VIRY.CZ

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-10-2026
Ran by marti (administrator) on MARTIN (ASRock Z790 Steel Legend WiFi) (26-10-2026 15:27:33)
Running from C:\Users\marti\OneDrive\Plocha\FRST64.exe
Loaded Profiles: marti
Platform: Microsoft Windows 11 Pro Version 26H2 26300.9711 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\ATuning.exe ->) (ASROCK INC. -> ASRock Incorporation) C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\AsrSvc.exe
(C:\Program Files (x86)\SimAppPro\resources\app.asar.unpacked\SimLogic.exe ->) (Chengdu Yisheng Technology Co.,ltd -> WINWING) C:\Users\marti\AppData\Local\Temp\3KwuZnfbEEl74gaN3DOv4zuKTYx\SimLogic.exe
(C:\Program Files (x86)\SimAppPro\SimAppPro.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\XboxService\x64\XboxService.exe ->) (Microsoft Corporation -> ) C:\Program Files\Microsoft GameInput\x64\GameInputRawInputProxy.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\DefenderAiPlatformHost.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\DefenderSessionHelper.exe
(C:\Users\marti\AppData\Local\Microsoft\OneDrive\OneDrive.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\155.0.4283.62\msedgewebview2.exe
(C:\Windows\SysWOW64\cmd.exe ->) (Chengdu Yisheng Technology Co.,ltd -> WINWING) C:\Program Files (x86)\SimAppPro\resources\app.asar.unpacked\SimLogic.exe
(drivers\RivetNetworks\Killer\KAPSService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPS.exe
(drivers\RivetNetworks\Killer\KNDBWMService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWM.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Navigraph KB -> Navigraph) C:\Program Files\Navigraph\Simlink\NavigraphSimlink.exe
(explorer.exe ->) (Navigraph Kommanditbolag -> Navigraph) C:\Users\marti\AppData\Local\Programs\navigraph-hub\Navigraph Hub.exe
(explorer.exe ->) (Nenad Hrg -> Nenad Hrg (SoftwareOK.com)) C:\Users\marti\OneDrive\Plocha\AutoHideDesktopIcons.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_09eece2033f5a691\RtkAudUService64.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Chengdu Yisheng Technology Co.,ltd -> WINWING) [File not signed] C:\Program Files (x86)\SimAppPro\SimAppPro.exe <4>
(Chengdu Yisheng Technology Co.,ltd -> WINWING) C:\Users\marti\AppData\Local\Temp\3KwuZnfbEEl74gaN3DOv4zuKTYx\SimLogic.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <12>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\155.0.4283.62\msedgewebview2.exe <11>
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(Navigraph Kommanditbolag -> Navigraph) C:\Users\marti\AppData\Local\Programs\navigraph-hub\Navigraph Hub.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_20f49c6eb5c9b39b\Display.NvContainer\NVDisplay.Container.exe
(Roy Kronenfeld -> ) C:\Users\marti\AppData\Roaming\Microsoft Flight Simulator 2024\Packages\Community\rkapps-fsrealistic\service\FSRealisticWatcher.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPSService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Thrustmaster®) C:\Program Files\Thrustmaster\TM Flight Series\drivers\amd64\tmHInstall.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_20f49c6eb5c9b39b\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_09eece2033f5a691\RtkAudUService64.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(sihost.exe ->) (HP Inc. -> Hewlett-Packard Development Company, L.P.) C:\Program Files\WindowsApps\33C30B79.NGENUITY_2.35.0.0_x64__922sw8z9z7n5w\Assets\Native\NGenuity2Helper.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2610.1001.20.0_x64__8wekyb3d8bbwe\XboxPcTray.exe
(svchost.exe ->) (ASROCK INC. -> ASRock Incorporation) C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\ATuning.exe
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.4019.0_x64__8wekyb3d8bbwe\EdgeGameAssist.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2610.1001.20.0_x64__8wekyb3d8bbwe\XboxPcApp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2610.1001.20.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.398.4.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\Microsoft\OneDrive\26.183.0920.0005\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.9703_none_a5009b9d7769c1f5\TiWorker.exe
(svchost.exe ->) (PALIT MICROSYSTEMS LTD. TAIWAN BRANCH (BELIZE) -> Palit Microsystems Ltd.) C:\Program Files\Thunder Master\ThPanel.exe
(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <6>

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_09eece2033f5a691\RtkAudUService64.exe [1862040 2024-08-02] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [SimAppPro] => C:\Program Files (x86)\SimAppPro\SimAppPro.exe [90654224 2026-10-22] (Chengdu Yisheng Technology Co.,ltd -> WINWING) [File not signed]
HKLM-x32\...\Run: [FSRealisticWatcher] => C:\Users\marti\AppData\Roaming\Microsoft Flight Simulator 2024\Packages\Community\rkapps-fsrealistic\service\FSRealisticWatcher.exe [137064 2026-02-11] (Roy Kronenfeld -> )
HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5823128 2026-10-21] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\Run: [Navigraph Hub] => C:\Users\marti\AppData\Local\Programs\navigraph-hub\Navigraph Hub.exe [176372304 2025-11-21] (Navigraph Kommanditbolag -> Navigraph)
HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\Run: [Navigraph Simlink] => C:\Program Files\Navigraph\Simlink\NavigraphSimlink.exe [1804880 2026-05-28] (Navigraph KB -> Navigraph)
HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\Run: [AutoHideDesktopIcons] => C:\Users\marti\OneDrive\Plocha\AutoHideDesktopIcons.exe [172136 2026-04-28] (Nenad Hrg -> Nenad Hrg (SoftwareOK.com))
HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\Run: [MicrosoftEdgeAutoLaunch_4A886EB596DDE810C696BFE47BAAC943] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5452616 2026-10-22] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP D811 Status Monitor: C:\WINDOWS\system32\hpinkstsD811LM.dll [393352 2017-04-05] (Hewlett Packard -> HP Inc.)
Startup: C:\Users\marti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SimAppPro.lnk [2026-09-01]
ShortcutTarget: SimAppPro.lnk -> C:\Program Files (x86)\SimAppPro\SimAppPro.exe (Chengdu Yisheng Technology Co.,ltd -> WINWING) [File not signed]

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {DB171D07-8E99-4E50-B08B-DD8D6B319326} - System32\Tasks\AsrAPPShop => C:\Program Files (x86)\ASRock Utility\Auto Driver Installer\AsrAPPShop.exe (No File)
Task: {004EC059-9202-403A-A7A1-D85999201684} - System32\Tasks\ATuning => C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\ATuning.exe [10455016 2024-08-09] (ASROCK INC. -> ASRock Incorporation)
Task: {3DFEDA8B-D730-4537-B443-E69D90266663} - System32\Tasks\CCleaner 7 - Skip UAC - S-1-5-21-3429602048-725292175-2964145443-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7681936 2026-10-06] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {EB0832E5-5ED5-4726-B72B-A6BAB81D5AF2} - System32\Tasks\ChasePlane_MSFS2024_AutoUpdate_Steam_Every6Hours => C:\Users\marti\AppData\Roaming\Microsoft Flight Simulator 2024\Packages\Community\p42-util-chaseplane\ChasePlane for MSFS2024.exe [133436040 2026-08-28] (Parallel 42 LLC -> Parallel 42 LLC) -> C:\Users\marti\AppData\Roaming\Microsoft Flight Simulator 2024\Packages\Community\p42-util-chaseplane\--silent-update-latest --target-distro=Steam
Task: {A8D66C45-466C-4FD0-854E-9246C8A5515E} - System32\Tasks\ChasePlane_MSFS2024_AutoUpdate_Steam_OnLogon => C:\Users\marti\AppData\Roaming\Microsoft Flight Simulator 2024\Packages\Community\p42-util-chaseplane\ChasePlane for MSFS2024.exe [133436040 2026-08-28] (Parallel 42 LLC -> Parallel 42 LLC) -> C:\Users\marti\AppData\Roaming\Microsoft Flight Simulator 2024\Packages\Community\p42-util-chaseplane\--silent-update-latest --target-distro=Steam
Task: {402CD80F-5AFB-47CA-9F51-750B4D325AD0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7B1E8076-CDF1-450B-B9F8-9AB00E785929} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E3412246-C648-4C5F-9659-B0DAA99FF5B6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {46C146DB-6278-466E-9F23-6BAE8637B9D4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E2C3980F-02E0-4A29-BE19-568219F4B3EA} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1691248 2026-10-07] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NVIDIA App\NvDriverUpdateCheck" -l 3 -f "C:\ProgramData\NVIDIA Corporation\NVIDIA App\NvDriverUpdateCheck.log"
Task: {4A9D2C6C-5BAB-45ED-8CF9-3683598E4A82} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3656304 2026-10-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CCC7FE43-2CFC-4FFC-A7F6-AD3E9444CCE8} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-3429602048-725292175-2964145443-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7681936 2026-10-06] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {C091BD72-7CCC-4E43-AF6A-F9121E300F82} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-3429602048-725292175-2964145443-1002 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7681936 2026-10-06] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {6A8A07C1-64E1-473B-929C-22789C52A254} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-3429602048-725292175-2964145443-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7681936 2026-10-06] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {7012B903-C95C-4766-8C4C-BA1623B04038} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [11853200 2026-10-06] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {82D8F13C-5878-41C0-BF4E-20A287D011C5} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [9274080 2026-05-15] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B78A6204-7215-4C02-B585-F32C5B5AAAA1} - System32\Tasks\SoftLanding\S-1-5-21-3429602048-725292175-2964145443-1001\SoftLandingRefreshForExpirationTask-{82d1852f-9632-4031-9126-a842ba0fbd3d} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
Task: {06A857A6-1C14-40BE-87FB-032E645D7ECC} - System32\Tasks\ThunderMaster => C:\Program Files\Thunder Master\ThPanel.exe [4569512 2025-02-19] (PALIT MICROSYSTEMS LTD. TAIWAN BRANCH (BELIZE) -> Palit Microsystems Ltd.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{b8d9ed00-1987-41df-9510-461c6ad73bdb}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{ee1a321e-2873-4950-8725-cc3e6a03f061}: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\marti\AppData\Local\Microsoft\Edge\User Data\Default [2026-10-26]
Edge Notifications: Default -> hxxps://www.24sata.hr; hxxps://www.facebook.com
Edge HomePage: Default -> hxxp://www.google.com/
Edge Extension: (Dokumenty Google offline) - C:\Users\marti\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-23]
Edge Extension: (Adblock Plus - free ad blocker) - C:\Users\marti\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2026-10-23]
Edge Extension: (Edge relevant text changes) - C:\Users\marti\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-03-14]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [32849808 2026-10-06] (Gen Digital Inc. -> Gen Digital Inc.)
R2 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [466600 2026-10-19] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2023-12-14] (Intel Corporation -> Intel(R) Corporation)
R3 KAPSService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KAPSService.exe [76576 2022-07-27] (Intel Corporation -> Intel® Corporation)
R2 Killer Analytics Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe [2454304 2022-07-27] (Intel Corporation -> Intel)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2898744 2022-07-27] (Intel Corporation -> Intel)
R3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [76600 2022-07-27] (Intel Corporation -> Intel® Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11667704 2026-10-23] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-06-12] (Malwarebytes Inc -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpDefenderCoreService.exe [2398680 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_20f49c6eb5c9b39b\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-08-27] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 tmHInstall; C:\Program Files\Thrustmaster\TM Flight Series\drivers\amd64\tmHInstall.exe [139456 2025-06-02] (Microsoft Windows Hardware Compatibility Publisher -> Thrustmaster®)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\NisSrv.exe [5555528 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe [378168 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 XboxService; C:\Program Files\XboxService\x64\XboxService.exe [579752 2026-10-14] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppShopDrv205; \??\C:\WINDOWS\SysWOW64\Drivers\AppShopDrv205.sys [83992 2026-06-30] (ASROCK INC. -> )
R3 AsrDrv202; \??\C:\WINDOWS\SysWOW64\Drivers\AsrDrv202.sys [68208 2025-03-02] (ASROCK INC. -> )
S3 AsrDrv204; \??\C:\WINDOWS\SysWOW64\Drivers\AsrDrv204.sys [68840 2026-04-02] (ASROCK INC. -> )
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-08-16] (Microsoft Corporation) [File not signed]
S3 Ccx01000; C:\WINDOWS\System32\drivers\Ccx01000.sys [692224 2026-09-23] (Microsoft Windows -> Microsoft Corporation)
R1 CTIIO; \??\C:\WINDOWS\system32\drivers\CtiIo64.sys [39672 2026-04-02] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 DynamicLightingVHFDriver_D212; C:\WINDOWS\System32\drivers\DynamicLightingVHFDriver_D212.sys [45840 2024-12-01] (Holtek Semiconductor Incorporation -> Holtek Semiconductor Inc)
R3 GuiHidUsbDevLowerTFH; C:\WINDOWS\System32\drivers\GuiHidUsbDevLowerTFH.sys [256704 2025-06-02] (Microsoft Windows Hardware Compatibility Publisher -> © Guillemot R&D, 2020. All rights reserved.)
R3 hidgamepad; C:\WINDOWS\System32\DriverStore\FileRepository\hidgamepad.inf_amd64_66e5eb14670e10ae\hidgamepad.sys [73728 2026-09-23] (Microsoft Windows -> Microsoft Corporation)
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo11X64.sys [188072 2022-07-27] (Intel Corporation -> Rivet Networks, LLC.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [235624 2026-10-26] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-03-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-10-05] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 SONiXDDR_0_0_0_1; \??\C:\Program Files (x86)\ASRock Utility\ASRRGBLED\Bin\SONiXDDRx64.sys [43168 2025-12-08] (SONIX TECHNOLOGY CO., LTD. -> )
S3 TmHid; C:\WINDOWS\system32\DRIVERS\TmHid.sys [49040 2023-12-14] (WDKTestCert plukidis,131540205154897060 -> Guillemot Corporation)
S3 TmHidFsimBus; C:\WINDOWS\System32\drivers\tmHidFsimBus.sys [202440 2025-06-02] (Microsoft Windows Hardware Compatibility Publisher -> © Guillemot R&D, 2021. All rights reserved.)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-10-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [669712 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [138264 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-08-16] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_14dc9a213197a8b8\WSDScan.sys [61440 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
S3 MSIO; \??\C:\Program Files (x86)\ASRock Utility\ASRRGBLED\Bin\msio64.sys (No File)

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-10-26 15:27 - 2026-10-26 15:28 - 000025591 _____ C:\Users\marti\OneDrive\Plocha\FRST.txt
2026-10-26 15:26 - 2026-10-26 15:26 - 002457088 _____ (Farbar) C:\Users\marti\OneDrive\Plocha\FRST64.exe
2026-10-26 13:40 - 2026-10-26 13:40 - 000677108 _____ C:\WINDOWS\system32\perfh005.dat
2026-10-26 13:40 - 2026-10-26 13:40 - 000144960 _____ C:\WINDOWS\system32\perfc005.dat
2026-10-25 16:04 - 2026-10-25 16:23 - 000000000 ___RD C:\Users\marti\OneDrive\Dokumenty\FSUIPC7
2026-10-25 15:47 - 2026-10-25 15:47 - 000000000 ____D C:\Program Files\FenixSim A320
2026-10-25 15:10 - 2026-10-25 15:10 - 000000000 ____D C:\Users\marti\AppData\Local\fontconfig
2026-10-25 15:10 - 2026-10-25 15:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BleachBit
2026-10-25 10:42 - 2026-10-26 15:25 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-10-24 16:41 - 2026-10-24 16:41 - 000000000 ____D C:\Program Files\XboxService
2026-10-24 16:41 - 2026-10-24 16:41 - 000000000 ____D C:\Program Files\Microsoft GameInput
2026-10-24 16:40 - 2026-10-24 16:40 - 000526792 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_16.dll.0
2026-10-24 09:57 - 2026-10-24 09:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PSXT
2026-10-23 16:44 - 2026-10-20 22:22 - 032265960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 022490848 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-10-23 16:44 - 2026-10-20 22:22 - 021020392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 006181608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 005930728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 004835048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 002803248 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-10-23 16:44 - 2026-10-20 22:22 - 002803248 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-10-23 16:44 - 2026-10-20 22:22 - 002403888 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-10-23 16:44 - 2026-10-20 22:22 - 002403888 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-10-23 16:44 - 2026-10-20 22:22 - 002345192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 001736424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 001711336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-10-23 16:44 - 2026-10-20 22:22 - 001695280 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 001695280 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 001597160 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 001555688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 001510448 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 001510448 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 001242344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 001088232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-10-23 16:44 - 2026-10-20 22:22 - 000839912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 000685288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 000560200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 000513768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 000477928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-10-23 16:44 - 2026-10-20 22:22 - 000429992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-10-23 16:44 - 2026-10-20 22:22 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-10-23 16:44 - 2026-10-19 17:19 - 000181309 _____ C:\WINDOWS\system32\nvinfo.pb
2026-10-23 16:44 - 2026-10-19 17:19 - 000134376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2026-10-14 18:30 - 2026-10-26 10:26 - 000000000 ____D C:\Users\marti\.dbus-keyrings
2026-10-14 18:10 - 2026-10-14 18:10 - 000004350 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2026-10-10 19:39 - 2026-10-10 19:39 - 000000000 ____D C:\Users\marti\AppData\Local\UnrealEngine
2026-10-10 19:39 - 2026-10-10 19:39 - 000000000 ____D C:\Users\marti\AppData\Local\Hellraiser
2026-10-10 19:28 - 2026-10-10 19:28 - 000000223 _____ C:\Users\marti\OneDrive\Plocha\Clive Barker's Hellraiser Revival.url
2026-10-10 16:05 - 2026-10-10 16:05 - 000000000 ____D C:\MSFS 2024 SDK

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-10-26 15:27 - 2025-10-23 18:37 - 000000000 ____D C:\FRST
2026-10-26 15:18 - 2025-02-01 14:14 - 000000000 ____D C:\Users\marti\AppData\Local\Malwarebytes
2026-10-26 15:17 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-10-26 15:14 - 2026-05-11 17:49 - 000000000 ____D C:\Users\marti\AppData\Roaming\PSXT
2026-10-26 15:14 - 2025-08-07 16:22 - 000000000 ____D C:\Users\marti\AppData\Roaming\Microsoft Flight Simulator 2024
2026-10-26 15:14 - 2025-02-01 00:49 - 000000000 ____D C:\Program Files (x86)\Steam
2026-10-26 15:13 - 2025-10-19 18:27 - 000000000 ____D C:\Users\marti\AppData\Roaming\vAMSYS-Pegasus
2026-10-26 15:01 - 2026-02-14 21:11 - 000000000 ____D C:\Users\marti\AppData\Roaming\virtuali
2026-10-26 14:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-10-26 13:42 - 2026-05-11 17:24 - 000000000 ____D C:\PSXT
2026-10-26 13:41 - 2025-12-27 00:23 - 000000000 ____D C:\Users\marti\AppData\Local\vAMSYS-Pegasus
2026-10-26 13:41 - 2025-08-29 15:53 - 000000000 ____D C:\REX Atmos Core
2026-10-26 13:40 - 2025-08-16 23:28 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-10-26 13:40 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-10-26 13:35 - 2026-06-13 22:46 - 000000000 ____D C:\FSUIPC7
2026-10-26 13:33 - 2026-08-28 17:57 - 000000000 ____D C:\ProgramData\NVIDIA
2026-10-26 13:33 - 2026-08-20 14:26 - 000019757 _____ C:\WINDOWS\SysWOW64\crash_log.txt
2026-10-26 13:33 - 2026-01-23 15:24 - 000000000 ____D C:\Users\marti\AppData\Roaming\SimAppPro
2026-10-26 13:33 - 2025-08-16 23:25 - 000032996 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-10-26 13:33 - 2025-08-16 23:25 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-10-26 13:33 - 2025-02-01 13:16 - 000000000 ____D C:\Users\marti\AppData\Roaming\navigraph-hub
2026-10-26 13:33 - 2025-02-01 00:00 - 000000000 ___RD C:\Users\marti\OneDrive
2026-10-26 13:33 - 2025-01-31 23:47 - 000012288 ___SH C:\DumpStack.log.tmp
2026-10-26 13:33 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-10-26 13:33 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-10-26 13:32 - 2024-04-01 08:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-10-26 13:29 - 2025-08-16 23:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-10-26 13:03 - 2025-11-16 20:12 - 000000000 ___RD C:\Users\marti\OneDrive\Plocha\MSFS_Addons_Linker
2026-10-26 12:20 - 2026-04-09 23:11 - 000000000 ___RD C:\Users\marti\OneDrive\Plocha\Moc nepoužívané letiště
2026-10-26 12:20 - 2025-02-01 13:19 - 000000000 ____D C:\Users\marti\AppData\Roaming\iniManager
2026-10-26 12:08 - 2025-02-01 13:11 - 000000000 ____D C:\Users\marti\AppData\Roaming\FlyByWire Installer
2026-10-26 12:01 - 2026-08-28 17:55 - 000000000 ____D C:\Users\marti\AppData\Local\D3DSCache
2026-10-26 12:00 - 2026-05-15 20:59 - 000000000 ___RD C:\Users\marti\OneDrive\Plocha\AIG
2026-10-26 11:50 - 2025-02-01 04:34 - 000000000 ____D C:\Users\marti\AppData\Local\CrashDumps
2026-10-26 11:08 - 2026-08-20 14:26 - 000000000 ____D C:\WINDOWS\SysWOW64\crashs
2026-10-26 11:01 - 2026-02-14 21:11 - 000000000 ____D C:\ProgramData\virtuali
2026-10-26 10:26 - 2025-08-16 23:25 - 000003714 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{67CC9047-C3AD-4539-B2A6-99C3DD181152}
2026-10-26 10:26 - 2025-08-16 23:25 - 000003642 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{99CA179B-4625-40F9-81A8-B9FBE1F9501A}
2026-10-25 17:50 - 2025-12-18 18:54 - 000000000 ____D C:\Users\marti\AppData\Roaming\pmdg-oc3
2026-10-25 16:20 - 2026-08-28 17:57 - 000000000 ____D C:\Users\marti\AppData\Local\NVIDIA
2026-10-25 16:05 - 2026-08-23 17:12 - 000002031 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-10-25 16:05 - 2026-06-13 22:53 - 000001466 _____ C:\Users\marti\OneDrive\Plocha\MSFS24.lnk
2026-10-25 16:03 - 2025-02-01 13:25 - 000000000 ____D C:\Users\marti\AppData\Roaming\Aerosoft One
2026-10-25 16:01 - 2025-02-01 13:26 - 000000000 ____D C:\Users\marti\Aerosoft One Library
2026-10-25 15:49 - 2025-02-01 13:30 - 000000000 ____D C:\Users\marti\OneDrive\Plocha\FS2024
2026-10-25 15:48 - 2025-02-01 14:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FenixSim A320
2026-10-25 15:47 - 2025-10-14 12:59 - 000000000 ____D C:\ProgramData\Fenix
2026-10-25 15:10 - 2025-08-16 22:26 - 000000000 ____D C:\Program Files (x86)\BleachBit
2026-10-25 09:53 - 2025-05-11 18:13 - 000000000 ____D C:\Users\marti\AppData\Local\iniManager
2026-10-25 09:52 - 2025-02-01 13:19 - 000000000 ____D C:\Users\marti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iniBuilds Ltd
2026-10-24 16:41 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-10-24 16:40 - 2025-02-01 00:22 - 004671944 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2026-10-24 16:40 - 2025-02-01 00:22 - 001223112 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2026-10-24 16:40 - 2025-02-01 00:22 - 000330184 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2026-10-24 16:40 - 2025-02-01 00:22 - 000281032 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2026-10-24 16:40 - 2025-02-01 00:22 - 000166344 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2026-10-24 16:40 - 2025-02-01 00:22 - 000158152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2026-10-24 16:40 - 2025-02-01 00:22 - 000084424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2026-10-24 09:57 - 2026-08-19 19:02 - 000000593 _____ C:\Users\marti\OneDrive\Plocha\PSXT.lnk
2026-10-24 09:33 - 2026-01-23 16:11 - 000000000 ____D C:\Program Files (x86)\SimAppPro
2026-10-24 09:20 - 2025-01-31 23:47 - 000002512 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-10-23 16:40 - 2026-06-23 17:37 - 000000000 ____D C:\Users\marti\AppData\Local\velopack
2026-10-23 16:40 - 2025-12-15 18:20 - 000002250 _____ C:\Users\marti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fenix Installer.lnk
2026-10-23 16:40 - 2025-12-15 18:20 - 000002248 _____ C:\Users\marti\OneDrive\Plocha\Fenix Installer.lnk
2026-10-23 16:40 - 2025-12-15 18:20 - 000000000 ____D C:\Users\marti\AppData\Local\FenixApp
2026-10-23 16:39 - 2025-08-16 23:25 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3429602048-725292175-2964145443-1001
2026-10-23 16:39 - 2025-08-16 23:25 - 000003570 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3429602048-725292175-2964145443-1001
2026-10-23 16:39 - 2025-08-16 23:25 - 000003360 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3429602048-725292175-2964145443-1001
2026-10-23 16:39 - 2025-02-01 00:00 - 000002377 _____ C:\Users\marti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-10-23 16:38 - 2026-08-28 19:37 - 000000000 ____D C:\Users\marti\AppData\Local\NVIDIA Corporation
2026-10-19 20:03 - 2026-03-03 18:05 - 001092224 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\GameInputRedist.dll
2026-10-19 20:02 - 2026-03-03 18:05 - 000873600 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\GameInputRedist.dll
2026-10-15 19:53 - 2026-05-15 20:59 - 000000000 ____D C:\ProgramData\AIGTech
2026-10-15 17:53 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-10-14 18:30 - 2025-08-16 23:12 - 000000000 ____D C:\Users\marti
2026-10-14 18:28 - 2025-08-16 23:23 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-10-14 18:27 - 2025-08-16 23:23 - 000297272 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-10-14 18:26 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-14 18:26 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-10-14 18:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-10-14 18:15 - 2025-08-16 23:26 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-10-14 18:14 - 2025-02-01 00:11 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-14 18:12 - 2025-02-01 00:11 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-14 18:10 - 2026-08-28 19:37 - 000003834 _____ C:\WINDOWS\system32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2026-10-14 18:10 - 2025-02-01 12:42 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2026-10-14 16:11 - 2025-01-31 23:47 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-10-11 14:12 - 2025-10-04 10:13 - 000000153 _____ C:\Users\marti\OneDrive\Plocha\Sklipkani.txt
2026-10-10 19:28 - 2025-02-03 19:03 - 000000000 ____D C:\Users\marti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2026-10-09 16:25 - 2025-10-19 18:27 - 000002466 _____ C:\Users\marti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\vAMSYS Pegasus.lnk
2026-10-09 16:25 - 2025-10-19 18:27 - 000002464 _____ C:\Users\marti\OneDrive\Plocha\vAMSYS Pegasus.lnk
2026-10-07 23:44 - 2026-08-28 19:37 - 001456752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2026-10-07 23:44 - 2026-08-28 19:37 - 001256048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2026-10-07 23:43 - 2026-01-17 17:20 - 000301168 _____ C:\WINDOWS\system32\FvSDK_x64.dll
2026-10-07 23:43 - 2026-01-17 17:20 - 000274032 _____ C:\WINDOWS\SysWOW64\FvSDK_x86.dll
2026-10-07 23:20 - 2026-08-28 19:37 - 000192232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2026-10-07 23:20 - 2026-08-28 19:37 - 000168680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap32v.dll
2026-10-07 23:19 - 2026-08-28 19:37 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2026-10-05 12:50 - 2025-02-01 12:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMDG Simulations
2026-10-05 10:26 - 2025-02-01 14:13 - 000245864 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

==================== Files in the root of some directories ========

2025-02-09 16:36 - 2025-02-09 16:40 - 000024576 _____ () C:\Users\marti\AppData\Roaming\EFB.db
2025-11-03 19:27 - 2025-11-03 19:27 - 000007603 _____ () C:\Users\marti\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================



Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-10-2026
Ran by marti (26-10-2026 15:28:36)
Running from C:\Users\marti\OneDrive\Plocha
Microsoft Windows 11 Pro Version 26H2 26300.9711 (X64) (2025-08-16 22:26:01)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3429602048-725292175-2964145443-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-3429602048-725292175-2964145443-503 - Limited - Disabled)
Guest (S-1-5-21-3429602048-725292175-2964145443-501 - Limited - Disabled)
marti (DisplayName: M***** ***ž*k) (S-1-5-21-3429602048-725292175-2964145443-1001 - Administrators - Enabled) [MS Account] => C:\Users\marti
WDAGUtilityAccount (S-1-5-21-3429602048-725292175-2964145443-504 - Limited - Disabled)
WsiAccount (S-1-5-21-3429602048-725292175-2964145443-1002 - Limited - Disabled) => C:\Users\WsiAccount

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Aerosoft One 0.16.19 (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\6cfbc6f2-d82c-56dd-8cbb-177a5d4b5b90) (Version: 0.16.19 - Aerosoft GmbH)
APP Shop v2.0.0.6 (HKLM-x32\...\{3B9B2DDC-07B8-4F28-82D9-4092C4LE5B67}_is1) (Version: 2.0.0.6 - ASRock Inc.)
ASRock Restart to UEFI v1.0.15 (HKLM-x32\...\ASRock Restart to UEFI_is1) (Version: 1.0.15 - ASRock Inc.)
ASRRGBLED v2.0.217 (HKLM-x32\...\ASRock RGB LED_is1) (Version: 2.0.217 - ASRock Inc.)
A-Tuning v4.1.11 (HKLM-x32\...\A-Tuning_is1) (Version: 4.1.11 - ASRock Inc.)
BleachBit (HKLM-x32\...\BleachBit) (Version: 6.0.6.633 - BleachBit)
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.12.1526.1963 - Piriform)
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 156.0.4314.42 - Microsoft Corporation)
CPUID HWMonitor 1.68 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.68 - CPUID, Inc.)
Display Driver Uninstaller (HKLM-x32\...\Display Driver Uninstaller) (Version: 18.1.5.1 - Wagnardsoft)
Dynamic Application Loader Host Interface Service (HKLM\...\{12EF5653-F4C0-4B29-A4EE-E2C7A527E668}) (Version: 1.0.0.0 - Intel Corporation) Hidden
ENE Video Capture Box HAL (HKLM\...\{A096611D-BA11-4A1A-8D09-0A0462D7C8F2}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE Video Capture Box HAL (HKLM-x32\...\{974259bf-3ed1-4cd6-9ed1-40c7f601a786}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE_DRAM_RGB_AIO (HKLM\...\{DFAD06E0-C5FC-4154-8F95-65871D5AB5BF}) (Version: 1.0.23.1 - Ene Tech.) Hidden
ENE_DRAM_RGB_AIO (HKLM-x32\...\{3a0741bc-3391-41cd-81aa-0122796a0648}) (Version: 1.0.23.1 - Ene Tech.) Hidden
ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.17.0 - ENE TECHNOLOGY INC.) Hidden
ENE_EHD_M2_HAL (HKLM-x32\...\{6a0e18d7-c33b-4c8c-aa31-4beedf5956c6}) (Version: 1.0.17.0 - ENE TECHNOLOGY INC.) Hidden
ENE_External_Device_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.12.7 - ENE Tech) Hidden
ENE_External_Device_HAL (HKLM-x32\...\{a7b1cf47-d8f0-423d-9494-568195f1c864}) (Version: 1.0.12.7 - ENE Tech) Hidden
ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden
ENE_MousePad_HAL (HKLM-x32\...\{c2c794a4-7986-4c45-884d-d4ca43b88df9}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden
ENE_QSI_Loki_HAL (HKLM\...\{BDE43F26-5917-44F8-B86A-F1D9A6B80B32}) (Version: 1.0.3.0 - ENE TECHNOLOGY INC.) Hidden
ENE_QSI_Loki_HAL (HKLM-x32\...\{205ef3a8-937b-43cb-90fc-2f58f71408d8}) (Version: 1.0.3.0 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM-x32\...\{c662a481-d76a-4188-95d2-6eb4ffd55542}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
Fenix Installer (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\FenixApp) (Version: 1.0.359 - FenixSim Ltd.)
FenixSim A320 (HKLM\...\{49120c8f-c92c-47c4-ba07-e99057c45d3d}) (Version: 3.0.0.7454 - FenixSim Ltd.)
Flight1 Agent (HKLM-x32\...\Flight1 Agent) (Version: - )
FlyByWire Installer 3.7.2 (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\0d879536-06f1-5ce8-a012-f15731d81514) (Version: 3.7.2 - FlyByWire Simulations)
FS-ATC-Chatter (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\FS-ATC-Chatter) (Version: 1.2.4 - Stick And Rudder Studios)
FSDreamTeam Universal Installer version 1.2.8 (HKLM-x32\...\FSDreamTeam Universal Installer_is1) (Version: 1.2.8 - VIRTUALI Sagl)
FSRealistic+ version 1.1.9 (HKLM-x32\...\FSRealistic+_is1) (Version: 1.1.9 - )
FSUIPC7 v7.5.9 (HKLM-x32\...\FSUIPC72024) (Version: v7.5.9 - John L. Dowson)
HWiNFO® 64 (HKLM\...\HWiNFO® 64_is1) (Version: 8.52 - Martin Malik, REALiX s.r.o.)
ChasePlane for MSFS2024 (HKLM\...\{abce464a-86a8-4808-97ab-060158290100}) (Version: 2026.18.5.12 - Parallel 42)
ChasePlane for MSFS2024 (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\{001461F4-62EA-4FCF-8597-04C79CA2A796}) (Version: - Parallel 42)
ChasePlane for MSFS2024 (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\{abce464a-86a8-4808-97ab-060158290100}) (Version: - Parallel 42)
iFly Manager (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\iFly Manager) (Version: - )
iniManager (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\iniManager) (Version: 2.6.1 - iniBuilds Ltd.)
Intel(R) Chipset Device Software (HKLM\...\{2B96B7E3-FA08-4749-9D23-CDC64F1B835B}) (Version: 10.1.19600.8418 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{404581d0-19c1-47ba-bcd3-10178793c239}) (Version: 10.1.19600.8418 - Intel(R) Corporation)
Intel(R) Icls (HKLM\...\{39C50D87-BFD1-43DD-8A18-676086E328C9}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2340.5.36.0 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{BA97A47F-9B59-4B07-BC82-FF3F6CE6E597}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{C8EEBC98-5759-4B1D-9834-E5F897161475}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME WMI Provider (HKLM\...\{8105FECC-2670-4EA1-A98B-FA803A30AEEB}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Killer Performance Driver Suite UWD (HKLM\...\{FFC31014-7FD6-4720-8C5D-7B16E9E6F73E}) (Version: 3.1222.750 - Rivet Networks)
Malwarebytes version 5.7.2.358 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.7.2.358 - Malwarebytes)
MFS Cleaner/Fixer version 1.5.6 (HKLM\...\MfsCleanerFixer_is1) (Version: 1.5.6 - CraigyBabyJ)
Microsoft .NET Host - 10.0.11 (x64) (HKLM\...\{E1510730-5A34-4EF3-B865-84351D8BF1BA}) (Version: 80.44.56884 - Microsoft Corporation) Hidden
Microsoft .NET Host - 6.0.36 (x64) (HKLM\...\{D6932D97-36F1-40B8-9CDC-CA8365B21000}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host - 7.0.17 (x64) (HKLM\...\{089B0F2C-87D9-4470-B6E6-154DD6961C56}) (Version: 56.68.10360 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.19 (x64) (HKLM\...\{B84443A1-BE1B-4C5E-B834-E12133604B12}) (Version: 64.76.37566 - Microsoft Corporation) Hidden
Microsoft .NET Host - 9.0.10 (x64) (HKLM\...\{EB00D346-1FB5-46E0-89C0-93F056F5ACF4}) (Version: 72.40.40927 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 10.0.11 (x64) (HKLM\...\{208D3FC0-B592-4221-8E53-6B21621E9951}) (Version: 80.44.56884 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.36 (x64) (HKLM\...\{A9E32B25-994B-4856-A12B-0EBED3050410}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 7.0.17 (x64) (HKLM\...\{6B4D3428-4800-446B-971F-62A7377F06F6}) (Version: 56.68.10360 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.19 (x64) (HKLM\...\{69A17DA9-300A-49B9-97F1-1EB7424570DE}) (Version: 64.76.37566 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 9.0.10 (x64) (HKLM\...\{FDC862D8-5CDD-4FC6-8E9A-873A689600BC}) (Version: 72.40.40927 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 10.0.11 (x64) (HKLM\...\{0B4F3EF1-06F1-46E4-B662-A33DECC02141}) (Version: 80.44.56884 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.36 (x64) (HKLM\...\{C912E33F-956A-4921-9F55-CC11AE8F09AF}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.36 (x64) (HKLM-x32\...\{9d3fc73f-1cf4-412c-a1c9-d2ad28ccbd62}) (Version: 6.0.36.34214 - Microsoft Corporation)
Microsoft .NET Runtime - 7.0.17 (x64) (HKLM\...\{A638EFAE-5229-46A8-9A18-D0FF9D9827D2}) (Version: 56.68.10360 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.19 (x64) (HKLM\...\{B9F7A454-0CCD-410C-A3E0-D1AAC300F150}) (Version: 64.76.37566 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.19 (x64) (HKLM-x32\...\{04f2ebb7-4f99-4441-bcc6-f5c28c103f3f}) (Version: 8.0.19.35115 - Microsoft Corporation)
Microsoft .NET Runtime - 9.0.10 (x64) (HKLM\...\{05987870-6EDD-4352-ADEA-4A8694040F3E}) (Version: 72.40.40927 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 156.0.4314.42 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 155.0.4283.62 - Microsoft Corporation) Hidden
Microsoft Flight Simulator 2024 SDK 1.8.1 (Core) (HKLM\...\{8AE17C6C-F940-4C62-8115-46B43A639C4A}) (Version: 1.8.1 - Microsoft)
Microsoft Flight Simulator SDK 0.24.4 (Core) (HKLM\...\{3D42EBFC-1EBC-4468-9B77-388C2A3290FE}) (Version: 0.24.4 - Microsoft)
Microsoft GameInput (HKLM\...\{0DA71DCF-F605-435D-9B16-051DFBE7CB76}) (Version: 4.0.302.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\OneDriveSetup.exe) (Version: 26.183.0920.0005 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.18302 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Microsoft Windows Desktop Runtime - 10.0.11 (x64) (HKLM\...\{042FE0BF-0E19-47E0-8864-22F483C784E6}) (Version: 80.44.56884 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM\...\{61D4736B-3325-4D4A-BD41-8BD206C6A86E}) (Version: 48.144.23186 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM-x32\...\{0532b8f2-12d7-43de-95fc-7b87006758a8}) (Version: 6.0.36.34217 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 7.0.17 (x64) (HKLM\...\{93812F65-BAA9-42E0-AF19-F15F39A92E3C}) (Version: 56.68.10379 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 7.0.17 (x64) (HKLM-x32\...\{24a68a65-6ac6-4276-9d7d-2c3939d8474e}) (Version: 7.0.17.33416 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.19 (x64) (HKLM\...\{A6EA542C-884C-4FE7-89E4-8C28E14B601C}) (Version: 64.76.37602 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.19 (x64) (HKLM-x32\...\{6b2575e2-0248-44c3-93f3-2eba040331ed}) (Version: 8.0.19.35118 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 9.0.10 (x64) (HKLM\...\{8466C2EB-71A6-4529-A615-0E8FE0CCCBED}) (Version: 72.40.40921 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 9.0.10 (x64) (HKLM-x32\...\{877aacfd-984e-464a-ba89-9fc575eb79ed}) (Version: 9.0.10.35325 - Microsoft Corporation)
Microsoft Windows Desktop Runtime 10.0.11 (x64) (HKLM-x32\...\{96749152-C361-49E0-BAC6-818F491B9276}) (Version: 10.0.11.50000 - Microsoft Corporation)
Navigraph Hub 1.2.24 (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\55f042a9-1285-5a7a-abcd-4e2044c5b51b) (Version: 1.2.24 - Navigraph)
Navigraph Simlink 1.1.41.1805 (HKLM\...\{E5431A0D-8735-4E89-9E41-D820334B2909}}_is1) (Version: 1.1.41.1805 - Navigraph)
NVIDIA App 11.0.9.565 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.9.565 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.9.12728.38614306 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.9.12728.38614306 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.4.6.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.6.6 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 621.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 621.01 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.26.0904 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.26.0904 - NVIDIA Corporation)
Orbx Central 4.5.50 (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\7cf15176-b7c3-5704-8319-ddca84b92c9a) (Version: 4.5.50 - Orbx Simulation Systems Pty Ltd)
Pilot Experience Sim Central V2 (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\pesim-central-v2-client) (Version: 2.1.8 - Pilot Experience Sim)
PMDG OC3 3.0.289 (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\e64f4b9a-948d-5251-9b57-0bd6f3fbb888) (Version: 3.0.289 - PMDG Simulations, LLC.)
PSXT 16.7.2 (HKLM-x32\...\PSXT_is1) (Version: - Nico Kaan)
RealTraffic Launcher (HKLM\...\RealTraffic Launcher_is1) (Version: - Inside Systems Pty Ltd)
REX Atmos Core (HKLM\...\{5187A19E-80FF-4BDE-BCC5-84AA3F006640}) (Version: 8.1.2025.1210 - REX Game Studios, LLC.)
REX Atmos Core (HKLM\...\{525601AC-690F-4B81-A037-9F46BB5AA798}) (Version: 8.0.2025.0825 - REX Game Studios, LLC.)
SimAppPro 1.17.11 (HKLM-x32\...\2873a9d6-0e65-5078-b232-daee9dce2239) (Version: 1.17.11 - WINWING)
SoFly - Airport Configurator (HKLM\...\{0BF710F6-98DF-45CE-A89F-C724E48F9A45}) (Version: 1.2.0 - SoFly)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
T.Flight Hotas drivers (HKLM-x32\...\{E08E6F77-E66C-47FC-8565-0AA3389D48C8}) (Version: 4.TFHT.2025 - Thrustmaster)
Thunder Master v4.17 (HKLM\...\{EE04522C-0814-4B63-AE57-0B63E5A355BB}_is1) (Version: 4.17.0.4 - Palit Microsystems Ltd.)
TriTriSim Hub (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\TriTriSim Hub) (Version: 1.2.2 - tritrisim)
vAMSYS Pegasus (HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\vAMSYS-Pegasus) (Version: 2.0.17 - vAMSYS LTD)
Verbatim_SureFireGaming_Product (HKLM\...\{35CB65C6-A7E3-4EE7-AD40-738D70A72164}) (Version: 1.0.3.11 - Verbatim) Hidden
Verbatim_SureFireGaming_Product (HKLM-x32\...\{d601832a-0d94-46ce-9b19-78e8a5887313}) (Version: 1.0.3.11 - Verbatim) Hidden
WinRAR 7.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.01.0 - win.rar GmbH)
Xbox Service (HKLM\...\{81F706B1-AB0A-4D88-B2DB-E5BAF88C87C6}) (Version: 4.0.300.0 - Microsoft Corporation)

Packages:
=========
DOCX Edit PLUS -> C:\Program Files\WindowsApps\24091FileFormatApps.WordEditorBasic_2.1.15.0_x64__8t2vtv4rwtrk0 [2026-08-30] (File Format Apps)
HyperX NGENUITY -> C:\Program Files\WindowsApps\33C30B79.NGENUITY_2.35.0.0_x64__922sw8z9z7n5w [2026-04-02] (HP Inc.) [Startup Task]
Killer Intelligence Center -> C:\Program Files\WindowsApps\rivetnetworks.killercontrolcenter_3.1222.726.0_x64__rh07ty8m5nkag [2025-05-18] (Rivet Networks LLC) [Startup Task]
Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2026-10-23] ()
Microsoft Jenny (Natural) - English (United States) -> C:\Program Files\WindowsApps\MicrosoftWindows.Voice.en-US.Jenny.1_1.0.8.0_x64__cw5n1h2txyewy [2025-05-18] (Microsoft Windows)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2026-08-28] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.43.296.0_x64__dt26b99r8h8gj [2025-08-09] (Realtek Semiconductor Corp)
Speech Pack - English (United States) -> C:\Program Files\WindowsApps\MicrosoftWindows.Speech.en-US.1_1.0.28.0_x64__cw5n1h2txyewy [2026-04-14] (Microsoft Windows)
WinRAR -> C:\Program Files\WinRAR [2025-03-16] (win.rar GmbH)
XBOXInsiderHub -> C:\Program Files\WindowsApps\Microsoft.XboxInsider_1.2606.14001.0_x64__8wekyb3d8bbwe [2026-07-13] (Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3429602048-725292175-2964145443-1001_Classes\CLSID\{0555d276-a145-0781-bc7b-ff40be1bdd20}\localserver32 -> "C:\Users\marti\Downloads\ChasePlane 2024 Manager (experimental).exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-3429602048-725292175-2964145443-1001_Classes\CLSID\{243abb1e-d93f-3777-de35-17be001463f2}\localserver32 -> "C:\Users\marti\AppData\Local\Temp\ChasePlane_Installer_Update\034C5000.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-3429602048-725292175-2964145443-1001_Classes\CLSID\{5417e235-fbdb-7535-dc6f-d6e4ab400abb}\localserver32 -> "C:\Users\marti\AppData\Local\Temp\ChasePlane_Installer_Update\1a3c0e90a4fa8bf5c4a752104845a72423234f4473a28d2b1ab6c6e1a428dc09.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-3429602048-725292175-2964145443-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> "C:\Users\marti\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe" -ToastActivated /app nahimic => No File
CustomCLSID: HKU\S-1-5-21-3429602048-725292175-2964145443-1001_Classes\CLSID\{b040f091-b28a-8af2-85eb-2759e0a6ca7d}\localserver32 -> "C:\Users\marti\AppData\Local\Temp\ChasePlane_Installer_Update\0862e648b75cf1b21e10cb420fa4210807e9e8ff92adb3447416e81466a3befe.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-3429602048-725292175-2964145443-1001_Classes\CLSID\{c4bb9a0b-4502-353f-2fc5-f23de138e171}\localserver32 -> "C:\Users\marti\AppData\Local\Temp\ChasePlane_Installer_Update\4133C0AE.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-3429602048-725292175-2964145443-1001_Classes\CLSID\{dc22bbad-64e2-3563-bba9-20b5e3412b81}\localserver32 -> C:\Users\marti\AppData\Local\Temp\ChasePlane for MSFS2024.exe (Parallel 42 LLC -> Parallel 42 LLC)
CustomCLSID: HKU\S-1-5-21-3429602048-725292175-2964145443-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\marti\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.25.18302\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3429602048-725292175-2964145443-1001_Classes\CLSID\{f144e476-cdf1-b2a5-40ad-50c6965325d0}\localserver32 -> "C:\Users\marti\AppData\Local\Temp\ChasePlane_Installer_Update\eeb7e38d85a09e886d8048a825e0646d69f921c10e9a4dca3bca94a8821b29e5.exe" -ToastActivated => No File
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-06-09] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-10-07] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_20f49c6eb5c9b39b\nvshext.dll [2026-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-06-09] (Malwarebytes Inc -> Malwarebytes)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2026-10-24 09:33 - 2026-10-22 03:31 - 000500736 _____ () [File not signed] \\?\C:\Program Files (x86)\SimAppPro\resources\app.asar.unpacked\WWTHID.dll
2026-10-24 09:33 - 2026-10-22 03:31 - 000622592 _____ () [File not signed] \\?\C:\Program Files (x86)\SimAppPro\resources\app.asar.unpacked\WWTHID_JSAPI.node
2026-10-26 13:33 - 2026-10-26 13:33 - 001685504 _____ () [File not signed] \\?\C:\Users\marti\AppData\Local\Temp\403bd41d-1c8b-40e8-93c1-b3991e4240f4.tmp.node
2026-10-26 13:34 - 2026-10-26 13:34 - 000488960 _____ () [File not signed] \\?\C:\Users\marti\AppData\Local\Temp\5dfa5b22-243c-4838-a14d-bc5ce409d8a3.tmp.node
2026-09-01 09:57 - 2026-10-22 03:31 - 002163200 _____ () [File not signed] C:\Program Files (x86)\SimAppPro\ffmpeg.dll
2026-09-01 09:57 - 2026-10-22 03:31 - 000311808 _____ () [File not signed] C:\Program Files (x86)\SimAppPro\libegl.dll
2026-09-01 09:57 - 2026-10-22 03:31 - 006904320 _____ () [File not signed] C:\Program Files (x86)\SimAppPro\libglesv2.dll
2025-02-01 13:16 - 2025-11-21 12:31 - 002866176 _____ () [File not signed] C:\Users\marti\AppData\Local\Programs\navigraph-hub\ffmpeg.dll
2025-02-01 13:16 - 2025-11-21 12:31 - 000479232 _____ () [File not signed] C:\Users\marti\AppData\Local\Programs\navigraph-hub\libegl.dll
2025-02-01 13:16 - 2025-11-21 12:31 - 007672320 _____ () [File not signed] C:\Users\marti\AppData\Local\Programs\navigraph-hub\libglesv2.dll
2025-02-01 13:16 - 2025-11-21 12:31 - 005312000 _____ () [File not signed] C:\Users\marti\AppData\Local\Programs\navigraph-hub\vk_swiftshader.dll
2026-10-26 13:33 - 2026-10-20 08:23 - 002877440 _____ () [File not signed] C:\Users\marti\AppData\Local\Temp\3KwuZnfbEEl74gaN3DOv4zuKTYx\ffmpeg.dll
2026-10-26 13:33 - 2026-10-20 08:23 - 000478208 _____ () [File not signed] C:\Users\marti\AppData\Local\Temp\3KwuZnfbEEl74gaN3DOv4zuKTYx\libegl.dll
2026-10-26 13:33 - 2026-10-20 08:23 - 007808512 _____ () [File not signed] C:\Users\marti\AppData\Local\Temp\3KwuZnfbEEl74gaN3DOv4zuKTYx\libglesv2.dll
2026-10-26 13:33 - 2026-10-20 08:23 - 005238784 _____ () [File not signed] C:\Users\marti\AppData\Local\Temp\3KwuZnfbEEl74gaN3DOv4zuKTYx\vk_swiftshader.dll
2026-10-26 13:33 - 2026-10-26 13:33 - 000012288 _____ () [File not signed] C:\Users\marti\AppData\Local\Temp\nsjA3C2.tmp\System.dll
2026-08-28 19:37 - 2026-10-14 18:10 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll
2026-10-24 09:33 - 2026-10-22 03:31 - 006018560 _____ (FreeImage) [File not signed] \\?\C:\Program Files (x86)\SimAppPro\resources\app.asar.unpacked\FreeImage.dll
2026-10-26 13:33 - 2026-10-26 13:33 - 000102400 _____ (Muldersoft.com Free Software Division) [File not signed] C:\Users\marti\AppData\Local\Temp\nsjA3C2.tmp\StdUtils.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 002293248 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\Navigraph\Simlink\LIBEAY32.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 000386560 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\Navigraph\Simlink\ssleay32.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 000047616 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\bearer\qgenericbearer.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\imageformats\qgif.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 000040960 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\imageformats\qicns.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 000032256 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\imageformats\qico.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 000397312 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\imageformats\qjpeg.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 000025600 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\imageformats\qsvg.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\imageformats\qtga.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 000374272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\imageformats\qtiff.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 000023552 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\imageformats\qwbmp.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 000491520 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\imageformats\qwebp.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 001453568 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\platforms\qwindows.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 006130176 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\Qt5Core.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 006470656 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\Qt5Gui.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 001314816 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\Qt5Network.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 000332288 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\Qt5Svg.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 005580800 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\Qt5Widgets.dll
2025-02-01 13:18 - 2024-04-18 12:27 - 000137216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Navigraph\Simlink\styles\qwindowsvistastyle.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============


==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2025-01-31 23:42 - 2025-01-31 23:42 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

2025-12-08 19:57 - 2025-12-08 19:57 - 000000437 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.0.1
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek Gaming 2.5GbE Family Controller -> rt640x64.sys
Wi-Fi: Killer(R) Wi-Fi 6E AX1675x 160MHz Wireless Network Adapter (210NGW) -> Netwtw14.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3429602048-725292175-2964145443-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\marti\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\9803720615140276348\134373302276479846.jpg
HKU\S-1-5-21-3429602048-725292175-2964145443-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files (x86)\Addon Manager
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files\FenixSim A320
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\Fenix.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\FenixBootstrapper.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\FenixCDU.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\displays\FenixDisplay.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\systems\FenixSystem.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|C:\Program Files\FenixSim A320\deps\systems\gateway\Fenix.GqlGateway.exe


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKU\S-1-5-21-3429602048-725292175-2964145443-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_4A886EB596DDE810C696BFE47BAAC943"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{85C1CEF4-E338-432C-A2B4-D4EFA3C6D5D4}C:\users\marti\appdata\roaming\microsoft flight simulator 2024\packages\community\fsltl-traffic-injector\fsltl-trafficinjector.exe] => (Allow) C:\users\marti\appdata\roaming\microsoft flight simulator 2024\packages\community\fsltl-traffic-injector\fsltl-trafficinjector.exe (Node.js) [File not signed]
FirewallRules: [TCP Query User{D2C14152-CC5F-41D7-8E71-BF18B4382A16}C:\users\marti\appdata\roaming\microsoft flight simulator 2024\packages\community\fsltl-traffic-injector\fsltl-trafficinjector.exe] => (Allow) C:\users\marti\appdata\roaming\microsoft flight simulator 2024\packages\community\fsltl-traffic-injector\fsltl-trafficinjector.exe (Node.js) [File not signed]
FirewallRules: [UDP Query User{03823B6E-D220-4505-880B-A2A419C55560}C:\program files\fenixsim a320\deps\gqlgateway\fenix.gqlgateway.exe] => (Allow) C:\program files\fenixsim a320\deps\gqlgateway\fenix.gqlgateway.exe => No File
FirewallRules: [TCP Query User{4A59D9D8-093E-4293-BB1B-2B9AC0DFEA50}C:\program files\fenixsim a320\deps\gqlgateway\fenix.gqlgateway.exe] => (Allow) C:\program files\fenixsim a320\deps\gqlgateway\fenix.gqlgateway.exe => No File
FirewallRules: [UDP Query User{C627BBA9-8E18-477B-8F94-B33C89EE7DA4}C:\program files\fenixsim a320\deps\fenixsystem.exe] => (Allow) C:\program files\fenixsim a320\deps\fenixsystem.exe => No File
FirewallRules: [TCP Query User{44FC857C-1A87-4A94-B2D1-B6825823E407}C:\program files\fenixsim a320\deps\fenixsystem.exe] => (Allow) C:\program files\fenixsim a320\deps\fenixsystem.exe => No File
FirewallRules: [{3DB3E66F-10AF-4AEB-A46F-5EEE913A285C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\KingdomComeDeliverance2\Bin\Win64MasterMasterSteamPGO\KingdomCome.exe (Warhorse Studios sro) [File not signed]
FirewallRules: [{81AF212D-8C22-4885-9625-4F4CF2417AFE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\KingdomComeDeliverance2\Bin\Win64MasterMasterSteamPGO\KingdomCome.exe (Warhorse Studios sro) [File not signed]
FirewallRules: [{FE7793A9-39CF-43E9-888A-A3D0F00B5BFE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D6C9F1FF-425A-44A9-8C31-9B6D935ABAE3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [TCP Query User{113B68B2-EDC0-4914-A02C-2012AC8F7740}C:\program files (x86)\simapppro\simapppro.exe] => (Allow) C:\program files (x86)\simapppro\simapppro.exe (Chengdu Yisheng Technology Co.,ltd -> WINWING) [File not signed]
FirewallRules: [UDP Query User{884759EC-8ED9-4C6D-9937-6AB86754CA26}C:\program files (x86)\simapppro\simapppro.exe] => (Allow) C:\program files (x86)\simapppro\simapppro.exe (Chengdu Yisheng Technology Co.,ltd -> WINWING) [File not signed]
FirewallRules: [{E12F0322-7D7B-4121-9D46-D6C660DDC024}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25212.2101.3846.4105_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{51B8DDEF-2C2B-48B2-AC35-6441862DABBB}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25212.2101.3846.4105_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D2FDC3A0-64F8-4993-8D60-C20EFDC6206F}] => (Allow) LPort=8736
FirewallRules: [{6BD3D8FC-AACA-4F0D-991D-273BC13BCA17}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MSFS2024\FlightSimulator2024.exe (Asobo Studio) [File not signed]
FirewallRules: [{87B3C153-D1BE-4493-83A1-04307CC3DC8E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MSFS2024\FlightSimulator2024.exe (Asobo Studio) [File not signed]
FirewallRules: [TCP Query User{C2F847EB-0FF2-4A7B-97FF-45B4B0BA3DAC}C:\users\marti\appdata\local\programs\pmdg-oc3\pmdg oc3.exe] => (Allow) C:\users\marti\appdata\local\programs\pmdg-oc3\pmdg oc3.exe (Gotaclue Robert Miroszewski -> PMDG Simulations, LLC.)
FirewallRules: [UDP Query User{A1793A8B-4146-4494-99A1-BF50A8D97388}C:\users\marti\appdata\local\programs\pmdg-oc3\pmdg oc3.exe] => (Allow) C:\users\marti\appdata\local\programs\pmdg-oc3\pmdg oc3.exe (Gotaclue Robert Miroszewski -> PMDG Simulations, LLC.)
FirewallRules: [{08350F58-A2C8-4284-A912-E61F7A84E019}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{9710A58C-4B8A-4214-8E14-FA3DAD4B0DC6}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [TCP Query User{94C8DDBE-2839-4A51-8943-48402C05A3A5}C:\users\marti\appdata\roaming\microsoft flight simulator 2024\packages\community\rkapps-fsrealistic\service\fsrealistic-plus.exe] => (Allow) C:\users\marti\appdata\roaming\microsoft flight simulator 2024\packages\community\rkapps-fsrealistic\service\fsrealistic-plus.exe (Roy Kronenfeld -> rkApps)
FirewallRules: [UDP Query User{9FF9441A-8853-4DF2-87BC-862B16B6F0B9}C:\users\marti\appdata\roaming\microsoft flight simulator 2024\packages\community\rkapps-fsrealistic\service\fsrealistic-plus.exe] => (Allow) C:\users\marti\appdata\roaming\microsoft flight simulator 2024\packages\community\rkapps-fsrealistic\service\fsrealistic-plus.exe (Roy Kronenfeld -> rkApps)
FirewallRules: [TCP Query User{E25F9916-C669-4252-B876-40F3C158102D}C:\users\marti\appdata\local\programs\aerosoft-one\aerosoft one.exe] => (Allow) C:\users\marti\appdata\local\programs\aerosoft-one\aerosoft one.exe (aerosoft gmbH Luftfahrt-Datentechnik -> Aerosoft GmbH)
FirewallRules: [UDP Query User{A6E68B3F-14F8-4EA8-810B-A5B86DE69F08}C:\users\marti\appdata\local\programs\aerosoft-one\aerosoft one.exe] => (Allow) C:\users\marti\appdata\local\programs\aerosoft-one\aerosoft one.exe (aerosoft gmbH Luftfahrt-Datentechnik -> Aerosoft GmbH)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{1EB0AB62-5E2E-4A62-B29C-79B937C065C8}C:\program files\realtrafficlauncher\jre\bin\java.exe] => (Allow) C:\program files\realtrafficlauncher\jre\bin\java.exe
FirewallRules: [UDP Query User{0EF71082-98CA-4578-B02C-0DAB37A1CB8B}C:\program files\realtrafficlauncher\jre\bin\java.exe] => (Allow) C:\program files\realtrafficlauncher\jre\bin\java.exe
FirewallRules: [TCP Query User{17F3C6BD-98CC-4ECB-AA49-4E459E4839AB}C:\psxt\psxt.exe] => (Allow) C:\psxt\psxt.exe (Nicolaas W. Kaan) [File not signed]
FirewallRules: [UDP Query User{88820988-A524-4111-AA52-7B37BA7CD500}C:\psxt\psxt.exe] => (Allow) C:\psxt\psxt.exe (Nicolaas W. Kaan) [File not signed]
FirewallRules: [TCP Query User{2C2E022B-9317-4622-8989-FEDDCC021601}C:\users\marti\appdata\local\vamsys-pegasus\current\pegasus.exe] => (Allow) C:\users\marti\appdata\local\vamsys-pegasus\current\pegasus.exe (vAMSYS LTD -> vAMSYS LTD)
FirewallRules: [UDP Query User{D9AFEC80-F279-4BFC-924A-B004C81C1CEA}C:\users\marti\appdata\local\vamsys-pegasus\current\pegasus.exe] => (Allow) C:\users\marti\appdata\local\vamsys-pegasus\current\pegasus.exe (vAMSYS LTD -> vAMSYS LTD)
FirewallRules: [TCP Query User{8D55220C-86B1-411A-8918-97E9602E7C88}C:\program files (x86)\addon manager\couatl64\couatl64_msfs2024.exe] => (Allow) C:\program files (x86)\addon manager\couatl64\couatl64_msfs2024.exe (VIRTUALI Sagl -> Virtuali)
FirewallRules: [UDP Query User{16C2D195-5102-4F8A-A926-07F439C59C28}C:\program files (x86)\addon manager\couatl64\couatl64_msfs2024.exe] => (Allow) C:\program files (x86)\addon manager\couatl64\couatl64_msfs2024.exe (VIRTUALI Sagl -> Virtuali)
FirewallRules: [{83A3334A-936C-4081-9329-C32895F9035E}] => (Allow) LPort=8652
FirewallRules: [TCP Query User{7A70F551-94BA-4C4E-8076-DF9505DF6E1B}C:\users\marti\appdata\roaming\microsoft flight simulator 2024\packages\community\p42-util-chaseplane\modules\chaseplane\cp msfs bridge.exe] => (Allow) C:\users\marti\appdata\roaming\microsoft flight simulator 2024\packages\community\p42-util-chaseplane\modules\chaseplane\cp msfs bridge.exe (Parallel 42 LLC -> Parallel 42 LLC)
FirewallRules: [UDP Query User{C7616D3A-F53D-42CF-83C3-83870FB91E4A}C:\users\marti\appdata\roaming\microsoft flight simulator 2024\packages\community\p42-util-chaseplane\modules\chaseplane\cp msfs bridge.exe] => (Allow) C:\users\marti\appdata\roaming\microsoft flight simulator 2024\packages\community\p42-util-chaseplane\modules\chaseplane\cp msfs bridge.exe (Parallel 42 LLC -> Parallel 42 LLC)
FirewallRules: [{7524295A-A364-4C88-A324-19B6071E828F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.35011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{78074B58-C3AB-45B6-9463-1B187A63CD58}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.35011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1B4BB233-A49D-4AFD-9274-AADE2C7E264B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.35011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EA7D0DAE-4CC3-4D54-9C73-0F474AA31BDC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.35011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{88A1113E-9054-4CC1-B102-1ACD74EF8399}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Clive Barker's Hellraiser - Revival\Hellraiser.exe (SABER INTERACTIVE INC. -> Epic Games, Inc.)
FirewallRules: [{E8BA0C55-C807-49FD-9664-B773D3994516}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Clive Barker's Hellraiser - Revival\Hellraiser.exe (SABER INTERACTIVE INC. -> Epic Games, Inc.)
FirewallRules: [{CF0436C6-CAFC-4CD8-BC01-2039D718648A}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{5F05C18B-4ACD-468E-AC82-2AAD3D53781A}C:\program files\fenixsim a320\deps\systems\gateway\fenix.gqlgateway.exe] => (Allow) C:\program files\fenixsim a320\deps\systems\gateway\fenix.gqlgateway.exe (FenixSim Limited -> FenixSim Ltd.)
FirewallRules: [UDP Query User{09505AE5-F74A-4926-A86F-5D69F0256537}C:\program files\fenixsim a320\deps\systems\gateway\fenix.gqlgateway.exe] => (Allow) C:\program files\fenixsim a320\deps\systems\gateway\fenix.gqlgateway.exe (FenixSim Limited -> FenixSim Ltd.)

==================== Restore Points =========================


==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (10/26/2026 11:50:25 AM) (Source: Application Error) (EventID: 1000) (User: MARTIN)
Description: Název chybující aplikace: FlightSimulator2024.exe, verze: 1.9.21.0, časové razítko: 0x00000000
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000000000
ID chybujícího procesu: 0x45d4
Čas spuštění chybující aplikace: 0x1dd652fb5082d7a
Cesta k chybující aplikaci: C:\Program Files (x86)\Steam\steamapps\common\MSFS2024\FlightSimulator2024.exe
Cesta k chybujícímu modulu: unknown
ID sestavy: 6ca7b672-7acc-4de2-ab76-0ea0b372e407
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (10/14/2026 06:10:16 PM) (Source: Application Error) (EventID: 1000) (User: MARTIN)
Description: Název chybující aplikace: couatl64_MSFS2024.exe, verze: 5.0.0.7048, časové razítko: 0x6aa409a6
Název chybujícího modulu: ntdll.dll, verze: 10.0.26100.9549, časové razítko: 0xb396c142
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000001d74d
ID chybujícího procesu: 0x77d4
Čas spuštění chybující aplikace: 0x1dd5beeea756e25
Cesta k chybující aplikaci: C:\Program Files (x86)\Addon Manager\couatl64\couatl64_MSFS2024.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID sestavy: e9c20905-79ff-4111-a47b-0bb07ad5459d
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (10/10/2026 05:11:45 PM) (Source: Application Error) (EventID: 1000) (User: MARTIN)
Description: Název chybující aplikace: nvcplui.exe, verze: 8.1.940.0, časové razítko: 0x68cf68bb
Název chybujícího modulu: nvdisps.dll, verze: 32.0.16.1742, časové razítko: 0x6abd7796
Kód výjimky: 0xc000041d
Posun chyby: 0x0000000000379c47
ID chybujícího procesu: 0x3fe4
Čas spuštění chybující aplikace: 0x1dd58d2059f2971
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj\nvcplui.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_feedb8c0271ca811\nvdisps.dll
ID sestavy: 6342628d-df22-47e1-8480-3fb6e5bbe213
Celý název chybujícího balíčku: NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj
ID chybující aplikace relativní vzhledem k balíčku: NVIDIACorp.NVIDIAControlPanel

Error: (10/10/2026 05:11:43 PM) (Source: Application Error) (EventID: 1000) (User: MARTIN)
Description: Název chybující aplikace: nvcplui.exe, verze: 8.1.940.0, časové razítko: 0x68cf68bb
Název chybujícího modulu: nvdisps.dll, verze: 32.0.16.1742, časové razítko: 0x6abd7796
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000379c47
ID chybujícího procesu: 0x3fe4
Čas spuštění chybující aplikace: 0x1dd58d2059f2971
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj\nvcplui.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_feedb8c0271ca811\nvdisps.dll
ID sestavy: 125fe959-4d78-4198-a7da-114048c9172f
Celý název chybujícího balíčku: NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj
ID chybující aplikace relativní vzhledem k balíčku: NVIDIACorp.NVIDIAControlPanel

Error: (10/09/2026 04:48:30 PM) (Source: Application Error) (EventID: 1000) (User: MARTIN)
Description: Název chybující aplikace: couatl64_MSFS2024.exe, verze: 5.0.0.7048, časové razítko: 0x6aa409a6
Název chybujícího modulu: clr.dll, verze: 4.8.9345.0, časové razítko: 0x6a67f1e5
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000000657c
ID chybujícího procesu: 0x5024
Čas spuštění chybující aplikace: 0x1dd5801c33c1254
Cesta k chybující aplikaci: C:\Program Files (x86)\Addon Manager\couatl64\couatl64_MSFS2024.exe
Cesta k chybujícímu modulu: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
ID sestavy: fe0af1b7-1548-42bd-bc7a-67027e80da82
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (10/09/2026 04:48:30 PM) (Source: .NET Runtime) (EventID: 1023) (User: )
Description: Aplikace: couatl64_MSFS2024.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu vnitřní chyby v modulu .NET Runtime na IP adrese 00007FF9A70B657C (00007FF9A70B0000) s ukončovacím kódem 80131506.

Error: (10/08/2026 07:14:27 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: Verze 154.0.4258.62 programu msedge.exe ukončila interakci se systémem Windows a byla ukončena. Pokud chcete zjistit, zda jsou k dispozici další informace o problému, zkontrolujte historii problémů v ovládacím panelu Zabezpečení a údržba.

Error: (10/05/2026 03:49:17 PM) (Source: Application Error) (EventID: 1000) (User: MARTIN)
Description: Název chybující aplikace: couatl64_MSFS2024.exe, verze: 5.0.0.7048, časové razítko: 0x6aa409a6
Název chybujícího modulu: ntdll.dll, verze: 10.0.26100.9549, časové razítko: 0xb396c142
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000c3a86
ID chybujícího procesu: 0x6558
Čas spuštění chybující aplikace: 0x1dd54d30e2bc53e
Cesta k chybující aplikaci: C:\Program Files (x86)\Addon Manager\couatl64\couatl64_MSFS2024.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID sestavy: 1b049c6c-33eb-4aaf-9395-62109fa3b5a1
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:


System errors:
=============
Error: (10/26/2026 01:33:15 PM) (Source: Killer Network Service) (EventID: 16) (User: )
Description: Error Loading Configuration File rn.stg

Error: (10/26/2026 01:33:15 PM) (Source: Killer Network Service) (EventID: 16) (User: )
Description: Error Extracting Config file from Structured Storage at C:\ProgramData\RivetNetworks\Killer\ConfigurationFiles\rn.stg with reason Error File Does not Exist

Error: (10/26/2026 12:09:58 PM) (Source: Killer Network Service) (EventID: 16) (User: )
Description: Error Loading Configuration File rn.stg

Error: (10/26/2026 12:09:58 PM) (Source: Killer Network Service) (EventID: 16) (User: )
Description: Error Extracting Config file from Structured Storage at C:\ProgramData\RivetNetworks\Killer\ConfigurationFiles\rn.stg with reason Error File Does not Exist

Error: (10/26/2026 12:09:23 PM) (Source: DCOM) (EventID: 10010) (User: MARTIN)
Description: Server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} se v daném časovém limitu neregistroval u služby DCOM.

Error: (10/25/2026 06:46:30 PM) (Source: Killer Network Service) (EventID: 16) (User: )
Description: Error Loading Configuration File rn.stg

Error: (10/25/2026 06:46:30 PM) (Source: Killer Network Service) (EventID: 16) (User: )
Description: Error Extracting Config file from Structured Storage at C:\ProgramData\RivetNetworks\Killer\ConfigurationFiles\rn.stg with reason Error File Does not Exist

Error: (10/25/2026 04:20:18 PM) (Source: Killer Network Service) (EventID: 16) (User: )
Description: Error Loading Configuration File rn.stg


Windows Defender:
================

TimeCreated : 25.10.2026 18:36:50
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
71956234-196B-4F40-97D8-7B73A057B332}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьЅçђēđμĺēđ ѕćàń ẃäś ѕкіρφ℮ď вεćāùŝ℮ тћě łáŝ
ť ѕμç¢℮śşƒύľ šćąη ẅāѕ шΐτђιп ťђэ łαѕτ 7 δąýѕ

TimeCreated : 25.10.2026 10:39:22
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
2947CD4A-FD54-420F-91CB-18DD5F42C4EA}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьЅçђēđμĺēđ ѕćàń ẃäś ѕкіρφ℮ď вεćāùŝ℮ тћě łáŝ
ť ѕμç¢℮śşƒύľ šćąη ẅāѕ шΐτђιп ťђэ łαѕτ 7 δąýѕ

TimeCreated : 14.10.2026 19:26:07
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
8A1645E2-D63A-4A8A-8B7E-EB8462E47F78}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьЅçђēđμĺēđ ѕćàń ẃäś ѕкіρφ℮ď вεćāùŝ℮ тћě łáŝ
ť ѕμç¢℮śşƒύľ šćąη ẅāѕ шΐτђιп ťђэ łαѕτ 7 δąýѕ

TimeCreated : 12.10.2026 19:06:47
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
D8A3BB13-D37D-4E2E-A436-FA93FC3DE60C}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьЅςнέďύłеđ śςåп ẃªѕ śķĩρрĕð ъ℮ςάųşє тħē ĺªš
ť šùčсéѕѕƒµĺ ŝĉäŋ ŵаѕ ŵīтћιή ţĥĕ łãşť 7 ðάýş

TimeCreated : 12.10.2026 17:02:23
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
308090A9-547D-4088-9D79-63109A92E324}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьҐРĈ ċōηʼnëстĭøи яúñðöŵй

TimeCreated : 09.10.2026 19:20:42
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
483BB94A-7294-4CDF-AFC4-6D1F98C34540}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьҐРĈ ċōηʼnëстĭøи яúñðöŵй

TimeCreated : 08.10.2026 19:06:39
Message : Antivirová ochrana v programu Microsoft Defender şсάń нαš ъέĕŋ šŧōρρёď вέƒŏѓē ćθmφłěтïòń.%и %τŞĉàη ĨĎ:%в{
3AEF8C78-344C-4E42-A28D-112D287A606A}%η %тŜĉаή Ţýрэ:%ьAntimalwarový program%ⁿ %ţŜĉâη Ρąŗªmεт℮řš:%вRychlé
prohledávání%п %ţŬŝèŗ:%ъNT AUTHORITY\SYSTEM%π %тŞŧǿр Яéãѕøи:%ьЅςнέďύłеđ śςåп ẃªѕ śķĩρрĕð ъ℮ςάųşє тħē ĺªš
ť šùčсéѕѕƒµĺ ŝĉäŋ ŵаѕ ŵīтћιή ţĥĕ łãşť 7 ðάýş


CodeIntegrity:
===============
Date: 2026-10-25 15:30:25
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\UUS\amd64\WaaSMedicAgent.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.


==================== Memory info ===========================

BIOS: American Megatrends International, LLC. 22.02 06/26/2026
Motherboard: ASRock Z790 Steel Legend WiFi
Processor: Intel(R) Core(TM) i7-14700K
Percentage of memory in use: 19%
Total physical RAM: 65295.25 MB
Available physical RAM: 52366.14 MB
Total Virtual: 69391.25 MB
Available Virtual: 52818.05 MB

==================== Drives ================================

Disk 0 - Drive c: () (Fixed) (Total:1861.99 GB) (Free:910.51 GB) (Model: WD_BLACK SN770 2TB) NTFS

Disk 0 - \\?\Volume{a3ef48f0-eca5-4f10-ae20-bf252222c91c}\ () (Fixed) (Total:933 MB) (Free:52.3 MB) NTFS
Disk 0 - \\?\Volume{a3314b53-6b5b-465c-97cc-70ba011d202f}\ () (Fixed) (Total:96 MB) (Free:61.35 MB) FAT32

==================== MBR & Partition Table ====================

============================================================
Disk: 0 (Protective MBR) (Size: 1863.02 GB)

Partitions:
===========
Partition Style : GPT
Partition Count : 4
Disk ID : {FE335424-A619-45BF-9BE0-F8D972096A2D}
Usable Offset : 0.02 MB
Usable Length : 1863.02 GB
Max Partitions : 128

Partition 1
Type : EFI System Partition
Size : 100 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {A3314B53-6B5B-465C-97CC-70BA011D202F}
GPT Name : EFI system partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 101 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {0838F1B3-BB50-4001-ABC2-36466678145B}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 1861.99 GB
Offset : 117 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {DCEE4F7B-9381-4DDA-91C5-663816099ABA}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 933 MB
Offset : 1906794 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {A3EF48F0-ECA5-4F10-AE20-BF252222C91C}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------

============================================================

==================== End of Addition.txt =======================

Ahoj,
pouzi fixlist.txt s obsahom:
Start

CloseProcesses:

Task: {DB171D07-8E99-4E50-B08B-DD8D6B319326} - System32\Tasks\AsrAPPShop => C:\Program Files (x86)\ASRock Utility\Auto Driver Installer\AsrAPPShop.exe (No File)

S3 MSIO; \??\C:\Program Files (x86)\ASRock Utility\ASRRGBLED\Bin\msio64.sys (No File)


EmptyTemp:

End

Fix result of Farbar Recovery Scan Tool (x64) Version: 22-10-2026
Ran by marti (26-10-2026 17:04:35) Run:4
Running from C:\Users\marti\OneDrive\Plocha
Loaded Profiles: marti & WsiAccount
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:

Task: {DB171D07-8E99-4E50-B08B-DD8D6B319326} - System32\Tasks\AsrAPPShop => C:\Program Files (x86)\ASRock Utility\Auto Driver Installer\AsrAPPShop.exe (No File)

S3 MSIO; \??\C:\Program Files (x86)\ASRock Utility\ASRRGBLED\Bin\msio64.sys (No File)


EmptyTemp:

End
*****************

Processes closed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DB171D07-8E99-4E50-B08B-DD8D6B319326}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DB171D07-8E99-4E50-B08B-DD8D6B319326}" => removed successfully
C:\WINDOWS\System32\Tasks\AsrAPPShop => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AsrAPPShop" => removed successfully
HKLM\System\CurrentControlSet\Services\MSIO => removed successfully
MSIO => service removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 7571811 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 654593293 B
Windows/system/drivers => 1631008 B
Edge => 805623691 B
Firefox => 0 B
Opera => 0 B

Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 5 B
ProgramData => 987713 B
Public => 0 B
systemprofile => 474953 B
systemprofile32 => 0 B
LocalService => 467749 B
NetworkService => 32283 B
marti => 1696308814 B
WsiAccount => 2112245 B

RecycleBin => 0 B
EmptyTemp: => 2.95 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 17:05:30 ====

A jinak díky moooc

Malo by to byt OK