Stránka 1 z 1

prosím o kontrolu logu - podezření na viry

Odeslal: 06 Lis 2026 17:03
od PITICKOOO
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-11-2026
Ran by Admin (administrator) on DESKTOP-Q9C497L (Gigabyte Technology Co., Ltd. B650 EAGLE) (06-11-2026 16:53:23)
Running from C:\Users\Admin\Downloads\FRST64.exe
Loaded Profiles: Admin
Platform: Microsoft Windows 11 Pro Version 26H2 26300.9818 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files\Avast Software\Suite\AvastSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswEngSrv.exe
(C:\Program Files\Avast Software\Suite\AvastUI.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\model_host.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\ShadowPlay\nvsphelper64.exe
(C:\Program Files\SteelSeries\GG\apps\engine\SteelSeriesEngine.exe ->) (GN Hearing A/S -> SteelSeries ApS) C:\Program Files\SteelSeries\GG\apps\engine\prism\SteelSeriesPrism.exe
(C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe ->) (GN Hearing A/S -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\apps\engine\SteelSeriesEngine.exe
(C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe ->) (GN Hearing A/S -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe
(C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe ->) (Spotify AB -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\crashpad_handler.exe
(C:\Program Files\XboxService\x64\XboxService.exe ->) (Microsoft Corporation -> ) C:\Program Files\Microsoft GameInput\x64\GameInputRawInputProxy.exe
(C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe ->) (Roblox Corporation -> ) C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxCrashHandler.exe
(C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe ->) (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> The Qt Company Ltd.) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\QtWebEngineProcess.exe <2>
(C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe ->) (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\crashpad_handler.exe
(cmd.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe
(Discord Inc. -> Discord Inc.) C:\Users\Admin\AppData\Local\Discord\app-1.0.9267\Discord.exe <6>
(explorer.exe ->) (GN Hearing A/S -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\AvastUI.exe <4>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <20>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe <5>
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe <4>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\Display.NvContainer\NVDisplay.Container.exe
(Roblox Corporation -> Roblox Corporation) C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Suite\wsc_proxy.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\afwServ.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\AvastSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\DriverUpdSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\TuneupSvc.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Windows\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray_service.AMD64.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Thrustmaster®) C:\Program Files (x86)\Thrustmaster\Thrustmaster FFB Driver\drivers\amd64\tmGAInstall.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsStore_22608.1401.7.0_x64__8wekyb3d8bbwe\StoreDesktopExtension.exe
(sihost.exe ->) (Spotify AB -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe
(Spotify AB -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe <7>
(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\GCC.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.29.380.0_x64__8wekyb3d8bbwe\WindowsPackageManagerServer.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.4019.0_x64__8wekyb3d8bbwe\EdgeGameAssist.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsStore_22608.1401.7.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2611.1001.9.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.264.3.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.195.1006.0007\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc., Sucursal en España) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe [2257752 2024-09-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [SteelSeriesGG] => C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe [195640 2026-11-02] (GN Hearing A/S -> SteelSeries A/S)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Suite\AvLaunch.exe [1082296 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX2] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe [271496 2017-11-02] (Canon Inc. -> CANON INC.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [36981208 2024-12-26] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [VoicemodV3] => C:\Program Files\Voicemod V3\Voicemod.exe [6781384 2026-07-30] (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5823128 2026-10-21] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [RiotClient] => C:\Riot Games\Riot Client\RiotClientServices.exe --launch-background-mode (No File)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [Discord] => C:\Users\Admin\AppData\Local\Discord\Update.exe [1596344 2025-07-28] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [RobloxPlayerBeta] => C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe [144435664 2026-11-06] (Roblox Corporation -> Roblox Corporation)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [MicrosoftEdgeAutoLaunch_5EFC0ECB77A7585FE9DCDD0B2E946A2B] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5453128 2026-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon TS3300 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDG3.DLL [506368 2023-06-05] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3300 series: C:\WINDOWS\system32\CNMLMG3.DLL [1334784 2023-06-05] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files\AVAST Software\Browser\Application\154.0.35638.100\Installer\chrmstp.exe [6413680 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Environment\\UserInitMprLogonScript: -> (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {D96FE9D3-A062-451E-A262-E8F27B492996} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {DC1AB745-BB82-4267-8975-94AD4634EEF5} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {7E4755DF-3462-4437-8A29-1BABA8A020D3} - System32\Tasks\Avast Secure Browser VPS Differential Update => C:\Program Files\AVAST Software\Browser\Application\vps_helper.exe [2624568 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {88C0CD79-24AB-4E19-BCCD-0A902A4D8EBD} - System32\Tasks\Avast Software\Avast Suite Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-suite\icarus.exe [9896952 2026-10-06] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {EB1CF22A-C3C8-48D7-B5AD-CADEFAD8BD5C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [3710456 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {AAB48FED-F247-4DAF-A9DA-41797E58E31B} - System32\Tasks\Avast Software\Suite Emergency Update => C:\Program Files\Avast Software\Suite\AvEmUpdate.exe [5832120 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {1DC3EAFF-937A-474A-B5A1-1CD6D8124A67} - System32\Tasks\AvastBrowserProtectS-1-5-21-1453151362-2910950682-4162620220-1001 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {D91EC3B1-6750-45D1-84E4-3D89FEFD2D19} - System32\Tasks\AvastDefaultBrowserTask => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {C243ACDD-16CB-4B82-A8E1-ABE586CAACE6} - System32\Tasks\AvastDefaultBrowserTask2 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {ED3FFB3C-DC75-47D9-84F5-A54EB9C686FC} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {C4EF9082-66CC-4FCC-8387-3FA09A416CAE} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B2C33B86-FA53-4324-90ED-60D6BBEDBB12} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Admin\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe [16359344 2026-10-18] (ESET, spol. s r.o. -> ESET)
Task: {A4F6A68F-A61D-4CB4-8147-DF8DB891651B} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Admin\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe [16359344 2026-10-18] (ESET, spol. s r.o. -> ESET)
Task: {3207776E-ECEF-4C3A-80F1-97D32B40AB28} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35404904 2024-10-22] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {9233B5EB-4C39-417A-8F59-328D7F48751F} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3656304 2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8AC794DA-D554-4F47-8E3A-3EB8CA8F6CFD} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\ActionCenterDeferralTask-{d0db0f45-e744-4653-806f-9873445b824b} => {AF28889E-B0FD-494C-9FB0-D3B058A96B34}
Task: {FA614F71-5D59-4589-9663-4A62454B405D} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\ActionCenterRefreshForExpirationTask-{83384942-361c-49f4-8b2e-430689df0d92} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
Task: {E950036C-3336-4F90-A15B-71F539D8217F} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\ActionCenterTriggerTask-128000000001627409-render-{a505c6c9-95aa-43bf-9344-9c8ce9ead680} => {F47D8C53-0B74-4A66-959D-367710AB1F84}
Task: {5BA01223-2BE7-4C5C-85E9-DC04EE73A921} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\SoftLandingRefreshForExpirationTask-{e553db43-cee9-476f-a5b4-7d5a3d92b68e} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 06 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 06 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{b3986dfc-a28a-4dfc-bc34-5b43e674da2d}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{da698474-86af-47b9-a1b6-0636e52f4c39}: [DhcpNameServer] 192.168.1.147 192.168.1.147

FireFox:
========
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)

Edge:
=======
Edge DefaultProfile: Profile 3
Edge Profile: C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3 [2026-11-06]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\bojobppfploabceghnmlahpoonbcbacn [2026-10-20]
Edge Extension: (Dokumenty Google offline) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-26]
Edge Extension: (Edge relevant text changes) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-09-07]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

Opera:
=======
OPR DefaultProfile: Default

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\Avast Software\Suite\aswidsagent.exe [8015800 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Suite\AvastSvc.exe [1051064 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Suite\afwServ.exe [2795448 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Suite\aswToolsSvc.exe [1120184 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastCleanupSvc; C:\Program Files\Avast Software\Suite\TuneupSvc.exe [24096696 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastDriverUpdSvc; C:\Program Files\Avast Software\Suite\DriverUpdSvc.exe [21313464 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\154.0.35638.100\elevation_service.exe [4380736 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Suite\wsc_proxy.exe [56912 2026-11-04] (Avast Software s.r.o. -> AVAST Software)
S3 Denuvo Anti-Cheat Update Service; C:\Program Files\Denuvo Anti-Cheat\denuvo-anti-cheat-update-service.exe [1201304 2026-08-20] (DENUVO GmbH -> Denuvo GmbH)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [1039800 2026-08-18] (Epic Games Inc. -> Epic Games, Inc.)
R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [150640 2023-11-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [2606520 2026-08-29] (Epic Games Inc. -> Epic Games, Inc.)
R2 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [466600 2026-10-19] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
S2 GBTECService; C:\Program Files (x86)\GIGABYTE\GBTECService\OLEDDisplayService.exe [19568 2024-07-04] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460488 2024-04-03] (Canon Inc. -> )
S3 LiveStudioElevationService; C:\Program Files\TikTok LIVE Studio\1.36.6\elevation_service.exe [2522408 2026-09-19] (TikTok Pte. Ltd. -> The Chromium Authors)
R2 logi_lamparray_service; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray_service.AMD64.exe [11567496 2026-04-14] (Logitech Inc -> Logitech, Inc.)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11667696 2026-10-20] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-10-20] (Malwarebytes Inc -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe [2386280 2026-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-08-18] (NVIDIA Corporation -> NVIDIA Corporation)
S3 PlutonQcService; C:\WINDOWS\system32\PlutonQcService.exe [159744 2026-11-04] (Microsoft Windows -> )
S3 RedKard_Rooster; C:\ProgramData\RedKard\Splitgate 2\bin\anticheat.x64.redkard.exe [9678760 2025-07-27] (1047 Games, Inc. -> 1047 Games, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-08-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 SteelSeriesGGUpdateServiceProxy; C:\Program Files\SteelSeries\GG\updateService\SteelSeriesGGUpdateServiceProxy.exe [1587768 2026-10-06] (GN Hearing A/S -> )
R2 tmGAInstall; C:\Program Files (x86)\Thrustmaster\Thrustmaster FFB Driver\drivers\amd64\tmGAInstall.EXE [48344 2018-12-03] (Microsoft Windows Hardware Compatibility Publisher -> Thrustmaster®)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe [5609240 2026-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe [378128 2026-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 XboxService; C:\Program Files\XboxService\x64\XboxService.exe [579752 2026-10-14] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
R2 GigabyteUpdateService; C:\WINDOWS\system32\GigabyteUpdateService.exe [878840 2026-11-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 AppShellElevationService; "C:\Program Files\TikTok LIVE Studio\1.14.2\elevation_service.exe" (No File)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [253024 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [396896 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [317024 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [81504 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswDrvBrg; C:\WINDOWS\System32\drivers\aswDrvBrg.sys [95320 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [29144 2026-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [35936 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [311904 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [641632 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [101472 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [71776 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [862816 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1302624 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [276064 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [484960 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 CTIIO; \??\C:\WINDOWS\system32\drivers\CtiIo64.sys [34920 2024-12-05] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 Denuvo Anti-Cheat; \??\C:\Program Files\Denuvo Anti-Cheat\denuvo-anti-cheat.sys [4973192 2026-08-20] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 gdrv3; \??\C:\WINDOWS\System32\drivers\gdrv3.sys [52440 2024-12-05] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
R3 logi_lamparray; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray.AMD64.sys [89480 2026-04-14] (Logitech Inc -> Logitech, Inc.)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [235624 2026-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-10-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt11.sys [217704 2026-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 MSIO; \??\C:\WINDOWS\system32\drivers\MsIo64.sys [19672 2024-12-05] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 mtkwlex; C:\WINDOWS\System32\drivers\mtkwl6ex.sys [1559944 2022-03-30] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)
S3 RedKard; \??\C:\ProgramData\RedKard\bin\RedKard.sys [5213216 2025-07-26] (1047 Games, Inc. -> )
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_16d0e5f2b3759518\rt68cx21x64.sys [845256 2024-08-21] (Realtek Semiconductor Corp. -> Realtek)
S3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys [539648 2024-03-28] (Microsoft Windows -> Realtek)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [48728 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [61008 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 SteelSeries_Sonar_VAD; C:\WINDOWS\System32\DriverStore\FileRepository\steelseries-sonar-vad.inf_amd64_036e27f3054ae1bc\SteelSeries-Sonar-VAD.sys [95912 2026-05-06] (GN Hearing A/S -> Windows (R) Win 7 DDK provider)
R3 VOICEMOD_Driver; C:\WINDOWS\system32\drivers\mvvad.sys [51840 2024-11-11] (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Windows (R) Win 7 DDK provider)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21632 2026-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [677952 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [144408 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S0 wesp; C:\WINDOWS\System32\drivers\wesp.sys [4355960 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S0 wespelam; C:\WINDOWS\System32\drivers\wesp_elam.sys [1519024 2026-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S1 eocquekn; \??\C:\WINDOWS\system32\drivers\eocquekn.sys (No File)
S3 HWiNFO_202; \??\C:\Users\Admin\AppData\Local\Temp\HWiNFO_x64_202.sys (No File) <==== ATTENTION

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-11-06 16:31 - 2026-11-06 16:31 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-11-06 15:48 - 2026-11-06 15:48 - 000677108 _____ C:\WINDOWS\system32\perfh005.dat
2026-11-06 15:48 - 2026-11-06 15:48 - 000144960 _____ C:\WINDOWS\system32\perfc005.dat
2026-11-05 17:04 - 2026-11-05 17:04 - 000000547 _____ C:\Users\Admin\Downloads\Fixlog.txt
2026-11-05 16:48 - 2026-11-06 16:53 - 000031640 _____ C:\Users\Admin\Downloads\FRST.txt
2026-11-05 16:48 - 2026-11-06 16:53 - 000000000 ____D C:\FRST
2026-11-05 16:47 - 2026-11-05 16:47 - 002457088 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2026-11-04 19:04 - 2026-11-04 19:04 - 000003502 _____ C:\WINDOWS\system32\Tasks\AvastDefaultBrowserTask2
2026-11-04 19:04 - 2026-11-04 19:04 - 000003500 _____ C:\WINDOWS\system32\Tasks\AvastDefaultBrowserTask
2026-11-04 19:04 - 2026-11-04 19:04 - 000002520 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2026-11-04 19:04 - 2026-11-04 19:04 - 000002485 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2026-11-04 19:04 - 2026-11-04 19:04 - 000000000 ____D C:\Users\Admin\AppData\Roaming\xpdf
2026-11-04 19:03 - 2026-11-04 19:03 - 000003844 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2026-11-04 19:03 - 2026-11-04 19:03 - 000003812 _____ C:\WINDOWS\system32\Tasks\AvastBrowserProtectS-1-5-21-1453151362-2910950682-4162620220-1001
2026-11-04 19:03 - 2026-11-04 19:03 - 000003632 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser VPS Differential Update
2026-11-04 19:03 - 2026-11-04 19:03 - 000003260 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2026-11-04 19:02 - 2026-11-04 19:03 - 000000000 ____D C:\Users\Admin\AppData\Local\Avast Software
2026-11-04 19:02 - 2026-11-04 19:02 - 000003510 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineUA
2026-11-04 19:02 - 2026-11-04 19:02 - 000003386 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineCore
2026-11-04 19:02 - 2026-11-04 19:02 - 000002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast One.lnk
2026-11-04 19:02 - 2026-11-04 19:02 - 000002172 _____ C:\Users\Public\Desktop\Avast One.lnk
2026-11-04 19:02 - 2026-11-04 19:02 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2026-11-04 19:02 - 2026-11-04 19:02 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Avast Software
2026-11-04 19:02 - 2026-11-04 19:02 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2026-11-04 19:02 - 2026-11-04 19:00 - 000330168 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2026-11-04 19:00 - 2026-11-04 19:03 - 000000000 ____D C:\Program Files\Avast Software
2026-11-04 19:00 - 2026-11-04 19:00 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2026-11-04 19:00 - 2026-11-04 18:59 - 000056128 _____ (Gen Digital Inc.) C:\WINDOWS\system32\icarus_rvrt.exe
2026-11-04 18:59 - 2026-11-06 15:42 - 000000000 ____D C:\ProgramData\Avast Software
2026-11-04 18:59 - 2026-11-04 18:59 - 001757928 _____ (Gen Digital Inc.) C:\Users\Admin\Downloads\avast_one_premium_security.exe
2026-11-04 18:25 - 2026-11-04 18:25 - 000092642 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-11-04 18:25 - 2026-11-04 18:25 - 000092642 _____ C:\WINDOWS\system32\ctac.json
2026-11-04 18:24 - 2026-11-04 18:24 - 000018208 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-11-01 09:07 - 2026-11-01 09:07 - 000000000 ____D C:\Users\Admin\AppData\Local\WindowsOobeAppHost
2026-10-30 10:21 - 2026-10-30 10:21 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\ttpsandbox
2026-10-30 10:09 - 2026-10-30 10:09 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CapCut
2026-10-25 15:10 - 2026-10-25 15:11 - 000000015 _____ C:\Users\Admin\AppData\Roaming\obs-virtualcam.txt
2026-10-24 16:14 - 2026-10-24 16:14 - 000000000 ____D C:\Program Files\XboxService
2026-10-24 16:13 - 2026-10-24 16:13 - 000000000 ____D C:\Program Files\Microsoft GameInput
2026-10-24 16:13 - 2026-10-24 16:12 - 000526792 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_16.dll.0
2026-10-20 14:42 - 2026-11-04 18:19 - 000000000 ____D C:\Users\Admin\AppData\Local\Malwarebytes
2026-10-20 14:42 - 2026-10-20 14:42 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-10-20 14:42 - 2026-10-20 14:42 - 000002081 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2026-10-20 14:42 - 2026-10-20 14:42 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-10-20 14:42 - 2026-10-20 14:42 - 000000000 ____D C:\Program Files\Malwarebytes
2026-10-20 14:41 - 2026-10-20 14:42 - 002906704 _____ (Malwarebytes) C:\Users\Admin\Downloads\MBSetup-3.3.exe
2026-10-20 13:16 - 2026-10-20 13:16 - 000000000 ____D C:\Users\Admin\Untitled Project
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Public\Documents\Blackmagic Design
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Admin\Documents\Blackmagic Design
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Blackmagic Design
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Admin\AppData\Local\DaVinci Resolve Welcome
2026-10-20 13:12 - 2026-10-20 13:12 - 000000000 ____D C:\ProgramData\Blackmagic Design
2026-10-20 13:09 - 2026-10-20 13:09 - 000000000 ____D C:\Program Files\Blackmagic Design
2026-10-20 12:52 - 2026-10-20 12:52 - 000000000 ____D C:\Users\Admin\AppData\Local\DaVinci Control Panels Setup
2026-10-20 12:49 - 2026-10-20 13:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design
2026-10-20 12:48 - 2026-10-20 13:09 - 000000000 ____D C:\Program Files (x86)\Blackmagic Design
2026-10-18 11:04 - 2026-11-04 18:44 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2026-10-18 11:03 - 2026-11-04 18:52 - 000630744 _____ C:\WINDOWS\ntbtlog.txt
2026-10-18 10:53 - 2026-10-30 09:39 - 000003868 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2026-10-18 10:53 - 2026-10-30 09:39 - 000003426 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2026-10-18 08:38 - 2026-11-04 18:21 - 000001423 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2026-10-18 08:38 - 2026-11-04 18:21 - 000001317 _____ C:\Users\Admin\Desktop\ESET Online Scanner.lnk
2026-10-18 08:38 - 2026-10-18 08:38 - 000000000 ____D C:\Users\Admin\AppData\Local\ESET
2026-10-18 08:37 - 2026-10-18 08:37 - 008423856 _____ (ESET) C:\Users\Admin\Downloads\esetonlinescanner.exe
2026-10-16 18:43 - 2026-10-16 18:43 - 000004985 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-10-16 18:42 - 2026-10-16 18:42 - 000039736 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-10-16 18:42 - 2026-10-16 18:42 - 000039736 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-10-16 18:24 - 2026-08-18 09:37 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 001682664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-10-16 18:24 - 2026-08-18 09:33 - 001592040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 001408744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 001238760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 000676584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 000510696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 032167144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 028094696 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-10-16 18:24 - 2026-08-18 09:32 - 002337512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 001731304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 001068264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 000824040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 000469736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-10-16 18:24 - 2026-08-18 09:32 - 000137032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2026-10-16 18:24 - 2026-08-18 09:31 - 020994792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 005925608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 005796584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 004714728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-10-16 18:24 - 2026-08-18 09:30 - 000572368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-10-16 18:24 - 2026-08-18 09:30 - 000441368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-10-16 18:24 - 2026-08-18 08:54 - 000167436 _____ C:\WINDOWS\system32\nvinfo.pb
2026-10-13 17:09 - 2026-11-05 19:00 - 000000000 ____D C:\Users\Admin\.lyra-cli
2026-10-11 12:38 - 2026-10-11 12:38 - 659217449 _____ C:\Users\Admin\Downloads\1011 (1).mp4
2026-10-11 09:48 - 2026-10-11 09:48 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio.lnk
2026-10-11 09:48 - 2026-10-11 09:48 - 000001052 _____ C:\Users\Public\Desktop\OBS Studio.lnk
2026-10-11 09:48 - 2026-10-11 09:48 - 000000000 ____D C:\ProgramData\obs-studio-hook
2026-10-11 09:47 - 2026-10-11 09:48 - 000000000 ____D C:\Program Files\obs-studio
2026-10-11 09:46 - 2026-10-11 09:46 - 159809104 _____ (OBS Project) C:\Users\Admin\Downloads\OBS-Studio-32.2.2-Windows-x64-Installer.exe
2026-10-10 16:52 - 2026-10-10 16:52 - 000000222 _____ C:\Users\Admin\Desktop\Phasmophobia.url

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-11-06 16:44 - 2025-12-04 18:44 - 000000000 ____D C:\Users\Admin\AppData\Local\Discord
2026-11-06 16:31 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-11-06 16:28 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-11-06 16:24 - 2024-12-05 14:14 - 000000000 ___RD C:\Users\Admin\OneDrive
2026-11-06 15:51 - 2025-09-29 07:43 - 000000000 ____D C:\Users\Admin\AppData\Local\Roblox
2026-11-06 15:48 - 2024-12-05 13:59 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-11-06 15:48 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-11-06 15:44 - 2026-07-27 12:46 - 000001411 _____ C:\Users\Admin\Desktop\Roblox Player.lnk
2026-11-06 15:44 - 2025-09-29 07:43 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2026-11-06 15:44 - 2025-08-04 15:00 - 000000000 ____D C:\Users\Admin\AppData\Roaming\discord
2026-11-06 15:44 - 2025-04-16 13:31 - 000000000 ____D C:\Users\Admin\AppData\Local\VoicemodV3
2026-11-06 15:43 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-11-06 15:42 - 2025-04-10 12:50 - 000003446 _____ C:\WINDOWS\system32\Tasks\GCC
2026-11-06 15:42 - 2024-12-05 14:52 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-11-06 15:42 - 2024-12-05 14:13 - 000089336 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteDownloadAssistant.exe
2026-11-06 15:42 - 2024-12-05 14:09 - 000000000 ____D C:\ProgramData\NVIDIA
2026-11-06 15:42 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-11-06 15:41 - 2024-12-05 14:51 - 000906528 _____ C:\WINDOWS\system32\wpbbin.exe
2026-11-06 15:41 - 2024-12-05 14:51 - 000878840 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteUpdateService.exe
2026-11-06 15:41 - 2024-12-05 14:51 - 000012288 ___SH C:\DumpStack.log.tmp
2026-11-05 20:06 - 2024-04-01 08:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-11-05 20:05 - 2025-05-03 17:30 - 000000000 ____D C:\Program Files (x86)\Steam
2026-11-05 19:25 - 2025-07-27 10:36 - 000000000 ____D C:\Users\Admin\AppData\Local\D3DSCache
2026-11-05 19:01 - 2026-08-02 15:10 - 000000000 ____D C:\Users\Admin\AppData\Roaming\obs-studio
2026-11-05 18:43 - 2024-12-05 14:52 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-11-05 17:49 - 2026-07-27 12:45 - 000001411 _____ C:\Users\Admin\Desktop\Roblox Studio.lnk
2026-11-04 19:55 - 2024-12-05 14:13 - 000000000 ____D C:\Users\Admin\AppData\Local\Packages
2026-11-04 19:49 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-11-04 19:34 - 2026-07-30 09:42 - 000001313 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-11-04 19:34 - 2025-12-04 18:45 - 000002252 _____ C:\Users\Admin\Desktop\Discord.lnk
2026-11-04 19:33 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-11-04 19:08 - 2024-12-05 14:51 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-11-04 19:05 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-11-04 19:03 - 2024-12-05 14:14 - 000000000 ____D C:\Users\Admin\AppData\Local\PlaceholderTileLogoFolder
2026-11-04 19:02 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-11-04 18:56 - 2025-09-15 12:44 - 000000000 ____D C:\Users\Admin\AppData\Roaming\steelseries-gg-client
2026-11-04 18:53 - 2024-12-05 14:52 - 000297192 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-11-04 18:52 - 2025-12-15 15:36 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-11-04 18:52 - 2025-07-11 21:00 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-11-04 18:52 - 2024-04-01 17:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-11-04 18:52 - 2024-04-01 17:31 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\WUModels
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Com
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-11-04 18:52 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2026-11-04 18:39 - 2024-04-01 08:26 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2026-11-04 18:39 - 2024-04-01 08:26 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2026-11-04 18:24 - 2024-12-05 13:56 - 003385856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-11-04 18:14 - 2024-12-05 14:52 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-11-04 18:04 - 2024-12-05 14:52 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{9A89023D-D65A-4B5A-BC02-2CC490EFCB3F}
2026-11-04 18:04 - 2024-12-05 14:52 - 000003644 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{FB04E5EC-C9FC-4D1A-BB04-3AFA51C26365}
2026-11-02 18:31 - 2024-12-05 14:52 - 000002512 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-11-02 18:31 - 2024-12-05 14:52 - 000002344 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-11-02 07:48 - 2025-09-08 09:44 - 000061008 _____ (SteelSeries ApS) C:\WINDOWS\system32\Drivers\sshid.sys
2026-11-02 07:48 - 2025-09-08 09:44 - 000048728 _____ (SteelSeries ApS) C:\WINDOWS\system32\Drivers\ssdevfactory.sys
2026-11-01 09:27 - 2025-01-29 09:43 - 000000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2026-10-31 09:26 - 2026-10-03 10:45 - 000000000 ____D C:\common_attachment
2026-10-31 08:50 - 2026-06-12 18:52 - 000000000 ____D C:\Users\Admin\AppData\Roaming\.minecraft
2026-10-30 12:59 - 2025-02-10 15:28 - 000000000 ____D C:\XboxGames
2026-10-30 12:59 - 2024-12-05 13:55 - 000000000 ____D C:\ProgramData\Packages
2026-10-30 10:09 - 2026-09-29 16:04 - 000001377 _____ C:\Users\Admin\Desktop\CapCut.lnk
2026-10-29 20:33 - 2025-02-05 14:26 - 000003576 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1453151362-2910950682-4162620220-1001
2026-10-29 20:33 - 2024-12-05 14:14 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1453151362-2910950682-4162620220-1001
2026-10-29 20:33 - 2024-12-05 14:14 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1453151362-2910950682-4162620220-1001
2026-10-29 20:33 - 2024-12-05 14:14 - 000002381 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-10-25 13:00 - 2026-07-02 12:02 - 000000000 ____D C:\Users\Admin\Downloads\ACLib
2026-10-24 16:52 - 2026-07-27 15:50 - 000003185 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-10-24 16:12 - 2025-02-10 15:28 - 004671944 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 001223112 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000330184 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000281032 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000166344 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000158152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2026-10-24 16:12 - 2025-02-10 15:28 - 000084424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2026-10-20 14:42 - 2026-05-21 16:13 - 000000000 ____D C:\Users\Admin\AppData\Local\Sentry
2026-10-20 13:45 - 2025-04-16 13:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voicemod V3
2026-10-20 13:45 - 2025-04-16 13:31 - 000000000 ____D C:\Program Files\Voicemod V3
2026-10-20 13:17 - 2024-12-05 14:04 - 000000000 ____D C:\Users\Admin
2026-10-19 20:03 - 2026-05-14 15:22 - 001092224 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\GameInputRedist.dll
2026-10-19 20:02 - 2026-05-14 15:22 - 000873600 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\GameInputRedist.dll
2026-10-18 10:30 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-18 10:30 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-18 10:30 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-18 10:30 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-18 09:34 - 2026-02-03 19:33 - 000000000 ___HD C:\Users\Admin\AppData\Roaming\Name
2026-10-18 08:36 - 2024-12-05 14:16 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-18 08:35 - 2024-12-05 14:16 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-16 19:06 - 2026-10-03 10:37 - 000000000 ____D C:\Users\Admin\Downloads\zasilka-WRF5GENE92ADU67W
2026-10-16 18:24 - 2024-12-05 14:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2026-10-11 09:48 - 2026-08-02 15:10 - 000000000 ____D C:\ProgramData\obs-studio
2026-10-10 16:52 - 2025-05-03 18:38 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

==================== Files in the root of some directories ========

2026-02-14 15:05 - 2026-02-14 15:05 - 000000137 _____ () C:\Users\Admin\AppData\Roaming\EVIL-MONTHLY-1D33CE0FE809.log
2026-10-25 15:10 - 2026-10-25 15:11 - 000000015 _____ () C:\Users\Admin\AppData\Roaming\obs-virtualcam.txt

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Re: prosím o kontrolu logu - podezření na viry

Odeslal: 06 Lis 2026 17:49
od Rudy
Zdravím!
Abych mohl provést komplexní kontrolu systému, potřebuji vidět ještě log Addition. Najdete ho v C:\Users\Admin\Downloads v souboru addition.txt. Děkuji.

Re: prosím o kontrolu logu - podezření na viry addition

Odeslal: 06 Lis 2026 17:57
od PITICKOOO
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-11-2026
Ran by Admin (06-11-2026 16:54:39)
Running from C:\Users\Admin\Downloads
Microsoft Windows 11 Pro Version 26H2 26300.9818 (X64) (2024-12-05 12:55:42)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Admin (S-1-5-21-1453151362-2910950682-4162620220-1001 - Administrators - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-1453151362-2910950682-4162620220-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-1453151362-2910950682-4162620220-503 - Limited - Disabled)
Guest (S-1-5-21-1453151362-2910950682-4162620220-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1453151362-2910950682-4162620220-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Avast One (HKLM\...\Avast Suite) (Version: 26.10.11201.1041 - Gen Digital Inc.)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 154.0.35638.100 - Autoři prohlížeče Avast Secure Browser)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
Blackmagic RAW Common Components (HKLM\...\{89B80C17-5795-45F7-A401-0A5EBE4BBD4E}) (Version: 6.0 - Blackmagic Design)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon IJ Network Scanner Selector EX2 (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX2) (Version: 2.0.10.2 - Canon Inc.)
Canon IJ Printer Assistant Tool (HKLM-x32\...\Canon IJ Printer Assistant Tool) (Version: 1.70.4.30 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.5.5.3 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 6.6.0 - Canon Inc.)
Canon TS3300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_TS3300_series) (Version: 1.03 - Canon Inc.)
CapCut (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\CapCut) (Version: 9.7.0.4153 - Bytedance Pte. Ltd.)
Clownfish Voice Changer (HKLM\...\ClownfishVoiceChanger) (Version: - )
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 156.0.4314.58 - Microsoft Corporation)
DaVinci Resolve (HKLM\...\{E7753090-1295-4993-987E-0914F6550153}) (Version: 21.1.10010 - Blackmagic Design)
DaVinci Resolve Control Panels (HKLM\...\{EDA8A73C-05DC-49ED-9DF5-D29F9317307A}) (Version: 2.3.5.0 - Blackmagic Design)
Denuvo Anti-Cheat (HKLM\...\Denuvo Anti-Cheat) (Version: 6.9.2.7013 - Denuvo GmbH)
Discord (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Discord) (Version: 1.0.9267 - Discord Inc.)
ENE Video Capture Box HAL (HKLM\...\{A096611D-BA11-4A1A-8D09-0A0462D7C8F2}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE Video Capture Box HAL (HKLM-x32\...\{974259bf-3ed1-4cd6-9ed1-40c7f601a786}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE_AIC_Marvell_HAL (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden
ENE_AIC_Marvell_HAL (HKLM-x32\...\{887e18fb-6bc3-4cd4-b34e-32d9ff71bbae}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden
ENE_DRAM_RGB_AIO (HKLM\...\{5D2EC6F2-7EC3-486E-A144-7174E537A148}) (Version: 1.0.14.4 - Ene Tech.) Hidden
ENE_DRAM_RGB_AIO (HKLM-x32\...\{35a6f7ad-3ff5-4bdc-89a5-e166ef586e81}) (Version: 1.0.14.4 - Ene Tech.) Hidden
ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden
ENE_EHD_M2_HAL (HKLM-x32\...\{c1d017c2-8846-4000-9254-5689eccd462e}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden
ENE_External_Device_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.12.7 - ENE Tech) Hidden
ENE_External_Device_HAL (HKLM-x32\...\{a7b1cf47-d8f0-423d-9494-568195f1c864}) (Version: 1.0.12.7 - ENE Tech) Hidden
ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden
ENE_MousePad_HAL (HKLM-x32\...\{bf256b46-8ff7-48be-ab7f-5661e9a0651f}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM-x32\...\{c662a481-d76a-4188-95d2-6eb4ffd55542}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
Epic Games Launcher (HKLM-x32\...\{C5C3EE71-4047-4144-946E-18D500510CB5}) (Version: 1.3.128.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{5122B8BC-D6DF-48FF-8D4E-15A63EEC5073}) (Version: 2.8.1 - Epic Games, Inc.)
Fairlight Audio Accelerator Utility (HKLM\...\FairlightAudioAccelerator_is1) (Version: 1.0.15 - Blackmagic Design)
GBT_MB_Update (HKLM\...\GBT_MB_Update) (Version: 24.10.24.01 - GIGABYTE)
GBT_RGB_Sync_Control 24.10.24.01 (HKLM\...\GBT_RGB_Sync_Control) (Version: 24.10.24.01 - GIGABYTE)
GIGABYTE Control Center 24.10.28.01 (HKLM\...\GIGABYTE Control Center) (Version: 24.10.28.01 - GIGABYTE)
GIGABYTE Performance Library (HKLM\...\MBEasyTune) (Version: 24.10.30.01 - GIGABYTE)
GIGABYTE SSD Firmware Update Tool (HKLM\...\GBTSsdFirmwareUpdate) (Version: 24.06.19.01 - GIGABYTE)
GIGABYTE Storage Library (HKLM\...\MBStorage) (Version: 24.10.24.01 - GIGABYTE)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Malwarebytes version 5.7.3.376 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.7.3.376 - Malwarebytes)
Microsoft .NET Host - 8.0.23 (x64) (HKLM\...\{8CE231CE-B9F2-488A-BC60-FA1CE584B85D}) (Version: 64.92.45415 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.23 (x64) (HKLM\...\{A42EAA28-C0A1-4712-A109-796202435469}) (Version: 64.92.45415 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.23 (x64) (HKLM\...\{39884818-B550-4209-9A49-81F9D21F6012}) (Version: 64.92.45415 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 156.0.4314.58 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 156.0.4314.58 - Microsoft Corporation) Hidden
Microsoft GameInput (HKLM\...\{0DA71DCF-F605-435D-9B16-051DFBE7CB76}) (Version: 4.0.302.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\OneDriveSetup.exe) (Version: 26.195.1006.0007 - Microsoft Corporation)
Microsoft Visual Basic/C++ Runtime (x86) (HKLM-x32\...\{C5E3A69D-D391-45A6-A8FB-00B01E2B010D}) (Version: 1.1.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61135 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61135 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61135 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61135 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{610487D9-3460-328A-9333-219D43A75CC5}) (Version: 10.0.60922 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Microsoft Windows Desktop Runtime - 8.0.23 (x64) (HKLM\...\{29177194-CD94-4A2D-97A4-EF77738E995A}) (Version: 64.92.45458 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.23 (x64) (HKLM-x32\...\{d653912d-5c24-4e13-9238-531257889178}) (Version: 8.0.23.35609 - Microsoft Corporation)
NVIDIA App 11.0.9.251 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.9.251 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.9.12728.38614306 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.9.12728.38614306 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 610.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 610.88 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 32.2.2 - OBS Project)
Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.1.0.1 - Patriot Memory) Hidden
Patriot Viper M2 SSD RGB (HKLM-x32\...\{07236f40-ec25-4646-8cb6-b6aaf1597324}) (Version: 1.1.0.1 - Patriot Memory) Hidden
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9733.1 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 11.20.0729.2024 - Realtek)
Registrace tiskárny (HKLM-x32\...\Canon EISRegistration) (Version: 1.9.2 - Canon Inc.)
Roblox Player for Admin (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\roblox-player) (Version: - Roblox Corporation)
Roblox Studio for Admin (HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\roblox-studio) (Version: - Roblox Corporation)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteelSeries GG 123.0.0 (HKLM\...\SteelSeries GG) (Version: 123.0.0 - SteelSeries ApS)
Thrustmaster Force Feedback Driver (HKLM-x32\...\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}) (Version: 2.FFD.2018 - Thrustmaster)
TikTok LIVE Studio (HKLM\...\tiktoklivestudio) (Version: 1.36.6 - TikTok Pte. Ltd.)
Verbatim_SureFireGaming_Product (HKLM\...\{35CB65C6-A7E3-4EE7-AD40-738D70A72164}) (Version: 1.0.3.11 - Verbatim) Hidden
Verbatim_SureFireGaming_Product (HKLM-x32\...\{d601832a-0d94-46ce-9b19-78e8a5887313}) (Version: 1.0.3.11 - Verbatim) Hidden
Voicemod (HKLM\...\{FE519A29-8B15-47C4-BCD6-A513277DC26F}_is1) (Version: 1.6.22 - Voicemod Inc., Sucursal en España)
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version: 20.10 - NCH Software)
WD P40 Game Drive (HKLM\...\{EE55DBAE-ECDD-4ADD-AAB5-23DE848B0996}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden
WD P40 Game Drive (HKLM-x32\...\{72b1a866-fc31-4381-bff3-fa6cd8823777}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden
Xbox Service (HKLM\...\{81F706B1-AB0A-4D88-B2DB-E5BAF88C87C6}) (Version: 4.0.300.0 - Microsoft Corporation)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-07-06] ()
Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2026-10-20] ()
Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_2.6.2.0_x64__8wekyb3d8bbwe [2026-10-30] (Microsoft Studios)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-12-09] (NVIDIA Corp.)
OP Auto Clicker - Auto Tap -> C:\Program Files\WindowsApps\38458AutoClicker.OPAutoClicker-AutoTap_4.1.0.0_x64__5e1qkq7gw5abm [2025-12-30] (Auto Clicker)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.51.347.0_x64__dt26b99r8h8gj [2024-12-05] (Realtek Semiconductor Corp)
shellmenua -> C:\Program Files (x86)\NCH Software\Components\Shared\shellmenu [2025-04-12] ()
shellmenub -> C:\Program Files (x86)\NCH Software\Components\Shared\shellmenu [2025-04-12] ()
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0 [2026-07-31] (Spotify AB) [Startup Task]
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2628.101.0_x64__cv1g1gvanyjgm [2026-07-30] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.0.1.0_x64__8wekyb3d8bbwe [2026-05-21] (Microsoft Corp.)
Windows App Runtime DDLM 4000.1049.117.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1049.117.0-x6_4000.1049.117.0_x64__8wekyb3d8bbwe [2026-09-29] (Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1453151362-2910950682-4162620220-1001_Classes\CLSID\{23A5B06E-20BB-4E7E-A0AC-6982ED6A6041}\localserver32 -> C:\Users\Admin\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe (ESET, spol. s r.o. -> ESET)
CustomCLSID: HKU\S-1-5-21-1453151362-2910950682-4162620220-1001_Classes\CLSID\{CFEFC7E6-50F3-4102-9C35-E75445AA6E4D}\localserver32 -> C:\Users\Admin\AppData\Local\Discord\app-1.0.9267\Discord.exe (Discord Inc. -> Discord Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-10-20] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\nvshext.dll [2026-08-18] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-10-20] (Malwarebytes Inc -> Malwarebytes)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2026-10-01 18:17 - 2026-10-01 18:17 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\PlugIns\NVIDIA App\MessageBusRouter.dll] C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\plugins\NVIDIA Overlay\MessageBusRouter.dll
2024-12-05 14:43 - 2026-10-01 18:17 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [4972]

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============


==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2024-04-01 08:26 - 2026-11-06 15:42 - 000001024 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 gen-webserver.internal www.gen-webserver.internal # gen digital helper server
127.0.0.1 revocation.gen-webserver.internal www.revocation.gen-webserver.internal # gen digital helper server

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.1.254
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
Wi-Fi: MediaTek Wi-Fi 6 MT7921 Wireless LAN Card -> mtkwl6ex.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\OneDrive\Nová složka\Nová složka (2)\d944ab2d46564c0b557588629ee71c82.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX2"
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\StartupApproved\Run: => "Steam"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{F107A820-65BC-45FA-80AD-07EAC90CC6F5}] => (Allow) C:\Program Files\GIGABYTE\Control Center\GCC.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [TCP Query User{4AEFDA78-33A4-48AD-AF77-48425BA9E9C7}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{54525CE8-AAC1-4805-875D-2647462867C3}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{88AB6B4D-6638-4946-9A8A-0905C94B2B81}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [UDP Query User{0C9AF6B4-1058-413C-A184-8A98E94683D0}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [{473685B5-6148-43B2-9219-5B37D747B834}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{63C62BD1-549B-4576-8518-09A9D8545787}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{CDBB6416-F267-4F74-8052-0AE83391AC82}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{D82F45DC-2FC2-45CF-8F86-0120E3031449}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [TCP Query User{CF5A0BAA-0E88-4FE9-AA1D-2530EBC6649A}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{BCCFA34E-8272-4B5E-9F5C-0C702E12ABB5}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D43736FA-29F7-4E4B-BF8E-6889A8D80E12}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{85FBDAE0-0E28-4331-AE92-DD1DF56D2CE5}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D3489764-AE18-45D3-96FA-7529DE34DCE9}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [UDP Query User{3D37AFE3-EAE7-435C-BF55-AD2EE6B4EA1D}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [TCP Query User{CBA17841-71B9-4630-B121-F032E48EE224}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [UDP Query User{315C6DCD-E090-4198-A6C3-462C461D622D}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [{5EC48E1D-2712-4C6B-BB49-4247E5ACE0B5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [{259AC075-D7C3-4196-94AB-8EBA81F77AD5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [TCP Query User{CC99B756-1DBE-43BD-A9AD-AEC246F72999}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{1866190C-7EE2-48D1-BB73-82A04252DCDB}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{1A023ACF-952C-4D59-9FC1-03A9860656F6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [UDP Query User{73B4135B-8C02-42B2-B752-A75AAA30B5E6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [TCP Query User{F1F7BD7A-C3C0-4084-A998-FE8D6DDF145E}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{6F86EDAC-7A90-465C-8AC3-55B95E0F5650}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{CCD34B29-7380-49CD-9730-280319E0CF6D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [UDP Query User{AECC118C-A413-4ABD-A621-398FF0DC465D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [{1E3C90C0-513B-4156-8810-C1D6822AA0EA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Headliners\Headliners.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{F5A74DD9-C729-4955-93D2-233C344A530F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Headliners\Headliners.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [TCP Query User{DD61F478-D5A9-487D-A5DB-01CFCB4A9D4A}C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{40631B60-F8AD-4041-8746-5ADFF94C67B1}C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{C5FEA89E-902E-4CA5-98A4-D31C0B97B321}C:\users\admin\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe] => (Allow) C:\users\admin\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe (Epic Games Inc. -> Epic Games)
FirewallRules: [UDP Query User{1829370C-CCC3-45D9-B7C5-F805262C68F2}C:\users\admin\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe] => (Allow) C:\users\admin\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe (Epic Games Inc. -> Epic Games)
FirewallRules: [TCP Query User{4F504460-E2CE-428B-A9BF-C2C2CDE964B6}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{9F0E2919-C426-4E16-8EA2-EEBF85F1B957}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{2DAB2EC1-F89A-49F0-B85A-963DCEB9D8CA}C:\program files\epic games\ue_5.6\engine\binaries\dotnet\swarmagent.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\dotnet\swarmagent.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{9559BA4D-2902-4431-B151-71BEB6AE37E8}C:\program files\epic games\ue_5.6\engine\binaries\dotnet\swarmagent.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\dotnet\swarmagent.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{BA3992A9-B9FC-4485-9C64-9B366072C793}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{D31DFE94-6334-4EE4-8CD7-F4B369C1EAAB}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{92D5A576-CE3E-4CC8-A152-86F1366A871C}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [UDP Query User{216CDC1E-9286-4C82-B257-8CD85468A712}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [TCP Query User{F2AEAD66-8B45-4BEB-B575-C88E45038B12}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{81A55120-7689-4005-A673-4EE258157004}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{0AF2CC85-4A06-4C44-9CA9-7F4C7354473C}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F82EB1E7-9DD8-48DA-B02E-C243351F60CC}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{173FC992-40BA-4633-89F9-AA2965276ACE}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F0837634-637E-40D8-A950-FB86BC1BC4B4}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{04053482-945F-4027-94CA-EC27D5F2A5F2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [{C37B0009-E50C-481A-BC24-9DD3854AD930}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [TCP Query User{6D834983-8B48-4566-825E-90D4840520D6}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{8A2F0EE0-D927-45B8-9CA9-91D230F26D2C}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{8EFBDF77-A249-45D6-9EDC-15D8BBD9FAF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4A4DE719-4364-4564-A847-AB47B322ECA2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{677EF203-6635-48EF-B562-48CF6411307B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{71A5BBC5-7F7F-4645-B3C2-8B6C9C83A4C6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{01DA68A4-AB3C-4921-A772-95D8D3878B32}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{F7681C02-0091-4DF3-95EE-3EE43C528AC1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{C5CD6181-5E62-4D97-9526-0BC28EB769F4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{6EBFA368-9054-40C9-B7EA-E13E1306CA7A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{DD55A498-15AD-4545-8376-4D75FDCAE3C9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{19AD629F-428A-4833-B643-39C96B116E05}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{BCFF6CAD-2369-42AE-B070-BEBC49D60766}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D12E4076-F5BC-4D07-B73E-35C748E86452}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{D5A10769-CAD3-4C7C-8991-2D703B01B3E6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{46A272F7-EDC0-4061-BF95-B76EE29302EB}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{9A0E4C3A-A4ED-4A71-A2E5-5C4F5958ABEA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{D5F35CE3-D82E-4DF6-A94F-30BF0EF5772C}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{CFDA5567-4DEC-4F40-AC08-795B0A5CA9FA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B644D7E1-E20A-485E-86E9-64419765DEF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{51DFAEBE-9F39-41CD-B4B8-7235A3E14C86}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{61F57EA3-2AEB-420D-B314-4FA96AA3B86B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4EA28662-4E13-4B7A-8052-CEE17FBA55F2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{ED30486E-5490-4100-9023-E7F3F1D169CF}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{8759969D-21A5-4B84-9945-6F03BCF9A2F4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B0E062FB-E7EB-4E18-9F23-3EC08D059BC9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{307A0CB2-60FE-456D-96F4-69268448538D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{4530A273-CE45-4AD5-B5CB-882C3C805C39}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{C5D0C516-CE5C-480E-9711-4E22BD94C55D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{60BC40E1-BC11-4D63-BEDD-F3324C6CABC0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4B9831D5-EB9A-4F4F-A588-EF35B7B77E24}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{C0B50B5C-8132-4B42-A645-2D07FA9DD518}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{A41085B3-DC2E-4212-B5B2-5823212D0359}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{3DD60A03-A2F5-4452-96DF-5418D59D98E9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{E9165354-5981-4589-9CEE-B57F37AE11C1}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [UDP Query User{8966F311-8EB8-4FA2-AF9F-8C5717376EE4}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [{D9A15950-4609-4CE8-857B-AC8BE23F38C4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{D8A08B47-BFC8-458E-81B0-EC2A91D97094}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{3E461FF7-42FD-4394-B2C6-A04519DAEE4A}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D7CF90F2-82B5-488C-97C6-530152E9FB14}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{F5392060-B369-4AD1-8C1E-992166DBE42A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A750FA40-5379-4339-8257-E3513CFCAFD1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{46ED8989-6242-4C2B-AEEC-39C8964E05B0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{8F3391D6-B55C-41BB-A403-E8ACF9C2719E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2361B9AE-52DC-423B-AF73-B7A45A0EDD04}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{D1505DBD-1C57-4B6C-B70B-1A62DDA4D291}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{AD125465-9351-40BC-8D4A-500DD71A6C47}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{709F2DF8-B84C-4498-92EF-4BAA0CB5775A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{BE349F34-3776-4C21-9CA1-2F8BFDF5BF7F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{9128B5E2-70AB-46CB-95F5-C4A5CFDACD76}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{48A26039-1EB8-4A17-BDD7-529BB28C97BA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{5EE62AA5-0DBB-43E1-9C62-5D0576E87330}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{ECF65CBD-7829-48E9-809F-469C48DB3E37}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{2D638882-4852-4A30-81CB-45063FD8D9D1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{409E3A01-EBB9-4AE2-AEB2-E115250DA963}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{FD21D0E7-5FEF-461E-9556-58DA367172AD}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{22A12214-FA25-4FBE-90FF-8453588F1C36}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [UDP Query User{CD95E94D-DD51-4F98-B0D0-C084228FE1F9}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [{215FED96-E7F0-4632-93C1-29A8B8033A50}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{86F3F872-24B6-495B-904B-825B1EC60F10}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{B5E4935C-2D38-420F-8ADA-52621D9B1780}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{707E905E-F114-474A-9494-2AA2F117749A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{EA96767C-B5C3-45D3-99FD-A8477A8D9B18}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4450C1BF-3B23-4E47-B9F5-0B22132FF94D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{8E62F398-08DA-40AC-B1D3-4D6BE3B4A746}] => (Allow) C:\Users\Admin\AppData\Local\Temp\7z989C71F4\MuMuDownloader.exe => No File
FirewallRules: [{D4376C89-15BF-41E8-B2A7-2EF3FF873145}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{8D904F42-721A-47CF-B31D-927EE0853181}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{0B336949-8D11-4842-A19C-A56D630174AF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E6EA77C8-B0C2-4F5E-B051-4F11B299FBDF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BACF7064-9A81-4464-83B9-7B05F32F5212}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B2B9D991-9277-4750-AF9C-CD6F33BF08C6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{6722C416-1E99-441F-9EE9-07C03EDBF692}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E33472CF-E13D-42C0-8AA3-4D17B0179F66}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5FC88935-8940-4240-86A5-3FFCFBAAEB83}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3E17F3C9-BFD7-4850-890A-1AC921FC5690}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{41AE0C84-A940-490E-95A8-31833053EDD0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BED724C3-4A64-49F4-B85E-A34A59598EC2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1DB2C7F8-5EE1-46DB-9B67-943BD45AF7E6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{AD0D2D05-3245-4F66-8B78-666725E5AA69}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{24369CA3-481E-4756-A564-3D2639DB9C2E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7253630C-FB34-4022-B52F-5942B076C431}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PEAK\PEAK.exe () [File not signed]
FirewallRules: [{0B964610-EB3A-408F-9D43-E3B08F449D58}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PEAK\PEAK.exe () [File not signed]
FirewallRules: [{1586AC2A-855C-4F4C-8ACE-3EF5B1E815D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\REPO\REPO.exe () [File not signed]
FirewallRules: [{1F4065D2-4A32-416F-9541-8ACB4B076F95}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\REPO\REPO.exe () [File not signed]
FirewallRules: [{2F2DF462-5930-41A6-929E-020566AE799C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe () [File not signed]
FirewallRules: [{123EFA1D-8149-4E7B-89C8-77DCE46C6567}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe () [File not signed]
FirewallRules: [{577A0973-0603-41CD-8B0F-4F566C9D8EBC}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{767FCD6B-98AF-45AC-A4A6-3FBDFA12706B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{E702068B-0219-4DEF-93C0-366D47CB773F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{AA8D76FC-D381-41C2-9103-BE842936472D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{1002291D-1535-4371-B158-A5F8D897893A}C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe] => (Block) C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe (Epic Games Inc. -> Psyonix, LLC)
FirewallRules: [UDP Query User{8DD37B45-EBA6-4AA4-B74B-0357F4239EA9}C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe] => (Block) C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe (Epic Games Inc. -> Psyonix, LLC)
FirewallRules: [{9E011CFC-2A98-4AE9-BAF6-FFB4B5A9701D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.36.6\TikTok LIVE Studio.exe (TikTok Pte. Ltd. -> TikTok Pte. Ltd.)
FirewallRules: [{378E1F5C-80ED-4C5E-A8EB-ED96BB6822CA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.36.6\TikTok LIVE Studio.exe (TikTok Pte. Ltd. -> TikTok Pte. Ltd.)
FirewallRules: [{07B8FD14-0B81-4624-AFC9-164C30FB1FF3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{7802F457-4446-4B40-AF78-F2FA239B0F3F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [TCP Query User{BD26E197-AC5A-44BC-BCA1-73AE8097FB8C}C:\users\admin\appdata\local\capcut\apps\9.5.0.4050\capcut.exe] => (Block) C:\users\admin\appdata\local\capcut\apps\9.5.0.4050\capcut.exe (Bytedance Pte. Ltd. -> ByteDance)
FirewallRules: [UDP Query User{3362BC92-5483-4020-A3BD-8566E77C4907}C:\users\admin\appdata\local\capcut\apps\9.5.0.4050\capcut.exe] => (Block) C:\users\admin\appdata\local\capcut\apps\9.5.0.4050\capcut.exe (Bytedance Pte. Ltd. -> ByteDance)
FirewallRules: [{10E966BA-A23C-4F1D-81A8-05D6C7646C05}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Fish\How to Fish\How to Fish.exe () [File not signed]
FirewallRules: [{594917C0-5A61-4DE1-86A2-66587A66C4EB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Fish\How to Fish\How to Fish.exe () [File not signed]
FirewallRules: [{8364E44D-8239-4632-AC04-514CF01C4BBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Phasmophobia\Phasmophobia.exe () [File not signed]
FirewallRules: [{2D23DD9A-6465-4D62-B9F1-6CF22CA3B89E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Phasmophobia\Phasmophobia.exe () [File not signed]
FirewallRules: [TCP Query User{62F71AF7-E751-4870-8590-0A25945AA560}C:\users\admin\appdata\local\capcut\apps\9.6.0.4097\capcut.exe] => (Block) C:\users\admin\appdata\local\capcut\apps\9.6.0.4097\capcut.exe (Bytedance Pte. Ltd. -> ByteDance)
FirewallRules: [UDP Query User{1ABA5F83-7558-4EF7-BA37-326F385EBA5F}C:\users\admin\appdata\local\capcut\apps\9.6.0.4097\capcut.exe] => (Block) C:\users\admin\appdata\local\capcut\apps\9.6.0.4097\capcut.exe (Bytedance Pte. Ltd. -> ByteDance)
FirewallRules: [TCP Query User{E8383464-7AD1-4A6A-AF31-121D87B000CD}C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe] => (Allow) C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe (Blackmagic Design Pty Ltd -> Blackmagic Design)
FirewallRules: [UDP Query User{21745D61-77B0-43D9-B9C4-6A48AF62DC54}C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe] => (Allow) C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe (Blackmagic Design Pty Ltd -> Blackmagic Design)
FirewallRules: [{8943C3EE-BFED-422A-9A6B-1F0F37EFCA0C}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{8E10AC50-7DE5-4CB2-BE70-0AA1EB0A067B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{64E9057A-6E84-413D-86DA-5F2DE62F3091}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{701A06C3-9E3F-4800-8649-B2ECFBE58A87}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{C0C6CDBF-38C1-4EF2-A762-919B031A8C4A}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{5A9BC69C-67AE-43D1-AE81-486A9C6FB993}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{A7197D3A-1711-415B-BD30-5F456CF5FE7E}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => No File
FirewallRules: [{3BF4D3B5-79CB-40A1-86EF-47145AC8FC7B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [TCP Query User{1008DB49-8F65-49DD-A16F-852442C6B688}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [UDP Query User{4BC75FDE-D25D-46E9-9D76-62E27D7953B9}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{744DEF89-F7EC-452E-A74E-A26DEE76C2A8}] => (Allow) C:\Program Files\Voicemod V3\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.)
FirewallRules: [{568A7599-4DC9-4517-97C5-9F17A3FE723A}] => (Allow) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc., Sucursal en España)
FirewallRules: [{04160A98-AB84-40D2-8969-03604D55A606}] => (Allow) C:\Program Files\Voicemod V3\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.)
FirewallRules: [{1894A175-FE48-463B-A9E0-13CC19B5E47F}] => (Allow) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc., Sucursal en España)
FirewallRules: [{7A68EA4D-99F1-47A0-A497-AD0E71134B85}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BE16D474-9FFF-4884-86F0-99722C53C960}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1B0CE806-8085-42DF-AAD9-69972A1646B2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DBB0855C-0CA1-472D-95EB-156AA6F87876}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3B9F06A4-7BDA-4EF2-B01B-C5B5C62FECD2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A990D891-C8C1-44B3-B6A1-30622B63D2AF}] => (Allow) C:\Program Files\Avast Software\Suite\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{481ABE8A-35D0-43E3-B848-67ECE7EC2E08}] => (Allow) C:\Program Files\Avast Software\Suite\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{A8D9C8FA-329A-4F03-85F4-9E50034E2D90}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe (Gen Digital Inc. -> Gen Digital Inc.)

==================== Restore Points =========================

01-11-2026 11:07:39 Naplánovaný kontrolní bod
04-11-2026 18:16:03 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (11/04/2026 07:07:55 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..

Error: (11/04/2026 07:07:55 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]

Error: (11/04/2026 07:07:55 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..

Error: (11/04/2026 07:07:55 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]

Error: (11/04/2026 06:55:10 PM) (Source: SteelSeries GG Update Service Proxy) (EventID: 0) (User: )
Description: Službu nelze spustit. Neplatný popisovač

Error: (11/04/2026 06:44:25 PM) (Source: SpotifySessionConnectedTask) (EventID: 100) (User: )
Description: Event-ID 100

Error: (11/04/2026 06:44:25 PM) (Source: SpotifySessionConnectedTask) (EventID: 100) (User: )
Description: Event-ID 100

Error: (11/04/2026 06:44:25 PM) (Source: SpotifySessionConnectedTask) (EventID: 100) (User: )
Description: Event-ID 100


System errors:
=============
Error: (11/06/2026 03:42:04 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024891

Error: (11/06/2026 03:42:04 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024891

Error: (11/05/2026 08:06:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-Q9C497L)
Description: Server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/05/2026 08:06:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-Q9C497L)
Description: Server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/05/2026 08:06:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-Q9C497L)
Description: Server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/05/2026 08:06:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-Q9C497L)
Description: Server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/05/2026 05:06:14 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024891

Error: (11/05/2026 05:06:14 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT AUTHORITY)
Description: 18-2147024891


Windows Defender:
================

TimeCreated : 04.11.2026 18:44:19
Message : Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Microsoft Defender zjistila ch
ybu a došlo k jejímu selhání.
Funkce: Při přístupu
Kód chyby: 0x8007043c
Popis chyby: Tuto službu nelze spustit v nouzovém režimu.
Důvod: Antimalwarové bezpečnostní informace přestaly z neznámých důvodů fungovat. V některých případech
se tento problém dá vyřešit restartováním služby.

TimeCreated : 30.10.2026 12:46:00
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.226.0;1.461.226.0
Verze modulu: 1.1.26090.9

TimeCreated : 29.10.2026 20:41:21
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80004004
Popis chyby: Operace přerušena
Verze bezpečnostních informací: 1.461.226.0;1.461.226.0
Verze modulu: 1.1.26090.9

TimeCreated : 27.10.2026 20:38:15
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.226.0;1.461.226.0
Verze modulu: 1.1.26090.9

TimeCreated : 27.10.2026 17:31:03
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.226.0;1.461.226.0
Verze modulu: 1.1.26090.9

TimeCreated : 26.10.2026 20:15:18
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.118.0;1.461.118.0
Verze modulu: 1.1.26090.9

TimeCreated : 25.10.2026 17:41:48
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.118.0;1.461.118.0
Verze modulu: 1.1.26090.9

TimeCreated : 25.10.2026 16:27:30
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte s
puštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.461.118.0;1.461.118.0
Verze modulu: 1.1.26090.9


CodeIntegrity:
===============
Date: 2026-11-06 16:55:29
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Avast Software\Suite\AvastSvc.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2026-11-06 16:55:15
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.


==================== Memory info ===========================

BIOS: American Megatrends International, LLC. F32c 09/27/2024
Motherboard: Gigabyte Technology Co., Ltd. B650 EAGLE
Processor: AMD Ryzen 5 7500F 6-Core Processor
Percentage of memory in use: 37%
Total physical RAM: 32373.98 MB
Available physical RAM: 20192.54 MB
Total Virtual: 34421.98 MB
Available Virtual: 20145.5 MB

==================== Drives ================================

Disk 0 - Drive c: () (Fixed) (Total:1862.03 GB) (Free:187.99 GB) (Model: CT2000P3SSD8) NTFS

Disk 0 - \\?\Volume{3990697d-79a5-4710-b5c4-77254586f79f}\ () (Fixed) (Total:890 MB) (Free:79.79 MB) NTFS
Disk 0 - \\?\Volume{59123e19-caa7-40fd-a8a0-3c38794a61b9}\ () (Fixed) (Total:96 MB) (Free:61.36 MB) FAT32

==================== MBR & Partition Table ====================

============================================================
Disk: 0 (Protective MBR) (Size: 1863.02 GB)

Partitions:
===========
Partition Style : GPT
Partition Count : 4
Disk ID : {76BCECEC-BC9B-48F0-A8B9-60CF12F12F20}
Usable Offset : 0.02 MB
Usable Length : 1863.02 GB
Max Partitions : 128

Partition 1
Type : EFI System Partition
Size : 100 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {59123E19-CAA7-40FD-A8A0-3C38794A61B9}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 101 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {B7B3236C-33E9-4EAA-9C13-BE1D7611C0D8}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 1862.03 GB
Offset : 117 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {C9758B50-398B-4A44-A85B-86665D608EB9}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 890 MB
Offset : 1906838 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {3990697D-79A5-4710-B5C4-77254586F79F}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------

============================================================

==================== End of Addition.txt =======================

Re: prosím o kontrolu logu - podezření na viry

Odeslal: 06 Lis 2026 18:52
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [4972]
FirewallRules: [TCP Query User{88AB6B4D-6638-4946-9A8A-0905C94B2B81}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [UDP Query User{0C9AF6B4-1058-413C-A184-8A98E94683D0}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [{CDBB6416-F267-4F74-8052-0AE83391AC82}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{D82F45DC-2FC2-45CF-8F86-0120E3031449}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [TCP Query User{CF5A0BAA-0E88-4FE9-AA1D-2530EBC6649A}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{BCCFA34E-8272-4B5E-9F5C-0C702E12ABB5}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D43736FA-29F7-4E4B-BF8E-6889A8D80E12}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{85FBDAE0-0E28-4331-AE92-DD1DF56D2CE5}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D3489764-AE18-45D3-96FA-7529DE34DCE9}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [UDP Query User{3D37AFE3-EAE7-435C-BF55-AD2EE6B4EA1D}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [TCP Query User{CBA17841-71B9-4630-B121-F032E48EE224}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [UDP Query User{315C6DCD-E090-4198-A6C3-462C461D622D}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [{5EC48E1D-2712-4C6B-BB49-4247E5ACE0B5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [{259AC075-D7C3-4196-94AB-8EBA81F77AD5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [TCP Query User{CC99B756-1DBE-43BD-A9AD-AEC246F72999}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{1866190C-7EE2-48D1-BB73-82A04252DCDB}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{1A023ACF-952C-4D59-9FC1-03A9860656F6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [UDP Query User{73B4135B-8C02-42B2-B752-A75AAA30B5E6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [TCP Query User{F1F7BD7A-C3C0-4084-A998-FE8D6DDF145E}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{6F86EDAC-7A90-465C-8AC3-55B95E0F5650}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{CCD34B29-7380-49CD-9730-280319E0CF6D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [UDP Query User{AECC118C-A413-4ABD-A621-398FF0DC465D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [TCP Query User{BA3992A9-B9FC-4485-9C64-9B366072C793}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{D31DFE94-6334-4EE4-8CD7-F4B369C1EAAB}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{92D5A576-CE3E-4CC8-A152-86F1366A871C}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [UDP Query User{216CDC1E-9286-4C82-B257-8CD85468A712}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [TCP Query User{F2AEAD66-8B45-4BEB-B575-C88E45038B12}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{81A55120-7689-4005-A673-4EE258157004}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{0AF2CC85-4A06-4C44-9CA9-7F4C7354473C}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F82EB1E7-9DD8-48DA-B02E-C243351F60CC}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{173FC992-40BA-4633-89F9-AA2965276ACE}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F0837634-637E-40D8-A950-FB86BC1BC4B4}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{8A2F0EE0-D927-45B8-9CA9-91D230F26D2C}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{8EFBDF77-A249-45D6-9EDC-15D8BBD9FAF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4A4DE719-4364-4564-A847-AB47B322ECA2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{677EF203-6635-48EF-B562-48CF6411307B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{71A5BBC5-7F7F-4645-B3C2-8B6C9C83A4C6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{01DA68A4-AB3C-4921-A772-95D8D3878B32}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{F7681C02-0091-4DF3-95EE-3EE43C528AC1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{DD55A498-15AD-4545-8376-4D75FDCAE3C9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{19AD629F-428A-4833-B643-39C96B116E05}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{BCFF6CAD-2369-42AE-B070-BEBC49D60766}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D12E4076-F5BC-4D07-B73E-35C748E86452}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{D5A10769-CAD3-4C7C-8991-2D703B01B3E6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{46A272F7-EDC0-4061-BF95-B76EE29302EB}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{9A0E4C3A-A4ED-4A71-A2E5-5C4F5958ABEA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{D5F35CE3-D82E-4DF6-A94F-30BF0EF5772C}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{CFDA5567-4DEC-4F40-AC08-795B0A5CA9FA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B644D7E1-E20A-485E-86E9-64419765DEF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{51DFAEBE-9F39-41CD-B4B8-7235A3E14C86}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{61F57EA3-2AEB-420D-B314-4FA96AA3B86B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4EA28662-4E13-4B7A-8052-CEE17FBA55F2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{ED30486E-5490-4100-9023-E7F3F1D169CF}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{8759969D-21A5-4B84-9945-6F03BCF9A2F4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B0E062FB-E7EB-4E18-9F23-3EC08D059BC9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{307A0CB2-60FE-456D-96F4-69268448538D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{4530A273-CE45-4AD5-B5CB-882C3C805C39}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{C5D0C516-CE5C-480E-9711-4E22BD94C55D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{60BC40E1-BC11-4D63-BEDD-F3324C6CABC0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4B9831D5-EB9A-4F4F-A588-EF35B7B77E24}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{C0B50B5C-8132-4B42-A645-2D07FA9DD518}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{A41085B3-DC2E-4212-B5B2-5823212D0359}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{3DD60A03-A2F5-4452-96DF-5418D59D98E9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{E9165354-5981-4589-9CEE-B57F37AE11C1}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [UDP Query User{8966F311-8EB8-4FA2-AF9F-8C5717376EE4}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [{D9A15950-4609-4CE8-857B-AC8BE23F38C4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{D8A08B47-BFC8-458E-81B0-EC2A91D97094}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{3E461FF7-42FD-4394-B2C6-A04519DAEE4A}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D7CF90F2-82B5-488C-97C6-530152E9FB14}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{2361B9AE-52DC-423B-AF73-B7A45A0EDD04}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{D1505DBD-1C57-4B6C-B70B-1A62DDA4D291}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{AD125465-9351-40BC-8D4A-500DD71A6C47}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{709F2DF8-B84C-4498-92EF-4BAA0CB5775A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{BE349F34-3776-4C21-9CA1-2F8BFDF5BF7F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{9128B5E2-70AB-46CB-95F5-C4A5CFDACD76}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{48A26039-1EB8-4A17-BDD7-529BB28C97BA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{5EE62AA5-0DBB-43E1-9C62-5D0576E87330}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{ECF65CBD-7829-48E9-809F-469C48DB3E37}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{2D638882-4852-4A30-81CB-45063FD8D9D1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{409E3A01-EBB9-4AE2-AEB2-E115250DA963}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{FD21D0E7-5FEF-461E-9556-58DA367172AD}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{22A12214-FA25-4FBE-90FF-8453588F1C36}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [UDP Query User{CD95E94D-DD51-4F98-B0D0-C084228FE1F9}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [{215FED96-E7F0-4632-93C1-29A8B8033A50}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{86F3F872-24B6-495B-904B-825B1EC60F10}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{B5E4935C-2D38-420F-8ADA-52621D9B1780}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{707E905E-F114-474A-9494-2AA2F117749A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{EA96767C-B5C3-45D3-99FD-A8477A8D9B18}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4450C1BF-3B23-4E47-B9F5-0B22132FF94D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{8E62F398-08DA-40AC-B1D3-4D6BE3B4A746}] => (Allow) C:\Users\Admin\AppData\Local\Temp\7z989C71F4\MuMuDownloader.exe => No File
FirewallRules: [{D4376C89-15BF-41E8-B2A7-2EF3FF873145}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{8D904F42-721A-47CF-B31D-927EE0853181}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{577A0973-0603-41CD-8B0F-4F566C9D8EBC}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{767FCD6B-98AF-45AC-A4A6-3FBDFA12706B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{E702068B-0219-4DEF-93C0-366D47CB773F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{AA8D76FC-D381-41C2-9103-BE842936472D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Environment\\UserInitMprLogonScript: -> (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
S3 AppShellElevationService; "C:\Program Files\TikTok LIVE Studio\1.14.2\elevation_service.exe" (No File)
S1 eocquekn; \??\C:\WINDOWS\system32\drivers\eocquekn.sys (No File)
S3 HWiNFO_202; \??\C:\Users\Admin\AppData\Local\Temp\HWiNFO_x64_202.sys (No File) <==== ATTENTION
C:\DumpStack.log.tmp

EmptyTemp:
Hosts:
End
Uložte do C:\Users\Admin\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: prosím o kontrolu logu - podezření na viry. toto mi vyskočilo po restartu pc

Odeslal: 06 Lis 2026 19:29
od PITICKOOO
Fix result of Farbar Recovery Scan Tool (x64) Version: 01-11-2026
Ran by Admin (06-11-2026 19:03:20) Run:2
Running from C:\Users\Admin\Downloads
Loaded Profiles: Admin
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [4972]
FirewallRules: [TCP Query User{88AB6B4D-6638-4946-9A8A-0905C94B2B81}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [UDP Query User{0C9AF6B4-1058-413C-A184-8A98E94683D0}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) C:\xboxgames\forza horizon 5\content\forzahorizon5.exe => No File
FirewallRules: [{CDBB6416-F267-4F74-8052-0AE83391AC82}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{D82F45DC-2FC2-45CF-8F86-0120E3031449}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [TCP Query User{CF5A0BAA-0E88-4FE9-AA1D-2530EBC6649A}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{BCCFA34E-8272-4B5E-9F5C-0C702E12ABB5}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe] => (Allow) C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D43736FA-29F7-4E4B-BF8E-6889A8D80E12}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{85FBDAE0-0E28-4331-AE92-DD1DF56D2CE5}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe] => (Block) C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{D3489764-AE18-45D3-96FA-7529DE34DCE9}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [UDP Query User{3D37AFE3-EAE7-435C-BF55-AD2EE6B4EA1D}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe] => (Block) C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe => No File
FirewallRules: [TCP Query User{CBA17841-71B9-4630-B121-F032E48EE224}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [UDP Query User{315C6DCD-E090-4198-A6C3-462C461D622D}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe] => (Allow) C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe => No File
FirewallRules: [{5EC48E1D-2712-4C6B-BB49-4247E5ACE0B5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [{259AC075-D7C3-4196-94AB-8EBA81F77AD5}] => (Allow) C:\XboxGames\Splitgate 2\Content\PortalWars2\Binaries\WinGDK\PortalWars2Client-WinGDK-Shipping.exe => No File
FirewallRules: [TCP Query User{CC99B756-1DBE-43BD-A9AD-AEC246F72999}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{1866190C-7EE2-48D1-BB73-82A04252DCDB}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe] => (Allow) C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{1A023ACF-952C-4D59-9FC1-03A9860656F6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [UDP Query User{73B4135B-8C02-42B2-B752-A75AAA30B5E6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe] => (Block) C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe => No File
FirewallRules: [TCP Query User{F1F7BD7A-C3C0-4084-A998-FE8D6DDF145E}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{6F86EDAC-7A90-465C-8AC3-55B95E0F5650}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe] => (Block) C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{CCD34B29-7380-49CD-9730-280319E0CF6D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [UDP Query User{AECC118C-A413-4ABD-A621-398FF0DC465D}C:\xboxgames\no man's sky\content\binaries\nms.exe] => (Block) C:\xboxgames\no man's sky\content\binaries\nms.exe => No File
FirewallRules: [TCP Query User{BA3992A9-B9FC-4485-9C64-9B366072C793}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{D31DFE94-6334-4EE4-8CD7-F4B369C1EAAB}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe] => (Block) C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{92D5A576-CE3E-4CC8-A152-86F1366A871C}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [UDP Query User{216CDC1E-9286-4C82-B257-8CD85468A712}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File
FirewallRules: [TCP Query User{F2AEAD66-8B45-4BEB-B575-C88E45038B12}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{81A55120-7689-4005-A673-4EE258157004}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{0AF2CC85-4A06-4C44-9CA9-7F4C7354473C}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F82EB1E7-9DD8-48DA-B02E-C243351F60CC}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [TCP Query User{173FC992-40BA-4633-89F9-AA2965276ACE}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{F0837634-637E-40D8-A950-FB86BC1BC4B4}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{8A2F0EE0-D927-45B8-9CA9-91D230F26D2C}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{8EFBDF77-A249-45D6-9EDC-15D8BBD9FAF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4A4DE719-4364-4564-A847-AB47B322ECA2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.10.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{677EF203-6635-48EF-B562-48CF6411307B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{71A5BBC5-7F7F-4645-B3C2-8B6C9C83A4C6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{01DA68A4-AB3C-4921-A772-95D8D3878B32}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{F7681C02-0091-4DF3-95EE-3EE43C528AC1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.11.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{DD55A498-15AD-4545-8376-4D75FDCAE3C9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{19AD629F-428A-4833-B643-39C96B116E05}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.12.0\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{BCFF6CAD-2369-42AE-B070-BEBC49D60766}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D12E4076-F5BC-4D07-B73E-35C748E86452}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{D5A10769-CAD3-4C7C-8991-2D703B01B3E6}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{46A272F7-EDC0-4061-BF95-B76EE29302EB}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.14.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{9A0E4C3A-A4ED-4A71-A2E5-5C4F5958ABEA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{D5F35CE3-D82E-4DF6-A94F-30BF0EF5772C}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{CFDA5567-4DEC-4F40-AC08-795B0A5CA9FA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B644D7E1-E20A-485E-86E9-64419765DEF0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.16.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{51DFAEBE-9F39-41CD-B4B8-7235A3E14C86}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{61F57EA3-2AEB-420D-B314-4FA96AA3B86B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.17.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4EA28662-4E13-4B7A-8052-CEE17FBA55F2}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{ED30486E-5490-4100-9023-E7F3F1D169CF}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{8759969D-21A5-4B84-9945-6F03BCF9A2F4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{B0E062FB-E7EB-4E18-9F23-3EC08D059BC9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{307A0CB2-60FE-456D-96F4-69268448538D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{4530A273-CE45-4AD5-B5CB-882C3C805C39}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.18.8\TikTok LIVE Studio.exe => No File
FirewallRules: [{C5D0C516-CE5C-480E-9711-4E22BD94C55D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{60BC40E1-BC11-4D63-BEDD-F3324C6CABC0}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.19.9\TikTok LIVE Studio.exe => No File
FirewallRules: [{4B9831D5-EB9A-4F4F-A588-EF35B7B77E24}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{C0B50B5C-8132-4B42-A645-2D07FA9DD518}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.22.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{A41085B3-DC2E-4212-B5B2-5823212D0359}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{3DD60A03-A2F5-4452-96DF-5418D59D98E9}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.21.4\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{E9165354-5981-4589-9CEE-B57F37AE11C1}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [UDP Query User{8966F311-8EB8-4FA2-AF9F-8C5717376EE4}C:\program files\ldplayer9box\ld9boxheadless.exe] => (Block) C:\program files\ldplayer9box\ld9boxheadless.exe => No File
FirewallRules: [{D9A15950-4609-4CE8-857B-AC8BE23F38C4}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{D8A08B47-BFC8-458E-81B0-EC2A91D97094}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.23.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{3E461FF7-42FD-4394-B2C6-A04519DAEE4A}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [UDP Query User{D7CF90F2-82B5-488C-97C6-530152E9FB14}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe] => (Allow) C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe => No File
FirewallRules: [{2361B9AE-52DC-423B-AF73-B7A45A0EDD04}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{D1505DBD-1C57-4B6C-B70B-1A62DDA4D291}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerMirror\ApowerMirror.exe => No File
FirewallRules: [{AD125465-9351-40BC-8D4A-500DD71A6C47}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{709F2DF8-B84C-4498-92EF-4BAA0CB5775A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.24.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{BE349F34-3776-4C21-9CA1-2F8BFDF5BF7F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{9128B5E2-70AB-46CB-95F5-C4A5CFDACD76}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.25.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{48A26039-1EB8-4A17-BDD7-529BB28C97BA}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{5EE62AA5-0DBB-43E1-9C62-5D0576E87330}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.27.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{ECF65CBD-7829-48E9-809F-469C48DB3E37}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{2D638882-4852-4A30-81CB-45063FD8D9D1}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.29.2\TikTok LIVE Studio.exe => No File
FirewallRules: [TCP Query User{409E3A01-EBB9-4AE2-AEB2-E115250DA963}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [UDP Query User{FD21D0E7-5FEF-461E-9556-58DA367172AD}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe] => (Block) C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe => No File
FirewallRules: [TCP Query User{22A12214-FA25-4FBE-90FF-8453588F1C36}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [UDP Query User{CD95E94D-DD51-4F98-B0D0-C084228FE1F9}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe] => (Allow) C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe => No File
FirewallRules: [{215FED96-E7F0-4632-93C1-29A8B8033A50}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{86F3F872-24B6-495B-904B-825B1EC60F10}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.30.3\TikTok LIVE Studio.exe => No File
FirewallRules: [{B5E4935C-2D38-420F-8ADA-52621D9B1780}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{707E905E-F114-474A-9494-2AA2F117749A}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.31.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{EA96767C-B5C3-45D3-99FD-A8477A8D9B18}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{4450C1BF-3B23-4E47-B9F5-0B22132FF94D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{8E62F398-08DA-40AC-B1D3-4D6BE3B4A746}] => (Allow) C:\Users\Admin\AppData\Local\Temp\7z989C71F4\MuMuDownloader.exe => No File
FirewallRules: [{D4376C89-15BF-41E8-B2A7-2EF3FF873145}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{8D904F42-721A-47CF-B31D-927EE0853181}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.32.4\TikTok LIVE Studio.exe => No File
FirewallRules: [{577A0973-0603-41CD-8B0F-4F566C9D8EBC}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{767FCD6B-98AF-45AC-A4A6-3FBDFA12706B}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.34.0\TikTok LIVE Studio.exe => No File
FirewallRules: [{E702068B-0219-4DEF-93C0-366D47CB773F}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
FirewallRules: [{AA8D76FC-D381-41C2-9103-BE842936472D}] => (Allow) C:\Program Files\TikTok LIVE Studio\1.35.2\TikTok LIVE Studio.exe => No File
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Environment\\UserInitMprLogonScript: -> (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
S3 AppShellElevationService; "C:\Program Files\TikTok LIVE Studio\1.14.2\elevation_service.exe" (No File)
S1 eocquekn; \??\C:\WINDOWS\system32\drivers\eocquekn.sys (No File)
S3 HWiNFO_202; \??\C:\Users\Admin\AppData\Local\Temp\HWiNFO_x64_202.sys (No File) <==== ATTENTION
C:\DumpStack.log.tmp

EmptyTemp:
Hosts:
End
*****************

Processes closed successfully.
C:\Users\Public\Shared Files => ":VersionCache" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{88AB6B4D-6638-4946-9A8A-0905C94B2B81}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0C9AF6B4-1058-413C-A184-8A98E94683D0}C:\xboxgames\forza horizon 5\content\forzahorizon5.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CDBB6416-F267-4F74-8052-0AE83391AC82}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D82F45DC-2FC2-45CF-8F86-0120E3031449}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CF5A0BAA-0E88-4FE9-AA1D-2530EBC6649A}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{BCCFA34E-8272-4B5E-9F5C-0C702E12ABB5}C:\xboxgames\deep rock galactic\content\fsd\binaries\wingdk\fsd-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D43736FA-29F7-4E4B-BF8E-6889A8D80E12}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{85FBDAE0-0E28-4331-AE92-DD1DF56D2CE5}C:\xboxgames\grounded\content\maine\binaries\wingdk\maine-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D3489764-AE18-45D3-96FA-7529DE34DCE9}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3D37AFE3-EAE7-435C-BF55-AD2EE6B4EA1D}C:\xboxgames\microsoft flight simulator\content\flightsimulator.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CBA17841-71B9-4630-B121-F032E48EE224}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{315C6DCD-E090-4198-A6C3-462C461D622D}C:\xboxgames\sea of thieves\content\athena\binaries\wingdk\sotgame.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5EC48E1D-2712-4C6B-BB49-4247E5ACE0B5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{259AC075-D7C3-4196-94AB-8EBA81F77AD5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CC99B756-1DBE-43BD-A9AD-AEC246F72999}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1866190C-7EE2-48D1-BB73-82A04252DCDB}C:\xboxgames\grounded 2\content\augusta\binaries\wingdk\grounded2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1A023ACF-952C-4D59-9FC1-03A9860656F6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{73B4135B-8C02-42B2-B752-A75AAA30B5E6}C:\xboxgames\ark- survival ascended\content\shootergame\binaries\wingdk\arkascended.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F1F7BD7A-C3C0-4084-A998-FE8D6DDF145E}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6F86EDAC-7A90-465C-8AC3-55B95E0F5650}C:\xboxgames\palworld\content\pal\binaries\wingdk\palworld-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CCD34B29-7380-49CD-9730-280319E0CF6D}C:\xboxgames\no man's sky\content\binaries\nms.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{AECC118C-A413-4ABD-A621-398FF0DC465D}C:\xboxgames\no man's sky\content\binaries\nms.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BA3992A9-B9FC-4485-9C64-9B366072C793}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D31DFE94-6334-4EE4-8CD7-F4B369C1EAAB}C:\xboxgames\lightyear frontier\content\farmech\binaries\wingdk\farmech-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{92D5A576-CE3E-4CC8-A152-86F1366A871C}C:\riot games\riot client\riotclientelectron\riot client.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{216CDC1E-9286-4C82-B257-8CD85468A712}C:\riot games\riot client\riotclientelectron\riot client.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F2AEAD66-8B45-4BEB-B575-C88E45038B12}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{81A55120-7689-4005-A673-4EE258157004}C:\program files\tiktok live studio\0.96.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0AF2CC85-4A06-4C44-9CA9-7F4C7354473C}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F82EB1E7-9DD8-48DA-B02E-C243351F60CC}C:\program files\tiktok live studio\0.96.6\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{173FC992-40BA-4633-89F9-AA2965276ACE}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F0837634-637E-40D8-A950-FB86BC1BC4B4}C:\program files\tiktok live studio\0.97.4\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8A2F0EE0-D927-45B8-9CA9-91D230F26D2C}C:\program files\tiktok live studio\1.10.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8EFBDF77-A249-45D6-9EDC-15D8BBD9FAF0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4A4DE719-4364-4564-A847-AB47B322ECA2}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{677EF203-6635-48EF-B562-48CF6411307B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{71A5BBC5-7F7F-4645-B3C2-8B6C9C83A4C6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{01DA68A4-AB3C-4921-A772-95D8D3878B32}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F7681C02-0091-4DF3-95EE-3EE43C528AC1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DD55A498-15AD-4545-8376-4D75FDCAE3C9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{19AD629F-428A-4833-B643-39C96B116E05}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BCFF6CAD-2369-42AE-B070-BEBC49D60766}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D12E4076-F5BC-4D07-B73E-35C748E86452}C:\program files\tiktok live studio\1.12.0\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D5A10769-CAD3-4C7C-8991-2D703B01B3E6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{46A272F7-EDC0-4061-BF95-B76EE29302EB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9A0E4C3A-A4ED-4A71-A2E5-5C4F5958ABEA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D5F35CE3-D82E-4DF6-A94F-30BF0EF5772C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CFDA5567-4DEC-4F40-AC08-795B0A5CA9FA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B644D7E1-E20A-485E-86E9-64419765DEF0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{51DFAEBE-9F39-41CD-B4B8-7235A3E14C86}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{61F57EA3-2AEB-420D-B314-4FA96AA3B86B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4EA28662-4E13-4B7A-8052-CEE17FBA55F2}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{ED30486E-5490-4100-9023-E7F3F1D169CF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8759969D-21A5-4B84-9945-6F03BCF9A2F4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B0E062FB-E7EB-4E18-9F23-3EC08D059BC9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{307A0CB2-60FE-456D-96F4-69268448538D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4530A273-CE45-4AD5-B5CB-882C3C805C39}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C5D0C516-CE5C-480E-9711-4E22BD94C55D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{60BC40E1-BC11-4D63-BEDD-F3324C6CABC0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4B9831D5-EB9A-4F4F-A588-EF35B7B77E24}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C0B50B5C-8132-4B42-A645-2D07FA9DD518}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A41085B3-DC2E-4212-B5B2-5823212D0359}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3DD60A03-A2F5-4452-96DF-5418D59D98E9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E9165354-5981-4589-9CEE-B57F37AE11C1}C:\program files\ldplayer9box\ld9boxheadless.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8966F311-8EB8-4FA2-AF9F-8C5717376EE4}C:\program files\ldplayer9box\ld9boxheadless.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D9A15950-4609-4CE8-857B-AC8BE23F38C4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D8A08B47-BFC8-458E-81B0-EC2A91D97094}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3E461FF7-42FD-4394-B2C6-A04519DAEE4A}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D7CF90F2-82B5-488C-97C6-530152E9FB14}C:\program files\tiktok live studio\1.23.2\resources\app\electron\sdk\lib\mediasdk_server.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2361B9AE-52DC-423B-AF73-B7A45A0EDD04}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D1505DBD-1C57-4B6C-B70B-1A62DDA4D291}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AD125465-9351-40BC-8D4A-500DD71A6C47}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{709F2DF8-B84C-4498-92EF-4BAA0CB5775A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BE349F34-3776-4C21-9CA1-2F8BFDF5BF7F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9128B5E2-70AB-46CB-95F5-C4A5CFDACD76}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{48A26039-1EB8-4A17-BDD7-529BB28C97BA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5EE62AA5-0DBB-43E1-9C62-5D0576E87330}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{ECF65CBD-7829-48E9-809F-469C48DB3E37}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2D638882-4852-4A30-81CB-45063FD8D9D1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{409E3A01-EBB9-4AE2-AEB2-E115250DA963}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{FD21D0E7-5FEF-461E-9556-58DA367172AD}C:\xboxgames\subnautica 2\content\subnautica2\binaries\wingdk\subnautica2-wingdk-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{22A12214-FA25-4FBE-90FF-8453588F1C36}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{CD95E94D-DD51-4F98-B0D0-C084228FE1F9}C:\users\admin\appdata\local\discord\app-1.0.9242\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{215FED96-E7F0-4632-93C1-29A8B8033A50}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{86F3F872-24B6-495B-904B-825B1EC60F10}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B5E4935C-2D38-420F-8ADA-52621D9B1780}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{707E905E-F114-474A-9494-2AA2F117749A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EA96767C-B5C3-45D3-99FD-A8477A8D9B18}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4450C1BF-3B23-4E47-B9F5-0B22132FF94D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8E62F398-08DA-40AC-B1D3-4D6BE3B4A746}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D4376C89-15BF-41E8-B2A7-2EF3FF873145}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8D904F42-721A-47CF-B31D-927EE0853181}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{577A0973-0603-41CD-8B0F-4F566C9D8EBC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{767FCD6B-98AF-45AC-A4A6-3FBDFA12706B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E702068B-0219-4DEF-93C0-366D47CB773F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AA8D76FC-D381-41C2-9103-BE842936472D}" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
"HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Environment\\UserInitMprLogonScript" => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
HKLM\System\CurrentControlSet\Services\AppShellElevationService => removed successfully
AppShellElevationService => service removed successfully
HKLM\System\CurrentControlSet\Services\eocquekn => removed successfully
eocquekn => service removed successfully
HKLM\System\CurrentControlSet\Services\HWiNFO_202 => removed successfully
HWiNFO_202 => service removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.

C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1835008 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 1569893947 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 1326811027 B
Windows/system/drivers => 135166366 B
Edge => 890679409 B
Firefox => 0 B
Opera => 274665138 B

Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 5 B
ProgramData => 987713 B
Public => 0 B
systemprofile => 475349 B
systemprofile32 => 0 B
LocalService => 703541 B
NetworkService => 479469 B
Admin => 52854361002 B

RecycleBin => 310413476 B
EmptyTemp: => 53.43 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 06-11-2026 19:18:47)

C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 19:18:47 ====

Re: prosím o kontrolu logu - podezření na viry

Odeslal: 06 Lis 2026 20:02
od Rudy
Smazáno, log již vypadá čistý.

Re: prosím o kontrolu logu - podezření na viry

Odeslal: 06 Lis 2026 20:05
od PITICKOOO
děkuji za pomoc

Re: prosím o kontrolu logu - podezření na viry

Odeslal: 06 Lis 2026 20:13
od Rudy
Nemáte zač! :-)