VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosim o kontrolu logu

https://forum.viry.cz:443/viewtopic.php?t=160924

Stránka 1 z 1

Prosim o kontrolu logu

Odeslal: 06 Lis 2026 19:26
od superjano
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-11-2026
Ran by micha (administrator) on MICHAL (LENOVO 82K2) (06-11-2026 19:19:31)
Running from C:\Users\micha\Desktop\FRST64.exe
Loaded Profiles: micha & SQLTELEMETRY & MSSQLSERVER
Platform: Microsoft Windows 11 Home Version 26H2 26300.9818 (X64) Language: Slovenčina (Slovensko)
Default browser: "C:\Users\micha\AppData\Local\Programs\Opera\opera.exe" -noautoupdate -- "%1"
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Users\micha\AppData\Local\Temp\scoped_dir25148_331441044\AnyDesk.exe <4>
(Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\httpd.exe
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantage-(LenovoGamingSystemAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastUI.exe
(C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\NIWebServiceContainer.exe
(C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\NIWebServiceContainer.exe <2>
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Dism\DismHost.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSSrcExt.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Program Files\WindowsApps\MSTeams_26276.513.5241.9675_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe
(drivers\lenovo\UDC\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\AppProvisioningPlugin.exe
(drivers\lenovo\UDC\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\CoreTelemetryPlugin.exe
(drivers\lenovo\UDC\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\MessagingPlugin.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\FnHotkeyCapsLKNumLK.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\FnHotkeyUtility.exe
(DriverStore\FileRepository\u0417253.inf_amd64_a9b363c4f94f001d\B417132\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0417253.inf_amd64_a9b363c4f94f001d\B417132\atieclxx.exe
(explorer.exe ->) (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI Error Reporting\nierserver.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9366beb5d0043df3\RtkAudUService64.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe <2>
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastUI.exe <3>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <8>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe <12>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.198.1011.0006\OneDrive.Sync.Service.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoNotificationUx.exe
(NahimicService.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicAPO4Volume.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvlti.inf_amd64_360580ba71c61256\Display.NvContainer\NVDisplay.Container.exe
(Opera Norway AS -> Opera Software) C:\Users\micha\AppData\Local\Programs\Opera\assistant\browser_assistant.exe <2>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9366beb5d0043df3\RtkAudUService64.exe
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0417253.inf_amd64_a9b363c4f94f001d\B417132\atiesrxx.exe
(services.exe ->) (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\httpd.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Driver Updater\DriverUpdSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (Intel Corporation -> ) C:\altera_lite\24.1std\quartus\bin64\jtagserver.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\lenovo\UDC\Service\UDClientService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncHelper.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\sqlceip.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.) C:\Windows\System32\mtkbtsvc.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\niauth\niauth_daemon.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Windows\SysWOW64\lkads.exe
(services.exe ->) (National Instruments Corporation -> National Instruments Corporation) C:\Windows\SysWOW64\lktsrv.exe
(services.exe ->) (National Instruments Corporation -> National Instruments, Inc.) C:\Windows\SysWOW64\lkcitdl.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvlti.inf_amd64_360580ba71c61256\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9366beb5d0043df3\RtkAudUService64.exe
(services.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicService.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(SteelSeries France SASU -> A-Volute) C:\Users\micha\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe
(svchost.exe ->) (21E1B422-257A-44A2-9C8F-379165856473 -> ) C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.15.0_x64__w2gh52qy24etm\Nahimic3.exe
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.4019.0_x64__8wekyb3d8bbwe\EdgeGameAssist.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.398.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.9815_none_a4f69e6b77712a7f\TiWorker.exe
(svchost.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicSvc64.exe
(svchost.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\SysWOW64\NahimicSvc32.exe
(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <7>
(ZONER software, a.s. -> ZONER software) C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9366beb5d0043df3\RtkAudUService64.exe [1987544 2024-08-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AVG Driver Updater UI] => C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe [8457392 2026-11-02] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [1082296 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [742536 2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe" [132820840 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725648 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5823128 2026-10-21] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [Advanced SystemCare] => "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto (No File)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [Discord] => C:\Users\micha\AppData\Local\Discord\Update.exe [1516408 2025-05-05] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [53241784 2026-10-30] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [Microsoft.Lists] => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\OneDrive.Sync.Service.exe [970088 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [AvastBrowserAutoLaunch_E8760D060CAF6C1EB31EBFCD30386D60] => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [563416 2015-07-12] (ZONER software, a.s. -> ZONER software)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [MicrosoftEdgeAutoLaunch_ED02E366447D09E4F124EF89B233D989] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5453128 2026-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Run: [Opera Browser Assistant] => C:\Users\micha\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [8159176 2026-11-03] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-629165207-329108147-321633127-1004\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725648 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725648 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725648 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP be2a Status Monitor: C:\Windows\system32\hpinkstsbe2aLM.dll [468576 2018-06-15] (Hewlett Packard -> HP Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files\AVAST Software\Browser\Application\154.0.35638.100\Installer\chrmstp.exe [6413680 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NI Error Reporting.lnk [2036-09-13]
ShortcutTarget: NI Error Reporting.lnk -> C:\Program Files (x86)\National Instruments\Shared\NI Error Reporting\nierserver.exe (National Instruments Corporation -> National Instruments Corporation)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {018DEE60-023C-48A2-81DB-22B236FC606A} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {1DA7A364-7C44-41F5-9E34-434D9387A64F} - \Lenovo\ImController\TimeBasedEvents\4d512b2b-5816-4dbb-8b6e-fceadf6240f9 -> No File <==== ATTENTION
Task: {B1414019-02C2-4710-A68B-C0FFC6FEE6E7} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {3B6D0ADD-E435-4330-BE12-F41C89A1AFCD} - System32\Tasks\ASC_PerformanceMonitor => "C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/Task <==== ATTENTION
Task: {01EA17DE-0CC3-473F-B36D-2052E03CAB34} - System32\Tasks\ASC_SkipUac_micha => "C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/SkipUac <==== ATTENTION
Task: {DBE41F73-91CD-4CA9-ADEF-00163864FB98} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {E3F5698F-D9B6-4191-8EDA-EF1795C53EF4} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {6340907A-94FE-4EE5-8DFF-3DC48BD65E06} - System32\Tasks\Avast Secure Browser VPS Differential Update => C:\Program Files\AVAST Software\Browser\Application\vps_helper.exe [2624568 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {6B4CB134-7141-4003-A298-51C4A634EB80} - System32\Tasks\Avast Software\Avast Antivirus Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-av\icarus.exe [9896952 2026-10-06] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {142D153E-E01E-4686-BAFA-2094E90638FC} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5832120 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {55E07C02-7A9A-40D6-BBDA-8749A01B295F} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [3710456 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {599681F5-DAD2-4779-B05A-125D592E3280} - System32\Tasks\AvastBrowserProtectS-1-5-21-629165207-329108147-321633127-1001 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {E3229ACB-F0DB-4C0E-BC7A-0A64344B385E} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {AE98E50E-4A1A-47C4-B168-E1FBB4EF0600} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {2E43E98C-707C-43CB-878B-93118CB6770E} - System32\Tasks\AVG\AVG Driver Updater BugReport => C:\Program Files\AVG\Driver Updater\AvBugReport.exe [6516400 2026-11-02] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) -> --send "dumps|report" --silent --product 149 --programpath "C:\Program Files\AVG\Driver Updater" --configpath "C:\ProgramData\AVG\Driver Updater" --path "C:\ProgramData\AVG\Driver Updater\log" --path "C:\ProgramData\AVG\Icarus\Logs" --logpath "C:\ProgramData\AVG\Driver Updater\log" --guid f3a29657- (the data entry has 27 more characters).
Task: {508AC345-C34E-4E70-8088-69F815FB1808} - System32\Tasks\AVG\AVG Driver Updater Update => C:\Program Files\Common Files\AVG\Icarus\avg-du\icarus.exe [15263736 2026-10-29] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {2E36519E-2A59-4607-86C2-82561D8DE8F7} - System32\Tasks\CCleaner 7 - Skip UAC - S-1-5-21-629165207-329108147-321633127-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {419ED9B3-1C90-454B-BD6A-8F45C2E66ED8} - System32\Tasks\Lenovo\LenovoNowLauncher => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.exe [469472 2026-07-03] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\/task
Task: {9CE1E86C-CF4D-4743-B931-B859BAA337F6} - System32\Tasks\Lenovo\LenovoNowQuarterlyLaunch => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [472544 2026-07-03] (Lenovo -> Lenovo)
Task: {A4795F90-5DCA-40F2-9E22-83D194B81AB2} - System32\Tasks\Lenovo\LenovoNowTask => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [472544 2026-07-03] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\$(EventData)
Task: {E83B3AAA-E592-4678-9234-87DABFEA5C7F} - System32\Tasks\Lenovo\UDC\Lenovo UDC Diagnostic Scan => C:\WINDOWS\system32\sc.exe [102400 2025-09-22] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 210
Task: {E9CBAE85-E50A-485F-BD2F-254B3688D6A5} - System32\Tasks\Lenovo\UDC\Lenovo UDC Lazy Deployment => C:\WINDOWS\system32\sc.exe [102400 2025-09-22] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 221
Task: {44CDA2F0-D5B6-4376-B90A-AAC0FBB83178} - System32\Tasks\Lenovo\UDC\Lenovo UDC Maintainance Task => C:\WINDOWS\system32\sc.exe [102400 2025-09-22] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 220
Task: {D88C8E51-DC62-4D13-BD84-F59D82DA0BC7} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [259000 2026-08-26] (Lenovo -> Lenovo Group Ltd.)
Task: {0D1B5895-653B-498A-BB26-2BEDB5743307} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [102400 2025-09-22] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {A9A3C10C-8D1F-4C24-8161-ADCEC4F73393} - System32\Tasks\Lenovo\Vantage\Schedule\AiCoreAddinDailyOtaTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {709D2521-0680-4E73-B8A6-763D2766C409} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {1598F49C-16BB-42AA-AFDA-4FC37B5B9AB4} - System32\Tasks\Lenovo\Vantage\Schedule\ConsumerAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {6395B50A-CE60-47A0-8ECB-AF0E79DCCDD0} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {DD53D321-98D0-4CDD-98B3-68F0D71DA1E4} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {A9D6807C-EDC2-4AD7-8EBA-7600CDD4CE8E} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin_Pulsation => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {62BB0E63-9BC0-4F43-9688-F6004127D848} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {60364B9B-F60B-4ACD-9B63-0BDF1B6A7918} - System32\Tasks\Lenovo\Vantage\Schedule\IdeaNotebookAddinDailyEvent => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {D4CC633D-A5C2-4270-8567-E7EB5BDE656A} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {163ECFF9-1B33-4C2A-AAA4-30941E5FC652} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBatteryPartSalesMonthlyToast => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {36B85C65-C6DF-4A01-917C-820A92840BCC} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {18AF5686-9782-4A46-88A1-57129FD03436} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSupportContextEngineDaily => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {5C25A7FB-BE07-444B-89B5-AD8351FB22B3} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSupportHealthReportSchedule => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {0930E279-3F33-42C5-9956-1D1CE1163069} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {C9884A05-0037-40CE-B792-99D27B45DF33} - System32\Tasks\Lenovo\Vantage\Schedule\SettingsWidgetAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {32DE45B6-29A5-4C03-9F35-A88D399A765F} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {41B8F677-DBE3-4EEB-A013-3EEF10DA0BC8} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {37C59049-9CA4-475A-994C-3A21D0824BD2} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.1.0.67\x86\IdleScheduleEventAction.exe [173536 2026-11-02] (Lenovo -> )
Task: {7C3B8ADD-6AED-4308-8134-00E99215DCAB} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\ScheduleEventAction.exe [275520 2026-09-21] (Lenovo -> Lenovo)
Task: {F3A6FCE6-74E9-4A88-BE2B-D5FF01C41364} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [17009032 2025-09-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {989EE33B-3786-4865-8385-A4BC153FEF3C} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29024664 2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {8B49AC50-45F4-4A7E-9702-6A63ADA190DC} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [70528 2025-09-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {A67D16C7-4D38-4215-8097-53DF852C6DDF} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29024664 2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {B122B97E-8EDB-4E6A-B4A4-C5FD39027F87} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313744 2025-09-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {D82EAC2C-7384-4A14-98B9-FDBD3AB25C5E} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313744 2025-09-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {17362701-A6B9-421A-8D67-0ED09B340996} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [1365272 2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {0D034505-0AEB-4B94-8A81-EA37D789336C} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [256440 2025-11-02] (Microsoft Corporation -> Microsoft)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {E64726D6-D089-40AF-B95C-EF7C49E69F00} - System32\Tasks\NahimicTask32 => C:\Windows\System32\..\SysWOW64\NahimicSvc32.exe [1118128 2024-08-20] (SteelSeries France SASU -> Nahimic)
Task: {D8351202-F0F6-4722-BA0F-360AE77F493E} - System32\Tasks\NahimicTask64 => C:\Windows\System32\.\NahimicSvc64.exe [1438128 2024-08-20] (SteelSeries France SASU -> Nahimic)
Task: {DA4184AC-0A83-4018-9870-72C650594FEF} - System32\Tasks\NIUpdateServiceCheckTask => C:\Program Files (x86)\National Instruments\Shared\Update Service\NIUpdateService.exe [864032 2015-06-04] (National Instruments Corporation -> National Instruments)
Task: {BCC8148B-39C5-4D72-891F-F5663D898084} - System32\Tasks\NIUpdateServiceStartupTask => C:\Program Files (x86)\National Instruments\Shared\Update Service\NIUpdateService.exe [864032 2015-06-04] (National Instruments Corporation -> National Instruments)
Task: {06B8759C-51DB-4E94-8D0F-B9CB69577ACD} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NVIDIA App\NvDriverUpdateCheck" -l 3 -f "C:\ProgramData\NVIDIA Corporation\NVIDIA App\NvDriverUpdateCheck.log"
Task: {D652E268-0B7C-475A-A33D-874A33A8D805} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => "C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe" (No File)
Task: {8051ABA7-BC9F-470C-B89E-1C101F8770AB} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {99AF0AEC-9469-4AB1-B25D-5B2C3E53EECA} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-629165207-329108147-321633127-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {5CF2BC4D-F7E9-4961-8F5A-1C0B8ACA23FA} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-629165207-329108147-321633127-1002 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {A0F9CD5C-B19D-4121-A520-6B0F7ABA7D6C} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-629165207-329108147-321633127-1004 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {9CD6D12B-589B-4F07-A632-9E0D1F0DDFD8} - System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1001 => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\OneDriveLauncher.exe [878480 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {5676A77B-688B-403B-B2D1-2EB5CC6344B3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002 => C:\Program Files\Microsoft OneDrive\25.140.0720.0001_1\OneDriveLauncher.exe /startInstances (No File)
Task: {ED6B2241-2376-4EED-8F17-E86582DB578D} - System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1004 => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\OneDriveLauncher.exe [878480 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {9EE57CD3-9A30-4496-A4FC-416A8A894E12} - System32\Tasks\Opera scheduled assistant Autoupdate 1742120147 => C:\Users\micha\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [7987144 2026-11-03] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Users\micha\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {BAF593A2-2584-4CC1-9B76-0C725E1748BF} - System32\Tasks\Opera scheduled Autoupdate 1742120147 => C:\Users\micha\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [7987144 2026-11-03] (Opera Norway AS -> Opera Software)
Task: {8A94ED98-7240-4877-8F69-CE97E2D7C2E0} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-629165207-329108147-321633127-1001 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [65536 2026-05-13] (Microsoft Windows -> Microsoft Corporation)
Task: {7CDBCCD8-5733-4F4F-8476-05EC1ED3CE8C} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-629165207-329108147-321633127-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {A92EC435-0286-4E80-88C5-4EC52BC1DA26} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-629165207-329108147-321633127-1004 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {2D66D9A7-200D-4745-8955-361051CAE231} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {EFD227E3-F7E2-4011-96E4-D030707A6D4E} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {1E0CABDA-9D5A-4F15-8B1C-965AC7190E85} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-629165207-329108147-321633127-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7636128 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {EEF8E8E7-2813-4FCB-A275-6881B9A8EC91} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [11853472 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {980C6E34-5350-4E6F-9223-EDEB7DD355B5} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [15266296 2026-10-27] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {BE0A33F1-2692-4CBC-BACC-4C2C10C284FD} - System32\Tasks\SoftLanding\S-1-5-21-629165207-329108147-321633127-1001\SoftLandingRefreshForExpirationTask-{367ef553-b30f-4908-adbb-64f81fec41a2} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 1.1.1.1 8.8.8.8
Tcpip\..\Interfaces\{696a6fba-59ab-40bd-9d0d-79f3f8dff46e}: [DhcpNameServer] 1.1.1.1 8.8.8.8
Tcpip\..\Interfaces\{6bf67b78-81c1-440e-8a70-f23bc9a4956e}\35053554: [DhcpNameServer] 192.168.96.1
Tcpip\..\Interfaces\{6bf67b78-81c1-440e-8a70-f23bc9a4956e}\75966496: [DhcpNameServer] 192.168.88.1
Tcpip\..\Interfaces\{6bf67b78-81c1-440e-8a70-f23bc9a4956e}\759664960276575637470235053554: [DhcpNameServer] 192.168.54.1
Tcpip\..\Interfaces\{6bf67b78-81c1-440e-8a70-f23bc9a4956e}\E4F6478696E676020586F6E6560282331692020527F602: [DhcpNameServer] 10.26.158.74

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.503.2 -> C:\Program Files\Java\jre1.8.0_503\bin\dtplugin\npDeployJava1.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.503.2 -> C:\Program Files\Java\jre1.8.0_503\bin\plugin2\npjp2.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2025-07-13] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\micha\AppData\Local\Microsoft\Edge\User Data\Default [2026-11-06]
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\micha\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-26]
Edge Extension: (Edge relevant text changes) - C:\Users\micha\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-03-16]

Opera:
=======
OPR DefaultProfile: Default

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8015800 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [1051064 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2795448 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [1120184 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\154.0.35638.100\elevation_service.exe [4380736 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2026-11-02] (Avast Software s.r.o. -> AVAST Software)
R2 AVGDriverUpdSvc; C:\Program Files\AVG\Driver Updater\DriverUpdSvc.exe [20871344 2026-11-02] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
R2 AzureAttestService; C:\Program Files\Microsoft\AzureAttestService\AzureAttestService.dll [152312 2019-08-19] (Microsoft Windows -> Microsoft Corporation)
R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [32946336 2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13287776 2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
S3 EpicGamesUpdater; C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3420088 2026-10-30] (Epic Games Inc. -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [2619832 2026-10-05] (Epic Games Inc. -> Epic Games, Inc.)
R3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncHelper.exe [3815312 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
R2 JTAGServer; C:\altera_lite\24.1std\quartus\bin64\jtagserver.exe [461192 2025-03-06] (Intel Corporation -> )
R2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe [199744 2026-03-09] (Lenovo -> Lenovo)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\5.1.2609.9\LenovoVantageService.exe [44096 2026-09-21] (Lenovo -> Lenovo)
R2 LkCitadelServer; C:\Windows\SysWOW64\lkcitdl.exe [695136 2014-08-07] (National Instruments Corporation -> National Instruments, Inc.)
R2 lkClassAds; C:\Windows\SysWOW64\lkads.exe [53544 2015-06-01] (National Instruments Corporation -> National Instruments Corporation)
R2 lkTimeSync; C:\Windows\SysWOW64\lktsrv.exe [63792 2015-06-01] (National Instruments Corporation -> National Instruments Corporation)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe [2386280 2026-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [722848 2022-10-08] (Microsoft Corporation -> Microsoft Corporation)
R2 MTKBTSVC; C:\WINDOWS\System32\mtkbtsvc.exe [544568 2026-09-07] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)
R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [1910192 2024-08-20] (SteelSeries France SASU -> Nahimic)
R2 NIApplicationWebServer; C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [57184 2015-06-03] (National Instruments Corporation -> National Instruments Corporation)
S4 NIApplicationWebServer64; C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [80736 2015-06-03] (National Instruments Corporation -> National Instruments Corporation)
R2 niauth; C:\Program Files (x86)\National Instruments\Shared\niauth\niauth_daemon.exe [571712 2015-06-02] (National Instruments Corporation -> National Instruments Corporation)
R2 NIDomainService; C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe [399152 2015-06-01] (National Instruments Corporation -> National Instruments Corporation)
S3 NILM License Manager; C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\lmgrd.exe [1427688 2010-08-02] (National Instruments Corporation -> Macrovision Corporation)
R2 nimDNSResponder; C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [320368 2014-06-06] (National Instruments Corporation -> National Instruments Corporation)
R2 NiSvcLoc; C:\Program Files (x86)\National Instruments\Shared\niSvcLoc\nisvcloc.exe [89928 2015-06-02] (National Instruments Corporation -> National Instruments Corporation)
R2 NISystemWebServer; C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe [57168 2015-06-03] (National Instruments Corporation -> National Instruments Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_360580ba71c61256\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.198.1011.0006\OneDriveUpdaterService.exe [4114280 2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
R2 PEMHTTPD-x64; C:\Program Files\edb\pem\httpd\apache\bin\httpd.exe [31232 2025-07-30] (Apache Software Foundation) [File not signed]
S3 PlutonQcService; C:\WINDOWS\system32\PlutonQcService.exe [159744 2026-11-02] (Microsoft Windows -> )
S2 postgresql-x64-18; C:\Program Files\PostgreSQL\18\bin\pg_ctl.exe [130560 2026-03-05] (PostgreSQL Global Development Group) [File not signed]
S3 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [726952 2022-10-08] (Microsoft Corporation -> Microsoft Corporation)
R2 SQLTELEMETRY; C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\sqlceip.exe [300968 2022-10-08] (Microsoft Corporation -> Microsoft Corporation)
R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [72632 2026-08-26] (Lenovo -> Lenovo Group Ltd.)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [768312 2026-08-13] (Oracle America, Inc. -> Oracle and/or its affiliates)
S3 VSInstallerElevationService; C:\Program Files (x86)\Microsoft Visual Studio\Installer\VSInstallerElevationService.exe [43432 2025-11-02] (Microsoft Corporation -> Microsoft)
S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [163456 2025-08-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe [5609240 2026-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe [378128 2026-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 AdvancedSystemCareService18; "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe" (No File) <==== ATTENTION
S3 FvSvc; "C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe" -service (No File)
S2 ImControllerService; %SystemRoot%\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (No File)
S2 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA Corporation\NVIDIA App\NvContainer\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -ert

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ACPIVPC; C:\WINDOWS\System32\DriverStore\FileRepository\acpivpc.inf_amd64_07db38bc9e02b27d\AcpiVpc.sys [52800 2026-06-16] (Lenovo -> Lenovo)
R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrmgr.sys [25672 2024-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0417253.inf_amd64_a9b363c4f94f001d\B417132\amdkmdag.sys [106597288 2025-07-14] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R2 amd_dpfc; C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_360580ba71c61256\amd_dpfc.sys [47848 2026-10-20] (NVIDIA Corporation -> Advanced Micro Devices)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [253024 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [396896 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [317024 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [81504 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswDrvBrg; C:\WINDOWS\System32\drivers\aswDrvBrg.sys [95320 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [29144 2026-11-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [35936 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [311904 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [641632 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [101472 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [71776 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [862816 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1302624 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [276064 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [484960 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 cpuz154; \??\C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2026-11-01] (Microsoft Windows Hardware Compatibility Publisher -> ) <==== ATTENTION
R3 FBNetFilter; C:\WINDOWS\System32\drivers\FBNetFlt.sys [60784 2023-12-06] (Lenovo -> Lenovo)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [240960 2026-11-02] (Microsoft Windows -> Microsoft Corporation)
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-10-29] (Microsoft Windows -> Microsoft Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [154976 2026-11-02] (Microsoft Windows -> Microsoft Corporation)
R3 MTKBTFilterX64; C:\WINDOWS\System32\DriverStore\FileRepository\mtkbtfilter.inf_amd64_2e4758412000012d\mtkbtfilterx.sys [637896 2026-09-07] (MEDIATEK INC. -> MediaTek Inc.)
R3 mtkwlex; C:\WINDOWS\System32\DriverStore\FileRepository\mtkwl6ex.inf_amd64_0917e824e67faf49\mtkwl6ex.sys [2140616 2026-09-07] (MEDIATEK INC. -> MediaTek Inc.)
R3 NahimicBTLink; C:\WINDOWS\System32\drivers\NahimicBTLink.sys [95856 2024-08-20] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [95896 2024-08-20] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
S3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys [47240 2024-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvpcf; C:\WINDOWS\System32\drivers\nvpcf.sys [246272 2024-07-04] (NVIDIA Corporation -> NVIDIA Corporation)
S4 RsFx0700; C:\WINDOWS\System32\DRIVERS\RsFx0700.sys [298392 2022-10-08] (Microsoft Corporation -> Microsoft Corporation)
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_a246455e93c40570\rt68cx21x64.sys [942120 2026-07-27] (Realtek Semiconductor Corp. -> Realtek)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [51192 2025-03-16] (OpenVPN Inc. -> The OpenVPN Project)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [254568 2026-08-13] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [264880 2026-08-13] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxSup; C:\WINDOWS\system32\DRIVERS\VBoxSup.sys [1090736 2026-08-13] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [204432 2026-08-13] (Oracle America, Inc. -> Oracle and/or its affiliates)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2025-09-22] (Microsoft Windows -> Microsoft Corporation)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-29] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21632 2026-10-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [677952 2026-10-29] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [144408 2026-10-29] (Microsoft Windows -> Microsoft Corporation)
S0 wesp; C:\WINDOWS\System32\drivers\wesp.sys [4355960 2026-11-02] (Microsoft Windows -> Microsoft Corporation)
S0 wespelam; C:\WINDOWS\System32\drivers\wesp_elam.sys [1519024 2026-11-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys (No File)
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys (No File)
S3 iobit_monitor_server2021; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys (No File)

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2036-09-13 17:21 - 2036-09-13 17:21 - 000000000 ____D C:\Users\micha\Documents\National Instruments
2036-09-13 17:21 - 2036-09-13 17:21 - 000000000 ____D C:\Users\micha\Documents\LabVIEW Data
2036-09-13 17:17 - 2036-09-13 17:17 - 000000000 ____D C:\Users\micha\AppData\Roaming\National Instruments
2036-09-13 17:11 - 2036-09-13 17:11 - 000000000 ____D C:\Users\micha\AppData\Local\National Instruments
2036-09-13 17:11 - 2036-09-13 17:11 - 000000000 ____D C:\Program Files (x86)\HI-TECH Software
2036-09-13 17:11 - 2025-09-22 16:20 - 000000000 ____D C:\Users\micha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HI-TECH Software
2036-09-13 17:10 - 2036-09-13 17:10 - 000001258 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NI Ultiboard 14.0.lnk
2036-09-13 17:10 - 2036-09-13 17:10 - 000001253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NI Multisim 14.0.lnk
2036-09-13 17:10 - 2036-09-13 17:10 - 000000000 ____D C:\Users\Public\Documents\National Instruments
2036-09-13 17:09 - 2025-09-22 17:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\National Instruments
2036-09-13 17:08 - 2036-09-13 17:11 - 000000000 ____D C:\Program Files (x86)\National Instruments
2036-09-13 17:08 - 2036-09-13 17:08 - 000001455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NI Launcher.lnk
2036-09-13 17:08 - 2036-09-13 17:08 - 000000000 ____D C:\Program Files\National Instruments
2036-09-13 17:08 - 2025-09-22 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\cvirte
2036-09-13 17:08 - 2025-09-22 17:17 - 000000000 ____D C:\WINDOWS\system32\cvirte
2036-09-13 17:04 - 2025-09-22 16:22 - 000000000 ____D C:\ProgramData\National Instruments
2036-09-13 17:01 - 2036-09-13 17:01 - 000000000 ____D C:\National Instruments Downloads
2026-11-06 19:19 - 2026-11-06 19:20 - 000057972 _____ C:\Users\micha\Desktop\FRST.txt
2026-11-06 19:18 - 2026-11-06 19:19 - 000000000 ____D C:\FRST
2026-11-06 19:17 - 2026-11-06 19:18 - 002457088 _____ (Farbar) C:\Users\micha\Desktop\FRST64.exe
2026-11-06 19:15 - 2026-11-06 19:15 - 000000000 ____D C:\Users\micha\AppData\Roaming\AnyDesk
2026-11-06 19:14 - 2026-11-06 19:14 - 008553912 _____ (AnyDesk Software GmbH) C:\Users\micha\Desktop\AnyDesk.exe
2026-11-06 19:08 - 2026-11-06 19:08 - 000001387 _____ C:\Users\micha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prehliadač Opera.lnk
2026-11-04 21:36 - 2026-11-05 20:53 - 000002716 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-11-04 21:36 - 2026-11-04 21:36 - 000002022 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-11-03 16:07 - 2026-11-06 19:13 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-11-03 16:07 - 2026-11-05 20:53 - 000002212 _____ C:\WINDOWS\system32\Tasks\NahimicTask32
2026-11-03 16:07 - 2026-11-05 20:53 - 000002192 _____ C:\WINDOWS\system32\Tasks\NahimicTask64
2026-11-03 09:05 - 2026-11-03 09:05 - 000282208 _____ C:\Users\micha\Downloads\i349852v1n1_PTMO-i349852-VLAN-002.pka_en-US_0b5fe45d-d90a-4592-97cd-360d547f52da.pka
2026-11-02 20:20 - 2026-11-02 20:20 - 000017002 _____ C:\Users\micha\quartus2.qreg
2026-11-02 20:20 - 2026-11-02 20:20 - 000000016 ____H C:\Users\micha\i3q6bSoc4a0
2026-11-02 18:11 - 2026-11-03 16:01 - 000003500 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2026-11-02 18:11 - 2026-11-03 16:01 - 000003070 _____ C:\WINDOWS\system32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2026-11-02 18:11 - 2026-11-02 18:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2026-11-02 18:11 - 2026-10-07 23:44 - 001456752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2026-11-02 18:11 - 2026-10-07 23:44 - 001256048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2026-11-02 18:11 - 2026-10-07 23:20 - 000192232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2026-11-02 18:11 - 2026-10-07 23:20 - 000168680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap32v.dll
2026-11-02 15:17 - 2026-11-02 15:17 - 000000000 ____D C:\Users\micha\AppData\Roaming\xpdf
2026-11-02 15:16 - 2026-11-02 15:16 - 000003844 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2026-11-02 15:16 - 2026-11-02 15:16 - 000003770 _____ C:\WINDOWS\system32\Tasks\AvastBrowserProtectS-1-5-21-629165207-329108147-321633127-1001
2026-11-02 15:16 - 2026-11-02 15:16 - 000003614 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser VPS Differential Update
2026-11-02 15:16 - 2026-11-02 15:16 - 000003260 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2026-11-02 15:16 - 2026-11-02 15:16 - 000002547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2026-11-02 15:16 - 2026-11-02 15:16 - 000002512 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2026-11-02 15:14 - 2026-11-02 15:16 - 000000000 ____D C:\Users\micha\AppData\Local\Avast Software
2026-11-02 15:14 - 2026-11-02 15:14 - 000003494 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineUA
2026-11-02 15:14 - 2026-11-02 15:14 - 000003370 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineCore
2026-11-02 15:14 - 2026-11-02 15:14 - 000000000 ____D C:\Users\micha\AppData\Roaming\Avast Software
2026-11-02 15:14 - 2026-11-02 15:14 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2026-11-02 15:13 - 2026-11-05 18:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2026-11-02 15:13 - 2026-11-02 15:13 - 000002215 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2026-11-02 15:13 - 2026-11-02 15:13 - 000002203 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2026-11-02 15:13 - 2026-11-02 15:11 - 000330168 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2026-11-02 15:11 - 2026-11-02 15:15 - 000000000 ____D C:\Program Files\Avast Software
2026-11-02 15:11 - 2026-11-02 15:11 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2026-11-02 15:10 - 2026-11-02 15:32 - 000000000 ____D C:\ProgramData\Avast Software
2026-11-02 15:02 - 2026-11-05 14:13 - 000000000 ____D C:\KVRT2020_Data
2026-11-02 15:01 - 2026-11-02 15:02 - 122012544 _____ (AO Kaspersky Lab) C:\Users\micha\Desktop\KVRT.exe
2026-11-02 14:57 - 2026-11-02 14:57 - 000092642 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-11-02 14:57 - 2026-11-02 14:57 - 000092642 _____ C:\WINDOWS\system32\ctac.json
2026-11-02 14:56 - 2026-11-02 14:56 - 000018208 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-11-02 14:52 - 2026-11-03 16:01 - 000002454 _____ C:\WINDOWS\system32\Tasks\CCleaner 7 - Skip UAC - S-1-5-21-629165207-329108147-321633127-1001
2026-11-02 14:52 - 2026-11-02 14:52 - 000002161 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 7.lnk
2026-11-02 14:52 - 2026-11-02 14:52 - 000002149 _____ C:\Users\Public\Desktop\CCleaner 7.lnk
2026-11-02 14:52 - 2026-11-02 14:52 - 000000000 ____D C:\WINDOWS\system32\Tasks\Piriform
2026-11-02 14:52 - 2026-11-02 14:52 - 000000000 ____D C:\Users\micha\AppData\Roaming\CCleaner
2026-11-02 14:51 - 2026-11-02 14:51 - 000000000 ____D C:\ProgramData\Piriform
2026-11-02 14:51 - 2026-11-02 14:51 - 000000000 ____D C:\Program Files\Piriform
2026-11-02 14:51 - 2026-11-02 14:51 - 000000000 ____D C:\Program Files\Common Files\Piriform
2026-11-02 14:17 - 2026-11-02 14:18 - 000000000 ____D C:\AdwCleaner
2026-11-02 14:16 - 2026-11-02 14:16 - 009630992 _____ (Malwarebytes) C:\Users\micha\Desktop\adwcleaner.exe
2026-11-02 14:15 - 2026-11-02 14:15 - 000002189 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Driver Updater.lnk
2026-11-02 14:15 - 2026-11-02 14:15 - 000002177 _____ C:\Users\Public\Desktop\AVG Driver Updater.lnk
2026-11-02 14:15 - 2026-11-02 14:15 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVG
2026-11-02 14:15 - 2026-11-02 14:15 - 000000000 ____D C:\Users\micha\AppData\Roaming\AVG
2026-11-02 14:14 - 2026-11-02 15:32 - 000000000 ____D C:\ProgramData\AVG
2026-11-02 14:14 - 2026-11-02 14:14 - 000054352 _____ (Gen Digital Inc.) C:\WINDOWS\system32\icarus_rvrt.exe
2026-11-02 14:14 - 2026-11-02 14:14 - 000000000 ____D C:\Program Files\Common Files\AVG
2026-11-02 14:14 - 2026-11-02 14:14 - 000000000 ____D C:\Program Files\AVG
2026-10-29 11:10 - 2026-10-29 11:10 - 000000223 _____ C:\Users\micha\Desktop\SWAT Commander.url
2026-10-27 10:54 - 2026-10-27 10:54 - 000000000 ____D C:\Users\micha\.config
2026-10-27 10:53 - 2026-10-27 10:53 - 000000020 _____ C:\Users\micha\.lesshst
2026-10-27 10:06 - 2026-10-27 10:06 - 000000079 _____ C:\Users\micha\.gitconfig
2026-10-26 11:05 - 2026-10-26 11:05 - 152453120 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2026-10-26 11:05 - 2026-10-26 11:05 - 007340032 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2026-10-26 11:05 - 2026-10-26 11:05 - 001810432 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2026-10-26 11:05 - 2026-10-26 11:05 - 000077824 _____ C:\WINDOWS\system32\config\SAM.iobit
2026-10-26 11:05 - 2026-10-26 11:05 - 000045056 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2026-10-26 09:54 - 2026-11-03 16:01 - 000003930 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1742120147
2026-10-26 09:54 - 2026-11-03 16:01 - 000003660 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1742120147
2026-10-20 23:22 - 2026-10-20 23:22 - 032265960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 022490848 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 021020392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 006181608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 005930728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 004835048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 002803248 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 002803248 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 002403888 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 002403888 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 002345192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001736424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001711336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 001695280 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001695280 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001597160 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001555688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001510448 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001510448 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001242344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 001088232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 000839912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000685288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000560200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000513768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000477928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-10-20 23:22 - 2026-10-20 23:22 - 000429992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-10-20 23:22 - 2026-10-20 23:22 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-10-19 18:19 - 2026-10-19 18:19 - 000181309 _____ C:\WINDOWS\system32\nvinfo.pb
2026-10-19 07:10 - 2026-11-02 15:31 - 154664960 _____ C:\WINDOWS\system32\config\SOFTWARE
2026-10-19 07:10 - 2026-11-02 15:31 - 002097152 _____ C:\WINDOWS\system32\config\DEFAULT
2026-10-19 07:10 - 2026-11-02 15:31 - 000077824 _____ C:\WINDOWS\system32\config\SAM
2026-10-19 07:10 - 2026-11-02 15:31 - 000045056 _____ C:\WINDOWS\system32\config\SECURITY
2026-10-19 07:10 - 2026-10-19 07:10 - 073764864 _____ C:\WINDOWS\system32\config\COMPONENTS.iodefrag.bak
2026-10-13 21:30 - 2026-10-13 21:30 - 000039736 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-10-13 21:30 - 2026-10-13 21:30 - 000039736 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-10-13 21:30 - 2026-10-13 21:30 - 000004985 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-10-11 21:01 - 2026-10-11 21:01 - 000000000 ____D C:\Users\micha\Documents\Vlastné šablóny balíka Office
2026-10-11 17:49 - 2026-10-11 17:49 - 000000110 ____H C:\Users\micha\Desktop\833037938_2471151210043374_8903366600469563742_n.jpg.uid-zps
2026-10-09 06:57 - 2026-10-09 06:57 - 057319424 _____ C:\WINDOWS\system32\config\COMPONENTS.iobit
2026-10-07 10:46 - 2026-10-07 10:46 - 000000000 ____D C:\Users\micha\Documents\TMA
2026-10-07 09:57 - 2026-10-07 09:57 - 000000016 _____ C:\Users\micha\.emulator_console_auth_token

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-11-06 19:20 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-11-06 19:19 - 2025-03-16 11:15 - 000000000 ____D C:\Users\micha\AppData\Local\Programs\Opera
2026-11-06 19:16 - 2025-03-20 12:00 - 000000000 ____D C:\Program Files (x86)\Steam
2026-11-06 19:13 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-11-06 19:13 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-11-06 19:08 - 2026-09-17 15:33 - 000002906 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-11-06 19:07 - 2025-03-17 18:13 - 000000630 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2026-11-06 00:11 - 2025-09-22 16:18 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-11-05 23:26 - 2025-03-16 11:12 - 000000000 ____D C:\Users\micha\AppData\Local\D3DSCache
2026-11-05 20:54 - 2025-03-16 11:13 - 000000000 ___RD C:\Users\micha\OneDrive
2026-11-05 20:53 - 2025-12-14 16:24 - 000003064 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1004
2026-11-05 20:53 - 2025-12-14 16:24 - 000003058 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-629165207-329108147-321633127-1004
2026-11-05 20:53 - 2025-09-22 16:26 - 000003058 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-629165207-329108147-321633127-1001
2026-11-05 20:53 - 2025-09-22 16:26 - 000003054 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1001
2026-11-05 18:08 - 2026-03-24 11:14 - 000000000 ____D C:\Users\micha\AppData\Roaming\paradox-launcher-v2
2026-11-04 21:36 - 2025-03-17 18:20 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-11-04 21:36 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-11-04 21:09 - 2025-05-22 10:46 - 000000000 ____D C:\Users\micha\AppData\Roaming\discord
2026-11-04 20:56 - 2026-09-09 20:39 - 000001316 _____ C:\Users\micha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-11-04 20:56 - 2025-05-22 10:46 - 000002255 _____ C:\Users\micha\Desktop\Discord.lnk
2026-11-04 20:56 - 2025-05-22 10:45 - 000000000 ____D C:\Users\micha\AppData\Local\Discord
2026-11-04 19:43 - 2025-03-16 11:40 - 000000000 ____D C:\Users\micha\AppData\Roaming\Microsoft\Word
2026-11-04 19:27 - 2025-03-16 11:12 - 000000000 ____D C:\Users\micha\AppData\Local\Packages
2026-11-04 12:21 - 2025-04-07 10:13 - 000000000 ____D C:\Users\micha\AppData\Roaming\Code
2026-11-04 12:21 - 2025-04-07 10:12 - 000000000 ____D C:\Users\micha\AppData\Local\Programs\Microsoft VS Code
2026-11-04 11:07 - 2022-05-25 20:06 - 000000000 ____D C:\ProgramData\Packages
2026-11-04 11:00 - 2026-09-19 18:55 - 000000000 ____D C:\Users\micha\AppData\Local\copilot
2026-11-04 10:59 - 2026-09-23 10:09 - 000000000 ____D C:\Users\micha\.android
2026-11-03 16:31 - 2025-09-22 16:29 - 000961518 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-11-03 16:31 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-11-03 16:07 - 2025-09-22 16:26 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-11-03 16:07 - 2025-09-22 16:22 - 000006716 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-11-03 16:07 - 2025-09-22 16:20 - 000000000 ____D C:\Users\micha
2026-11-03 16:07 - 2024-06-02 04:24 - 000000000 ____D C:\ProgramData\NVIDIA
2026-11-03 16:07 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2026-11-03 16:07 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-11-03 16:06 - 2026-09-17 20:21 - 000012288 ___SH C:\DumpStack.log.tmp
2026-11-03 16:06 - 2025-09-22 16:18 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-11-03 16:01 - 2025-09-22 16:26 - 000003620 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-11-03 16:01 - 2025-09-22 16:26 - 000003486 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-11-03 16:01 - 2025-09-22 16:26 - 000003142 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002
2026-11-03 16:01 - 2025-09-22 16:26 - 000003118 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-629165207-329108147-321633127-1002
2026-11-03 16:01 - 2025-09-22 16:26 - 000002880 _____ C:\WINDOWS\system32\Tasks\NIUpdateServiceCheckTask
2026-11-03 16:01 - 2025-09-22 16:26 - 000002702 _____ C:\WINDOWS\system32\Tasks\ASC_PerformanceMonitor
2026-11-03 16:01 - 2025-09-22 16:26 - 000002592 _____ C:\WINDOWS\system32\Tasks\ASC_SkipUac_micha
2026-11-03 16:01 - 2025-09-22 16:26 - 000002560 _____ C:\WINDOWS\system32\Tasks\NIUpdateServiceStartupTask
2026-11-03 09:05 - 2026-04-01 12:38 - 000000000 ____D C:\Users\micha\Cisco Packet Tracer 9.0.0
2026-11-03 09:04 - 2025-03-31 11:10 - 000000348 _____ C:\Users\micha\.packettracer
2026-11-02 18:23 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-11-02 18:13 - 2025-03-16 11:12 - 000000000 ____D C:\Users\micha\AppData\Local\NVIDIA Corporation
2026-11-02 18:11 - 2024-06-02 04:24 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2026-11-02 18:11 - 2024-06-02 04:24 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2026-11-02 15:31 - 2024-04-01 08:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-11-02 15:24 - 2025-09-22 16:18 - 000481736 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\WUModels
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-11-02 15:23 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-11-02 15:22 - 2025-12-16 09:58 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-11-02 15:22 - 2025-09-22 17:13 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-11-02 15:22 - 2024-04-01 17:35 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-11-02 15:22 - 2024-04-01 17:35 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Com
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-11-02 15:22 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-11-02 15:22 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2026-11-02 15:16 - 2025-03-16 11:13 - 000000000 ____D C:\Users\micha\AppData\Local\PlaceholderTileLogoFolder
2026-11-02 15:13 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-11-02 14:58 - 2025-03-16 11:14 - 000000000 ____D C:\Users\micha\AppData\Local\CrashDumps
2026-11-02 14:56 - 2025-09-22 16:20 - 003385856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-11-02 14:36 - 2022-05-25 20:06 - 000002531 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-11-02 14:31 - 2025-03-18 19:09 - 000000000 ____D C:\Users\micha\AppData\LocalLow\NVIDIA
2026-11-02 14:30 - 2024-06-02 04:24 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2026-11-02 14:18 - 2025-12-08 22:27 - 000000000 ____D C:\Users\WsiAccount\AppData\Roaming\IObit
2026-11-02 14:18 - 2025-12-08 22:27 - 000000000 ____D C:\Users\WsiAccount\AppData\LocalLow\IObit
2026-11-02 14:18 - 2025-09-22 17:14 - 000000000 ____D C:\WINDOWS\Lenovo
2026-11-02 14:18 - 2025-09-22 16:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Lenovo
2026-11-02 14:18 - 2025-03-28 17:47 - 000000000 ____D C:\Users\micha\AppData\LocalLow\IObit
2026-11-02 14:18 - 2025-03-28 17:47 - 000000000 ____D C:\Program Files (x86)\IObit
2026-11-02 14:18 - 2025-03-28 17:46 - 000000000 ____D C:\Users\micha\AppData\Roaming\IObit
2026-11-02 14:18 - 2025-03-28 17:46 - 000000000 ____D C:\ProgramData\IObit
2026-11-02 14:18 - 2025-03-16 11:13 - 000000000 ____D C:\Users\micha\AppData\Local\Lenovo
2026-11-02 14:18 - 2024-06-02 04:16 - 000000000 ____D C:\ProgramData\Lenovo
2026-11-02 14:17 - 2024-06-02 04:26 - 000000000 ____D C:\WINDOWS\system32\SONiX
2026-11-01 19:58 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-11-01 19:54 - 2025-09-22 17:11 - 000002078 _____ C:\WINDOWS\SysWOW64\pubfreeware.ini
2026-11-01 19:12 - 2025-03-28 17:48 - 000000780 _____ C:\ProgramData\pdinst.ini
2026-11-01 18:39 - 2026-10-04 19:57 - 000000000 ____D C:\Users\micha\IdeaProjects
2026-10-30 15:54 - 2025-03-28 17:48 - 000000000 ____D C:\ProgramData\ProductData3
2026-10-29 14:58 - 2025-03-27 12:09 - 000000000 ____D C:\Users\micha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2026-10-29 11:23 - 2022-05-25 20:05 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-10-29 11:11 - 2025-03-20 12:01 - 000000000 ____D C:\Users\micha\AppData\Local\Steam
2026-10-28 17:00 - 2025-09-25 07:11 - 000000000 ____D C:\Users\micha\.VirtualBox
2026-10-27 10:04 - 2025-03-27 12:17 - 000000000 ____D C:\Users\micha\PycharmProjects
2026-10-26 12:21 - 2025-03-24 21:11 - 000007952 _____ C:\WINDOWS\system32\Drivers\mtkRunTimeDataWdi.bin
2026-10-26 11:07 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2026-10-22 09:15 - 2025-04-14 11:48 - 000000000 ____D C:\Users\micha\Documents\Packet Tracer
2026-10-21 10:47 - 2026-09-16 10:14 - 000000000 ____D C:\Users\micha\PMACourse01
2026-10-19 07:12 - 2024-04-01 17:34 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-19 07:12 - 2024-04-01 17:34 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-19 07:12 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-19 07:12 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-19 07:10 - 2026-03-17 20:45 - 143560704 _____ C:\WINDOWS\system32\config\SOFTWARE.iodefrag.bak
2026-10-19 07:10 - 2026-03-17 20:45 - 007335936 _____ C:\WINDOWS\system32\config\DRIVERS.iodefrag.bak
2026-10-19 07:10 - 2026-03-17 20:45 - 001794048 _____ C:\WINDOWS\system32\config\DEFAULT.iodefrag.bak
2026-10-19 07:10 - 2026-03-17 20:45 - 000077824 _____ C:\WINDOWS\system32\config\SAM.iodefrag.bak
2026-10-19 07:10 - 2026-03-17 20:45 - 000045056 _____ C:\WINDOWS\system32\config\SECURITY.iodefrag.bak
2026-10-19 07:10 - 2024-06-02 04:21 - 000000000 ____D C:\Program Files\AMD
2026-10-15 17:12 - 2025-03-23 20:07 - 000000000 ____D C:\Users\micha\Documents\Projekty škola
2026-10-14 10:23 - 2026-09-16 10:14 - 000000000 ____D C:\Users\micha\.expo
2026-10-14 09:58 - 2025-04-07 10:13 - 000000000 ____D C:\Users\micha\.vscode
2026-10-13 21:52 - 2025-03-17 19:35 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-13 21:20 - 2025-03-17 19:35 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-08 12:31 - 2025-12-15 19:09 - 000000000 ____D C:\Users\micha\Documents\SQL
2026-10-08 12:18 - 2025-10-02 19:46 - 000000000 ____D C:\Users\micha\Documents\DSY
2026-10-08 12:18 - 2025-09-22 11:41 - 000000000 ____D C:\Users\micha\AppData\Roaming\Microsoft\Access
2026-10-07 23:43 - 2024-06-02 04:25 - 000301168 _____ C:\WINDOWS\system32\FvSDK_x64.dll
2026-10-07 23:43 - 2024-06-02 04:25 - 000274032 _____ C:\WINDOWS\SysWOW64\FvSDK_x86.dll

==================== Files in the root of some directories ========

2026-04-01 12:34 - 2026-04-01 12:37 - 300966272 _____ (Cisco Systems, Inc. ) C:\Users\micha\CiscoPacketTracer_900_win_64bit.exe
2026-04-09 07:15 - 2026-04-09 07:15 - 001359904 _____ (Microsoft Corporation) C:\Users\micha\MSTeamsSetup.exe
2026-03-17 12:40 - 2026-03-17 12:40 - 044156088 _____ (EnterpriseDB) C:\Users\micha\pemhttpd.exe
2026-03-17 12:40 - 2026-03-17 12:40 - 371789096 _____ (PostgreSQL Global Development Group) C:\Users\micha\postgresql_18.exe

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Re: Prosim o kontrolu logu

Odeslal: 06 Lis 2026 19:27
od superjano
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-11-2026
Ran by micha (06-11-2026 19:21:30)
Running from C:\Users\micha\Desktop
Microsoft Windows 11 Home Version 26H2 26300.9818 (X64) (2025-09-22 15:26:26)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-629165207-329108147-321633127-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-629165207-329108147-321633127-503 - Limited - Disabled)
Guest (S-1-5-21-629165207-329108147-321633127-501 - Limited - Disabled)
micha (DisplayName: M****** J) (S-1-5-21-629165207-329108147-321633127-1001 - Administrators - Enabled) [MS Account] => C:\Users\micha
WDAGUtilityAccount (S-1-5-21-629165207-329108147-321633127-504 - Limited - Disabled)
WsiAccount (S-1-5-21-629165207-329108147-321633127-1004 - Limited - Disabled) => C:\Users\WsiAccount

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: McAfee (Enabled - Up to date) {0BE13B34-492A-21C0-AE43-C1742279CCB6}
FW: McAfee (Enabled) {33DABA11-0345-2098-851C-6841DCAA8BCD}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Android Studio (HKLM\...\Android Studio) (Version: 2026.1 - Google LLC)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 26.10.11201.3859 - Gen Digital Inc.)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 154.0.35638.100 - Autori prehliadača Avast Secure Browser)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1995.6 - AVAST Software) Hidden
AVG Driver Updater (HKLM\...\AVG Driver Updater) (Version: 26.9.6925.16748 - Gen Digital Inc.)
Browser for SQL Server 2022 (HKLM-x32\...\{FDB357D5-CC78-480A-8D26-C15D1A877642}) (Version: 16.0.1000.6 - Microsoft Corporation)
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.13.1591.2041 - Piriform)
Cisco Packet Tracer 8.2.2 64Bit (HKLM\...\Cisco Packet Tracer 8.2.2 64Bit_is1) (Version: 8.2.2.400 - Cisco Systems, Inc.)
Cisco Packet Tracer 9.0.0 64Bit (HKLM\...\Cisco Packet Tracer 9.0.0 64Bit_is1) (Version: 9.0.0.810 - Cisco Systems, Inc.)
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 156.0.4314.58 - Microsoft Corporation)
DiagnosticsHub_CollectionService (HKLM\...\{C762588C-06DE-496A-8ADF-EBDBD49E37B5}) (Version: 17.14.36412 - Microsoft Corporation) Hidden
Discord (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Discord) (Version: 1.0.9267 - Discord Inc.)
Eclipse Temurin JDK with Hotspot 25.0.4.1+1 (x64) (HKLM\...\{43C4DD34-D4BD-4A01-B688-3D8EAAABD8BC}) (Version: 25.0.4.101 - Eclipse Adoptium)
eLynx lab v2.2.7 (HKLM-x32\...\eLynx lab_is1) (Version: - eLynx project)
Epic Games Launcher (HKLM-x32\...\{6CD543FB-BFB8-47DC-8320-12A0885B94E2}) (Version: 1.3.155.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{E81CA011-E9A8-42B8-A4C0-11F66BE56D6C}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{8CD570F8-C05E-4B41-8EAB-24329D11928D}) (Version: 4.0.1 - Epic Games, Inc.)
Git (HKLM\...\Git_is1) (Version: 2.51.0 - The Git Development Community)
HI-TECH C Compiler for the PIC10/12/16 MCUs V9.82PL0 (HKLM-x32\...\PICC 9.82) (Version: 9.82 - HI-TECH Software)
HI-TECH C51-lite V9.60PL0 (HKLM-x32\...\HC51 9.60PL0) (Version: 9.60 - HI-TECH Software)
IntelliJ IDEA 2026.2.2 (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\IntelliJ IDEA 2026.2.2) (Version: 262.10315.125 - JetBrains s.r.o.)
Java 8 Update 503 (64-bit) (HKLM\...\{77124AE4-039E-4CA4-87B4-2F64180503F0}) (Version: 8.0.5030.1 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{60e762c3-a30e-4a24-ac32-35fc9aa84805}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Legion Arena (HKLM-x32\...\Legion Arena_is1) (Version: 1.3.1.1 - Lenovo Group Ltd.)
Lenovo Now (HKLM-x32\...\{622FA116-13E7-4BB6-839C-A3E0E3ECDFE6}_is1) (Version: 4.8.0.54 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 5.1.2609.9 - Lenovo Group Ltd.)
Microsoft 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft 365 - sk-sk (HKLM\...\O365HomePremRetail - sk-sk) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 156.0.4314.58 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 156.0.4314.58 - Microsoft Corporation) Hidden
Microsoft ODBC Driver 17 for SQL Server (HKLM\...\{0E0F96AC-80DE-4400-A40C-429D63293651}) (Version: 17.10.6.1 - Microsoft Corporation)
Microsoft Office 2016 Professional Plus - sk-sk (HKLM\...\ProPlusRetail - sk-sk) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft OLE DB Driver for SQL Server (HKLM\...\{76EB75D2-CCF6-41A9-90B6-922DE9146276}) (Version: 18.7.4.0 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.198.1011.0006 - Microsoft Corporation)
Microsoft OneNote - cs-cz (HKLM\...\OneNoteFreeRetail - cs-cz) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft OneNote - en-us (HKLM\...\OneNoteFreeRetail - en-us) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft OneNote - sk-sk (HKLM\...\OneNoteFreeRetail - sk-sk) (Version: 16.0.19127.20222 - Microsoft Corporation)
Microsoft SQL Server 2022 (64-bit) (HKLM\...\Microsoft SQL Server SQL2022) (Version: - Microsoft Corporation)
Microsoft SQL Server 2022 RsFx Driver (HKLM\...\{629C8FC9-3763-4C58-8264-5288AE34AFEF}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
Microsoft SQL Server 2022 Setup (English) (HKLM\...\{BF4D8C4B-D931-4D62-A7ED-8A34B2FC0D1B}) (Version: 16.0.1000.6 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.26.25904 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.145.0 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 3.14.2086.54749 - Microsoft Corporation)
Microsoft Visual Studio Setup Configuration (HKLM-x32\...\{D07657AA-968C-4629-BD6C-1B52AF825EA7}) (Version: 3.12.2140.44225 - Microsoft Corporation) Hidden
Microsoft Visual Studio Setup WMI Provider (HKLM-x32\...\{49727420-70BA-4495-9405-31F8D711CB5A}) (Version: 3.12.2140.44225 - Microsoft Corporation) Hidden
Microsoft VSS Writer for SQL Server 2022 (HKLM\...\{AB5D8778-81F3-47E2-87A4-35E776CD664B}) (Version: 16.0.1000.6 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
National Instruments Software (HKLM-x32\...\NI Uninstaller) (Version: - National Instruments)
Node.js (HKLM\...\{0463EF6C-7AE0-4657-970D-FD4634A98A35}) (Version: 22.20.0 - Node.js Foundation)
NVIDIA App 11.0.9.565 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.9.565 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.9.12728.38614306 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.9.12728.38614306 - NVIDIA Corporation)
NVIDIA Grafický ovládač 555.99 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 555.99 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{46ED2B64-85C7-4E1F-920C-A555B21F2E4C}) (Version: 9.11.1111 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.19127.20154 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.19029.20208 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.7571.2072 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.7571.2072 - Microsoft Corporation) Hidden
Opera Stable 139.0.6053.38 (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Opera 139.0.6053.38) (Version: 139.0.6053.38 - Opera Software)
Oracle VirtualBox 7.2.16 (HKLM\...\{0BAEEEB4-2170-4A32-ACA3-691102D224E8}) (Version: 7.2.16 - Oracle and/or its affiliates)
Paradox Launcher v2 (HKLM\...\{BCBAAF27-1C19-48A5-8DEF-258E46D93FE0}) (Version: 2.4.0 - Paradox Interactive)
PEM-HTTPD 2.4.65 (HKLM\...\PEM-HTTPD 2.4.65-1) (Version: 2.4.65-1 - EnterpriseDB)
PostgreSQL 18 (HKLM\...\PostgreSQL 18) (Version: 18.3-2 - PostgreSQL Global Development Group)
Postman x64 12.2.0 (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\Postman) (Version: 12.2.0 - Postman)
PyCharm 2026.2.2 (HKLM\...\PyCharm 2026.2.2) (Version: 262.10315.174 - JetBrains s.r.o.)
Python 3.12.6 (64-bit) (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\{316e3b12-1191-47df-b9d4-dcf0bf2f6cc4}) (Version: 3.12.6150.0 - Python Software Foundation)
Python 3.12.6 Core Interpreter (64-bit) (HKLM\...\{901B913C-FA63-48D2-9842-7D7676739378}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Development Libraries (64-bit) (HKLM\...\{2F4E9933-7587-4D85-9BA1-F2903AFB36D8}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Documentation (64-bit) (HKLM\...\{46673E63-1CA8-43EA-B73B-AC20DDD77C5A}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Executables (64-bit) (HKLM\...\{537B2AF5-504B-4303-99CB-FDE56F47AA51}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 pip Bootstrap (64-bit) (HKLM\...\{1D520CE1-F09A-4A26-B110-52081FEA0AB9}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Standard Library (64-bit) (HKLM\...\{1DAEF824-881A-49C6-B91E-1D28877FF18D}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Tcl/Tk Support (64-bit) (HKLM\...\{08A1963D-07D1-4620-929C-385F6A307772}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.12.6 Test Suite (64-bit) (HKLM\...\{3334B843-864F-4F04-A635-5D2FD5840AD5}) (Version: 3.12.6150.0 - Python Software Foundation) Hidden
Python 3.14.7 (HKU\S-1-5-21-629165207-329108147-321633127-1001\...\pymanager-pythoncore-3.14-64) (Version: 3.14-64 - Python Software Foundation)
Python Launcher (HKLM-x32\...\{C7213DDA-56FA-4C9E-BA0C-1C907366F456}) (Version: 3.13.2150.0 - Python Software Foundation)
Quartus Prime Lite Edition (Free) 24.1std.0.1077 (HKLM\...\Quartus Prime Lite Edition (Free) 24.1std.0.1077) (Version: 24.1std - Altera Corporation)
SQL Server 2022 Batch Parser (HKLM\...\{7EFD8B19-A9E6-41CF-A96F-B9B6E30EC345}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Common Files (HKLM\...\{6A68D32C-4C0D-4847-B70C-58E6B4D76A12}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Common Files (HKLM\...\{8770AF64-BB4B-4404-BDD6-6AF8E4C461FC}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Connection Info (HKLM\...\{770DA7F2-817B-4AA6-9160-08BB658ABDC6}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Connection Info (HKLM\...\{EAC54B82-7A37-4A9E-8953-474316BD40F6}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Database Engine Services (HKLM\...\{6621C765-569C-4D46-A8E9-C69A47971357}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Database Engine Services (HKLM\...\{C4CF167C-4739-4A3A-8D75-59C9C5F135CA}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Database Engine Shared (HKLM\...\{161B8D12-C41B-4ACF-9BB5-E1FEE6788869}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Database Engine Shared (HKLM\...\{D6E82158-05B9-4A18-A624-EA135BC77766}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 DMF (HKLM\...\{5AB77D4E-9E5F-4627-B78B-129A5EC2858A}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 DMF (HKLM\...\{DCA0C2D6-83BF-41AE-B1AB-C4181002DE40}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Shared Management Objects (HKLM\...\{12618131-AA9A-4DAE-9387-CE4417955B9F}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Shared Management Objects (HKLM\...\{6F8242AA-1B25-421C-8E45-FC5978D9AA3A}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Shared Management Objects Extensions (HKLM\...\{35EC6145-E333-42DB-BCB3-380DF6140C11}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 Shared Management Objects Extensions (HKLM\...\{A0F7ACBA-075F-4BC7-A85A-5DC301FCEC74}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 SQL Diagnostics (HKLM\...\{0CEFE958-E71A-4171-9DEF-77E9234A5613}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 XEvent (HKLM\...\{94AEB0A0-365C-449B-B573-D2ECB353EB06}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server 2022 XEvent (HKLM\...\{BD8B7339-7559-4FC3-95E6-264324D45235}) (Version: 16.0.1000.6 - Microsoft Corporation) Hidden
SQL Server Management Studio 21 (HKLM-x32\...\04513577) (Version: 21.6.17 - Microsoft Corporation)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Sublime Text (HKLM\...\Sublime Text_is1) (Version: - Sublime HQ Pty Ltd)
TLauncher (HKLM-x32\...\TLauncher) (Version: 2.9316 - TLauncher Inc.)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.51 - Ghisler Software GmbH)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)
vs_communitymsires (HKLM-x32\...\{2817364B-A3DE-472C-BF19-F19B6997061F}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_communitysharedmsi (HKLM-x32\...\{71498EE6-F94E-4061-9DD5-55925CA8A74F}) (Version: 17.14.36025 - Microsoft Corporation) Hidden
vs_communityx64msi (HKLM\...\{3873679C-FA03-4101-97E9-107D67C568B8}) (Version: 17.14.36025 - Microsoft Corporation) Hidden
vs_CoreEditorFonts (HKLM-x32\...\{1851460E-0E63-4117-B5BA-25A2F045801B}) (Version: 17.7.40001 - Microsoft Corporation)
vs_filehandler_amd64 (HKLM-x32\...\{22EE1419-B47E-44B8-A635-868746946079}) (Version: 17.14.36024 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{6C7D0172-7367-4F0C-95DB-6021765B58EA}) (Version: 17.14.36024 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{D331F4E7-BC3B-47BE-BB56-5F33895F9347}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_githubprotocolhandlermsi (HKLM-x32\...\{29297AFE-9D24-4DFE-ACAF-D90090D905CF}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_minshellinteropsharedmsi (HKLM-x32\...\{537F07C8-0EC6-41A5-BB91-750FA3CAA110}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_minshellinteropx64msi (HKLM\...\{B797608C-8536-46EF-95D8-8474139EA43A}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{EC049978-2176-47C6-B99B-2C64AD6F6828}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_minshellsharedmsi (HKLM-x32\...\{F6E69DD8-7652-4CC6-8A4F-485A16012B5B}) (Version: 17.14.36024 - Microsoft Corporation) Hidden
vs_minshellx64msi (HKLM\...\{51FD170D-69D2-4D5E-A9D1-53FD1F394FD7}) (Version: 17.14.36301 - Microsoft Corporation) Hidden
vs_ssmsprotocolselectormsi (HKLM-x32\...\{73328FDB-39A8-4A80-B933-805F1B233F94}) (Version: 17.14.36015 - Microsoft Corporation) Hidden
vs_vswebprotocolselectormsi (HKLM-x32\...\{B4B3AA16-E828-4577-A9F2-629E1A95FE4A}) (Version: 17.14.36323 - Microsoft Corporation) Hidden
Windows Driver Package - Altera (WinUSB) JTAG cables (10/13/2018 ) (HKLM\...\39825C61306F438661AC1C2E61A69F2BF353552A) (Version: 10/13/2018 - Altera)
Zoner Photo Studio 17 (HKLM\...\ZonerPhotoStudio17_SK_is1) (Version: 17.0.1.12 - ZONER software)

Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19012.0_x64__0a9344xs7nr4m [2025-08-10] (Advanced Micro Devices Inc.) [Startup Task]
Dropbox promotion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.38.0_x64__xbfy0k16fey96 [2026-07-28] (Dropbox Inc.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.7.18.0_x64__5grkq8ppsgwt4 [2025-05-17] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2608.43.0_x64__k1h2ywk1493x8 [2026-09-23] (LENOVO INC.)
LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_3.0.43.0_x64__w1wdnht996qgy [2026-02-06] (LinkedIn) [Startup Task]
Local Artificial Intelligence Manager -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2025-09-13] ()
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-03-17] (Microsoft Corp.)
Microsoft Journal -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJournal_1.0.127.0_x64__8wekyb3d8bbwe [2025-12-15] (Microsoft Corporation)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_56.20201.588.0_x64__8wekyb3d8bbwe [2026-02-18] (Microsoft Corporation)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2025-12-08] ()
Nahimic -> C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.15.0_x64__w2gh52qy24etm [2026-09-10] (A-Volute)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-06] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2025-12-08] ()
Python Install Manager -> C:\Program Files\WindowsApps\PythonSoftwareFoundation.PythonManager_26.4.240.0_x64__3847v3x7pw1km [2026-10-13] (Python Software Foundation)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.50.323.0_x64__dt26b99r8h8gj [2025-09-15] (Realtek Semiconductor Corp)
Visual Studio Code -> C:\Users\micha\AppData\Local\Programs\Microsoft VS Code\a717861c07\appx [2026-11-04] ()
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.6.4.0_x64__8wekyb3d8bbwe [2026-11-03] (Microsoft Corp.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-629165207-329108147-321633127-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\micha\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (SteelSeries France SASU -> A-Volute)
CustomCLSID: HKU\S-1-5-21-629165207-329108147-321633127-1001_Classes\CLSID\{BEA218D2-6950-497B-9434-61683EC065FE}\InprocServer32 -> C:\Users\micha\AppData\Local\Programs\Python\Launcher\pyshellext.amd64.dll (Python Software Foundation -> Python Software Foundation)
CustomCLSID: HKU\S-1-5-21-629165207-329108147-321633127-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\micha\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.26.25904\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-629165207-329108147-321633127-1001_Classes\CLSID\{FAD9FE0A-F40E-4CEF-B3AB-A26F1EFEA56C}\localserver32 -> C:\Users\micha\AppData\Local\Discord\app-1.0.9267\Discord.exe (Discord Inc. -> Discord Inc.)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> No File
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.198.1011.0006\FileSyncShell64.dll [2026-11-04] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_360580ba71c61256\nvshext.dll [2026-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-11-02] (Gen Digital Inc. -> Gen Digital Inc.)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2012-01-26 09:36 - 2012-01-26 09:36 - 000278528 ____R () [File not signed] C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\xerces-depdom_2_6.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000602624 _____ () [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\pcre2-8.dll
2025-03-16 11:27 - 2014-09-09 12:30 - 000603648 _____ () [File not signed] C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\SpiderMonkey.dll
2024-06-02 04:17 - 2024-06-02 04:17 - 000000000 ____L () [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2024-06-02 04:17 - 2024-06-02 04:17 - 000000000 ____L () [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
2012-01-26 09:36 - 2012-01-26 09:36 - 002359296 ____R (Apache Software Foundation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\xerces-c_2_6.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000217600 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\libapr-1.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000036864 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\libapriconv-1.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000301056 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\libaprutil-1.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000467456 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\libhttpd.dll
2026-03-17 12:41 - 2025-07-30 02:23 - 000016896 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_access_compat.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000015360 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_actions.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000022016 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_alias.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000013312 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_allowmethods.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000014336 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_asis.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000018432 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_auth_basic.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000017408 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authn_core.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000015872 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authn_file.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000024576 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authz_core.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000016896 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authz_groupfile.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000017408 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authz_host.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000013312 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_authz_user.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000038912 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_autoindex.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000027648 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_cgi.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000016384 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_dir.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000014336 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_env.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000050176 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_include.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000030720 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_isapi.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000032256 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_log_config.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000023552 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_mime.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000036352 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_negotiation.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000018432 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_setenvif.so
2026-03-17 12:41 - 2025-07-30 02:23 - 000025600 _____ (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\modules\mod_socache_shmcb.so
2026-11-06 19:15 - 2026-11-06 19:15 - 000394240 _____ (Google Inc.) [File not signed] C:\Users\micha\AppData\Local\Temp\scoped_dir25148_331441044\gcapi.dll
2014-05-15 10:19 - 2014-05-15 10:19 - 001409024 _____ (National Instruments Corp.) [File not signed] C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\nilmClient.dll
2015-06-01 21:16 - 2015-06-01 21:16 - 000560640 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\LogosXT\nilxtcor.dll
2015-06-01 21:17 - 2015-06-01 21:17 - 000227840 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\LogosXT\nipspxts.dll
2014-06-19 22:21 - 2014-06-19 22:21 - 000218624 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI System Configuration\nisyscfgExpert.dll
2015-05-14 14:46 - 2015-05-14 14:46 - 000033792 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libappweb.dll
2015-04-28 10:37 - 2015-04-28 10:37 - 000057856 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libappwebcore.dll
2015-04-28 10:37 - 2015-04-28 10:37 - 000153088 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libhttp.dll
2015-04-28 10:37 - 2015-04-28 10:37 - 000175616 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libmpr.dll
2015-04-28 10:37 - 2015-04-28 10:37 - 000091136 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\libpcre.dll
2015-06-02 16:52 - 2015-06-02 16:52 - 000270336 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niauth.dll
2015-02-06 16:10 - 2015-02-06 16:10 - 000033792 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niconf.dll
2015-02-06 16:10 - 2015-02-06 16:10 - 000056832 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niesp.dll
2015-06-03 08:53 - 2015-06-03 08:53 - 000247296 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_nisessmgr.dll
2015-06-03 08:54 - 2015-06-03 08:54 - 000570880 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niws.dll
2015-06-03 08:54 - 2015-06-03 08:54 - 000413184 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ws_runtime.dll
2015-06-02 16:52 - 2015-06-02 16:52 - 000456704 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NIAuth\niauth.dll
2015-06-02 16:50 - 2015-06-02 16:50 - 000264704 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NIAuth\niPortableRegistry.dll
2015-04-07 11:32 - 2015-04-07 11:32 - 001056768 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\nissl\NIlibeay32.dll
2015-04-07 13:21 - 2015-04-07 13:21 - 000237568 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\nissl\NIssleay32.dll
2015-06-02 17:07 - 2015-06-02 17:07 - 000097280 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\nissl\nisslinit.dll
2015-06-01 21:01 - 2015-06-01 21:01 - 000257024 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\Security\nidm_client_thinauth.dll
2015-06-03 08:50 - 2015-06-03 08:50 - 000095232 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\TraceEngine\ni_traceengine.dll
2015-05-14 14:12 - 2015-05-14 14:12 - 000134656 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSAuthSvc\niauthsvc.dll
2015-06-08 10:59 - 2015-06-08 10:59 - 000030208 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSDeploySvc\deploysvc.dll
2015-06-02 17:07 - 2015-06-02 17:07 - 000194048 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSSSLAdmin\ssladminsvc.dll
2015-06-02 17:07 - 2015-06-02 17:07 - 000093696 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSSslAdmin\ssladminsvc_logos.dll
2015-06-03 08:53 - 2015-06-03 08:53 - 000221184 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSSysAdmin\sysadminsvc.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_503\bin\ssv.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_503\bin\jp2ssv.dll [2026-07-23] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2022-05-07 06:24 - 2026-11-03 16:07 - 000001022 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 gen-webserver.internal www.gen-webserver.internal # gen digital helper server
127.0.0.1 revocation.gen-webserver.internal www.revocation.gen-webserver.internal # gen digital helper server

2025-03-17 18:13 - 2026-11-06 19:07 - 000000630 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.137.198 Watch.mshome.net # 2026 10 0 18 20 57 21 251

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 1.1.1.1 - 8.8.8.8
Windows Firewall is enabled.

Network Binding:
=============
Ethernet 2: VirtualBox Host-Only Ethernet Adapter -> VBoxNetAdp6.sys
Wi-Fi: MediaTek Wi-Fi 6 MT7921 Wireless LAN Card -> mtkwl6ex.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys

vms_vsf: Hyper-V Virtual Switch Extension Filter
oracle_VBoxNetLwf: VirtualBox NDIS6 Bridged Networking Driver
ms_l1vhlwf: Nested Network Virtualization
vms_vsp: Hyper-V Virtual Switch Extension Protocol

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Eclipse Adoptium\jdk-25.0.4.101-hotspot\bin;C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Git\cmd;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\nodejs\;C:\Program Files (x86)\Microsoft SQL Server\160\Tools\Binn\;C:\Program Files\Microsoft SQL Server\160\Tools\Binn\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\Microsoft SQL Server\160\DTS\Binn\;C:\Program Files\NVIDIA Corporation\NVIDIA App\NvDLISR
HKU\S-1-5-21-629165207-329108147-321633127-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img19.jpg
HKU\S-1-5-21-629165207-329108147-321633127-1004\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\micha\AppData\Local\JetBrains\PyCharm2024.3
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\micha\PycharmProjects\PythonProject
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\micha\AppData\Local\JetBrains\PyCharm2026.2
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\micha\Documents\VS code\Programovanie


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKU\S-1-5-21-629165207-329108147-321633127-1001\...\StartupApproved\Run: => "Zoner Photo Studio Autoupdate"
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\StartupApproved\Run: => "Advanced SystemCare"
HKU\S-1-5-21-629165207-329108147-321633127-1001\...\StartupApproved\Run: => "Steam"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{DF58609B-7294-4D7B-8E9A-A4EABA727F0B}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{8A3BB187-468E-4D84-9792-02A814D0A23C}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{E9F3CA92-CAD3-46F6-BDA4-C9D733553497}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{CD4A55A3-AC69-4910-B11D-11764353D2A1}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{4F08CF52-B016-4A68-944C-1304C9C0BE35}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{C229CA86-D1D2-4089-A45B-2E31E803BAF1}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{22EC3136-CADE-4416-9D77-F40268D55AD2}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{3B848BF1-A2CB-49D8-BEDD-6E15C4BDB929}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{A9C2A7E2-75FE-4C61-8B15-6FCD44513AE3}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{9BA38FE3-625C-482A-AA42-5A3E587E9149}] => (Allow) C:\altera_lite\24.1std\quartus\bin64\jtagserver.exe (Intel Corporation -> )
FirewallRules: [{CDC7E3CF-0913-443D-B034-4B13FE945DBD}] => (Allow) C:\altera_lite\24.1std\quartus\bin64\jtagserver.exe (Intel Corporation -> )
FirewallRules: [UDP Query User{6264AA5D-B828-45B4-9C38-476B6ABBA4CC}C:\users\micha\appdata\local\programs\microsoft vs code\code.exe] => (Allow) C:\users\micha\appdata\local\programs\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{C84D22BD-AEBD-42E4-A9DC-6947F10F065C}C:\users\micha\appdata\local\programs\microsoft vs code\code.exe] => (Allow) C:\users\micha\appdata\local\programs\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6D9F35F0-BE4F-4C24-A281-9E2D98515541}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E218B530-FBFA-4BFF-9509-96B3AE7AE066}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A76F343F-1BA3-414B-B8DF-45F5D1C3607C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{7A1B89FA-3F6D-4785-AF06-3981E3752D31}C:\users\micha\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Block) C:\users\micha\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe (Microsoft) [File not signed]
FirewallRules: [TCP Query User{0BF04AF7-A50D-4D11-B1B9-FD780B9942A0}C:\users\micha\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Block) C:\users\micha\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe (Microsoft) [File not signed]
FirewallRules: [UDP Query User{955B0EFF-70AD-4BF1-9D8F-A692F5AF1813}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe
FirewallRules: [TCP Query User{1385B21F-5EE5-4C82-9C08-A875DFABDB96}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{466D89BF-57D5-497C-A28E-009030F811F1}C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
FirewallRules: [TCP Query User{FD5AFA73-86C4-4502-91C2-63D194528B74}C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
FirewallRules: [{0079FFA1-04DF-49EC-BFEA-0159DACF5286}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\tf_win64.exe (Valve Corp. -> )
FirewallRules: [{A9FD8FFA-A5E5-48EE-88A7-8103FF00FEC6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\tf_win64.exe (Valve Corp. -> )
FirewallRules: [{D68C58E7-18EA-4EB7-AADC-81A3B15C643A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FC19E3FB-575A-4E41-BD11-A873614D4B8A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{BA657413-DCCD-47FB-8C85-1EBCF77FCABA}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D59041B2-4235-4F79-9BD3-4F35CD5DD34B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{690FB62C-0104-4F91-9564-052D0DECF7B8}] => (Allow) C:\Program Files\Zoner\Photo Studio 17\Program32\MediaServer.exe (ZONER software, a.s. -> ZONER software)
FirewallRules: [{8DD5E146-CF27-437A-B71E-91670CE49436}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25045.406.3471.2143_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{423D4BF7-1011-4C23-8ADD-A1653A9CF26C}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25045.406.3471.2143_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CD7A12EC-7BF8-402D-94E5-C807820A22BC}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25045.406.3471.2143_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7C1E29A3-A2F7-4A58-A786-A31F2BAD7E82}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25045.406.3471.2143_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{17A3E8BB-677A-4DB7-9BDE-18859E4771EE}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{C8E490EA-ABD8-4638-B233-62A6AA0087A2}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [TCP Query User{C31D6E99-A40C-4188-8CE3-FBABB1B80AC0}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe (OpenJS Foundation -> Node.js)
FirewallRules: [UDP Query User{E0DD0F5D-A3D3-455F-B33E-B06F4AF20617}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe (OpenJS Foundation -> Node.js)
FirewallRules: [TCP Query User{E2139229-33FE-4DC7-9EF8-F55763007F14}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{05C1A0D5-7487-4773-AE49-E36C9935A124}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{663AEA2F-902E-4D19-B03D-30B8EA05516C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BloonsTD6\BloonsTD6.exe () [File not signed]
FirewallRules: [{A0318B35-EA48-4522-9114-BE58F0BC1777}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BloonsTD6\BloonsTD6.exe () [File not signed]
FirewallRules: [{9B4DDA2C-B943-45DF-81AE-A47D7B2C45D0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Inscryption\Inscryption.exe () [File not signed]
FirewallRules: [{C5223E68-0BE9-4A0A-9EBB-DB3C3F4B9051}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Inscryption\Inscryption.exe () [File not signed]
FirewallRules: [TCP Query User{974BE155-2FD5-471D-AFE5-31B63D802B25}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.91-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.91-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{60667E24-5E05-4E53-B44B-1B5300B35445}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.91-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.91-windows-x64\bin\java.exe
FirewallRules: [TCP Query User{7BC9EDFE-4379-42A1-88D2-79FECCBEC20E}C:\users\micha\appdata\local\postman\app-12.2.0\postman.exe] => (Allow) C:\users\micha\appdata\local\postman\app-12.2.0\postman.exe (Postman, Inc. -> Postman)
FirewallRules: [UDP Query User{42798A19-790A-4050-9CDA-02EBC1913352}C:\users\micha\appdata\local\postman\app-12.2.0\postman.exe] => (Allow) C:\users\micha\appdata\local\postman\app-12.2.0\postman.exe (Postman, Inc. -> Postman)
FirewallRules: [TCP Query User{C1934F5D-3240-405A-9ED7-9836518E78E0}C:\program files\edb\pem\httpd\apache\bin\httpd.exe] => (Allow) C:\program files\edb\pem\httpd\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [UDP Query User{A70B10F8-A673-42FA-B2BD-4D5851843A3E}C:\program files\edb\pem\httpd\apache\bin\httpd.exe] => (Allow) C:\program files\edb\pem\httpd\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [{1C386E3F-FCFC-4FEF-8DA5-90989988298A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{68886664-64C1-4974-9E1A-5B91E2AD576C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FDAC9348-8BAB-4ACB-8054-4841C876F6EA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{B9CFEE85-6C8E-4E9F-B61B-D4D7F7292FE0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{BC3C20F2-CC01-4F44-9AF6-D6A40437478A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe (Paradox Interactive AB (publ) -> Paradox Interactive)
FirewallRules: [{5BEE4A46-9869-43DF-885E-30BEC850EF40}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe (Paradox Interactive AB (publ) -> Paradox Interactive)
FirewallRules: [TCP Query User{3E53E240-DDFC-4429-BA57-31E02875C4FE}C:\program files\cisco packet tracer 9.0.0\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 9.0.0\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
FirewallRules: [UDP Query User{0A502970-5CFD-4326-AA9F-1745BD8CE7B6}C:\program files\cisco packet tracer 9.0.0\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 9.0.0\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
FirewallRules: [{CD8A6D21-1AB9-487A-B125-6276D7D6A004}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_26072.402.4558.5431_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FA0D22F1-1082-464C-B429-44474A28FA37}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_26072.402.4558.5431_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{BC05DBB9-0EF3-4BD4-B3BF-383B52C3C652}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
FirewallRules: [UDP Query User{110D9115-0DF8-4492-A0F5-F697171661CC}C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\micha\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
FirewallRules: [{AA04BA89-6F7D-4BB2-B525-E3D748A22C48}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe (Valve Corp. -> )
FirewallRules: [{DF7A39F8-38D4-47B4-B820-6690C00BFD70}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe (Valve Corp. -> )
FirewallRules: [{7D8B1522-3D1D-4C9A-8D88-7816B099449E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe () [File not signed]
FirewallRules: [{DDBE5966-D598-4F25-9B65-26EA4A94DF30}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe () [File not signed]
FirewallRules: [TCP Query User{16F2F205-F63B-4297-B5BD-BB27AA2E15DA}C:\users\micha\appdata\local\programs\intellij idea 2026.2.2\bin\idea64.exe] => (Allow) C:\users\micha\appdata\local\programs\intellij idea 2026.2.2\bin\idea64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [UDP Query User{582E622B-BA3F-40EE-AE7E-5BA915276028}C:\users\micha\appdata\local\programs\intellij idea 2026.2.2\bin\idea64.exe] => (Allow) C:\users\micha\appdata\local\programs\intellij idea 2026.2.2\bin\idea64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{99EA7900-62D7-4DB3-A1AA-5016BE873971}C:\program files\jetbrains\pycharm 2026.2.2\bin\pycharm64.exe] => (Allow) C:\program files\jetbrains\pycharm 2026.2.2\bin\pycharm64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [UDP Query User{FBDE3CF4-9FC5-4C9B-A52F-641F8E8F135E}C:\program files\jetbrains\pycharm 2026.2.2\bin\pycharm64.exe] => (Allow) C:\program files\jetbrains\pycharm 2026.2.2\bin\pycharm64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{B195982F-1321-4028-95DC-5102B1B4E365}C:\users\micha\appdata\local\android\sdk\platform-tools\adb.exe] => (Allow) C:\users\micha\appdata\local\android\sdk\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [UDP Query User{B4903444-8D65-4593-8DA4-2C53F294AEB8}C:\users\micha\appdata\local\android\sdk\platform-tools\adb.exe] => (Allow) C:\users\micha\appdata\local\android\sdk\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [TCP Query User{D41385FC-5BDB-4DB4-A6C9-4EBD879BA9D4}C:\program files\eclipse adoptium\jdk-25.0.4.101-hotspot\bin\java.exe] => (Block) C:\program files\eclipse adoptium\jdk-25.0.4.101-hotspot\bin\java.exe
FirewallRules: [UDP Query User{4FC53775-D291-465F-85BF-11C30E7B0BDE}C:\program files\eclipse adoptium\jdk-25.0.4.101-hotspot\bin\java.exe] => (Block) C:\program files\eclipse adoptium\jdk-25.0.4.101-hotspot\bin\java.exe
FirewallRules: [{08A23015-74A4-4559-9EDF-62CED49645F9}] => (Allow) C:\Users\micha\AppData\Local\Programs\Opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{1D285236-7F51-4CFE-9A1F-15C71E47F0F3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SWAT Commander\SWATCommander.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{99572972-C58E-49DE-80E1-2E7F255E4108}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SWAT Commander\SWATCommander.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{A660BF8C-40DE-4A11-AB0A-3737334194A1}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\copilotapp.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C63C2341-225A-43E4-91AB-884F166A7AEE}] => (Allow) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
FirewallRules: [{359580F3-C26C-4991-9D35-80A79ECEB38B}] => (Allow) C:\Program Files\AVG\Driver Updater\DriverUpdUI.exe (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
FirewallRules: [{32825F58-FCFB-4273-8E85-49AF8A6D5DB1}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{D935F929-6D12-4B83-9063-C1458DDA00B9}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{055BCF61-E858-4B11-9C40-E23FEBCC6BD6}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe (Gen Digital Inc. -> Gen Digital Inc.)

==================== Restore Points =========================

05-11-2026 21:00:00 Windows Update

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (11/06/2026 07:13:15 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Názov chybnej aplikácie: UDClientService.exe, verzia: 26.8.0.29, časová značka: 0x6a8d70b8
Názov modulu s poruchou: DeployAgent.dll, verzia: 26.8.0.29, časová značka: 0x6a8d6fde
Kód výnimky: 0xc0000005
Odchýlka poruchy: 0x0000000000002c97
Id poruchového procesu: 0x2048
Čas spustenia poruchovej aplikácie: 0x1dd6ba4ff20882d
Cesta k poruchovej aplikácii: C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe
Cesta k poruchovému modulu: C:\WINDOWS\System32\drivers\Lenovo\udc\Service\DeployAgent.dll
Id správy: 521bb7e1-3c55-4049-963f-098e1fb6596b
Plný názov chybného balíka:
Identifikátor poruchovej aplikácie vzťahujúci sa na balík:

Error: (11/05/2026 02:08:17 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 12) (User: MICHAL)
Description: Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy-2147023878

Error: (11/05/2026 09:57:40 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: Local Hostname Michal.local already in use; will try Michal-2.local instead

Error: (11/05/2026 09:57:40 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 Michal.local. Addr 10.106.69.68

Error: (11/05/2026 09:57:40 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 10.106.69.74:5353 16 Michal.local. AAAA FE80:0000:0000:0000:415E:85F2:ADA6:0609

Error: (11/05/2026 09:57:39 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 16 Michal.local. AAAA FE80:0000:0000:0000:C3DE:5D41:8B06:0F7A

Error: (11/05/2026 09:57:39 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 10.106.69.74:5353 4 Michal.local. Addr 10.106.69.74

Error: (11/05/2026 09:57:39 AM) (Source: niZeroconfService) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 4 Michal.local. Addr 10.106.69.68


System errors:
=============
Error: (11/06/2026 07:13:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Universal Device Client Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 60000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (11/06/2026 07:07:13 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: An unexpected error was encountered attempting to retrieve the BitLocker volume master key during restart.

Error: (11/06/2026 07:07:13 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: An unexpected error was encountered attempting to retrieve the BitLocker volume master key during restart.

Error: (11/05/2026 09:00:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Zlyhanie inštalácie: Systému Windows sa nepodarilo nainštalovať nasledujúcu aktualizáciu. Vyskytla sa chyba (0x80073d02 = The package could not be installed because resources it modifies are currently in use.): 9WZDNCRFJ4MV-E046963F.LENOVOCOMPANION.

Error: (11/05/2026 06:10:48 PM) (Source: DCOM) (EventID: 10010) (User: MICHAL)
Description: The server Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter did not register with DCOM within the required timeout.

Error: (11/05/2026 06:00:31 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: An unexpected error was encountered attempting to retrieve the BitLocker volume master key during restart.

Error: (11/05/2026 06:00:31 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: )
Description: An unexpected error was encountered attempting to retrieve the BitLocker volume master key during restart.

Error: (11/05/2026 02:10:11 PM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.


Windows Defender:
================

TimeCreated : 1. 11. 2026 20:00:50
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {11C7DF50-2C6A-4D1F-81B9-D0F608533C6D}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: RPC connection rundown

TimeCreated : 29. 10. 2026 19:04:18
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {23E5FAA9-7936-44F6-96BD-5281FB87A422}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: RPC connection rundown

TimeCreated : 29. 10. 2026 18:36:19
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {11F749F6-5B26-432D-B9D3-67384874EACE}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: RPC connection rundown

TimeCreated : 28. 10. 2026 16:21:18
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {B434AF80-F64B-46F4-BD3C-1651CF91051F}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days

TimeCreated : 25. 10. 2026 21:55:06
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {A98041B3-BFB0-4805-A31B-764D2C72F54A}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days

TimeCreated : 20. 10. 2026 18:59:41
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {2426E4B8-50AD-44D0-8906-84E41F7F8732}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days

TimeCreated : 18. 10. 2026 18:40:43
Message : Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {2707F598-45AF-4131-99F9-BD11EE07EF2C}
Scan Type: Antimalware
Scan Parameters: Quick Scan
User: NT AUTHORITY\SYSTEM
Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days


CodeIntegrity:
===============
Date: 2026-11-04 10:59:16
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe) attempted to load \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\AudioDevProps2.dll that did not meet the Microsoft signing level requirements.

Date: 2026-11-02 15:13:44
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Avast Software\Avast\AvastSvc.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2026-10-31 21:53:28
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\UUS\amd64\WaaSMedicAgent.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.

Date: 2026-10-28 17:14:56
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\155.0.4283.62\msedgewebview2.exe) attempted to load \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\AudioDevProps2.dll that did not meet the Microsoft signing level requirements.


==================== Memory info ===========================

BIOS: LENOVO H3CN47WW(V3.05) 04/15/2024
Motherboard: LENOVO LNVNB161216
Processor: AMD Ryzen 5 5500H with Radeon Graphics
Percentage of memory in use: 51%
Total physical RAM: 15724.06 MB
Available physical RAM: 7642.48 MB
Total Virtual: 45892.82 MB
Available Virtual: 32494.77 MB

==================== Drives ================================

Disk 0 - Drive c: (Windows-SSD) (Fixed) (Total:474.72 GB) (Free:94.75 GB) (Model: Micron MTFDKCD512QFM-1BD1AABLA) (Protected) NTFS

Disk 0 - \\?\Volume{8831c590-bb6f-4454-9847-71cf171e7858}\ (WINRE_DRV) (Fixed) (Total:1.95 GB) (Free:1.14 GB) NTFS
Disk 0 - \\?\Volume{c1558bfc-d20b-413d-be21-da047cfabd15}\ (SYSTEM_DRV) (Fixed) (Total:256 MB) (Free:217.92 MB) FAT32

==================== MBR & Partition Table ====================

============================================================
Disk: 0 (Size: 476.94 GB) (Disk ID: 34F54B0C)

Partitions:
===========
Partition Style : GPT
Partition Count : 4
Disk ID : {FA270037-248E-4B70-8A9D-FB3028657F61}
Usable Offset : 0.02 MB
Usable Length : 476.94 GB
Max Partitions : 128

Partition 1
Type : EFI System Partition
Size : 260 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {C1558BFC-D20B-413D-BE21-DA047CFABD15}
GPT Name : EFI system partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 261 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {278ED644-18D5-4FCA-9342-2F3A2B617824}
GPT Name : Microsoft reserved partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 474.72 GB
Offset : 277 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {CD51B503-9B86-4127-91C0-E68A1B8F7A47}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 1.95 GB
Offset : 486386 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {8831C590-BB6F-4454-9847-71CF171E7858}
GPT Name : Basic data partition
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------

============================================================

==================== End of Addition.txt =======================

Re: Prosim o kontrolu logu

Odeslal: 06 Lis 2026 20:00
od Rudy
Zdravím!

Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
ContextMenuHandlers3: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> No File
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll -> No File
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {018DEE60-023C-48A2-81DB-22B236FC606A} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {1DA7A364-7C44-41F5-9E34-434D9387A64F} - \Lenovo\ImController\TimeBasedEvents\4d512b2b-5816-4dbb-8b6e-fceadf6240f9 -> No File <==== ATTENTION
Task: {B1414019-02C2-4710-A68B-C0FFC6FEE6E7} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {3B6D0ADD-E435-4330-BE12-F41C89A1AFCD} - System32\Tasks\ASC_PerformanceMonitor => "C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/Task <==== ATTENTION
Task: {01EA17DE-0CC3-473F-B36D-2052E03CAB34} - System32\Tasks\ASC_SkipUac_micha => "C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/SkipUac <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {D652E268-0B7C-475A-A33D-874A33A8D805} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => "C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe" (No File)
Task: {5676A77B-688B-403B-B2D1-2EB5CC6344B3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002 => C:\Program Files\Microsoft OneDrive\25.140.0720.0001_1\OneDriveLauncher.exe /startInstances (No File)
S2 AdvancedSystemCareService18; "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe" (No File) <==== ATTENTION
S3 FvSvc; "C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe" -service (No File)
S2 ImControllerService; %SystemRoot%\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (No File)
S3 cpuz154; \??\C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2026-11-01] (Microsoft Windows Hardware Compatibility Publisher -> ) <==== ATTENTION
S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys (No File)
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys (No File)
S3 iobit_monitor_server2021; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys (No File)
C:\DumpStack.log.tmp

EmptyTemp:
Hosts:
End
Uložte do C:\Users\micha\Desktop jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: Prosim o kontrolu logu

Odeslal: 06 Lis 2026 20:48
od superjano
Fix result of Farbar Recovery Scan Tool (x64) Version: 01-11-2026
Ran by micha (06-11-2026 20:39:45) Run:1
Running from C:\Users\micha\Desktop
Loaded Profiles: micha & WsiAccount & SQLTELEMETRY & MSSQLSERVER
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
ContextMenuHandlers3: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> No File
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll -> No File
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {018DEE60-023C-48A2-81DB-22B236FC606A} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {1DA7A364-7C44-41F5-9E34-434D9387A64F} - \Lenovo\ImController\TimeBasedEvents\4d512b2b-5816-4dbb-8b6e-fceadf6240f9 -> No File <==== ATTENTION
Task: {B1414019-02C2-4710-A68B-C0FFC6FEE6E7} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {3B6D0ADD-E435-4330-BE12-F41C89A1AFCD} - System32\Tasks\ASC_PerformanceMonitor => "C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/Task <==== ATTENTION
Task: {01EA17DE-0CC3-473F-B36D-2052E03CAB34} - System32\Tasks\ASC_SkipUac_micha => "C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/SkipUac <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {D652E268-0B7C-475A-A33D-874A33A8D805} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => "C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe" (No File)
Task: {5676A77B-688B-403B-B2D1-2EB5CC6344B3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002 => C:\Program Files\Microsoft OneDrive\25.140.0720.0001_1\OneDriveLauncher.exe /startInstances (No File)
S2 AdvancedSystemCareService18; "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe" (No File) <==== ATTENTION
S3 FvSvc; "C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe" -service (No File)
S2 ImControllerService; %SystemRoot%\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (No File)
S3 cpuz154; \??\C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2026-11-01] (Microsoft Windows Hardware Compatibility Publisher -> ) <==== ATTENTION
S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys (No File)
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys (No File)
S3 iobit_monitor_server2021; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys (No File)
C:\DumpStack.log.tmp

EmptyTemp:
Hosts:
End
*****************

Processes closed successfully.
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\Advanced SystemCare => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\NvAppDesktopContext => removed successfully
HKLM\Software\Classes\CLSID\{F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Delete Cached Standalone Update Binary" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Edge => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{018DEE60-023C-48A2-81DB-22B236FC606A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{018DEE60-023C-48A2-81DB-22B236FC606A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1DA7A364-7C44-41F5-9E34-434D9387A64F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1DA7A364-7C44-41F5-9E34-434D9387A64F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\TimeBasedEvents\4d512b2b-5816-4dbb-8b6e-fceadf6240f9" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B1414019-02C2-4710-A68B-C0FFC6FEE6E7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B1414019-02C2-4710-A68B-C0FFC6FEE6E7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\Lenovo iM Controller Monitor" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3B6D0ADD-E435-4330-BE12-F41C89A1AFCD}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B6D0ADD-E435-4330-BE12-F41C89A1AFCD}" => removed successfully
C:\WINDOWS\System32\Tasks\ASC_PerformanceMonitor => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC_PerformanceMonitor" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{01EA17DE-0CC3-473F-B36D-2052E03CAB34}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{01EA17DE-0CC3-473F-B36D-2052E03CAB34}" => removed successfully
C:\WINDOWS\System32\Tasks\ASC_SkipUac_micha => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC_SkipUac_micha" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunUpdateNotificationMgr" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D652E268-0B7C-475A-A33D-874A33A8D805}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D652E268-0B7C-475A-A33D-874A33A8D805}" => removed successfully
C:\WINDOWS\System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5676A77B-688B-403B-B2D1-2EB5CC6344B3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5676A77B-688B-403B-B2D1-2EB5CC6344B3}" => removed successfully
C:\WINDOWS\System32\Tasks\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OneDrive Startup Task-S-1-5-21-629165207-329108147-321633127-1002" => removed successfully
HKLM\System\CurrentControlSet\Services\AdvancedSystemCareService18 => removed successfully
AdvancedSystemCareService18 => service removed successfully
HKLM\System\CurrentControlSet\Services\FvSvc => removed successfully
FvSvc => service removed successfully
HKLM\System\CurrentControlSet\Services\ImControllerService => removed successfully
ImControllerService => service removed successfully
HKLM\System\CurrentControlSet\Services\cpuz154 => removed successfully
cpuz154 => service removed successfully
HKLM\System\CurrentControlSet\Services\AscFileFilter => removed successfully
AscFileFilter => service removed successfully
HKLM\System\CurrentControlSet\Services\AscRegistryFilter => removed successfully
AscRegistryFilter => service removed successfully
HKLM\System\CurrentControlSet\Services\iobit_monitor_server2021 => removed successfully
iobit_monitor_server2021 => service removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.

C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 4282855 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 563446886 B
Windows/system/drivers => 144835350 B
Edge => 19854349 B
Firefox => 0 B
Opera => 2183482192 B

Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 5 B
ProgramData => 989185 B
Public => 0 B
systemprofile => 2235976471 B
systemprofile32 => 476915 B
LocalService => 1449717 B
NetworkService => 16389 B
micha => 582044242 B
WsiAccount => 3378363 B
SQLTELEMETRY => 5 B
MSSQLSERVER => 5 B

RecycleBin => 0 B
EmptyTemp: => 5.35 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 06-11-2026 20:45:46)

C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 20:45:46 ====

Re: Prosim o kontrolu logu

Odeslal: 06 Lis 2026 21:48
od Rudy
Smazáno, log již vypadá OK.

Re: Prosim o kontrolu logu

Odeslal: 06 Lis 2026 22:36
od superjano
Ďakujem Rudy.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Překlad Leschek - FotoNomad.cz