VIRY.CZ

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-10-2026
Ran by Vlado (administrator) on LAPTOP-DIN4F96T (LENOVO 81BG) (28-10-2026 11:41:55)
Running from C:\Users\Vlado\Desktop\FRST64.exe
Loaded Profiles: Vlado
Platform: Microsoft Windows 11 Home Version 26H2 26300.9711 (X64) Language: Slovenčina (Slovensko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantage-(GenericTelemetryAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\Avast Software\Suite\AvastSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswEngSrv.exe
(C:\Program Files\Avast Software\Suite\su_worker.exe ->) (Gen Digital Inc. -> OPSWAT, Inc.) C:\Program Files\Avast Software\Suite\wa_3rd_party_host_32.exe
(C:\Program Files\Avast Software\Suite\su_worker.exe ->) (Gen Digital Inc. -> OPSWAT, Inc.) C:\Program Files\Avast Software\Suite\wa_3rd_party_host_64.exe
(C:\Program Files\Avast Software\Suite\TuneupSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\su_worker.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\ShadowPlay\nvsphelper64.exe
(C:\Program Files\XboxService\x64\XboxService.exe ->) (Microsoft Corporation -> ) C:\Program Files\Microsoft GameInput\x64\GameInputRawInputProxy.exe
(C:\Users\Vlado\AppData\Local\Google\Gemini\app-1.16.0\GeminiAppLauncher.exe ->) (Google LLC -> Google LLC) C:\Users\Vlado\AppData\Local\Google\Gemini\app-1.16.0\GeminiCrashpadHandler.exe
(Discord Inc. -> Discord Inc.) C:\Users\Vlado\AppData\Local\Discord\app-1.0.9265\Discord.exe <6>
(drivers\lenovo\UDC\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\udc\Hosts\x64\AppProvisioningPlugin.exe
(drivers\lenovo\UDC\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\udc\Hosts\x64\CoreTelemetryPlugin.exe
(drivers\lenovo\UDC\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\udc\Hosts\x64\LenovoOobePlugin.exe
(drivers\lenovo\UDC\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\udc\Hosts\x64\MessagingPlugin.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_8c1fc948b5a01c52\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8c1fc948b5a01c52\igfxEM.exe
(Elaborate Bytes AG -> Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(ETDCtrl.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDTouch.exe
(ETDService.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDCtrl.exe
(ETDService.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDCtrlHelper.exe
(explorer.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe
(explorer.exe ->) (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe
(explorer.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\bgapp.exe
(Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\AvastUI.exe <5>
(Google LLC -> Google LLC) C:\Users\Vlado\AppData\Local\Google\Gemini\app-1.16.0\GeminiAppLauncher.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.50\msedgewebview2.exe <5>
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe <4>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvlti.inf_amd64_fc2271e4849237c2\Display.NvContainer\NVDisplay.Container.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Suite\wsc_proxy.exe
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDService.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(services.exe ->) (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Driver Updater\DriverUpdSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\afwServ.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\AvastSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\bgsvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\DriverUpdSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\TuneupSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8c1fc948b5a01c52\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8c1fc948b5a01c52\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8c1fc948b5a01c52\IntelCpHeciSvc.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\lenovo\UDC\Service\UDClientService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvlti.inf_amd64_fc2271e4849237c2\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(sihost.exe ->) (Lenovo -> Lenovo) C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.7.18.0_x64__5grkq8ppsgwt4\LaunchUtility\utility.exe
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [DAX2_APP] => C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe [849920 2017-03-07] (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.)
HKLM\...\Run: [AVG Driver Updater UI] => C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe [8458744 2026-08-25] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [Avast BreachGuard] => C:\Program Files\Avast Software\Suite\bgapp.exe [8496056 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Suite\AvLaunch.exe [1082296 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [114824 2020-09-14] (Adobe Inc. -> )
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [105280 2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725096 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\Run: [Gemini] => C:\Users\Vlado\AppData\Local\Google\Gemini\GeminiAppLauncher.exe [419056 2026-10-14] (Google LLC -> Google LLC)
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\Run: [Steam] => F:\Program Files (x86)\Steam\steam.exe [5823128 2026-10-21] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\Run: [Discord] => C:\Users\Vlado\AppData\Local\Discord\Update.exe [1596344 2026-08-31] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\Run: [GoogleUpdaterTaskUser157.0.8089.0] => C:\Users\Vlado\AppData\Local\Google\GoogleUpdater\157.0.8089.0\updater.exe [9958552 2026-10-06] (Google LLC -> Google LLC)
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\Policies\Explorer: []
HKU\S-1-5-21-220631949-4223932415-3592341702-1009\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725096 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\154.0.8037.59\Installer\chrmstp.exe [8082584 2026-09-30] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Installer\chrmstp.exe [7639120 2026-10-28] (Brave Software, Inc. -> Brave Software, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
BootExecute: autocheck autochk * bootdeletesdnclean64.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {22D4C884-5CF6-4524-B51E-4391DD18ECB1} - \Lenovo\ImController\TimeBasedEvents\32b30016-f710-49fd-a0ab-c60764cd2698 -> No File <==== ATTENTION
Task: {2355F549-42C5-4823-B593-5D1BFD6941C2} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {2A65FADB-C772-4028-A0B8-A7AEC79D0FA0} - \Lenovo\ImController\TimeBasedEvents\3ac5b99e-b704-4ab1-97f6-8d300656a5b7 -> No File <==== ATTENTION
Task: {2F97AD35-4F14-4F5C-A407-5A510E905940} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {3AD66499-B173-4812-981C-41AE0BB117BA} - \Lenovo\ImController\TimeBasedEvents\7f01e8f0-44bc-469b-ba6a-d69a112bba90 -> No File <==== ATTENTION
Task: {51603BBE-CE3C-4896-AE27-1D04172D6E75} - \Lenovo\ImController\TimeBasedEvents\b35e0fb3-a8d3-42f6-aeb8-81f3b4d1c532 -> No File <==== ATTENTION
Task: {6E3564F8-4A3D-42EA-9145-78E0C60BA5B5} - no filepath. <==== ATTENTION
Task: {75AE2C24-2C7F-4556-92C7-209E4E7C1234} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> No File <==== ATTENTION
Task: {95E41DC1-0783-42FD-B8CF-2A51601B74A2} - \Lenovo\ImController\TimeBasedEvents\b6ebc9da-7a2b-4c22-a943-c9c2bcabaaeb -> No File <==== ATTENTION
Task: {FF376FBD-7F0F-4210-B5EC-67C61A632C4E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1617408 2026-08-03] (Adobe Inc. -> Adobe Inc.)
Task: {4A7817C7-DDD9-413D-A224-414C06D8E3D5} - System32\Tasks\ASC_PerformanceMonitor => "C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/Task <==== ATTENTION
Task: {A4ABAE72-D815-4842-9FA9-8E21B91BC84A} - System32\Tasks\Avast Software\Avast Suite Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-suite\icarus.exe [9896952 2026-10-06] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {3000FDCE-1020-4253-80C7-2B5D69227A07} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [3710456 2026-09-10] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {78ABA516-0429-43DD-84A6-0B735B1E8676} - System32\Tasks\Avast Software\Suite Emergency Update => C:\Program Files\Avast Software\Suite\AvEmUpdate.exe [5832120 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {F8AAD4F2-7F60-4043-ACA7-62E5D9CE6777} - System32\Tasks\AVG\AVG Driver Updater BugReport => C:\Program Files\AVG\Driver Updater\AvBugReport.exe [6517752 2026-08-25] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) -> --send "dumps|report" --silent --product 149 --programpath "C:\Program Files\AVG\Driver Updater" --configpath "C:\ProgramData\AVG\Driver Updater" --path "C:\ProgramData\AVG\Driver Updater\log" --path "C:\ProgramData\AVG\Icarus\Logs" --logpath "C:\ProgramData\AVG\Driver Updater\log" --guid 3d77e152- (the data entry has 27 more characters).
Task: {E7CC5C09-E37B-4345-B8C9-EA1FBB0FA4C8} - System32\Tasks\AVG\AVG Driver Updater Update => C:\Program Files\Common Files\AVG\Icarus\avg-du\icarus.exe [9940984 2026-08-19] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {802F0955-E28E-4B02-9E8D-6FC6580C94E7} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{E4DA6F10-49C5-455B-970E-93CBD2E0861D} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-09-02] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {E373CA3E-51BB-4EDD-91C3-14320A4BC0AE} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{A19ED71D-19DB-44CA-AF8B-C8B7C9BBB89C} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-09-02] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {84A679A3-9BDC-4971-8CC6-621A77F3D9E6} - System32\Tasks\CCleaner 7 - Skip UAC - S-1-5-21-220631949-4223932415-3592341702-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7635856 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {FE4D5B37-44B0-4F2C-81FF-772FC7A11556} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem157.0.8089.0{5C1D38A6-0FE1-4532-B3D1-9E76029CBA2D} => C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe [9958552 2026-10-06] (Google LLC -> Google LLC)
Task: {C10A976B-24A7-4FB8-B9CF-7776241A9412} - System32\Tasks\GoogleUser\GoogleUpdater\GoogleUpdaterTaskUser157.0.8089.0{96EE8FE2-7B86-4234-AA07-2CC682C9E14D} => C:\Users\Vlado\AppData\Local\Google\GoogleUpdater\157.0.8089.0\updater.exe [9958552 2026-10-06] (Google LLC -> Google LLC)
Task: {95F0D9CA-70CB-4830-A375-EAEBD2F1782E} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-09-24] (HP Inc. -> HP Inc.)
Task: {964E2012-8D7F-476F-B662-9FF4F1D45F4F} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-09-24] (HP Inc. -> HP Inc.)
Task: {03653869-8F79-4285-809E-4AA582D59647} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe [816960 2017-10-11] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {BE050B41-A1E0-4ED0-AE6F-D70A4FC5BB3C} - System32\Tasks\iolo\ActiveMessenger => F:\test\System Mechanic\ActiveBridge.exe -> F:\test\System Mechanic\\-appexecutable iolo.exe -ammode
Task: {BD42F058-385A-43AF-9073-39485A95A1FC} - System32\Tasks\iolo\iolo Tray app => F:\test\System Mechanic\ioloTrayApp.exe (No File)
Task: {AD06C0F1-749D-4741-A264-0EE0AD7524C2} - System32\Tasks\iolo\SmartScan => F:\test\System Mechanic\smartscan.exe (No File)
Task: {894A586B-050E-474C-879C-6AB7586E5BA9} - System32\Tasks\iTop Halloween Task (One-Time) => "C:\Program Files (x86)\iTop VPN\Pub\itophalwp23.exe" -> C:\Program Files (x86)\iTop VPN\Pub\\/halw
Task: {C0F5C29C-3315-434B-AD24-E65B5DD8218A} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-220631949-4223932415-3592341702-1001 => "C:\Users\Vlado\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe" (No File)
Task: {1D59B9A1-280B-47E0-AF61-2F61E7C4033D} - System32\Tasks\Lenovo\UDC\Lenovo UDC Diagnostic Scan => C:\WINDOWS\system32\sc.exe [102400 2025-07-18] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 210
Task: {8C0BE5BF-7969-4398-98CC-6C703ABE04E4} - System32\Tasks\Lenovo\UDC\Lenovo UDC Lazy Deployment => C:\WINDOWS\system32\sc.exe [102400 2025-07-18] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 221
Task: {4133B500-EC97-4A76-8804-E0227492DC62} - System32\Tasks\Lenovo\UDC\Lenovo UDC Maintainance Task => C:\WINDOWS\system32\sc.exe [102400 2025-07-18] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 220
Task: {A04E80FE-1A12-4C5E-A609-F5BA68FCBFB1} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [259000 2026-08-26] (Lenovo -> Lenovo Group Ltd.)
Task: {8739F8BC-1502-48CA-9546-41165C1C852D} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [102400 2025-07-18] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {A72113AB-D3A9-442A-BF8D-9617A84B45C7} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {7078D11D-8A94-4888-8C94-C9C2E2EACC74} - System32\Tasks\Lenovo\Vantage\Schedule\ConsumerAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {19E90A2B-8389-494A-97C5-38C96327075B} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {B5602DAD-A053-46A9-A020-3782B2EC574C} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {A3D89078-611D-481A-839E-62E412399A2E} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin_Pulsation => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {A2E3DADC-EC2C-43AB-B285-E39C6CB47F43} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {C19E2440-DB8D-414E-A5BD-81814A6A45F9} - System32\Tasks\Lenovo\Vantage\Schedule\IdeaNotebookAddinDailyEvent => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {D0822FF7-2938-4BE2-9E7F-45D6F5B0A9F6} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {5C314956-E6D9-4ECA-8737-F404F1CAE9E1} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBatteryPartSalesMonthlyToast => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {25BC2DE6-7769-4EE8-A955-1D52E2B8E785} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {D9871C90-6F14-442B-8102-C28BB8DB9A37} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSupportContextEngineDaily => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {E6B8F5DE-D0C2-4959-87B7-7F330089487D} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSupportHealthReportSchedule => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {896AD5BC-875C-468B-864E-8C32B1BCB2E3} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {1315FED0-69C1-48DB-A40D-464B33AD903F} - System32\Tasks\Lenovo\Vantage\Schedule\NotificationCenter => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe NotificationCenter (No File)
Task: {C6BBA13E-AB87-4DCB-9C59-613296F77408} - System32\Tasks\Lenovo\Vantage\Schedule\SettingsWidgetAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {409030EE-51A8-474F-A010-3AF4790FF012} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {7070940A-513E-497F-AD7A-61799B025FCB} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {4627C733-338D-4B40-8BD3-1733A26A5453} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.1.0.51\x86\IdleScheduleEventAction.exe [173536 2026-06-24] (Lenovo -> )
Task: {261C7A5B-E185-4119-B459-6B02CE7DF00E} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-22] (Lenovo -> Lenovo)
Task: {D433BB1A-6A2F-4858-8032-EE6B543872FE} - System32\Tasks\Lenovo\Vantage\Schedule\VantageTelemetryAddinTask => C:\Program Files (x86)\Lenovo\VantageService\3.6.15.0\ScheduleEventAction.exe VantageTelemetryAddinTask (No File)
Task: {2FB779BE-D4F1-46B9-ACCE-A082ED39D895} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\\uninstall.exe /repair (No File)
Task: {6A78055D-C225-4049-978C-C3BD9C108CC1} - System32\Tasks\LenovoUtility Task => C:\Windows\explorer.exe [3479440 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
Task: {7EE1E03B-F9AB-4ABC-B99B-4D43289E6D19} - System32\Tasks\Meta\Messenger-SL-Helper-S-1-5-21-220631949-4223932415-3592341702-1001 => C:\Users\Vlado\AppData\Local\Programs\Messenger\MessengerHelper.exe --lassie (No File)
Task: {0D65C88C-31AA-4BB9-847F-44D3F4F29FFE} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [17065848 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {FA7C3B96-BA49-4273-A931-DB247721D498} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [31544720 2026-10-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {533683BC-A871-42AA-BD64-50C8B527F76F} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [15911344 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {B3F62E31-D693-4916-80F5-FFF8DB85C78E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [31544720 2026-10-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {41E35CF4-9A21-4158-9213-4705B70AA273} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427376 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {875D395A-62D5-45E9-8ABC-FA11D3D3273F} - System32\Tasks\Microsoft\Office\Office Feature Updates C2R Client => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [31544720 2026-10-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {CFA7661D-7EA6-436D-ADAB-4BFB00AE8B10} - System32\Tasks\Microsoft\Office\Office Feature Updates C2R Client Logon => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [31544720 2026-10-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {BE67CBFC-E5D1-405F-8AF9-4173390310EB} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427376 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {60037C40-A8C2-4185-8855-53D01AC891D0} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [1550184 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {056852A3-EB99-4253-AD74-CC21532E0233} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [17065848 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {6ECC17BA-2F21-4D1D-A937-AF5B7E29ED7A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)
Task: {F7302E9A-0B5C-4EDD-A59E-208EDC8448B0} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {105E3F98-9A70-41B9-A045-9E9B2A98DADD} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {7B37546E-5503-43C3-AFFC-8A372E83E609} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_Broker_Display => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {C7EACEEE-0F7A-4DC3-8448-0E93BE649EEB} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3324528 2025-10-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {20B07B04-E71C-4AD9-B1E9-64341941CB81} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4457320 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {2E0F55FE-5339-4368-9AB4-DBABC84AE064} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-220631949-4223932415-3592341702-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4457320 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {355FD539-6B45-4C86-9248-5981A10CFC75} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-220631949-4223932415-3592341702-1009 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4457320 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {2B4475A7-03F9-452D-A9E4-3111CD458FD1} - System32\Tasks\OneDrive Startup Task-S-1-5-21-220631949-4223932415-3592341702-1001 => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\OneDriveLauncher.exe [874856 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {2736A5C8-D6FE-40C4-89B5-0126007B1D61} - System32\Tasks\OneDrive Startup Task-S-1-5-21-220631949-4223932415-3592341702-1009 => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\OneDriveLauncher.exe [874856 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {F2ECD3EB-8EC8-4986-9FB2-5469F71CF9AF} - System32\Tasks\Opera scheduled assistant Autoupdate 1594985878 => C:\Users\Vlado\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Vlado\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {9FF64ADF-F114-4D9D-BEB2-B10A1CADF87C} - System32\Tasks\Opera scheduled Autoupdate 1594985873 => C:\Users\Vlado\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --bypasslauncher $(Arg0) (No File)
Task: {F4D2AE6C-50BC-459A-9E5F-BA5E93A9E48A} - System32\Tasks\PinnacleStudio22Notifier => "C:\Program Files\Pinnacle\Studio 22\programs\PinnacleNotifierWrapper.exe" (No File)
Task: {3A2C21CF-90B6-45B7-A31B-EEA1F4E35CC7} - System32\Tasks\PinnacleStudioUpdater => "C:\Program Files\Pinnacle\Studio 22\programs\PSNotification.exe" /r (No File)
Task: {F4666F1A-20A0-4191-9AAA-7F6356B41C6C} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-220631949-4223932415-3592341702-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7635856 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {C838822C-BE85-47A3-A55E-2CD0D6F3896A} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-220631949-4223932415-3592341702-1009 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7635856 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {9230DBED-1A71-4224-A04F-3F5B1A2C3EF1} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-220631949-4223932415-3592341702-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7635856 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {BD5CF182-C8BF-48D7-BC9C-37555FA370D3} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [11853200 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {57DCB783-3AE0-436E-886E-EE1ECEFDC208} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [9274080 2026-01-19] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {3BC9C7FE-6ECD-4E56-B5DE-7730A8D9901B} - System32\Tasks\RtHDVBg_Dolby => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506376 2018-10-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {AF9A1255-E3BE-447B-83DF-AE61C7CD9724} - System32\Tasks\RtHDVBg_LENOVO_DOLBYDRAGON => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506376 2018-10-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {27A88512-70C4-4D46-B6C6-932F50730D49} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506376 2018-10-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {09C89EC6-7BC4-44B1-A300-BD6340943C77} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-220631949-4223932415-3592341702-1001 => C:\Users\Vlado\AppData\Roaming\Zoom\bin\Zoom.exe [500168 2026-09-25] (Zoom Communications, Inc. -> Zoom Communications, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{02eda104-230d-4e40-9271-6e1d632f3a84}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{516a66e4-1eb3-484f-a86c-b63040425ab2}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{88fc4153-dfa3-494b-acb3-347b519b7008}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF DefaultProfile: 54i1m2vr.dev-edition-default -> FFD4EDB6BAA7D4C3
FF DefaultProfile: 392yv9dv.default-release-1 -> E7CF176E110C211B
FF DefaultProfile: tqekmm4h.default-release-1633855589561 -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\392yv9dv.default-release-1 [2026-10-28]
FF user.js: detected! => C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\392yv9dv.default-release-1\user.js [2023-09-08]
FF Extension: (Selenium IDE) - C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\392yv9dv.default-release-1\Extensions\{a6fd85ed-e919-4a43-a5af-8da18bda539f}.xpi [2023-10-09]
FF ProfilePath: C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\53fr8wr1.default [2025-04-22]
FF user.js: detected! => C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\53fr8wr1.default\user.js [2023-09-08]
FF ProfilePath: C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\tqekmm4h.default-release-1633855589561 [2026-10-28]
FF user.js: detected! => C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\tqekmm4h.default-release-1633855589561\user.js [2023-09-08]
FF Extension: (Katalon Recorder (Selenium tests generator)) - C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\tqekmm4h.default-release-1633855589561\Extensions\{91f05833-bab1-4fb1-b9e4-187091a4d75d}.xpi [2021-10-10]
FF Extension: (Selenium IDE) - C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\tqekmm4h.default-release-1633855589561\Extensions\{a6fd85ed-e919-4a43-a5af-8da18bda539f}.xpi [2021-10-10]
FF ProfilePath: C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\54i1m2vr.dev-edition-default [2026-10-28]
FF user.js: detected! => C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\54i1m2vr.dev-edition-default\user.js [2023-09-08]
FF Homepage: Mozilla\Firefox\Profiles\54i1m2vr.dev-edition-default -> hxxps://www.bing.com/?pc=W011
FF Extension: (Selenium IDE) - C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\54i1m2vr.dev-edition-default\Extensions\{a6fd85ed-e919-4a43-a5af-8da18bda539f}.xpi [2022-02-25]
FF HKLM-x32\...\Firefox\Extensions: [helper-sig@savefrom.net] - C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\53fr8wr1.default\extensions\staged\helper-sig@savefrom.net.xpi => not found
FF HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\Firefox\Extensions: [helper-sig@savefrom.net] - C:\Users\Vlado\AppData\Roaming\Mozilla\Firefox\Profiles\53fr8wr1.default\extensions\staged\helper-sig@savefrom.net.xpi => not found
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-10-13] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2020-10-09]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2024-10-01]

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Vlado\AppData\Local\Microsoft\Edge\User Data\Default [2026-10-28]
Edge Notifications: Default -> hxxps://www.msn.com
Edge Extension: (Avira Safe Shopping) - C:\Users\Vlado\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\caiblelclndcckfafdaggpephhgfpoip [2026-09-22]
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\Vlado\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-09-22]
Edge Extension: (Edge relevant text changes) - C:\Users\Vlado\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-04]
Edge Extension: (AdBlock - najlepší blokovač reklám) - C:\Users\Vlado\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2026-09-30]
Edge HKLM-x32\...\Edge\Extension: [caiblelclndcckfafdaggpephhgfpoip]
Edge HKLM-x32\...\Edge\Extension: [emgfgdclgfeldebanedpihppahgngnle]

Chrome:
=======
CHR Profile: C:\Users\Vlado\AppData\Local\Google\Chrome\User Data\Default [2026-10-28]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR HomePage: Default -> bing.com
CHR Extension: (Avira Password Manager) - C:\Users\Vlado\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2026-10-28]
CHR Extension: (Avira Safe Shopping) - C:\Users\Vlado\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2026-10-28]
CHR Extension: (Microsoft Bing Homepage a Search Engine) - C:\Users\Vlado\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddojnmkongaimkdddgmcccldlfhokcfb [2025-01-08]
CHR Extension: (Avira Browser Safety) - C:\Users\Vlado\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2026-10-28]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Vlado\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-28]
CHR Extension: (AdBlock - najlepší blokovač reklám) - C:\Users\Vlado\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-10-28]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Vlado\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-01-08]
CHR HKU\S-1-5-21-220631949-4223932415-3592341702-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ddojnmkongaimkdddgmcccldlfhokcfb]
CHR HKU\S-1-5-21-220631949-4223932415-3592341702-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-220631949-4223932415-3592341702-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [moihledlmchhofenpacbhphnbnpakgmo]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]

Brave:
=======
BRA Profile: C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2026-10-28]
BRA HomePage: Default -> bing.com
BRA DefaultSearchKeyword: Default -> :g
BRA Extension: (Microsoft Bing Homepage a Search Engine) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ddojnmkongaimkdddgmcccldlfhokcfb [2026-09-02]
BRA Extension: (Brave Ad Block Updater (Brave First Party Adblock Filters (plaintext))) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2026-10-28]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2026-09-23]
BRA Extension: (Brave NTP background images) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2026-09-22]
BRA Extension: (Brave Ad Block Updater (Mobile app promo blocker (plaintext))) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2026-10-28]
BRA Extension: (Brave Ad Block Updater (Cookie notice blocker (plaintext))) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2026-10-28]
BRA Extension: (Query Filter) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\cemdlagocoimleflkfkjoihojfainiho [2026-10-28]
BRA Extension: (Brave Ad Block Updater (Allow X/Twitter Embeds (plaintext))) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\dkpggglmbjhgjhachikgmohmecomjndo [2026-09-02]
BRA Extension: (Brave WebMCP Tool Scripts) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\eingdhelnaolbpcdkgddekhifcjfkalf [2026-09-22]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2026-09-02]
BRA Extension: (Brave Ad Block Updater (Brave Default Adblock Filters (plaintext))) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2026-10-28]
BRA Extension: (Brave Ad Block Updater (Allow Facebook Embeds (plaintext))) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\jmfhneobcdckobmonkfjkbknnjjnegoh [2026-09-02]
BRA Extension: (Brave Ad Block Updater (Brave Default Privacy Filters (plaintext))) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf [2026-10-28]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2026-09-22]
BRA Extension: (Brave NTP sponsored images) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\mjgplcflbkgklplplbakkopkafojhbmk [2026-10-28]
BRA Extension: (Brave User Agent) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe [2026-10-28]
BRA Extension: (Brave Ads Resources) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\obponfmfefkaeehakbehbnnlcbebebhd [2026-09-02]
BRA Extension: (Brave Ad Block Updater (Czech and Slovak website ad blocker (plaintext))) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\oegebjahecghlckbhkmojgnpcgdeajdi [2026-09-22]
BRA Extension: (P3A Configuration) - C:\Users\Vlado\AppData\Local\BraveSoftware\Brave-Browser\User Data\P3AConfig [2026-09-02]

Vivaldi:
=======
VIV Profile: C:\Users\Vlado\AppData\Local\Vivaldi\User Data\Default [2025-06-11]
VIV Extension: (MeddleMonkey) - C:\Users\Vlado\AppData\Local\Vivaldi\User Data\Default\Extensions\moihledlmchhofenpacbhphnbnpakgmo [2020-10-12]
VIV Extension: (Chrome Media Router) - C:\Users\Vlado\AppData\Local\Vivaldi\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-10-12]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [182776 2026-08-03] (Adobe Inc. -> Adobe Inc.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Suite\aswidsagent.exe [8015800 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
R2 Avast BreachGuard Service; C:\Program Files\Avast Software\Suite\bgsvc.exe [11897272 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Suite\AvastSvc.exe [1051064 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Suite\afwServ.exe [2795448 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Suite\aswToolsSvc.exe [1120184 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastCleanupSvc; C:\Program Files\Avast Software\Suite\TuneupSvc.exe [24096696 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastDriverUpdSvc; C:\Program Files\Avast Software\Suite\DriverUpdSvc.exe [21313464 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Suite\wsc_proxy.exe [56912 2026-08-25] (Avast Software s.r.o. -> AVAST Software)
R2 AVGDriverUpdSvc; C:\Program Files\AVG\Driver Updater\DriverUpdSvc.exe [20872696 2026-08-25] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-09-02] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\elevation_service.exe [5136976 2026-10-21] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-09-02] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [32945552 2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12773776 2026-10-20] (Microsoft Corporation -> Microsoft Corporation)
R2 Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [189464 2018-09-25] (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2019-11-13] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncHelper.exe [3812712 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
R2 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [466600 2026-10-19] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243720 2026-09-24] (HP Inc. -> HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe [44096 2026-09-22] (Lenovo -> Lenovo)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe [2150144 2026-06-21] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 MicrosoftEdgeElevationService1dacd85c1ad1baa; C:\Program Files (x86)\Microsoft\Edge\Application\156.0.4314.50\elevation_service.exe [4322120 2026-10-25] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_fc2271e4849237c2\Display.NvContainer\NVDisplay.Container.exe [1275624 2026-09-21] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.189.0928.0009\OneDriveUpdaterService.exe [4112744 2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [1678968 2026-09-22] (Rockstar Games, Inc. -> Rockstar Games)
R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [72632 2026-08-26] (Lenovo -> Lenovo Group Ltd.)
S3 uncheater_bgl; C:\Program Files\Common Files\Uncheater\uncheater_bgl.exe [2097008 2020-02-28] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe [4608640 2026-06-21] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe [290744 2026-06-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 XboxService; C:\Program Files\XboxService\x64\XboxService.exe [579752 2026-10-14] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ACPIVPC; C:\WINDOWS\System32\DriverStore\FileRepository\acpivpc.inf_amd64_07db38bc9e02b27d\AcpiVpc.sys [52800 2026-06-17] (Lenovo -> Lenovo)
S3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2017-11-16] (AnchorFree Inc -> The OpenVPN Project)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2026-08-25] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [253024 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [396896 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [317024 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [81504 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswDrvBrg; C:\WINDOWS\System32\drivers\aswDrvBrg.sys [95320 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [29144 2026-08-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [35936 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [311904 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [641632 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [101472 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [71776 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [862816 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1302624 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [276064 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [484960 2026-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2024-10-29] (Microsoft Corporation) [File not signed]
S3 Ccx01000; C:\WINDOWS\System32\drivers\Ccx01000.sys [692224 2026-09-24] (Microsoft Windows -> Microsoft Corporation)
S3 clwvd8; C:\WINDOWS\System32\drivers\clwvd8.sys [61056 2018-08-23] (CyberLink Corp. -> CyberLink Corporation)
S3 clwvd9; C:\WINDOWS\System32\drivers\clwvd9.sys [60984 2019-09-08] (CyberLink Corp. -> CyberLink Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [44208 2025-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
R1 ISODrive; \??\C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> )
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-06-21] (Microsoft Windows -> Microsoft Corporation)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2019-05-29] (MiniTool Solution Ltd -> )
S3 pwdspio; \??\C:\WINDOWS\system32\pwdspio.sys [12504 2019-05-29] (MiniTool Solution Ltd -> )
S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [12434304 2026-01-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
R3 rtots640x64; C:\WINDOWS\System32\drivers\rtots640x64.sys [1473064 2026-09-08] (Realtek Semiconductor Corp. -> Realtek)
R3 SNP2UVCW10; C:\WINDOWS\system32\DRIVERS\snUVCg2.sys [1710128 2017-11-05] (Sonix Technology CO., LTD -> Sonix Tech. Co., Ltd.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [57768 2023-09-19] (Windscribe Limited -> The OpenVPN Project)
R3 VClone; C:\WINDOWS\System32\drivers\VClone.sys [44544 2020-02-22] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21888 2026-06-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [646536 2026-06-21] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [115120 2026-06-21] (Microsoft Windows -> Microsoft Corporation)
S3 windtun420; C:\WINDOWS\System32\drivers\windtun420.sys [47544 2023-09-19] (Windscribe Limited -> WireGuard LLC)
R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2024-10-05] (Microsoft Windows -> Microsoft Corporation)
R3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_14dc9a213197a8b8\WSDScan.sys [61440 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; \??\C:\WINDOWS\xhunter1.sys [74552 2021-03-06] (Wellbia.com Co., Ltd. -> )
R1 YSDrv; \??\C:\Program Files (x86)\Bignox\BigNoxVM\RT\YSDrv.sys [312776 2021-04-04] (Microsoft Windows Hardware Compatibility Publisher -> )
U3 aswBcc; no ImagePath
U3 Avast Business Console Client Antivirus Service; no ImagePath
U1 bdvedisk; no ImagePath
U2 DriverUpdSvc.exe; no ImagePath
S3 LenovoDiagnosticsDriver; \??\C:\ProgramData\Lenovo\Vantage\Addins\LenovoHardwareScanAddin\4.0.1.2\LenovoDiagnosticsDriver.sys (No File)
U2 TuneupSvc.exe; no ImagePath

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-9-30 9:58 - 2026-09-30 09:58 - 000002187 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2026-9-30 10:2 - 2026-09-30 10:02 - 000002069 _____ C:\ProgramData\Desktop\Avast One.lnk
2026-10-28 8:1 - 2026-10-28 08:01 - 000002382 _____ C:\ProgramData\Desktop\Brave.lnk
2026-10-28 11:41 - 2026-10-28 11:43 - 000058892 _____ C:\Users\Vlado\Desktop\FRST.txt
2026-10-28 11:41 - 2026-10-28 11:41 - 000657944 _____ C:\WINDOWS\system32\perfh01B.dat
2026-10-28 11:41 - 2026-10-28 11:41 - 000131536 _____ C:\WINDOWS\system32\perfc01B.dat
2026-10-28 11:41 - 2026-10-28 11:41 - 000000000 ___HD C:\avast! sandbox
2026-10-28 11:40 - 2026-10-28 11:42 - 000000000 ____D C:\FRST
2026-10-28 11:40 - 2026-10-28 11:40 - 002457088 _____ (Farbar) C:\Users\Vlado\Desktop\FRST64.exe
2026-10-28 11:40 - 2026-10-28 11:40 - 000000000 ____D C:\Users\Vlado\Desktop\FRST-OlderVersion
2026-10-28 11:35 - 2026-10-28 11:35 - 000000000 ____D C:\WINDOWS\Panther
2026-10-28 11:06 - 2026-10-28 08:34 - 000526792 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_16.dll.0
2026-10-28 10:09 - 2026-10-28 10:09 - 000000000 ____D C:\Users\Vlado\AppData\Local\WindowsOobeAppHost
2026-10-28 09:37 - 2026-10-28 11:36 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-10-28 08:47 - 2026-10-28 08:47 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-10-28 08:42 - 2026-09-21 12:40 - 002402704 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-10-28 08:42 - 2026-09-21 12:40 - 002402704 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-10-28 08:42 - 2026-09-21 12:40 - 001908104 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-10-28 08:42 - 2026-09-21 12:40 - 001908104 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-10-28 08:42 - 2026-09-21 12:40 - 001581968 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-10-28 08:42 - 2026-09-21 12:40 - 001581968 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-10-28 08:42 - 2026-09-21 12:40 - 001395600 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-10-28 08:42 - 2026-09-21 12:40 - 001395600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-10-28 08:42 - 2026-09-21 12:40 - 000478440 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-10-28 08:42 - 2026-09-21 12:40 - 000375016 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-10-28 08:42 - 2026-09-21 12:36 - 001616104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-10-28 08:42 - 2026-09-21 12:36 - 001574120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-10-28 08:42 - 2026-09-21 12:36 - 001333480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-10-28 08:42 - 2026-09-21 12:36 - 001223912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-10-28 08:42 - 2026-09-21 12:36 - 000676584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-10-28 08:42 - 2026-09-21 12:36 - 000510184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-10-28 08:42 - 2026-09-21 12:35 - 026361064 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-10-28 08:42 - 2026-09-21 12:35 - 024678632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-10-28 08:42 - 2026-09-21 12:35 - 002318568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-10-28 08:42 - 2026-09-21 12:35 - 001716968 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-10-28 08:42 - 2026-09-21 12:35 - 000468712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-10-28 08:42 - 2026-09-21 12:34 - 021715688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-10-28 08:42 - 2026-09-21 12:34 - 007683304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-10-28 08:42 - 2026-09-21 12:34 - 005919464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-10-28 08:42 - 2026-09-21 12:34 - 005627096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-10-28 08:42 - 2026-09-21 12:34 - 005469928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-10-28 08:42 - 2026-09-21 12:34 - 004926216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-10-28 08:42 - 2026-09-21 12:34 - 004175080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-10-28 08:42 - 2026-09-21 12:34 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-10-28 08:42 - 2026-06-26 03:01 - 000149245 _____ C:\WINDOWS\system32\nvinfo.pb
2026-10-28 08:36 - 2026-10-28 08:36 - 000000221 _____ C:\Users\Vlado\Desktop\Resident Evil 5.url
2026-10-28 08:35 - 2026-10-28 08:35 - 000000000 ____D C:\Program Files\XboxService
2026-10-28 08:34 - 2026-10-28 08:34 - 000000000 ____D C:\Program Files\Microsoft GameInput
2026-10-28 08:09 - 2026-10-28 09:00 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2026-10-28 08:09 - 2026-10-28 08:09 - 000002113 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-10-28 08:07 - 2026-10-28 09:00 - 000002716 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-10-28 08:07 - 2026-10-28 08:07 - 000001988 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-10-28 08:01 - 2026-10-28 08:00 - 000330168 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-10-28 11:43 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-10-28 11:41 - 2024-10-29 12:16 - 001615222 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-10-28 11:41 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-10-28 11:40 - 2019-09-05 18:25 - 000000000 ____D C:\Users\Vlado\AppData\Local\D3DSCache
2026-10-28 11:39 - 2026-09-22 18:05 - 000000000 ____D C:\Users\Vlado\AppData\Local\Discord
2026-10-28 11:38 - 2022-11-16 19:51 - 000000000 ____D C:\Users\Vlado\AppData\Roaming\discord
2026-10-28 11:36 - 2024-10-29 12:08 - 000027886 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-10-28 11:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-10-28 11:35 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-10-28 11:35 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-10-28 11:35 - 2022-01-25 13:56 - 000000000 ____D C:\ProgramData\AVG
2026-10-28 11:35 - 2020-07-14 17:08 - 000000000 ____D C:\ProgramData\Avast Software
2026-10-28 11:35 - 2019-09-05 23:46 - 000000000 ____D C:\ProgramData\NVIDIA
2026-10-28 11:35 - 2019-09-05 14:55 - 000000000 __SHD C:\Users\Vlado\IntelGraphicsProfiles
2026-10-28 11:34 - 2024-10-29 12:15 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-10-28 11:34 - 2024-04-01 08:21 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2026-10-28 11:34 - 2020-05-28 10:16 - 000012288 ___SH C:\DumpStack.log.tmp
2026-10-28 11:28 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-10-28 11:26 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-10-28 11:14 - 2026-09-25 11:13 - 000003422 _____ C:\WINDOWS\system32\Tasks\ZoomUpdateTaskUser-S-1-5-21-220631949-4223932415-3592341702-1001
2026-10-28 11:14 - 2024-11-24 11:59 - 000002580 _____ C:\WINDOWS\system32\Tasks\PinnacleStudioUpdater
2026-10-28 11:14 - 2024-11-24 11:59 - 000002502 _____ C:\WINDOWS\system32\Tasks\PinnacleStudio22Notifier
2026-10-28 11:14 - 2024-10-29 12:15 - 000002772 _____ C:\WINDOWS\system32\Tasks\iTop Halloween Task (One-Time)
2026-10-28 11:13 - 2024-10-29 12:15 - 000002706 _____ C:\WINDOWS\system32\Tasks\ASC_PerformanceMonitor
2026-10-28 11:13 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2026-10-28 11:13 - 2022-01-12 13:09 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-10-28 11:13 - 2019-09-19 09:54 - 000000000 ____D C:\Users\Vlado\AppData\Local\CrashDumps
2026-10-28 09:58 - 2025-01-01 13:49 - 000001527 _____ C:\WINDOWS\system32\config\VSMIDK
2026-10-28 09:54 - 2024-10-29 12:08 - 000705288 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-10-28 09:53 - 2024-04-01 17:34 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-28 09:53 - 2024-04-01 17:34 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-28 09:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-10-28 09:48 - 2024-10-29 12:08 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-10-28 09:18 - 2026-09-23 17:23 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2026-10-28 09:15 - 2019-09-05 15:33 - 000000000 ____D C:\Users\Vlado\AppData\Local\NVIDIA
2026-10-28 09:04 - 2026-08-25 09:03 - 000004317 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-10-28 09:00 - 2026-09-02 12:29 - 000003090 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-220631949-4223932415-3592341702-1009
2026-10-28 09:00 - 2026-09-02 12:29 - 000003080 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-220631949-4223932415-3592341702-1001
2026-10-28 09:00 - 2026-09-02 12:29 - 000003066 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-220631949-4223932415-3592341702-1009
2026-10-28 09:00 - 2026-09-02 12:29 - 000003066 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-220631949-4223932415-3592341702-1001
2026-10-28 09:00 - 2026-09-02 10:27 - 000003492 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA{A19ED71D-19DB-44CA-AF8B-C8B7C9BBB89C}
2026-10-28 09:00 - 2026-09-02 10:27 - 000003268 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore{E4DA6F10-49C5-455B-970E-93CBD2E0861D}
2026-10-28 09:00 - 2026-08-25 08:31 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2026-10-28 09:00 - 2026-08-03 09:37 - 000003010 _____ C:\WINDOWS\system32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2026-10-28 09:00 - 2026-01-16 19:10 - 000002402 _____ C:\WINDOWS\system32\Tasks\CCleaner 7 - Skip UAC - S-1-5-21-220631949-4223932415-3592341702-1001
2026-10-28 09:00 - 2025-08-13 14:00 - 000003674 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1594985873
2026-10-28 09:00 - 2024-10-29 12:15 - 000003856 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1594985878
2026-10-28 09:00 - 2024-10-29 12:15 - 000003560 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-10-28 09:00 - 2024-10-29 12:15 - 000003492 _____ C:\WINDOWS\system32\Tasks\LenovoUtility Task
2026-10-28 09:00 - 2024-10-29 12:15 - 000003426 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-10-28 09:00 - 2024-10-29 12:15 - 000003180 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification
2026-10-28 09:00 - 2024-10-29 12:15 - 000002352 _____ C:\WINDOWS\system32\Tasks\RtHDVBg_LENOVO_DOLBYDRAGON
2026-10-28 09:00 - 2024-10-29 12:15 - 000002306 _____ C:\WINDOWS\system32\Tasks\RtHDVBg_Dolby
2026-10-28 09:00 - 2024-10-29 12:15 - 000002302 _____ C:\WINDOWS\system32\Tasks\RTKCPL
2026-10-28 08:58 - 2024-10-29 12:13 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-10-28 08:55 - 2019-09-05 15:54 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-28 08:48 - 2019-09-05 15:54 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-28 08:44 - 2026-08-03 09:49 - 000000000 ____D C:\Program Files\Microsoft Office
2026-10-28 08:36 - 2019-09-13 20:14 - 000000000 ____D C:\Users\Vlado\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2026-10-28 08:36 - 2019-09-05 14:56 - 000000000 ____D C:\Users\Vlado\AppData\Local\NVIDIA Corporation
2026-10-28 08:34 - 2022-10-21 11:51 - 000158152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2026-10-28 08:34 - 2022-10-21 11:51 - 000084424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2026-10-28 08:34 - 2021-11-18 09:00 - 000330184 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2026-10-28 08:34 - 2020-07-04 12:43 - 004671944 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2026-10-28 08:34 - 2020-07-04 12:43 - 000281032 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2026-10-28 08:34 - 2020-07-04 12:43 - 000166344 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2026-10-28 08:24 - 2022-09-14 11:59 - 000000000 ____D C:\Users\Vlado\AppData\Roaming\com.adobe.dunamis
2026-10-28 08:12 - 2026-08-13 09:45 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-10-28 08:12 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-10-28 08:10 - 2020-05-31 09:00 - 000002527 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-10-28 08:09 - 2019-09-05 14:55 - 000000000 ____D C:\Users\Vlado\AppData\Local\Packages
2026-10-28 08:01 - 2026-09-02 10:28 - 000002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2026-10-28 08:01 - 2026-09-02 10:28 - 000002382 _____ C:\Users\Public\Desktop\Brave.lnk
2026-10-28 08:00 - 2026-09-22 18:06 - 000002255 _____ C:\Users\Vlado\Desktop\Discord.lnk
2026-10-28 08:00 - 2026-09-22 18:06 - 000001316 _____ C:\Users\Vlado\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-09-30 10:02 - 2026-08-25 08:32 - 000002081 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast One.lnk
2026-09-30 10:02 - 2026-08-25 08:31 - 000002069 _____ C:\Users\Public\Desktop\Avast One.lnk
2026-09-30 09:58 - 2025-01-08 18:10 - 000002228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-09-30 09:58 - 2025-01-08 18:10 - 000002187 _____ C:\Users\Public\Desktop\Google Chrome.lnk

==================== Files in the root of some directories ========

2021-12-27 19:04 - 2021-12-27 19:04 - 337027456 _____ (SmartBear Software) C:\Users\Vlado\SoapUI-x64-5.6.1.exe
2020-07-14 16:15 - 2020-07-14 16:15 - 547845842 _____ () C:\Users\Vlado\AppData\Roaming\.minecraft.rar
2024-07-28 10:52 - 2024-10-09 10:51 - 000000403 _____ () C:\Users\Vlado\AppData\Roaming\LAPTOP-DIN4F96T.MTBF.txt
2021-05-13 12:24 - 2021-07-05 19:29 - 000002288 _____ () C:\Users\Vlado\AppData\Roaming\plugin_scan_state_VST2_x32.scan
2021-05-13 12:24 - 2021-07-05 19:29 - 000005434 _____ () C:\Users\Vlado\AppData\Roaming\plugin_scan_state_VST2_x64.scan
2021-05-13 12:24 - 2021-07-05 19:29 - 000000059 _____ () C:\Users\Vlado\AppData\Roaming\plugin_scan_state_VST3_x32.scan
2021-05-13 12:24 - 2021-07-05 19:29 - 000000059 _____ () C:\Users\Vlado\AppData\Roaming\plugin_scan_state_VST3_x64.scan
2021-07-10 13:19 - 2021-07-10 13:19 - 000000093 _____ () C:\Users\Vlado\AppData\Local\fusioncache.dat
2024-06-14 17:12 - 2024-06-14 17:23 - 000007874 _____ () C:\Users\Vlado\AppData\Local\krita-sysinfo.log
2024-06-14 17:12 - 2024-06-14 17:47 - 000004142 _____ () C:\Users\Vlado\AppData\Local\krita.log
2024-06-14 17:47 - 2024-06-14 17:47 - 000000039 _____ () C:\Users\Vlado\AppData\Local\kritadisplayrc
2024-06-14 17:12 - 2024-06-14 17:47 - 000018145 _____ () C:\Users\Vlado\AppData\Local\kritarc
2026-08-25 08:41 - 2026-08-25 08:41 - 000000000 _____ () C:\Users\Vlado\AppData\Local\{1577EBD1-94AE-4ACF-94F2-F178C540AE9B}

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Zdravím!
Abych mohl provést kompkexní kontrolu, potřebuji vidět ještě log Addition. Najdete ho na ploše v souboru addition.txt. Děkuji.

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-10-2026
Ran by Vlado (28-10-2026 11:44:59)
Running from C:\Users\Vlado\Desktop
Microsoft Windows 11 Home Version 26H2 26300.9711 (X64) (2024-10-29 11:15:41)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-220631949-4223932415-3592341702-500 - Administrators - Disabled)
ASPNET (DisplayName: A**.*** ******* ******t) (S-1-5-21-220631949-4223932415-3592341702-1007 - Limited - Enabled)
DefaultAccount (S-1-5-21-220631949-4223932415-3592341702-503 - Limited - Disabled)
Guest (S-1-5-21-220631949-4223932415-3592341702-501 - Limited - Disabled)
Vlado (DisplayName: V*****í* ***č*š*n) (S-1-5-21-220631949-4223932415-3592341702-1001 - Administrators - Enabled) [MS Account] => C:\Users\Vlado
WDAGUtilityAccount (S-1-5-21-220631949-4223932415-3592341702-504 - Limited - Disabled)
WsiAccount (S-1-5-21-220631949-4223932415-3592341702-1009 - Limited - Disabled) => C:\Users\WsiAccount

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Spybot - Search and Destroy (Disabled - Out of date) {F77C7796-45C4-531E-0DAE-B4A8229B11C8}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: Panda Dome (Enabled - Up to date) {CF440CD9-5435-10B1-04E0-7768B6F10320}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

4K Video Downloader (HKLM\...\{94360C20-3425-4BB1-9A75-03A4E69194F8}) (Version: 4.13.4.3930 - Open Media LLC)
4K Video Downloader 4.9 (HKLM\...\{05A331A8-339A-4FE3-94B7-59EE90797A84}) (Version: 4.9.2.3082 - Open Media LLC)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1051-1033-7760-BC15014EA700}) (Version: 26.002.22031 - Adobe)
Adobe Flash Player ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 9.0.124.0 - Adobe Systems Incorporated)
Adobe Photoshop 2021 (HKLM-x32\...\PHSP_22_1_1) (Version: 22.1.1.138 - Adobe Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601180}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Aplikácie Microsoft 365 pre veľké organizácie - sk-sk (HKLM\...\O365ProPlusRetail - sk-sk) (Version: 16.0.20527.20088 - Microsoft Corporation)
Aplikácie Microsoft 365 pre veľké organizácie - sk-sk.proof (HKLM\...\O365ProPlusRetail - sk-sk.proof) (Version: 16.0.20527.20088 - Microsoft Corporation)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach)
Audacity 4.0 (HKLM\...\{8F569665-8D77-4033-9834-E956912C967B}) (Version: 4.0.0.262451524 - Audacity)
Avast One (HKLM\...\Avast Suite) (Version: 26.10.11201.1041 - Gen Digital Inc.)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
AVG Driver Updater (HKLM\...\AVG Driver Updater) (Version: 26.9.6768.16450 - Gen Digital Inc.)
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 156.1.98.60 - Autori prehliadača Brave)
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.13.1573.2020 - Piriform)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1990.6 - Piriform Software) Hidden
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 156.0.4314.50 - Microsoft Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\{33DB43C3-E6BE-40AE-AECF-56E9F03E3B4D}) (Version: 23.0.362 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{C697E994-12BE-4CF3-B9BF-B3FD1659E717}) (Version: 23.0.362 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM (x64) (HKLM\...\{EF56927C-ED92-41B1-8B88-FA225384E2A4}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content BR (x64) (HKLM\...\{3D6825D1-5843-4585-B915-A9F234554C2C}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content CS (x64) (HKLM\...\{CCBA3120-A726-4C64-8986-AF5B6C519FE7}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content CT (x64) (HKLM\...\{EC73C33E-4349-45E7-A08C-8566DF799EC5}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content CZ (x64) (HKLM\...\{289B6A1B-EA8B-4FBE-9CF4-A0FE4E91DD37}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content DE (x64) (HKLM\...\{4F09DBC6-B00A-4E83-886D-94EFAD76A36C}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content EN (x64) (HKLM\...\{DDD18F44-5B1B-44FB-A604-1A4EBDB65FC9}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content ES (x64) (HKLM\...\{176AC6B0-1B9D-4257-94DD-02B006CBC779}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content FR (x64) (HKLM\...\{D6DDBE6D-E2D0-48C1-9DAC-5DB93DA8DA83}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content IT (x64) (HKLM\...\{ED790B20-D67B-465C-B3B9-768547F5E389}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content JP (x64) (HKLM\...\{243F3C09-43FC-447C-98AF-E640955397BB}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content NL (x64) (HKLM\...\{AA0464E0-EBA2-4879-A116-D7FFBC41267E}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content PL (x64) (HKLM\...\{7E5076C4-E945-49BA-AFC6-01577CD06ABA}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content RU (x64) (HKLM\...\{74BEF304-6B74-4196-A4C4-63C6D4BECCB0}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content SV (x64) (HKLM\...\{A397DC31-3A23-4157-8881-A5E4957ABB19}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - IPM Content TR (x64) (HKLM\...\{3B5FBE0B-541B-47FB-89EC-20ECA3E8D97A}) (Version: 23.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2021 - Writing Tools (x64) (HKLM\...\{31CD96CF-4A33-4535-A6CC-F419CEAEFD70}) (Version: 23.0 - Corel Corporation) Hidden
CPUID CPU-Z 3.01 (HKLM\...\CPUID CPU-Z_is1) (Version: 3.01 - CPUID, Inc.)
Discord (HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\Discord) (Version: 1.0.9259 - Discord Inc.)
Dolby Audio X2 Windows API SDK (HKLM\...\{8738A898-221B-4279-BC87-FEF7938022C1}) (Version: 0.8.8.87 - Dolby Laboratories, Inc.)
Dolby Audio X2 Windows APP (HKLM\...\{9207D68E-666A-49C7-A900-9F5B2FF289E4}) (Version: 0.8.0.71 - Dolby Laboratories, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
FL Studio 20 (HKLM-x32\...\FL Studio 20) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
Gemini (HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\Gemini) (Version: 1.16.0 - Google LLC)
Google Chrome (HKLM\...\{750632BA-2593-3862-A3AE-0C9B722EC4DB}) (Version: 154.0.8037.59 - Google LLC)
Intel(R) Chipset Device Software (HKLM\...\{94E05108-3E4E-4F2E-AC5F-33A1B22B779C}) (Version: 10.1.1.44 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{17408817-d415-4768-a160-ae6d46d6bdb0}) (Version: 10.1.1.44 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1054 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{7B3B60EB-197B-4B06-ADFF-D0B50E755D4F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{EC465D35-92DC-4DAE-9EA8-01215688F709}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{E5B5A486-C7F5-429C-9324-13835620F2FD}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{E9B9A1A5-6398-4C99-8FDE-10794F6505C5}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{246c6cc0-9810-4728-9a29-28474de2eec5}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Java SE Development Kit 8 Update 341 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0180341}) (Version: 8.0.3410.10 - Oracle Corporation)
Java(TM) SE Development Kit 14.0.2 (64-bit) (HKLM\...\{6D7FE298-9878-53C8-801B-76A251D18BB2}) (Version: 14.0.2.0 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Lenovo App Explorer (HKU\S-1-5-21-220631949-4223932415-3592341702-1009\...\Host App Service) (Version: 0.273.2.343 - SweetLabs for Lenovo) <==== ATTENTION
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 5.1.2609.9 - Lenovo Group Ltd.)
Microsoft .NET Core Host - 3.1.32 (x64) (HKLM\...\{8A8E3A04-83BC-4CDE-9259-893B666C1AB1}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.32 (x64) (HKLM\...\{ABC6B3C2-1A8D-4C5E-AC16-C2AE44F02743}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.32 (x64) (HKLM\...\{A741B803-3F0E-4684-81EF-FC128D15A92C}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.32 (x64) (HKLM-x32\...\{784973c8-d618-4ac8-97ed-1fd52c5bdf2f}) (Version: 3.1.32.31915 - Microsoft Corporation)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft 365 Apps for enterprise - en-us (HKLM\...\O365ProPlusRetail - en-us) (Version: 16.0.20527.20088 - Microsoft Corporation)
Microsoft 365 Apps for enterprise - en-us.proof (HKLM\...\O365ProPlusRetail - en-us.proof) (Version: 16.0.20527.20088 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.10 - Shared Framework (HKLM-x32\...\{6efe3294-03d8-4977-9c67-9f57ab075130}) (Version: 3.1.10.20520 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.10 Shared Framework (x64) (HKLM\...\{7BEAA207-E3EB-3948-BBB3-336B04D8A2F1}) (Version: 3.1.10.20520 - Microsoft Corporation) Hidden
Microsoft Bing Service (HKLM-x32\...\{27990F25-A90A-4CE5-868E-1A1BB70A58EE}) (Version: 2.0.0.7 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 156.0.4314.50 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 156.0.4314.50 - Microsoft Corporation) Hidden
Microsoft GameInput (HKLM\...\{0DA71DCF-F605-435D-9B16-051DFBE7CB76}) (Version: 4.0.302.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft ODBC Driver 17 for SQL Server (HKLM\...\{CBA9B46D-5C8E-46F9-94B4-7024400EDE52}) (Version: 17.10.3.1 - Microsoft Corporation)
Microsoft OLE DB Driver for SQL Server (HKLM\...\{CD711320-8704-46EF-8B09-0F40BD2A4C2F}) (Version: 18.6.5.0 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.189.0928.0009 - Microsoft Corporation)
Microsoft Project - en-us (HKLM\...\ProjectProRetail - en-us) (Version: 16.0.20527.20088 - Microsoft Corporation)
Microsoft Project - en-us.proof (HKLM\...\ProjectProRetail - en-us.proof) (Version: 16.0.20527.20088 - Microsoft Corporation)
Microsoft Project - sk-sk (HKLM\...\ProjectProRetail - sk-sk) (Version: 16.0.20527.20088 - Microsoft Corporation)
Microsoft Project - sk-sk.proof (HKLM\...\ProjectProRetail - sk-sk.proof) (Version: 16.0.20527.20088 - Microsoft Corporation)
Microsoft SQL Server 2019 Setup (English) (HKLM\...\{17DCED0E-5B27-453A-B2B4-E487B869B28A}) (Version: 15.0.4013.40 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 x64 ENU (HKLM\...\{8424B163-D1E0-48B7-88A2-C7A61767B3D7}) (Version: 4.0.8482.1 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{D3531D7A-B6FA-44A5-A024-E2A14F325F90}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{985F7F32-5BE4-4CDA-9582-F7AEA40D1974}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visio - en-us (HKLM\...\VisioProRetail - en-us) (Version: 16.0.20527.20088 - Microsoft Corporation)
Microsoft Visio - en-us.proof (HKLM\...\VisioProRetail - en-us.proof) (Version: 16.0.20527.20088 - Microsoft Corporation)
Microsoft Visio - sk-sk (HKLM\...\VisioProRetail - sk-sk) (Version: 16.0.20527.20088 - Microsoft Corporation)
Microsoft Visio - sk-sk.proof (HKLM\...\VisioProRetail - sk-sk.proof) (Version: 16.0.20527.20088 - Microsoft Corporation)
Microsoft Visual Basic for Applications 7.1 (x64) (HKLM\...\{90120064-0070-0000-0000-4000000FF1CE}) (Version: 7.1.00.00 - Microsoft Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) English (HKLM\...\{90F60409-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2019 (HKLM-x32\...\{f3fbabb4-bcfb-45eb-8fff-9b784fd68c38}) (Version: 16.0.31110 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2019 x64 Hosting Support (HKLM\...\{8E7A3713-551D-333A-9271-10EF4D77A80F}) (Version: 16.0.31110 - Microsoft Corporation) Hidden
Microsoft Visual Studio Tools for Applications 2019 x86 Hosting Support (HKLM-x32\...\{E7A0CD34-1F9B-3496-ADB3-2F180D302F6A}) (Version: 16.0.31110 - Microsoft Corporation) Hidden
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 147.0 - Mozilla)
Mozilla Thunderbird (x64 sk) (HKLM\...\Mozilla Thunderbird 156.0 (x64 sk)) (Version: 156.0 - Mozilla)
MSVCRT Redists (HKLM\...\{31BAD3F0-5F63-11EA-AD9D-50E549394757}) (Version: 1.0 - MAGIX Computer Products Intl. Co.) Hidden
MSVCRT Redists (HKLM\...\{38F580C0-EA75-11ED-A5E3-00155D0BF153}) (Version: 1.0 - MAGIX Computer Products Intl. Co.) Hidden
MSVCRT Redists (HKLM\...\{B10F7861-5E92-11EC-9F1B-309C23D6865A}) (Version: 1.0 - MAGIX Computer Products Intl. Co.) Hidden
MSVCRT Redists (HKLM\...\{E83D6FA1-B27C-11E9-B0DB-A5146957F833}) (Version: 1.0 - MAGIX Computer Products Intl. Co.) Hidden
Navigation Updater (HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\{5f5b6849-ecd4-465e-a402-8678ca45b8f5}) (Version: 2.2.4.3 - HYUNDAI MOTOR GROUP)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.9 - Notepad++ Team)
NVIDIA App 11.0.5.420 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.5.420 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.5.11504.36206172 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.5.11504.36206172 - NVIDIA Corporation)
NVIDIA GeForce NOW 2.0.57.129 (HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GeforceNOW) (Version: 2.0.57.129 - NVIDIA Corporation)
NVIDIA Grafický ovládač 582.78 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 582.78 - NVIDIA Corporation)
NVIDIA Softvér systému s podporou technológie PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20527.20016 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Pinnacle Script (HKLM\...\{FEE78E4C-66AA-4BB1-BFFF-E89CA607AC66}) (Version: 1.0 - Corel Corporation) Hidden
Rapid Environment Editor verze 9.2.0.937 (HKLM\...\{34AD4E52-723F-4377-9CDD-BCBD892264FA}_is1) (Version: 9.2.0.937 - Oleg Danilov)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.109.3031 - Rockstar Games)
Rockstar Games SDK (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.4.0.240 - Rockstar Games)
SOUND FORGE Audio Studio 15.0 (x64) (HKLM\...\{B0095300-5E92-11EC-A374-309C23D6865A}) (Version: 15.0.121 - MAGIX)
SOUND FORGE Pro 14.0 (x64) (HKLM\...\{3130BC61-5F63-11EA-9E16-50E549394757}) (Version: 14.0.31 - MAGIX)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TLauncher (HKLM-x32\...\TLauncher) (Version: 2.9 - TLauncher Inc.)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.22a - Ghisler Software GmbH)
UltraISO Premium V9.7 (HKLM-x32\...\UltraISO_is1) (Version: - )
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{3BAE4496-6F6C-4330-A8AA-B93D3D346FA5}) (Version: 2.53.0.0 - Microsoft Corporation)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{85C69797-7336-4E83-8D97-32A7C8465A3B}) (Version: 8.94.0.0 - Microsoft Corporation)
VEGAS Deep Learning Models (HKLM\...\{2221E177-782E-41B2-B71B-D720C2983D18}) (Version: 19.3.0.0 - MAGIX Software GmbH) Hidden
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.5.3.0 - Elaborate Bytes)
Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - Intel Corporation Inc.) Hidden
Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1-2) (Version: 1.0.54.1 - Intel Corporation Inc.)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-5) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.92.0 - Winamp SA)
Windows Kontrola stavu počítača (HKLM\...\{CB40616B-E7A1-472C-9407-7A3BF0EE0D0E}) (Version: 3.9.2402.14001 - Microsoft Corporation)
WinRAR 5.80 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.80.0 - win.rar GmbH)
Xbox Service (HKLM\...\{81F706B1-AB0A-4D88-B2DB-E5BAF88C87C6}) (Version: 4.0.300.0 - Microsoft Corporation)
Zoner Photo Studio 13 FREE (HKLM-x32\...\ZonerPhotoStudio13_EN_is1) (Version: 13.0.1.7 - ZONER software)
Zoom Workplace (HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\ZoomUMX) (Version: 7.1.9 (48550) - Zoom Communications, Inc.)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3624.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-29] ()
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-29] ()
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3912.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-29] ()
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-10-28] ()
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.27.12250.0_x64__rz1tebttyb220 [2026-09-24] (Dolby Laboratories)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_166.2.1118.0_x64__v10z8vjag6ke6 [2026-09-24] (HP Inc.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.7.18.0_x64__5grkq8ppsgwt4 [2025-05-20] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2606.12.0_x64__k1h2ywk1493x8 [2026-08-13] (LENOVO INC.)
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-10-28] ()
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-09-05] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-09-05] (Microsoft Corporation) [MS Ad]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-10-02] (Microsoft Corp.)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-10-28] ()
Microsoft.Photos.MediaEngineDLC -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2024-10-02] (Microsoft Corporation)
MP3Tube - YouTube to MP3 -> C:\Program Files\WindowsApps\53058betterapp.YouTubetomp3_1.0.4.0_x64__90ct3cgs7yy6a [2023-07-12] (better app)
Notepad++ -> C:\Program Files\Notepad++\contextMenu [2026-01-26] (Notepad++)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-12-02] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-10-28] ()
Radio Slovakia – Radio Slovakia FM & AM: Listen Live Slovak Radio Stations Online + Music and Talk Stations -> C:\Program Files\WindowsApps\17492EsmeraldaDonayre.RadioSlovakiaRadioSlovakiaFM_1.0.0.0_x64__mrc976f6ze7aj [2024-03-30] (Esmeralda Donayre) [MS Ad]
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0 [2026-09-24] (Spotify AB) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.5.1.0_x64__8wekyb3d8bbwe [2026-09-30] (Microsoft Corp.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{00625e76-9c49-4b82-bd6b-f8be6e3452c0}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{007DB707-E2B9-47C6-BA29-F1BE519DB00C}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\Vlado\AppData\Local\Google\GoogleUpdater\157.0.8089.0\updater.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{547E9AEF-8043-5D26-879F-01E7664192DC}\localserver32 -> C:\Users\Vlado\AppData\Local\Google\GoogleUpdater\157.0.8089.0\updater.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{6DDCE70D-A4AE-4E97-908C-BE7B2DB750AD}\localserver32 -> C:\Users\Vlado\AppData\Local\Google\GoogleUpdater\157.0.8089.0\updater.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{6E1E5C99-BC66-5838-926C-B47FC5A1B44A}\localserver32 -> C:\Users\Vlado\AppData\Local\Google\GoogleUpdater\157.0.8089.0\updater.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{975954EF-4CD4-44DC-9061-E69E0BAC4C7E}\localserver32 -> C:\Users\Vlado\AppData\Local\Discord\app-1.0.9265\Discord.exe (Discord Inc. -> Discord Inc.)
CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{D0A65C2C-28C0-4A41-A0F6-5DBC9EB07CAE}\localserver32 -> C:\Users\Vlado\AppData\Local\Discord\app-1.0.9257\Discord.exe => No File
CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> "C:\Users\Vlado\AppData\Local\Microsoft\Teams\current\Teams.exe" --toast => No File
CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-11-25] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-11-25] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-11-25] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-11-25] (Adobe Inc. -> )
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [Incinerator] -> {E8215BEA-3290-4C73-964B-75502B9B41B2} => -> No File
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> No File
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> No File
ContextMenuHandlers1: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> No File
ContextMenuHandlers2: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> No File
ContextMenuHandlers2: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> No File
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2015-10-08] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers2: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> No File
ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> No File
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [Incinerator] -> {E8215BEA-3290-4C73-964B-75502B9B41B2} => -> No File
ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2015-10-08] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.189.0928.0009\FileSyncShell64.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8c1fc948b5a01c52\igfxDTCM.dll [2019-01-21] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_fc2271e4849237c2\nvshext.dll [2026-09-21] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-11-25] (Adobe Inc. -> )
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-10-28] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> No File
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> No File
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2015-10-08] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2026-08-03 09:36 - 2026-08-03 09:36 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\PlugIns\NVIDIA App\MessageBusRouter.dll] C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\plugins\NVIDIA Overlay\MessageBusRouter.dll
2026-08-03 09:36 - 2026-08-03 09:36 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:4FC01C57 [286]

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-220631949-4223932415-3592341702-1001\Software\Classes\.scr: AutoCADScriptFile => C:\WINDOWS\system32\notepad.exe "%1"

==================== Internet Explorer (Whitelisted) =============

HKU\S-1-5-21-220631949-4223932415-3592341702-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo17win10.msn.com/?pc=LCTE
SearchScopes: HKU\S-1-5-21-220631949-4223932415-3592341702-1001 -> DefaultScope {A639F46E-4173-448B-8D8A-A97237CB3569} URL =
SearchScopes: HKU\S-1-5-21-220631949-4223932415-3592341702-1001 -> {A639F46E-4173-448B-8D8A-A97237CB3569} URL =
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-10-28] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 7940 more sites.

IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\123simsen.com -> www.123simsen.com

There are 7940 more sites.


==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-09-29 14:46 - 2025-04-30 18:26 - 000453907 __RSH C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost
0.0.0.0 apps.corel.com
0.0.0.0 mc.corel.com
0.0.0.0 origin-mc.corel.com
0.0.0.0 iws.corel.com
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info

There are 15608 more lines.


2025-04-30 18:48 - 2026-02-05 08:41 - 000000445 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.223.100 LAPTOP-DIN4F96T.mshome.net # 2031 2 2 4 7 41 51 689

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.0.1
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rtots640x64.sys
Sieťové pripojenie Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
Wi-Fi: Intel(R) Dual Band Wireless-AC 3165 -> Netwtw04.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA app\NvDLISR;C:\Program Files\dotnet\
HKCU\Environment\\Path -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Azure Data Studio\bin;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA app\NvDLISR;C:\Program Files\dotnet\;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Users\Vlado\AppData\Local\Microsoft\WindowsApps
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Vlado\Desktop\FOTKY\kristus.jpg
HKU\S-1-5-21-220631949-4223932415-3592341702-1009\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run32: => "YouCam Service9"
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\StartupApproved\Run: => "BingSvc"
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\StartupApproved\Run: => "Opera Browser Assistant"
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\StartupApproved\Run: => "Opera Stable"
HKU\S-1-5-21-220631949-4223932415-3592341702-1001\...\StartupApproved\Run: => "LenovoVantage"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{AB5B101E-91CF-4AE0-8E1D-FE927A52764C}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto IV\GTAIV\PlayGTAIV.exe => No File
FirewallRules: [{D484B689-D8F7-4794-8992-6EACC7A1A6E4}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto IV\GTAIV\PlayGTAIV.exe => No File
FirewallRules: [TCP Query User{0F2A41EF-7671-4892-80D4-03F560A2680C}F:\program files (x86)\steam\steam.exe] => (Allow) F:\program files (x86)\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [UDP Query User{CBBACBBD-FB24-4EAF-BC02-163FE55D9252}F:\program files (x86)\steam\steam.exe] => (Allow) F:\program files (x86)\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{0DAC2EAF-5E32-422F-BCB4-7662CD3C3E1E}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{65D73FA3-A23A-4CC7-A3CF-050BEB845B03}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{129C36A6-BF89-4806-984A-0C42D8DCEC75}] => (Allow) C:\Users\Vlado\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [{D72E3C61-3E0F-4FF2-A80D-A7BFE604252C}] => (Allow) D:\Program Files\Nox\bin\Nox.exe (Nox Limited -> Duodian Technology Co. Ltd.)
FirewallRules: [{D28F81B7-3973-43EE-AB21-5BEF994E6FAD}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe (Nox Limited -> Nox Limited Corporation)
FirewallRules: [{77026AD7-4A43-4005-8D4F-740A5A985A56}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe => No File
FirewallRules: [{4B62D265-3CA7-4BB5-B04D-34315B9E8280}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe => No File
FirewallRules: [{093296D3-BCCA-45AD-B922-ECA539F98223}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{B8D8B38B-2BC4-485B-9697-68C3CB60FBD6}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{31382FF5-AA18-4767-8CA2-4C851605D96B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{A1D85553-3BB9-4B86-90B5-35DAF0C4DFD5}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [TCP Query User{8285F6E4-802C-4B96-B5E9-5A3D542BAA5B}C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe => No File
FirewallRules: [UDP Query User{EBEB6909-B220-4511-AB84-802B13C7F4DF}C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe => No File
FirewallRules: [TCP Query User{8B2FB1D1-F1B8-4C08-8A63-6F4A75A13FE5}C:\users\vlado\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\vlado\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe => No File
FirewallRules: [UDP Query User{425446B0-25A0-41AD-A343-7A4EF44DEB52}C:\users\vlado\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\vlado\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe => No File
FirewallRules: [TCP Query User{7C5020CF-5C9F-4A5C-A832-37387D362990}C:\users\vlado\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe] => (Allow) C:\users\vlado\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe => No File
FirewallRules: [UDP Query User{861B4181-6EB5-4C3F-BC14-2AB0FAD8C9E7}C:\users\vlado\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe] => (Allow) C:\users\vlado\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe => No File
FirewallRules: [TCP Query User{04794988-9271-4701-9F30-C576535434D4}C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe => No File
FirewallRules: [UDP Query User{666786ED-0A24-4EF0-9EA4-F82E262B4E7A}C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe => No File
FirewallRules: [{BC9CB413-8821-48E9-8E47-A3C3A06473CF}] => (Allow) C:\Users\Vlado\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [TCP Query User{3A4D772A-1F1D-4769-A70F-5412BA153EBE}F:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) F:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [UDP Query User{FF2AA529-2C7F-4BB6-86A2-72E0611F4C33}F:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) F:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [{D8AE9111-AB65-4940-8428-EE02D84DF6A1}] => (Allow) C:\Users\Vlado\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [{1E5C9872-853C-48E0-8E6B-22C20EED871B}] => (Allow) C:\Users\Vlado\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [{13DD7566-1C20-44BB-9366-4DD1DD124050}] => (Allow) C:\Users\Vlado\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{865CB9E0-44E9-4B69-B16D-BE036E13186C}] => (Allow) C:\Users\Vlado\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{3493CC7F-CF8F-4E46-8DF5-3E2891F30C9A}] => (Allow) LPort=3306
FirewallRules: [{6F7A5E87-C8E6-4B79-98DE-E435D5CDE5B8}] => (Allow) LPort=33060
FirewallRules: [{A645E1B1-C00B-4AE0-8BA0-D27E3C28CAC5}] => (Allow) C:\Users\Vlado\AppData\Local\Programs\Opera\opera.exe => No File
FirewallRules: [{C4D22D74-6EDF-4CB6-A0F3-24242DEB74B2}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{7C75F5CB-846A-4EDB-937D-674712A41B64}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{E730C3AE-9E11-4290-8670-F14B6F64B751}] => (Allow) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe => No File
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4BAE0CAB-BB41-4DDD-8E5B-CCC5E750DCA8}] => (Allow) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
FirewallRules: [{6DE62257-7231-48FB-A1E9-C86E2571E653}] => (Allow) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
FirewallRules: [{A8D2D7A5-1E7C-4B21-8469-0E2144900553}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3ED05FF0-F3F4-455E-90B5-D399D195C9C4}] => (Allow) C:\Program Files\Avast Software\Suite\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{E00BECCE-EF27-4189-B3B0-5155478E24EF}] => (Allow) C:\Program Files\Avast Software\Suite\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{3678A64C-BF53-4A01-B203-198DD8959809}] => (Allow) C:\Program Files\Avast Software\Suite\bgapp.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{BF80A463-DED4-4736-A5FD-AE673492D695}] => (Allow) C:\Program Files\Avast Software\Suite\bgapp.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{777D1EB9-A5E2-4C72-B997-4F695967D63F}] => (Block) C:\Program Files\Avast Software\Suite\bgscraper.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{ED477AA4-CC80-4194-B088-9EE0B3712AF5}] => (Block) C:\Program Files\Avast Software\Suite\bgscraper.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [TCP Query User{E240316E-2C29-4F0E-8934-4B9291DA4675}C:\program files\nvidia corporation\nvidia app\cef\nvidia overlay.exe] => (Block) C:\program files\nvidia corporation\nvidia app\cef\nvidia overlay.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [UDP Query User{8BF67097-322B-4ED2-A154-40C0E5A0067F}C:\program files\nvidia corporation\nvidia app\cef\nvidia overlay.exe] => (Block) C:\program files\nvidia corporation\nvidia app\cef\nvidia overlay.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{5486F369-F1D2-4427-A469-47EBA7ED530C}C:\program files\nvidia corporation\nvidia app\cef\nvidia overlay.exe] => (Allow) C:\program files\nvidia corporation\nvidia app\cef\nvidia overlay.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [UDP Query User{6AFB2200-F865-41A4-B57C-62B39D5C7E5E}C:\program files\nvidia corporation\nvidia app\cef\nvidia overlay.exe] => (Allow) C:\program files\nvidia corporation\nvidia app\cef\nvidia overlay.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{ED58EE58-4D02-4D57-B172-ECB685CEDB38}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Half-Life\hl.exe (Valve Corp. -> Valve)
FirewallRules: [{88A1D8AE-F60F-4A0C-9E80-BCBD4D39DA9C}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Half-Life\hl.exe (Valve Corp. -> Valve)
FirewallRules: [{C4643BEB-8209-437E-992C-E045EDC4B72D}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe () [File not signed]
FirewallRules: [{A705E2CF-ACE7-4A8A-9303-4EC23F94AC66}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe () [File not signed]
FirewallRules: [{DECE97A3-C260-4FAC-967A-FA3317381504}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Mafia\Mafia\Game.exe (Illusion Softworks) [File not signed]
FirewallRules: [{F7A522F1-4C32-4D9B-87D5-B1282BDEA7F9}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Mafia\Mafia\Game.exe (Illusion Softworks) [File not signed]
FirewallRules: [{DF045A36-B948-4714-9C75-4D98705D1628}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Mafia\Mafia\Setup.exe () [File not signed]
FirewallRules: [{5DFD4A0E-8FA7-48E7-AF64-E093FD79C335}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Mafia\Mafia\Setup.exe () [File not signed]
FirewallRules: [{FE3EB76E-A43E-4F30-8DDB-EC85040C221C}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Max Payne 3\Max Payne 3\PlayMaxPayne3.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{74D36564-6331-4414-B965-8E12B0312CB2}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Max Payne 3\Max Payne 3\PlayMaxPayne3.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{DA0FBAE0-AFF2-4C20-A395-ED5163ED4E80}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\tf_win64.exe (Valve Corp. -> )
FirewallRules: [{0392EA51-E9F2-465D-81E3-7DCCAA18EBEA}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\tf_win64.exe (Valve Corp. -> )
FirewallRules: [{492BAEAD-54A5-459B-B0F6-0C7DB1F7422A}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\SWAT Commander - Prologue\SWATCommanderPrologue.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{DDE07DBA-1CEC-469C-ACFD-FDF7E9075F2C}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\SWAT Commander - Prologue\SWATCommanderPrologue.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{0F2C31BF-DB9D-4905-8395-4E31E7289953}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{99DF28ED-A524-479A-8864-A1B5D41808B1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{844EC245-EC37-4F08-BF6F-A746489809C1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{ED152C46-34B8-4772-A3C4-B11D6F6C7ADC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{60830F21-5992-4B58-867D-217E941D2DAE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{36DE729B-2E35-455D-9687-F85AD73DB255}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A05BA421-6863-4019-9BA3-FABD5EF2C71F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7F64E8C3-8711-4914-8A50-F3B665948448}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{EE9328F8-B852-4E7C-9A2D-43F322720FB1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F34A8212-2E03-453F-8BC9-3D0ED37557FA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F113657C-D04A-410F-8B69-F244AEED882F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CA4FBDDB-5692-4540-9C74-42F521AC6CC9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BFB4AEF1-7B2E-43D5-9C7D-DB642F55C994}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.301.234.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{715A10B2-3C8E-4408-A25D-C8DACBB947DE}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot.exe => No File
FirewallRules: [{48E01704-ADE3-4638-8916-9927665E7C78}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{383B18A1-3AA4-4F92-A372-9A3495777F94}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [{3591C0B5-8BE1-4858-A9EB-43C2FD6CE4EE}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\copilotapp.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{568634C0-46BE-4D86-B5E8-6875DD9C6C2B}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{E04C7D28-BEBA-4258-A862-2883D2BA4B6D}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{9C8DBAE2-D334-4057-A632-7558652C552D}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{44783929-9D8A-4F68-A3D5-D85FC7946DBE}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{994079BA-F82F-40FC-ACE2-156C97075E3D}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Resident Evil 5\Launcher.exe () [File not signed]
FirewallRules: [{96A953E1-1016-4587-92E5-3BFA344CD88B}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Resident Evil 5\Launcher.exe () [File not signed]

==================== Restore Points =========================

28-10-2026 11:24:42 Windows Update

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (10/28/2026 08:49:17 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 28204. Message ID: [0x2509].

Error: (10/28/2026 07:58:37 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4110) (User: )
Description: Pridanie certifikátu do priestoru na ukladanie nezávislých koreňových certifikačných autorít zlyhalo s chybou: Cannot find object or property.

Error: (09/25/2026 04:41:01 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 28680. Message ID: [0x2509].

Error: (09/24/2026 10:55:09 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1000) (User: NT AUTHORITY)
Description: Access to performance data was denied to user "SYSTEM" (value from GetUserName() for the running thread) as attempted from module "C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe" (value from GetModuleFileName() for the binary that issued the query).

Error: (09/23/2026 07:11:05 PM) (Source: Application Error) (EventID: 1000) (User: LAPTOP-DIN4F96T)
Description: Názov chybnej aplikácie: GetHelp.exe, verzia: 10.2409.2608.4002, časová značka: 0x6a300000
Názov modulu s poruchou: GetHelp.dll, verzia: 10.2409.2608.4002, časová značka: 0x95ff0179
Kód výnimky: 0x80131623
Odchýlka poruchy: 0x00000000000bab77
Id poruchového procesu: 0x5b78
Čas spustenia poruchovej aplikácie: 0x1dd4b86cb00664c
Cesta k poruchovej aplikácii: C:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.42162.0_x64__8wekyb3d8bbwe\GetHelp.exe
Cesta k poruchovému modulu: C:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.42162.0_x64__8wekyb3d8bbwe\GetHelp.dll
Id správy: dfc1ac26-91fb-49ab-bbd6-c1745bf43c38
Plný názov chybného balíka: Microsoft.GetHelp_10.2409.42162.0_x64__8wekyb3d8bbwe
Identifikátor poruchovej aplikácie vzťahujúci sa na balík: App

Error: (09/23/2026 07:11:04 PM) (Source: .NET Runtime) (EventID: 1025) (User: )
Description: Application: GetHelp.exe
CoreCLR Version: 9.0.1826.31522
.NET Version: 9.0.18
Description: The application requested process termination through System.Environment.FailFast.
Message: No usable IP address!
Stack:
at System.Environment.FailFast(System.Runtime.CompilerServices.StackCrawlMarkHandle, System.String, System.Runtime.CompilerServices.ObjectHandleOnStack, System.String)
at System.Environment.FailFast(System.Threading.StackCrawlMark ByRef, System.String, System.Exception, System.String)
at System.Environment.FailFast(System.String)
at GetHelpApp.NetworkDiagnostics.DiagnosticsClient.NetworkDiagnosticsClient.DiagnoseNoPreferredAddress(NativeNetworkDiagnosticsWRC.InterfaceDiagnosticsData, GetHelpApp.NetworkDiagnostics.DiagnosticsClient.DiagnosticsInformation ByRef)
at GetHelpApp.NetworkDiagnostics.DiagnosticsClient.NetworkDiagnosticsClient.InterfaceL3Diagnosis(NativeNetworkDiagnosticsWRC.InterfaceDiagnosticsData, GetHelpApp.NetworkDiagnostics.DiagnosticsClient.DiagnosticsInformation ByRef, System.Collections.Generic.List`1<GetHelpApp.NetworkDiagnostics.ActiveDiagnostics.Common.ActiveTestResult>)
at GetHelpApp.NetworkDiagnostics.DiagnosticsClient.NetworkDiagnosticsClient.HandleActiveTestsCompletion(GetHelpApp.NetworkDiagnostics.ActiveDiagnostics.Common.ActiveTestRequestMetadata, GetHelpApp.NetworkDiagnostics.ActiveDiagnostics.Common.ActiveTestResultMetadata)
at GetHelpApp.NetworkDiagnostics.ActiveDiagnostics.ActiveTestManager+<ProcessRequestedActionCallBack>d__10.MoveNext()
at System.Runtime.CompilerServices.AsyncTaskMethodBuilder`1+AsyncStateMachineBox`1[[System.Threading.Tasks.VoidTaskResult, System.Private.CoreLib, Version=9.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[GetHelpApp.NetworkDiagnostics.ActiveDiagnostics.ActiveTestManager+<ProcessRequestedActionCallBack>d__10, GetHelp, Version=10.2409.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]].ExecutionContextCallback(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
at System.Runtime.CompilerServices.AsyncTaskMethodBuilder`1+AsyncStateMachineBox`1[[System.Threading.Tasks.VoidTaskResult, System.Private.CoreLib, Version=9.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[GetHelpApp.NetworkDiagnostics.ActiveDiagnostics.ActiveTestManager+<ProcessRequestedActionCallBack>d__10, GetHelp, Version=10.2409.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]].MoveNext(System.Threading.Thread)
at System.Runtime.CompilerServices.AsyncTaskMethodBuilder`1+AsyncStateMachineBox`1[[System.Threading.Tasks.VoidTaskResult, System.Private.CoreLib, Version=9.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e],[GetHelpApp.NetworkDiagnostics.ActiveDiagnostics.ActiveTestManager+<ProcessRequestedActionCallBack>d__10, GetHelp, Version=10.2409.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]].MoveNext()
at System.Threading.Tasks.AwaitTaskContinuation.RunOrScheduleAction(System.Runtime.CompilerServices.IAsyncStateMachineBox, Boolean)
at System.Threading.Tasks.Task.RunContinuations(System.Object)
at System.Threading.Tasks.Task+WhenAllPromise`1[[System.__Canon, System.Private.CoreLib, Version=9.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]].Invoke(System.Threading.Tasks.Task)
at System.Threading.Tasks.Task.RunContinuations(System.Object)
at System.Threading.Tasks.Task.FinishSlow(Boolean)
at System.Threading.Tasks.Task.ExecuteWithThreadLocal(System.Threading.Tasks.Task ByRef, System.Threading.Thread)
at System.Threading.ThreadPoolWorkQueue.Dispatch()
at System.Threading.PortableThreadPool+WorkerThread.WorkerThreadStart()

Error: (09/22/2026 03:15:06 PM) (Source: Application Error) (EventID: 1000) (User: LAPTOP-DIN4F96T)
Description: Názov chybnej aplikácie: Explorer.EXE, verzia: 10.0.26100.9444, časová značka: 0x03f6c974
Názov modulu s poruchou: Windows.UI.Xaml.dll, verzia: 10.0.26100.9444, časová značka: 0x8139c357
Kód výnimky: 0xc000027b
Odchýlka poruchy: 0x000000000090e383
Id poruchového procesu: 0x2600
Čas spustenia poruchovej aplikácie: 0x1dd4a9cb75e7870
Cesta k poruchovej aplikácii: C:\WINDOWS\Explorer.EXE
Cesta k poruchovému modulu: C:\Windows\System32\Windows.UI.Xaml.dll
Id správy: a506e94a-6c4f-47b5-80b9-177c9a614213
Plný názov chybného balíka:
Identifikátor poruchovej aplikácie vzťahujúci sa na balík:

Error: (09/22/2026 12:41:35 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 16032. Message ID: [0x2509].


System errors:
=============
Error: (10/28/2026 11:38:21 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby Dnscache bol dosiahnutý časový limit (30000 ms).

Error: (10/28/2026 11:37:51 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby Dnscache bol dosiahnutý časový limit (30000 ms).

Error: (10/28/2026 11:37:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby Služba Google Update (gupdate) zlyhalo kvôli nasledujúcej chybe:
The service did not respond to the start or control request in a timely fashion.

Error: (10/28/2026 11:37:51 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Počas čakania na pripojenie služby Služba Google Update (gupdate) bol dosiahnutý časový limit (30000 ms).

Error: (10/28/2026 11:37:21 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby Dnscache bol dosiahnutý časový limit (30000 ms).

Error: (10/28/2026 11:36:51 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby Dnscache bol dosiahnutý časový limit (30000 ms).

Error: (10/28/2026 11:36:21 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby Dnscache bol dosiahnutý časový limit (30000 ms).

Error: (10/28/2026 11:35:31 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby Dnscache bol dosiahnutý časový limit (30000 ms).


Windows Defender:
================

CodeIntegrity:
===============
Date: 2026-10-28 11:37:20
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Google\Chrome\Application\154.0.8037.59\libLiteRtWebGpuAccelerator.dll that did not meet the Microsoft signing level requirements.


==================== Memory info ===========================

BIOS: LENOVO 6JCN33WW 06/30/2020
Motherboard: LENOVO LNVNB161216
Processor: Intel(R) Core(TM) i5-8250U CPU @ 1.60GHz
Percentage of memory in use: 44%
Total physical RAM: 20354.72 MB
Available physical RAM: 11380.61 MB
Total Virtual: 40834.72 MB
Available Virtual: 32534.77 MB

==================== Drives ================================

Disk 0 - Drive c: (Windows) (Fixed) (Total:450.69 GB) (Free:175.26 GB) (Model: SanDisk SD9TB8W512G1001) NTFS
Disk 0 - Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:3.41 GB) (Model: SanDisk SD9TB8W512G1001) NTFS
Disk 1 - Drive f: (ADATA SD700) (Fixed) (Total:476.81 GB) (Free:167.4 GB) (Model: ADATA SD700 SCSI Disk Device) NTFS

Disk 0 - \\?\Volume{cb743fb6-afad-49e1-8d42-2fe6964aedc9}\ (WINRE_DRV) (Fixed) (Total:1000 MB) (Free:129.1 MB) NTFS
Disk 0 - \\?\Volume{aec31e1a-05d9-4a27-8da9-75f12c32ea85}\ (SYSTEM_DRV) (Fixed) (Total:256 MB) (Free:217.96 MB) FAT32

==================== MBR & Partition Table ====================

============================================================
Disk: 0 (Size: 476.94 GB) (Disk ID: 0D7C97E3)

Partitions:
===========
Partition Style : GPT
Partition Count : 5
Disk ID : {87930C25-DFB5-4E0F-91AA-FC1A87EE4EC8}
Usable Offset : 0.02 MB
Usable Length : 476.94 GB
Max Partitions : 128

Partition 1
Type : EFI System Partition
Size : 260 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {AEC31E1A-05D9-4A27-8DA9-75F12C32EA85}
GPT Name : EFI system partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 261 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {809259A8-FD03-439E-820D-3284CFB2C2B2}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 450.69 GB
Offset : 277 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {999D7FF2-A622-4636-8E7C-75A022161E66}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Basic Data Partition
Size : 25 GB
Offset : 461786 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {7BCD0BB2-C7AE-4EF1-A13F-19D444014CEE}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 5
Type : Windows Recovery
Size : 1000 MB
Offset : 487386 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {CB743FB6-AFAD-49E1-8D42-2FE6964AEDC9}
GPT Name : Basic data partition
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------


============================================================
Disk: 1 (Size: 476.94 GB) (Disk ID: C0C1D248)

Partitions:
===========
Partition Style : GPT
Partition Count : 2
Disk ID : {BEB2B2F6-40EE-4DA7-8005-E03CDB982A2C}
Usable Offset : 0.02 MB
Usable Length : 476.94 GB
Max Partitions : 128

Partition 1
Type : Microsoft Reserved (MSR)
Size : 128 MB
Offset : 0.02 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {566CA24A-AF55-4957-97C3-E45C014A5D69}
GPT Name : Microsoft reserved partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Basic Data Partition
Size : 476.81 GB
Offset : 129 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {78E7CBCF-75D7-4A0C-8F79-8C61A8896284}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------

============================================================

==================== End of Addition.txt =======================

OK. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{D0A65C2C-28C0-4A41-A0F6-5DBC9EB07CAE}\localserver32 -> C:\Users\Vlado\AppData\Local\Discord\app-1.0.9257\Discord.exe => No File
CustomCLSID: HKU\S-1-5-21-220631949-4223932415-3592341702-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> "C:\Users\Vlado\AppData\Local\Microsoft\Teams\current\Teams.exe" --toast => No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [Incinerator] -> {E8215BEA-3290-4C73-964B-75502B9B41B2} => -> No File
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> No File
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> No File
ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> No File
ContextMenuHandlers2: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> No File
ContextMenuHandlers2: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> No File
ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> No File
ContextMenuHandlers4: [Incinerator] -> {E8215BEA-3290-4C73-964B-75502B9B41B2} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> No File
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> No File
AlternateDataStreams: C:\ProgramData\TEMP:4FC01C57 [286]
SearchScopes: HKU\S-1-5-21-220631949-4223932415-3592341702-1001 -> DefaultScope {A639F46E-4173-448B-8D8A-A97237CB3569} URL =
SearchScopes: HKU\S-1-5-21-220631949-4223932415-3592341702-1001 -> {A639F46E-4173-448B-8D8A-A97237CB3569} URL =
FirewallRules: [{AB5B101E-91CF-4AE0-8E1D-FE927A52764C}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto IV\GTAIV\PlayGTAIV.exe => No File
FirewallRules: [{D484B689-D8F7-4794-8992-6EACC7A1A6E4}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto IV\GTAIV\PlayGTAIV.exe => No File
FirewallRules: [{77026AD7-4A43-4005-8D4F-740A5A985A56}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe => No File
FirewallRules: [{4B62D265-3CA7-4BB5-B04D-34315B9E8280}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe => No File
FirewallRules: [TCP Query User{8285F6E4-802C-4B96-B5E9-5A3D542BAA5B}C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe => No File
FirewallRules: [UDP Query User{EBEB6909-B220-4511-AB84-802B13C7F4DF}C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe => No File
FirewallRules: [TCP Query User{8B2FB1D1-F1B8-4C08-8A63-6F4A75A13FE5}C:\users\vlado\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\vlado\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe => No File
FirewallRules: [UDP Query User{425446B0-25A0-41AD-A343-7A4EF44DEB52}C:\users\vlado\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\vlado\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe => No File
FirewallRules: [TCP Query User{7C5020CF-5C9F-4A5C-A832-37387D362990}C:\users\vlado\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe] => (Allow) C:\users\vlado\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe => No File
FirewallRules: [UDP Query User{861B4181-6EB5-4C3F-BC14-2AB0FAD8C9E7}C:\users\vlado\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe] => (Allow) C:\users\vlado\appdata\roaming\.minecraft\runtime\java-runtime-alpha\windows\java-runtime-alpha\bin\javaw.exe => No File
FirewallRules: [TCP Query User{04794988-9271-4701-9F30-C576535434D4}C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe => No File
FirewallRules: [UDP Query User{666786ED-0A24-4EF0-9EA4-F82E262B4E7A}C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\vlado\appdata\local\microsoft\teams\current\teams.exe => No File
FirewallRules: [TCP Query User{3A4D772A-1F1D-4769-A70F-5412BA153EBE}F:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) F:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [UDP Query User{FF2AA529-2C7F-4BB6-86A2-72E0611F4C33}F:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) F:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [{A645E1B1-C00B-4AE0-8BA0-D27E3C28CAC5}] => (Allow) C:\Users\Vlado\AppData\Local\Programs\Opera\opera.exe => No File
FirewallRules: [{E730C3AE-9E11-4290-8670-F14B6F64B751}] => (Allow) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe => No File
FirewallRules: [{715A10B2-3C8E-4408-A25D-C8DACBB947DE}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot.exe => No File
FirewallRules: [{568634C0-46BE-4D86-B5E8-6875DD9C6C2B}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{E04C7D28-BEBA-4258-A862-2883D2BA4B6D}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{9C8DBAE2-D334-4057-A632-7558652C552D}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File
FirewallRules: [{44783929-9D8A-4F68-A3D5-D85FC7946DBE}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File

Hosts:
EmptyTemp:

End

A co ta smečka zapnutých antivirů? Pouze 1rezidentní antivir vám systém ochrání. Takhle je to samá sw kolize! Ponechte funkční 1 z těchto antivirů:

Windows Defender
Avast
Panda Dome
ESET Security

Ostatní vypněte, nebo lépe odinstalujte. Přestaňte chodit na péčka a budete mít klid od virů.

mam ten textovy dokument nazvať fixlist.txt? A potom spustit FRST64 a v tom programe dať fix?

nechce mi to fixnut sekne sa to na: C:\User\Vlado\AppData\Local\Microsoft\Windows\History

Zapoměl jsem to popsat:

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Omlouvám se

Nechce mi ten fix urobiť,zasekne sa to na: C:\User\Vlado\AppData\Local\Microsoft\Windows\History