-1E7A-43AD-9B9C-9E82F8B78E51}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{A130D137-52E8-4DBD-B78A-D623CFCDB476}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{34771A6B-1DA3-4C19-BD89-5497B8BE2F3D}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{88F6C14A-8201-4FC2-9057-8F9C5A67C141}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{FF246801-6C6D-4261-BFC6-16BBA06A50A7}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{622FE95A-63BD-4343-87BD-AD96D415EFB0}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{5A2BE5AD-5B66-49AD-BC4A-D49BA1FCADEE}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{F7BB6ACC-1C55-4BC0-BECE-2FFC1B982D07}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{95B0EA77-69A6-4710-8882-FB58F5F36154}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALaunchHelper.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{FC27CA8C-0B4D-4BBA-BF20-A3DBC3418192}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{0BCD480E-A7D4-4609-8D85-B7387E98377C}C:\xboxgames\the elder scrolls iv- oblivion remastered\content\oblivionremastered\binaries\wingdk\oblivionremastered-wingdk-shipping.exe] => (Allow) C:\xboxgames\the elder scrolls iv- oblivion remastered\content\oblivionremastered\binaries\wingdk\oblivionremastered-wingdk-shipping.exe (Access Denied) [File not signed?]
FirewallRules: [UDP Query User{9A42EC4D-E565-48BE-BB2A-76C7263E4ED3}C:\xboxgames\the elder scrolls iv- oblivion remastered\content\oblivionremastered\binaries\wingdk\oblivionremastered-wingdk-shipping.exe] => (Allow) C:\xboxgames\the elder scrolls iv- oblivion remastered\content\oblivionremastered\binaries\wingdk\oblivionremastered-wingdk-shipping.exe (Access Denied) [File not signed?]
==================== Restore Points =========================
18-07-2025 17:52:15 Windows Update
18-07-2025 17:52:15 Windows Update
18-07-2025 17:52:28 Windows Update
==================== Faulty Device Manager Devices ============
Name: Řadič Serial ATA
Description: Řadič Serial ATA
Class Guid: {4d36e96a-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard system devices)
Service:
Problem: : Reinstall the drivers for this device. (Code 18)
Resolution: The drivers for this device must be reinstalled.
Click "Update Driver", which starts the Hardware Update wizard.
Alternately, uninstall the driver, and then click "Scan for hardware changes" to reload the drivers.
==================== Event log errors: ========================
Application errors:
==================
Error: (07/20/2025 09:27:04 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: MIKOA)
Description: Aplikaci nebo službu Microsoft Office SDX Helper nelze ukončit.
Error: (07/19/2025 11:43:53 AM) (Source: Application Error) (EventID: 1000) (User: MIKOA)
Description: Název chybující aplikace: OblivionRemastered-WinGDK-Shipping.exe, verze: 5.3.2.0, časové razítko: 0x00000000
Název chybujícího modulu: CELib_x64.dll, verze: 6.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000000beae
ID chybujícího procesu: 0x18e4
Čas spuštění chybující aplikace: 0x1dbf88c77482d52
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\BethesdaSoftworks.ProjectAltar_1.0.12.0_x64__3275kfvn8vcwc\OblivionRemastered\Binaries\WinGDK\OblivionRemastered-WinGDK-Shipping.exe
Cesta k chybujícímu modulu: C:\Users\mikoa\AppData\Local\WeMod\app-10.19.1\resources\app.asar.unpacked\static\unpacked\trainerlib\CELib_x64.dll
ID sestavy: 7cbd7a4a-67af-48a7-8cb7-da5bbad9f78c
Celý název chybujícího balíčku: BethesdaSoftworks.ProjectAltar_1.0.12.0_x64__3275kfvn8vcwc
ID chybující aplikace relativní vzhledem k balíčku: AppUEGameShipping
Error: (07/19/2025 11:06:51 AM) (Source: Application Error) (EventID: 1000) (User: MIKOA)
Description: Název chybující aplikace: XboxPcTray.exe, verze: 2507.1001.9.0, časové razítko: 0x686f2780
Název chybujícího modulu: XboxPcTray.exe, verze: 2507.1001.9.0, časové razítko: 0x686f2780
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000012ed8e
ID chybujícího procesu: 0x352c
Čas spuštění chybující aplikace: 0x1dbf88c77336ce8
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\Microsoft.GamingApp_2507.1001.9.0_x64__8wekyb3d8bbwe\XboxPcTray.exe
Cesta k chybujícímu modulu: C:\Program Files\WindowsApps\Microsoft.GamingApp_2507.1001.9.0_x64__8wekyb3d8bbwe\XboxPcTray.exe
ID sestavy: ae2aa579-8fb2-41c5-bb7e-b1c115c1170f
Celý název chybujícího balíčku: Microsoft.GamingApp_2507.1001.9.0_x64__8wekyb3d8bbwe
ID chybující aplikace relativní vzhledem k balíčku: Microsoft.Xbox.App
Error: (07/19/2025 10:53:56 AM) (Source: Application Error) (EventID: 1000) (User: MIKOA)
Description: Název chybující aplikace: XboxPcTray.exe, verze: 2507.1001.9.0, časové razítko: 0x686f2780
Název chybujícího modulu: XboxPcTray.exe, verze: 2507.1001.9.0, časové razítko: 0x686f2780
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000012ed8e
ID chybujícího procesu: 0x4f84
Čas spuštění chybující aplikace: 0x1dbf88aa914a8a8
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\Microsoft.GamingApp_2507.1001.9.0_x64__8wekyb3d8bbwe\XboxPcTray.exe
Cesta k chybujícímu modulu: C:\Program Files\WindowsApps\Microsoft.GamingApp_2507.1001.9.0_x64__8wekyb3d8bbwe\XboxPcTray.exe
ID sestavy: 325d15a5-44a2-4ac1-a4fb-7bb3b5a4d6b0
Celý název chybujícího balíčku: Microsoft.GamingApp_2507.1001.9.0_x64__8wekyb3d8bbwe
ID chybující aplikace relativní vzhledem k balíčku: Microsoft.Xbox.App
Error: (07/18/2025 10:45:11 AM) (Source: Application Error) (EventID: 1000) (User: MIKOA)
Description: Název chybující aplikace: EdgeGameAssist.exe, verze: 0.0.0.0, časové razítko: 0x682f8651
Název chybujícího modulu: Windows.UI.Xaml.dll, verze: 10.0.26100.4652, časové razítko: 0x3fd78c5a
Kód výjimky: 0xc000027b
Posun chyby: 0x000000000010c271
ID chybujícího procesu: 0x4b28
Čas spuštění chybující aplikace: 0x1dbf42fd69a7aa4
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.3336.0_x64__8wekyb3d8bbwe\EdgeGameAssist.exe
Cesta k chybujícímu modulu: C:\Windows\System32\Windows.UI.Xaml.dll
ID sestavy: ed4143b3-840f-4ab9-92a8-ae185032b7ee
Celý název chybujícího balíčku: Microsoft.Edge.GameAssist_1.0.3336.0_x64__8wekyb3d8bbwe
ID chybující aplikace relativní vzhledem k balíčku: App
Error: (07/14/2025 05:33:37 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: Verze 0.0.0.0 programu WhatsApp.exe ukončila interakci se systémem Windows a byla ukončena. Pokud chcete zjistit, zda jsou k dispozici další informace o problému, zkontrolujte historii problémů v ovládacím panelu Zabezpečení a údržba.
Error: (07/13/2025 11:10:22 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (07/12/2025 11:12:11 PM) (Source: Application Error) (EventID: 1000) (User: MIKOA)
Description: Název chybující aplikace: XboxPcAppFT.exe, verze: 2506.1001.20.0, časové razítko: 0x6848db42
Název chybujícího modulu: ntdll.dll, verze: 10.0.26100.4652, časové razítko: 0x6c6bd922
Kód výjimky: 0xc000070a
Posun chyby: 0x0000000000083214
ID chybujícího procesu: 0x603c
Čas spuštění chybující aplikace: 0x1dbf36a5b31d7d5
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\Microsoft.GamingApp_2506.1001.20.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID sestavy: e511a9da-2320-4c43-9c0e-c7b791adfb5d
Celý název chybujícího balíčku: Microsoft.GamingApp_2506.1001.20.0_x64__8wekyb3d8bbwe
ID chybující aplikace relativní vzhledem k balíčku: Microsoft.Xbox.App
System errors:
=============
Error: (07/21/2025 02:31:30 PM) (Source: DCOM) (EventID: 10029) (User: MIKOA)
Description: U aktivace identifikátoru CLSID Windows.Media.Capture.Internal.AppCaptureShell vypršel časový limit během čekání na zastavení služby BcastDVRUserService_7a140.
Error: (07/21/2025 02:25:41 PM) (Source: DCOM) (EventID: 10029) (User: MIKOA)
Description: U aktivace identifikátoru CLSID Windows.Media.Capture.Internal.AppCaptureShell vypršel časový limit během čekání na zastavení služby BcastDVRUserService_7a140.
Error: (07/21/2025 02:02:30 PM) (Source: DCOM) (EventID: 10029) (User: MIKOA)
Description: U aktivace identifikátoru CLSID Windows.Media.Capture.Internal.AppCaptureShell vypršel časový limit během čekání na zastavení služby BcastDVRUserService_7a140.
Error: (07/21/2025 01:58:29 PM) (Source: DCOM) (EventID: 10029) (User: MIKOA)
Description: U aktivace identifikátoru CLSID Windows.Media.Capture.Internal.AppCaptureShell vypršel časový limit během čekání na zastavení služby BcastDVRUserService_7a140.
Error: (07/21/2025 01:45:15 PM) (Source: DCOM) (EventID: 10029) (User: MIKOA)
Description: U aktivace identifikátoru CLSID Windows.Media.Capture.Internal.AppCaptureShell vypršel časový limit během čekání na zastavení služby BcastDVRUserService_7a140.
Error: (07/21/2025 01:30:49 PM) (Source: DCOM) (EventID: 10029) (User: MIKOA)
Description: U aktivace identifikátoru CLSID Windows.Media.Capture.AppCaptureManager vypršel časový limit během čekání na zastavení služby BcastDVRUserService_7a140.
Error: (07/21/2025 01:26:47 PM) (Source: DCOM) (EventID: 10029) (User: MIKOA)
Description: U aktivace identifikátoru CLSID Windows.Media.Capture.Internal.AppCaptureShell vypršel časový limit během čekání na zastavení služby BcastDVRUserService_7a140.
Error: (07/21/2025 01:22:46 PM) (Source: DCOM) (EventID: 10029) (User: MIKOA)
Description: U aktivace identifikátoru CLSID Windows.Media.Capture.AppCaptureManager vypršel časový limit během čekání na zastavení služby BcastDVRUserService_7a140.
Windows Defender:
================
Date: 2025-05-10 07:58:12
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-05-08 07:11:49
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-05-06 07:01:17
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-05-05 07:01:16
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-05-04 09:38:52
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
CodeIntegrity:
===============
Date: 2025-07-21 14:49:00
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Panda Security\Panda Security Protection\x64\PSINOAV.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. 3403 09/20/2023
Motherboard: ASUSTeK COMPUTER INC. TUF GAMING A520M-PLUS WIFI
Processor: AMD Ryzen 5 5500
Percentage of memory in use: 64%
Total physical RAM: 16175.26 MB
Available physical RAM: 5709 MB
Total Virtual: 28300.93 MB
Available Virtual: 9588.07 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:930.23 GB) (Free:160.99 GB) (Model: KINGSTON SNV2S1000G) NTFS
Drive d: (Elements) (Fixed) (Total:931.48 GB) (Free:925.74 GB) (Model: WD Elements 25A2 USB Device) NTFS
\\?\Volume{0825ce4a-4515-4e90-8464-08e573addd5e}\ (Recovery tools) (Fixed) (Total:1 GB) (Free:0.42 GB) NTFS
\\?\Volume{32f87435-d4cd-47df-9c12-554f5bde6c35}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 0148B491)
Partition: GPT.
==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 16F2A91F)
Partition: GPT.
==================== End of Addition.txt =======================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Jen preventivni kontrola
Moderátor: Moderátoři
Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Jen preventivni kontrola
Vim ze nic nevim.
-
Rudy
- Site Admin
- Příspěvky: 119483
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Jen preventivni kontrola
Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:
Otevřte poznámkový blok a zkopírujte do něj:
Uložte do C:\Users\mikoa\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\Run: [] => [X]
Task: {008CA05D-5CB3-4A4A-8960-7C59BFFB669F} - no filepath. <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - \Microsoft\Windows\Location\Notifications -> No File <==== ATTENTION
Task: {0FEA63EB-603B-47C4-B703-A41CB107ACF2} - no filepath. <==== ATTENTION
Task: {111BA509-2A82-4884-99E3-F886AE4D6284} - no filepath. <==== ATTENTION
Task: {12D757C8-8C63-425A-B598-8BA304AA145F} - no filepath. <==== ATTENTION
Task: {224B5003-08BE-4AE5-83EB-97CF9EAE944A} - no filepath. <==== ATTENTION
Task: {304A3D37-85D3-4BAE-A367-E1E73B2DD4D9} - no filepath. <==== ATTENTION
Task: {641493E6-3968-4444-9D65-B6246895087D} - \Microsoft\Windows\Windows Media Sharing\UpdateLibrary -> No File <==== ATTENTION
Task: {64C1DD41-99E9-4ACF-A979-65C01D4B45EC} - no filepath. <==== ATTENTION
Task: {706E5975-5AE3-4FC0-9FA3-17601822DE64} - no filepath. <==== ATTENTION
Task: {76BDF487-DB81-45B2-8D85-7BE3A77647B9} - \Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask -> No File <==== ATTENTION
Task: {8C3448DB-3DEB-4DDC-8C2B-2CEFCA6B9A6B} - no filepath. <==== ATTENTION
Task: {998AB667-0AE6-435A-92C5-B03E4536D80C} - no filepath. <==== ATTENTION
Task: {BD77BB84-7FFA-4686-9D76-F8FC55C41C5A} - no filepath. <==== ATTENTION
Task: {BE719ACF-5BB7-44A1-AE3F-A82F13D45D47} - no filepath. <==== ATTENTION
Task: {C03132B5-43BF-4204-8C45-38EC29AFE7F7} - no filepath. <==== ATTENTION
Task: {E7AA15AC-0893-4795-9483-98AE4CA08147} - no filepath. <==== ATTENTION
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - no filepath. <==== ATTENTION
S3 cpuz158; \??\C:\WINDOWS\temp\cpuz158\cpuz158_x64.sys [X] <==== ATTENTION
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
CustomCLSID: HKU\S-1-5-21-2161308482-1726367771-1223172082-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000}\localserver32 -> "C:\Program Files\Proton\VPN\v3.2.9\ProtonVPN.exe" -ToastActivated => No File
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
AlternateDataStreams: C:\Users\mikoa\Data aplikací:c15540c89c88cd704ccd25de5f07f873 [394]
AlternateDataStreams: C:\Users\mikoa\AppData\Roaming:c15540c89c88cd704ccd25de5f07f873 [394]
FirewallRules: [{0F0006E3-4E98-4D08-B96D-BD65162A233A}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [{200CF43E-F9E2-4D99-9999-BF1A5BDA6CB5}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [{5892F77F-402A-47DF-B480-12DA8A8C5983}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [{6C9A340C-D4A9-4DAB-8EE5-7967CF3B6AB8}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [UDP Query User{CBFC73BA-0556-44B1-AD95-08CEF8A4879E}C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe] => (Allow) C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{15816BF5-FDB4-4B41-9DA6-D265ADEC92FE}C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe] => (Allow) C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{ED40CA93-672D-4B3E-BBC4-1343DC3F947F}D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [TCP Query User{6866D156-0196-4802-9304-897E207068BD}D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [UDP Query User{B1D1CDAE-D8F4-4D3B-BE6B-5658F39F79AE}C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe => No File
FirewallRules: [TCP Query User{4F3D54FB-C10C-4B25-8D29-CA285FE8DDE7}C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe => No File
FirewallRules: [UDP Query User{4DAC71A1-6DE9-4BCC-9BAF-58EB5D02739F}C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe => No File
FirewallRules: [TCP Query User{E223D10F-2D7F-4BB4-9E82-2810CE190762}C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe => No File
FirewallRules: [{C397B059-53F7-4650-9E96-F0DB4A44925F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe => No File
FirewallRules: [{07B637F5-DBF1-40F7-A64F-018B8CFC2466}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe => No File
FirewallRules: [UDP Query User{8216C4D1-4F69-4AD5-AD3E-ED909173E36B}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe => No File
FirewallRules: [TCP Query User{492E87E6-D702-458E-92B2-155CF43B4EB2}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe => No File
FirewallRules: [UDP Query User{2B7E8473-2355-4CBF-B6E5-A6A4B1879FDE}C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe => No File
FirewallRules: [TCP Query User{56463C62-4604-40BA-93D3-D1D59B133F05}C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe => No File
FirewallRules: [{A6B37737-9713-4D3E-B4D5-7C348EF304FB}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Days Gone\BendGame\Binaries\Win64\DaysGone.exe => No File
FirewallRules: [{9F859840-2CA2-4CC0-86CE-5678659A988F}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Days Gone\BendGame\Binaries\Win64\DaysGone.exe => No File
FirewallRules: [UDP Query User{71A37C5B-35AA-4F40-9E86-CAE0AAB27113}C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe] => (Allow) C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe => No File
FirewallRules: [TCP Query User{0EDD6A75-BFBC-4D46-9B6A-00075248C472}C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe] => (Allow) C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe => No File
FirewallRules: [UDP Query User{A387DBD9-E790-4F14-9096-5D3B283BE254}D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe] => (Allow) D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe => No File
FirewallRules: [TCP Query User{0271D40D-FD09-4131-A7A0-5DA1C1098AC6}D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe] => (Allow) D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe => No File
FirewallRules: [UDP Query User{EF3598D1-23CB-43DE-9D19-415D0280BF3A}C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe] => (Allow) C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{0E7D21DF-5958-4ADE-BBAC-E69FE8D484F7}C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe] => (Allow) C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{8FE912E8-0ACE-45E2-A6BA-2CECD525D93D}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [TCP Query User{EC5689BA-1D37-45ED-A475-D5F4A31C8557}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [UDP Query User{F54BF501-71D9-44AF-8B85-F27C750D4C7B}D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe] => (Allow) D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{6DDB137E-7434-44F9-866C-DA06D7A9F4B2}D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe] => (Allow) D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{D2E0B2F1-DB8B-44C7-B40B-6F990B93FF30}D:\hry\rage\fallout\gtav\gta5.exe] => (Allow) D:\hry\rage\fallout\gtav\gta5.exe => No File
FirewallRules: [TCP Query User{F90BBEBB-102F-45D7-A7A1-ABDCEE2B17D5}D:\hry\rage\fallout\gtav\gta5.exe] => (Allow) D:\hry\rage\fallout\gtav\gta5.exe => No File
FirewallRules: [{566E62D4-1BC0-4BE9-90A7-35D39A521B80}] => (Allow) C:\Users\mikoa\AppData\Local\Temp\ACFL\ACSetup\ACSetup.exe => No File
FirewallRules: [{8D56E5FC-5B67-4112-B410-9565C1167D5A}] => (Allow) C:\Users\mikoa\AppData\Local\Temp\ACFL\ACSetup\ACSetup.exe => No File
FirewallRules: [{BA6BC5D3-B146-461A-8DA4-57331620C523}] => (Allow) C:\Users\mikoa\AppData\Local\Packages\B9ECED6F.ArmouryCrate_qmba6cd70vzyy\LocalState\GridUpdateFile\ASUSGCDriverUpdateClient.exe => No File
FirewallRules: [TCP Query User{25D49523-D672-4A97-AE99-2B748DC771B4}C:\games\core\gtav\gta5.exe] => (Allow) C:\games\core\gtav\gta5.exe => No File
FirewallRules: [UDP Query User{4F190AF6-4C36-4D5C-940E-056F6741ACC8}C:\games\core\gtav\gta5.exe] => (Allow) C:\games\core\gtav\gta5.exe => No File
FirewallRules: [TCP Query User{8B2ED572-3D90-4BF2-B332-41EA0B6DD138}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{04C15749-215B-401D-AD6D-9146DD2C4E10}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{B307768A-B63F-44B7-BEFD-DE8239010AF1}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [UDP Query User{483EAA90-D6E7-4FB9-BC69-41EECAB2E713}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [TCP Query User{8B2ED572-3D90-4BF2-B332-41EA0B6DD138}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{04C15749-215B-401D-AD6D-9146DD2C4E10}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{B307768A-B63F-44B7-BEFD-DE8239010AF1}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [UDP Query User{483EAA90-D6E7-4FB9-BC69-41EECAB2E713}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [TCP Query User{B6C4AC1D-DD92-4CD6-9ED8-9D71B4E66754}C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe => No File
FirewallRules: [UDP Query User{8E9BE3C6-87EC-480C-AC71-D6D883CC0A41}C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe => No File
FirewallRules: [TCP Query User{A6E3B0B7-79B4-493D-B893-5C039B35D083}C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe => No File
FirewallRules: [UDP Query User{3EB197EA-23D7-4F1E-B027-B18EFC2914CE}C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe => No File
FirewallRules: [TCP Query User{FFF033C2-A7A8-428E-98C8-89341A5F4EB9}C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe] => (Block) C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe => No File
FirewallRules: [UDP Query User{D1E32CEC-7127-4D4A-9747-A689F3E1CCFB}C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe] => (Block) C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe => No File
FirewallRules: [TCP Query User{A8D4518B-76FC-42CE-A30C-1BA00C43BCE4}C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe] => (Allow) C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe => No File
FirewallRules: [UDP Query User{588388E2-70A2-4345-8F88-B63B47A75FA5}C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe] => (Allow) C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe => No File
FirewallRules: [{33E89E03-7030-4CAA-8F39-AF4115F54D80}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rustler\Launcher\Launcher.exe => No File
FirewallRules: [{A4A8F401-73D9-43D1-9D40-7B623422FE4F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rustler\Launcher\Launcher.exe => No File
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Jen preventivni kontrola
Vše udelano zasilam Log
Fix result of Farbar Recovery Scan Tool (x64) Version: 17-07-2025
Ran by mikoa (21-07-2025 16:10:35) Run:1
Running from C:\Users\mikoa\Downloads
Loaded Profiles: mikoa
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\Run: [] => [X]
Task: {008CA05D-5CB3-4A4A-8960-7C59BFFB669F} - no filepath. <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - \Microsoft\Windows\Location\Notifications -> No File <==== ATTENTION
Task: {0FEA63EB-603B-47C4-B703-A41CB107ACF2} - no filepath. <==== ATTENTION
Task: {111BA509-2A82-4884-99E3-F886AE4D6284} - no filepath. <==== ATTENTION
Task: {12D757C8-8C63-425A-B598-8BA304AA145F} - no filepath. <==== ATTENTION
Task: {224B5003-08BE-4AE5-83EB-97CF9EAE944A} - no filepath. <==== ATTENTION
Task: {304A3D37-85D3-4BAE-A367-E1E73B2DD4D9} - no filepath. <==== ATTENTION
Task: {641493E6-3968-4444-9D65-B6246895087D} - \Microsoft\Windows\Windows Media Sharing\UpdateLibrary -> No File <==== ATTENTION
Task: {64C1DD41-99E9-4ACF-A979-65C01D4B45EC} - no filepath. <==== ATTENTION
Task: {706E5975-5AE3-4FC0-9FA3-17601822DE64} - no filepath. <==== ATTENTION
Task: {76BDF487-DB81-45B2-8D85-7BE3A77647B9} - \Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask -> No File <==== ATTENTION
Task: {8C3448DB-3DEB-4DDC-8C2B-2CEFCA6B9A6B} - no filepath. <==== ATTENTION
Task: {998AB667-0AE6-435A-92C5-B03E4536D80C} - no filepath. <==== ATTENTION
Task: {BD77BB84-7FFA-4686-9D76-F8FC55C41C5A} - no filepath. <==== ATTENTION
Task: {BE719ACF-5BB7-44A1-AE3F-A82F13D45D47} - no filepath. <==== ATTENTION
Task: {C03132B5-43BF-4204-8C45-38EC29AFE7F7} - no filepath. <==== ATTENTION
Task: {E7AA15AC-0893-4795-9483-98AE4CA08147} - no filepath. <==== ATTENTION
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - no filepath. <==== ATTENTION
S3 cpuz158; \??\C:\WINDOWS\temp\cpuz158\cpuz158_x64.sys [X] <==== ATTENTION
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
CustomCLSID: HKU\S-1-5-21-2161308482-1726367771-1223172082-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000}\localserver32 -> "C:\Program Files\Proton\VPN\v3.2.9\ProtonVPN.exe" -ToastActivated => No File
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
AlternateDataStreams: C:\Users\mikoa\Data aplikací:c15540c89c88cd704ccd25de5f07f873 [394]
AlternateDataStreams: C:\Users\mikoa\AppData\Roaming:c15540c89c88cd704ccd25de5f07f873 [394]
FirewallRules: [{0F0006E3-4E98-4D08-B96D-BD65162A233A}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [{200CF43E-F9E2-4D99-9999-BF1A5BDA6CB5}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [{5892F77F-402A-47DF-B480-12DA8A8C5983}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [{6C9A340C-D4A9-4DAB-8EE5-7967CF3B6AB8}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [UDP Query User{CBFC73BA-0556-44B1-AD95-08CEF8A4879E}C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe] => (Allow) C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{15816BF5-FDB4-4B41-9DA6-D265ADEC92FE}C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe] => (Allow) C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{ED40CA93-672D-4B3E-BBC4-1343DC3F947F}D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [TCP Query User{6866D156-0196-4802-9304-897E207068BD}D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [UDP Query User{B1D1CDAE-D8F4-4D3B-BE6B-5658F39F79AE}C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe => No File
FirewallRules: [TCP Query User{4F3D54FB-C10C-4B25-8D29-CA285FE8DDE7}C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe => No File
FirewallRules: [UDP Query User{4DAC71A1-6DE9-4BCC-9BAF-58EB5D02739F}C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe => No File
FirewallRules: [TCP Query User{E223D10F-2D7F-4BB4-9E82-2810CE190762}C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe => No File
FirewallRules: [{C397B059-53F7-4650-9E96-F0DB4A44925F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe => No File
FirewallRules: [{07B637F5-DBF1-40F7-A64F-018B8CFC2466}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe => No File
FirewallRules: [UDP Query User{8216C4D1-4F69-4AD5-AD3E-ED909173E36B}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe => No File
FirewallRules: [TCP Query User{492E87E6-D702-458E-92B2-155CF43B4EB2}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe => No File
FirewallRules: [UDP Query User{2B7E8473-2355-4CBF-B6E5-A6A4B1879FDE}C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe => No File
FirewallRules: [TCP Query User{56463C62-4604-40BA-93D3-D1D59B133F05}C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe => No File
FirewallRules: [{A6B37737-9713-4D3E-B4D5-7C348EF304FB}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Days Gone\BendGame\Binaries\Win64\DaysGone.exe => No File
FirewallRules: [{9F859840-2CA2-4CC0-86CE-5678659A988F}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Days Gone\BendGame\Binaries\Win64\DaysGone.exe => No File
FirewallRules: [UDP Query User{71A37C5B-35AA-4F40-9E86-CAE0AAB27113}C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe] => (Allow) C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe => No File
FirewallRules: [TCP Query User{0EDD6A75-BFBC-4D46-9B6A-00075248C472}C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe] => (Allow) C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe => No File
FirewallRules: [UDP Query User{A387DBD9-E790-4F14-9096-5D3B283BE254}D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe] => (Allow) D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe => No File
FirewallRules: [TCP Query User{0271D40D-FD09-4131-A7A0-5DA1C1098AC6}D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe] => (Allow) D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe => No File
FirewallRules: [UDP Query User{EF3598D1-23CB-43DE-9D19-415D0280BF3A}C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe] => (Allow) C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{0E7D21DF-5958-4ADE-BBAC-E69FE8D484F7}C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe] => (Allow) C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{8FE912E8-0ACE-45E2-A6BA-2CECD525D93D}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [TCP Query User{EC5689BA-1D37-45ED-A475-D5F4A31C8557}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [UDP Query User{F54BF501-71D9-44AF-8B85-F27C750D4C7B}D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe] => (Allow) D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{6DDB137E-7434-44F9-866C-DA06D7A9F4B2}D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe] => (Allow) D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{D2E0B2F1-DB8B-44C7-B40B-6F990B93FF30}D:\hry\rage\fallout\gtav\gta5.exe] => (Allow) D:\hry\rage\fallout\gtav\gta5.exe => No File
FirewallRules: [TCP Query User{F90BBEBB-102F-45D7-A7A1-ABDCEE2B17D5}D:\hry\rage\fallout\gtav\gta5.exe] => (Allow) D:\hry\rage\fallout\gtav\gta5.exe => No File
FirewallRules: [{566E62D4-1BC0-4BE9-90A7-35D39A521B80}] => (Allow) C:\Users\mikoa\AppData\Local\Temp\ACFL\ACSetup\ACSetup.exe => No File
FirewallRules: [{8D56E5FC-5B67-4112-B410-9565C1167D5A}] => (Allow) C:\Users\mikoa\AppData\Local\Temp\ACFL\ACSetup\ACSetup.exe => No File
FirewallRules: [{BA6BC5D3-B146-461A-8DA4-57331620C523}] => (Allow) C:\Users\mikoa\AppData\Local\Packages\B9ECED6F.ArmouryCrate_qmba6cd70vzyy\LocalState\GridUpdateFile\ASUSGCDriverUpdateClient.exe => No File
FirewallRules: [TCP Query User{25D49523-D672-4A97-AE99-2B748DC771B4}C:\games\core\gtav\gta5.exe] => (Allow) C:\games\core\gtav\gta5.exe => No File
FirewallRules: [UDP Query User{4F190AF6-4C36-4D5C-940E-056F6741ACC8}C:\games\core\gtav\gta5.exe] => (Allow) C:\games\core\gtav\gta5.exe => No File
FirewallRules: [TCP Query User{8B2ED572-3D90-4BF2-B332-41EA0B6DD138}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{04C15749-215B-401D-AD6D-9146DD2C4E10}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{B307768A-B63F-44B7-BEFD-DE8239010AF1}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [UDP Query User{483EAA90-D6E7-4FB9-BC69-41EECAB2E713}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [TCP Query User{8B2ED572-3D90-4BF2-B332-41EA0B6DD138}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{04C15749-215B-401D-AD6D-9146DD2C4E10}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{B307768A-B63F-44B7-BEFD-DE8239010AF1}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [UDP Query User{483EAA90-D6E7-4FB9-BC69-41EECAB2E713}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [TCP Query User{B6C4AC1D-DD92-4CD6-9ED8-9D71B4E66754}C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe => No File
FirewallRules: [UDP Query User{8E9BE3C6-87EC-480C-AC71-D6D883CC0A41}C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe => No File
FirewallRules: [TCP Query User{A6E3B0B7-79B4-493D-B893-5C039B35D083}C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe => No File
FirewallRules: [UDP Query User{3EB197EA-23D7-4F1E-B027-B18EFC2914CE}C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe => No File
FirewallRules: [TCP Query User{FFF033C2-A7A8-428E-98C8-89341A5F4EB9}C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe] => (Block) C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe => No File
FirewallRules: [UDP Query User{D1E32CEC-7127-4D4A-9747-A689F3E1CCFB}C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe] => (Block) C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe => No File
FirewallRules: [TCP Query User{A8D4518B-76FC-42CE-A30C-1BA00C43BCE4}C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe] => (Allow) C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe => No File
FirewallRules: [UDP Query User{588388E2-70A2-4345-8F88-B63B47A75FA5}C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe] => (Allow) C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe => No File
FirewallRules: [{33E89E03-7030-4CAA-8F39-AF4115F54D80}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rustler\Launcher\Launcher.exe => No File
FirewallRules: [{A4A8F401-73D9-43D1-9D40-7B623422FE4F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rustler\Launcher\Launcher.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
"HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{008CA05D-5CB3-4A4A-8960-7C59BFFB669F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{008CA05D-5CB3-4A4A-8960-7C59BFFB669F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0FEA63EB-603B-47C4-B703-A41CB107ACF2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FEA63EB-603B-47C4-B703-A41CB107ACF2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{111BA509-2A82-4884-99E3-F886AE4D6284}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{111BA509-2A82-4884-99E3-F886AE4D6284}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{12D757C8-8C63-425A-B598-8BA304AA145F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{12D757C8-8C63-425A-B598-8BA304AA145F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{224B5003-08BE-4AE5-83EB-97CF9EAE944A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{224B5003-08BE-4AE5-83EB-97CF9EAE944A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{304A3D37-85D3-4BAE-A367-E1E73B2DD4D9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{304A3D37-85D3-4BAE-A367-E1E73B2DD4D9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{641493E6-3968-4444-9D65-B6246895087D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{641493E6-3968-4444-9D65-B6246895087D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Windows Media Sharing\UpdateLibrary" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{64C1DD41-99E9-4ACF-A979-65C01D4B45EC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{64C1DD41-99E9-4ACF-A979-65C01D4B45EC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{706E5975-5AE3-4FC0-9FA3-17601822DE64}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{706E5975-5AE3-4FC0-9FA3-17601822DE64}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{76BDF487-DB81-45B2-8D85-7BE3A77647B9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76BDF487-DB81-45B2-8D85-7BE3A77647B9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8C3448DB-3DEB-4DDC-8C2B-2CEFCA6B9A6B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C3448DB-3DEB-4DDC-8C2B-2CEFCA6B9A6B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{998AB667-0AE6-435A-92C5-B03E4536D80C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{998AB667-0AE6-435A-92C5-B03E4536D80C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{BD77BB84-7FFA-4686-9D76-F8FC55C41C5A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BD77BB84-7FFA-4686-9D76-F8FC55C41C5A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BE719ACF-5BB7-44A1-AE3F-A82F13D45D47}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BE719ACF-5BB7-44A1-AE3F-A82F13D45D47}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C03132B5-43BF-4204-8C45-38EC29AFE7F7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C03132B5-43BF-4204-8C45-38EC29AFE7F7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E7AA15AC-0893-4795-9483-98AE4CA08147}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7AA15AC-0893-4795-9483-98AE4CA08147}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
HKLM\System\CurrentControlSet\Services\cpuz158 => removed successfully
cpuz158 => service removed successfully
Could not move "C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2" => Scheduled to move on reboot.
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000} => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Pending) => subkey with invalid name -> removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Synced) => subkey with invalid name -> removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Syncing) => subkey with invalid name -> removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\MEGA (Context menu) => removed successfully
HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\MEGA (Context menu) => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\MEGA (Context menu) => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\MEGA (Context menu) => removed successfully
C:\Users\mikoa\Data aplikací => ":c15540c89c88cd704ccd25de5f07f873" ADS removed successfully
"C:\Users\mikoa\AppData\Roaming" => ":c15540c89c88cd704ccd25de5f07f873" ADS not found.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0F0006E3-4E98-4D08-B96D-BD65162A233A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{200CF43E-F9E2-4D99-9999-BF1A5BDA6CB5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5892F77F-402A-47DF-B480-12DA8A8C5983}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6C9A340C-D4A9-4DAB-8EE5-7967CF3B6AB8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{CBFC73BA-0556-44B1-AD95-08CEF8A4879E}C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{15816BF5-FDB4-4B41-9DA6-D265ADEC92FE}C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{ED40CA93-672D-4B3E-BBC4-1343DC3F947F}D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{6866D156-0196-4802-9304-897E207068BD}D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B1D1CDAE-D8F4-4D3B-BE6B-5658F39F79AE}C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{4F3D54FB-C10C-4B25-8D29-CA285FE8DDE7}C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4DAC71A1-6DE9-4BCC-9BAF-58EB5D02739F}C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E223D10F-2D7F-4BB4-9E82-2810CE190762}C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C397B059-53F7-4650-9E96-F0DB4A44925F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{07B637F5-DBF1-40F7-A64F-018B8CFC2466}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8216C4D1-4F69-4AD5-AD3E-ED909173E36B}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{492E87E6-D702-458E-92B2-155CF43B4EB2}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2B7E8473-2355-4CBF-B6E5-A6A4B1879FDE}C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{56463C62-4604-40BA-93D3-D1D59B133F05}C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A6B37737-9713-4D3E-B4D5-7C348EF304FB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9F859840-2CA2-4CC0-86CE-5678659A988F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{71A37C5B-35AA-4F40-9E86-CAE0AAB27113}C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0EDD6A75-BFBC-4D46-9B6A-00075248C472}C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A387DBD9-E790-4F14-9096-5D3B283BE254}D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0271D40D-FD09-4131-A7A0-5DA1C1098AC6}D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{EF3598D1-23CB-43DE-9D19-415D0280BF3A}C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0E7D21DF-5958-4ADE-BBAC-E69FE8D484F7}C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8FE912E8-0ACE-45E2-A6BA-2CECD525D93D}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{EC5689BA-1D37-45ED-A475-D5F4A31C8557}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F54BF501-71D9-44AF-8B85-F27C750D4C7B}D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{6DDB137E-7434-44F9-866C-DA06D7A9F4B2}D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D2E0B2F1-DB8B-44C7-B40B-6F990B93FF30}D:\hry\rage\fallout\gtav\gta5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F90BBEBB-102F-45D7-A7A1-ABDCEE2B17D5}D:\hry\rage\fallout\gtav\gta5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{566E62D4-1BC0-4BE9-90A7-35D39A521B80}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8D56E5FC-5B67-4112-B410-9565C1167D5A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BA6BC5D3-B146-461A-8DA4-57331620C523}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{25D49523-D672-4A97-AE99-2B748DC771B4}C:\games\core\gtav\gta5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4F190AF6-4C36-4D5C-940E-056F6741ACC8}C:\games\core\gtav\gta5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8B2ED572-3D90-4BF2-B332-41EA0B6DD138}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{04C15749-215B-401D-AD6D-9146DD2C4E10}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B307768A-B63F-44B7-BEFD-DE8239010AF1}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{483EAA90-D6E7-4FB9-BC69-41EECAB2E713}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8B2ED572-3D90-4BF2-B332-41EA0B6DD138}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{04C15749-215B-401D-AD6D-9146DD2C4E10}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B307768A-B63F-44B7-BEFD-DE8239010AF1}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{483EAA90-D6E7-4FB9-BC69-41EECAB2E713}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B6C4AC1D-DD92-4CD6-9ED8-9D71B4E66754}C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8E9BE3C6-87EC-480C-AC71-D6D883CC0A41}C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A6E3B0B7-79B4-493D-B893-5C039B35D083}C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3EB197EA-23D7-4F1E-B027-B18EFC2914CE}C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FFF033C2-A7A8-428E-98C8-89341A5F4EB9}C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D1E32CEC-7127-4D4A-9747-A689F3E1CCFB}C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A8D4518B-76FC-42CE-A30C-1BA00C43BCE4}C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{588388E2-70A2-4345-8F88-B63B47A75FA5}C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{33E89E03-7030-4CAA-8F39-AF4115F54D80}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A4A8F401-73D9-43D1-9D40-7B623422FE4F}" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 86072537 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 1113806993 B
Windows/system/drivers => 20137820 B
Edge => 0 B
Chrome => 3464036245 B
Brave => 282624 B
Firefox => 0 B
Opera => 11854979 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 108 B
systemprofile32 => 108 B
LocalService => 127838 B
NetworkService => 140664 B
mikoa => 1262982994 B
RecycleBin => 8164735 B
EmptyTemp: => 5.6 GB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 21-07-2025 16:12:14)
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 => Could not move
==== End of Fixlog 16:12:14 ====
Fix result of Farbar Recovery Scan Tool (x64) Version: 17-07-2025
Ran by mikoa (21-07-2025 16:10:35) Run:1
Running from C:\Users\mikoa\Downloads
Loaded Profiles: mikoa
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\...\Run: [] => [X]
Task: {008CA05D-5CB3-4A4A-8960-7C59BFFB669F} - no filepath. <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - \Microsoft\Windows\Location\Notifications -> No File <==== ATTENTION
Task: {0FEA63EB-603B-47C4-B703-A41CB107ACF2} - no filepath. <==== ATTENTION
Task: {111BA509-2A82-4884-99E3-F886AE4D6284} - no filepath. <==== ATTENTION
Task: {12D757C8-8C63-425A-B598-8BA304AA145F} - no filepath. <==== ATTENTION
Task: {224B5003-08BE-4AE5-83EB-97CF9EAE944A} - no filepath. <==== ATTENTION
Task: {304A3D37-85D3-4BAE-A367-E1E73B2DD4D9} - no filepath. <==== ATTENTION
Task: {641493E6-3968-4444-9D65-B6246895087D} - \Microsoft\Windows\Windows Media Sharing\UpdateLibrary -> No File <==== ATTENTION
Task: {64C1DD41-99E9-4ACF-A979-65C01D4B45EC} - no filepath. <==== ATTENTION
Task: {706E5975-5AE3-4FC0-9FA3-17601822DE64} - no filepath. <==== ATTENTION
Task: {76BDF487-DB81-45B2-8D85-7BE3A77647B9} - \Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask -> No File <==== ATTENTION
Task: {8C3448DB-3DEB-4DDC-8C2B-2CEFCA6B9A6B} - no filepath. <==== ATTENTION
Task: {998AB667-0AE6-435A-92C5-B03E4536D80C} - no filepath. <==== ATTENTION
Task: {BD77BB84-7FFA-4686-9D76-F8FC55C41C5A} - no filepath. <==== ATTENTION
Task: {BE719ACF-5BB7-44A1-AE3F-A82F13D45D47} - no filepath. <==== ATTENTION
Task: {C03132B5-43BF-4204-8C45-38EC29AFE7F7} - no filepath. <==== ATTENTION
Task: {E7AA15AC-0893-4795-9483-98AE4CA08147} - no filepath. <==== ATTENTION
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - no filepath. <==== ATTENTION
S3 cpuz158; \??\C:\WINDOWS\temp\cpuz158\cpuz158_x64.sys [X] <==== ATTENTION
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
CustomCLSID: HKU\S-1-5-21-2161308482-1726367771-1223172082-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000}\localserver32 -> "C:\Program Files\Proton\VPN\v3.2.9\ProtonVPN.exe" -ToastActivated => No File
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
AlternateDataStreams: C:\Users\mikoa\Data aplikací:c15540c89c88cd704ccd25de5f07f873 [394]
AlternateDataStreams: C:\Users\mikoa\AppData\Roaming:c15540c89c88cd704ccd25de5f07f873 [394]
FirewallRules: [{0F0006E3-4E98-4D08-B96D-BD65162A233A}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [{200CF43E-F9E2-4D99-9999-BF1A5BDA6CB5}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [{5892F77F-402A-47DF-B480-12DA8A8C5983}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [{6C9A340C-D4A9-4DAB-8EE5-7967CF3B6AB8}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe => No File
FirewallRules: [UDP Query User{CBFC73BA-0556-44B1-AD95-08CEF8A4879E}C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe] => (Allow) C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{15816BF5-FDB4-4B41-9DA6-D265ADEC92FE}C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe] => (Allow) C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{ED40CA93-672D-4B3E-BBC4-1343DC3F947F}D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [TCP Query User{6866D156-0196-4802-9304-897E207068BD}D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [UDP Query User{B1D1CDAE-D8F4-4D3B-BE6B-5658F39F79AE}C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe => No File
FirewallRules: [TCP Query User{4F3D54FB-C10C-4B25-8D29-CA285FE8DDE7}C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe => No File
FirewallRules: [UDP Query User{4DAC71A1-6DE9-4BCC-9BAF-58EB5D02739F}C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe => No File
FirewallRules: [TCP Query User{E223D10F-2D7F-4BB4-9E82-2810CE190762}C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe => No File
FirewallRules: [{C397B059-53F7-4650-9E96-F0DB4A44925F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe => No File
FirewallRules: [{07B637F5-DBF1-40F7-A64F-018B8CFC2466}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe => No File
FirewallRules: [UDP Query User{8216C4D1-4F69-4AD5-AD3E-ED909173E36B}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe => No File
FirewallRules: [TCP Query User{492E87E6-D702-458E-92B2-155CF43B4EB2}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe => No File
FirewallRules: [UDP Query User{2B7E8473-2355-4CBF-B6E5-A6A4B1879FDE}C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe => No File
FirewallRules: [TCP Query User{56463C62-4604-40BA-93D3-D1D59B133F05}C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe => No File
FirewallRules: [{A6B37737-9713-4D3E-B4D5-7C348EF304FB}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Days Gone\BendGame\Binaries\Win64\DaysGone.exe => No File
FirewallRules: [{9F859840-2CA2-4CC0-86CE-5678659A988F}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Days Gone\BendGame\Binaries\Win64\DaysGone.exe => No File
FirewallRules: [UDP Query User{71A37C5B-35AA-4F40-9E86-CAE0AAB27113}C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe] => (Allow) C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe => No File
FirewallRules: [TCP Query User{0EDD6A75-BFBC-4D46-9B6A-00075248C472}C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe] => (Allow) C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe => No File
FirewallRules: [UDP Query User{A387DBD9-E790-4F14-9096-5D3B283BE254}D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe] => (Allow) D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe => No File
FirewallRules: [TCP Query User{0271D40D-FD09-4131-A7A0-5DA1C1098AC6}D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe] => (Allow) D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe => No File
FirewallRules: [UDP Query User{EF3598D1-23CB-43DE-9D19-415D0280BF3A}C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe] => (Allow) C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{0E7D21DF-5958-4ADE-BBAC-E69FE8D484F7}C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe] => (Allow) C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{8FE912E8-0ACE-45E2-A6BA-2CECD525D93D}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [TCP Query User{EC5689BA-1D37-45ED-A475-D5F4A31C8557}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [UDP Query User{F54BF501-71D9-44AF-8B85-F27C750D4C7B}D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe] => (Allow) D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{6DDB137E-7434-44F9-866C-DA06D7A9F4B2}D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe] => (Allow) D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{D2E0B2F1-DB8B-44C7-B40B-6F990B93FF30}D:\hry\rage\fallout\gtav\gta5.exe] => (Allow) D:\hry\rage\fallout\gtav\gta5.exe => No File
FirewallRules: [TCP Query User{F90BBEBB-102F-45D7-A7A1-ABDCEE2B17D5}D:\hry\rage\fallout\gtav\gta5.exe] => (Allow) D:\hry\rage\fallout\gtav\gta5.exe => No File
FirewallRules: [{566E62D4-1BC0-4BE9-90A7-35D39A521B80}] => (Allow) C:\Users\mikoa\AppData\Local\Temp\ACFL\ACSetup\ACSetup.exe => No File
FirewallRules: [{8D56E5FC-5B67-4112-B410-9565C1167D5A}] => (Allow) C:\Users\mikoa\AppData\Local\Temp\ACFL\ACSetup\ACSetup.exe => No File
FirewallRules: [{BA6BC5D3-B146-461A-8DA4-57331620C523}] => (Allow) C:\Users\mikoa\AppData\Local\Packages\B9ECED6F.ArmouryCrate_qmba6cd70vzyy\LocalState\GridUpdateFile\ASUSGCDriverUpdateClient.exe => No File
FirewallRules: [TCP Query User{25D49523-D672-4A97-AE99-2B748DC771B4}C:\games\core\gtav\gta5.exe] => (Allow) C:\games\core\gtav\gta5.exe => No File
FirewallRules: [UDP Query User{4F190AF6-4C36-4D5C-940E-056F6741ACC8}C:\games\core\gtav\gta5.exe] => (Allow) C:\games\core\gtav\gta5.exe => No File
FirewallRules: [TCP Query User{8B2ED572-3D90-4BF2-B332-41EA0B6DD138}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{04C15749-215B-401D-AD6D-9146DD2C4E10}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{B307768A-B63F-44B7-BEFD-DE8239010AF1}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [UDP Query User{483EAA90-D6E7-4FB9-BC69-41EECAB2E713}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [TCP Query User{8B2ED572-3D90-4BF2-B332-41EA0B6DD138}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{04C15749-215B-401D-AD6D-9146DD2C4E10}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe] => (Allow) C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{B307768A-B63F-44B7-BEFD-DE8239010AF1}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [UDP Query User{483EAA90-D6E7-4FB9-BC69-41EECAB2E713}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe => No File
FirewallRules: [TCP Query User{B6C4AC1D-DD92-4CD6-9ED8-9D71B4E66754}C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe => No File
FirewallRules: [UDP Query User{8E9BE3C6-87EC-480C-AC71-D6D883CC0A41}C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe => No File
FirewallRules: [TCP Query User{A6E3B0B7-79B4-493D-B893-5C039B35D083}C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe => No File
FirewallRules: [UDP Query User{3EB197EA-23D7-4F1E-B027-B18EFC2914CE}C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe] => (Allow) C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe => No File
FirewallRules: [TCP Query User{FFF033C2-A7A8-428E-98C8-89341A5F4EB9}C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe] => (Block) C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe => No File
FirewallRules: [UDP Query User{D1E32CEC-7127-4D4A-9747-A689F3E1CCFB}C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe] => (Block) C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe => No File
FirewallRules: [TCP Query User{A8D4518B-76FC-42CE-A30C-1BA00C43BCE4}C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe] => (Allow) C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe => No File
FirewallRules: [UDP Query User{588388E2-70A2-4345-8F88-B63B47A75FA5}C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe] => (Allow) C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe => No File
FirewallRules: [{33E89E03-7030-4CAA-8F39-AF4115F54D80}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rustler\Launcher\Launcher.exe => No File
FirewallRules: [{A4A8F401-73D9-43D1-9D40-7B623422FE4F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rustler\Launcher\Launcher.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
"HKU\S-1-5-21-2161308482-1726367771-1223172082-1001\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{008CA05D-5CB3-4A4A-8960-7C59BFFB669F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{008CA05D-5CB3-4A4A-8960-7C59BFFB669F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0FEA63EB-603B-47C4-B703-A41CB107ACF2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FEA63EB-603B-47C4-B703-A41CB107ACF2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{111BA509-2A82-4884-99E3-F886AE4D6284}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{111BA509-2A82-4884-99E3-F886AE4D6284}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{12D757C8-8C63-425A-B598-8BA304AA145F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{12D757C8-8C63-425A-B598-8BA304AA145F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{224B5003-08BE-4AE5-83EB-97CF9EAE944A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{224B5003-08BE-4AE5-83EB-97CF9EAE944A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{304A3D37-85D3-4BAE-A367-E1E73B2DD4D9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{304A3D37-85D3-4BAE-A367-E1E73B2DD4D9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{641493E6-3968-4444-9D65-B6246895087D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{641493E6-3968-4444-9D65-B6246895087D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Windows Media Sharing\UpdateLibrary" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{64C1DD41-99E9-4ACF-A979-65C01D4B45EC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{64C1DD41-99E9-4ACF-A979-65C01D4B45EC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{706E5975-5AE3-4FC0-9FA3-17601822DE64}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{706E5975-5AE3-4FC0-9FA3-17601822DE64}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{76BDF487-DB81-45B2-8D85-7BE3A77647B9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76BDF487-DB81-45B2-8D85-7BE3A77647B9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8C3448DB-3DEB-4DDC-8C2B-2CEFCA6B9A6B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C3448DB-3DEB-4DDC-8C2B-2CEFCA6B9A6B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{998AB667-0AE6-435A-92C5-B03E4536D80C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{998AB667-0AE6-435A-92C5-B03E4536D80C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{BD77BB84-7FFA-4686-9D76-F8FC55C41C5A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BD77BB84-7FFA-4686-9D76-F8FC55C41C5A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BE719ACF-5BB7-44A1-AE3F-A82F13D45D47}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BE719ACF-5BB7-44A1-AE3F-A82F13D45D47}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C03132B5-43BF-4204-8C45-38EC29AFE7F7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C03132B5-43BF-4204-8C45-38EC29AFE7F7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E7AA15AC-0893-4795-9483-98AE4CA08147}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7AA15AC-0893-4795-9483-98AE4CA08147}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
HKLM\System\CurrentControlSet\Services\cpuz158 => removed successfully
cpuz158 => service removed successfully
Could not move "C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2" => Scheduled to move on reboot.
HKU\S-1-5-21-2161308482-1726367771-1223172082-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000} => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Pending) => subkey with invalid name -> removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Synced) => subkey with invalid name -> removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Syncing) => subkey with invalid name -> removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\MEGA (Context menu) => removed successfully
HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\MEGA (Context menu) => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\MEGA (Context menu) => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\MEGA (Context menu) => removed successfully
C:\Users\mikoa\Data aplikací => ":c15540c89c88cd704ccd25de5f07f873" ADS removed successfully
"C:\Users\mikoa\AppData\Roaming" => ":c15540c89c88cd704ccd25de5f07f873" ADS not found.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0F0006E3-4E98-4D08-B96D-BD65162A233A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{200CF43E-F9E2-4D99-9999-BF1A5BDA6CB5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5892F77F-402A-47DF-B480-12DA8A8C5983}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6C9A340C-D4A9-4DAB-8EE5-7967CF3B6AB8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{CBFC73BA-0556-44B1-AD95-08CEF8A4879E}C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{15816BF5-FDB4-4B41-9DA6-D265ADEC92FE}C:\xboxgames\s.t.a.l.k.e.r. 2\content\stalker2\binaries\wingdk\stalker2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{ED40CA93-672D-4B3E-BBC4-1343DC3F947F}D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{6866D156-0196-4802-9304-897E207068BD}D:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B1D1CDAE-D8F4-4D3B-BE6B-5658F39F79AE}C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{4F3D54FB-C10C-4B25-8D29-CA285FE8DDE7}C:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 5\bin_plus\farcry5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4DAC71A1-6DE9-4BCC-9BAF-58EB5D02739F}C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E223D10F-2D7F-4BB4-9E82-2810CE190762}C:\program files (x86)\steam\steamapps\common\dead island 2\deadisland\binaries\win64\deadisland-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C397B059-53F7-4650-9E96-F0DB4A44925F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{07B637F5-DBF1-40F7-A64F-018B8CFC2466}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8216C4D1-4F69-4AD5-AD3E-ED909173E36B}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{492E87E6-D702-458E-92B2-155CF43B4EB2}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2B7E8473-2355-4CBF-B6E5-A6A4B1879FDE}C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{56463C62-4604-40BA-93D3-D1D59B133F05}C:\program files (x86)\steam\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A6B37737-9713-4D3E-B4D5-7C348EF304FB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9F859840-2CA2-4CC0-86CE-5678659A988F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{71A37C5B-35AA-4F40-9E86-CAE0AAB27113}C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0EDD6A75-BFBC-4D46-9B6A-00075248C472}C:\xboxgames\call of the wild- the angler™\content\cotwtheangler_gdk.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A387DBD9-E790-4F14-9096-5D3B283BE254}D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0271D40D-FD09-4131-A7A0-5DA1C1098AC6}D:\program files (x86)\mr dj\need for speed hot pursuit\nfs11.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{EF3598D1-23CB-43DE-9D19-415D0280BF3A}C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0E7D21DF-5958-4ADE-BBAC-E69FE8D484F7}C:\xboxgames\medieval dynasty\content\medieval_dynasty\binaries\wingdk\medieval_dynasty-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8FE912E8-0ACE-45E2-A6BA-2CECD525D93D}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{EC5689BA-1D37-45ED-A475-D5F4A31C8557}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F54BF501-71D9-44AF-8B85-F27C750D4C7B}D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{6DDB137E-7434-44F9-866C-DA06D7A9F4B2}D:\xboxgames\goat simulator 3 pc\content\goat2\binaries\wingdk\goat2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D2E0B2F1-DB8B-44C7-B40B-6F990B93FF30}D:\hry\rage\fallout\gtav\gta5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F90BBEBB-102F-45D7-A7A1-ABDCEE2B17D5}D:\hry\rage\fallout\gtav\gta5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{566E62D4-1BC0-4BE9-90A7-35D39A521B80}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8D56E5FC-5B67-4112-B410-9565C1167D5A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BA6BC5D3-B146-461A-8DA4-57331620C523}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{25D49523-D672-4A97-AE99-2B748DC771B4}C:\games\core\gtav\gta5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4F190AF6-4C36-4D5C-940E-056F6741ACC8}C:\games\core\gtav\gta5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8B2ED572-3D90-4BF2-B332-41EA0B6DD138}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{04C15749-215B-401D-AD6D-9146DD2C4E10}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B307768A-B63F-44B7-BEFD-DE8239010AF1}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{483EAA90-D6E7-4FB9-BC69-41EECAB2E713}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8B2ED572-3D90-4BF2-B332-41EA0B6DD138}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{04C15749-215B-401D-AD6D-9146DD2C4E10}C:\xboxgames\frostpunk 2- pc edition\content\frostpunk2\binaries\wingdk\frostpunk2-wingdk-shipping.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B307768A-B63F-44B7-BEFD-DE8239010AF1}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{483EAA90-D6E7-4FB9-BC69-41EECAB2E713}C:\users\mikoa\appdata\local\wemod\app-9.21.0\wemod.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B6C4AC1D-DD92-4CD6-9ED8-9D71B4E66754}C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8E9BE3C6-87EC-480C-AC71-D6D883CC0A41}C:\users\mikoa\appdata\local\wemod\app-10.4.0\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A6E3B0B7-79B4-493D-B893-5C039B35D083}C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3EB197EA-23D7-4F1E-B027-B18EFC2914CE}C:\users\mikoa\appdata\local\wemod\app-10.5.0\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FFF033C2-A7A8-428E-98C8-89341A5F4EB9}C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D1E32CEC-7127-4D4A-9747-A689F3E1CCFB}C:\users\mikoa\appdata\local\wemod\app-10.8.1\wemod.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A8D4518B-76FC-42CE-A30C-1BA00C43BCE4}C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{588388E2-70A2-4345-8F88-B63B47A75FA5}C:\users\mikoa\desktop\secretofworld\secretofworld\secretofworld.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{33E89E03-7030-4CAA-8F39-AF4115F54D80}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A4A8F401-73D9-43D1-9D40-7B623422FE4F}" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 86072537 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 1113806993 B
Windows/system/drivers => 20137820 B
Edge => 0 B
Chrome => 3464036245 B
Brave => 282624 B
Firefox => 0 B
Opera => 11854979 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 108 B
systemprofile32 => 108 B
LocalService => 127838 B
NetworkService => 140664 B
mikoa => 1262982994 B
RecycleBin => 8164735 B
EmptyTemp: => 5.6 GB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 21-07-2025 16:12:14)
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 => Could not move
==== End of Fixlog 16:12:14 ====
Vim ze nic nevim.
-
Rudy
- Site Admin
- Příspěvky: 119483
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Jen preventivni kontrola
Vše smazáno, log je již OK. Šlo výhradně o zbytečnosti.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
Rudy
- Site Admin
- Příspěvky: 119483
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Jen preventivni kontrola
Rádo se stalo! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?