Kontrola logů - pomalé PC

[ALEXUSS]

Zdravím, chtěl bych požádat o kontrolu logů...mám problém s extrémně pomalým PC.
Předem díky za pomoc.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 25-07-2025
Ran by petrs (administrator) on LAPTOP-12NQHH0I (HP HP 250 G6 Notebook PC) (25-07-2025 15:42:20)
Running from C:\Users\petrs\Desktop\FRST64.exe
Loaded Profiles: petrs
Platform: Microsoft Windows 10 Home Version 2004 19041.1052 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files (x86)\TeamViewer\crashpad_handler.exe <3>
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpCmdRun.exe <2>
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpCopyAccelerator.exe
(DriverStore\FileRepository\ki135422.inf_amd64_819df826076efbf4\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki135422.inf_amd64_819df826076efbf4\igfxEM.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <8>
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(explorer.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\CCleaner\CCleaner64.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki135422.inf_amd64_819df826076efbf4\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki135422.inf_amd64_819df826076efbf4\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki135422.inf_amd64_819df826076efbf4\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(wuauclt.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SoftwareDistribution\Download\Install\AM_Delta_Patch_1.433.58.0.exe
(wuauclt.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\MpSigStub.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-04-23] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [709152 2018-03-22] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45741280 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {5503d395-d8aa-11ee-94d0-3024323374a7} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {73f2309e-a376-11ea-948e-3024323374a7} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {89fb3a01-54f8-11ed-94ba-3024323374a7} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {89fb3a35-54f8-11ed-94ba-3024323374a7} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {a96febec-1465-11eb-9499-3024323374a7} - "F:\HiSuiteDownLoader.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\138.0.7204.159\Installer\chrmstp.exe [2025-07-24] (Google LLC -> Google LLC)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {EA987520-8D2A-4A58-824C-489FEAD0E221} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-06-23] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {910BFD86-98C2-43B4-A742-E2731883437D} - System32\Tasks\CCleanerBrowserProtectS-1-5-21-2292354515-3209054098-56540792-1001 => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowserProtect.exe --runonce (No File)
Task: {2B381103-BB03-4185-ACFA-046DC44D4620} - System32\Tasks\CCleanerClean => C:\Program Files\CCleaner\CCleaner.exe [39575776 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {D8D56B04-5953-44CC-AC05-A1CD65937A2A} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "d0d397ba-d5e7-4ac0-bd4f-7d54d1c1eab6" --version "6.38.0.11537" --silent
Task: {CD15DF10-EA96-42CF-BDD6-6555088C03F8} - System32\Tasks\CCleanerSkipUAC - petrs => C:\Program Files\CCleaner\CCleaner.exe [39575776 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {8DCBB0AF-5670-4AF5-A661-96C3DBC88808} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem140.0.7273.0{526CF136-1195-4E6C-BBA6-BDE33CEA3E6A} => C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\updater.exe [6836832 2025-07-02] (Google LLC -> Google LLC)
Task: {BCD1D936-9017-450D-836C-3475BD7EF06E} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [198696 2017-09-27] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\-task -source HPSA
Task: {F609C2CE-681D-40CE-9BBB-F77C7656A0F7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1490800 2017-09-27] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\\/taskrestart
Task: {2B8D0ACA-C517-43BA-9091-B2A29658349F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [119664 2017-09-27] (HP Inc. -> HP Inc.)
Task: {BC0DF0B7-6DBD-4BD9-9EB1-F19DBAEB0234} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [651632 2017-09-27] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\\/u
Task: {3EFC3026-53DA-4F4A-82A2-4A8DFB1A705A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe -> C:\Program Files\Hewlett-Packard\HP Support Framework\\/L Analysis
Task: {B95E0E7E-2BF2-4C90-9BFF-26E1E10F173A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [216432 2017-09-27] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\\/noreport
Task: {2CB12CA0-2AE0-46C2-96E9-3A88C60160A8} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1644960 2017-02-02] (HP Inc. -> HP Inc.)
Task: {35108D4E-749F-437C-ADCC-2C285B617A43} - System32\Tasks\HPEA3JOBS => C:\Program -> Files\HP\HP ePrint\hpeprint.exe /CheckJobs
Task: {D6CCE887-960A-4BAD-ABDB-0F6E1E6B9B71} - System32\Tasks\HPJumpStartLaunch => C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe [461824 2017-10-06] (HP Inc. -> HP Inc.)
Task: {A9E4A6FF-9102-4B1E-84EF-6355E388E557} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpCmdRun.exe [1778224 2025-07-25] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {ADF19B92-FEA8-40C7-8DD6-99CC0BE24DE0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpCmdRun.exe [1778224 2025-07-25] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7596D823-4611-45A6-8C61-90C59BA3696F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpCmdRun.exe [1778224 2025-07-25] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FBF15C5A-29B1-4617-B1D0-E097E985755A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpCmdRun.exe [1778224 2025-07-25] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {610CAE48-9FCF-44E1-B3E2-4EBABAC67023} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2292354515-3209054098-56540792-1001 => C:\Users\petrs\AppData\Local\Microsoft\OneDrive\25.127.0701.0006\OneDriveLauncher.exe [685448 2025-07-24] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CCleanerClean.job => C:\Program Files\CCleaner\CCleaner.exe
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1984dba3-d23c-4d1e-b805-d5f27532989c}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2e398964-108b-4c6f-bb1c-b84550d43582}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2e398964-108b-4c6f-bb1c-b84550d43582}\05564727: [DhcpNameServer] 192.168.31.1
Tcpip\..\Interfaces\{2e398964-108b-4c6f-bb1c-b84550d43582}\A457079647562764275656: [DhcpNameServer] 10.250.250.10 10.250.250.20
Tcpip\..\Interfaces\{b2744a98-e3d2-4e77-9efb-210affce88ba}: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge Notifications: HKU\S-1-5-21-2292354515-3209054098-56540792-1001 -> hxxps://www.facebook.com
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\petrs\AppData\Local\Microsoft\Edge\User Data\Default [2025-07-25]
Edge Extension: (Dokumenty Google offline) - C:\Users\petrs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-25]
Edge Extension: (Edge relevant text changes) - C:\Users\petrs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-29]

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\petrs\AppData\Local\Google\Chrome\User Data\Default [2025-07-25]
CHR Notifications: Default -> hxxps://cz.sexystars.online; hxxps://eroporn.club; hxxps://nahefoto.cz; hxxps://nudecelebvideo.net
CHR Extension: (Dokumenty Google offline) - C:\Users\petrs\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\petrs\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1080544 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1322632 2017-12-13] (HP Inc. -> HP Inc.)
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [477184 2017-10-06] (HP Inc. -> HP Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (Hewlett-Packard Company -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [323952 2017-09-27] (HP Inc. -> HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc. -> HP Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpDefenderCoreService.exe [2042672 2025-07-25] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [21124912 2025-07-08] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\NisSrv.exe [4546688 2025-07-25] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MsMpEng.exe [282464 2025-07-25] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [330112 2025-07-02] (Microsoft Windows -> Microsoft Corporation)
S3 MpKsl4be501fb; C:\WINDOWS\system32\MpEngineStore\MpKslDrv.sys [134376 2022-02-21] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20888 2025-07-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [623008 2025-07-25] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [101792 2025-07-25] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40200 2023-11-17] (HP Inc. -> HP)
S3 MpKsl6e522234; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C752B405-5529-49B3-B07C-9CEADD26A303}\MpKslDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-07-25 15:42 - 2025-07-25 15:46 - 000019243 _____ C:\Users\petrs\Desktop\FRST.txt
2025-07-25 15:39 - 2025-07-25 15:45 - 000000000 ____D C:\FRST
2025-07-25 15:38 - 2025-07-25 15:38 - 002409472 _____ (Farbar) C:\Users\petrs\Desktop\FRST64.exe
2025-07-25 15:09 - 2025-07-25 15:09 - 000000000 ___HD C:\$WinREAgent
2025-07-25 14:31 - 2025-07-25 14:41 - 000000000 ____D C:\Fotky a videa
2025-07-24 21:05 - 2025-07-24 21:05 - 000000000 ____D C:\Program Files\chrome_url_fetcher_3052_1541096172
2025-07-24 20:57 - 2025-07-25 15:31 - 000003326 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2025-07-24 20:37 - 2025-07-24 20:43 - 000000000 ____D C:\Program Files\chrome_url_fetcher_12108_1407294530
2025-07-24 20:36 - 2025-07-24 20:36 - 000000000 ____D C:\Program Files\chrome_url_fetcher_12108_1138460653
2025-07-18 10:36 - 2025-07-18 10:36 - 000000000 ____D C:\ProgramData\Avast Software
2025-07-18 09:56 - 2025-07-18 10:01 - 000000000 ____D C:\Program Files\chrome_url_fetcher_6184_841191546
2025-07-07 20:52 - 2025-07-07 20:52 - 000000000 ____D C:\Program Files\chrome_url_fetcher_9168_840543481
2025-07-07 20:47 - 2025-07-07 20:47 - 000000000 ____D C:\Program Files\chrome_url_fetcher_11168_454912363
2025-07-04 19:15 - 2025-07-04 19:17 - 000000000 ____D C:\Program Files\chrome_url_fetcher_10680_1745784990

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-07-25 15:43 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-07-25 15:31 - 2025-04-04 15:47 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2025-07-25 15:31 - 2020-01-24 21:21 - 000000000 ____D C:\Program Files\CCleaner
2025-07-25 15:30 - 2020-01-08 16:11 - 000000000 __SHD C:\Users\petrs\IntelGraphicsProfiles
2025-07-25 15:28 - 2020-10-12 02:46 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-07-25 15:28 - 2020-10-12 01:58 - 000008192 ___SH C:\DumpStack.log.tmp
2025-07-25 15:28 - 2020-01-24 20:59 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2025-07-25 15:28 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2025-07-25 15:27 - 2019-12-07 11:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2025-07-25 15:23 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-07-25 15:16 - 2020-10-12 01:58 - 000384208 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-07-25 14:51 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-07-25 14:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-07-25 14:50 - 2020-01-08 16:11 - 000000000 ____D C:\Users\petrs\AppData\Local\Packages
2025-07-25 14:25 - 2018-04-28 08:06 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-07-25 14:18 - 2020-01-24 20:59 - 000000000 ____D C:\Users\petrs\AppData\Local\TeamViewer
2025-07-25 14:17 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2025-07-24 21:06 - 2025-02-06 10:30 - 000003564 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2292354515-3209054098-56540792-1001
2025-07-24 21:06 - 2021-12-19 16:38 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2292354515-3209054098-56540792-1001
2025-07-24 21:06 - 2020-10-22 12:20 - 000002384 _____ C:\Users\petrs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-07-24 21:06 - 2020-10-12 02:46 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2292354515-3209054098-56540792-1001
2025-07-24 20:57 - 2020-01-24 22:06 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-07-24 20:57 - 2020-01-24 22:06 - 000002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-07-24 20:56 - 2020-10-12 02:46 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2025-07-18 10:34 - 2020-10-12 01:58 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-07-18 10:22 - 2020-06-17 08:58 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-07-18 10:22 - 2020-06-17 08:58 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk

==================== Files in the root of some directories ========

2024-09-19 18:48 - 2025-07-25 13:52 - 000015947 _____ () C:\Program Files\CCleanerBrowser_installer.log
2024-08-23 09:28 - 2025-07-24 20:57 - 000634819 _____ () C:\Program Files\chrome_installer.log
2024-08-30 08:42 - 2025-07-18 10:39 - 001002633 _____ () C:\Program Files\msedge_installer.log

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-07-2025
Ran by petrs (25-07-2025 15:49:36)
Running from C:\Users\petrs\Desktop
Microsoft Windows 10 Home Version 2004 19041.1052 (X64) (2020-10-12 00:49:42)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-2292354515-3209054098-56540792-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2292354515-3209054098-56540792-503 - Limited - Disabled)
Guest (S-1-5-21-2292354515-3209054098-56540792-501 - Limited - Disabled)
petrs (S-1-5-21-2292354515-3209054098-56540792-1001 - Administrator - Enabled) => C:\Users\petrs
WDAGUtilityAccount (S-1-5-21-2292354515-3209054098-56540792-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee VirusScan (Enabled - Up to date) {8BCDACFA-D264-3528-5EF8-E94FD0BC1FBC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Enabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}
FW: McAfee Firewall (Enabled) {B3F62DDF-980B-3470-75A7-407A2E6F58C7}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Aplikace Intel® PROSet/Wireless (HKLM-x32\...\{4996e560-35d4-4f06-93df-54b6e6ab11c5}) (Version: 20.50.1 - Intel Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.78.1093 - AB Team, d.o.o.)
CCleaner (HKLM\...\CCleaner) (Version: 6.38 - Piriform)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1691.6 - Piriform Software) Hidden
CEWE FOTOLAB fotosvet (HKLM-x32\...\CEWE FOTOLAB fotosvet) (Version: 7.1.5 - CEWE Stiftung u Co. KGaA)
Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 138.0.7204.159 - Google LLC)
HP Audio Switch (HKLM-x32\...\{BC852AA8-58F6-4F07-ACB1-7377E52CA4F3}) (Version: 1.0.150.0 - HP Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.11.0 - HP Inc.)
HP Customer Experience Enhancements (HKLM-x32\...\{9720A595-3D2D-440E-9523-0B6F970745DD}) (Version: 6.0.11.1 - HP Inc.) Hidden
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP ePrint SW (HKLM\...\{16311D0B-D57C-46F8-AE64-9D4D44227271}) (Version: 5.5.22560 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{4C246A91-6BAE-450E-BDEA-70D01663DF43}) (Version: 5.5.22560 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{78525DEA-1E62-429B-9CA4-A78F899A9F29}) (Version: 5.5.22560 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{B2CFD444-5088-4ECC-A1F1-28620C082C36}) (Version: 5.5.22560 - HP Inc.) Hidden
HP ePrint SW (HKLM-x32\...\{3D00C669-D447-4A04-AFDA-25E9E76E7873}) (Version: 5.5.22560 - HP Inc.) Hidden
HP ePrint SW (HKLM-x32\...\{59649835-21FD-4523-9AB0-9E67ED77F0CA}) (Version: 5.5.22560 - HP Inc.) Hidden
HP ePrint SW (HKLM-x32\...\{cdb5f70f-5107-4613-bf69-15de903b5b5d}) (Version: 5.5.22560 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{3FC961DB-BD36-4D8D-B276-0C456A2BB638}) (Version: 1.4.0.441 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{F213102E-FD30-4E22-AF73-4C682D65FFEE}) (Version: 1.4.441.0 - HP Inc.)
HP Recovery Manager (HKLM-x32\...\{64BAA990-F1FC-4145-A7B1-E41FBBC9DA47}) (Version: 1.2.1511 - HP) Hidden
HP Registration Service (HKLM-x32\...\{4E097B06-83A0-4CDD-A9DB-22F0744FE16A}) (Version: 1.0.0.43 - HP Inc.) Hidden
HP Support Assistant (HKLM-x32\...\{4AAC4B07-77EF-4BCF-88DC-D24E4DE683E8}) (Version: 8.5.37.19 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{4E100CB6-9312-48BC-9DC0-4F4D5C338449}) (Version: 12.8.37.11 - HP Inc.)
HP System Event Utility (HKLM-x32\...\{5D308D1F-E37B-431A-8D35-67D16287467D}) (Version: 1.4.28 - HP Inc.)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.3.10207.5567 - Intel Corporation)
Intel(R) Chipset Device Software (HKLM\...\{7FB35D08-C75C-4A18-B593-1D7C3E8970AD}) (Version: 10.1.1.45 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1068 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{721F3055-6A35-4F74-A317-740E3F220468}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{E3870CAD-2D62-48F8-9D38-5F7B77CDA133}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{4ADC1C4F-BDF6-4BC0-905C-B99A4227D635}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{E9B9A1A5-6398-4C99-8FDE-10794F6505C5}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 25.20.100.6518 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 16.0.9.1101 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{CCEC6093-53EC-4341-A8BD-BBB2EF68BA83}) (Version: 16.0.9.1101 - Intel Corporation) Hidden
Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.49.166.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.49.166.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{df682aff-4294-4ad1-aaa7-276931d5781f}) (Version: 1.49.166.0 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000050-0200-1029-84C8-B8D95FA3C8C3}) (Version: 20.50.0 - Intel Corporation)
Intel® Chipset Device Software (HKLM-x32\...\{44ded3eb-1686-46a6-9770-fd79096c29f7}) (Version: 10.1.1.45 - Intel(R) Corporation) Hidden
Intel® PROSet/Wireless WiFi Software (HKLM\...\{E6F800A9-64D3-4E93-8E8E-AB53E21D4840}) (Version: 20.50.0.1450 - Intel Corporation) Hidden
Kontrola stavu osobního počítače s Windows (HKLM\...\{88EC8D4A-54AB-4A7F-BDE9-4AD906D9D11F}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 138.0.3351.95 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 138.0.3351.95 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\OneDriveSetup.exe) (Version: 25.127.0701.0006 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{E5A95BC5-81DF-4F0C-B910-B59DD012F037}) (Version: 2.81.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{7D3F6E2B-7A32-4289-A6E1-0595B89D1386}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{6AB94FE2-DC1A-434E-B8DC-772168A92300}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 x64 Additional Runtime - 14.0.23506 (HKLM\...\{B0B194F8-E0CE-33FE-AA11-636428A4B73D}) (Version: 14.0.23506 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x64 Minimum Runtime - 14.0.23506 (HKLM\...\{A1C31BA5-5438-3A07-9EEE-A5FB2D0FDE36}) (Version: 14.0.23506 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.23506 (HKLM-x32\...\{1045AB6F-6151-3634-8C2C-EE308AA1A6A7}) (Version: 14.0.23506 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.23506 (HKLM-x32\...\{65AD78AD-D23D-3A1E-9305-3AE65CD522C2}) (Version: 14.0.23506 - Microsoft Corporation) Hidden
OpenOffice 4.1.5 (HKLM-x32\...\{2FEA9841-64DE-4FA5-A36F-1CD23E2790EB}) (Version: 4.15.9789 - Apache Software Foundation)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.16299.31241 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.25.119.2018 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8940.1 - Realtek Semiconductor Corp.)
Simply Calenders v5.3 (HKLM-x32\...\{E1268F35-5DBD-4630-BF33-3EB823062752}) (Version: 5.03.1420 - Skerryvore Software)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.67.5 - TeamViewer)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{3BAE4496-6F6C-4330-A8AA-B93D3D346FA5}) (Version: 2.53.0.0 - Microsoft Corporation)

Packages:
=========
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-02-12] (Microsoft Corporation)
Doplněk pro Fotky -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-03-15] (Microsoft Corporation)
Dropbox promotion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.34.0_x64__xbfy0k16fey96 [2025-07-25] (Dropbox Inc.)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.4.481.0_x86__v10z8vjag6ke6 [2018-10-08] (HP Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-01-08] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-01-08] (Microsoft Corporation) [MS Ad]
Microsoft Office Desktop Apps -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.18925.20158.0_x86__8wekyb3d8bbwe [2025-07-25] (Microsoft Corporation)
Microsoft Sudoku -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSudoku_2.12.2221.0_x64__8wekyb3d8bbwe [2025-03-06] (Microsoft Studios)
Power Media Player 14 for HP Consumer PCs with DVD -> C:\Program Files\WindowsApps\CyberLinkCorp.hs.PowerMediaPlayer14forHPConsumerPC_14.2.9528.0_x86__06qsbagp91rvg [2020-01-13] (CYBERLINKCOM CORP)
Synaptics TouchPad -> C:\Program Files\WindowsApps\SynapticsIncorporated.SynHPConsumerDApp_19005.35054.0.0_x64__807d65c4rvak2 [2020-04-16] (Synaptics Incorporated)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki135422.inf_amd64_819df826076efbf4\igfxDTCM.dll [2020-03-16] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2021-06-15 09:31 - 2021-06-15 09:31 - 000160768 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BRIDGECommon\fa6b2b7378a507714dab5636e5f3bf9d\BRIDGECommon.ni.dll
2021-06-15 09:32 - 2021-06-15 09:32 - 000125440 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BridgeExtension\27c6673a4a74cd3bdefa4092c9bad4a2\BridgeExtension.ni.dll
2021-05-07 07:46 - 2021-05-07 07:46 - 000395264 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CleanStartController\e4b119a9fbc6ce7a930005e75cb1d0d1\CleanStartController.ni.dll
2021-05-07 07:47 - 2021-05-07 07:47 - 000138240 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.IWs06dcaa36#\f7bd748a9acba01efc64a02cf57764ac\Interop.IWshRuntimeLibrary.ni.dll
2021-05-07 07:46 - 2021-05-07 07:46 - 000145920 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Registratio4eabc192#\241ab6b54ca61dd3fb0b2516a711dba9\RegistrationUtilities.ni.dll
2021-05-07 07:47 - 2021-05-07 07:47 - 000134656 _____ (hardcodet.net) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Hardcodet.W6cab32f3#\75fa5cc812ec0f5b2a71b1a84ecede1e\Hardcodet.Wpf.TaskbarNotification.ni.dll
2021-05-07 07:46 - 2021-05-07 07:46 - 000136192 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CommonPortable\b3f1e3ab9e505397f77ae51d35679848\CommonPortable.ni.dll
2021-05-07 07:47 - 2021-05-07 07:47 - 001585664 _____ (Mark Heath) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\NAudio\152aaa9139cbd7f3bda75a3181ead06d\NAudio.ni.dll
2021-05-07 07:45 - 2021-05-07 07:45 - 002306560 _____ (Newtonsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\31e92db78499310665c1154ac69e4872\Newtonsoft.Json.ni.dll
2021-05-07 07:47 - 2021-05-07 07:47 - 000792064 _____ (The Apache Software Foundation) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\log4net\1a337ece96259812fb823e64a5cfd5ea\log4net.ni.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:BEF4B0E7 [140]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {2359280A-7873-4D2D-8F92-00FF1535D6E5} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> {2359280A-7873-4D2D-8F92-00FF1535D6E5} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-2292354515-3209054098-56540792-1001 -> {2359280A-7873-4D2D-8F92-00FF1535D6E5} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2017-09-27] (HP Inc. -> HP Inc.)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2017-09-27] (HP Inc. -> HP Inc.)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-04-12 01:38 - 2018-04-12 01:36 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.0.1
Windows Firewall is enabled.

Network Binding:
=============
Wi-Fi: Intel(R) Dual Band Wireless-AC 3168 -> Netwtw04.sys
Ethernet: Realtek PCIe GBE Family Controller -> rt640x64.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\Control Panel\Desktop\\Wallpaper ->
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{CBAE3FB7-3DDE-414E-B7F9-6335F9C5B1E6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.13231.20262.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9F75FFCB-6320-4626-8E65-E188632E0A0B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4EB158C6-612F-4C1C-A11C-5F716286E4C7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2FA86158-9AD7-4289-BC06-8EB339D55224}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{8A09473D-01DA-470A-9A60-6FB449C41164}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{46F77D69-D13B-45EF-832E-0DF7277B8E1D}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> )
FirewallRules: [{3D9B51B0-7F8F-45E6-9D58-B745C7E2A7BD}] => (Allow) C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe => No File
FirewallRules: [{75B8B471-51CB-4DA0-97B2-15AE748A1FE2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{39709E70-B986-4B2F-91EC-AD0648E2B4E3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{8C94C1DB-1411-4B8B-B532-3AF50F3FE774}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{40D35577-AB7A-4403-91E1-711077A89748}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{C07D0CF1-D782-41CE-BBD5-85DB133C3637}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

==================== Restore Points =========================

04-07-2025 14:34:54 Instalační služba modulů systému Windows
05-07-2025 20:20:02 Instalační služba modulů systému Windows
07-07-2025 20:44:40 Instalační služba modulů systému Windows
12-07-2025 20:10:31 Instalační služba modulů systému Windows
18-07-2025 09:48:41 Instalační služba modulů systému Windows
21-07-2025 20:11:03 Instalační služba modulů systému Windows
24-07-2025 20:26:55 Instalační služba modulů systému Windows
25-07-2025 15:16:52 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (07/24/2025 10:45:44 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 129328

Error: (07/24/2025 10:45:44 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 129328

Error: (07/24/2025 10:45:44 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/24/2025 10:45:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 113406

Error: (07/24/2025 10:45:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 113406

Error: (07/24/2025 10:45:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/24/2025 10:45:12 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 97547

Error: (07/24/2025 10:45:12 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 97547


System errors:
=============
Error: (07/25/2025 03:31:27 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (07/25/2025 03:31:27 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (30000 ms).

Error: (07/25/2025 03:28:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba LMS neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (07/25/2025 03:23:33 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Aktualizovat službu Orchestrator přestala během spouštění reagovat.

Error: (07/25/2025 03:21:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (07/25/2025 03:21:09 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (30000 ms).

Error: (07/25/2025 03:20:57 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Optimalizace doručení přestala během spouštění reagovat.

Error: (07/25/2025 03:16:10 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN se nepodařilo spustit.

Cesta k modulu: C:\WINDOWS\system32\IntelIHVRouter04.dll
Kód chyby: 258


Windows Defender:
================
Date: 2025-06-08 18:43:37
Description:
Microsoft Defender Antivirus šςаņ ħǻѕ вë℮й ŝţоφφзδ ъěƒôřë ¢οмρľęтΐøņ.%ň %ţЅċάй ĬĎ:%ь{778666B8-831F-4FF9-AADA-1DCAFC6BFFDF}%ñ %ťŜĉāņ Ťýрę:%ъAntimalwarový program%ņ %τЅčąņ Ρâґάмêтęŕś:%ьRychlé prohledávání%π %ţŬśзѓ:%ьNT AUTHORITY\SYSTEM%ŋ %τŚťόφ Řèăѕòи:%ьŞсħęđüłєð ščдñ шåš śκīрρėď вэċäûšě τћě ℓãšŧ ŝџçčĕśѕƒŭŀ šçãņ ωąŝ ŵìťĥīñ тћє łàśŧ 7 δàўş

Date: 2025-05-20 13:50:54
Description:
Microsoft Defender Antivirus šςаņ ħǻѕ вë℮й ŝţоφφзδ ъěƒôřë ¢οмρľęтΐøņ.%ň %ţЅċάй ĬĎ:%ь{98C24DD7-E403-4E38-8E5F-FF273F4EEDDD}%ñ %ťŜĉāņ Ťýрę:%ъAntimalware%ņ %τЅčąņ Ρâґάмêтęŕś:%ьQuick Scan%π %ţŬśзѓ:%ьNT AUTHORITY\SYSTEM%ŋ %τŚťόφ Řèăѕòи:%ь%12

Date: 2025-05-18 18:15:07
Description:
Microsoft Defender Antivirus šςаņ ħǻѕ вë℮й ŝţоφφзδ ъěƒôřë ¢οмρľęтΐøņ.%ň %ţЅċάй ĬĎ:%ь{4D139D2A-B2AE-43AA-8016-8A273181E515}%ñ %ťŜĉāņ Ťýрę:%ъAntimalware%ņ %τЅčąņ Ρâґάмêтęŕś:%ьQuick Scan%π %ţŬśзѓ:%ьNT AUTHORITY\SYSTEM%ŋ %τŚťόφ Řèăѕòи:%ь%12

Date: 2025-05-17 18:17:53
Description:
Microsoft Defender Antivirus šςаņ ħǻѕ вë℮й ŝţоφφзδ ъěƒôřë ¢οмρľęтΐøņ.%ň %ţЅċάй ĬĎ:%ь{35541FBA-F6AC-4E40-BBE6-B2BCF7DF3911}%ñ %ťŜĉāņ Ťýрę:%ъAntimalware%ņ %τЅčąņ Ρâґάмêтęŕś:%ьQuick Scan%π %ţŬśзѓ:%ьNT AUTHORITY\SYSTEM%ŋ %τŚťόφ Řèăѕòи:%ь%12

Date: 2025-05-16 18:18:35
Description:
Microsoft Defender Antivirus šςаņ ħǻѕ вë℮й ŝţоφφзδ ъěƒôřë ¢οмρľęтΐøņ.%ň %ţЅċάй ĬĎ:%ь{8040E4F4-6FCA-464E-B52A-4654A019BCA5}%ñ %ťŜĉāņ Ťýрę:%ъAntimalware%ņ %τЅčąņ Ρâґάмêтęŕś:%ьQuick Scan%π %ţŬśзѓ:%ьNT AUTHORITY\SYSTEM%ŋ %τŚťόφ Řèăѕòи:%ь%12
Event[0]:

Date: 2025-07-25 14:19:49
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.433.37.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25060.6
Kód chyby: 0x80070102
Popis chyby: Vypršel časový limit operace čekání.

Date: 2025-07-25 14:19:49
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.433.37.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25060.6
Kód chyby: 0x80070102
Popis chyby: Vypršel časový limit operace čekání.

Date: 2025-07-24 20:54:40
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.431.579.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25050.6
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.

Date: 2025-07-24 20:54:40
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.431.579.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25050.6
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.

Date: 2025-07-24 20:54:40
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.431.579.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.25050.6
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.

CodeIntegrity:
===============
Date: 2025-04-10 19:30:59
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

Date: 2025-04-04 15:34:30
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\ki135422.inf_amd64_819df826076efbf4\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

BIOS: Insyde F.42 08/06/2018
Motherboard: HP 832A
Processor: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz
Percentage of memory in use: 82%
Total physical RAM: 4012.91 MB
Available physical RAM: 717.21 MB
Total Virtual: 16300.91 MB
Available Virtual: 12471.48 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:914.72 GB) (Free:833.35 GB) (Model: ST1000LM035-1RK172) NTFS
Drive d: (RECOVERY) (Fixed) (Total:15.56 GB) (Free:1.86 GB) (Model: ST1000LM035-1RK172) NTFS ==>[system with boot components (obtained from drive)]

\\?\Volume{4b3ed6c6-7296-46e5-8f69-797025aa9276}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.38 GB) NTFS
\\?\Volume{95541c9c-434d-4bec-9961-a61976c1e72a}\ () (Fixed) (Total:0.25 GB) (Free:0.18 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 6DCB0A87)

Partition: GPT.

==================== End of Addition.txt =======================

[Rudy]

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {5503d395-d8aa-11ee-94d0-3024323374a7} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {73f2309e-a376-11ea-948e-3024323374a7} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {89fb3a01-54f8-11ed-94ba-3024323374a7} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {89fb3a35-54f8-11ed-94ba-3024323374a7} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {a96febec-1465-11eb-9499-3024323374a7} - "F:\HiSuiteDownLoader.exe"
Task: {910BFD86-98C2-43B4-A742-E2731883437D} - System32\Tasks\CCleanerBrowserProtectS-1-5-21-2292354515-3209054098-56540792-1001 => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowserProtect.exe --runonce (No File)
C:\DumpStack.log.tmp
AlternateDataStreams: C:\ProgramData\TEMP:BEF4B0E7 [140]

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[ALEXUSS]

Bohužel se mi nedaří dnes spustit FRST, protože MS Defender program vyhodnotil jako hrozbu a jakmile program stáhnu i z jiného zdroje než bleepingcomputer tak ho Defender okamžitě zablokuje... Poradíte mi prosím jak tohle vyřešit?

Díky

FRST -def.png (23.9 KiB) Zobrazeno 810 x

[ALEXUSS]

Vyřešeno...u Defenderu jsem vypnul ochranu v reálném čase a FRST spustil. Probíhá FIX, log pošlu.

[ALEXUSS]

FIXLOG zde:

Fix result of Farbar Recovery Scan Tool (x64) Version: 25-07-2025
Ran by petrs (26-07-2025 17:01:42) Run:1
Running from C:\Users\petrs\Desktop
Loaded Profiles: petrs
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {5503d395-d8aa-11ee-94d0-3024323374a7} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {73f2309e-a376-11ea-948e-3024323374a7} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {89fb3a01-54f8-11ed-94ba-3024323374a7} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {89fb3a35-54f8-11ed-94ba-3024323374a7} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\...\MountPoints2: {a96febec-1465-11eb-9499-3024323374a7} - "F:\HiSuiteDownLoader.exe"
Task: {910BFD86-98C2-43B4-A742-E2731883437D} - System32\Tasks\CCleanerBrowserProtectS-1-5-21-2292354515-3209054098-56540792-1001 => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowserProtect.exe --runonce (No File)
C:\DumpStack.log.tmp
AlternateDataStreams: C:\ProgramData\TEMP:BEF4B0E7 [140]

EmptyTemp:
End
*****************

Processes closed successfully.
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5503d395-d8aa-11ee-94d0-3024323374a7} => removed successfully
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{73f2309e-a376-11ea-948e-3024323374a7} => removed successfully
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{89fb3a01-54f8-11ed-94ba-3024323374a7} => removed successfully
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{89fb3a35-54f8-11ed-94ba-3024323374a7} => removed successfully
HKU\S-1-5-21-2292354515-3209054098-56540792-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a96febec-1465-11eb-9499-3024323374a7} => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{910BFD86-98C2-43B4-A742-E2731883437D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{910BFD86-98C2-43B4-A742-E2731883437D}" => removed successfully
C:\WINDOWS\System32\Tasks\CCleanerBrowserProtectS-1-5-21-2292354515-3209054098-56540792-1001 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerBrowserProtectS-1-5-21-2292354515-3209054098-56540792-1001" => removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
C:\ProgramData\TEMP => ":BEF4B0E7" ADS removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 18935994 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 91554405 B
Edge => 972735 B
Chrome => 268193838 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 1139544425 B
petrs => 1176240993 B

RecycleBin => 0 B
EmptyTemp: => 2.5 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 26-07-2025 17:10:09)

C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 17:10:09 ====

[Rudy]

OK. Spusťte ještě AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 . Wactac není jen tak nějaký šmejd, může to být nebezpečné. Utilitu po stažení spusťte, nechte pracovat a po skončení akce smažte vše, co najde. Odkud jste stáhl FRST64?

[ALEXUSS]

Spuštěno, vyčištěno. Počítač pracuje pocitově rychleji, ale třeba spuštění Google Chrome prohlížeče trvá věky. Čím to může být?

FRST jsem stahoval přes odkaz z vlákna "Návod na vytvoření logu z FRST" tady z fóra.

Každopádně moc díky za dosavadní pomoc!

[Rudy]

Zkuste spustit postupně tyto utility:

1. Stahnete Zoek.exe https://sdilej.cz/29519076/zoek.rar a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.

a po něm

2. Junkware removal tool: https://www.stahuj.cz/utility_a_ostatni ... oval-tool/
•Ulozte nejlepe na plochu
•Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
•Probehne vytvoreni zalohy a nasledne prohledavani
•Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte.

[ALEXUSS]

JRT

JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Home x64
Ran by petrs (Administrator) on 29.07.2025 at 17:35:14,44
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 0




Registry: 2

Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 29.07.2025 at 17:38:41,72
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

a ZOEK jsem chtěl přílohou, ale TXT soubor nelze přiložit.

[ALEXUSS]

Tak ZOEK přikládám jako archiv .rar

zoek-results.rar

(12.4 KiB) Staženo 15 x

[Rudy]

Obě utility smazaly , co měly. Zlepšil se chod prohlížeče?

[ALEXUSS]

Chod PC se viditelně zrychlil, ale ten Google Chrome z neznámého důvodu stále nabíhá velice pomalu. Každopádně moc díky za pomoc a ochotu!

[Rudy]

Zkuste GChr přeinstalovat.

[ALEXUSS]

OK díky za tip a ještě jednou díky za vše!

[Rudy]

Rádo se stalo!