Firefox funguje, ale nefunguje...
Napsal: 02 říj 2025 10:05
Jeden den fungoval Firefox normálně a druhý den najednou přestal načítat jakýkoli obsah, nejde updatovat, ani se nelze dostat do nastavení...
Chtěl bych si ověřit, zda za tím nestojí nějaká havěť, případně zda je vše ostatní v pořádku.
Děkuji!
-------------------
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 30-09-2025
Ran by fbart (administrator) on DESKTOP-1NAN9QR (HP HP ProBook 450 G4) (02-10-2025 10:47:15)
Running from D:\SOFTWARE\FRST\FRST64.exe
Loaded Profiles: fbart
Platform: Microsoft Windows 10 Home Version 22H2 19045.6332 (X64) Language: Czech (Czech Republic) -> English (United Kingdom)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\bckp_amgr.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\monitoring-mini.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\task-manager.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\adp-agent.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\updater.exe
(C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe ->) (Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\adp-rest-util.exe
(C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe ->) (FOXIT SOFTWARE INC. -> Foxit Corporation) C:\Users\fbart\AppData\Roaming\Foxit Software\Continuous\Addon\Foxit PDF Reader\FoxitPDFReaderUpdater.exe
(C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files\AVAST Software\Avast\AvastSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(C:\Program Files\CCleaner\CCleaner64.exe ->) (Gen Digital Inc. -> OPSWAT, Inc.) C:\Program Files\CCleaner\wa_3rd_party_host_32.exe
(C:\Program Files\CCleaner\CCleaner64.exe ->) (Gen Digital Inc. -> OPSWAT, Inc.) C:\Program Files\CCleaner\wa_3rd_party_host_64.exe
(C:\Program Files\Google\Drive File Stream\114.0.1.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\114.0.1.0\crashpad_handler.exe
(C:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpHostW.exe ->) (DigitalPersona, Inc. -> Crossmatch, Inc.) C:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpCardEngine.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(C:\Windows\CxSvc\CxAudioSvc.exe ->) (Synaptics Incorporated -> Conexant Systems LLC.) C:\Program Files\CONEXANT\SA3\HP-NB-AIO\SmartAudio3.exe
(C:\Windows\CxSvc\CxAudioSvc.exe ->) (Synaptics Incorporated -> Conexant Systems, Inc) C:\Program Files\CONEXANT\Flow\Flow.exe
(DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\HotKeyServiceUWP.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\HPHotkeyNotification.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_5481f7821d650a44\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5481f7821d650a44\igfxEM.exe
(explorer.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\FoxitPDFReader.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <67>
(explorer.exe ->) (Google LLC -> Google LLC.) C:\Program Files\Google\Drive File Stream\114.0.1.0\GoogleDriveFS.exe <7>
(explorer.exe ->) (Microsoft Corporation) [File not signed] C:\Program Files\Classic Paint\mspaint1.exe <2>
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\perfmon.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(explorer.exe ->) (Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(explorer.exe ->) (MUSIC Tribe Brands DE GmbH -> ) C:\Program Files\BEHRINGER\UMC_Audio_Driver\x64\UMCAudioCplApp.exe
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\AvastUI.exe <4>
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\CCleaner\CCleaner64.exe <2>
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\aakore.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (Ascensio System SIA -> Ascensio System SIA) C:\Program Files\ONLYOFFICE\DesktopEditors\updatesvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(services.exe ->) (Avid Technology, Inc. -> Avid Technology, Inc.) C:\Program Files\Avid\Cloud Client Services\Hub.exe
(services.exe ->) (Avid Technology, Inc. -> Avid Technology, Inc.) C:\Program Files\Avid\Cloud Client Services\TransportClient.exe
(services.exe ->) (Avid Technology, Inc.) [File not signed] C:\Program Files\Avid\Pro Tools First\MMERefresh.exe
(services.exe ->) (Comodo Security Solutions Inc -> Comodo) C:\Program Files (x86)\COMODO\Dragon\dragon_updater.exe
(services.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe
(services.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe <2>
(services.exe ->) (Conexant Systems LLC.) [File not signed] C:\Windows\CxSvc\CxUtilSvc.exe
(services.exe ->) (DigitalPersona, Inc. -> Crossmatch, Inc.) C:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpHostW.exe
(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe
(services.exe ->) (Hewlett Packard Enterprise Company -> Hewlett Packard Enterprise Company) C:\Program Files (x86)\HP\HP Device Access Manager\HPE.DeviceAccessManager.ServiceHost.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\HotKeyServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\HPAudioAnalytics.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\LanWlanWwanSwitchingServiceUWP.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5481f7821d650a44\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5481f7821d650a44\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5481f7821d650a44\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\fpCSEvtSvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvbl.inf_amd64_f6b5d3bff633c683\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(services.exe ->) (Shanghai Microvirt Software Technology Co., Ltd. -> ) D:\Program Files\Microvirt\MEmu\MemuService.exe
(services.exe ->) (Softland SRL -> Microsoft) C:\Program Files\Softland\novaPDF 10\Server\novapdfs.exe
(services.exe ->) (Synaptics Incorporated -> Conexant Systems LLC.) C:\Windows\CxSvc\CxAudioSvc.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2539.2.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Synaptics Incorporated -> Conexant) C:\Windows\System32\MicTray64.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320584 2016-06-30] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [845992 2025-09-30] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\...\Run: [DigidesignMMERefresh] => C:\Program Files\Avid\Pro Tools First\MMERefresh.exe [117760 2018-04-03] (Avid Technology, Inc.) [File not signed]
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [9523624 2025-05-24] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [644000 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM\...\Run: [PowerDVD22Agent] => C:\Program Files\CyberLink\PowerDVD22\PowerDVD22Agent.exe [569976 2022-07-14] (CyberLink Corp. -> CyberLink Corp.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [369488 2024-10-12] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [455968 2023-05-25] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-07-23] (Adobe Inc. -> )
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6206360 2021-03-23] (Acronis International GmbH -> )
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [446392 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Program Files\Opera\assistant\browser_assistant.exe [4834712 2024-11-05] (Opera Norway AS -> Opera Software)
HKLM-x32\...\Run: [CLMLServer_For_P2G13] => C:\Program Files (x86)\CyberLink\Power2Go13\CLMLSvc_P2G13.exe [154296 2019-05-23] (CyberLink Corp. -> CyberLink)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\114.0.1.0\GoogleDriveFS.exe [66461848 2025-09-15] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\114.0.1.0\GoogleDriveFS.exe [66461848 2025-09-15] (Google LLC -> Google LLC.)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45724528 2025-06-23] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [com.squirrel.Teams.Teams] => C:\Users\fbart\AppData\Local\Microsoft\Teams\Update.exe [2583608 2025-08-03] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\114.0.1.0\GoogleDriveFS.exe [66461848 2025-09-15] (Google LLC -> Google LLC.)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [Titan Backup] => C:\Program Files (x86)\Titan Backup\Launcher.exe [142784 2008-12-18] (Neobyte Solutions SRL -> Neobyte Solutions)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [com.squirrel.WhatsApp.WhatsApp] => C:\Users\fbart\AppData\Local\WhatsApp\Update.exe [2412768 2023-06-29] (WhatsApp LLC -> )
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [MicrosoftEdgeAutoLaunch_CBC3A2C48DD08E53B4E467E37B52CD84] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4241488 2025-09-25] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [Power2GoExpress13] => C:\Program Files (x86)\CyberLink\Power2Go13\Power2GoExpress.exe [3699184 2020-08-25] (CyberLink Corp. -> CyberLink Corp.)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [CyberlinkPowerPlayerMediaServer_PowerDVD22] => C:\Program Files\CyberLink\PowerDVD22\Common\CLMediaServer\clmediaserver.exe [6775928 2022-07-14] (CyberLink Corp. -> CyberLink Corp.)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [Mozilla-Firefox-E7CF176E110C211B] => "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -os-autostart [692864 2025-09-21] (Mozilla Corporation -> Mozilla Corporation)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [Opera Stable] => C:\Program Files\Opera\opera.exe [2068440 2025-08-12] (Opera Norway AS -> Opera Software)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\114.0.1.0\GoogleDriveFS.exe [66461848 2025-09-15] (Google LLC -> Google LLC.)
HKLM\...\Windows x64\Print Processors\HP1020PrintProc: C:\Windows\System32\spool\prtprocs\x64\pphp1020.dll [65024 2017-01-10] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\doPDF 7 Monitor: C:\windows\system32\dopdfmn7.dll [25920 2016-12-29] (Softland S.R.L. -> Softland)
HKLM\...\Print\Monitors\EPSON L8160 Series 64MonitorBE: C:\windows\system32\E_YLMBYBE.DLL [239104 2023-10-30] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\windows\system32\enppmon.dll [3167256 2024-08-30] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\HPLJ1020LM: C:\windows\system32\zlhp1020.dll [192512 2017-01-10] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\novaPDF 10 Port Monitor: C:\windows\system32\novamn10.dll [18944 2020-04-01] (Softland) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\92.2.11577.159\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\140.0.7339.208\Installer\chrmstp.exe [2025-09-30] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files\AVAST Software\Browser\Application\139.0.31974.157\Installer\chrmstp.exe [2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\86.1.6782.183\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
HKLM\Software\...\Authentication\Credential Providers: [{77B7ED10-A641-4766-A428-8B9EE42E830A}] -> C:\windows\system32\DPCrProv2.dll [2016-07-19] (DigitalPersona, Inc. -> Crossmatch, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{E85E7D14-653B-4E51-9BC5-E5F9EC9BC51D}] -> C:\windows\system32\DPCrProv2.dll [2016-07-19] (DigitalPersona, Inc. -> Crossmatch, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{F0C31759-99A6-493E-AD7D-7F69126CDFBC}] -> C:\windows\system32\DPCrProv2.dll [2016-07-19] (DigitalPersona, Inc. -> Crossmatch, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{F731030D-3272-4D8B-A21A-3940EF268453}] -> C:\windows\system32\DPCrProv2.dll [2016-07-19] (DigitalPersona, Inc. -> Crossmatch, Inc.)
HKLM\Software\...\Authentication\Credential Provider Filters: [{DCFB2A33-814B-4236-BFBD-FFEA3F528385}] -> C:\windows\system32\DPCrProv2.dll [2016-07-19] (DigitalPersona, Inc. -> Crossmatch, Inc.)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\Users\fbart\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\englishme!.lnk [2023-04-27]
ShortcutTarget: englishme!.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avid Link.lnk [2019-06-24]
ShortcutTarget: Avid Link.lnk -> C:\Program Files\Avid\Avid Link\Avid Link.exe (Avid Technology, Inc. -> Avid Technology, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP JumpStart Launch.lnk [2016-10-29]
ShortcutTarget: HP JumpStart Launch.lnk -> c:\Windows\Installer\{0F5EBB0D-DF6D-4DBE-9789-57BF05B3B0FD}\HPlogo_blue.ico () [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2025-04-17]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\UMC Control Panel Autostart.lnk [2023-07-26]
ShortcutTarget: UMC Control Panel Autostart.lnk -> C:\Program Files\BEHRINGER\UMC_Audio_Driver\x64\UMCAudioCplApp.exe (MUSIC Tribe Brands DE GmbH -> )
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {493ED88C-79E7-4817-9B2A-FE032ABEB371} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {1CC38B53-A328-4DB6-AEEB-82D4015A1931} - System32\Tasks\Adobe Creative Cloud => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [779504 2021-07-23] (Adobe Inc. -> Adobe Inc.)
Task: {0A2D3C89-B388-47C0-967D-E2527412BE5C} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [9523624 2025-05-24] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {28352C39-466F-4540-A917-0165A0633432} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [9838504 2025-05-24] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {A3803614-2718-4A67-928B-BC225201EB48} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3595344 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {5FFDA3A6-358E-4A17-8F44-C15B16230E1A} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3595344 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {EA0C5CF4-A433-47A7-B3E5-14BC110585E9} - System32\Tasks\Avast Secure Browser VPS Differential Update S-1-5-18 => C:\Program Files (x86)\AVAST Software\Browser\Application\vps_helper.exe [1676528 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {56706CE9-3A37-45EE-9A2A-E1A185761CA7} - System32\Tasks\Avast Secure Browser VPS Differential Update S-1-5-21-2002658774-1703651359-3694545506-1002 => C:\Program Files\AVAST Software\Browser\Application\vps_helper.exe [1676528 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {CEAAB1D6-0D47-42FE-B735-587283D1F67C} - System32\Tasks\Avast Software\Avast Antivirus Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-av\icarus.exe [9072352 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {0BB57B52-0A3E-449E-B5E2-2B3A14F440D6} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5573800 2025-09-30] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {94333FE9-C5A2-412C-B30A-BFC66C47FF8E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2295192 2023-01-31] (Avast Software s.r.o. -> Avast Software)
Task: {E22EA86F-0E37-4E75-876E-920F204553E4} - System32\Tasks\AvastBrowserProtectS-1-5-21-2002658774-1703651359-3694545506-1002 => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1762528 2025-09-11] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {98A0AFCD-BB66-4C41-B5EE-F58EC42B9728} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {0315D22F-55A8-4872-B593-CBA6743545C8} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {1B722D39-16E9-4443-8BB6-4524377057C7} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-06-23] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {2CBAF108-94AF-4ACE-A660-5E48447D0711} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-06-23] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "d69b8913-fbe2-4c6b-8e6b-b8083f51231d" --version "6.37.0.11523" --silent
Task: {E4043D11-6B42-41B7-A790-963B06103110} - System32\Tasks\CCleanerSkipUAC - fbart => C:\Program Files\CCleaner\CCleaner.exe [39562464 2025-06-23] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {1F61D2F6-8386-4C6F-ACF2-0958A10E5709} - System32\Tasks\CLToast => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2319632 2022-04-14] (CyberLink Corp. -> )
Task: {A7ACEEE8-0335-4289-8C2C-34EFF6E15D2A} - System32\Tasks\CLToastRun => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2319632 2022-04-14] (CyberLink Corp. -> )
Task: {338E88A2-EDFB-4A81-98EA-CBAD8E7F6728} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {C0C70F2E-A974-4FF8-95A4-661E8091DA9C} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {C11EB089-78EE-48DE-9BA7-359A83745372} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {2364088E-19F8-4F7A-8A88-80C74475F615} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {93E3645D-9929-4696-B45E-6727B7D982D3} - System32\Tasks\COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {15F9F943-91F3-431B-A068-68EF69CFC841} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {1A0E7D9A-2E5D-49C7-A1B9-997A203B84D5} - System32\Tasks\doPDF 10 Telemetry => C:\Program Files\Softland\novaPDF 10\Driver\GoogleAnalytics.exe [51504 2020-04-01] (Softland SRL -> )
Task: {72E6F0CC-945E-4467-A36B-00D5278CCD0B} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem142.0.7416.0{3F443B01-C7F6-4949-B282-0B0C5BCE2F30} => C:\Program Files (x86)\Google\GoogleUpdater\142.0.7416.0\updater.exe [6863512 2025-09-15] (Google LLC -> Google LLC)
Task: {D8BEE701-0BE4-4C82-AE00-D32BFE3F2A6D} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [91144 2025-08-29] (HP Inc. -> HP Inc.)
Task: {52001519-27B0-4FCB-B05F-08A246455407} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [91144 2025-08-29] (HP Inc. -> HP Inc.)
Task: {6E63C272-93D0-4442-908D-4D969E42433F} - System32\Tasks\HPEA3JOBS => C:\Program -> Files\HP\HP ePrint\hpeprint.exe /CheckJobs
Task: {468B8D09-A923-4767-A43B-646993EA1D39} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [17335976 2017-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {9BF8FCA5-10F7-470D-B2A8-275CC647D078} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [17335976 2017-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {BD5A8FA8-06EA-446B-A5F8-180A99237DD3} - System32\Tasks\Microsoft\Windows\Conexant\MicTray => C:\Windows\System32\MicTray64.exe [5009512 2020-06-13] (Synaptics Incorporated -> Conexant)
Task: {F32BBD50-5B69-4697-B343-05065404B3A6} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [34944 2025-09-21] (Mozilla Corporation -> Mozilla Foundation)
Task: {5A5A2823-DF63-4F9F-9BF3-AE3451103D89} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2002658774-1703651359-3694545506-1002 => C:\Users\fbart\AppData\Local\Microsoft\OneDrive\25.164.0824.0003\OneDriveLauncher.exe [725864 2025-09-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {8176DF82-1E23-48FD-968F-63FBE865BFA3} - System32\Tasks\Opera scheduled assistant Autoupdate 1582720617 => C:\Program Files\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Program Files\Opera\assistant" $(Arg0)
Task: {5896C453-2475-4C3C-9CCE-455E1F28D1A4} - System32\Tasks\Opera scheduled Autoupdate 1487236436 => C:\Program Files\Opera\autoupdate\opera_autoupdate.exe [6239704 2025-08-06] (Opera Norway AS -> Opera Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}\6556A6D696E656B6: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}\6556A6D696E656B6: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}\8405D33556475707C36354E7445637B6A45647022383030302375627965637: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}\D6F647F602764313F553130343: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}\D6F647F602764313F553130343: [DhcpNameServer] 10.129.132.60
Tcpip\..\Interfaces\{9a41f277-0fa9-4555-953f-aa9788cd4df8}: [DhcpNameServer] 10.10.10.10 10.100.0.100
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\fbart\AppData\Local\Microsoft\Edge\User Data\Default [2025-10-02]
Edge Session Restore: Default -> is enabled.
Edge Extension: (Google Docs Offline) - C:\Users\fbart\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-27]
Edge Extension: (Edge relevant text changes) - C:\Users\fbart\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-03]
FireFox:
========
FF DefaultProfile: xs1zf06h.default-1602174025168
FF ProfilePath: C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168 [2025-10-02]
FF Session Restore: Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168 -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168 -> hxxps://app.slack.com; hxxps://my.jdownloader.org; hxxps://www.facebook.com
FF Extension: (Facebook Container) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\@contain-facebook.xpi [2025-03-24]
FF Extension: (German Dictionary, extended for Austria) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\de-AT@dictionaries.addons.mozilla.org.xpi [2022-11-24]
FF Extension: (German Dictionary (Switzerland)) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\de-CH@dictionaries.addons.mozilla.org.xpi [2022-11-24]
FF Extension: (German Dictionary) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\de-DE@dictionaries.addons.mozilla.org.xpi [2022-11-24]
FF Extension: (LexFox) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\info@lingea.com.xpi [2021-08-17] [UpdateUrl:hxxps://www.lingea.eu/updates/lexfox/update.json]
FF Extension: (MyJDownloader Browser Extension) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2023-04-28] [UpdateUrl:hxxps://my.jdownloader.org/extensions/firefox.json]
FF Extension: (Language: Deutsch (German)) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\langpack-de@firefox.mozilla.org.xpi [2025-09-30]
FF Extension: (Photon Colors) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\{2c6c94f3-c656-41e9-aa4b-1edba5be9c21}.xpi [2021-07-31]
FF Extension: (Data Leak Blocker) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\features\{b1ac5285-0912-4f6d-a528-9210e821e2b7}\data-leak-blocker@mozilla.com.xpi [2025-09-30]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2021-07-23] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.18 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.19 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.20 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.21 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2021-07-23] (Adobe Inc. -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\fbart\AppData\Local\Google\Chrome\User Data\Default [2025-10-02]
CHR Notifications: Default -> hxxps://www.instagram.com
CHR Session Restore: Default -> is enabled.
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\fbart\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-09-08]
CHR Extension: (Chrome Web Store Payments) - C:\Users\fbart\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-05-21]
CHR Extension: (ZED: Zoom Easy Downloader) - C:\Users\fbart\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdadlkbckhinonakkfkdaadceojbekep [2025-09-15]
CHR HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\fbart\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx <not found>
CHR HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
Opera:
=======
OPR DefaultProfile: Default
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\opera.exe
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aakore; C:\Program Files (x86)\Acronis\Agent\aakore.exe [9022120 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [12952232 2021-03-23] (Acronis International GmbH -> )
S4 AcronisCyberProtectionService; C:\Program Files\Acronis\CyberProtect\cyber-protect-service.exe [1425256 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1052280 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
S3 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [842480 2021-07-23] (Adobe Inc. -> Adobe Inc.)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6391536 2021-08-01] (Acronis International GmbH -> )
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [103776 2024-10-02] (Apple Inc. -> Apple Inc.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [7785640 2025-09-30] (Gen Digital Inc. -> Gen Digital Inc.)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [1036456 2025-09-30] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2598568 2025-09-30] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [1089704 2025-09-30] (Gen Digital Inc. -> Gen Digital Inc.)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\139.0.31974.157\elevation_service.exe [2436304 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56912 2021-06-03] (Avast Software s.r.o. -> AVAST Software)
R2 AvidHubService; C:\Program Files\Avid\Cloud Client Services\Hub.exe [2299208 2017-11-09] (Avid Technology, Inc. -> Avid Technology, Inc.)
R2 AvidTransportClient; C:\Program Files\Avid\Cloud Client Services\TransportClient.exe [7067464 2017-11-09] (Avid Technology, Inc. -> Avid Technology, Inc.)
R3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1080544 2025-06-23] (Gen Digital Inc. -> Gen Digital Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7923888 2017-10-12] (Microsoft Corporation -> Microsoft Corporation)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R2 CmdAgentProt; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2675504 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R2 CxAudioSvc; C:\WINDOWS\CxSvc\CxAudioSvc.exe [96432 2020-09-08] (Synaptics Incorporated -> Conexant Systems LLC.)
R2 CxUtilSvc; C:\WINDOWS\CxSvc\CxUtilSvc.exe [166400 2019-06-25] (Conexant Systems LLC.) [File not signed]
R2 DigiRefresh; C:\Program Files\Avid\Pro Tools First\MMERefresh.exe [117760 2018-04-03] (Avid Technology, Inc.) [File not signed]
S3 digiSPTIService64; C:\Program Files\Avid\Pro Tools First\digisptiservice64.exe [197632 2018-04-03] (Avid Technology, Inc.) [File not signed]
R2 DpHost; c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpHostW.exe [527296 2016-07-19] (DigitalPersona, Inc. -> Crossmatch, Inc.)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2261776 2025-05-06] (Comodo Security Solutions Inc -> Comodo)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [206304 2020-10-02] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 FLCDLOCK; c:\windows\SysWOW64\flcdlock.exe [567888 2016-08-11] (Hewlett Packard Enterprise Company -> Hewlett-Packard Company)
R2 FoxitReaderUpdateService; C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2494448 2024-09-11] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R2 fpCsEvtSvc; C:\WINDOWS\System32\fpCSEvtSvc.exe [22424 2019-05-05] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 HotKeyServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\HotKeyServiceUWP.exe [1511552 2025-08-06] (HP Inc. -> HP Inc.)
R2 HPAudioAnalytics; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\HPAudioAnalytics.exe [503960 2025-08-06] (HP Inc. -> HP Inc.)
R2 HpDamServiceHost; c:\Program Files (x86)\HP\HP Device Access Manager\HPE.DeviceAccessManager.ServiceHost.exe [20376 2016-08-09] (Hewlett Packard Enterprise Company -> Hewlett Packard Enterprise Company)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243720 2025-08-29] (HP Inc. -> HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1083200 2016-12-22] (HP Inc. -> HP)
R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [1044176 2019-01-29] (Comodo Security Solutions, Inc. -> COMODO)
R2 LanWlanWwanSwitchingServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\LanWlanWwanSwitchingServiceUWP.exe [608408 2025-08-06] (HP Inc. -> HP Inc.)
S3 LibreOfficeMaintenance; C:\Program Files\LibreOffice\program\update_service.exe [123304 2025-09-01] (The Document Foundation -> The Document Foundation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9609096 2025-09-02] (Malwarebytes Inc -> Malwarebytes)
S4 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-03-17] (Malwarebytes Inc. -> Malwarebytes)
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe [270336 2001-02-23] (Microsoft Corporation) [File not signed]
R2 MEmuSVC; D:\Program Files\Microvirt\MEmu\MemuService.exe [85304 2019-09-12] (Shanghai Microvirt Software Technology Co., Ltd. -> )
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4878840 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [2136488 2021-03-23] (Acronis International GmbH -> )
R2 NovaPdf10Server; C:\Program Files\Softland\novaPDF 10\Server\novapdfs.exe [52528 2020-04-01] (Softland SRL -> Microsoft)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvbl.inf_amd64_f6b5d3bff633c683\Display.NvContainer\NVDisplay.Container.exe [1275000 2025-07-25] (NVIDIA Corporation -> NVIDIA Corporation)
R2 ONLYOFFICE Update Service; C:\Program Files\ONLYOFFICE\DesktopEditors\updatesvc.exe [638672 2025-04-15] (Ascensio System SIA -> Ascensio System SIA)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7398360 2021-03-23] (Acronis International GmbH -> )
S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [5910328 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 valWBFPolicyService; C:\WINDOWS\System32\valWBFPolicyService.exe [91032 2019-05-05] (Microsoft Windows Hardware Compatibility Publisher -> Synaptics Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\NisSrv.exe [2484256 2020-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MsMpEng.exe [103168 2020-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [244832 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [390752 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [299616 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [85600 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [29144 2025-07-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [29792 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [284768 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [574048 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [92232 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [71240 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [876104 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1282632 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [201824 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [391776 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2021-03-23] (Bitdefender SRL -> Bitdefender)
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [148992 2024-07-14] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [File not signed]
R2 CLFCL5.22; C:\WINDOWS\System32\drivers\CLFCL5.22\000.fcl [47792 2022-07-15] (CyberLink Corp. -> CyberLink Corp.)
S0 cmdboot; C:\WINDOWS\System32\DRIVERS\cmdboot.sys [17576 2020-01-27] (Microsoft Windows Early Launch Anti-malware Publisher -> COMODO)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [38880 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [844000 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [47104 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
S3 DAMDrv; C:\WINDOWS\system32\DRIVERS\DAMDrv64.sys [76432 2016-08-11] (Hewlett Packard Enterprise Company -> Hewlett-Packard Enterpise Company)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ewusbmbb; C:\WINDOWS\System32\drivers\ewusbwwan.sys [421376 2010-12-23] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 ew_hwusbdev; C:\WINDOWS\system32\DRIVERS\ew_hwusbdev.sys [117248 2010-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 FFUsbAudio; C:\WINDOWS\System32\drivers\ffusbaudio.sys [53080 2011-10-31] (Focusrite Audio Engineering Limited -> Focusrite Audio Engineering Ltd.)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [720392 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [392840 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
R0 fltsrv; C:\WINDOWS\System32\DRIVERS\fltsrv.sys [183944 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
R2 googledrivefs31931; C:\Program Files\Google\Drive File Stream\Drivers\31931\googledrivefs31931.sys [386256 2025-05-12] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R3 huawei_enumerator; C:\WINDOWS\System32\drivers\ew_jubusenum.sys [86016 2011-01-30] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 hwdatacard; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [221312 2010-12-24] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 hwusbdev; C:\WINDOWS\system32\DRIVERS\ewusbdev.sys [114304 2016-12-29] (Huawei Technologies Co., Ltd.) [File not signed]
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [130256 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [63256 2018-08-29] (Comodo Security Solutions, Inc. -> COMODO)
R0 klupd_df345591a_arkmon; C:\WINDOWS\System32\Drivers\klupd_df345591a_arkmon.sys [400152 2025-03-28] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R0 klupd_df345591a_klbg; C:\WINDOWS\System32\Drivers\klupd_df345591a_klbg.sys [204440 2025-03-28] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [234072 2025-10-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-03-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [242752 2025-06-29] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 MEmuDrv; C:\WINDOWS\system32\DRIVERS\MEmuDrv.sys [320360 2021-01-04] (Shanghai Microvirt Software Technology Co., Ltd. -> Maiwei Corporation)
S0 ngelam; C:\WINDOWS\System32\drivers\ngelam.sys [15816 2021-03-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Acronis International GmbH)
R1 ngscan; C:\WINDOWS\System32\DRIVERS\ngscan.sys [179104 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
S3 SPUVCbv; C:\WINDOWS\System32\Drivers\SPUVCbv64.sys [1063520 2017-04-06] (SUNPLUS INNOVATION TECHNOLOGY INC. -> Sunplus Innovation Technology Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 tib; C:\WINDOWS\system32\DRIVERS\tib.sys [887032 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [175648 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [694920 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
R3 VBAudioVACMME; C:\WINDOWS\System32\drivers\vbaudio_cable64_win7.sys [41192 2014-09-02] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [334984 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [251016 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45960 2020-06-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [401120 2020-06-01] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64224 2020-06-01] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40200 2023-11-17] (HP Inc. -> HP)
S3 YMIDUSBW; C:\WINDOWS\system32\drivers\ymidusbx64.sys [43744 2015-07-28] (Yamaha Corporation -> Yamaha Corporation)
U3 aswBcc; no ImagePath
U3 Avast Business Console Client Antivirus Service; no ImagePath
S3 df345591; System32\Drivers\df345591.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-10-02 09:53 - 2025-10-02 09:53 - 000003726 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser VPS Differential Update S-1-5-21-2002658774-1703651359-3694545506-1002
2025-10-02 09:50 - 2025-10-02 09:50 - 000000000 ____D C:\Users\fbart\AppData\Local\DBG
2025-09-30 15:02 - 2025-09-30 14:51 - 000322216 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2025-09-22 18:27 - 2025-09-22 18:27 - 000268697 _____ C:\Users\fbart\Downloads\Boarding-Pass-Prague-Rijeka-3287128493.pdf
2025-09-22 12:25 - 2025-09-22 12:25 - 000090410 _____ C:\Users\fbart\Downloads\vozni red_1_2764_B.pdf
2025-09-22 12:23 - 2025-09-22 12:24 - 000091043 _____ C:\Users\fbart\Downloads\vozni red_1_2474_A.pdf
2025-09-22 10:54 - 2025-09-22 10:54 - 000267876 _____ C:\Users\fbart\Downloads\Boarding-Pass-Prague-Rijeka-3288008273.pdf
2025-09-21 19:46 - 2025-09-21 19:46 - 009956763 _____ C:\Users\fbart\Downloads\Veronikas Geheimnis.pdf
2025-09-20 14:01 - 2025-09-20 14:01 - 000106644 _____ C:\Users\fbart\Downloads\Faktura 202509191 - Eva Vasickova - F_Bartak-1.pdf
2025-09-19 14:28 - 2025-09-19 14:28 - 000106644 _____ C:\Users\fbart\Downloads\Faktura 202509191 - Eva Vasickova - F_Bartak.pdf
2025-09-19 01:07 - 2025-09-19 01:07 - 000269608 _____ C:\Users\fbart\Downloads\Tulák 2.1..pdf
2025-09-18 15:49 - 2025-09-18 15:49 - 000210941 _____ C:\Users\fbart\Downloads\b1_modellsatz_jugendliche_neu_Schreiben.pdf
2025-09-18 14:00 - 2025-09-18 14:01 - 006782107 _____ C:\Users\fbart\Downloads\BSN5-27_PLANOVACI s anglictinou VN 2027_oprava B.pdf
2025-09-17 19:35 - 2025-09-17 19:35 - 000093187 _____ C:\Users\fbart\Downloads\MFP2025_F_Bartak-prihlaska-1.pdf
2025-09-17 19:34 - 2025-09-17 19:34 - 000096463 _____ C:\Users\fbart\Downloads\MFP2025_F_Bartak_poezie-1.pdf
2025-09-17 19:33 - 2025-09-17 19:33 - 000106143 _____ C:\Users\fbart\Downloads\MFP2025_F_Bartak_proza-1.pdf
2025-09-17 19:32 - 2025-09-17 19:32 - 000117347 _____ C:\Users\fbart\Downloads\MFP2025_F_Bartak-prihlaska.pdf
2025-09-17 19:32 - 2025-09-17 19:32 - 000101919 _____ C:\Users\fbart\Downloads\MFP2025_F_Bartak_proza.pdf
2025-09-17 19:31 - 2025-09-17 19:31 - 000112675 _____ C:\Users\fbart\Downloads\MFP2025_F_Bartak_poezie.pdf
2025-09-17 16:37 - 2025-09-17 16:37 - 000003672 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser VPS Differential Update S-1-5-18
2025-09-16 19:54 - 2025-09-16 19:54 - 000119111 _____ C:\Users\fbart\Downloads\Faktura 202509161 - Adela_Sodomkova - F_Bartak-1.pdf
2025-09-16 14:50 - 2025-09-16 14:50 - 000120146 _____ C:\Users\fbart\Downloads\Faktura 202509161 - Adela_Sodomkova - F_Bartak.pdf
2025-09-16 14:49 - 2025-09-16 14:49 - 000120724 _____ C:\Users\fbart\Downloads\Faktura 202509161 - Autoselect_Adela_Sodomkova - F_Bartak-1.pdf
2025-09-16 14:47 - 2025-09-16 14:47 - 000120724 _____ C:\Users\fbart\Downloads\Faktura 202509161 - Autoselect_Adela_Sodomkova - F_Bartak.pdf
2025-09-14 12:46 - 2025-09-14 12:46 - 000911022 _____ C:\Users\fbart\Downloads\priloha_1577542130_0_AttachmentICIS.pdf
2025-09-14 12:46 - 2025-09-14 12:46 - 000024209 _____ C:\Users\fbart\Downloads\priloha_1532709502_1_Protokol-CSSZ_OSVC_PRE-VS15658896--ID_CSSZ_AA92EBDA2787408BB084C990B3CEFDE2.pdf
2025-09-14 01:34 - 2025-09-14 01:34 - 000196883 _____ C:\Users\fbart\Downloads\Tulák 2.0. pdf.pdf
2025-09-13 23:36 - 2025-09-13 23:36 - 005938716 _____ C:\Users\fbart\Downloads\BSN5-27_PLANOVACI s anglictinou VN 2027-corr_FKB-1.pdf
2025-09-13 23:34 - 2025-09-13 23:34 - 005938716 _____ C:\Users\fbart\Downloads\BSN5-27_PLANOVACI s anglictinou VN 2027-corr_FKB.pdf
2025-09-12 23:14 - 2025-09-12 23:14 - 001071211 _____ C:\Users\fbart\Downloads\BSN5-27_PLANOVACI s anglictinou OB 2027.pdf
2025-09-08 13:03 - 2025-09-08 13:03 - 001123515 _____ C:\Users\fbart\Downloads\PRE_182024212.pdf
2025-09-06 19:55 - 2025-09-06 19:55 - 000000000 ____D C:\Program Files\EpsonNet
2025-09-06 19:54 - 2025-09-06 19:54 - 000000000 ____D C:\WINDOWS\twain_64
2025-09-06 19:54 - 2025-09-06 19:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2025-09-06 19:54 - 2025-09-06 19:54 - 000000000 ____D C:\Program Files\epson
2025-09-06 19:54 - 2025-09-06 19:54 - 000000000 ____D C:\Program Files (x86)\epson
2025-09-06 19:54 - 2020-10-02 16:37 - 000206304 _____ (Seiko Epson Corporation) C:\WINDOWS\system32\escsvc64.exe
2025-09-06 19:54 - 2020-10-02 16:37 - 000165392 _____ (TWAIN Working Group) C:\WINDOWS\system32\twaindsm.dll
2025-09-06 19:54 - 2020-10-02 16:37 - 000147472 _____ (TWAIN Working Group) C:\WINDOWS\SysWOW64\twaindsm.dll
2025-09-06 19:50 - 2025-09-06 19:50 - 000002216 _____ C:\Users\Public\Desktop\Epson Printer Connection Checker.lnk
2025-09-06 19:50 - 2025-09-06 19:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2025-09-06 19:50 - 2025-09-06 19:50 - 000000000 ____D C:\Program Files (x86)\EPSON Software
2025-09-04 18:48 - 2025-09-04 18:48 - 000066352 _____ C:\Users\fbart\Downloads\Vodafone Vyúčtování číslo 1002190634.pdf
2025-09-03 11:59 - 2025-09-03 11:59 - 000023734 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-09-03 11:58 - 2025-09-03 11:58 - 000023734 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-09-02 21:02 - 2025-07-25 02:32 - 002072432 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2025-09-02 21:02 - 2025-07-25 02:32 - 002072432 _____ C:\WINDOWS\system32\vulkaninfo.exe
2025-09-02 21:02 - 2025-07-25 02:32 - 001614216 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-09-02 21:02 - 2025-07-25 02:32 - 001614216 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2025-09-02 21:02 - 2025-07-25 02:32 - 001576840 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2025-09-02 21:02 - 2025-07-25 02:32 - 001576840 _____ C:\WINDOWS\system32\vulkan-1.dll
2025-09-02 21:02 - 2025-07-25 02:32 - 001389960 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2025-09-02 21:02 - 2025-07-25 02:32 - 001389960 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2025-09-02 21:02 - 2025-07-25 02:32 - 000477840 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2025-09-02 21:02 - 2025-07-25 02:32 - 000374424 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2025-09-02 21:02 - 2025-07-25 02:27 - 001183952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2025-09-02 21:02 - 2025-07-25 02:27 - 000670416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2025-09-02 21:02 - 2025-07-25 02:27 - 000506064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2025-09-02 21:02 - 2025-07-25 02:26 - 025643128 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2025-09-02 21:02 - 2025-07-25 02:26 - 002195152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2025-09-02 21:02 - 2025-07-25 02:26 - 001642192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2025-09-02 21:02 - 2025-07-25 02:26 - 001563768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2025-09-02 21:02 - 2025-07-25 02:26 - 001216152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2025-09-02 21:02 - 2025-07-25 02:26 - 001046224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2025-09-02 21:02 - 2025-07-25 02:26 - 000905424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2025-09-02 21:02 - 2025-07-25 02:26 - 000803960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2025-09-02 21:02 - 2025-07-25 02:25 - 019905256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2025-09-02 21:02 - 2025-07-25 02:25 - 019330256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2025-09-02 21:02 - 2025-07-25 02:25 - 007224472 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2025-09-02 21:02 - 2025-07-25 02:25 - 005500648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2025-09-02 21:02 - 2025-07-25 02:25 - 003944680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2025-09-02 21:02 - 2025-07-25 02:25 - 000463568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2025-09-02 21:02 - 2025-07-25 02:24 - 005917904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2025-09-02 21:02 - 2025-07-25 02:24 - 000853712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2025-09-02 21:02 - 2025-07-25 02:21 - 005559600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2025-09-02 21:02 - 2025-07-25 02:21 - 004863344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2025-09-02 21:02 - 2025-07-25 01:38 - 000137909 _____ C:\WINDOWS\system32\nvinfo.pb
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-10-02 10:49 - 2017-12-01 23:30 - 000000000 ____D C:\FRST
2025-10-02 10:44 - 2022-02-09 20:15 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-10-02 10:30 - 2016-12-20 23:33 - 000000000 ___SD C:\Users\fbart\AppData\Roaming\Microsoft\Credentials
2025-10-02 10:26 - 2018-02-23 20:46 - 000000000 ____D C:\Users\fbart\AppData\Roaming\MPC-HC
2025-10-02 10:26 - 2016-12-21 00:19 - 000000000 ____D C:\Users\fbart\AppData\Roaming\Microsoft\Office
2025-10-02 10:23 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2025-10-02 10:23 - 2018-08-14 19:08 - 000000000 ____D C:\Users\fbart\AppData\Local\CrashDumps
2025-10-02 10:20 - 2016-12-20 23:45 - 000000000 ____D C:\Program Files\CCleaner
2025-10-02 10:18 - 2025-08-03 17:54 - 000003386 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2025-10-02 10:18 - 2022-10-05 13:57 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2025-10-02 10:17 - 2018-04-16 17:25 - 000000000 ____D C:\Users\fbart\AppData\Local\AVAST Software
2025-10-02 10:01 - 2018-04-16 17:25 - 000002527 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2025-10-02 10:01 - 2018-04-16 17:25 - 000002492 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2025-10-02 09:59 - 2018-05-28 18:39 - 000000000 ____D C:\Users\fbart\AppData\Local\D3DSCache
2025-10-02 09:55 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-10-02 09:53 - 2021-05-19 14:55 - 000003844 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2025-10-02 09:53 - 2021-05-19 14:55 - 000003260 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2025-10-02 09:52 - 2021-12-22 23:01 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-10-02 09:52 - 2016-12-20 23:56 - 000000000 ____D C:\Program Files\AVAST Software
2025-10-02 09:51 - 2021-05-19 14:55 - 000003456 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineUA
2025-10-02 09:51 - 2021-05-19 14:55 - 000003332 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineCore
2025-10-02 09:51 - 2021-05-19 14:53 - 001885574 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-10-02 09:51 - 2019-12-07 16:41 - 000785556 _____ C:\WINDOWS\system32\perfh005.dat
2025-10-02 09:51 - 2019-12-07 16:41 - 000182314 _____ C:\WINDOWS\system32\perfc005.dat
2025-10-02 09:51 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2025-10-02 09:45 - 2021-07-20 15:09 - 000000000 ____D C:\Users\fbart\AppData\Roaming\Microsoft\Teams
2025-10-02 09:44 - 2025-03-17 18:26 - 000000000 ____D C:\Users\fbart\AppData\Local\Malwarebytes
2025-10-02 09:43 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-10-02 09:39 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-10-02 09:39 - 2017-06-12 19:12 - 000000000 ____D C:\ProgramData\NVIDIA
2025-10-02 09:39 - 2016-12-20 23:34 - 000000000 __SHD C:\Users\fbart\IntelGraphicsProfiles
2025-10-02 09:38 - 2021-05-19 14:55 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-10-02 09:38 - 2021-05-19 14:41 - 000712312 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-10-02 09:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2025-10-02 09:38 - 2017-06-12 19:13 - 000000000 ____D C:\ProgramData\Synaptics
2025-10-02 09:38 - 2016-12-20 23:57 - 000002095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2025-10-02 09:38 - 2016-12-20 23:57 - 000002083 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2025-10-02 09:38 - 2016-10-30 00:18 - 000000000 ____D C:\Intel
2025-10-02 09:37 - 2021-05-19 14:41 - 000008192 ___SH C:\DumpStack.log.tmp
2025-10-02 09:37 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-10-02 09:37 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-10-02 09:35 - 2018-05-28 17:30 - 000000000 ____D C:\Users\fbart\AppData\Roaming\Microsoft\Paint
2025-10-02 09:25 - 2021-05-19 14:41 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-10-02 04:56 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-10-02 04:49 - 2021-05-19 14:44 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-10-02 03:02 - 2021-07-23 18:47 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2025-10-02 01:22 - 2025-02-06 11:25 - 000003108 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2002658774-1703651359-3694545506-1002
2025-10-02 01:22 - 2024-10-28 11:14 - 000003066 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2002658774-1703651359-3694545506-1002
2025-10-02 01:22 - 2024-10-28 11:14 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2002658774-1703651359-3694545506-1002
2025-10-02 01:22 - 2023-10-12 09:29 - 000002654 _____ C:\WINDOWS\system32\Tasks\CLToast
2025-10-02 01:22 - 2023-10-12 09:29 - 000002480 _____ C:\WINDOWS\system32\Tasks\CLToastRun
2025-10-02 01:22 - 2023-07-28 13:54 - 000002508 _____ C:\WINDOWS\system32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0
2025-10-02 01:22 - 2021-12-15 22:57 - 000002254 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - fbart
2025-10-02 01:22 - 2021-07-23 18:51 - 000002596 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2025-10-02 01:22 - 2021-05-19 14:55 - 000003508 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1582720617
2025-10-02 01:22 - 2021-05-19 14:55 - 000003464 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-10-02 01:22 - 2021-05-19 14:55 - 000003366 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1487236436
2025-10-02 01:22 - 2021-05-19 14:55 - 000003238 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-10-02 01:22 - 2021-05-19 14:55 - 000003194 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2025-10-02 01:20 - 2021-05-19 14:55 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2025-10-01 20:13 - 2016-12-26 17:31 - 000000000 ____D C:\Users\fbart\AppData\Roaming\vlc
2025-10-01 18:49 - 2017-02-16 11:12 - 000000000 ____D C:\Program Files\Opera
2025-10-01 14:19 - 2016-12-30 21:15 - 000000000 ____D C:\Users\fbart\Documents\Lexicon
2025-09-30 15:28 - 2020-07-07 13:27 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-09-30 15:28 - 2020-07-07 13:27 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2025-09-30 14:51 - 2020-10-24 18:03 - 000284768 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2025-09-30 14:51 - 2020-04-20 21:08 - 000574048 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2025-09-30 14:51 - 2019-01-14 15:47 - 000390752 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2025-09-30 14:51 - 2019-01-09 13:05 - 000299616 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2025-09-30 14:51 - 2019-01-09 13:05 - 000085600 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2025-09-30 14:51 - 2019-01-09 13:05 - 000021088 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2025-09-30 14:51 - 2018-10-24 00:01 - 000029792 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2025-09-30 14:51 - 2018-03-09 11:33 - 001282632 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSP.sys
2025-09-30 14:51 - 2018-03-09 11:33 - 000876104 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2025-09-30 14:51 - 2018-03-09 11:33 - 000391776 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswVmm.sys
2025-09-30 14:51 - 2018-03-09 11:33 - 000244832 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArPot.sys
2025-09-30 14:51 - 2018-03-09 11:33 - 000092232 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2025-09-30 14:51 - 2018-03-09 11:33 - 000071240 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2025-09-30 14:48 - 2020-05-13 22:14 - 000002300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-09-30 14:48 - 2020-05-13 22:14 - 000002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-09-21 19:28 - 2016-12-20 23:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-09-21 19:28 - 2016-12-20 23:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2025-09-21 19:12 - 2017-06-22 10:45 - 000000000 ____D C:\Users\fbart\AppData\Roaming\Microsoft\Windows Photo Viewer
2025-09-21 19:10 - 2016-12-20 23:40 - 000001239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-09-21 19:09 - 2017-11-28 11:14 - 000002240 _____ C:\Users\fbart\Desktop\JDownloader 2.lnk
2025-09-21 19:07 - 2016-12-20 23:53 - 000000000 ____D C:\ProgramData\AVAST Software
2025-09-21 19:05 - 2024-07-14 13:58 - 000000000 ____D C:\WINDOWS\system32\compatrel
2025-09-21 19:05 - 2021-05-19 15:16 - 000000000 ____D C:\WINDOWS\en-GB
2025-09-21 19:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-09-21 19:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-09-21 18:57 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2025-09-19 23:17 - 2021-05-19 14:45 - 000002436 _____ C:\Users\fbart\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-09-15 14:28 - 2021-09-23 19:31 - 000002180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2025-09-15 14:28 - 2021-09-23 19:31 - 000002015 _____ C:\Users\Default\Desktop\Google Slides.lnk
2025-09-15 14:28 - 2021-09-23 19:31 - 000002015 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2025-09-15 14:28 - 2021-09-23 19:31 - 000002003 _____ C:\Users\Default\Desktop\Google Docs.lnk
2025-09-15 14:28 - 2018-10-12 10:50 - 000002055 _____ C:\Users\fbart\Desktop\Google Drive.lnk
2025-09-12 12:11 - 2019-11-17 11:37 - 000000000 ____D C:\Users\fbart\Documents\Zoom
2025-09-06 19:54 - 2025-05-24 15:30 - 000000000 ____D C:\ProgramData\EPSON
2025-09-06 17:36 - 2024-12-28 00:53 - 000000000 ____D C:\Users\fbart\AppData\LocalLow\NVIDIA
2025-09-02 21:04 - 2019-06-27 09:11 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2025-09-02 20:43 - 2021-05-19 14:45 - 000000000 ____D C:\Users\fbart
2025-09-02 19:27 - 2016-12-22 20:42 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-09-02 19:04 - 2016-12-22 20:42 - 223939376 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Files in the root of some directories ========
2022-09-19 15:35 - 2022-09-19 15:35 - 000000000 _____ () C:\Program Files (x86)\test.txt
2019-06-24 16:45 - 2019-06-24 16:46 - 002535362 _____ () C:\Users\fbart\AppData\Roaming\AvidLink_Install.log
2018-06-26 22:25 - 2018-06-26 22:25 - 000000861 _____ () C:\Users\fbart\AppData\Roaming\Avid_CCS_Service_Stop.log
2021-07-23 19:06 - 2021-07-23 19:06 - 000000000 _____ () C:\Users\fbart\AppData\Local\oobelibMkey.log
2017-01-09 22:48 - 2025-09-01 17:00 - 000007609 _____ () C:\Users\fbart\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Chtěl bych si ověřit, zda za tím nestojí nějaká havěť, případně zda je vše ostatní v pořádku.
Děkuji!
-------------------
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 30-09-2025
Ran by fbart (administrator) on DESKTOP-1NAN9QR (HP HP ProBook 450 G4) (02-10-2025 10:47:15)
Running from D:\SOFTWARE\FRST\FRST64.exe
Loaded Profiles: fbart
Platform: Microsoft Windows 10 Home Version 22H2 19045.6332 (X64) Language: Czech (Czech Republic) -> English (United Kingdom)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\bckp_amgr.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\monitoring-mini.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\task-manager.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\adp-agent.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\updater.exe
(C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe ->) (Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\adp-rest-util.exe
(C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe ->) (FOXIT SOFTWARE INC. -> Foxit Corporation) C:\Users\fbart\AppData\Roaming\Foxit Software\Continuous\Addon\Foxit PDF Reader\FoxitPDFReaderUpdater.exe
(C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files\AVAST Software\Avast\AvastSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(C:\Program Files\CCleaner\CCleaner64.exe ->) (Gen Digital Inc. -> OPSWAT, Inc.) C:\Program Files\CCleaner\wa_3rd_party_host_32.exe
(C:\Program Files\CCleaner\CCleaner64.exe ->) (Gen Digital Inc. -> OPSWAT, Inc.) C:\Program Files\CCleaner\wa_3rd_party_host_64.exe
(C:\Program Files\Google\Drive File Stream\114.0.1.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\114.0.1.0\crashpad_handler.exe
(C:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpHostW.exe ->) (DigitalPersona, Inc. -> Crossmatch, Inc.) C:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpCardEngine.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(C:\Windows\CxSvc\CxAudioSvc.exe ->) (Synaptics Incorporated -> Conexant Systems LLC.) C:\Program Files\CONEXANT\SA3\HP-NB-AIO\SmartAudio3.exe
(C:\Windows\CxSvc\CxAudioSvc.exe ->) (Synaptics Incorporated -> Conexant Systems, Inc) C:\Program Files\CONEXANT\Flow\Flow.exe
(DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\HotKeyServiceUWP.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\HPHotkeyNotification.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_5481f7821d650a44\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5481f7821d650a44\igfxEM.exe
(explorer.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\FoxitPDFReader.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <67>
(explorer.exe ->) (Google LLC -> Google LLC.) C:\Program Files\Google\Drive File Stream\114.0.1.0\GoogleDriveFS.exe <7>
(explorer.exe ->) (Microsoft Corporation) [File not signed] C:\Program Files\Classic Paint\mspaint1.exe <2>
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\perfmon.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(explorer.exe ->) (Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(explorer.exe ->) (MUSIC Tribe Brands DE GmbH -> ) C:\Program Files\BEHRINGER\UMC_Audio_Driver\x64\UMCAudioCplApp.exe
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\AvastUI.exe <4>
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\CCleaner\CCleaner64.exe <2>
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\aakore.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (Ascensio System SIA -> Ascensio System SIA) C:\Program Files\ONLYOFFICE\DesktopEditors\updatesvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(services.exe ->) (Avid Technology, Inc. -> Avid Technology, Inc.) C:\Program Files\Avid\Cloud Client Services\Hub.exe
(services.exe ->) (Avid Technology, Inc. -> Avid Technology, Inc.) C:\Program Files\Avid\Cloud Client Services\TransportClient.exe
(services.exe ->) (Avid Technology, Inc.) [File not signed] C:\Program Files\Avid\Pro Tools First\MMERefresh.exe
(services.exe ->) (Comodo Security Solutions Inc -> Comodo) C:\Program Files (x86)\COMODO\Dragon\dragon_updater.exe
(services.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe
(services.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe <2>
(services.exe ->) (Conexant Systems LLC.) [File not signed] C:\Windows\CxSvc\CxUtilSvc.exe
(services.exe ->) (DigitalPersona, Inc. -> Crossmatch, Inc.) C:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpHostW.exe
(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe
(services.exe ->) (Hewlett Packard Enterprise Company -> Hewlett Packard Enterprise Company) C:\Program Files (x86)\HP\HP Device Access Manager\HPE.DeviceAccessManager.ServiceHost.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\HotKeyServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\HPAudioAnalytics.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\LanWlanWwanSwitchingServiceUWP.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5481f7821d650a44\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5481f7821d650a44\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_5481f7821d650a44\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\fpCSEvtSvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvbl.inf_amd64_f6b5d3bff633c683\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(services.exe ->) (Shanghai Microvirt Software Technology Co., Ltd. -> ) D:\Program Files\Microvirt\MEmu\MemuService.exe
(services.exe ->) (Softland SRL -> Microsoft) C:\Program Files\Softland\novaPDF 10\Server\novapdfs.exe
(services.exe ->) (Synaptics Incorporated -> Conexant Systems LLC.) C:\Windows\CxSvc\CxAudioSvc.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2539.2.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Synaptics Incorporated -> Conexant) C:\Windows\System32\MicTray64.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320584 2016-06-30] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [845992 2025-09-30] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\...\Run: [DigidesignMMERefresh] => C:\Program Files\Avid\Pro Tools First\MMERefresh.exe [117760 2018-04-03] (Avid Technology, Inc.) [File not signed]
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [9523624 2025-05-24] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [644000 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM\...\Run: [PowerDVD22Agent] => C:\Program Files\CyberLink\PowerDVD22\PowerDVD22Agent.exe [569976 2022-07-14] (CyberLink Corp. -> CyberLink Corp.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [369488 2024-10-12] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [455968 2023-05-25] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-07-23] (Adobe Inc. -> )
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6206360 2021-03-23] (Acronis International GmbH -> )
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [446392 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Program Files\Opera\assistant\browser_assistant.exe [4834712 2024-11-05] (Opera Norway AS -> Opera Software)
HKLM-x32\...\Run: [CLMLServer_For_P2G13] => C:\Program Files (x86)\CyberLink\Power2Go13\CLMLSvc_P2G13.exe [154296 2019-05-23] (CyberLink Corp. -> CyberLink)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\114.0.1.0\GoogleDriveFS.exe [66461848 2025-09-15] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\114.0.1.0\GoogleDriveFS.exe [66461848 2025-09-15] (Google LLC -> Google LLC.)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45724528 2025-06-23] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [com.squirrel.Teams.Teams] => C:\Users\fbart\AppData\Local\Microsoft\Teams\Update.exe [2583608 2025-08-03] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\114.0.1.0\GoogleDriveFS.exe [66461848 2025-09-15] (Google LLC -> Google LLC.)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [Titan Backup] => C:\Program Files (x86)\Titan Backup\Launcher.exe [142784 2008-12-18] (Neobyte Solutions SRL -> Neobyte Solutions)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [com.squirrel.WhatsApp.WhatsApp] => C:\Users\fbart\AppData\Local\WhatsApp\Update.exe [2412768 2023-06-29] (WhatsApp LLC -> )
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [MicrosoftEdgeAutoLaunch_CBC3A2C48DD08E53B4E467E37B52CD84] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4241488 2025-09-25] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [Power2GoExpress13] => C:\Program Files (x86)\CyberLink\Power2Go13\Power2GoExpress.exe [3699184 2020-08-25] (CyberLink Corp. -> CyberLink Corp.)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [CyberlinkPowerPlayerMediaServer_PowerDVD22] => C:\Program Files\CyberLink\PowerDVD22\Common\CLMediaServer\clmediaserver.exe [6775928 2022-07-14] (CyberLink Corp. -> CyberLink Corp.)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [Mozilla-Firefox-E7CF176E110C211B] => "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -os-autostart [692864 2025-09-21] (Mozilla Corporation -> Mozilla Corporation)
HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\...\Run: [Opera Stable] => C:\Program Files\Opera\opera.exe [2068440 2025-08-12] (Opera Norway AS -> Opera Software)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\114.0.1.0\GoogleDriveFS.exe [66461848 2025-09-15] (Google LLC -> Google LLC.)
HKLM\...\Windows x64\Print Processors\HP1020PrintProc: C:\Windows\System32\spool\prtprocs\x64\pphp1020.dll [65024 2017-01-10] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\doPDF 7 Monitor: C:\windows\system32\dopdfmn7.dll [25920 2016-12-29] (Softland S.R.L. -> Softland)
HKLM\...\Print\Monitors\EPSON L8160 Series 64MonitorBE: C:\windows\system32\E_YLMBYBE.DLL [239104 2023-10-30] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\windows\system32\enppmon.dll [3167256 2024-08-30] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\HPLJ1020LM: C:\windows\system32\zlhp1020.dll [192512 2017-01-10] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\novaPDF 10 Port Monitor: C:\windows\system32\novamn10.dll [18944 2020-04-01] (Softland) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\92.2.11577.159\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\140.0.7339.208\Installer\chrmstp.exe [2025-09-30] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files\AVAST Software\Browser\Application\139.0.31974.157\Installer\chrmstp.exe [2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\86.1.6782.183\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
HKLM\Software\...\Authentication\Credential Providers: [{77B7ED10-A641-4766-A428-8B9EE42E830A}] -> C:\windows\system32\DPCrProv2.dll [2016-07-19] (DigitalPersona, Inc. -> Crossmatch, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{E85E7D14-653B-4E51-9BC5-E5F9EC9BC51D}] -> C:\windows\system32\DPCrProv2.dll [2016-07-19] (DigitalPersona, Inc. -> Crossmatch, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{F0C31759-99A6-493E-AD7D-7F69126CDFBC}] -> C:\windows\system32\DPCrProv2.dll [2016-07-19] (DigitalPersona, Inc. -> Crossmatch, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{F731030D-3272-4D8B-A21A-3940EF268453}] -> C:\windows\system32\DPCrProv2.dll [2016-07-19] (DigitalPersona, Inc. -> Crossmatch, Inc.)
HKLM\Software\...\Authentication\Credential Provider Filters: [{DCFB2A33-814B-4236-BFBD-FFEA3F528385}] -> C:\windows\system32\DPCrProv2.dll [2016-07-19] (DigitalPersona, Inc. -> Crossmatch, Inc.)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\Users\fbart\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\englishme!.lnk [2023-04-27]
ShortcutTarget: englishme!.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avid Link.lnk [2019-06-24]
ShortcutTarget: Avid Link.lnk -> C:\Program Files\Avid\Avid Link\Avid Link.exe (Avid Technology, Inc. -> Avid Technology, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP JumpStart Launch.lnk [2016-10-29]
ShortcutTarget: HP JumpStart Launch.lnk -> c:\Windows\Installer\{0F5EBB0D-DF6D-4DBE-9789-57BF05B3B0FD}\HPlogo_blue.ico () [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2025-04-17]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\UMC Control Panel Autostart.lnk [2023-07-26]
ShortcutTarget: UMC Control Panel Autostart.lnk -> C:\Program Files\BEHRINGER\UMC_Audio_Driver\x64\UMCAudioCplApp.exe (MUSIC Tribe Brands DE GmbH -> )
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {493ED88C-79E7-4817-9B2A-FE032ABEB371} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {1CC38B53-A328-4DB6-AEEB-82D4015A1931} - System32\Tasks\Adobe Creative Cloud => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [779504 2021-07-23] (Adobe Inc. -> Adobe Inc.)
Task: {0A2D3C89-B388-47C0-967D-E2527412BE5C} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [9523624 2025-05-24] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {28352C39-466F-4540-A917-0165A0633432} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [9838504 2025-05-24] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {A3803614-2718-4A67-928B-BC225201EB48} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3595344 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {5FFDA3A6-358E-4A17-8F44-C15B16230E1A} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3595344 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {EA0C5CF4-A433-47A7-B3E5-14BC110585E9} - System32\Tasks\Avast Secure Browser VPS Differential Update S-1-5-18 => C:\Program Files (x86)\AVAST Software\Browser\Application\vps_helper.exe [1676528 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {56706CE9-3A37-45EE-9A2A-E1A185761CA7} - System32\Tasks\Avast Secure Browser VPS Differential Update S-1-5-21-2002658774-1703651359-3694545506-1002 => C:\Program Files\AVAST Software\Browser\Application\vps_helper.exe [1676528 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {CEAAB1D6-0D47-42FE-B735-587283D1F67C} - System32\Tasks\Avast Software\Avast Antivirus Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-av\icarus.exe [9072352 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {0BB57B52-0A3E-449E-B5E2-2B3A14F440D6} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5573800 2025-09-30] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {94333FE9-C5A2-412C-B30A-BFC66C47FF8E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2295192 2023-01-31] (Avast Software s.r.o. -> Avast Software)
Task: {E22EA86F-0E37-4E75-876E-920F204553E4} - System32\Tasks\AvastBrowserProtectS-1-5-21-2002658774-1703651359-3694545506-1002 => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1762528 2025-09-11] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {98A0AFCD-BB66-4C41-B5EE-F58EC42B9728} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {0315D22F-55A8-4872-B593-CBA6743545C8} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {1B722D39-16E9-4443-8BB6-4524377057C7} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-06-23] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {2CBAF108-94AF-4ACE-A660-5E48447D0711} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-06-23] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "d69b8913-fbe2-4c6b-8e6b-b8083f51231d" --version "6.37.0.11523" --silent
Task: {E4043D11-6B42-41B7-A790-963B06103110} - System32\Tasks\CCleanerSkipUAC - fbart => C:\Program Files\CCleaner\CCleaner.exe [39562464 2025-06-23] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {1F61D2F6-8386-4C6F-ACF2-0958A10E5709} - System32\Tasks\CLToast => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2319632 2022-04-14] (CyberLink Corp. -> )
Task: {A7ACEEE8-0335-4289-8C2C-34EFF6E15D2A} - System32\Tasks\CLToastRun => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2319632 2022-04-14] (CyberLink Corp. -> )
Task: {338E88A2-EDFB-4A81-98EA-CBAD8E7F6728} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {C0C70F2E-A974-4FF8-95A4-661E8091DA9C} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {C11EB089-78EE-48DE-9BA7-359A83745372} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {2364088E-19F8-4F7A-8A88-80C74475F615} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {93E3645D-9929-4696-B45E-6727B7D982D3} - System32\Tasks\COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {15F9F943-91F3-431B-A068-68EF69CFC841} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {1A0E7D9A-2E5D-49C7-A1B9-997A203B84D5} - System32\Tasks\doPDF 10 Telemetry => C:\Program Files\Softland\novaPDF 10\Driver\GoogleAnalytics.exe [51504 2020-04-01] (Softland SRL -> )
Task: {72E6F0CC-945E-4467-A36B-00D5278CCD0B} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem142.0.7416.0{3F443B01-C7F6-4949-B282-0B0C5BCE2F30} => C:\Program Files (x86)\Google\GoogleUpdater\142.0.7416.0\updater.exe [6863512 2025-09-15] (Google LLC -> Google LLC)
Task: {D8BEE701-0BE4-4C82-AE00-D32BFE3F2A6D} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [91144 2025-08-29] (HP Inc. -> HP Inc.)
Task: {52001519-27B0-4FCB-B05F-08A246455407} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [91144 2025-08-29] (HP Inc. -> HP Inc.)
Task: {6E63C272-93D0-4442-908D-4D969E42433F} - System32\Tasks\HPEA3JOBS => C:\Program -> Files\HP\HP ePrint\hpeprint.exe /CheckJobs
Task: {468B8D09-A923-4767-A43B-646993EA1D39} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [17335976 2017-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {9BF8FCA5-10F7-470D-B2A8-275CC647D078} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [17335976 2017-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {BD5A8FA8-06EA-446B-A5F8-180A99237DD3} - System32\Tasks\Microsoft\Windows\Conexant\MicTray => C:\Windows\System32\MicTray64.exe [5009512 2020-06-13] (Synaptics Incorporated -> Conexant)
Task: {F32BBD50-5B69-4697-B343-05065404B3A6} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [34944 2025-09-21] (Mozilla Corporation -> Mozilla Foundation)
Task: {5A5A2823-DF63-4F9F-9BF3-AE3451103D89} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2002658774-1703651359-3694545506-1002 => C:\Users\fbart\AppData\Local\Microsoft\OneDrive\25.164.0824.0003\OneDriveLauncher.exe [725864 2025-09-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {8176DF82-1E23-48FD-968F-63FBE865BFA3} - System32\Tasks\Opera scheduled assistant Autoupdate 1582720617 => C:\Program Files\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Program Files\Opera\assistant" $(Arg0)
Task: {5896C453-2475-4C3C-9CCE-455E1F28D1A4} - System32\Tasks\Opera scheduled Autoupdate 1487236436 => C:\Program Files\Opera\autoupdate\opera_autoupdate.exe [6239704 2025-08-06] (Opera Norway AS -> Opera Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}\6556A6D696E656B6: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}\6556A6D696E656B6: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}\8405D33556475707C36354E7445637B6A45647022383030302375627965637: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}\D6F647F602764313F553130343: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{7bb2afef-f054-4d68-bdc1-066d09ae6753}\D6F647F602764313F553130343: [DhcpNameServer] 10.129.132.60
Tcpip\..\Interfaces\{9a41f277-0fa9-4555-953f-aa9788cd4df8}: [DhcpNameServer] 10.10.10.10 10.100.0.100
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\fbart\AppData\Local\Microsoft\Edge\User Data\Default [2025-10-02]
Edge Session Restore: Default -> is enabled.
Edge Extension: (Google Docs Offline) - C:\Users\fbart\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-27]
Edge Extension: (Edge relevant text changes) - C:\Users\fbart\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-03]
FireFox:
========
FF DefaultProfile: xs1zf06h.default-1602174025168
FF ProfilePath: C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168 [2025-10-02]
FF Session Restore: Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168 -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168 -> hxxps://app.slack.com; hxxps://my.jdownloader.org; hxxps://www.facebook.com
FF Extension: (Facebook Container) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\@contain-facebook.xpi [2025-03-24]
FF Extension: (German Dictionary, extended for Austria) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\de-AT@dictionaries.addons.mozilla.org.xpi [2022-11-24]
FF Extension: (German Dictionary (Switzerland)) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\de-CH@dictionaries.addons.mozilla.org.xpi [2022-11-24]
FF Extension: (German Dictionary) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\de-DE@dictionaries.addons.mozilla.org.xpi [2022-11-24]
FF Extension: (LexFox) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\info@lingea.com.xpi [2021-08-17] [UpdateUrl:hxxps://www.lingea.eu/updates/lexfox/update.json]
FF Extension: (MyJDownloader Browser Extension) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2023-04-28] [UpdateUrl:hxxps://my.jdownloader.org/extensions/firefox.json]
FF Extension: (Language: Deutsch (German)) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\langpack-de@firefox.mozilla.org.xpi [2025-09-30]
FF Extension: (Photon Colors) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\Extensions\{2c6c94f3-c656-41e9-aa4b-1edba5be9c21}.xpi [2021-07-31]
FF Extension: (Data Leak Blocker) - C:\Users\fbart\AppData\Roaming\Mozilla\Firefox\Profiles\xs1zf06h.default-1602174025168\features\{b1ac5285-0912-4f6d-a528-9210e821e2b7}\data-leak-blocker@mozilla.com.xpi [2025-09-30]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2021-07-23] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.18 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.19 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.20 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.21 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2021-07-23] (Adobe Inc. -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\fbart\AppData\Local\Google\Chrome\User Data\Default [2025-10-02]
CHR Notifications: Default -> hxxps://www.instagram.com
CHR Session Restore: Default -> is enabled.
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\fbart\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-09-08]
CHR Extension: (Chrome Web Store Payments) - C:\Users\fbart\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-05-21]
CHR Extension: (ZED: Zoom Easy Downloader) - C:\Users\fbart\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdadlkbckhinonakkfkdaadceojbekep [2025-09-15]
CHR HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\fbart\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx <not found>
CHR HKU\S-1-5-21-2002658774-1703651359-3694545506-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
Opera:
=======
OPR DefaultProfile: Default
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\opera.exe
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aakore; C:\Program Files (x86)\Acronis\Agent\aakore.exe [9022120 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [12952232 2021-03-23] (Acronis International GmbH -> )
S4 AcronisCyberProtectionService; C:\Program Files\Acronis\CyberProtect\cyber-protect-service.exe [1425256 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1052280 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
S3 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [842480 2021-07-23] (Adobe Inc. -> Adobe Inc.)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6391536 2021-08-01] (Acronis International GmbH -> )
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [103776 2024-10-02] (Apple Inc. -> Apple Inc.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [7785640 2025-09-30] (Gen Digital Inc. -> Gen Digital Inc.)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [1036456 2025-09-30] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2598568 2025-09-30] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [1089704 2025-09-30] (Gen Digital Inc. -> Gen Digital Inc.)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2025-10-02] (Gen Digital Inc. -> Gen Digital Inc.)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\139.0.31974.157\elevation_service.exe [2436304 2025-09-12] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56912 2021-06-03] (Avast Software s.r.o. -> AVAST Software)
R2 AvidHubService; C:\Program Files\Avid\Cloud Client Services\Hub.exe [2299208 2017-11-09] (Avid Technology, Inc. -> Avid Technology, Inc.)
R2 AvidTransportClient; C:\Program Files\Avid\Cloud Client Services\TransportClient.exe [7067464 2017-11-09] (Avid Technology, Inc. -> Avid Technology, Inc.)
R3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1080544 2025-06-23] (Gen Digital Inc. -> Gen Digital Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7923888 2017-10-12] (Microsoft Corporation -> Microsoft Corporation)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R2 CmdAgentProt; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2675504 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R2 CxAudioSvc; C:\WINDOWS\CxSvc\CxAudioSvc.exe [96432 2020-09-08] (Synaptics Incorporated -> Conexant Systems LLC.)
R2 CxUtilSvc; C:\WINDOWS\CxSvc\CxUtilSvc.exe [166400 2019-06-25] (Conexant Systems LLC.) [File not signed]
R2 DigiRefresh; C:\Program Files\Avid\Pro Tools First\MMERefresh.exe [117760 2018-04-03] (Avid Technology, Inc.) [File not signed]
S3 digiSPTIService64; C:\Program Files\Avid\Pro Tools First\digisptiservice64.exe [197632 2018-04-03] (Avid Technology, Inc.) [File not signed]
R2 DpHost; c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpHostW.exe [527296 2016-07-19] (DigitalPersona, Inc. -> Crossmatch, Inc.)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2261776 2025-05-06] (Comodo Security Solutions Inc -> Comodo)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [206304 2020-10-02] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 FLCDLOCK; c:\windows\SysWOW64\flcdlock.exe [567888 2016-08-11] (Hewlett Packard Enterprise Company -> Hewlett-Packard Company)
R2 FoxitReaderUpdateService; C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2494448 2024-09-11] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R2 fpCsEvtSvc; C:\WINDOWS\System32\fpCSEvtSvc.exe [22424 2019-05-05] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 HotKeyServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\HotKeyServiceUWP.exe [1511552 2025-08-06] (HP Inc. -> HP Inc.)
R2 HPAudioAnalytics; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\HPAudioAnalytics.exe [503960 2025-08-06] (HP Inc. -> HP Inc.)
R2 HpDamServiceHost; c:\Program Files (x86)\HP\HP Device Access Manager\HPE.DeviceAccessManager.ServiceHost.exe [20376 2016-08-09] (Hewlett Packard Enterprise Company -> Hewlett Packard Enterprise Company)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243720 2025-08-29] (HP Inc. -> HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1083200 2016-12-22] (HP Inc. -> HP)
R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [1044176 2019-01-29] (Comodo Security Solutions, Inc. -> COMODO)
R2 LanWlanWwanSwitchingServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_ba096fb4f67b0f61\LanWlanWwanSwitchingServiceUWP.exe [608408 2025-08-06] (HP Inc. -> HP Inc.)
S3 LibreOfficeMaintenance; C:\Program Files\LibreOffice\program\update_service.exe [123304 2025-09-01] (The Document Foundation -> The Document Foundation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9609096 2025-09-02] (Malwarebytes Inc -> Malwarebytes)
S4 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-03-17] (Malwarebytes Inc. -> Malwarebytes)
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe [270336 2001-02-23] (Microsoft Corporation) [File not signed]
R2 MEmuSVC; D:\Program Files\Microvirt\MEmu\MemuService.exe [85304 2019-09-12] (Shanghai Microvirt Software Technology Co., Ltd. -> )
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4878840 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [2136488 2021-03-23] (Acronis International GmbH -> )
R2 NovaPdf10Server; C:\Program Files\Softland\novaPDF 10\Server\novapdfs.exe [52528 2020-04-01] (Softland SRL -> Microsoft)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvbl.inf_amd64_f6b5d3bff633c683\Display.NvContainer\NVDisplay.Container.exe [1275000 2025-07-25] (NVIDIA Corporation -> NVIDIA Corporation)
R2 ONLYOFFICE Update Service; C:\Program Files\ONLYOFFICE\DesktopEditors\updatesvc.exe [638672 2025-04-15] (Ascensio System SIA -> Ascensio System SIA)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7398360 2021-03-23] (Acronis International GmbH -> )
S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [5910328 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 valWBFPolicyService; C:\WINDOWS\System32\valWBFPolicyService.exe [91032 2019-05-05] (Microsoft Windows Hardware Compatibility Publisher -> Synaptics Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\NisSrv.exe [2484256 2020-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MsMpEng.exe [103168 2020-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [244832 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [390752 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [299616 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [85600 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [29144 2025-07-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [29792 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [284768 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [574048 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [92232 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [71240 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [876104 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1282632 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [201824 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [391776 2025-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2021-03-23] (Bitdefender SRL -> Bitdefender)
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [148992 2024-07-14] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [File not signed]
R2 CLFCL5.22; C:\WINDOWS\System32\drivers\CLFCL5.22\000.fcl [47792 2022-07-15] (CyberLink Corp. -> CyberLink Corp.)
S0 cmdboot; C:\WINDOWS\System32\DRIVERS\cmdboot.sys [17576 2020-01-27] (Microsoft Windows Early Launch Anti-malware Publisher -> COMODO)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [38880 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [844000 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [47104 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
S3 DAMDrv; C:\WINDOWS\system32\DRIVERS\DAMDrv64.sys [76432 2016-08-11] (Hewlett Packard Enterprise Company -> Hewlett-Packard Enterpise Company)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ewusbmbb; C:\WINDOWS\System32\drivers\ewusbwwan.sys [421376 2010-12-23] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 ew_hwusbdev; C:\WINDOWS\system32\DRIVERS\ew_hwusbdev.sys [117248 2010-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 FFUsbAudio; C:\WINDOWS\System32\drivers\ffusbaudio.sys [53080 2011-10-31] (Focusrite Audio Engineering Limited -> Focusrite Audio Engineering Ltd.)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [720392 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [392840 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
R0 fltsrv; C:\WINDOWS\System32\DRIVERS\fltsrv.sys [183944 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
R2 googledrivefs31931; C:\Program Files\Google\Drive File Stream\Drivers\31931\googledrivefs31931.sys [386256 2025-05-12] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R3 huawei_enumerator; C:\WINDOWS\System32\drivers\ew_jubusenum.sys [86016 2011-01-30] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 hwdatacard; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [221312 2010-12-24] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 hwusbdev; C:\WINDOWS\system32\DRIVERS\ewusbdev.sys [114304 2016-12-29] (Huawei Technologies Co., Ltd.) [File not signed]
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [130256 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [63256 2018-08-29] (Comodo Security Solutions, Inc. -> COMODO)
R0 klupd_df345591a_arkmon; C:\WINDOWS\System32\Drivers\klupd_df345591a_arkmon.sys [400152 2025-03-28] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R0 klupd_df345591a_klbg; C:\WINDOWS\System32\Drivers\klupd_df345591a_klbg.sys [204440 2025-03-28] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [234072 2025-10-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-03-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [242752 2025-06-29] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 MEmuDrv; C:\WINDOWS\system32\DRIVERS\MEmuDrv.sys [320360 2021-01-04] (Shanghai Microvirt Software Technology Co., Ltd. -> Maiwei Corporation)
S0 ngelam; C:\WINDOWS\System32\drivers\ngelam.sys [15816 2021-03-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Acronis International GmbH)
R1 ngscan; C:\WINDOWS\System32\DRIVERS\ngscan.sys [179104 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
S3 SPUVCbv; C:\WINDOWS\System32\Drivers\SPUVCbv64.sys [1063520 2017-04-06] (SUNPLUS INNOVATION TECHNOLOGY INC. -> Sunplus Innovation Technology Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 tib; C:\WINDOWS\system32\DRIVERS\tib.sys [887032 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [175648 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [694920 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
R3 VBAudioVACMME; C:\WINDOWS\System32\drivers\vbaudio_cable64_win7.sys [41192 2014-09-02] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [334984 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [251016 2021-08-01] (Acronis International GmbH -> Acronis International GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45960 2020-06-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [401120 2020-06-01] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64224 2020-06-01] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40200 2023-11-17] (HP Inc. -> HP)
S3 YMIDUSBW; C:\WINDOWS\system32\drivers\ymidusbx64.sys [43744 2015-07-28] (Yamaha Corporation -> Yamaha Corporation)
U3 aswBcc; no ImagePath
U3 Avast Business Console Client Antivirus Service; no ImagePath
S3 df345591; System32\Drivers\df345591.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-10-02 09:53 - 2025-10-02 09:53 - 000003726 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser VPS Differential Update S-1-5-21-2002658774-1703651359-3694545506-1002
2025-10-02 09:50 - 2025-10-02 09:50 - 000000000 ____D C:\Users\fbart\AppData\Local\DBG
2025-09-30 15:02 - 2025-09-30 14:51 - 000322216 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2025-09-22 18:27 - 2025-09-22 18:27 - 000268697 _____ C:\Users\fbart\Downloads\Boarding-Pass-Prague-Rijeka-3287128493.pdf
2025-09-22 12:25 - 2025-09-22 12:25 - 000090410 _____ C:\Users\fbart\Downloads\vozni red_1_2764_B.pdf
2025-09-22 12:23 - 2025-09-22 12:24 - 000091043 _____ C:\Users\fbart\Downloads\vozni red_1_2474_A.pdf
2025-09-22 10:54 - 2025-09-22 10:54 - 000267876 _____ C:\Users\fbart\Downloads\Boarding-Pass-Prague-Rijeka-3288008273.pdf
2025-09-21 19:46 - 2025-09-21 19:46 - 009956763 _____ C:\Users\fbart\Downloads\Veronikas Geheimnis.pdf
2025-09-20 14:01 - 2025-09-20 14:01 - 000106644 _____ C:\Users\fbart\Downloads\Faktura 202509191 - Eva Vasickova - F_Bartak-1.pdf
2025-09-19 14:28 - 2025-09-19 14:28 - 000106644 _____ C:\Users\fbart\Downloads\Faktura 202509191 - Eva Vasickova - F_Bartak.pdf
2025-09-19 01:07 - 2025-09-19 01:07 - 000269608 _____ C:\Users\fbart\Downloads\Tulák 2.1..pdf
2025-09-18 15:49 - 2025-09-18 15:49 - 000210941 _____ C:\Users\fbart\Downloads\b1_modellsatz_jugendliche_neu_Schreiben.pdf
2025-09-18 14:00 - 2025-09-18 14:01 - 006782107 _____ C:\Users\fbart\Downloads\BSN5-27_PLANOVACI s anglictinou VN 2027_oprava B.pdf
2025-09-17 19:35 - 2025-09-17 19:35 - 000093187 _____ C:\Users\fbart\Downloads\MFP2025_F_Bartak-prihlaska-1.pdf
2025-09-17 19:34 - 2025-09-17 19:34 - 000096463 _____ C:\Users\fbart\Downloads\MFP2025_F_Bartak_poezie-1.pdf
2025-09-17 19:33 - 2025-09-17 19:33 - 000106143 _____ C:\Users\fbart\Downloads\MFP2025_F_Bartak_proza-1.pdf
2025-09-17 19:32 - 2025-09-17 19:32 - 000117347 _____ C:\Users\fbart\Downloads\MFP2025_F_Bartak-prihlaska.pdf
2025-09-17 19:32 - 2025-09-17 19:32 - 000101919 _____ C:\Users\fbart\Downloads\MFP2025_F_Bartak_proza.pdf
2025-09-17 19:31 - 2025-09-17 19:31 - 000112675 _____ C:\Users\fbart\Downloads\MFP2025_F_Bartak_poezie.pdf
2025-09-17 16:37 - 2025-09-17 16:37 - 000003672 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser VPS Differential Update S-1-5-18
2025-09-16 19:54 - 2025-09-16 19:54 - 000119111 _____ C:\Users\fbart\Downloads\Faktura 202509161 - Adela_Sodomkova - F_Bartak-1.pdf
2025-09-16 14:50 - 2025-09-16 14:50 - 000120146 _____ C:\Users\fbart\Downloads\Faktura 202509161 - Adela_Sodomkova - F_Bartak.pdf
2025-09-16 14:49 - 2025-09-16 14:49 - 000120724 _____ C:\Users\fbart\Downloads\Faktura 202509161 - Autoselect_Adela_Sodomkova - F_Bartak-1.pdf
2025-09-16 14:47 - 2025-09-16 14:47 - 000120724 _____ C:\Users\fbart\Downloads\Faktura 202509161 - Autoselect_Adela_Sodomkova - F_Bartak.pdf
2025-09-14 12:46 - 2025-09-14 12:46 - 000911022 _____ C:\Users\fbart\Downloads\priloha_1577542130_0_AttachmentICIS.pdf
2025-09-14 12:46 - 2025-09-14 12:46 - 000024209 _____ C:\Users\fbart\Downloads\priloha_1532709502_1_Protokol-CSSZ_OSVC_PRE-VS15658896--ID_CSSZ_AA92EBDA2787408BB084C990B3CEFDE2.pdf
2025-09-14 01:34 - 2025-09-14 01:34 - 000196883 _____ C:\Users\fbart\Downloads\Tulák 2.0. pdf.pdf
2025-09-13 23:36 - 2025-09-13 23:36 - 005938716 _____ C:\Users\fbart\Downloads\BSN5-27_PLANOVACI s anglictinou VN 2027-corr_FKB-1.pdf
2025-09-13 23:34 - 2025-09-13 23:34 - 005938716 _____ C:\Users\fbart\Downloads\BSN5-27_PLANOVACI s anglictinou VN 2027-corr_FKB.pdf
2025-09-12 23:14 - 2025-09-12 23:14 - 001071211 _____ C:\Users\fbart\Downloads\BSN5-27_PLANOVACI s anglictinou OB 2027.pdf
2025-09-08 13:03 - 2025-09-08 13:03 - 001123515 _____ C:\Users\fbart\Downloads\PRE_182024212.pdf
2025-09-06 19:55 - 2025-09-06 19:55 - 000000000 ____D C:\Program Files\EpsonNet
2025-09-06 19:54 - 2025-09-06 19:54 - 000000000 ____D C:\WINDOWS\twain_64
2025-09-06 19:54 - 2025-09-06 19:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2025-09-06 19:54 - 2025-09-06 19:54 - 000000000 ____D C:\Program Files\epson
2025-09-06 19:54 - 2025-09-06 19:54 - 000000000 ____D C:\Program Files (x86)\epson
2025-09-06 19:54 - 2020-10-02 16:37 - 000206304 _____ (Seiko Epson Corporation) C:\WINDOWS\system32\escsvc64.exe
2025-09-06 19:54 - 2020-10-02 16:37 - 000165392 _____ (TWAIN Working Group) C:\WINDOWS\system32\twaindsm.dll
2025-09-06 19:54 - 2020-10-02 16:37 - 000147472 _____ (TWAIN Working Group) C:\WINDOWS\SysWOW64\twaindsm.dll
2025-09-06 19:50 - 2025-09-06 19:50 - 000002216 _____ C:\Users\Public\Desktop\Epson Printer Connection Checker.lnk
2025-09-06 19:50 - 2025-09-06 19:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2025-09-06 19:50 - 2025-09-06 19:50 - 000000000 ____D C:\Program Files (x86)\EPSON Software
2025-09-04 18:48 - 2025-09-04 18:48 - 000066352 _____ C:\Users\fbart\Downloads\Vodafone Vyúčtování číslo 1002190634.pdf
2025-09-03 11:59 - 2025-09-03 11:59 - 000023734 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-09-03 11:58 - 2025-09-03 11:58 - 000023734 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-09-02 21:02 - 2025-07-25 02:32 - 002072432 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2025-09-02 21:02 - 2025-07-25 02:32 - 002072432 _____ C:\WINDOWS\system32\vulkaninfo.exe
2025-09-02 21:02 - 2025-07-25 02:32 - 001614216 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-09-02 21:02 - 2025-07-25 02:32 - 001614216 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2025-09-02 21:02 - 2025-07-25 02:32 - 001576840 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2025-09-02 21:02 - 2025-07-25 02:32 - 001576840 _____ C:\WINDOWS\system32\vulkan-1.dll
2025-09-02 21:02 - 2025-07-25 02:32 - 001389960 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2025-09-02 21:02 - 2025-07-25 02:32 - 001389960 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2025-09-02 21:02 - 2025-07-25 02:32 - 000477840 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2025-09-02 21:02 - 2025-07-25 02:32 - 000374424 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2025-09-02 21:02 - 2025-07-25 02:27 - 001183952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2025-09-02 21:02 - 2025-07-25 02:27 - 000670416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2025-09-02 21:02 - 2025-07-25 02:27 - 000506064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2025-09-02 21:02 - 2025-07-25 02:26 - 025643128 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2025-09-02 21:02 - 2025-07-25 02:26 - 002195152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2025-09-02 21:02 - 2025-07-25 02:26 - 001642192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2025-09-02 21:02 - 2025-07-25 02:26 - 001563768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2025-09-02 21:02 - 2025-07-25 02:26 - 001216152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2025-09-02 21:02 - 2025-07-25 02:26 - 001046224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2025-09-02 21:02 - 2025-07-25 02:26 - 000905424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2025-09-02 21:02 - 2025-07-25 02:26 - 000803960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2025-09-02 21:02 - 2025-07-25 02:25 - 019905256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2025-09-02 21:02 - 2025-07-25 02:25 - 019330256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2025-09-02 21:02 - 2025-07-25 02:25 - 007224472 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2025-09-02 21:02 - 2025-07-25 02:25 - 005500648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2025-09-02 21:02 - 2025-07-25 02:25 - 003944680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2025-09-02 21:02 - 2025-07-25 02:25 - 000463568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2025-09-02 21:02 - 2025-07-25 02:24 - 005917904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2025-09-02 21:02 - 2025-07-25 02:24 - 000853712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2025-09-02 21:02 - 2025-07-25 02:21 - 005559600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2025-09-02 21:02 - 2025-07-25 02:21 - 004863344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2025-09-02 21:02 - 2025-07-25 01:38 - 000137909 _____ C:\WINDOWS\system32\nvinfo.pb
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-10-02 10:49 - 2017-12-01 23:30 - 000000000 ____D C:\FRST
2025-10-02 10:44 - 2022-02-09 20:15 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-10-02 10:30 - 2016-12-20 23:33 - 000000000 ___SD C:\Users\fbart\AppData\Roaming\Microsoft\Credentials
2025-10-02 10:26 - 2018-02-23 20:46 - 000000000 ____D C:\Users\fbart\AppData\Roaming\MPC-HC
2025-10-02 10:26 - 2016-12-21 00:19 - 000000000 ____D C:\Users\fbart\AppData\Roaming\Microsoft\Office
2025-10-02 10:23 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2025-10-02 10:23 - 2018-08-14 19:08 - 000000000 ____D C:\Users\fbart\AppData\Local\CrashDumps
2025-10-02 10:20 - 2016-12-20 23:45 - 000000000 ____D C:\Program Files\CCleaner
2025-10-02 10:18 - 2025-08-03 17:54 - 000003386 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2025-10-02 10:18 - 2022-10-05 13:57 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2025-10-02 10:17 - 2018-04-16 17:25 - 000000000 ____D C:\Users\fbart\AppData\Local\AVAST Software
2025-10-02 10:01 - 2018-04-16 17:25 - 000002527 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2025-10-02 10:01 - 2018-04-16 17:25 - 000002492 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2025-10-02 09:59 - 2018-05-28 18:39 - 000000000 ____D C:\Users\fbart\AppData\Local\D3DSCache
2025-10-02 09:55 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-10-02 09:53 - 2021-05-19 14:55 - 000003844 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2025-10-02 09:53 - 2021-05-19 14:55 - 000003260 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2025-10-02 09:52 - 2021-12-22 23:01 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-10-02 09:52 - 2016-12-20 23:56 - 000000000 ____D C:\Program Files\AVAST Software
2025-10-02 09:51 - 2021-05-19 14:55 - 000003456 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineUA
2025-10-02 09:51 - 2021-05-19 14:55 - 000003332 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineCore
2025-10-02 09:51 - 2021-05-19 14:53 - 001885574 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-10-02 09:51 - 2019-12-07 16:41 - 000785556 _____ C:\WINDOWS\system32\perfh005.dat
2025-10-02 09:51 - 2019-12-07 16:41 - 000182314 _____ C:\WINDOWS\system32\perfc005.dat
2025-10-02 09:51 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2025-10-02 09:45 - 2021-07-20 15:09 - 000000000 ____D C:\Users\fbart\AppData\Roaming\Microsoft\Teams
2025-10-02 09:44 - 2025-03-17 18:26 - 000000000 ____D C:\Users\fbart\AppData\Local\Malwarebytes
2025-10-02 09:43 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-10-02 09:39 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-10-02 09:39 - 2017-06-12 19:12 - 000000000 ____D C:\ProgramData\NVIDIA
2025-10-02 09:39 - 2016-12-20 23:34 - 000000000 __SHD C:\Users\fbart\IntelGraphicsProfiles
2025-10-02 09:38 - 2021-05-19 14:55 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-10-02 09:38 - 2021-05-19 14:41 - 000712312 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-10-02 09:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2025-10-02 09:38 - 2017-06-12 19:13 - 000000000 ____D C:\ProgramData\Synaptics
2025-10-02 09:38 - 2016-12-20 23:57 - 000002095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2025-10-02 09:38 - 2016-12-20 23:57 - 000002083 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2025-10-02 09:38 - 2016-10-30 00:18 - 000000000 ____D C:\Intel
2025-10-02 09:37 - 2021-05-19 14:41 - 000008192 ___SH C:\DumpStack.log.tmp
2025-10-02 09:37 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-10-02 09:37 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-10-02 09:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-10-02 09:35 - 2018-05-28 17:30 - 000000000 ____D C:\Users\fbart\AppData\Roaming\Microsoft\Paint
2025-10-02 09:25 - 2021-05-19 14:41 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-10-02 04:56 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-10-02 04:49 - 2021-05-19 14:44 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-10-02 03:02 - 2021-07-23 18:47 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2025-10-02 01:22 - 2025-02-06 11:25 - 000003108 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2002658774-1703651359-3694545506-1002
2025-10-02 01:22 - 2024-10-28 11:14 - 000003066 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2002658774-1703651359-3694545506-1002
2025-10-02 01:22 - 2024-10-28 11:14 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2002658774-1703651359-3694545506-1002
2025-10-02 01:22 - 2023-10-12 09:29 - 000002654 _____ C:\WINDOWS\system32\Tasks\CLToast
2025-10-02 01:22 - 2023-10-12 09:29 - 000002480 _____ C:\WINDOWS\system32\Tasks\CLToastRun
2025-10-02 01:22 - 2023-07-28 13:54 - 000002508 _____ C:\WINDOWS\system32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0
2025-10-02 01:22 - 2021-12-15 22:57 - 000002254 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - fbart
2025-10-02 01:22 - 2021-07-23 18:51 - 000002596 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2025-10-02 01:22 - 2021-05-19 14:55 - 000003508 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1582720617
2025-10-02 01:22 - 2021-05-19 14:55 - 000003464 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-10-02 01:22 - 2021-05-19 14:55 - 000003366 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1487236436
2025-10-02 01:22 - 2021-05-19 14:55 - 000003238 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-10-02 01:22 - 2021-05-19 14:55 - 000003194 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2025-10-02 01:20 - 2021-05-19 14:55 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2025-10-01 20:13 - 2016-12-26 17:31 - 000000000 ____D C:\Users\fbart\AppData\Roaming\vlc
2025-10-01 18:49 - 2017-02-16 11:12 - 000000000 ____D C:\Program Files\Opera
2025-10-01 14:19 - 2016-12-30 21:15 - 000000000 ____D C:\Users\fbart\Documents\Lexicon
2025-09-30 15:28 - 2020-07-07 13:27 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-09-30 15:28 - 2020-07-07 13:27 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2025-09-30 14:51 - 2020-10-24 18:03 - 000284768 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2025-09-30 14:51 - 2020-04-20 21:08 - 000574048 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2025-09-30 14:51 - 2019-01-14 15:47 - 000390752 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2025-09-30 14:51 - 2019-01-09 13:05 - 000299616 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2025-09-30 14:51 - 2019-01-09 13:05 - 000085600 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2025-09-30 14:51 - 2019-01-09 13:05 - 000021088 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2025-09-30 14:51 - 2018-10-24 00:01 - 000029792 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2025-09-30 14:51 - 2018-03-09 11:33 - 001282632 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSP.sys
2025-09-30 14:51 - 2018-03-09 11:33 - 000876104 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2025-09-30 14:51 - 2018-03-09 11:33 - 000391776 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswVmm.sys
2025-09-30 14:51 - 2018-03-09 11:33 - 000244832 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArPot.sys
2025-09-30 14:51 - 2018-03-09 11:33 - 000092232 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2025-09-30 14:51 - 2018-03-09 11:33 - 000071240 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2025-09-30 14:48 - 2020-05-13 22:14 - 000002300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-09-30 14:48 - 2020-05-13 22:14 - 000002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-09-21 19:28 - 2016-12-20 23:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-09-21 19:28 - 2016-12-20 23:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2025-09-21 19:12 - 2017-06-22 10:45 - 000000000 ____D C:\Users\fbart\AppData\Roaming\Microsoft\Windows Photo Viewer
2025-09-21 19:10 - 2016-12-20 23:40 - 000001239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-09-21 19:09 - 2017-11-28 11:14 - 000002240 _____ C:\Users\fbart\Desktop\JDownloader 2.lnk
2025-09-21 19:07 - 2016-12-20 23:53 - 000000000 ____D C:\ProgramData\AVAST Software
2025-09-21 19:05 - 2024-07-14 13:58 - 000000000 ____D C:\WINDOWS\system32\compatrel
2025-09-21 19:05 - 2021-05-19 15:16 - 000000000 ____D C:\WINDOWS\en-GB
2025-09-21 19:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-09-21 19:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-09-21 18:57 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2025-09-19 23:17 - 2021-05-19 14:45 - 000002436 _____ C:\Users\fbart\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-09-15 14:28 - 2021-09-23 19:31 - 000002180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2025-09-15 14:28 - 2021-09-23 19:31 - 000002015 _____ C:\Users\Default\Desktop\Google Slides.lnk
2025-09-15 14:28 - 2021-09-23 19:31 - 000002015 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2025-09-15 14:28 - 2021-09-23 19:31 - 000002003 _____ C:\Users\Default\Desktop\Google Docs.lnk
2025-09-15 14:28 - 2018-10-12 10:50 - 000002055 _____ C:\Users\fbart\Desktop\Google Drive.lnk
2025-09-12 12:11 - 2019-11-17 11:37 - 000000000 ____D C:\Users\fbart\Documents\Zoom
2025-09-06 19:54 - 2025-05-24 15:30 - 000000000 ____D C:\ProgramData\EPSON
2025-09-06 17:36 - 2024-12-28 00:53 - 000000000 ____D C:\Users\fbart\AppData\LocalLow\NVIDIA
2025-09-02 21:04 - 2019-06-27 09:11 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2025-09-02 20:43 - 2021-05-19 14:45 - 000000000 ____D C:\Users\fbart
2025-09-02 19:27 - 2016-12-22 20:42 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-09-02 19:04 - 2016-12-22 20:42 - 223939376 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Files in the root of some directories ========
2022-09-19 15:35 - 2022-09-19 15:35 - 000000000 _____ () C:\Program Files (x86)\test.txt
2019-06-24 16:45 - 2019-06-24 16:46 - 002535362 _____ () C:\Users\fbart\AppData\Roaming\AvidLink_Install.log
2018-06-26 22:25 - 2018-06-26 22:25 - 000000861 _____ () C:\Users\fbart\AppData\Roaming\Avid_CCS_Service_Stop.log
2021-07-23 19:06 - 2021-07-23 19:06 - 000000000 _____ () C:\Users\fbart\AppData\Local\oobelibMkey.log
2017-01-09 22:48 - 2025-09-01 17:00 - 000007609 _____ () C:\Users\fbart\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================