Prosím o preventivní kontrolu mého PC
Odeslal: 20 Črv 2026 01:07
Zdravím, ještě jednou děkuji za kontrolu předchozího PC a ještě bych chtěl poprosit o preventivku mého stolního počítače.
S počítačem není vůbec žádný problém.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-06-2026
Ran by Dusan (administrator) on DUSAN-PC (Gigabyte Technology Co., Ltd. Z690 AORUS PRO) (20-06-2026 02:00:11)
Running from C:\Users\Dusan\Desktop\FRST64.exe
Loaded Profiles: Dusan
Platform: Microsoft Windows 11 Home Version 25H2 26200.8655 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\Spotify.exe <7>
(C:\Program Files (x86)\Common Files\Rockwell\ftsvchost.exe ->) (Rockwell Automation Inc -> Node.js) C:\Program Files (x86)\Common Files\Rockwell\FTWebSupportService.exe
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe ->) (Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe <5>
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
(C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe ->) (Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
(C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\lmgrd.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\flexsvr.exe
(C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE.exe ->) (Corsair Memory, Inc. -> ) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\crashpad_handler.exe <3>
(C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\QmlRenderer.exe
(C:\Program Files\GIGABYTE\Control Center\GCC.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GBT_DL_LIB) C:\Program Files\WindowsApps\65d483df-b37e-4fcf-94de-8b795233db63_25.1.23.0_x64__1mmjbktjj1mkp\GBT_DL_LIB.exe
(C:\Program Files\LGHUB\lghub_agent.exe ->) (Logitech Inc -> Sentry and Logitech, Inc.) C:\Program Files\LGHUB\logi_crashpad_handler.exe <2>
(C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe <5>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\ShadowPlay\nvsphelper64.exe
(C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe ->) (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\crashpad_handler.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE.exe
(Creative Technology Ltd -> Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Command\Creative.SBCommand.exe
(D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\EIPCommissionWebSer.exe
(D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\EIPCommissionWinSer.exe
(D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxServices.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\NetBrowserManager.exe
(D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\ftsm.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxServices.exe <4>
(D:\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) D:\Steam\bin\cef\cef.win64\steamwebhelper.exe <8>
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <58>
(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe
(explorer.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) D:\Steam\steam.exe
(explorer.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> Gigabyte Technology CO.) C:\Program Files\GIGABYTE\Smart Backup\RPMDaemon.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.095.0519.0003\OneDrive.Sync.Service.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairDeviceControlService.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\CorsairCpuIdService.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUEUpdateService.exe
(services.exe ->) (Creative Technology Ltd -> Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\lmgrd.exe <2>
(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe
(services.exe ->) (GIGA-BYTE Technology Co., Ltd. -> ) C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\AorusLcdService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\EasyTuneEngineService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (GuinpinSoft inc) [File not signed] C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe
(services.exe ->) (HP Inc. -> ) C:\Program Files\HPPSAService\HP.PSA.RpcServer.exe
(services.exe ->) (HP Inc. -> ) C:\Program Files\HPPSAService\IPPServer\POTGSvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_8a3f88e34f6b8385\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_ee28fa9e734aabda\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_b57fc4f35ff4051b\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d7a222f6ce13d429\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <4>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_c8bc842500fab35b\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c5e940d4ffae802\RtkAudUService64.exe <2>
(services.exe ->) (Rockwell Automation Inc -> ) C:\Program Files (x86)\Common Files\Rockwell\ftsvchost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) C:\Program Files (x86)\Common Files\Rockwell\RNADiagnosticsSrv.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc) D:\Program Files (x86)\Rockwell Software\RSLinx\RSLinxLocalServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\EventClientMultiplexer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\EventServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\FTSysDiagSvcHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\LocalOPCServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\NmspHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RdcyHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RNADirMultiplexor.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RnaDirServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RsvcHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\Updater\Agent\UpdaterAgent.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\Tools\FTActivationBoost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe <2>
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxSecurityServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\ftsm.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG02.EXE
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\FTViewServiceHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\HMIDIAGNOSTICSLSTADAPT.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\TagSrv.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\ViewSharedService.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(services.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(services.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files\CodeMeter\Runtime\bin\CmWebAdmin.exe
(sihost.exe ->) (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe
(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\GCC.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_6.1.4.0_x64__8wekyb3d8bbwe\Microsoft.Notes.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.302.5.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
==================== Registry (Whitelisted) ===================
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c5e940d4ffae802\RtkAudUService64.exe [2165104 2024-08-05] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Corsair iCUE5 Software] => C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE Launcher.exe [195224 2026-06-08] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKLM-x32\...\Run: [Creative.SBCommand] => C:\Program Files (x86)\Creative\Sound Blaster Command\Creative.SBCommand.exe [210904 2023-10-06] (Creative Technology Ltd -> Creative Technology Ltd)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) [File not signed]
HKLM-x32\...\Run: [FactoryTalk Directory Information] => C:\Program Files (x86)\Common Files\Rockwell\FTLoginLogout.exe [480624 2022-02-22] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
HKLM-x32\...\Run: [UsbCipHelper] => C:\Program Files\Rockwell Automation\UsbCipDriver\USBCIPHelper\UsbCipHelper.exe [4638192 2019-01-28] (Rockwell Automation, Inc -> Rockwell Automation, Inc.)
HKLM-x32\...\Run: [ActivationNotifier] => C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\Tools\ActivationNotifier.exe [369720 2022-02-23] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
HKLM-x32\...\Run: [Reader_Sl] => C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\reader_sl.exe [4312128 2024-11-24] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752264 2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\RunOnce: [RPMKickstart] => C:\Program Files\GIGABYTE\Smart Backup\RPMKickstartEx.exe [2320384 2014-04-01] (TODO: <Company name>) [File not signed]
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3600072 2025-07-15] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [Steam] => D:\Steam\steam.exe [5776024 2026-06-09] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe [26286744 2026-05-14] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [FACEIT] => C:\Users\Dusan\AppData\Local\FACEIT\update.exe [2282184 2025-03-19] (ESL Gaming GmbH -> )
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [MicrosoftEdgeAutoLaunch_14E57C54C11BDF8154A560BBDF30F8A1] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [5227848 2026-06-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [S3AutomaticSTART] => C:\Program Files (x86)\Solitea\Money S3\MS3Auto.exe /tray (No File)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [S3Automatic] => C:\Program Files (x86)\Solitea\Money S3\MS3Auto.exe /tray (No File)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\MountPoints2: {29aeb048-aa22-11ec-a22a-b0a460ee0e16} - "I:\Setup.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\149.0.7827.114\Installer\chrmstp.exe [7662744 2026-06-13] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk [2025-01-14]
ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {FC992124-260F-4945-BEFB-470DFD890BBA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (No File)
Task: {B621089E-F655-43B3-BD96-5E6BCD1748F8} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35425448 2025-09-12] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b
Task: {CDF245FA-79B2-4BC8-8A23-813587E8022D} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem150.0.7863.0{829E4C51-5DB2-4A16-85B3-A649E51F0162} => C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe [8728216 2026-05-28] (Google LLC -> Google LLC)
Task: {93E88190-7677-47D4-9A95-0460038965A8} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
Task: {71E7958C-7304-4374-AF9A-233CBCC76449} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
Task: {AED5ED06-3625-4E5A-85AB-E98FCD673BD6} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelperOnUnlock => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
Task: {9F39B2E7-3865-4289-8EE7-D8B14AFEA9AC} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95240 2026-06-19] (HP Inc. -> HP Inc.)
Task: {D0071351-E0A9-4F41-BE57-EF963BA18E37} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95240 2026-06-19] (HP Inc. -> HP Inc.)
Task: {85C7446E-BC75-4A2D-B536-5D9E26183AB1} - System32\Tasks\Intel\Intel Telemetry 3 => C:\Program Files\Intel\Telemetry 3.0\lrio.exe [6045240 2024-02-14] (Intel Corporation -> Intel Corporation)
Task: {705CE682-C874-4D2E-AE1B-63423B234830} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16431408 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {248790F7-8819-401B-A9CC-19A527C76550} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28437392 2026-06-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {7D60C2E7-1B12-4CD2-8522-773CFE5C3221} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [73568 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {CFDBFC47-E0E1-4D0A-A043-3484CE92A153} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28437392 2026-06-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {D3AC2C1E-933B-4F13-AD20-0CFD79D2B6E2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427296 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {9DC6B900-987F-49BF-B413-A8BBD5AF4370} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427296 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {40928F91-B6E0-4679-9FB2-9A961394FD77} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1354600 2026-06-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {C395E79A-8A7A-4652-A1B5-361ED2E6E28F} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16431408 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {592CFBAC-26B3-46B7-84BE-6BCF4E9F6005} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (No File)
Task: {E1026476-CF4C-49E9-9B91-FB302029F0CA} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (No File)
Task: {CCF9E85A-941E-4A3F-9A6F-C61B6B11F881} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {18912E95-E50A-49A6-BC7E-2BA11A8F3A03} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3A7099EE-4887-4323-A556-397E88D496AE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8951F964-7592-4BC9-8DBD-459B84F127C0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EBFDB289-9230-4FCF-A44A-926AB3CF9A50} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7973C971-3FFE-48A0-875C-B9FF2DF2737B} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3346544 2026-04-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {14F44AFE-54F9-4C72-B7A2-B7CB475D661C} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4428648 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {F38CBDB1-269C-4C1C-A31A-856555B1681A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-254389370-4066128350-1364079936-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4428648 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {AB68F146-DF9D-47DB-9D3E-937029C9D0F3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-254389370-4066128350-1364079936-1001 => C:\Program Files\Microsoft OneDrive\26.095.0519.0003\OneDriveLauncher.exe [759656 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {A5B26DA5-A922-4BB6-81D8-F3236BCE1939} - System32\Tasks\Opera scheduled assistant Autoupdate 1742671193 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {3DDD03EB-73A6-4448-B543-7E5134F024D4} - System32\Tasks\Opera scheduled assistant Autoupdate 1743329451 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {6D0D224C-FE97-4E3E-955F-E7A7129EF632} - System32\Tasks\Opera scheduled assistant Autoupdate 1743935456 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {50FCA144-9EC4-495B-B0C7-778080B8AA2A} - System32\Tasks\Opera scheduled assistant Autoupdate 1744563326 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {A96B2027-7216-48D0-A42E-608C83D49E01} - System32\Tasks\Opera scheduled Autoupdate 1742671190 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
Task: {14A3B2A6-9580-49AA-BF06-48C7A23B3A11} - System32\Tasks\Opera scheduled Autoupdate 1743329448 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
Task: {31ED7F83-16EE-420A-9FB2-7E3F159C7AAE} - System32\Tasks\Opera scheduled Autoupdate 1743935452 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
Task: {0EFD31FB-D19A-45F9-8664-AB5ECC8EB61A} - System32\Tasks\Opera scheduled Autoupdate 1744563322 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 62.201.16.251 62.201.16.252
Tcpip\..\Interfaces\{9c250a5c-464b-404d-9123-061791ffc076}: [DhcpNameServer] 62.201.16.251 62.201.16.252
Tcpip\..\Interfaces\{9d552a63-484c-45a7-b9c1-af7404645d40}: [DhcpNameServer] 62.201.16.251 62.201.16.252
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.471.0 -> C:\Program Files\Java\jre1.8.0_471\bin\dtplugin\npDeployJava1.dll [2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.471.0 -> C:\Program Files\Java\jre1.8.0_471\bin\plugin2\npjp2.dll [2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-01-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-12-07] (Microsoft Corporation -> Microsoft Corporation)
Edge:
=======
Edge Profile: C:\Users\Dusan\AppData\Local\Microsoft\Edge\User Data\Default [2026-05-26]
Edge Extension: (Dokumenty Google offline) - C:\Users\Dusan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-12]
Edge Extension: (Edge relevant text changes) - C:\Users\Dusan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-27]
Chrome:
=======
CHR Profile: C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default [2026-06-19]
CHR DownloadDir: E:\Temp E
CHR Notifications: Default -> hxxps://kfc.cz; hxxps://ombre.com; hxxps://www.facebook.com; hxxps://www.netflix.com; hxxps://www.youtube.com; hxxps://y2mate.nu
CHR Session Restore: Default -> is enabled.
CHR Extension: (Dokumenty Google offline) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-19]
CHR Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-06-17]
CHR Extension: (Coupert - Automatic Coupon Finder & Cashback) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidniedemcgceagapgdekdbmanojomk [2026-06-19]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-03-22]
CHR Profile: C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\System Profile [2026-01-20]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AorusLcdService; C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\AorusLcdService.exe [60000 2025-10-22] (GIGA-BYTE Technology Co., Ltd. -> )
R2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe [9728 2024-03-17] (GuinpinSoft inc) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13380928 2026-06-06] (Microsoft Corporation -> Microsoft Corporation)
R2 CmWebAdmin.exe; C:\Program Files\CodeMeter\Runtime\bin\CmWebAdmin.exe [10759616 2021-09-29] (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
R3 CorsairCpuIdService; C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\CorsairCpuIdService.exe [633496 2026-06-08] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R3 CorsairDeviceControlService; C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairDeviceControlService.exe [2525576 2025-04-17] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S3 CorsairDeviceListerService; C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\CorsairDeviceListerService.exe [366232 2026-06-08] (Corsair Memory, Inc. -> )
S3 dnWhoDisp; D:\Program Files (x86)\Rockwell Software\RSLINX\dnwhodisp.exe [181704 2020-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [150696 2025-08-08] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 EIP Commission Tool UI Service; D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe [359280 2021-12-26] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 EIP Commission Tool Windows Service; D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe [359280 2021-12-26] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FactoryTalk Activation Service; C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\lmgrd.exe [916304 2022-02-23] (Flexera Software LLC -> Flexera)
R2 FactoryTalk Linx Browser UI; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\ftsm.exe [359280 2021-12-26] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FactoryTalk Linx CIP Security Service; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxSecurityServer.exe [469360 2022-02-24] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.095.0519.0003\FileSyncHelper.exe [3612048 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
R2 FoxitReaderUpdateService; C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2514016 2025-09-14] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R2 FTActivationBoost; C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\Tools\FTActivationBoost.exe [180792 2022-02-23] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FTSvcHost; C:\Program Files (x86)\Common Files\Rockwell\ftsvchost.exe [459120 2022-02-22] (Rockwell Automation Inc -> )
U2 FTSysDiagSvcHost; C:\Program Files (x86)\Common Files\Rockwell\FTSysDiagSvcHost.exe [72560 2022-02-15] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FTView Shared Service; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\ViewSharedService.exe [154992 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FTViewServiceHost; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\FTViewServiceHost.exe [83312 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
S2 GBTECService; C:\Program Files (x86)\GIGABYTE\GBTECService\OLEDDisplayService.exe [21160 2025-09-25] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2026-06-19] (HP Inc. -> HP Inc.)
R2 HPPSAService; C:\Program Files\HPPSAService\HP.PSA.RpcServer.exe [466952 2026-01-18] (HP Inc. -> )
R2 HPPSASmartPrinting; C:\Program Files\HPPSAService\IPPServer\POTGSvc.exe [31752 2026-01-18] (HP Inc. -> )
R3 iCUEUpdateService; C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUEUpdateService.exe [756888 2026-06-08] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [20769432 2026-05-14] (Logitech Inc -> Logitech, Inc.)
R2 LocalOPCServer; C:\Program Files (x86)\Common Files\Rockwell\LocalOPCServer.exe [361840 2022-02-22] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe [2150144 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_c8bc842500fab35b\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-05-21] (NVIDIA Corporation -> NVIDIA Corporation)
S2 OCButtonService; C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\OcButtonService.exe [131184 2023-12-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.095.0519.0003\OneDriveUpdaterService.exe [4022632 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
S3 OpcEnum; C:\Windows\SysWOW64\OpcEnum.exe [146432 2016-03-09] (OPC Foundation) [File not signed]
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [256256 2024-10-15] (Razer USA Ltd. -> Razer Inc)
R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [300232 2025-07-15] (Razer USA Ltd. -> Razer Inc.)
S3 RnaUaClientDataProviderService; C:\Program Files (x86)\Common Files\Rockwell\OpcUaConnector\RnaUaClientDataProvider.exe [6586672 2022-10-27] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 Rockwell HMI Diagnostics; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\HMIDIAGNOSTICSLSTADAPT.exe [282992 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 Rockwell Tag Server; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\TagSrv.exe [293744 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
S3 RSLinx; D:\Program Files (x86)\Rockwell Software\RSLinx\RSLINX.EXE [3656560 2022-03-04] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 RSLinx Classic Local OPC Server; D:\Program Files (x86)\Rockwell Software\RSLinx\RSLinxLocalServer.exe [23496 2020-05-20] (Rockwell Automation Inc -> Rockwell Automation, Inc)
R2 RSLinxNG; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG.exe [568176 2022-02-24] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 RSLinxNG02; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG02.EXE [533360 2022-02-24] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [513672 2025-04-28] (Razer USA Ltd. -> Razer Inc.)
R2 UpdaterAgent; C:\Program Files (x86)\Common Files\Rockwell\Updater\Agent\UpdaterAgent.exe [95088 2022-02-09] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe [4608640 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe [290744 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 GigabyteUpdateService; C:\WINDOWS\system32\GigabyteUpdateService.exe [590072 2026-06-19] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 Rockstar Service; "D:\Rockstar\RockstarService.exe" (No File)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AmdTools64; C:\WINDOWS\System32\drivers\AmdTools64.sys [77240 2022-07-18] (Advanced Micro Devices Inc. -> AMD)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [602112 2025-09-01] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2025-09-01] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-09-01] (Microsoft Corporation) [File not signed]
S3 CorsairGamingAudioService; C:\Windows\System32\drivers\CorsairGamingAudio64.sys [63016 2022-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R2 CorsairLLAccessE5624B0A345A7E17A08498BFEDC2D42A7CBA71C2; C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairLLAccess64.sys [23632 2025-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [47032 2025-09-01] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [22968 2025-09-01] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 cpuz160; C:\ProgramData\CPUID Software\sdk\U9C1WQtq [44696 2026-06-19] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
R1 CTIIO; C:\WINDOWS\system32\drivers\CtiIo64.sys [34920 2025-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
S3 e2fexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e2f.inf_amd64_b70a0d310652475b\e2f.sys [537680 2025-08-26] (Intel Corporation -> Intel Corporation)
R3 e2fnexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e2fn.inf_amd64_5075999c7c415a1d\e2fn.sys [1471576 2025-10-06] (Intel Corporation -> Intel Corporation)
R3 gdrv3; C:\Windows\System32\drivers\gdrv3.sys [52440 2024-11-22] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R3 GVCIDrv; C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\GvDll\tool\GVCIDrv64.sys [33280 2024-04-19] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_c804e238af0965e6\iaLPSS2_GPIO2_ADL.sys [142800 2026-02-17] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_bf2893ea319d70a7\iaLPSS2_I2C_ADL.sys [212944 2026-02-17] (Intel Corporation -> Intel Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-13] (Microsoft Windows -> Microsoft Corporation)
R3 KsUSBa64; C:\WINDOWS\system32\drivers\ksUSBa64.sys [1738664 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
R3 logi_audio_surround; C:\WINDOWS\System32\DriverStore\FileRepository\logi_audio.inf_amd64_affafe6e263c4f51\logi_audio_surround.sys [44112 2024-09-17] (Microsoft Windows Hardware Compatibility Publisher -> Logitech, Inc.)
R3 logi_joy_bus_enum; C:\WINDOWS\System32\drivers\logi_joy_bus_enum.x64.sys [45448 2026-04-16] (Logitech Inc -> Logitech)
R3 logi_joy_vir_hid; C:\WINDOWS\System32\drivers\logi_joy_vir_hid.x64.sys [32648 2026-04-16] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\WINDOWS\System32\drivers\logi_joy_xlcore.x64.sys [74632 2026-04-16] (Logitech Inc -> Logitech)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [19672 2025-12-12] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R3 RtkUsbAD_2413; C:\WINDOWS\System32\DriverStore\FileRepository\rtdusbad_gigabyte.inf_amd64_a66637a2afd200db\RtUsbA64.sys [523712 2025-08-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
S3 rtucx21x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtucx21x64.inf_amd64_286645bc82b2f9fb\rtucx21x64.sys [1359360 2024-04-01] (Microsoft Windows -> Realtek Corporation)
S3 rtucx22x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtucx22x64.inf_amd64_01a5900d61d5555f\rtucx22x64.sys [1846208 2025-06-27] (Realtek Semiconductor Corp. -> Realtek Corporation)
R3 rtump64x64; C:\WINDOWS\System32\drivers\rtump64x64.sys [1606120 2026-02-17] (Realtek Semiconductor Corp. -> Realtek Corporation)
R3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [64168 2022-08-18] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_0084; C:\WINDOWS\System32\drivers\RzDev_0084.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc)
S3 RzDev_00b2; C:\WINDOWS\System32\drivers\RzDev_00b2.sys [63224 2022-05-30] (Razer USA Ltd. -> Razer Inc)
R0 secnvme; C:\WINDOWS\System32\drivers\secnvme.sys [133944 2023-03-04] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [411096 2026-05-27] (Microsoft Windows -> Microsoft Corporation)
R1 VirtualBackplane; C:\WINDOWS\System32\drivers\VirtualBackplane.sys [70144 2022-05-05] (Rockwell Automation Inc -> Rockwell Automation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21888 2026-06-03] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [646536 2026-06-03] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [115120 2026-06-03] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-09-01] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_a6dc64e436f22951\WSDScan.sys [61440 2025-09-01] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-06-20 02:00 - 2026-06-20 02:00 - 000048263 _____ C:\Users\Dusan\Desktop\FRST.txt
2026-06-20 02:00 - 2026-06-20 02:00 - 000000000 ____D C:\FRST
2026-06-20 01:59 - 2026-06-20 01:59 - 002449920 _____ (Farbar) C:\Users\Dusan\Desktop\FRST64.exe
2026-06-18 14:15 - 2026-06-18 14:15 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Avanquest
2026-06-18 14:15 - 2026-06-18 14:15 - 000000000 ____D C:\ProgramData\Avanquest
2026-06-18 13:20 - 2026-06-20 01:24 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-06-10 21:20 - 2026-06-10 21:20 - 000772696 _____ C:\WINDOWS\system32\perfh005.dat
2026-06-10 21:20 - 2026-06-10 21:20 - 000183718 _____ C:\WINDOWS\system32\perfc005.dat
2026-06-10 08:51 - 2026-06-20 00:46 - 000000004 ____H C:\ProgramData\cm-lock
2026-06-08 15:45 - 2026-05-21 07:41 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-06-08 15:45 - 2026-05-21 07:36 - 001408232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-06-08 15:45 - 2026-05-21 07:36 - 000676584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-06-08 15:45 - 2026-05-21 07:36 - 000510696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 028094184 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-06-08 15:45 - 2026-05-21 07:35 - 002337512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001731304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001682152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-06-08 15:45 - 2026-05-21 07:35 - 001592040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001238760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001068264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 000824040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-06-08 15:45 - 2026-05-21 07:34 - 032166632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-06-08 15:45 - 2026-05-21 07:34 - 000469736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-06-08 15:45 - 2026-05-21 07:33 - 020993768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 005925608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 005796072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 004714728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-06-08 15:45 - 2026-05-21 07:32 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-06-08 15:45 - 2026-05-21 07:31 - 000572368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-06-08 15:45 - 2026-05-21 07:31 - 000441368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-06-08 15:45 - 2026-05-20 03:53 - 000167381 _____ C:\WINDOWS\system32\nvinfo.pb
2026-06-02 18:11 - 2026-06-02 18:11 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-05-27 15:51 - 2026-05-27 15:51 - 000037366 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-05-27 15:51 - 2026-05-27 15:51 - 000037366 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-05-27 15:51 - 2026-05-27 15:51 - 000004066 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-05-24 23:04 - 2026-05-24 23:04 - 000000202 _____ C:\Users\Dusan\Desktop\Age of Mythology Extended Edition.url
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-06-20 01:57 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-06-20 01:54 - 2025-01-14 11:23 - 000000068 ___SH C:\WINDOWS\system32\Drivers\winusb.winsecurity
2026-06-20 01:24 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-06-20 01:21 - 2025-01-14 11:23 - 000000068 ___SH C:\WINDOWS\system32\Drivers\ws2ifsl.winsecurity
2026-06-20 01:13 - 2025-09-01 19:30 - 000003640 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-20 01:13 - 2025-09-01 19:30 - 000003514 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-06-20 00:49 - 2024-11-26 09:34 - 000000130 _____ C:\Users\Dusan\AppData\LocalLow\e2ab92fb3990b0b88d9350e4e4abf3109cb5485acd2a79b4725a7d6bad6087f0
2026-06-20 00:46 - 2025-09-01 19:30 - 000003434 _____ C:\WINDOWS\system32\Tasks\GCC
2026-06-20 00:46 - 2025-09-01 19:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-06-20 00:46 - 2025-09-01 19:29 - 000010512 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-06-20 00:46 - 2025-09-01 19:25 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-06-20 00:46 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-06-20 00:46 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-06-20 00:46 - 2022-03-25 10:29 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-06-20 00:46 - 2022-03-22 02:50 - 000089336 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteDownloadAssistant.exe
2026-06-20 00:46 - 2022-03-22 02:44 - 000617760 _____ C:\WINDOWS\system32\wpbbin.exe
2026-06-20 00:46 - 2022-03-22 02:44 - 000590072 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteUpdateService.exe
2026-06-20 00:46 - 2022-03-22 02:44 - 000012288 ___SH C:\DumpStack.log.tmp
2026-06-20 00:46 - 2022-03-21 20:47 - 000000000 ____D C:\ProgramData\NVIDIA
2026-06-19 14:29 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-06-19 13:28 - 2025-09-01 19:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2026-06-19 13:28 - 2023-09-07 19:06 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-06-18 16:10 - 2022-04-10 19:57 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Microsoft\Excel
2026-06-18 16:04 - 2022-03-22 02:50 - 000000000 ____D C:\Users\Dusan\AppData\Local\Packages
2026-06-17 13:54 - 2022-03-22 23:09 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Microsoft\Word
2026-06-16 19:57 - 2022-03-21 19:59 - 000000000 ____D C:\Users\Dusan\AppData\Local\D3DSCache
2026-06-15 19:10 - 2025-09-01 19:30 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-254389370-4066128350-1364079936-1001
2026-06-15 19:10 - 2025-09-01 19:30 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-254389370-4066128350-1364079936-1001
2026-06-15 19:10 - 2025-09-01 19:30 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-06-15 19:10 - 2024-08-02 21:42 - 000001983 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-06-14 10:53 - 2022-03-22 02:44 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-06-13 21:11 - 2025-09-01 19:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-06-13 10:08 - 2022-03-22 10:32 - 000002207 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-06-12 20:04 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-06-11 20:52 - 2022-03-22 23:07 - 000000000 ____D C:\Program Files\Microsoft Office
2026-06-10 21:20 - 2025-09-01 19:27 - 001875844 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-06-10 08:51 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-06-10 08:50 - 2025-09-01 19:25 - 000497064 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-06-10 08:50 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-06-10 08:43 - 2022-03-21 20:19 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-06-10 08:42 - 2025-09-01 19:28 - 003261440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-06-10 08:38 - 2024-11-25 20:13 - 000000000 ____D C:\Program Files\dotnet
2026-06-10 08:38 - 2022-03-21 20:19 - 222431176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-06-10 08:38 - 2022-03-21 20:12 - 000000000 ____D C:\ProgramData\Package Cache
2026-06-09 17:38 - 2022-03-22 10:15 - 000000000 ____D C:\Users\Dusan\AppData\Local\NVIDIA
2026-06-08 15:50 - 2025-11-12 01:29 - 000000130 _____ C:\Users\Dusan\AppData\LocalLow\cef9c2e7ac9c6854724ce656c9520aab7ec2c64de7e71198ef754a4efeb8ae91
2026-06-08 15:50 - 2024-12-05 15:49 - 000000130 _____ C:\Users\Dusan\AppData\LocalLow\abb002046bd40a0efb5e11b1e9a2e20a8a01cbff694a13a62aa1f7d035bced9d
2026-06-08 11:13 - 2024-11-17 01:10 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\XnView
2026-06-08 10:07 - 2022-03-26 15:05 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\RenPy
2026-06-06 17:22 - 2022-03-22 11:07 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\vlc
2026-06-03 23:09 - 2022-03-22 02:44 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-06-03 10:35 - 2022-03-22 10:26 - 000000000 ____D C:\Users\Dusan\AppData\Local\CrashDumps
2026-06-02 21:08 - 2022-03-22 02:50 - 000000000 ____D C:\ProgramData\Packages
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-05-27 20:55 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-05-24 23:04 - 2022-03-22 11:26 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2026-05-21 17:40 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
==================== Files in the root of some directories ========
2025-02-14 23:00 - 2026-04-19 17:11 - 000040960 _____ () C:\Users\Dusan\AppData\Local\GameAnalyticsga.sqlite3
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-06-2026
Ran by Dusan (administrator) on DUSAN-PC (Gigabyte Technology Co., Ltd. Z690 AORUS PRO) (20-06-2026 02:00:11)
Running from C:\Users\Dusan\Desktop\FRST64.exe
Loaded Profiles: Dusan
Platform: Microsoft Windows 11 Home Version 25H2 26200.8655 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\Spotify.exe <7>
(C:\Program Files (x86)\Common Files\Rockwell\ftsvchost.exe ->) (Rockwell Automation Inc -> Node.js) C:\Program Files (x86)\Common Files\Rockwell\FTWebSupportService.exe
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe ->) (Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe <5>
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
(C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe ->) (Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
(C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\lmgrd.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\flexsvr.exe
(C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE.exe ->) (Corsair Memory, Inc. -> ) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\crashpad_handler.exe <3>
(C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\QmlRenderer.exe
(C:\Program Files\GIGABYTE\Control Center\GCC.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GBT_DL_LIB) C:\Program Files\WindowsApps\65d483df-b37e-4fcf-94de-8b795233db63_25.1.23.0_x64__1mmjbktjj1mkp\GBT_DL_LIB.exe
(C:\Program Files\LGHUB\lghub_agent.exe ->) (Logitech Inc -> Sentry and Logitech, Inc.) C:\Program Files\LGHUB\logi_crashpad_handler.exe <2>
(C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe <5>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\ShadowPlay\nvsphelper64.exe
(C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe ->) (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\crashpad_handler.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE.exe
(Creative Technology Ltd -> Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Command\Creative.SBCommand.exe
(D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\EIPCommissionWebSer.exe
(D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\EIPCommissionWinSer.exe
(D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxServices.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\NetBrowserManager.exe
(D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\ftsm.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxServices.exe <4>
(D:\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) D:\Steam\bin\cef\cef.win64\steamwebhelper.exe <8>
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <58>
(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe
(explorer.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) D:\Steam\steam.exe
(explorer.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> Gigabyte Technology CO.) C:\Program Files\GIGABYTE\Smart Backup\RPMDaemon.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.095.0519.0003\OneDrive.Sync.Service.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairDeviceControlService.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\CorsairCpuIdService.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUEUpdateService.exe
(services.exe ->) (Creative Technology Ltd -> Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\lmgrd.exe <2>
(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe
(services.exe ->) (GIGA-BYTE Technology Co., Ltd. -> ) C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\AorusLcdService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\EasyTuneEngineService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (GuinpinSoft inc) [File not signed] C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe
(services.exe ->) (HP Inc. -> ) C:\Program Files\HPPSAService\HP.PSA.RpcServer.exe
(services.exe ->) (HP Inc. -> ) C:\Program Files\HPPSAService\IPPServer\POTGSvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_8a3f88e34f6b8385\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_ee28fa9e734aabda\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_b57fc4f35ff4051b\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d7a222f6ce13d429\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <4>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_c8bc842500fab35b\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c5e940d4ffae802\RtkAudUService64.exe <2>
(services.exe ->) (Rockwell Automation Inc -> ) C:\Program Files (x86)\Common Files\Rockwell\ftsvchost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) C:\Program Files (x86)\Common Files\Rockwell\RNADiagnosticsSrv.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc) D:\Program Files (x86)\Rockwell Software\RSLinx\RSLinxLocalServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\EventClientMultiplexer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\EventServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\FTSysDiagSvcHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\LocalOPCServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\NmspHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RdcyHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RNADirMultiplexor.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RnaDirServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RsvcHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\Updater\Agent\UpdaterAgent.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\Tools\FTActivationBoost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe <2>
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxSecurityServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\ftsm.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG02.EXE
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\FTViewServiceHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\HMIDIAGNOSTICSLSTADAPT.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\TagSrv.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\ViewSharedService.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(services.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(services.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files\CodeMeter\Runtime\bin\CmWebAdmin.exe
(sihost.exe ->) (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe
(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\GCC.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_6.1.4.0_x64__8wekyb3d8bbwe\Microsoft.Notes.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.302.5.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
==================== Registry (Whitelisted) ===================
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c5e940d4ffae802\RtkAudUService64.exe [2165104 2024-08-05] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Corsair iCUE5 Software] => C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE Launcher.exe [195224 2026-06-08] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKLM-x32\...\Run: [Creative.SBCommand] => C:\Program Files (x86)\Creative\Sound Blaster Command\Creative.SBCommand.exe [210904 2023-10-06] (Creative Technology Ltd -> Creative Technology Ltd)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) [File not signed]
HKLM-x32\...\Run: [FactoryTalk Directory Information] => C:\Program Files (x86)\Common Files\Rockwell\FTLoginLogout.exe [480624 2022-02-22] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
HKLM-x32\...\Run: [UsbCipHelper] => C:\Program Files\Rockwell Automation\UsbCipDriver\USBCIPHelper\UsbCipHelper.exe [4638192 2019-01-28] (Rockwell Automation, Inc -> Rockwell Automation, Inc.)
HKLM-x32\...\Run: [ActivationNotifier] => C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\Tools\ActivationNotifier.exe [369720 2022-02-23] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
HKLM-x32\...\Run: [Reader_Sl] => C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\reader_sl.exe [4312128 2024-11-24] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752264 2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\RunOnce: [RPMKickstart] => C:\Program Files\GIGABYTE\Smart Backup\RPMKickstartEx.exe [2320384 2014-04-01] (TODO: <Company name>) [File not signed]
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3600072 2025-07-15] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [Steam] => D:\Steam\steam.exe [5776024 2026-06-09] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe [26286744 2026-05-14] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [FACEIT] => C:\Users\Dusan\AppData\Local\FACEIT\update.exe [2282184 2025-03-19] (ESL Gaming GmbH -> )
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [MicrosoftEdgeAutoLaunch_14E57C54C11BDF8154A560BBDF30F8A1] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [5227848 2026-06-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [S3AutomaticSTART] => C:\Program Files (x86)\Solitea\Money S3\MS3Auto.exe /tray (No File)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [S3Automatic] => C:\Program Files (x86)\Solitea\Money S3\MS3Auto.exe /tray (No File)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\MountPoints2: {29aeb048-aa22-11ec-a22a-b0a460ee0e16} - "I:\Setup.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\149.0.7827.114\Installer\chrmstp.exe [7662744 2026-06-13] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk [2025-01-14]
ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {FC992124-260F-4945-BEFB-470DFD890BBA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (No File)
Task: {B621089E-F655-43B3-BD96-5E6BCD1748F8} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35425448 2025-09-12] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b
Task: {CDF245FA-79B2-4BC8-8A23-813587E8022D} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem150.0.7863.0{829E4C51-5DB2-4A16-85B3-A649E51F0162} => C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe [8728216 2026-05-28] (Google LLC -> Google LLC)
Task: {93E88190-7677-47D4-9A95-0460038965A8} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
Task: {71E7958C-7304-4374-AF9A-233CBCC76449} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
Task: {AED5ED06-3625-4E5A-85AB-E98FCD673BD6} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelperOnUnlock => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
Task: {9F39B2E7-3865-4289-8EE7-D8B14AFEA9AC} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95240 2026-06-19] (HP Inc. -> HP Inc.)
Task: {D0071351-E0A9-4F41-BE57-EF963BA18E37} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95240 2026-06-19] (HP Inc. -> HP Inc.)
Task: {85C7446E-BC75-4A2D-B536-5D9E26183AB1} - System32\Tasks\Intel\Intel Telemetry 3 => C:\Program Files\Intel\Telemetry 3.0\lrio.exe [6045240 2024-02-14] (Intel Corporation -> Intel Corporation)
Task: {705CE682-C874-4D2E-AE1B-63423B234830} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16431408 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {248790F7-8819-401B-A9CC-19A527C76550} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28437392 2026-06-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {7D60C2E7-1B12-4CD2-8522-773CFE5C3221} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [73568 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {CFDBFC47-E0E1-4D0A-A043-3484CE92A153} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28437392 2026-06-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {D3AC2C1E-933B-4F13-AD20-0CFD79D2B6E2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427296 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {9DC6B900-987F-49BF-B413-A8BBD5AF4370} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427296 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {40928F91-B6E0-4679-9FB2-9A961394FD77} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1354600 2026-06-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {C395E79A-8A7A-4652-A1B5-361ED2E6E28F} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16431408 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {592CFBAC-26B3-46B7-84BE-6BCF4E9F6005} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (No File)
Task: {E1026476-CF4C-49E9-9B91-FB302029F0CA} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (No File)
Task: {CCF9E85A-941E-4A3F-9A6F-C61B6B11F881} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {18912E95-E50A-49A6-BC7E-2BA11A8F3A03} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3A7099EE-4887-4323-A556-397E88D496AE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8951F964-7592-4BC9-8DBD-459B84F127C0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EBFDB289-9230-4FCF-A44A-926AB3CF9A50} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7973C971-3FFE-48A0-875C-B9FF2DF2737B} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3346544 2026-04-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {14F44AFE-54F9-4C72-B7A2-B7CB475D661C} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4428648 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {F38CBDB1-269C-4C1C-A31A-856555B1681A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-254389370-4066128350-1364079936-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4428648 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {AB68F146-DF9D-47DB-9D3E-937029C9D0F3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-254389370-4066128350-1364079936-1001 => C:\Program Files\Microsoft OneDrive\26.095.0519.0003\OneDriveLauncher.exe [759656 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {A5B26DA5-A922-4BB6-81D8-F3236BCE1939} - System32\Tasks\Opera scheduled assistant Autoupdate 1742671193 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {3DDD03EB-73A6-4448-B543-7E5134F024D4} - System32\Tasks\Opera scheduled assistant Autoupdate 1743329451 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {6D0D224C-FE97-4E3E-955F-E7A7129EF632} - System32\Tasks\Opera scheduled assistant Autoupdate 1743935456 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {50FCA144-9EC4-495B-B0C7-778080B8AA2A} - System32\Tasks\Opera scheduled assistant Autoupdate 1744563326 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {A96B2027-7216-48D0-A42E-608C83D49E01} - System32\Tasks\Opera scheduled Autoupdate 1742671190 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
Task: {14A3B2A6-9580-49AA-BF06-48C7A23B3A11} - System32\Tasks\Opera scheduled Autoupdate 1743329448 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
Task: {31ED7F83-16EE-420A-9FB2-7E3F159C7AAE} - System32\Tasks\Opera scheduled Autoupdate 1743935452 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
Task: {0EFD31FB-D19A-45F9-8664-AB5ECC8EB61A} - System32\Tasks\Opera scheduled Autoupdate 1744563322 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 62.201.16.251 62.201.16.252
Tcpip\..\Interfaces\{9c250a5c-464b-404d-9123-061791ffc076}: [DhcpNameServer] 62.201.16.251 62.201.16.252
Tcpip\..\Interfaces\{9d552a63-484c-45a7-b9c1-af7404645d40}: [DhcpNameServer] 62.201.16.251 62.201.16.252
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.471.0 -> C:\Program Files\Java\jre1.8.0_471\bin\dtplugin\npDeployJava1.dll [2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.471.0 -> C:\Program Files\Java\jre1.8.0_471\bin\plugin2\npjp2.dll [2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-01-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-12-07] (Microsoft Corporation -> Microsoft Corporation)
Edge:
=======
Edge Profile: C:\Users\Dusan\AppData\Local\Microsoft\Edge\User Data\Default [2026-05-26]
Edge Extension: (Dokumenty Google offline) - C:\Users\Dusan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-12]
Edge Extension: (Edge relevant text changes) - C:\Users\Dusan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-27]
Chrome:
=======
CHR Profile: C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default [2026-06-19]
CHR DownloadDir: E:\Temp E
CHR Notifications: Default -> hxxps://kfc.cz; hxxps://ombre.com; hxxps://www.facebook.com; hxxps://www.netflix.com; hxxps://www.youtube.com; hxxps://y2mate.nu
CHR Session Restore: Default -> is enabled.
CHR Extension: (Dokumenty Google offline) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-19]
CHR Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-06-17]
CHR Extension: (Coupert - Automatic Coupon Finder & Cashback) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidniedemcgceagapgdekdbmanojomk [2026-06-19]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-03-22]
CHR Profile: C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\System Profile [2026-01-20]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AorusLcdService; C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\AorusLcdService.exe [60000 2025-10-22] (GIGA-BYTE Technology Co., Ltd. -> )
R2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe [9728 2024-03-17] (GuinpinSoft inc) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13380928 2026-06-06] (Microsoft Corporation -> Microsoft Corporation)
R2 CmWebAdmin.exe; C:\Program Files\CodeMeter\Runtime\bin\CmWebAdmin.exe [10759616 2021-09-29] (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
R3 CorsairCpuIdService; C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\CorsairCpuIdService.exe [633496 2026-06-08] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R3 CorsairDeviceControlService; C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairDeviceControlService.exe [2525576 2025-04-17] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S3 CorsairDeviceListerService; C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\CorsairDeviceListerService.exe [366232 2026-06-08] (Corsair Memory, Inc. -> )
S3 dnWhoDisp; D:\Program Files (x86)\Rockwell Software\RSLINX\dnwhodisp.exe [181704 2020-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [150696 2025-08-08] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 EIP Commission Tool UI Service; D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe [359280 2021-12-26] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 EIP Commission Tool Windows Service; D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe [359280 2021-12-26] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FactoryTalk Activation Service; C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\lmgrd.exe [916304 2022-02-23] (Flexera Software LLC -> Flexera)
R2 FactoryTalk Linx Browser UI; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\ftsm.exe [359280 2021-12-26] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FactoryTalk Linx CIP Security Service; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxSecurityServer.exe [469360 2022-02-24] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.095.0519.0003\FileSyncHelper.exe [3612048 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
R2 FoxitReaderUpdateService; C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2514016 2025-09-14] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R2 FTActivationBoost; C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\Tools\FTActivationBoost.exe [180792 2022-02-23] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FTSvcHost; C:\Program Files (x86)\Common Files\Rockwell\ftsvchost.exe [459120 2022-02-22] (Rockwell Automation Inc -> )
U2 FTSysDiagSvcHost; C:\Program Files (x86)\Common Files\Rockwell\FTSysDiagSvcHost.exe [72560 2022-02-15] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FTView Shared Service; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\ViewSharedService.exe [154992 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FTViewServiceHost; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\FTViewServiceHost.exe [83312 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
S2 GBTECService; C:\Program Files (x86)\GIGABYTE\GBTECService\OLEDDisplayService.exe [21160 2025-09-25] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2026-06-19] (HP Inc. -> HP Inc.)
R2 HPPSAService; C:\Program Files\HPPSAService\HP.PSA.RpcServer.exe [466952 2026-01-18] (HP Inc. -> )
R2 HPPSASmartPrinting; C:\Program Files\HPPSAService\IPPServer\POTGSvc.exe [31752 2026-01-18] (HP Inc. -> )
R3 iCUEUpdateService; C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUEUpdateService.exe [756888 2026-06-08] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [20769432 2026-05-14] (Logitech Inc -> Logitech, Inc.)
R2 LocalOPCServer; C:\Program Files (x86)\Common Files\Rockwell\LocalOPCServer.exe [361840 2022-02-22] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe [2150144 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_c8bc842500fab35b\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-05-21] (NVIDIA Corporation -> NVIDIA Corporation)
S2 OCButtonService; C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\OcButtonService.exe [131184 2023-12-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.095.0519.0003\OneDriveUpdaterService.exe [4022632 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
S3 OpcEnum; C:\Windows\SysWOW64\OpcEnum.exe [146432 2016-03-09] (OPC Foundation) [File not signed]
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [256256 2024-10-15] (Razer USA Ltd. -> Razer Inc)
R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [300232 2025-07-15] (Razer USA Ltd. -> Razer Inc.)
S3 RnaUaClientDataProviderService; C:\Program Files (x86)\Common Files\Rockwell\OpcUaConnector\RnaUaClientDataProvider.exe [6586672 2022-10-27] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 Rockwell HMI Diagnostics; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\HMIDIAGNOSTICSLSTADAPT.exe [282992 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 Rockwell Tag Server; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\TagSrv.exe [293744 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
S3 RSLinx; D:\Program Files (x86)\Rockwell Software\RSLinx\RSLINX.EXE [3656560 2022-03-04] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 RSLinx Classic Local OPC Server; D:\Program Files (x86)\Rockwell Software\RSLinx\RSLinxLocalServer.exe [23496 2020-05-20] (Rockwell Automation Inc -> Rockwell Automation, Inc)
R2 RSLinxNG; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG.exe [568176 2022-02-24] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 RSLinxNG02; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG02.EXE [533360 2022-02-24] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [513672 2025-04-28] (Razer USA Ltd. -> Razer Inc.)
R2 UpdaterAgent; C:\Program Files (x86)\Common Files\Rockwell\Updater\Agent\UpdaterAgent.exe [95088 2022-02-09] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe [4608640 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe [290744 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 GigabyteUpdateService; C:\WINDOWS\system32\GigabyteUpdateService.exe [590072 2026-06-19] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 Rockstar Service; "D:\Rockstar\RockstarService.exe" (No File)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AmdTools64; C:\WINDOWS\System32\drivers\AmdTools64.sys [77240 2022-07-18] (Advanced Micro Devices Inc. -> AMD)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [602112 2025-09-01] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2025-09-01] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-09-01] (Microsoft Corporation) [File not signed]
S3 CorsairGamingAudioService; C:\Windows\System32\drivers\CorsairGamingAudio64.sys [63016 2022-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R2 CorsairLLAccessE5624B0A345A7E17A08498BFEDC2D42A7CBA71C2; C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairLLAccess64.sys [23632 2025-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [47032 2025-09-01] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [22968 2025-09-01] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 cpuz160; C:\ProgramData\CPUID Software\sdk\U9C1WQtq [44696 2026-06-19] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
R1 CTIIO; C:\WINDOWS\system32\drivers\CtiIo64.sys [34920 2025-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
S3 e2fexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e2f.inf_amd64_b70a0d310652475b\e2f.sys [537680 2025-08-26] (Intel Corporation -> Intel Corporation)
R3 e2fnexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e2fn.inf_amd64_5075999c7c415a1d\e2fn.sys [1471576 2025-10-06] (Intel Corporation -> Intel Corporation)
R3 gdrv3; C:\Windows\System32\drivers\gdrv3.sys [52440 2024-11-22] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R3 GVCIDrv; C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\GvDll\tool\GVCIDrv64.sys [33280 2024-04-19] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_c804e238af0965e6\iaLPSS2_GPIO2_ADL.sys [142800 2026-02-17] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_bf2893ea319d70a7\iaLPSS2_I2C_ADL.sys [212944 2026-02-17] (Intel Corporation -> Intel Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-13] (Microsoft Windows -> Microsoft Corporation)
R3 KsUSBa64; C:\WINDOWS\system32\drivers\ksUSBa64.sys [1738664 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
R3 logi_audio_surround; C:\WINDOWS\System32\DriverStore\FileRepository\logi_audio.inf_amd64_affafe6e263c4f51\logi_audio_surround.sys [44112 2024-09-17] (Microsoft Windows Hardware Compatibility Publisher -> Logitech, Inc.)
R3 logi_joy_bus_enum; C:\WINDOWS\System32\drivers\logi_joy_bus_enum.x64.sys [45448 2026-04-16] (Logitech Inc -> Logitech)
R3 logi_joy_vir_hid; C:\WINDOWS\System32\drivers\logi_joy_vir_hid.x64.sys [32648 2026-04-16] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\WINDOWS\System32\drivers\logi_joy_xlcore.x64.sys [74632 2026-04-16] (Logitech Inc -> Logitech)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [19672 2025-12-12] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R3 RtkUsbAD_2413; C:\WINDOWS\System32\DriverStore\FileRepository\rtdusbad_gigabyte.inf_amd64_a66637a2afd200db\RtUsbA64.sys [523712 2025-08-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
S3 rtucx21x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtucx21x64.inf_amd64_286645bc82b2f9fb\rtucx21x64.sys [1359360 2024-04-01] (Microsoft Windows -> Realtek Corporation)
S3 rtucx22x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtucx22x64.inf_amd64_01a5900d61d5555f\rtucx22x64.sys [1846208 2025-06-27] (Realtek Semiconductor Corp. -> Realtek Corporation)
R3 rtump64x64; C:\WINDOWS\System32\drivers\rtump64x64.sys [1606120 2026-02-17] (Realtek Semiconductor Corp. -> Realtek Corporation)
R3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [64168 2022-08-18] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_0084; C:\WINDOWS\System32\drivers\RzDev_0084.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc)
S3 RzDev_00b2; C:\WINDOWS\System32\drivers\RzDev_00b2.sys [63224 2022-05-30] (Razer USA Ltd. -> Razer Inc)
R0 secnvme; C:\WINDOWS\System32\drivers\secnvme.sys [133944 2023-03-04] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [411096 2026-05-27] (Microsoft Windows -> Microsoft Corporation)
R1 VirtualBackplane; C:\WINDOWS\System32\drivers\VirtualBackplane.sys [70144 2022-05-05] (Rockwell Automation Inc -> Rockwell Automation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21888 2026-06-03] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [646536 2026-06-03] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [115120 2026-06-03] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-09-01] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_a6dc64e436f22951\WSDScan.sys [61440 2025-09-01] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-06-20 02:00 - 2026-06-20 02:00 - 000048263 _____ C:\Users\Dusan\Desktop\FRST.txt
2026-06-20 02:00 - 2026-06-20 02:00 - 000000000 ____D C:\FRST
2026-06-20 01:59 - 2026-06-20 01:59 - 002449920 _____ (Farbar) C:\Users\Dusan\Desktop\FRST64.exe
2026-06-18 14:15 - 2026-06-18 14:15 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Avanquest
2026-06-18 14:15 - 2026-06-18 14:15 - 000000000 ____D C:\ProgramData\Avanquest
2026-06-18 13:20 - 2026-06-20 01:24 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-06-10 21:20 - 2026-06-10 21:20 - 000772696 _____ C:\WINDOWS\system32\perfh005.dat
2026-06-10 21:20 - 2026-06-10 21:20 - 000183718 _____ C:\WINDOWS\system32\perfc005.dat
2026-06-10 08:51 - 2026-06-20 00:46 - 000000004 ____H C:\ProgramData\cm-lock
2026-06-08 15:45 - 2026-05-21 07:41 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-06-08 15:45 - 2026-05-21 07:36 - 001408232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-06-08 15:45 - 2026-05-21 07:36 - 000676584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-06-08 15:45 - 2026-05-21 07:36 - 000510696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 028094184 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-06-08 15:45 - 2026-05-21 07:35 - 002337512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001731304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001682152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-06-08 15:45 - 2026-05-21 07:35 - 001592040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001238760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001068264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 000824040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-06-08 15:45 - 2026-05-21 07:34 - 032166632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-06-08 15:45 - 2026-05-21 07:34 - 000469736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-06-08 15:45 - 2026-05-21 07:33 - 020993768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 005925608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 005796072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 004714728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-06-08 15:45 - 2026-05-21 07:32 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-06-08 15:45 - 2026-05-21 07:31 - 000572368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-06-08 15:45 - 2026-05-21 07:31 - 000441368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-06-08 15:45 - 2026-05-20 03:53 - 000167381 _____ C:\WINDOWS\system32\nvinfo.pb
2026-06-02 18:11 - 2026-06-02 18:11 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-05-27 15:51 - 2026-05-27 15:51 - 000037366 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-05-27 15:51 - 2026-05-27 15:51 - 000037366 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-05-27 15:51 - 2026-05-27 15:51 - 000004066 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-05-24 23:04 - 2026-05-24 23:04 - 000000202 _____ C:\Users\Dusan\Desktop\Age of Mythology Extended Edition.url
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-06-20 01:57 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-06-20 01:54 - 2025-01-14 11:23 - 000000068 ___SH C:\WINDOWS\system32\Drivers\winusb.winsecurity
2026-06-20 01:24 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-06-20 01:21 - 2025-01-14 11:23 - 000000068 ___SH C:\WINDOWS\system32\Drivers\ws2ifsl.winsecurity
2026-06-20 01:13 - 2025-09-01 19:30 - 000003640 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-20 01:13 - 2025-09-01 19:30 - 000003514 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-06-20 00:49 - 2024-11-26 09:34 - 000000130 _____ C:\Users\Dusan\AppData\LocalLow\e2ab92fb3990b0b88d9350e4e4abf3109cb5485acd2a79b4725a7d6bad6087f0
2026-06-20 00:46 - 2025-09-01 19:30 - 000003434 _____ C:\WINDOWS\system32\Tasks\GCC
2026-06-20 00:46 - 2025-09-01 19:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-06-20 00:46 - 2025-09-01 19:29 - 000010512 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-06-20 00:46 - 2025-09-01 19:25 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-06-20 00:46 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-06-20 00:46 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-06-20 00:46 - 2022-03-25 10:29 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-06-20 00:46 - 2022-03-22 02:50 - 000089336 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteDownloadAssistant.exe
2026-06-20 00:46 - 2022-03-22 02:44 - 000617760 _____ C:\WINDOWS\system32\wpbbin.exe
2026-06-20 00:46 - 2022-03-22 02:44 - 000590072 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteUpdateService.exe
2026-06-20 00:46 - 2022-03-22 02:44 - 000012288 ___SH C:\DumpStack.log.tmp
2026-06-20 00:46 - 2022-03-21 20:47 - 000000000 ____D C:\ProgramData\NVIDIA
2026-06-19 14:29 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-06-19 13:28 - 2025-09-01 19:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2026-06-19 13:28 - 2023-09-07 19:06 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-06-18 16:10 - 2022-04-10 19:57 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Microsoft\Excel
2026-06-18 16:04 - 2022-03-22 02:50 - 000000000 ____D C:\Users\Dusan\AppData\Local\Packages
2026-06-17 13:54 - 2022-03-22 23:09 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Microsoft\Word
2026-06-16 19:57 - 2022-03-21 19:59 - 000000000 ____D C:\Users\Dusan\AppData\Local\D3DSCache
2026-06-15 19:10 - 2025-09-01 19:30 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-254389370-4066128350-1364079936-1001
2026-06-15 19:10 - 2025-09-01 19:30 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-254389370-4066128350-1364079936-1001
2026-06-15 19:10 - 2025-09-01 19:30 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-06-15 19:10 - 2024-08-02 21:42 - 000001983 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-06-14 10:53 - 2022-03-22 02:44 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-06-13 21:11 - 2025-09-01 19:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-06-13 10:08 - 2022-03-22 10:32 - 000002207 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-06-12 20:04 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-06-11 20:52 - 2022-03-22 23:07 - 000000000 ____D C:\Program Files\Microsoft Office
2026-06-10 21:20 - 2025-09-01 19:27 - 001875844 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-06-10 08:51 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-06-10 08:50 - 2025-09-01 19:25 - 000497064 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-06-10 08:50 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-06-10 08:43 - 2022-03-21 20:19 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-06-10 08:42 - 2025-09-01 19:28 - 003261440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-06-10 08:38 - 2024-11-25 20:13 - 000000000 ____D C:\Program Files\dotnet
2026-06-10 08:38 - 2022-03-21 20:19 - 222431176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-06-10 08:38 - 2022-03-21 20:12 - 000000000 ____D C:\ProgramData\Package Cache
2026-06-09 17:38 - 2022-03-22 10:15 - 000000000 ____D C:\Users\Dusan\AppData\Local\NVIDIA
2026-06-08 15:50 - 2025-11-12 01:29 - 000000130 _____ C:\Users\Dusan\AppData\LocalLow\cef9c2e7ac9c6854724ce656c9520aab7ec2c64de7e71198ef754a4efeb8ae91
2026-06-08 15:50 - 2024-12-05 15:49 - 000000130 _____ C:\Users\Dusan\AppData\LocalLow\abb002046bd40a0efb5e11b1e9a2e20a8a01cbff694a13a62aa1f7d035bced9d
2026-06-08 11:13 - 2024-11-17 01:10 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\XnView
2026-06-08 10:07 - 2022-03-26 15:05 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\RenPy
2026-06-06 17:22 - 2022-03-22 11:07 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\vlc
2026-06-03 23:09 - 2022-03-22 02:44 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-06-03 10:35 - 2022-03-22 10:26 - 000000000 ____D C:\Users\Dusan\AppData\Local\CrashDumps
2026-06-02 21:08 - 2022-03-22 02:50 - 000000000 ____D C:\ProgramData\Packages
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-05-27 20:55 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-05-24 23:04 - 2022-03-22 11:26 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2026-05-21 17:40 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
==================== Files in the root of some directories ========
2025-02-14 23:00 - 2026-04-19 17:11 - 000040960 _____ () C:\Users\Dusan\AppData\Local\GameAnalyticsga.sqlite3
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
S počítačem není vůbec žádný problém.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-06-2026
Ran by Dusan (administrator) on DUSAN-PC (Gigabyte Technology Co., Ltd. Z690 AORUS PRO) (20-06-2026 02:00:11)
Running from C:\Users\Dusan\Desktop\FRST64.exe
Loaded Profiles: Dusan
Platform: Microsoft Windows 11 Home Version 25H2 26200.8655 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\Spotify.exe <7>
(C:\Program Files (x86)\Common Files\Rockwell\ftsvchost.exe ->) (Rockwell Automation Inc -> Node.js) C:\Program Files (x86)\Common Files\Rockwell\FTWebSupportService.exe
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe ->) (Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe <5>
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
(C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe ->) (Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
(C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\lmgrd.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\flexsvr.exe
(C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE.exe ->) (Corsair Memory, Inc. -> ) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\crashpad_handler.exe <3>
(C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\QmlRenderer.exe
(C:\Program Files\GIGABYTE\Control Center\GCC.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GBT_DL_LIB) C:\Program Files\WindowsApps\65d483df-b37e-4fcf-94de-8b795233db63_25.1.23.0_x64__1mmjbktjj1mkp\GBT_DL_LIB.exe
(C:\Program Files\LGHUB\lghub_agent.exe ->) (Logitech Inc -> Sentry and Logitech, Inc.) C:\Program Files\LGHUB\logi_crashpad_handler.exe <2>
(C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe <5>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\ShadowPlay\nvsphelper64.exe
(C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe ->) (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\crashpad_handler.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE.exe
(Creative Technology Ltd -> Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Command\Creative.SBCommand.exe
(D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\EIPCommissionWebSer.exe
(D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\EIPCommissionWinSer.exe
(D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxServices.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\NetBrowserManager.exe
(D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\ftsm.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxServices.exe <4>
(D:\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) D:\Steam\bin\cef\cef.win64\steamwebhelper.exe <8>
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <58>
(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe
(explorer.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) D:\Steam\steam.exe
(explorer.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> Gigabyte Technology CO.) C:\Program Files\GIGABYTE\Smart Backup\RPMDaemon.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.095.0519.0003\OneDrive.Sync.Service.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairDeviceControlService.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\CorsairCpuIdService.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUEUpdateService.exe
(services.exe ->) (Creative Technology Ltd -> Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\lmgrd.exe <2>
(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe
(services.exe ->) (GIGA-BYTE Technology Co., Ltd. -> ) C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\AorusLcdService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\EasyTuneEngineService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (GuinpinSoft inc) [File not signed] C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe
(services.exe ->) (HP Inc. -> ) C:\Program Files\HPPSAService\HP.PSA.RpcServer.exe
(services.exe ->) (HP Inc. -> ) C:\Program Files\HPPSAService\IPPServer\POTGSvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_8a3f88e34f6b8385\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_ee28fa9e734aabda\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_b57fc4f35ff4051b\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d7a222f6ce13d429\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <4>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_c8bc842500fab35b\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c5e940d4ffae802\RtkAudUService64.exe <2>
(services.exe ->) (Rockwell Automation Inc -> ) C:\Program Files (x86)\Common Files\Rockwell\ftsvchost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) C:\Program Files (x86)\Common Files\Rockwell\RNADiagnosticsSrv.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc) D:\Program Files (x86)\Rockwell Software\RSLinx\RSLinxLocalServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\EventClientMultiplexer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\EventServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\FTSysDiagSvcHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\LocalOPCServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\NmspHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RdcyHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RNADirMultiplexor.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RnaDirServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RsvcHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\Updater\Agent\UpdaterAgent.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\Tools\FTActivationBoost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe <2>
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxSecurityServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\ftsm.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG02.EXE
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\FTViewServiceHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\HMIDIAGNOSTICSLSTADAPT.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\TagSrv.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\ViewSharedService.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(services.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(services.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files\CodeMeter\Runtime\bin\CmWebAdmin.exe
(sihost.exe ->) (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe
(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\GCC.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_6.1.4.0_x64__8wekyb3d8bbwe\Microsoft.Notes.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.302.5.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
==================== Registry (Whitelisted) ===================
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c5e940d4ffae802\RtkAudUService64.exe [2165104 2024-08-05] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Corsair iCUE5 Software] => C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE Launcher.exe [195224 2026-06-08] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKLM-x32\...\Run: [Creative.SBCommand] => C:\Program Files (x86)\Creative\Sound Blaster Command\Creative.SBCommand.exe [210904 2023-10-06] (Creative Technology Ltd -> Creative Technology Ltd)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) [File not signed]
HKLM-x32\...\Run: [FactoryTalk Directory Information] => C:\Program Files (x86)\Common Files\Rockwell\FTLoginLogout.exe [480624 2022-02-22] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
HKLM-x32\...\Run: [UsbCipHelper] => C:\Program Files\Rockwell Automation\UsbCipDriver\USBCIPHelper\UsbCipHelper.exe [4638192 2019-01-28] (Rockwell Automation, Inc -> Rockwell Automation, Inc.)
HKLM-x32\...\Run: [ActivationNotifier] => C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\Tools\ActivationNotifier.exe [369720 2022-02-23] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
HKLM-x32\...\Run: [Reader_Sl] => C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\reader_sl.exe [4312128 2024-11-24] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752264 2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\RunOnce: [RPMKickstart] => C:\Program Files\GIGABYTE\Smart Backup\RPMKickstartEx.exe [2320384 2014-04-01] (TODO: <Company name>) [File not signed]
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3600072 2025-07-15] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [Steam] => D:\Steam\steam.exe [5776024 2026-06-09] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe [26286744 2026-05-14] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [FACEIT] => C:\Users\Dusan\AppData\Local\FACEIT\update.exe [2282184 2025-03-19] (ESL Gaming GmbH -> )
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [MicrosoftEdgeAutoLaunch_14E57C54C11BDF8154A560BBDF30F8A1] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [5227848 2026-06-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [S3AutomaticSTART] => C:\Program Files (x86)\Solitea\Money S3\MS3Auto.exe /tray (No File)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [S3Automatic] => C:\Program Files (x86)\Solitea\Money S3\MS3Auto.exe /tray (No File)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\MountPoints2: {29aeb048-aa22-11ec-a22a-b0a460ee0e16} - "I:\Setup.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\149.0.7827.114\Installer\chrmstp.exe [7662744 2026-06-13] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk [2025-01-14]
ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {FC992124-260F-4945-BEFB-470DFD890BBA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (No File)
Task: {B621089E-F655-43B3-BD96-5E6BCD1748F8} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35425448 2025-09-12] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b
Task: {CDF245FA-79B2-4BC8-8A23-813587E8022D} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem150.0.7863.0{829E4C51-5DB2-4A16-85B3-A649E51F0162} => C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe [8728216 2026-05-28] (Google LLC -> Google LLC)
Task: {93E88190-7677-47D4-9A95-0460038965A8} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
Task: {71E7958C-7304-4374-AF9A-233CBCC76449} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
Task: {AED5ED06-3625-4E5A-85AB-E98FCD673BD6} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelperOnUnlock => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
Task: {9F39B2E7-3865-4289-8EE7-D8B14AFEA9AC} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95240 2026-06-19] (HP Inc. -> HP Inc.)
Task: {D0071351-E0A9-4F41-BE57-EF963BA18E37} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95240 2026-06-19] (HP Inc. -> HP Inc.)
Task: {85C7446E-BC75-4A2D-B536-5D9E26183AB1} - System32\Tasks\Intel\Intel Telemetry 3 => C:\Program Files\Intel\Telemetry 3.0\lrio.exe [6045240 2024-02-14] (Intel Corporation -> Intel Corporation)
Task: {705CE682-C874-4D2E-AE1B-63423B234830} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16431408 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {248790F7-8819-401B-A9CC-19A527C76550} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28437392 2026-06-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {7D60C2E7-1B12-4CD2-8522-773CFE5C3221} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [73568 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {CFDBFC47-E0E1-4D0A-A043-3484CE92A153} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28437392 2026-06-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {D3AC2C1E-933B-4F13-AD20-0CFD79D2B6E2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427296 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {9DC6B900-987F-49BF-B413-A8BBD5AF4370} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427296 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {40928F91-B6E0-4679-9FB2-9A961394FD77} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1354600 2026-06-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {C395E79A-8A7A-4652-A1B5-361ED2E6E28F} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16431408 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {592CFBAC-26B3-46B7-84BE-6BCF4E9F6005} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (No File)
Task: {E1026476-CF4C-49E9-9B91-FB302029F0CA} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (No File)
Task: {CCF9E85A-941E-4A3F-9A6F-C61B6B11F881} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {18912E95-E50A-49A6-BC7E-2BA11A8F3A03} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3A7099EE-4887-4323-A556-397E88D496AE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8951F964-7592-4BC9-8DBD-459B84F127C0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EBFDB289-9230-4FCF-A44A-926AB3CF9A50} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7973C971-3FFE-48A0-875C-B9FF2DF2737B} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3346544 2026-04-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {14F44AFE-54F9-4C72-B7A2-B7CB475D661C} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4428648 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {F38CBDB1-269C-4C1C-A31A-856555B1681A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-254389370-4066128350-1364079936-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4428648 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {AB68F146-DF9D-47DB-9D3E-937029C9D0F3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-254389370-4066128350-1364079936-1001 => C:\Program Files\Microsoft OneDrive\26.095.0519.0003\OneDriveLauncher.exe [759656 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {A5B26DA5-A922-4BB6-81D8-F3236BCE1939} - System32\Tasks\Opera scheduled assistant Autoupdate 1742671193 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {3DDD03EB-73A6-4448-B543-7E5134F024D4} - System32\Tasks\Opera scheduled assistant Autoupdate 1743329451 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {6D0D224C-FE97-4E3E-955F-E7A7129EF632} - System32\Tasks\Opera scheduled assistant Autoupdate 1743935456 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {50FCA144-9EC4-495B-B0C7-778080B8AA2A} - System32\Tasks\Opera scheduled assistant Autoupdate 1744563326 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {A96B2027-7216-48D0-A42E-608C83D49E01} - System32\Tasks\Opera scheduled Autoupdate 1742671190 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
Task: {14A3B2A6-9580-49AA-BF06-48C7A23B3A11} - System32\Tasks\Opera scheduled Autoupdate 1743329448 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
Task: {31ED7F83-16EE-420A-9FB2-7E3F159C7AAE} - System32\Tasks\Opera scheduled Autoupdate 1743935452 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
Task: {0EFD31FB-D19A-45F9-8664-AB5ECC8EB61A} - System32\Tasks\Opera scheduled Autoupdate 1744563322 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 62.201.16.251 62.201.16.252
Tcpip\..\Interfaces\{9c250a5c-464b-404d-9123-061791ffc076}: [DhcpNameServer] 62.201.16.251 62.201.16.252
Tcpip\..\Interfaces\{9d552a63-484c-45a7-b9c1-af7404645d40}: [DhcpNameServer] 62.201.16.251 62.201.16.252
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.471.0 -> C:\Program Files\Java\jre1.8.0_471\bin\dtplugin\npDeployJava1.dll [2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.471.0 -> C:\Program Files\Java\jre1.8.0_471\bin\plugin2\npjp2.dll [2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-01-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-12-07] (Microsoft Corporation -> Microsoft Corporation)
Edge:
=======
Edge Profile: C:\Users\Dusan\AppData\Local\Microsoft\Edge\User Data\Default [2026-05-26]
Edge Extension: (Dokumenty Google offline) - C:\Users\Dusan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-12]
Edge Extension: (Edge relevant text changes) - C:\Users\Dusan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-27]
Chrome:
=======
CHR Profile: C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default [2026-06-19]
CHR DownloadDir: E:\Temp E
CHR Notifications: Default -> hxxps://kfc.cz; hxxps://ombre.com; hxxps://www.facebook.com; hxxps://www.netflix.com; hxxps://www.youtube.com; hxxps://y2mate.nu
CHR Session Restore: Default -> is enabled.
CHR Extension: (Dokumenty Google offline) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-19]
CHR Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-06-17]
CHR Extension: (Coupert - Automatic Coupon Finder & Cashback) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidniedemcgceagapgdekdbmanojomk [2026-06-19]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-03-22]
CHR Profile: C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\System Profile [2026-01-20]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AorusLcdService; C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\AorusLcdService.exe [60000 2025-10-22] (GIGA-BYTE Technology Co., Ltd. -> )
R2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe [9728 2024-03-17] (GuinpinSoft inc) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13380928 2026-06-06] (Microsoft Corporation -> Microsoft Corporation)
R2 CmWebAdmin.exe; C:\Program Files\CodeMeter\Runtime\bin\CmWebAdmin.exe [10759616 2021-09-29] (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
R3 CorsairCpuIdService; C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\CorsairCpuIdService.exe [633496 2026-06-08] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R3 CorsairDeviceControlService; C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairDeviceControlService.exe [2525576 2025-04-17] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S3 CorsairDeviceListerService; C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\CorsairDeviceListerService.exe [366232 2026-06-08] (Corsair Memory, Inc. -> )
S3 dnWhoDisp; D:\Program Files (x86)\Rockwell Software\RSLINX\dnwhodisp.exe [181704 2020-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [150696 2025-08-08] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 EIP Commission Tool UI Service; D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe [359280 2021-12-26] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 EIP Commission Tool Windows Service; D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe [359280 2021-12-26] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FactoryTalk Activation Service; C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\lmgrd.exe [916304 2022-02-23] (Flexera Software LLC -> Flexera)
R2 FactoryTalk Linx Browser UI; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\ftsm.exe [359280 2021-12-26] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FactoryTalk Linx CIP Security Service; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxSecurityServer.exe [469360 2022-02-24] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.095.0519.0003\FileSyncHelper.exe [3612048 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
R2 FoxitReaderUpdateService; C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2514016 2025-09-14] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R2 FTActivationBoost; C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\Tools\FTActivationBoost.exe [180792 2022-02-23] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FTSvcHost; C:\Program Files (x86)\Common Files\Rockwell\ftsvchost.exe [459120 2022-02-22] (Rockwell Automation Inc -> )
U2 FTSysDiagSvcHost; C:\Program Files (x86)\Common Files\Rockwell\FTSysDiagSvcHost.exe [72560 2022-02-15] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FTView Shared Service; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\ViewSharedService.exe [154992 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FTViewServiceHost; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\FTViewServiceHost.exe [83312 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
S2 GBTECService; C:\Program Files (x86)\GIGABYTE\GBTECService\OLEDDisplayService.exe [21160 2025-09-25] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2026-06-19] (HP Inc. -> HP Inc.)
R2 HPPSAService; C:\Program Files\HPPSAService\HP.PSA.RpcServer.exe [466952 2026-01-18] (HP Inc. -> )
R2 HPPSASmartPrinting; C:\Program Files\HPPSAService\IPPServer\POTGSvc.exe [31752 2026-01-18] (HP Inc. -> )
R3 iCUEUpdateService; C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUEUpdateService.exe [756888 2026-06-08] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [20769432 2026-05-14] (Logitech Inc -> Logitech, Inc.)
R2 LocalOPCServer; C:\Program Files (x86)\Common Files\Rockwell\LocalOPCServer.exe [361840 2022-02-22] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe [2150144 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_c8bc842500fab35b\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-05-21] (NVIDIA Corporation -> NVIDIA Corporation)
S2 OCButtonService; C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\OcButtonService.exe [131184 2023-12-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.095.0519.0003\OneDriveUpdaterService.exe [4022632 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
S3 OpcEnum; C:\Windows\SysWOW64\OpcEnum.exe [146432 2016-03-09] (OPC Foundation) [File not signed]
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [256256 2024-10-15] (Razer USA Ltd. -> Razer Inc)
R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [300232 2025-07-15] (Razer USA Ltd. -> Razer Inc.)
S3 RnaUaClientDataProviderService; C:\Program Files (x86)\Common Files\Rockwell\OpcUaConnector\RnaUaClientDataProvider.exe [6586672 2022-10-27] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 Rockwell HMI Diagnostics; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\HMIDIAGNOSTICSLSTADAPT.exe [282992 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 Rockwell Tag Server; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\TagSrv.exe [293744 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
S3 RSLinx; D:\Program Files (x86)\Rockwell Software\RSLinx\RSLINX.EXE [3656560 2022-03-04] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 RSLinx Classic Local OPC Server; D:\Program Files (x86)\Rockwell Software\RSLinx\RSLinxLocalServer.exe [23496 2020-05-20] (Rockwell Automation Inc -> Rockwell Automation, Inc)
R2 RSLinxNG; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG.exe [568176 2022-02-24] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 RSLinxNG02; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG02.EXE [533360 2022-02-24] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [513672 2025-04-28] (Razer USA Ltd. -> Razer Inc.)
R2 UpdaterAgent; C:\Program Files (x86)\Common Files\Rockwell\Updater\Agent\UpdaterAgent.exe [95088 2022-02-09] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe [4608640 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe [290744 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 GigabyteUpdateService; C:\WINDOWS\system32\GigabyteUpdateService.exe [590072 2026-06-19] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 Rockstar Service; "D:\Rockstar\RockstarService.exe" (No File)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AmdTools64; C:\WINDOWS\System32\drivers\AmdTools64.sys [77240 2022-07-18] (Advanced Micro Devices Inc. -> AMD)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [602112 2025-09-01] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2025-09-01] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-09-01] (Microsoft Corporation) [File not signed]
S3 CorsairGamingAudioService; C:\Windows\System32\drivers\CorsairGamingAudio64.sys [63016 2022-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R2 CorsairLLAccessE5624B0A345A7E17A08498BFEDC2D42A7CBA71C2; C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairLLAccess64.sys [23632 2025-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [47032 2025-09-01] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [22968 2025-09-01] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 cpuz160; C:\ProgramData\CPUID Software\sdk\U9C1WQtq [44696 2026-06-19] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
R1 CTIIO; C:\WINDOWS\system32\drivers\CtiIo64.sys [34920 2025-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
S3 e2fexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e2f.inf_amd64_b70a0d310652475b\e2f.sys [537680 2025-08-26] (Intel Corporation -> Intel Corporation)
R3 e2fnexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e2fn.inf_amd64_5075999c7c415a1d\e2fn.sys [1471576 2025-10-06] (Intel Corporation -> Intel Corporation)
R3 gdrv3; C:\Windows\System32\drivers\gdrv3.sys [52440 2024-11-22] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R3 GVCIDrv; C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\GvDll\tool\GVCIDrv64.sys [33280 2024-04-19] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_c804e238af0965e6\iaLPSS2_GPIO2_ADL.sys [142800 2026-02-17] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_bf2893ea319d70a7\iaLPSS2_I2C_ADL.sys [212944 2026-02-17] (Intel Corporation -> Intel Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-13] (Microsoft Windows -> Microsoft Corporation)
R3 KsUSBa64; C:\WINDOWS\system32\drivers\ksUSBa64.sys [1738664 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
R3 logi_audio_surround; C:\WINDOWS\System32\DriverStore\FileRepository\logi_audio.inf_amd64_affafe6e263c4f51\logi_audio_surround.sys [44112 2024-09-17] (Microsoft Windows Hardware Compatibility Publisher -> Logitech, Inc.)
R3 logi_joy_bus_enum; C:\WINDOWS\System32\drivers\logi_joy_bus_enum.x64.sys [45448 2026-04-16] (Logitech Inc -> Logitech)
R3 logi_joy_vir_hid; C:\WINDOWS\System32\drivers\logi_joy_vir_hid.x64.sys [32648 2026-04-16] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\WINDOWS\System32\drivers\logi_joy_xlcore.x64.sys [74632 2026-04-16] (Logitech Inc -> Logitech)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [19672 2025-12-12] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R3 RtkUsbAD_2413; C:\WINDOWS\System32\DriverStore\FileRepository\rtdusbad_gigabyte.inf_amd64_a66637a2afd200db\RtUsbA64.sys [523712 2025-08-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
S3 rtucx21x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtucx21x64.inf_amd64_286645bc82b2f9fb\rtucx21x64.sys [1359360 2024-04-01] (Microsoft Windows -> Realtek Corporation)
S3 rtucx22x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtucx22x64.inf_amd64_01a5900d61d5555f\rtucx22x64.sys [1846208 2025-06-27] (Realtek Semiconductor Corp. -> Realtek Corporation)
R3 rtump64x64; C:\WINDOWS\System32\drivers\rtump64x64.sys [1606120 2026-02-17] (Realtek Semiconductor Corp. -> Realtek Corporation)
R3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [64168 2022-08-18] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_0084; C:\WINDOWS\System32\drivers\RzDev_0084.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc)
S3 RzDev_00b2; C:\WINDOWS\System32\drivers\RzDev_00b2.sys [63224 2022-05-30] (Razer USA Ltd. -> Razer Inc)
R0 secnvme; C:\WINDOWS\System32\drivers\secnvme.sys [133944 2023-03-04] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [411096 2026-05-27] (Microsoft Windows -> Microsoft Corporation)
R1 VirtualBackplane; C:\WINDOWS\System32\drivers\VirtualBackplane.sys [70144 2022-05-05] (Rockwell Automation Inc -> Rockwell Automation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21888 2026-06-03] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [646536 2026-06-03] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [115120 2026-06-03] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-09-01] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_a6dc64e436f22951\WSDScan.sys [61440 2025-09-01] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-06-20 02:00 - 2026-06-20 02:00 - 000048263 _____ C:\Users\Dusan\Desktop\FRST.txt
2026-06-20 02:00 - 2026-06-20 02:00 - 000000000 ____D C:\FRST
2026-06-20 01:59 - 2026-06-20 01:59 - 002449920 _____ (Farbar) C:\Users\Dusan\Desktop\FRST64.exe
2026-06-18 14:15 - 2026-06-18 14:15 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Avanquest
2026-06-18 14:15 - 2026-06-18 14:15 - 000000000 ____D C:\ProgramData\Avanquest
2026-06-18 13:20 - 2026-06-20 01:24 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-06-10 21:20 - 2026-06-10 21:20 - 000772696 _____ C:\WINDOWS\system32\perfh005.dat
2026-06-10 21:20 - 2026-06-10 21:20 - 000183718 _____ C:\WINDOWS\system32\perfc005.dat
2026-06-10 08:51 - 2026-06-20 00:46 - 000000004 ____H C:\ProgramData\cm-lock
2026-06-08 15:45 - 2026-05-21 07:41 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-06-08 15:45 - 2026-05-21 07:36 - 001408232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-06-08 15:45 - 2026-05-21 07:36 - 000676584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-06-08 15:45 - 2026-05-21 07:36 - 000510696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 028094184 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-06-08 15:45 - 2026-05-21 07:35 - 002337512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001731304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001682152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-06-08 15:45 - 2026-05-21 07:35 - 001592040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001238760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001068264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 000824040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-06-08 15:45 - 2026-05-21 07:34 - 032166632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-06-08 15:45 - 2026-05-21 07:34 - 000469736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-06-08 15:45 - 2026-05-21 07:33 - 020993768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 005925608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 005796072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 004714728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-06-08 15:45 - 2026-05-21 07:32 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-06-08 15:45 - 2026-05-21 07:31 - 000572368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-06-08 15:45 - 2026-05-21 07:31 - 000441368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-06-08 15:45 - 2026-05-20 03:53 - 000167381 _____ C:\WINDOWS\system32\nvinfo.pb
2026-06-02 18:11 - 2026-06-02 18:11 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-05-27 15:51 - 2026-05-27 15:51 - 000037366 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-05-27 15:51 - 2026-05-27 15:51 - 000037366 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-05-27 15:51 - 2026-05-27 15:51 - 000004066 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-05-24 23:04 - 2026-05-24 23:04 - 000000202 _____ C:\Users\Dusan\Desktop\Age of Mythology Extended Edition.url
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-06-20 01:57 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-06-20 01:54 - 2025-01-14 11:23 - 000000068 ___SH C:\WINDOWS\system32\Drivers\winusb.winsecurity
2026-06-20 01:24 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-06-20 01:21 - 2025-01-14 11:23 - 000000068 ___SH C:\WINDOWS\system32\Drivers\ws2ifsl.winsecurity
2026-06-20 01:13 - 2025-09-01 19:30 - 000003640 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-20 01:13 - 2025-09-01 19:30 - 000003514 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-06-20 00:49 - 2024-11-26 09:34 - 000000130 _____ C:\Users\Dusan\AppData\LocalLow\e2ab92fb3990b0b88d9350e4e4abf3109cb5485acd2a79b4725a7d6bad6087f0
2026-06-20 00:46 - 2025-09-01 19:30 - 000003434 _____ C:\WINDOWS\system32\Tasks\GCC
2026-06-20 00:46 - 2025-09-01 19:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-06-20 00:46 - 2025-09-01 19:29 - 000010512 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-06-20 00:46 - 2025-09-01 19:25 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-06-20 00:46 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-06-20 00:46 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-06-20 00:46 - 2022-03-25 10:29 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-06-20 00:46 - 2022-03-22 02:50 - 000089336 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteDownloadAssistant.exe
2026-06-20 00:46 - 2022-03-22 02:44 - 000617760 _____ C:\WINDOWS\system32\wpbbin.exe
2026-06-20 00:46 - 2022-03-22 02:44 - 000590072 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteUpdateService.exe
2026-06-20 00:46 - 2022-03-22 02:44 - 000012288 ___SH C:\DumpStack.log.tmp
2026-06-20 00:46 - 2022-03-21 20:47 - 000000000 ____D C:\ProgramData\NVIDIA
2026-06-19 14:29 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-06-19 13:28 - 2025-09-01 19:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2026-06-19 13:28 - 2023-09-07 19:06 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-06-18 16:10 - 2022-04-10 19:57 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Microsoft\Excel
2026-06-18 16:04 - 2022-03-22 02:50 - 000000000 ____D C:\Users\Dusan\AppData\Local\Packages
2026-06-17 13:54 - 2022-03-22 23:09 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Microsoft\Word
2026-06-16 19:57 - 2022-03-21 19:59 - 000000000 ____D C:\Users\Dusan\AppData\Local\D3DSCache
2026-06-15 19:10 - 2025-09-01 19:30 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-254389370-4066128350-1364079936-1001
2026-06-15 19:10 - 2025-09-01 19:30 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-254389370-4066128350-1364079936-1001
2026-06-15 19:10 - 2025-09-01 19:30 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-06-15 19:10 - 2024-08-02 21:42 - 000001983 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-06-14 10:53 - 2022-03-22 02:44 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-06-13 21:11 - 2025-09-01 19:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-06-13 10:08 - 2022-03-22 10:32 - 000002207 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-06-12 20:04 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-06-11 20:52 - 2022-03-22 23:07 - 000000000 ____D C:\Program Files\Microsoft Office
2026-06-10 21:20 - 2025-09-01 19:27 - 001875844 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-06-10 08:51 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-06-10 08:50 - 2025-09-01 19:25 - 000497064 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-06-10 08:50 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-06-10 08:43 - 2022-03-21 20:19 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-06-10 08:42 - 2025-09-01 19:28 - 003261440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-06-10 08:38 - 2024-11-25 20:13 - 000000000 ____D C:\Program Files\dotnet
2026-06-10 08:38 - 2022-03-21 20:19 - 222431176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-06-10 08:38 - 2022-03-21 20:12 - 000000000 ____D C:\ProgramData\Package Cache
2026-06-09 17:38 - 2022-03-22 10:15 - 000000000 ____D C:\Users\Dusan\AppData\Local\NVIDIA
2026-06-08 15:50 - 2025-11-12 01:29 - 000000130 _____ C:\Users\Dusan\AppData\LocalLow\cef9c2e7ac9c6854724ce656c9520aab7ec2c64de7e71198ef754a4efeb8ae91
2026-06-08 15:50 - 2024-12-05 15:49 - 000000130 _____ C:\Users\Dusan\AppData\LocalLow\abb002046bd40a0efb5e11b1e9a2e20a8a01cbff694a13a62aa1f7d035bced9d
2026-06-08 11:13 - 2024-11-17 01:10 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\XnView
2026-06-08 10:07 - 2022-03-26 15:05 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\RenPy
2026-06-06 17:22 - 2022-03-22 11:07 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\vlc
2026-06-03 23:09 - 2022-03-22 02:44 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-06-03 10:35 - 2022-03-22 10:26 - 000000000 ____D C:\Users\Dusan\AppData\Local\CrashDumps
2026-06-02 21:08 - 2022-03-22 02:50 - 000000000 ____D C:\ProgramData\Packages
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-05-27 20:55 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-05-24 23:04 - 2022-03-22 11:26 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2026-05-21 17:40 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
==================== Files in the root of some directories ========
2025-02-14 23:00 - 2026-04-19 17:11 - 000040960 _____ () C:\Users\Dusan\AppData\Local\GameAnalyticsga.sqlite3
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-06-2026
Ran by Dusan (administrator) on DUSAN-PC (Gigabyte Technology Co., Ltd. Z690 AORUS PRO) (20-06-2026 02:00:11)
Running from C:\Users\Dusan\Desktop\FRST64.exe
Loaded Profiles: Dusan
Platform: Microsoft Windows 11 Home Version 25H2 26200.8655 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\Spotify.exe <7>
(C:\Program Files (x86)\Common Files\Rockwell\ftsvchost.exe ->) (Rockwell Automation Inc -> Node.js) C:\Program Files (x86)\Common Files\Rockwell\FTWebSupportService.exe
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe ->) (Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe <5>
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
(C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe ->) (Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
(C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\lmgrd.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\flexsvr.exe
(C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE.exe ->) (Corsair Memory, Inc. -> ) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\crashpad_handler.exe <3>
(C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\QmlRenderer.exe
(C:\Program Files\GIGABYTE\Control Center\GCC.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GBT_DL_LIB) C:\Program Files\WindowsApps\65d483df-b37e-4fcf-94de-8b795233db63_25.1.23.0_x64__1mmjbktjj1mkp\GBT_DL_LIB.exe
(C:\Program Files\LGHUB\lghub_agent.exe ->) (Logitech Inc -> Sentry and Logitech, Inc.) C:\Program Files\LGHUB\logi_crashpad_handler.exe <2>
(C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe <5>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\ShadowPlay\nvsphelper64.exe
(C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe ->) (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\crashpad_handler.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE.exe
(Creative Technology Ltd -> Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Command\Creative.SBCommand.exe
(D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\EIPCommissionWebSer.exe
(D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\EIPCommissionWinSer.exe
(D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxServices.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\NetBrowserManager.exe
(D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\ftsm.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxServices.exe <4>
(D:\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) D:\Steam\bin\cef\cef.win64\steamwebhelper.exe <8>
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <58>
(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe
(explorer.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) D:\Steam\steam.exe
(explorer.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> Gigabyte Technology CO.) C:\Program Files\GIGABYTE\Smart Backup\RPMDaemon.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.095.0519.0003\OneDrive.Sync.Service.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairDeviceControlService.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\CorsairCpuIdService.exe
(services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUEUpdateService.exe
(services.exe ->) (Creative Technology Ltd -> Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\lmgrd.exe <2>
(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe
(services.exe ->) (GIGA-BYTE Technology Co., Ltd. -> ) C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\AorusLcdService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\EasyTuneEngineService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (GuinpinSoft inc) [File not signed] C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe
(services.exe ->) (HP Inc. -> ) C:\Program Files\HPPSAService\HP.PSA.RpcServer.exe
(services.exe ->) (HP Inc. -> ) C:\Program Files\HPPSAService\IPPServer\POTGSvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_8a3f88e34f6b8385\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_ee28fa9e734aabda\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_b57fc4f35ff4051b\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d7a222f6ce13d429\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <4>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_c8bc842500fab35b\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c5e940d4ffae802\RtkAudUService64.exe <2>
(services.exe ->) (Rockwell Automation Inc -> ) C:\Program Files (x86)\Common Files\Rockwell\ftsvchost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation Inc.) C:\Program Files (x86)\Common Files\Rockwell\RNADiagnosticsSrv.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc) D:\Program Files (x86)\Rockwell Software\RSLinx\RSLinxLocalServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\EventClientMultiplexer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\EventServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\FTSysDiagSvcHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\LocalOPCServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\NmspHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RdcyHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RNADirMultiplexor.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RnaDirServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\RsvcHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Common Files\Rockwell\Updater\Agent\UpdaterAgent.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\Tools\FTActivationBoost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe <2>
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxSecurityServer.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\ftsm.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG02.EXE
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\FTViewServiceHost.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\HMIDIAGNOSTICSLSTADAPT.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\TagSrv.exe
(services.exe ->) (Rockwell Automation Inc -> Rockwell Automation, Inc.) D:\Program Files (x86)\Rockwell Software\RSView Enterprise\ViewSharedService.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(services.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(services.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files\CodeMeter\Runtime\bin\CmWebAdmin.exe
(sihost.exe ->) (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.292.148.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe
(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\GCC.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_6.1.4.0_x64__8wekyb3d8bbwe\Microsoft.Notes.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.302.5.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
==================== Registry (Whitelisted) ===================
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c5e940d4ffae802\RtkAudUService64.exe [2165104 2024-08-05] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Corsair iCUE5 Software] => C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUE Launcher.exe [195224 2026-06-08] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKLM-x32\...\Run: [Creative.SBCommand] => C:\Program Files (x86)\Creative\Sound Blaster Command\Creative.SBCommand.exe [210904 2023-10-06] (Creative Technology Ltd -> Creative Technology Ltd)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) [File not signed]
HKLM-x32\...\Run: [FactoryTalk Directory Information] => C:\Program Files (x86)\Common Files\Rockwell\FTLoginLogout.exe [480624 2022-02-22] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
HKLM-x32\...\Run: [UsbCipHelper] => C:\Program Files\Rockwell Automation\UsbCipDriver\USBCIPHelper\UsbCipHelper.exe [4638192 2019-01-28] (Rockwell Automation, Inc -> Rockwell Automation, Inc.)
HKLM-x32\...\Run: [ActivationNotifier] => C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\Tools\ActivationNotifier.exe [369720 2022-02-23] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
HKLM-x32\...\Run: [Reader_Sl] => C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\reader_sl.exe [4312128 2024-11-24] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752264 2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\RunOnce: [RPMKickstart] => C:\Program Files\GIGABYTE\Smart Backup\RPMKickstartEx.exe [2320384 2014-04-01] (TODO: <Company name>) [File not signed]
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3600072 2025-07-15] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [Steam] => D:\Steam\steam.exe [5776024 2026-06-09] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe [26286744 2026-05-14] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [FACEIT] => C:\Users\Dusan\AppData\Local\FACEIT\update.exe [2282184 2025-03-19] (ESL Gaming GmbH -> )
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [MicrosoftEdgeAutoLaunch_14E57C54C11BDF8154A560BBDF30F8A1] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [5227848 2026-06-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [S3AutomaticSTART] => C:\Program Files (x86)\Solitea\Money S3\MS3Auto.exe /tray (No File)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\Run: [S3Automatic] => C:\Program Files (x86)\Solitea\Money S3\MS3Auto.exe /tray (No File)
HKU\S-1-5-21-254389370-4066128350-1364079936-1001\...\MountPoints2: {29aeb048-aa22-11ec-a22a-b0a460ee0e16} - "I:\Setup.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\149.0.7827.114\Installer\chrmstp.exe [7662744 2026-06-13] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk [2025-01-14]
ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {FC992124-260F-4945-BEFB-470DFD890BBA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (No File)
Task: {B621089E-F655-43B3-BD96-5E6BCD1748F8} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35425448 2025-09-12] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b
Task: {CDF245FA-79B2-4BC8-8A23-813587E8022D} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem150.0.7863.0{829E4C51-5DB2-4A16-85B3-A649E51F0162} => C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe [8728216 2026-05-28] (Google LLC -> Google LLC)
Task: {93E88190-7677-47D4-9A95-0460038965A8} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
Task: {71E7958C-7304-4374-AF9A-233CBCC76449} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
Task: {AED5ED06-3625-4E5A-85AB-E98FCD673BD6} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelperOnUnlock => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4044440 2026-06-06] (Google LLC -> Google LLC)
Task: {9F39B2E7-3865-4289-8EE7-D8B14AFEA9AC} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95240 2026-06-19] (HP Inc. -> HP Inc.)
Task: {D0071351-E0A9-4F41-BE57-EF963BA18E37} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95240 2026-06-19] (HP Inc. -> HP Inc.)
Task: {85C7446E-BC75-4A2D-B536-5D9E26183AB1} - System32\Tasks\Intel\Intel Telemetry 3 => C:\Program Files\Intel\Telemetry 3.0\lrio.exe [6045240 2024-02-14] (Intel Corporation -> Intel Corporation)
Task: {705CE682-C874-4D2E-AE1B-63423B234830} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16431408 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {248790F7-8819-401B-A9CC-19A527C76550} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28437392 2026-06-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {7D60C2E7-1B12-4CD2-8522-773CFE5C3221} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [73568 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {CFDBFC47-E0E1-4D0A-A043-3484CE92A153} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28437392 2026-06-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {D3AC2C1E-933B-4F13-AD20-0CFD79D2B6E2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427296 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {9DC6B900-987F-49BF-B413-A8BBD5AF4370} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427296 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {40928F91-B6E0-4679-9FB2-9A961394FD77} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1354600 2026-06-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {C395E79A-8A7A-4652-A1B5-361ED2E6E28F} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16431408 2026-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {592CFBAC-26B3-46B7-84BE-6BCF4E9F6005} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (No File)
Task: {E1026476-CF4C-49E9-9B91-FB302029F0CA} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (No File)
Task: {CCF9E85A-941E-4A3F-9A6F-C61B6B11F881} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {18912E95-E50A-49A6-BC7E-2BA11A8F3A03} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3A7099EE-4887-4323-A556-397E88D496AE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8951F964-7592-4BC9-8DBD-459B84F127C0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EBFDB289-9230-4FCF-A44A-926AB3CF9A50} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpCmdRun.exe [1906320 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7973C971-3FFE-48A0-875C-B9FF2DF2737B} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3346544 2026-04-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {14F44AFE-54F9-4C72-B7A2-B7CB475D661C} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4428648 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {F38CBDB1-269C-4C1C-A31A-856555B1681A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-254389370-4066128350-1364079936-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4428648 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {AB68F146-DF9D-47DB-9D3E-937029C9D0F3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-254389370-4066128350-1364079936-1001 => C:\Program Files\Microsoft OneDrive\26.095.0519.0003\OneDriveLauncher.exe [759656 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {A5B26DA5-A922-4BB6-81D8-F3236BCE1939} - System32\Tasks\Opera scheduled assistant Autoupdate 1742671193 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {3DDD03EB-73A6-4448-B543-7E5134F024D4} - System32\Tasks\Opera scheduled assistant Autoupdate 1743329451 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {6D0D224C-FE97-4E3E-955F-E7A7129EF632} - System32\Tasks\Opera scheduled assistant Autoupdate 1743935456 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {50FCA144-9EC4-495B-B0C7-778080B8AA2A} - System32\Tasks\Opera scheduled assistant Autoupdate 1744563326 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Dusan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {A96B2027-7216-48D0-A42E-608C83D49E01} - System32\Tasks\Opera scheduled Autoupdate 1742671190 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
Task: {14A3B2A6-9580-49AA-BF06-48C7A23B3A11} - System32\Tasks\Opera scheduled Autoupdate 1743329448 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
Task: {31ED7F83-16EE-420A-9FB2-7E3F159C7AAE} - System32\Tasks\Opera scheduled Autoupdate 1743935452 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
Task: {0EFD31FB-D19A-45F9-8664-AB5ECC8EB61A} - System32\Tasks\Opera scheduled Autoupdate 1744563322 => C:\Users\Dusan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5647768 2025-04-02] (Opera Norway AS -> Opera Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 62.201.16.251 62.201.16.252
Tcpip\..\Interfaces\{9c250a5c-464b-404d-9123-061791ffc076}: [DhcpNameServer] 62.201.16.251 62.201.16.252
Tcpip\..\Interfaces\{9d552a63-484c-45a7-b9c1-af7404645d40}: [DhcpNameServer] 62.201.16.251 62.201.16.252
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.471.0 -> C:\Program Files\Java\jre1.8.0_471\bin\dtplugin\npDeployJava1.dll [2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.471.0 -> C:\Program Files\Java\jre1.8.0_471\bin\plugin2\npjp2.dll [2025-09-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-01-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2025-09-20] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-12-07] (Microsoft Corporation -> Microsoft Corporation)
Edge:
=======
Edge Profile: C:\Users\Dusan\AppData\Local\Microsoft\Edge\User Data\Default [2026-05-26]
Edge Extension: (Dokumenty Google offline) - C:\Users\Dusan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-12]
Edge Extension: (Edge relevant text changes) - C:\Users\Dusan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-27]
Chrome:
=======
CHR Profile: C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default [2026-06-19]
CHR DownloadDir: E:\Temp E
CHR Notifications: Default -> hxxps://kfc.cz; hxxps://ombre.com; hxxps://www.facebook.com; hxxps://www.netflix.com; hxxps://www.youtube.com; hxxps://y2mate.nu
CHR Session Restore: Default -> is enabled.
CHR Extension: (Dokumenty Google offline) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-19]
CHR Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-06-17]
CHR Extension: (Coupert - Automatic Coupon Finder & Cashback) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidniedemcgceagapgdekdbmanojomk [2026-06-19]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-03-22]
CHR Profile: C:\Users\Dusan\AppData\Local\Google\Chrome\User Data\System Profile [2026-01-20]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AorusLcdService; C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\AorusLcdService.exe [60000 2025-10-22] (GIGA-BYTE Technology Co., Ltd. -> )
R2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe [9728 2024-03-17] (GuinpinSoft inc) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13380928 2026-06-06] (Microsoft Corporation -> Microsoft Corporation)
R2 CmWebAdmin.exe; C:\Program Files\CodeMeter\Runtime\bin\CmWebAdmin.exe [10759616 2021-09-29] (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
R3 CorsairCpuIdService; C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\CorsairCpuIdService.exe [633496 2026-06-08] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R3 CorsairDeviceControlService; C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairDeviceControlService.exe [2525576 2025-04-17] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S3 CorsairDeviceListerService; C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\CorsairDeviceListerService.exe [366232 2026-06-08] (Corsair Memory, Inc. -> )
S3 dnWhoDisp; D:\Program Files (x86)\Rockwell Software\RSLINX\dnwhodisp.exe [181704 2020-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [150696 2025-08-08] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 EIP Commission Tool UI Service; D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe [359280 2021-12-26] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 EIP Commission Tool Windows Service; D:\Program Files (x86)\Rockwell Software\EtherNet IP Address Commissioning Tool\ftsm.exe [359280 2021-12-26] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FactoryTalk Activation Service; C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\lmgrd.exe [916304 2022-02-23] (Flexera Software LLC -> Flexera)
R2 FactoryTalk Linx Browser UI; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\ftsm.exe [359280 2021-12-26] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FactoryTalk Linx CIP Security Service; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\FTLinxSecurityServer.exe [469360 2022-02-24] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.095.0519.0003\FileSyncHelper.exe [3612048 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
R2 FoxitReaderUpdateService; C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2514016 2025-09-14] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R2 FTActivationBoost; C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\Tools\FTActivationBoost.exe [180792 2022-02-23] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FTSvcHost; C:\Program Files (x86)\Common Files\Rockwell\ftsvchost.exe [459120 2022-02-22] (Rockwell Automation Inc -> )
U2 FTSysDiagSvcHost; C:\Program Files (x86)\Common Files\Rockwell\FTSysDiagSvcHost.exe [72560 2022-02-15] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FTView Shared Service; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\ViewSharedService.exe [154992 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 FTViewServiceHost; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\FTViewServiceHost.exe [83312 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
S2 GBTECService; C:\Program Files (x86)\GIGABYTE\GBTECService\OLEDDisplayService.exe [21160 2025-09-25] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2026-06-19] (HP Inc. -> HP Inc.)
R2 HPPSAService; C:\Program Files\HPPSAService\HP.PSA.RpcServer.exe [466952 2026-01-18] (HP Inc. -> )
R2 HPPSASmartPrinting; C:\Program Files\HPPSAService\IPPServer\POTGSvc.exe [31752 2026-01-18] (HP Inc. -> )
R3 iCUEUpdateService; C:\Program Files\Corsair\Corsair iCUE5 Software\Corsair iCUE5 Software\iCUEUpdateService.exe [756888 2026-06-08] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [20769432 2026-05-14] (Logitech Inc -> Logitech, Inc.)
R2 LocalOPCServer; C:\Program Files (x86)\Common Files\Rockwell\LocalOPCServer.exe [361840 2022-02-22] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe [2150144 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_c8bc842500fab35b\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-05-21] (NVIDIA Corporation -> NVIDIA Corporation)
S2 OCButtonService; C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\OcButtonService.exe [131184 2023-12-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.095.0519.0003\OneDriveUpdaterService.exe [4022632 2026-06-15] (Microsoft Corporation -> Microsoft Corporation)
S3 OpcEnum; C:\Windows\SysWOW64\OpcEnum.exe [146432 2016-03-09] (OPC Foundation) [File not signed]
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [256256 2024-10-15] (Razer USA Ltd. -> Razer Inc)
R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [300232 2025-07-15] (Razer USA Ltd. -> Razer Inc.)
S3 RnaUaClientDataProviderService; C:\Program Files (x86)\Common Files\Rockwell\OpcUaConnector\RnaUaClientDataProvider.exe [6586672 2022-10-27] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 Rockwell HMI Diagnostics; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\HMIDIAGNOSTICSLSTADAPT.exe [282992 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 Rockwell Tag Server; D:\Program Files (x86)\Rockwell Software\RSView Enterprise\TagSrv.exe [293744 2022-03-20] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
S3 RSLinx; D:\Program Files (x86)\Rockwell Software\RSLinx\RSLINX.EXE [3656560 2022-03-04] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 RSLinx Classic Local OPC Server; D:\Program Files (x86)\Rockwell Software\RSLinx\RSLinxLocalServer.exe [23496 2020-05-20] (Rockwell Automation Inc -> Rockwell Automation, Inc)
R2 RSLinxNG; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG.exe [568176 2022-02-24] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 RSLinxNG02; D:\Program Files (x86)\Rockwell Software\RSLinx Enterprise\RSLinxNG02.EXE [533360 2022-02-24] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [513672 2025-04-28] (Razer USA Ltd. -> Razer Inc.)
R2 UpdaterAgent; C:\Program Files (x86)\Common Files\Rockwell\Updater\Agent\UpdaterAgent.exe [95088 2022-02-09] (Rockwell Automation Inc -> Rockwell Automation, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe [4608640 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe [290744 2026-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 GigabyteUpdateService; C:\WINDOWS\system32\GigabyteUpdateService.exe [590072 2026-06-19] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 Rockstar Service; "D:\Rockstar\RockstarService.exe" (No File)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AmdTools64; C:\WINDOWS\System32\drivers\AmdTools64.sys [77240 2022-07-18] (Advanced Micro Devices Inc. -> AMD)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [602112 2025-09-01] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2025-09-01] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-09-01] (Microsoft Corporation) [File not signed]
S3 CorsairGamingAudioService; C:\Windows\System32\drivers\CorsairGamingAudio64.sys [63016 2022-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R2 CorsairLLAccessE5624B0A345A7E17A08498BFEDC2D42A7CBA71C2; C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairLLAccess64.sys [23632 2025-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [47032 2025-09-01] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [22968 2025-09-01] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 cpuz160; C:\ProgramData\CPUID Software\sdk\U9C1WQtq [44696 2026-06-19] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
R1 CTIIO; C:\WINDOWS\system32\drivers\CtiIo64.sys [34920 2025-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
S3 e2fexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e2f.inf_amd64_b70a0d310652475b\e2f.sys [537680 2025-08-26] (Intel Corporation -> Intel Corporation)
R3 e2fnexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e2fn.inf_amd64_5075999c7c415a1d\e2fn.sys [1471576 2025-10-06] (Intel Corporation -> Intel Corporation)
R3 gdrv3; C:\Windows\System32\drivers\gdrv3.sys [52440 2024-11-22] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R3 GVCIDrv; C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\GvDll\tool\GVCIDrv64.sys [33280 2024-04-19] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_c804e238af0965e6\iaLPSS2_GPIO2_ADL.sys [142800 2026-02-17] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_bf2893ea319d70a7\iaLPSS2_I2C_ADL.sys [212944 2026-02-17] (Intel Corporation -> Intel Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-13] (Microsoft Windows -> Microsoft Corporation)
R3 KsUSBa64; C:\WINDOWS\system32\drivers\ksUSBa64.sys [1738664 2020-10-14] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
R3 logi_audio_surround; C:\WINDOWS\System32\DriverStore\FileRepository\logi_audio.inf_amd64_affafe6e263c4f51\logi_audio_surround.sys [44112 2024-09-17] (Microsoft Windows Hardware Compatibility Publisher -> Logitech, Inc.)
R3 logi_joy_bus_enum; C:\WINDOWS\System32\drivers\logi_joy_bus_enum.x64.sys [45448 2026-04-16] (Logitech Inc -> Logitech)
R3 logi_joy_vir_hid; C:\WINDOWS\System32\drivers\logi_joy_vir_hid.x64.sys [32648 2026-04-16] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\WINDOWS\System32\drivers\logi_joy_xlcore.x64.sys [74632 2026-04-16] (Logitech Inc -> Logitech)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [19672 2025-12-12] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R3 RtkUsbAD_2413; C:\WINDOWS\System32\DriverStore\FileRepository\rtdusbad_gigabyte.inf_amd64_a66637a2afd200db\RtUsbA64.sys [523712 2025-08-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
S3 rtucx21x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtucx21x64.inf_amd64_286645bc82b2f9fb\rtucx21x64.sys [1359360 2024-04-01] (Microsoft Windows -> Realtek Corporation)
S3 rtucx22x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtucx22x64.inf_amd64_01a5900d61d5555f\rtucx22x64.sys [1846208 2025-06-27] (Realtek Semiconductor Corp. -> Realtek Corporation)
R3 rtump64x64; C:\WINDOWS\System32\drivers\rtump64x64.sys [1606120 2026-02-17] (Realtek Semiconductor Corp. -> Realtek Corporation)
R3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [64168 2022-08-18] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_0084; C:\WINDOWS\System32\drivers\RzDev_0084.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc)
S3 RzDev_00b2; C:\WINDOWS\System32\drivers\RzDev_00b2.sys [63224 2022-05-30] (Razer USA Ltd. -> Razer Inc)
R0 secnvme; C:\WINDOWS\System32\drivers\secnvme.sys [133944 2023-03-04] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [411096 2026-05-27] (Microsoft Windows -> Microsoft Corporation)
R1 VirtualBackplane; C:\WINDOWS\System32\drivers\VirtualBackplane.sys [70144 2022-05-05] (Rockwell Automation Inc -> Rockwell Automation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21888 2026-06-03] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [646536 2026-06-03] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [115120 2026-06-03] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-09-01] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_a6dc64e436f22951\WSDScan.sys [61440 2025-09-01] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-06-20 02:00 - 2026-06-20 02:00 - 000048263 _____ C:\Users\Dusan\Desktop\FRST.txt
2026-06-20 02:00 - 2026-06-20 02:00 - 000000000 ____D C:\FRST
2026-06-20 01:59 - 2026-06-20 01:59 - 002449920 _____ (Farbar) C:\Users\Dusan\Desktop\FRST64.exe
2026-06-18 14:15 - 2026-06-18 14:15 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Avanquest
2026-06-18 14:15 - 2026-06-18 14:15 - 000000000 ____D C:\ProgramData\Avanquest
2026-06-18 13:20 - 2026-06-20 01:24 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-06-10 21:20 - 2026-06-10 21:20 - 000772696 _____ C:\WINDOWS\system32\perfh005.dat
2026-06-10 21:20 - 2026-06-10 21:20 - 000183718 _____ C:\WINDOWS\system32\perfc005.dat
2026-06-10 08:51 - 2026-06-20 00:46 - 000000004 ____H C:\ProgramData\cm-lock
2026-06-08 15:45 - 2026-05-21 07:41 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-06-08 15:45 - 2026-05-21 07:41 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-06-08 15:45 - 2026-05-21 07:41 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-06-08 15:45 - 2026-05-21 07:36 - 001408232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-06-08 15:45 - 2026-05-21 07:36 - 000676584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-06-08 15:45 - 2026-05-21 07:36 - 000510696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 028094184 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-06-08 15:45 - 2026-05-21 07:35 - 002337512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001731304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001682152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-06-08 15:45 - 2026-05-21 07:35 - 001592040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001238760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 001068264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-06-08 15:45 - 2026-05-21 07:35 - 000824040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-06-08 15:45 - 2026-05-21 07:34 - 032166632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-06-08 15:45 - 2026-05-21 07:34 - 000469736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-06-08 15:45 - 2026-05-21 07:33 - 020993768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 005925608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 005796072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-06-08 15:45 - 2026-05-21 07:33 - 004714728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-06-08 15:45 - 2026-05-21 07:32 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-06-08 15:45 - 2026-05-21 07:31 - 000572368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-06-08 15:45 - 2026-05-21 07:31 - 000441368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-06-08 15:45 - 2026-05-20 03:53 - 000167381 _____ C:\WINDOWS\system32\nvinfo.pb
2026-06-02 18:11 - 2026-06-02 18:11 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-05-27 15:51 - 2026-05-27 15:51 - 000037366 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-05-27 15:51 - 2026-05-27 15:51 - 000037366 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-05-27 15:51 - 2026-05-27 15:51 - 000004066 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-05-24 23:04 - 2026-05-24 23:04 - 000000202 _____ C:\Users\Dusan\Desktop\Age of Mythology Extended Edition.url
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-06-20 01:57 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-06-20 01:54 - 2025-01-14 11:23 - 000000068 ___SH C:\WINDOWS\system32\Drivers\winusb.winsecurity
2026-06-20 01:24 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-06-20 01:21 - 2025-01-14 11:23 - 000000068 ___SH C:\WINDOWS\system32\Drivers\ws2ifsl.winsecurity
2026-06-20 01:13 - 2025-09-01 19:30 - 000003640 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-20 01:13 - 2025-09-01 19:30 - 000003514 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-06-20 00:49 - 2024-11-26 09:34 - 000000130 _____ C:\Users\Dusan\AppData\LocalLow\e2ab92fb3990b0b88d9350e4e4abf3109cb5485acd2a79b4725a7d6bad6087f0
2026-06-20 00:46 - 2025-09-01 19:30 - 000003434 _____ C:\WINDOWS\system32\Tasks\GCC
2026-06-20 00:46 - 2025-09-01 19:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-06-20 00:46 - 2025-09-01 19:29 - 000010512 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-06-20 00:46 - 2025-09-01 19:25 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-06-20 00:46 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-06-20 00:46 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-06-20 00:46 - 2022-03-25 10:29 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-06-20 00:46 - 2022-03-22 02:50 - 000089336 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteDownloadAssistant.exe
2026-06-20 00:46 - 2022-03-22 02:44 - 000617760 _____ C:\WINDOWS\system32\wpbbin.exe
2026-06-20 00:46 - 2022-03-22 02:44 - 000590072 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteUpdateService.exe
2026-06-20 00:46 - 2022-03-22 02:44 - 000012288 ___SH C:\DumpStack.log.tmp
2026-06-20 00:46 - 2022-03-21 20:47 - 000000000 ____D C:\ProgramData\NVIDIA
2026-06-19 14:29 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-06-19 13:28 - 2025-09-01 19:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2026-06-19 13:28 - 2023-09-07 19:06 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-06-18 16:10 - 2022-04-10 19:57 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Microsoft\Excel
2026-06-18 16:04 - 2022-03-22 02:50 - 000000000 ____D C:\Users\Dusan\AppData\Local\Packages
2026-06-17 13:54 - 2022-03-22 23:09 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Microsoft\Word
2026-06-16 19:57 - 2022-03-21 19:59 - 000000000 ____D C:\Users\Dusan\AppData\Local\D3DSCache
2026-06-15 19:10 - 2025-09-01 19:30 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-254389370-4066128350-1364079936-1001
2026-06-15 19:10 - 2025-09-01 19:30 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-254389370-4066128350-1364079936-1001
2026-06-15 19:10 - 2025-09-01 19:30 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-06-15 19:10 - 2024-08-02 21:42 - 000001983 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-06-14 10:53 - 2022-03-22 02:44 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-06-13 21:11 - 2025-09-01 19:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-06-13 10:08 - 2022-03-22 10:32 - 000002207 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-06-12 20:04 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-06-11 20:52 - 2022-03-22 23:07 - 000000000 ____D C:\Program Files\Microsoft Office
2026-06-10 21:20 - 2025-09-01 19:27 - 001875844 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-06-10 08:51 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-06-10 08:50 - 2025-09-01 19:25 - 000497064 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-06-10 08:50 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-06-10 08:50 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-06-10 08:43 - 2022-03-21 20:19 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-06-10 08:42 - 2025-09-01 19:28 - 003261440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-06-10 08:38 - 2024-11-25 20:13 - 000000000 ____D C:\Program Files\dotnet
2026-06-10 08:38 - 2022-03-21 20:19 - 222431176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-06-10 08:38 - 2022-03-21 20:12 - 000000000 ____D C:\ProgramData\Package Cache
2026-06-09 17:38 - 2022-03-22 10:15 - 000000000 ____D C:\Users\Dusan\AppData\Local\NVIDIA
2026-06-08 15:50 - 2025-11-12 01:29 - 000000130 _____ C:\Users\Dusan\AppData\LocalLow\cef9c2e7ac9c6854724ce656c9520aab7ec2c64de7e71198ef754a4efeb8ae91
2026-06-08 15:50 - 2024-12-05 15:49 - 000000130 _____ C:\Users\Dusan\AppData\LocalLow\abb002046bd40a0efb5e11b1e9a2e20a8a01cbff694a13a62aa1f7d035bced9d
2026-06-08 11:13 - 2024-11-17 01:10 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\XnView
2026-06-08 10:07 - 2022-03-26 15:05 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\RenPy
2026-06-06 17:22 - 2022-03-22 11:07 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\vlc
2026-06-03 23:09 - 2022-03-22 02:44 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-06-03 10:35 - 2022-03-22 10:26 - 000000000 ____D C:\Users\Dusan\AppData\Local\CrashDumps
2026-06-02 21:08 - 2022-03-22 02:50 - 000000000 ____D C:\ProgramData\Packages
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-05-27 20:55 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-05-27 20:55 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-05-24 23:04 - 2022-03-22 11:26 - 000000000 ____D C:\Users\Dusan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2026-05-21 17:40 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
==================== Files in the root of some directories ========
2025-02-14 23:00 - 2026-04-19 17:11 - 000040960 _____ () C:\Users\Dusan\AppData\Local\GameAnalyticsga.sqlite3
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================