Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-01-2026
Ran by nadas (administrator) on NADĚNKA (HP HP Laptop 15s-fq5xxx) (24-01-2026 17:29:28)
Running from C:\Users\nadas\Downloads\FRST64.exe
Loaded Profiles: nadas
Platform: Microsoft Windows 11 Home Version 25H2 26200.7623 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\TeamViewer\TeamViewer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\144.0.3719.82\msedgewebview2.exe <13>
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files\TeamViewer\crashpad_handler.exe <2>
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\tv_w32.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\tv_x64.exe
(C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.15.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.15.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\SysInfoCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\BridgeCommunication.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_fe2967a6eb0d3a7d\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_fe2967a6eb0d3a7d\ipf_helper.exe
(DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOMN64.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sonitude, Inc.) C:\Windows\System32\DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOCL64.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> DesktopExtension) C:\Program Files\WindowsApps\AD2F1837.myHP_52.52602.670.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.15.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2512.8.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe
(ETDService.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDCtrl.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Media Network\HPMediaNetwork.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDService.exe
(services.exe ->) (FOR TESTING ONLY - IPF_PreProd_Cert -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_683097297aaa9bb4\ipfsvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\SysInfoCap.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_8660e4d6e8832471\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_64dc54263337697d\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_fe2967a6eb0d3a7d\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_04f57d4d19c5b315\AS\IAS\IntelAudioService.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sonitude, Inc.) C:\Windows\System32\DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOMN64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkWiFiManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c7598999a3513b7d\RtkAudUService64.exe <3>
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_52.52602.670.0_x64__v10z8vjag6ke6\HP.HPX.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\OmenInstallMonitor\OmenInstallMonitor.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\Overlay\OverlayHelper.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\SystemOptimizer\SystemOptimizer.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.195.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c7598999a3513b7d\RtkAudUService64.exe [2227656 2024-10-15] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-965734613-4118459871-2446318820-1001\...\Run: [HPSEU_Host_Launcher] => C:\Program Files\HP\HP System Event Utility\Host Launcher\HpseuHostLauncher.exe [545864 2025-11-07] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-965734613-4118459871-2446318820-1001\...\Run: [MicrosoftEdgeAutoLaunch_9E35406053A46342513896AD9749A30C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [4314192 2026-01-16] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-965734613-4118459871-2446318820-1002\...\Run: [MicrosoftEdgeAutoLaunch_8D6AADF2653E934432CCA87C0AED8CC3] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4314192 2026-01-16] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-965734613-4118459871-2446318820-1002\...\RunOnce: [OMENCC_InstallationBooster] => C:\system.sav\util\OMENCC_InstallationBooster.exe (No File)
HKLM\...\Windows x64\Print Processors\Canon G3060 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDGJ.DLL [525824 2021-09-12] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor G3060 series: C:\WINDOWS\system32\CNMLMGJ.DLL [962560 2021-09-12] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2025-11-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\144.0.7559.97\Installer\chrmstp.exe [2026-01-23] (Google LLC -> Google LLC)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {E3D95F33-3A76-47EC-8CC8-5219DD77D9AE} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem144.0.7547.0{4BD43D6E-62EC-428D-9651-374AB64E4B1B} => C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe [7056536 2025-11-26] (Google LLC -> Google LLC)
Task: {5F543651-193C-4CD2-B189-83529BB35E50} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [1004040 2025-10-21] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {9BC44C52-1655-4B15-A90A-B9546DEA7458} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [480264 2025-10-21] (HP Inc. -> HP Inc.)
Task: {CB9988A8-82CA-4F51-A69A-3B4D44826C6D} - System32\Tasks\HP\Consent Manager Launcher => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {F9FEBB6C-2287-476E-AE48-2888D874D810} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16242992 2026-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {B9D6CC31-2E31-493A-9FD8-34434753704B} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28636480 2026-01-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {65709CF8-F94B-4A22-829E-7533699B6888} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [73568 2026-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {D33E1C07-4B6C-4CA2-8E6F-B82FA6D314BD} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28636480 2026-01-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {0A045AF8-8A7E-48BC-88A6-A4C8F43CB8DC} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [310560 2026-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {B6F3C2CF-6B45-4F9B-B426-F95C980F0439} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [310560 2026-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {5C34AA24-35A6-48D0-AE76-20CFB5A2B19F} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [1347320 2026-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {7D0EA529-F57E-42C6-8FBE-3AB410F8A9BB} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16242992 2026-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (No File)
Task: {27CE9D59-9D48-4D29-99BC-64657AEBA494} - System32\Tasks\Microsoft\Windows\Security\Pwdless\IntelligentPwdlessTask => {8702A841-D5CA-47C3-812D-9CEDC304C200}
Task: {E964F289-7106-43CB-BD3A-B99CE1973F0F} - System32\Tasks\Microsoft\Windows\Setup\PITRTask => {093cb270-c282-4c22-b2ea-7d2bf1c30bbf} C:\WINDOWS\system32\oobe\PITRTask.dll [118784 2025-12-10] (Microsoft Windows -> Microsoft Corporation)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (No File)
Task: {AD91B379-056C-488B-8D2C-EA51783036A6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F10CAC31-4CE3-4DCA-ADF9-31D7DEAD1733} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {67586BA0-B37B-4B48-8964-11ED1BDCEFC5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D8D86D84-1EA4-490D-B44D-17F159E21BF5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {93241EB7-35BC-43F3-92DA-5C5761312F10} - System32\Tasks\OmenInstallMonitor => C:\Program Files\HP\OmenInstallMonitor\OmenInstallMonitor.exe [74248 2026-01-13] (HP Inc. -> HP Inc.)
Task: {2C89A4CD-C345-4D65-9F56-2A56CB4C7907} - System32\Tasks\OmenInstallMonitorCustomEvent => C:\Program Files\HP\OmenInstallMonitor\OmenInstallMonitor.exe [74248 2026-01-13] (HP Inc. -> HP Inc.)
Task: {41EF0A07-4DB1-4F97-B00A-F3699F86923F} - System32\Tasks\OmenInstallMonitorCustomEvent-sid-S-1-5-21-965734613-4118459871-2446318820-1001 => C:\Program Files\HP\OmenInstallMonitor\OmenInstallMonitor.exe [74248 2026-01-13] (HP Inc. -> HP Inc.)
Task: {F7882E80-44B6-4124-AEEB-36B97251E718} - System32\Tasks\OmenInstallMonitor-sid-S-1-5-21-965734613-4118459871-2446318820-1001 => C:\Program Files\HP\OmenInstallMonitor\OmenInstallMonitor.exe [74248 2026-01-13] (HP Inc. -> HP Inc.)
Task: {EDD27796-B037-4BFC-A433-C74760483632} - System32\Tasks\OmenOverlay => C:\Program Files\HP\Overlay\OverlayHelper.exe [68104 2025-10-16] (HP Inc. -> HP Inc.)
Task: {0A0B157D-3084-4CF9-AC00-08BC621F1A0A} - System32\Tasks\OmenOverlayCustomEvent => C:\Program Files\HP\Overlay\OverlayHelper.exe [68104 2025-10-16] (HP Inc. -> HP Inc.)
Task: {BFF43C2E-C3A2-4E52-AA77-A3D7E9B7FF66} - System32\Tasks\OmenOverlayCustomEvent-sid-S-1-5-21-965734613-4118459871-2446318820-1001 => C:\Program Files\HP\Overlay\OverlayHelper.exe [68104 2025-10-16] (HP Inc. -> HP Inc.)
Task: {8A81A6FC-FF72-4305-944C-76B59E963E51} - System32\Tasks\OmenOverlay-sid-S-1-5-21-965734613-4118459871-2446318820-1001 => C:\Program Files\HP\Overlay\OverlayHelper.exe [68104 2025-10-16] (HP Inc. -> HP Inc.)
Task: {E3B3637E-2EFD-4E8B-8075-BBE24E954246} - System32\Tasks\OneDrive Startup Task-S-1-5-21-965734613-4118459871-2446318820-1001 => C:\Users\nadas\AppData\Local\Microsoft\OneDrive\25.243.1211.0001_1\OneDriveLauncher.exe [745872 2026-01-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {3888C641-C52F-444A-B6DF-948F4C97FA43} - System32\Tasks\SystemOptimizer => C:\Program Files\HP\SystemOptimizer\SystemOptimizer.exe [166408 2026-01-13] (HP Inc. -> HP Inc.)
Task: {E7D666ED-5439-4BD8-90DA-62E863F827AF} - System32\Tasks\SystemOptimizerCustomEvent => C:\Program Files\HP\SystemOptimizer\SystemOptimizer.exe [166408 2026-01-13] (HP Inc. -> HP Inc.)
Task: {DECFD811-223C-4131-9067-95C78C7C398D} - System32\Tasks\SystemOptimizerCustomEvent-sid-S-1-5-21-965734613-4118459871-2446318820-1001 => C:\Program Files\HP\SystemOptimizer\SystemOptimizer.exe [166408 2026-01-13] (HP Inc. -> HP Inc.)
Task: {1AA73019-A181-4FBB-8FA0-553589FBAC8D} - System32\Tasks\SystemOptimizer-sid-S-1-5-21-965734613-4118459871-2446318820-1001 => C:\Program Files\HP\SystemOptimizer\SystemOptimizer.exe [166408 2026-01-13] (HP Inc. -> HP Inc.)
Task: {91FAA65B-B8E3-4AD1-B8D2-2C35A76D2001} - System32\Tasks\SystemOptimizerTemp => C:\Users\nadas\AppData\Local\Temp\HP\SystemOptimizerTemp\SystemOptimizer.exe  -update (No File) <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{e69d42af-e1e3-4ae5-8a2c-bbe1166158ba}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{e69d42af-e1e3-4ae5-8a2c-bbe1166158ba}: [DhcpDomain] home

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-12-06] (Microsoft Corporation -> Microsoft Corporation)

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\nadas\AppData\Local\Microsoft\Edge\User Data\Default [2026-01-24]
Edge Extension: (Dokumenty Google offline) - C:\Users\nadas\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-12-25]
Edge Extension: (Edge relevant text changes) - C:\Users\nadas\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-01-07]

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\nadas\AppData\Local\Google\Chrome\User Data\Default [2026-01-24]
CHR Notifications: Default -> hxxps://axelarigato.com; hxxps://cs.duolingo.com; hxxps://modivo.cz; hxxps://us.vestiairecollective.com; hxxps://www.internetcorkboard.com; hxxps://www.invia.cz; hxxps://www.joom.com; hxxps://www.lacoste.cz; hxxps://www.letakomat.cz; hxxps://www.megaknihy.cz; hxxps://www.plnapenezenka.cz; hxxps://www.vivantis.cz
CHR Extension: (McAfee® WebAdvisor) - C:\Users\nadas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2025-12-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\nadas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-01-14]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\nadas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-01-07]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13165888 2026-01-21] (Microsoft Corporation -> Microsoft Corporation)
R2 dptftcs; C:\WINDOWS\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_683097297aaa9bb4\ipfsvc.exe [562040 2024-05-24] (FOR TESTING ONLY - IPF_PreProd_Cert -> Intel Corporation)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [475680 2023-04-14] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\AppHelperCap.exe [909496 2025-09-30] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\DiagsCap.exe [907960 2025-09-30] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\NetworkCap.exe [903856 2025-09-30] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\SysInfoCap.exe [909464 2025-09-30] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe [639784 2025-10-01] (HP Inc. -> HP Inc.)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2024-01-13] (Intel Corporation -> Intel(R) Corporation)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_04f57d4d19c5b315\AS\IAS\IntelAudioService.exe [531032 2024-02-05] (Intel Corporation -> Intel)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_fe2967a6eb0d3a7d\ipf_uf.exe [3084992 2024-05-21] (Intel Corporation -> Intel Corporation)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [963968 2026-01-16] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpDefenderCoreService.exe [2063376 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 RtkWiFiManServ; C:\WINDOWS\RtkWiFiManServ.exe [822632 2024-07-23] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
R2 SECOMNService; C:\WINDOWS\System32\DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOMN64.exe [1087496 2024-07-08] (Microsoft Windows Hardware Compatibility Publisher -> Sonitude, Inc.)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [25756528 2025-12-17] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\NisSrv.exe [4426832 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MsMpEng.exe [290704 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [144816 2023-01-05] (Alcorlink Corp. -> )
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [573440 2025-03-02] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2025-03-02] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-03-02] (Microsoft Corporation) [File not signed]
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [226688 2025-12-10] (Microsoft Windows -> Microsoft Corporation)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1421dec2010cc057\x64\hpcustomcapdriver.sys [18984 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
R2 HpReadHWData; C:\WINDOWS\system32\drivers\HpReadHWData.sys [58952 2025-03-05] (HP Inc. -> Windows (R) Win 7 DDK provider)
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_6f8ae740d22247ce\iaLPSS2_GPIO2_ADL.sys [141288 2024-05-15] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_563fbcd35feb69a6\iaLPSS2_I2C_ADL.sys [211432 2024-05-15] (Intel Corporation -> Intel Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_8e2f374849f1eba9\gna.sys [90304 2024-04-25] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_c4581e5c36b81f6c\ipf_acpi.sys [88656 2024-05-21] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_fe2967a6eb0d3a7d\ipf_cpu.sys [88144 2024-05-21] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_fe2967a6eb0d3a7d\ipf_lf.sys [499392 2024-05-21] (Intel Corporation -> Intel Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [333192 2025-11-18] (Microsoft Windows -> Microsoft Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [144768 2025-12-10] (Microsoft Windows -> Microsoft Corporation)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2025-06-13] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21928 2025-12-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [635272 2025-12-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102792 2025-12-18] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-03-02] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_a6dc64e436f22951\WSDScan.sys [61440 2025-09-10] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-01-24 17:29 - 2026-01-24 17:30 - 000027791 _____ C:\Users\nadas\Downloads\FRST.txt
2026-01-24 17:28 - 2026-01-24 17:28 - 002443264 _____ (Farbar) C:\Users\nadas\Downloads\FRST64 (1).exe
2026-01-24 17:28 - 2026-01-24 17:28 - 000714110 _____ C:\WINDOWS\system32\perfh005.dat
2026-01-24 17:28 - 2026-01-24 17:28 - 000163306 _____ C:\WINDOWS\system32\perfc005.dat
2026-01-24 17:26 - 2026-01-24 17:26 - 002443264 _____ (Farbar) C:\Users\nadas\Downloads\FRST64.exe
2026-01-22 13:22 - 2026-01-24 04:07 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-01-06 17:27 - 2026-01-06 17:27 - 000050014 _____ C:\Users\nadas\Downloads\14406013120165.pdf
2025-12-29 11:36 - 2025-12-29 11:36 - 000051278 _____ C:\Users\nadas\Downloads\14406013041534.pdf
2025-12-29 11:36 - 2025-12-29 11:36 - 000051278 _____ C:\Users\nadas\Downloads\14406013041534 (1).pdf
2025-12-27 20:22 - 2026-01-24 13:55 - 000000130 _____ C:\Users\nadas\AppData\LocalLow\15f9f0c61c274f2bc03997dc23d52aac2148f50f7860efe8d17557ed3d3b184d
2025-12-27 19:24 - 2025-12-27 20:18 - 000000000 ____D C:\Users\nadas\Downloads\antivirus
2025-12-27 19:23 - 2025-12-27 20:23 - 000213460 _____ C:\Users\nadas\AppData\LocalLow\e04b6994c2b7fcf060f719bbf7ce52c94fcbcac6c15d1e525f5b24870e25bab9
2025-12-27 19:23 - 2025-12-27 20:23 - 000000130 _____ C:\Users\nadas\AppData\LocalLow\23c6ad22c452b482a4ef56aa50c2022d54b305209b0a513330f4acd59e62e03a
2025-12-27 19:22 - 2025-12-27 19:23 - 000027816 _____ C:\Users\nadas\Downloads\Addition.txt
2025-12-27 19:20 - 2026-01-24 17:29 - 000000000 ____D C:\FRST
2025-12-27 19:19 - 2025-12-27 19:19 - 000000000 ____D C:\Users\nadas\AppData\Roaming\Microsoft\MMC

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-01-24 17:28 - 2025-03-02 03:45 - 001707676 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-01-24 17:28 - 2025-01-07 15:25 - 000025478 _____ C:\Users\nadas\AppData\LocalLow\c5cab23b7d54c6ebe61ac954997f29df329c56e229772e02164510be11ecbe7d
2026-01-24 17:28 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-01-24 17:27 - 2025-01-16 12:53 - 000225579 _____ C:\Users\nadas\AppData\LocalLow\1070423e90c5c0d1a87f3362efc09a340e6682e585955448a4ec8e02f654acb2
2026-01-24 17:27 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-01-24 17:26 - 2025-11-13 08:08 - 000139099 _____ C:\Users\nadas\AppData\LocalLow\ce7d5ade51918424e7ab28d6be398d04571b1d5b746b9df78d453a79a8c49790
2026-01-24 17:24 - 2025-11-13 08:08 - 000000130 _____ C:\Users\nadas\AppData\LocalLow\7587b34979b69af9fc7f0ee477aee1dfd8cbc8a90c11670a0e5ea745f3e8b618
2026-01-24 17:24 - 2025-01-07 15:22 - 000000000 ___RD C:\Users\nadas\OneDrive
2026-01-24 17:24 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-01-24 17:23 - 2025-01-07 15:25 - 000000000 ____D C:\Users\nadas\AppData\Local\OGH
2026-01-24 17:22 - 2025-11-21 14:35 - 000000000 ____D C:\Program Files\TeamViewer
2026-01-24 17:22 - 2025-03-02 03:28 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-01-24 17:22 - 2025-03-02 03:26 - 000013286 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-01-24 17:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-01-24 17:22 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-01-24 17:22 - 2024-04-01 08:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-01-24 17:22 - 2022-11-03 05:32 - 000012288 ___SH C:\DumpStack.log.tmp
2026-01-24 17:20 - 2025-11-13 08:08 - 000011216 _____ C:\Users\nadas\AppData\LocalLow\8735503d248bc05bce6a4ee8b4e1d8c2c712ca07306ddfd6c44ed112064daf63
2026-01-24 17:20 - 2025-08-13 19:41 - 000011216 _____ C:\Users\nadas\AppData\LocalLow\8fc71774af14f8786fda4702e915e889ccacb2c2c4f37b7d85a57f492822c7b0
2026-01-24 17:20 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-01-24 17:15 - 2025-03-02 03:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-01-24 13:36 - 2025-03-02 03:28 - 000003638 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-01-24 13:36 - 2025-03-02 03:28 - 000003512 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-01-23 20:39 - 2024-05-06 05:47 - 000000000 ____D C:\Program Files\Microsoft Office
2026-01-23 02:53 - 2025-01-07 15:24 - 000002254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-01-23 02:53 - 2025-01-07 15:24 - 000002213 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2026-01-22 20:55 - 2025-01-08 19:09 - 001431525 _____ C:\Users\nadas\AppData\LocalLow\b995432a321c08f1bc82cb7cbc826b427df602f0a295f6640cc2b207ebfa1a1b
2026-01-22 13:14 - 2025-01-07 15:23 - 000000000 ____D C:\Users\nadas\AppData\Local\D3DSCache
2026-01-22 12:35 - 2025-03-02 03:28 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-965734613-4118459871-2446318820-1001
2026-01-22 12:35 - 2025-03-02 03:28 - 000003574 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-965734613-4118459871-2446318820-1001
2026-01-22 12:35 - 2025-03-02 03:28 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-965734613-4118459871-2446318820-1001
2026-01-22 12:35 - 2025-01-07 15:22 - 000002386 _____ C:\Users\nadas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-01-18 20:24 - 2022-11-03 05:32 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-01-18 20:24 - 2022-11-03 05:32 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-01-14 12:55 - 2025-03-06 12:55 - 000004474 _____ C:\WINDOWS\system32\Tasks\OmenInstallMonitorCustomEvent-sid-S-1-5-21-965734613-4118459871-2446318820-1001
2026-01-14 12:55 - 2025-03-06 12:55 - 000004072 _____ C:\WINDOWS\system32\Tasks\OmenInstallMonitor-sid-S-1-5-21-965734613-4118459871-2446318820-1001
2026-01-14 12:53 - 2025-03-06 12:53 - 000004450 _____ C:\WINDOWS\system32\Tasks\SystemOptimizerCustomEvent-sid-S-1-5-21-965734613-4118459871-2446318820-1001
2026-01-14 12:53 - 2025-03-06 12:53 - 000004048 _____ C:\WINDOWS\system32\Tasks\SystemOptimizer-sid-S-1-5-21-965734613-4118459871-2446318820-1001
2026-01-14 12:53 - 2024-05-06 05:45 - 000000000 ____D C:\Program Files\HP
2026-01-14 03:01 - 2025-03-02 03:23 - 000592864 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-01-14 03:01 - 2025-03-02 03:23 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-01-14 03:00 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-01-14 03:00 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-01-14 03:00 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-01-14 03:00 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-01-14 03:00 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-01-14 03:00 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-01-14 03:00 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-01-14 03:00 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-01-14 03:00 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-01-14 03:00 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-01-14 01:37 - 2025-03-02 03:26 - 003276800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-01-04 19:31 - 2025-02-12 21:30 - 000000000 ____D C:\Users\nadas\AppData\Local\CrashDumps
2025-12-27 19:57 - 2024-09-27 01:49 - 000000000 ____D C:\Program Files\McAfee
2025-12-27 19:47 - 2025-01-07 15:15 - 000000000 ____D C:\Users\nadas\AppData\Local\Packages
2025-12-27 19:47 - 2024-09-27 01:49 - 000000000 ____D C:\ProgramData\McAfee
2025-12-27 19:47 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-12-27 19:47 - 2022-11-03 05:35 - 000000000 ____D C:\ProgramData\Packages

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================