Start
CreateRestorePoint:
CloseProcesses:
C:\Users\RomaP\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\iikmkjmpaadaobahmlepeloendndfphd
C:\Users\RomaP\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo
2026-06-19 13:37 - 2023-02-10 21:30 - 000000000 ____D C:\Users\RomaP\AppData\Roaming\IObit
2026-06-19 13:37 - 2023-02-10 21:30 - 000000000 ____D C:\ProgramData\IObit
S3 SunshineService; "C:\Program Files\Sunshine\tools\sunshinesvc.exe" (No File)
CustomCLSID: HKU\S-1-5-21-533780750-747756185-301308243-1001_Classes\CLSID\{6A012BDE-3690-4747-9C3E-5E4FC354304A}\InprocServer32 -> C:\Users\RomaP\AppData\Local\Microsoft\EdgeUpdate\1.3.241.13\psuser_64.dll => No File
AlternateDataStreams: C:\Users\RomaP\Downloads\esetonlinescanner.exe:MBAM.Zone.Identifier [314]
FirewallRules: [{81F5B9DC-7618-466F-820E-262F4FEE3E82}] => (Allow) C:\Users\RomaP\Downloads\pdnob-image-translator_11740990348025344102.exe => No File
FirewallRules: [{4D978F80-6C9E-4788-A439-D208C4650888}] => (Allow) C:\Users\RomaP\Downloads\pdnob-image-translator_11740990348025344102.exe => No File
FirewallRules: [{13B21B8C-015D-4659-AC21-421FD7CF34CD}] => (Allow) C:\Program Files (x86)\Synthesia\Synthesia.exe => No File
FirewallRules: [{A13B935E-ED8F-4E95-99FE-5F9F4AD30E3E}] => (Allow) C:\Program Files (x86)\Synthesia\Synthesia.exe => No File
FirewallRules: [{F3FF31A5-E63E-450A-9CD4-2F521DC39EB8}] => (Allow) C:\Program Files (x86)\Synthesia\Synthesia.exe => No File
FirewallRules: [{85440B57-0E9E-46B6-8DDB-69E223FDD87C}] => (Allow) C:\Program Files (x86)\Synthesia\Synthesia.exe => No File
FirewallRules: [{B2958392-CF7F-42C7-897D-AD82C6395D32}] => (Block) C:\Program Files (x86)\Synthesia\Synthesia.exe => No File
FirewallRules: [{0A3A9007-AF3A-4968-A015-7973A6E84410}] => (Block) C:\Program Files (x86)\Synthesia\Synthesia.exe => No File
FirewallRules: [{307C7574-AD00-4705-9624-8C0B6F3F2B89}] => (Allow) C:\Users\RomaP\AppData\Local\Temp\ACFL20251020094012\ACSetup\ACSetup.exe => No File
FirewallRules: [{6D7D6666-894F-4FF4-8846-DFA4AFE2AF8C}] => (Allow) C:\Users\RomaP\AppData\Local\Temp\ACFL20251020094012\ACSetup\ACSetup.exe => No File
FirewallRules: [{31BB2945-1CC6-4BEE-8DC5-04809D891232}] => (Allow) C:\Program Files\Sunshine\sunshine.exe => No File
FirewallRules: [{F0DF3D96-E26F-4BE7-9039-D99E6E933AA6}] => (Allow) C:\Program Files\Sunshine\sunshine.exe => No File
C:\ProgramData\microsofts
C:\Users\RomaP\AppData\LocalLow\Temp\*
C:\Users\RomaP\AppData\Local\Temp\afcb07a2-866e-4836-b0a4-1f4454e7e86c.tmp.node
Hosts:
EmptyTemp:
End