Náhodné vypínání programů (Chrome, Total Commnader apod.)

[TOMPET]

Dobrý den,

níže prosím o kontrolu logu, PC se chová divně - samovolné vypínání Chrome, a dalších programů.

Děkuji, Petr.
_______________________________________________________
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-07-2025
Ran by Petr Pejcha (administrator) on EURONYMOUS (HP HP EliteDesk 800 G5 SFF) (11-08-2025 10:56:13)
Running from C:\Users\Petr Pejcha\Desktop\FRST64.exe
Loaded Profiles: Petr Pejcha
Platform: Microsoft Windows 11 Pro Version 24H2 26100.3775 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files (x86)\Fujitsu Keyboard Lock Status driver\Keyboard Lock Status driver\3.0\SkeyLock.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe ->) (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25071.54.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25071.54.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.exe
(C:\Windows\UUS\amd64\MoUsoCoreWorker.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoNotificationUx.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_cbb03399d84fb105\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_cbb03399d84fb105\igfxEM.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_606eb4350ca8041f\x64\SysInfoCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_606eb4350ca8041f\x64\BridgeCommunication.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <17>
(explorer.exe ->) (ZONER software, a.s. -> ZONER software) C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe
(FUJITSU CLIENT COMPUTING LIMITED -> Fujitsu Technology Solutions) C:\Program Files (x86)\Fujitsu\DeskUpdate\DeskUpdateNotifier.exe
(Fujitsu) [File not signed] C:\Program Files (x86)\Fujitsu Mouse\Driverap4.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Petr Pejcha\AppData\Local\Microsoft\OneDrive\25.130.0706.0004\Microsoft.SharePoint.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\BrYNSvc.exe
(services.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome Remote Desktop\139.0.7258.8\remoting_host.exe <2>
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_d57a8c6bda0aacf4\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_606eb4350ca8041f\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_606eb4350ca8041f\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_606eb4350ca8041f\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_606eb4350ca8041f\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpdsusoftwarecomponent.inf_amd64_5416f6085e93e9fa\HotkeyServiceDSU.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpdsusoftwarecomponent.inf_amd64_5416f6085e93e9fa\LanWlanWwanSwitchingServiceDSU.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_cbb03399d84fb105\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_8a3f88e34f6b8385\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_99f6bd58bfe82726\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_8d952ce997b81e9f\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_3b2828172ba277c9\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_3b2828172ba277c9\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_4c8d93c71af1b9d3\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_0ce29d36fc8607e6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25070.5-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25070.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25070.5-0\NisSrv.exe
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(services.exe ->) (Synaptics Incorporated -> Conexant Systems LLC.) C:\Windows\CxSvc\CxAudioSvc.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.GetHelp_10.2409.22951.0_x64__8wekyb3d8bbwe\GetHelp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.87.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Petr Pejcha\AppData\Local\Microsoft\OneDrive\25.130.0706.0004\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.AccountsControl_cw5n1h2txyewy\AccountsControlHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [Fujitsu Mouse] => C:\Program Files (x86)\Fujitsu Mouse\DriverSt.exe [184393 2012-08-21] () [File not signed]
HKLM-x32\...\Run: [LWBKEYLOCK] => C:\Program Files (x86)\Fujitsu Keyboard Lock Status driver\Keyboard Lock Status driver\3.0\SkeyLock.exe [310784 2008-05-02] () [File not signed]
HKLM-x32\...\Run: [DeskUpdateNotifier] => C:\Program Files (x86)\Fujitsu\DeskUpdate\deskupdatenotifier.exe [103136 2024-02-22] (FUJITSU CLIENT COMPUTING LIMITED -> Fujitsu Technology Solutions)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776 2014-05-22] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4513792 2014-05-22] (Brother Industries, Ltd.) [File not signed]
HKU\S-1-5-21-2791104590-3841432406-1029282173-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [437248 2014-09-12] (ZONER software, a.s. -> ZONER software)
HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\WINDOWS\system32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\138.0.7204.184\Installer\chrmstp.exe [2025-08-01] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {506FAB5D-31B8-433E-86BE-711A278447ED} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2025-03-21] (Adobe Inc. -> Adobe Inc.)
Task: {EB6EC244-6FBF-45EA-A3DF-234E618783F2} - System32\Tasks\Fujitsu\DeskUpdate => C:\Program Files (x86)\Fujitsu\DeskUpdate\DuCmd.exe [120032 2024-02-22] (FUJITSU CLIENT COMPUTING LIMITED -> ) -> C:\Program Files (x86)\Fujitsu\DeskUpdate\/scan /web
Task: {928A6BD8-F2FE-4BE9-891B-2F86251FA539} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem141.0.7340.0{193B881D-ED3E-4A96-8384-3A108C8166CE} => C:\Program Files (x86)\Google\GoogleUpdater\141.0.7340.0\updater.exe [6813336 2025-08-06] (Google LLC -> Google LLC)
Task: {0BD96383-131B-476F-9FA1-A79876FAD823} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [1004040 2025-06-19] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {2BA92883-FC36-43D0-A452-6B046779AC7C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [480264 2025-06-19] (HP Inc. -> HP Inc.)
Task: {70C535A1-0D09-4681-9C86-0F205B1EDA0E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPPrinterLowInk => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPPrinterLowInk\HPPrinterLowInk.exe [231944 2025-06-19] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {AAE28657-3A93-40A9-8480-3940F9FB72D1} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {5AAC7F0D-19AB-476D-B21E-30A53EF4CB5B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {9F450E15-77A5-4710-B2E7-15E8054C1693} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {204718DD-1D59-481C-9239-932244D061A0} - System32\Tasks\Microsoft\Windows\Setup\SnapshotCleanupTask => C:\Windows\System32\OOBE\SetupPlatform\SetupPlatform.exe -removesnapshot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {8B3E713D-5BEF-4785-AD38-36FE5896EBA1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25070.5-0\MpCmdRun.exe [1778240 2025-07-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {34A6FCC4-5FC5-4740-AE1D-F7A6ECDE5AA2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25070.5-0\MpCmdRun.exe [1778240 2025-07-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6EEB5F67-CEBA-49A4-B4CF-216B857F0F9B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25070.5-0\MpCmdRun.exe [1778240 2025-07-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {15D10F6B-7491-488E-88F9-4CB1FC6F621C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25070.5-0\MpCmdRun.exe [1778240 2025-07-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FACA53B9-90B0-404A-BDE8-A96E31AED8D5} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2791104590-3841432406-1029282173-1002 => C:\Users\Petr Pejcha\AppData\Local\Microsoft\OneDrive\25.130.0706.0004\OneDriveLauncher.exe [685432 2025-08-02] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.8.1
Tcpip\..\Interfaces\{c5827a6c-5c3c-4f70-9ffd-c59176c01ce7}: [DhcpNameServer] 192.168.8.1

Edge:
=======
Edge Profile: C:\Users\Petr Pejcha\AppData\Local\Microsoft\Edge\User Data\Default [2025-07-15]
Edge Extension: (Dokumenty Google offline) - C:\Users\Petr Pejcha\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-01-14]
Edge Extension: (Edge relevant text changes) - C:\Users\Petr Pejcha\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-07-23]

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-07-15] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR Profile: C:\Users\Petr Pejcha\AppData\Local\Google\Chrome\User Data\Default [2025-08-11]
CHR Notifications: Default -> hxxps://app.smartsupp.com
CHR HomePage: Default -> hxxps://www.o2tv.cz/
CHR StartupUrls: Default -> "hxxps://www.o2tv.cz/"
CHR Extension: (Dokumenty Google offline) - C:\Users\Petr Pejcha\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-22]
CHR Extension: (FormApps Extension) - C:\Users\Petr Pejcha\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2024-07-23]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Petr Pejcha\AppData\Local\Google\Chrome\User Data\Default\Extensions\inomeogfingihgjfjlpeplalcfajhgai [2024-07-23]
CHR Extension: (Planet Search) - C:\Users\Petr Pejcha\AppData\Local\Google\Chrome\User Data\Default\Extensions\kadaohckdkghfaclhjmkmplebcdcnfnp [2024-12-19]
CHR Extension: (Převod Webp na JPG) - C:\Users\Petr Pejcha\AppData\Local\Google\Chrome\User Data\Default\Extensions\lioppfcbaohgghplacfgajfhbpmlhnbc [2024-12-19]
CHR Extension: (Keepa - Amazon Price Tracker) - C:\Users\Petr Pejcha\AppData\Local\Google\Chrome\User Data\Default\Extensions\neebplgakaahbhdphmkckjjcegoiijjo [2025-08-11]
CHR Extension: (YouTube NonStop) - C:\Users\Petr Pejcha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlkaejimjacpillmajjnopmpbkbnocid [2024-07-23]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Petr Pejcha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-07-23]
CHR HKU\S-1-5-21-2791104590-3841432406-1029282173-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [kadaohckdkghfaclhjmkmplebcdcnfnp]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2025-03-21] (Adobe Inc. -> Adobe Inc.)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [File not signed]
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\139.0.7258.8\remoting_host.exe [73824 2025-06-26] (Google LLC -> Google LLC)
R2 CxAudioSvc; C:\WINDOWS\CxSvc\CxAudioSvc.exe [86592 2022-11-14] (Synaptics Incorporated -> Conexant Systems LLC.)
S2 CxUIUSvc; C:\WINDOWS\System32\CxUIUSvc64.exe [191360 2022-11-14] (Synaptics Incorporated -> Conexant Systems, Inc.)
R2 HotKeyServiceDSU; C:\WINDOWS\System32\DriverStore\FileRepository\hpdsusoftwarecomponent.inf_amd64_5416f6085e93e9fa\HotKeyServiceDSU.exe [681544 2024-09-05] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_606eb4350ca8041f\x64\AppHelperCap.exe [930416 2025-07-14] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_606eb4350ca8041f\x64\DiagsCap.exe [928880 2025-07-14] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_606eb4350ca8041f\x64\NetworkCap.exe [924808 2025-07-14] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_606eb4350ca8041f\x64\SysInfoCap.exe [929392 2025-07-14] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_d57a8c6bda0aacf4\x64\TouchpointAnalyticsClientService.exe [639760 2025-07-14] (HP Inc. -> HP Inc.)
R2 LanWlanWwanSwitchingServiceDSU; C:\WINDOWS\System32\DriverStore\FileRepository\hpdsusoftwarecomponent.inf_amd64_5416f6085e93e9fa\LanWlanWwanSwitchingServiceDSU.exe [587848 2024-09-05] (HP Inc. -> HP Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25070.5-0\MpDefenderCoreService.exe [2050952 2025-07-31] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [559320 2025-04-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25070.5-0\NisSrv.exe [4517784 2025-07-31] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25070.5-0\MsMpEng.exe [282464 2025-07-31] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 e1dexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1d.inf_amd64_f3c6513565231a23\e1d.sys [609456 2022-12-15] (Intel Corporation -> Intel Corporation)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1421dec2010cc057\x64\hpcustomcapdriver.sys [18984 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [332184 2025-07-31] (Microsoft Windows -> Microsoft Corporation)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [40664 2013-08-22] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tapoas; C:\WINDOWS\System32\drivers\tapoas.sys [30720 2012-07-15] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20888 2025-07-31] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [627120 2025-07-31] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [101792 2025-07-31] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-01-08] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_971c769b103df369\WSDScan.sys [61440 2025-01-08] (Microsoft Windows -> Microsoft Corporation)
S3 MpKsl5eba1f57; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{27742FEF-B0BA-4360-840B-BC5A4E995CA3}\MpKslDrv.sys [X]
S3 MpKsl6560207e; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3D9FBA2E-CDB4-4530-8877-7A9196C3CB6A}\MpKslDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-08-11 10:56 - 2025-08-11 10:56 - 000021876 _____ C:\Users\Petr Pejcha\Desktop\FRST.txt
2025-08-11 10:54 - 2025-08-11 10:54 - 002409472 _____ (Farbar) C:\Users\Petr Pejcha\Desktop\FRST64.exe
2025-08-11 10:45 - 2025-08-11 10:56 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-08-11 10:19 - 2025-08-11 10:20 - 000000000 ___HD C:\$WinREAgent
2025-08-11 09:16 - 2025-08-11 09:16 - 000725308 _____ C:\WINDOWS\system32\perfh005.dat
2025-08-11 09:16 - 2025-08-11 09:16 - 000157160 _____ C:\WINDOWS\system32\perfc005.dat
2025-08-06 10:59 - 2025-08-06 10:59 - 000068558 _____ C:\Users\Petr Pejcha\Downloads\DAR10T.pdf
2025-08-06 09:41 - 2025-08-06 09:41 - 005826994 _____ C:\Users\Petr Pejcha\Downloads\R255SMS_+Manual+_+parts+diagram+CZ.pdf
2025-08-05 13:49 - 2025-08-05 13:49 - 000070158 _____ C:\Users\Petr Pejcha\Downloads\46722473 (2).PDF
2025-08-05 09:31 - 2025-08-05 09:31 - 000123388 _____ C:\Users\Petr Pejcha\Downloads\Image.pdf
2025-08-05 08:32 - 2025-08-05 08:32 - 000002898 _____ C:\Users\Petr Pejcha\Downloads\dodaci_list_202501378_formatovany.pdf
2025-08-05 08:31 - 2025-08-05 08:31 - 000002754 _____ C:\Users\Petr Pejcha\Downloads\dodaci_list_202501378.pdf
2025-08-04 13:39 - 2025-08-04 13:39 - 003692766 _____ C:\Users\Petr Pejcha\Downloads\TRT-BA-PAC3910X-TC-001-EN.en.cs.pdf
2025-08-04 13:36 - 2025-08-04 13:36 - 000226071 _____ C:\Users\Petr Pejcha\Downloads\02.en.cs.pdf
2025-08-04 13:35 - 2025-08-04 13:35 - 001772124 _____ C:\Users\Petr Pejcha\Downloads\PAC_3910X_INT-Produktdatenblatt_Klimageraete.zip
2025-08-04 13:17 - 2025-08-04 13:17 - 000487238 _____ C:\Users\Petr Pejcha\Downloads\2988307174 (2).pdf
2025-08-04 12:15 - 2025-08-04 12:15 - 000001267 _____ C:\Users\Petr Pejcha\Downloads\5010571577.csv
2025-08-04 09:53 - 2025-08-04 09:53 - 003617835 _____ C:\Users\Petr Pejcha\Downloads\20250617_N_6950_25115001981_Nakup_naftovych_topidel_vc_prislusenstvi_sign (2).pdf
2025-08-04 09:49 - 2025-08-04 09:49 - 003617835 _____ C:\Users\Petr Pejcha\Downloads\20250617_N_6950_25115001981_Nakup_naftovych_topidel_vc_prislusenstvi_sign (1).pdf
2025-08-04 09:21 - 2025-08-04 09:21 - 003617835 _____ C:\Users\Petr Pejcha\Downloads\20250617_N_6950_25115001981_Nakup_naftovych_topidel_vc_prislusenstvi_sign.pdf
2025-08-01 11:22 - 2025-08-01 11:22 - 000001795 _____ C:\Users\Petr Pejcha\Downloads\5010558507.csv
2025-08-01 11:09 - 2025-08-01 11:09 - 000043957 _____ C:\Users\Petr Pejcha\Downloads\00012676_CZ_N_CZK_2025_07.pdf
2025-08-01 10:55 - 2025-08-01 10:55 - 000784956 _____ C:\Users\Petr Pejcha\Downloads\20250801_N_325505_N006_25_V00023701_Oznameni_o_vyberu_dodavatele.pdf
2025-08-01 10:31 - 2025-08-01 10:31 - 000161493 _____ C:\Users\Petr Pejcha\Downloads\20250801_N_325505_Oznameni_o_vylouceni.pdf
2025-08-01 10:30 - 2025-08-01 10:30 - 000209547 _____ C:\Users\Petr Pejcha\Downloads\20250728_N_325505_N006_25_V00023701_Oznameni_o_vyberu_001.pdf
2025-08-01 09:07 - 2025-08-01 09:07 - 000361649 _____ C:\Users\Petr Pejcha\Downloads\FA_171244003 (1).pdf
2025-08-01 09:07 - 2025-08-01 09:07 - 000323991 _____ C:\Users\Petr Pejcha\Downloads\FA_171244106 (1).pdf
2025-08-01 09:06 - 2025-08-01 09:06 - 000360434 _____ C:\Users\Petr Pejcha\Downloads\FA_171244494 (2).pdf
2025-08-01 09:06 - 2025-08-01 09:06 - 000324831 _____ C:\Users\Petr Pejcha\Downloads\FA_171244358 (1).pdf
2025-08-01 09:06 - 2025-08-01 09:06 - 000323806 _____ C:\Users\Petr Pejcha\Downloads\FA_171244495 (1).pdf
2025-07-31 12:42 - 2025-07-31 12:42 - 000451985 _____ C:\Users\Petr Pejcha\Downloads\Procraft_250012796.pdf
2025-07-31 12:14 - 2025-07-31 12:14 - 002090716 _____ C:\Users\Petr Pejcha\Downloads\134 KS klimatizace podpis (2) (2).pdf
2025-07-31 11:36 - 2025-07-31 11:36 - 000000000 ____D C:\Users\Petr Pejcha\CrossDevice
2025-07-31 11:36 - 2025-07-31 11:36 - 000000000 ____D C:\ProgramData\CrossDevice
2025-07-30 10:28 - 2025-07-30 10:28 - 000037453 _____ C:\Users\Petr Pejcha\Downloads\Pohyb_27172091563_na_uctu_2401761205.pdf
2025-07-29 09:21 - 2025-07-29 09:21 - 000074854 _____ C:\Users\Petr Pejcha\Downloads\46932870.PDF
2025-07-29 09:20 - 2025-07-29 09:20 - 000079937 _____ C:\Users\Petr Pejcha\Downloads\46932873.PDF
2025-07-25 12:39 - 2025-07-25 12:39 - 000129363 _____ C:\Users\Petr Pejcha\Downloads\Minimální technické požadavky zadavatele na zboží k VZMR N006 (2).pdf
2025-07-25 12:38 - 2025-07-25 12:39 - 001014104 _____ C:\Users\Petr Pejcha\Downloads\20250716_N_1970_Oznameni_o_vyberu_dodavatele_klima.pdf
2025-07-25 11:00 - 2025-07-25 11:00 - 000173133 _____ C:\Users\Petr Pejcha\Downloads\Pod_5011330889.pdf
2025-07-25 10:52 - 2025-07-25 10:52 - 000158001 _____ C:\Users\Petr Pejcha\Downloads\Pod_5012228948.pdf
2025-07-24 10:23 - 2025-07-24 10:23 - 000401860 _____ C:\Users\Petr Pejcha\Downloads\pohoda_export_faktura (19).xml
2025-07-23 12:41 - 2025-07-23 12:44 - 000076711 _____ C:\Users\Petr Pejcha\Downloads\Karta dodavatele Tompet.xlsx
2025-07-23 12:23 - 2025-07-23 12:23 - 000390265 _____ C:\Users\Petr Pejcha\Downloads\2025_07_14-Vyzva_k_podani_nabidek_elektrocentraly_opak_EP.pdf
2025-07-23 10:18 - 2025-07-23 10:18 - 000131837 _____ C:\Users\Petr Pejcha\Downloads\2025_07_14-Priloha_c_2_Vyzvy-TP_elektrocentraly (1).pdf
2025-07-23 10:17 - 2025-07-23 10:17 - 000364148 _____ C:\Users\Petr Pejcha\Downloads\2025_07_18-Vysvetleni_ZD_c_1_elektrocentraly_EP.pdf
2025-07-23 10:12 - 2025-07-23 10:12 - 000115744 _____ C:\Users\Petr Pejcha\Downloads\2025_07_14-Priloha_c_2_Vyzvy-TP_naftova_topidla (1).pdf
2025-07-23 10:11 - 2025-07-23 10:11 - 000109891 _____ C:\Users\Petr Pejcha\Downloads\zz_Objednávka RS.pdf
2025-07-23 09:55 - 2025-07-23 09:55 - 000099840 _____ C:\Users\Petr Pejcha\Downloads\20250721_N_6848_Priloha_c._1_Cenova_kalkulace_a_technicke_parametry.xls
2025-07-23 09:54 - 2025-07-23 09:54 - 000102571 _____ C:\Users\Petr Pejcha\Downloads\20252207_N_2427_specifikace_dilenske_vybaveni.xlsx
2025-07-23 09:31 - 2025-07-23 09:31 - 000487546 _____ C:\Users\Petr Pejcha\Downloads\2985794736 (3).pdf
2025-07-23 09:31 - 2025-07-23 09:31 - 000487259 _____ C:\Users\Petr Pejcha\Downloads\2988307174 (1).pdf
2025-07-23 09:31 - 2025-07-23 09:31 - 000487255 _____ C:\Users\Petr Pejcha\Downloads\2988307174.pdf
2025-07-23 08:11 - 2025-07-23 08:11 - 000291374 _____ C:\Users\Petr Pejcha\Downloads\134 KS klimatizace DOD (2).pdf
2025-07-22 14:46 - 2025-07-22 14:46 - 004995953 _____ C:\Users\Petr Pejcha\Downloads\_ps_844TRT-BA-PAC3500SH-PAC3000XA-TC-007-DE.de.cs.pdf
2025-07-22 14:04 - 2025-07-22 14:04 - 000004781 _____ C:\Users\Petr Pejcha\Downloads\5010450560.csv
2025-07-22 14:03 - 2025-07-22 14:03 - 000000841 _____ C:\Users\Petr Pejcha\Downloads\5020077364.csv
2025-07-22 14:02 - 2025-07-22 14:02 - 000003462 _____ C:\Users\Petr Pejcha\Downloads\5010428233 (2).csv
2025-07-22 14:02 - 2025-07-22 14:02 - 000002991 _____ C:\Users\Petr Pejcha\Downloads\5010418787 (3).csv
2025-07-22 13:44 - 2025-07-22 13:44 - 000002991 _____ C:\Users\Petr Pejcha\Downloads\5010418787 (2).csv
2025-07-22 13:04 - 2025-07-22 13:04 - 000002690 _____ C:\Users\Petr Pejcha\Downloads\5010396968 (1).csv
2025-07-22 12:59 - 2025-07-22 12:59 - 000043886 _____ C:\Users\Petr Pejcha\Downloads\00001298_CZ_P_CZK_2025_05 (1).pdf
2025-07-22 12:57 - 2025-07-22 12:57 - 000044795 _____ C:\Users\Petr Pejcha\Downloads\00002172_CZ_NP_CZK_2025_04 (1).pdf
2025-07-22 12:48 - 2025-07-22 12:48 - 000044561 _____ C:\Users\Petr Pejcha\Downloads\00000527_CZ_NC_CZK_2025_03.pdf
2025-07-22 12:48 - 2025-07-22 12:48 - 000043997 _____ C:\Users\Petr Pejcha\Downloads\00002866_CZ_P_CZK_2025_03.pdf
2025-07-22 12:46 - 2025-07-22 12:46 - 000069094 _____ C:\Users\Petr Pejcha\Downloads\00003024_CZ_NP_CZK_2025_02.pdf
2025-07-22 12:46 - 2025-07-22 12:46 - 000066870 _____ C:\Users\Petr Pejcha\Downloads\00003700_CZ_P_CZK_2025_01 (1).pdf
2025-07-22 12:45 - 2025-07-22 12:45 - 000067470 _____ C:\Users\Petr Pejcha\Downloads\00000702_CZ_NC_CZK_2025_01 (1).pdf
2025-07-22 12:45 - 2025-07-22 12:45 - 000066952 _____ C:\Users\Petr Pejcha\Downloads\00021148_CZ_N_CZK_2024_12.pdf
2025-07-22 12:21 - 2025-07-22 12:21 - 000274902 _____ C:\Users\Petr Pejcha\Downloads\20250715_N_325505_Zadavaci_dokumentace (1).pdf
2025-07-22 10:14 - 2025-07-22 10:14 - 000011682 _____ C:\Users\Petr Pejcha\Downloads\nacenění materiálu (1).xlsx
2025-07-22 10:08 - 2025-07-22 10:08 - 000009927 _____ C:\Users\Petr Pejcha\Downloads\nacenění materiálu.xlsx
2025-07-22 07:50 - 2025-07-22 07:50 - 000044813 _____ C:\Users\Petr Pejcha\Downloads\labels (9).pdf
2025-07-21 16:07 - 2025-07-21 16:07 - 000213474 _____ C:\Users\Petr Pejcha\Downloads\Dodací list.pdf
2025-07-21 15:24 - 2025-07-21 15:24 - 000110236 _____ C:\Users\Petr Pejcha\Downloads\Faktura_(2)_251821706.pdf
2025-07-21 15:18 - 2025-07-21 15:18 - 000071210 _____ C:\Users\Petr Pejcha\Downloads\PB_Klientský portál detail převodu TOMPET.CZ s.r.o. 02-06-2025.pdf
2025-07-21 14:58 - 2025-07-21 14:58 - 000296900 _____ C:\Users\Petr Pejcha\Downloads\1403128910.pdf
2025-07-21 09:18 - 2025-07-21 09:18 - 000743652 _____ C:\Users\Petr Pejcha\Downloads\20250609_N_6950_Oznameni_o_vyberu_dodavatele.pdf
2025-07-21 09:18 - 2025-07-21 09:18 - 000502548 _____ C:\Users\Petr Pejcha\Downloads\20250609_N_6950_Zaznam_o_vyberu_dodavatele.pdf
2025-07-18 11:52 - 2025-07-18 11:52 - 000188801 _____ C:\Users\Petr Pejcha\Downloads\F5250095.pdf
2025-07-17 12:13 - 2025-07-17 12:13 - 000081350 _____ C:\Users\Petr Pejcha\Downloads\mail.pdf
2025-07-17 11:16 - 2025-07-17 11:16 - 000098686 _____ C:\Users\Petr Pejcha\Downloads\2025_07_14-Priloha_c_2_Vyzvy-TP_klimatizace.pdf
2025-07-17 11:06 - 2025-07-17 11:06 - 000187476 _____ C:\Users\Petr Pejcha\Downloads\134 Oznaneni_o_vyb_G134_001.pdf
2025-07-17 10:13 - 2025-07-17 10:13 - 000131837 _____ C:\Users\Petr Pejcha\Downloads\2025_07_14-Priloha_c_2_Vyzvy-TP_elektrocentraly.pdf
2025-07-17 10:06 - 2025-07-17 10:06 - 000115744 _____ C:\Users\Petr Pejcha\Downloads\2025_07_14-Priloha_c_2_Vyzvy-TP_naftova_topidla.pdf
2025-07-17 09:37 - 2025-07-17 09:37 - 000070178 _____ C:\Users\Petr Pejcha\Downloads\46898547 (2).PDF
2025-07-17 09:34 - 2025-07-17 09:34 - 000071924 _____ C:\Users\Petr Pejcha\Downloads\46901204 (1).PDF
2025-07-16 12:08 - 2025-07-16 12:08 - 000487547 _____ C:\Users\Petr Pejcha\Downloads\2985794736 (2).pdf
2025-07-15 14:04 - 2025-07-15 14:04 - 000274902 _____ C:\Users\Petr Pejcha\Downloads\20250715_N_325505_Zadavaci_dokumentace.pdf
2025-07-15 13:28 - 2025-07-15 13:28 - 000004865 _____ C:\Users\Petr Pejcha\Downloads\pohoda_export_faktura (18).xml
2025-07-15 13:27 - 2025-07-15 13:27 - 000005951 _____ C:\Users\Petr Pejcha\Downloads\pohoda_export_faktura (17).xml
2025-07-15 13:26 - 2025-07-15 13:26 - 000004772 _____ C:\Users\Petr Pejcha\Downloads\pohoda_export_faktura (16).xml
2025-07-15 12:05 - 2025-07-15 12:28 - 002056090 _____ C:\Users\Petr Pejcha\Downloads\pohoda_export_faktura (15).xml
2025-07-14 14:38 - 2025-07-14 14:38 - 000278188 _____ C:\Users\Petr Pejcha\Downloads\134Vyzva_G134.pdf
2025-07-14 14:19 - 2025-07-14 14:19 - 000129363 _____ C:\Users\Petr Pejcha\Downloads\Minimální technické požadavky zadavatele na zboží k VZMR N006 (1).pdf
2025-07-14 14:10 - 2025-07-14 14:10 - 000228069 _____ C:\Users\Petr Pejcha\Downloads\20250711_N_5104_Vyzva_k_podani_nabidky.pdf
2025-07-14 12:46 - 2025-07-14 12:46 - 000044686 _____ C:\Users\Petr Pejcha\Downloads\labels (8).pdf
2025-07-14 09:29 - 2025-07-14 09:29 - 000070178 _____ C:\Users\Petr Pejcha\Downloads\46898547 (1).PDF
2025-07-14 09:28 - 2025-07-14 09:28 - 000071924 _____ C:\Users\Petr Pejcha\Downloads\46901204.PDF

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-08-11 10:56 - 2025-01-08 10:18 - 000000000 ____D C:\FRST
2025-08-11 10:56 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-08-11 10:50 - 2024-07-24 13:41 - 000000000 ____D C:\Users\Petr Pejcha\AppData\Local\CrashDumps
2025-08-11 10:36 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-08-11 10:28 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-08-11 10:11 - 2024-07-24 14:01 - 000000000 ____D C:\Users\Petr Pejcha\AppData\Roaming\Microsoft\Excel
2025-08-11 10:06 - 2024-07-24 14:06 - 000000000 ____D C:\+++ instal +++
2025-08-11 09:45 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2025-08-11 09:23 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-08-11 09:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-08-11 09:16 - 2025-01-08 11:04 - 001719042 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-08-11 08:58 - 2024-01-29 09:17 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-08-11 08:56 - 2025-01-24 03:50 - 000000000 ____D C:\WINDOWS\Minidump
2025-08-11 08:56 - 2025-01-08 11:02 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-08-11 08:56 - 2025-01-08 11:00 - 000010512 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-08-11 08:56 - 2025-01-08 11:00 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-08-11 08:56 - 2024-07-23 14:22 - 000000000 ___RD C:\Users\Petr Pejcha\OneDrive
2025-08-11 08:56 - 2024-07-23 14:21 - 000000000 __SHD C:\Users\Petr Pejcha\IntelGraphicsProfiles
2025-08-11 08:56 - 2024-07-19 07:18 - 001794833 ____N C:\WINDOWS\Minidump\081125-11546-01.dmp
2025-08-11 08:56 - 2024-01-29 09:22 - 000000000 ____D C:\Intel
2025-08-11 08:56 - 2024-01-29 09:17 - 000012288 ___SH C:\DumpStack.log.tmp
2025-08-06 11:52 - 2024-07-19 07:18 - 002016595 ____N C:\WINDOWS\Minidump\080625-10562-01.dmp
2025-08-05 14:19 - 2024-07-23 14:21 - 000000000 ____D C:\Users\Petr Pejcha\AppData\Local\Packages
2025-08-05 08:34 - 2024-07-24 10:43 - 000000000 ____D C:\Users\Petr Pejcha\AppData\Roaming\Microsoft\Word
2025-08-04 14:40 - 2024-07-19 07:18 - 001982071 ____N C:\WINDOWS\Minidump\080425-10671-01.dmp
2025-08-04 11:18 - 2024-07-23 14:24 - 000000000 ____D C:\Users\Petr Pejcha\AppData\Local\D3DSCache
2025-08-04 08:15 - 2025-01-08 10:49 - 000000000 ____D C:\Users\Petr Pejcha
2025-08-02 06:37 - 2025-02-06 15:03 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2791104590-3841432406-1029282173-1002
2025-08-02 06:37 - 2025-01-08 11:02 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2791104590-3841432406-1029282173-1002
2025-08-02 06:37 - 2025-01-08 11:02 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2791104590-3841432406-1029282173-1002
2025-08-02 06:37 - 2024-07-23 14:22 - 000002439 _____ C:\Users\Petr Pejcha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-08-02 00:50 - 2024-07-23 14:31 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-08-02 00:50 - 2024-07-23 14:31 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-08-01 14:52 - 2025-01-08 11:02 - 000003640 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-08-01 14:52 - 2025-01-08 11:02 - 000003514 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-08-01 01:44 - 2024-07-26 09:08 - 000002048 _____ C:\Users\Petr Pejcha\AppData\Roaming\mouse.dat
2025-08-01 01:44 - 2024-07-26 09:08 - 000000256 _____ C:\Users\Petr Pejcha\AppData\Roaming\setup.dat
2025-08-01 01:44 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-07-31 13:22 - 2024-07-19 07:18 - 001810205 ____N C:\WINDOWS\Minidump\073125-9359-01.dmp
2025-07-31 12:45 - 2024-07-24 10:48 - 000000000 ____D C:\Users\Petr Pejcha\AppData\Local\MSfree Inc
2025-07-31 10:03 - 2025-01-08 11:00 - 000001575 _____ C:\WINDOWS\system32\config\VSMIDK
2025-07-31 10:03 - 2024-07-19 07:18 - 003035065 ____N C:\WINDOWS\Minidump\073125-12406-01.dmp
2025-07-31 04:28 - 2024-01-29 09:17 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-07-21 10:46 - 2025-01-08 11:02 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2025-07-21 10:46 - 2024-01-29 09:19 - 000000000 ____D C:\ProgramData\Packages
2025-07-21 10:45 - 2024-07-29 12:52 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2025-07-16 23:35 - 2024-07-23 14:30 - 000000000 ____D C:\Program Files (x86)\Google

==================== Files in the root of some directories ========

2024-07-26 09:08 - 2025-08-01 01:44 - 000002048 _____ () C:\Users\Petr Pejcha\AppData\Roaming\mouse.dat
2024-07-26 09:08 - 2025-08-01 01:44 - 000000256 _____ () C:\Users\Petr Pejcha\AppData\Roaming\setup.dat

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2025
Ran by Petr Pejcha (11-08-2025 10:57:48)
Running from C:\Users\Petr Pejcha\Desktop
Microsoft Windows 11 Pro Version 24H2 26100.3775 (X64) (2025-01-08 09:02:34)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-2791104590-3841432406-1029282173-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2791104590-3841432406-1029282173-503 - Limited - Disabled)
Guest (S-1-5-21-2791104590-3841432406-1029282173-501 - Limited - Enabled)
Petr Pejcha (S-1-5-21-2791104590-3841432406-1029282173-1002 - Administrator - Enabled) => C:\Users\Petr Pejcha
WDAGUtilityAccount (S-1-5-21-2791104590-3841432406-1029282173-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 25.001.20577 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601110}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Brother MFL-Pro Suite DCP-1610W series (HKLM-x32\...\{75E38F04-1BAF-4054-A059-57F831688943}) (Version: 1.0.2.0 - Brother Industries, Ltd.)
DeskUpdate (HKLM-x32\...\DeskUpdate_is1) (Version: 5.2.64.0 - Fujitsu Client Computing Limited)
Dynamic Application Loader Host Interface Service (HKLM\...\{EC4BECA7-C1E3-46C7-A96C-C1873DE0DF52}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Foxit Advanced PDF Editor 3 (HKLM-x32\...\B521582C-6BE3-491D-BCC8-FFB8301298E9_is1) (Version: 3.0.5.0 - Foxit Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 138.0.7204.184 - Google LLC)
HP LaserJet Enterprise M506 (HKLM-x32\...\{3372c865-c574-4d4e-9eaf-48369a5218ef}) (Version: 16.0.18141.654 - Hewlett-Packard)
HP Unified IO (HKLM\...\{5C76ED0D-0F6F-4985-8B34-F9AE7834848F}) (Version: 2.0.0.434 - HP) Hidden
HP Unified IO (HKLM-x32\...\{F1390872-2500-4408-A46C-CD16C960C661}) (Version: 2.0.0.434 - HP) Hidden
HPLJEnterpriseMFPM506 (HKLM-x32\...\{2432E435-9CF9-451A-8310-E0C37CF2AB74}) (Version: 0.05.0000 - Hewlett-Packard) Hidden
Chrome Remote Desktop Host (HKLM-x32\...\{09112FA9-7463-428E-BFD2-FB196BC4828B}) (Version: 139.0.7258.8 - Google LLC)
Intel(R) Chipset Device Software (HKLM\...\{0FCE256E-F9AA-4070-886F-7C75AED03FB5}) (Version: 10.1.19444.8378 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{8e171961-44e9-48e3-9a1e-7e05e5387200}) (Version: 10.1.19444.8378 - Intel(R) Corporation)
Intel(R) Icls (HKLM\...\{12519C5C-08E1-43FF-8EDD-00C21EA97A0F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) LMS (HKLM\...\{05A0D7A4-7E7F-4AE4-A6C1-19E053F4814E}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{14AAA42A-EBBE-48AF-A854-0223E9A73757}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{17998F20-7E23-4D21-AB99-C87B8A7B6FD4}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2227.3.14.0 - Intel Corporation)
Intel(R) Management Engine Driver (HKLM\...\{692C5E62-CE45-408D-8151-6D89FC0A7089}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME WMI Provider (HKLM\...\{CD82C3D7-32B0-4A4B-B5CA-572772CDE09E}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) SOL LMS Extension (HKLM\...\{E031D239-9DC4-4036-A257-ED97AF53903D}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Wireless Manageability Driver (HKLM\...\{A69F820E-BB6F-4DCE-B5BD-6AD9A7EDF4B5}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Wireless Manageability Driver Extension (HKLM\...\{F05AE984-DFAF-4CFD-940B-37D528E420EB}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Keyboard Lock Status driver 3.0 (HKLM-x32\...\Keyboard Lock Status driver_is1) (Version: - )
Microsoft Access MUI (Czech) 2013 (HKLM\...\{90150000-0015-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Access MUI (English) 2013 (HKLM\...\{90150000-0015-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Access Setup Metadata MUI (English) 2013 (HKLM\...\{90150000-0117-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft DCF MUI (Czech) 2013 (HKLM\...\{90150000-0090-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft DCF MUI (English) 2013 (HKLM\...\{90150000-0090-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 139.0.3405.86 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 138.0.3351.121 - Microsoft Corporation) Hidden
Microsoft Excel MUI (Czech) 2013 (HKLM\...\{90150000-0016-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Excel MUI (English) 2013 (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Groove MUI (Czech) 2013 (HKLM\...\{90150000-00BA-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Groove MUI (English) 2013 (HKLM\...\{90150000-00BA-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (Czech) 2013 (HKLM\...\{90150000-0044-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (English) 2013 (HKLM\...\{90150000-0044-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (Czech) 2013 (HKLM\...\{90150000-012B-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (English) 2013 (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Access database engine 2007 (English) (HKLM-x32\...\{90120000-00D1-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Korrekturhilfen 2013 - Deutsch (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Language Pack 2013 - Czech/čeština (HKLM\...\Office15.OMUI.cs-cz) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office O MUI (Czech) 2013 (HKLM\...\{90150000-0100-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (Czech) 2013 (HKLM\...\{90150000-00E1-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (English) 2013 (HKLM\...\{90150000-00E1-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (Czech) 2013 (HKLM\...\{90150000-00E2-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (English) 2013 (HKLM\...\{90150000-00E2-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Proofing (Czech) 2013 (HKLM\...\{90150000-002C-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2013 (HKLM\...\{90150000-002C-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (Czech) 2013 (HKLM\...\{90150000-00C1-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (English) 2013 (HKLM\...\{90150000-00C1-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2013 (HKLM\...\{90150000-006E-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2013 (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2013 (HKLM\...\{90150000-0115-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-2791104590-3841432406-1029282173-1002\...\OneDriveSetup.exe) (Version: 25.130.0706.0004 - Microsoft Corporation)
Microsoft OneNote MUI (Czech) 2013 (HKLM\...\{90150000-00A1-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (English) 2013 (HKLM\...\{90150000-00A1-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (Czech) 2013 (HKLM\...\{90150000-001A-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (English) 2013 (HKLM\...\{90150000-001A-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (Czech) 2013 (HKLM\...\{90150000-0018-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (English) 2013 (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (Czech) 2013 (HKLM\...\{90150000-0019-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (English) 2013 (HKLM\...\{90150000-0019-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft SharePoint Designer MUI (Czech) 2013 (HKLM\...\{90150000-0017-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.31.31103 (HKLM-x32\...\{41d7b770-418a-43b7-95a5-f925fff05789}) (Version: 14.31.31103.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.31.31103 (HKLM-x32\...\{5720EC03-F26F-40B7-980C-50B5D420B5DE}) (Version: 14.31.31103 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.31.31103 (HKLM-x32\...\{799E3FFF-705C-461F-B400-6DE27398B3E5}) (Version: 14.31.31103 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}) (Version: 10.0.50908 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Word MUI (Czech) 2013 (HKLM\...\{90150000-001B-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Word MUI (English) 2013 (HKLM\...\{90150000-001B-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft X MUI (Czech) 2013 (HKLM\...\{90150000-0101-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (HKLM\...\{90150000-001F-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (HKLM\...\{90150000-001F-041B-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0015-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0015-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0016-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0017-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{85EB11C5-7793-4386-8F93-3D15494EC269}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0018-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0019-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0019-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001A-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001A-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001B-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001F-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{1E8252A7-D489-4BB6-9694-93799FFD33ED}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{DABB9E2A-F054-4F97-9EB2-6992316C6EC7}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{835E4BED-E265-4103-AE14-0B4C70CF3FE8}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUS_{835E4BED-E265-4103-AE14-0B4C70CF3FE8}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.PROPLUS_{1F7000D3-A917-4AD2-BA55-59E6FDAF062A}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001F-041B-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{4601BD00-BC9B-4CA2-940C-2552782C7347}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}_Office15.PROPLUS_{4BF13B26-3A95-4E42-900A-DEB16FDA75A0}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-002C-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{EC915383-0457-4D83-BE7A-009D7841E9C5}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-002C-0409-1000-0000000FF1CE}_Office15.PROPLUS_{C5D14A1B-6E3E-491A-96C6-ABDEEEC4E97D}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0044-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0044-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-006E-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{3F685A71-DF4A-4AC0-A110-0FA0B7FFD86C}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{D7E879E6-B505-4DA2-BFEE-53A55E7C8E38}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0090-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0090-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-00A1-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-00A1-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-00BA-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-00BA-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{1931508C-C004-4983-81E3-70BE6252904B}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-00C1-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{6E88843F-58F2-45EB-8C4A-0DDFE45366E1}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-00C1-0409-1000-0000000FF1CE}_Office15.PROPLUS_{E4F470B2-3601-4E1C-B291-D6B580F53136}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-00E1-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-00E1-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-00E2-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-00E2-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0100-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0101-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0115-0409-1000-0000000FF1CE}_Office15.PROPLUS_{D7E879E6-B505-4DA2-BFEE-53A55E7C8E38}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0117-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-012B-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6227D1A8-9E29-463F-8DE6-1CFA1FFF8ECE}) (Version: - Microsoft) Hidden
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.00 beta 1 - Ghisler Software GmbH)
Total Commander 64-bit (Remove or Repair) (HKLM-x32\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
UninstallFujitsu Mouse (HKLM-x32\...\{A3BE2F96-2FC2-420D-980B-EC4B856F07FA}_is1) (Version: - Fujitsu Mouse)
Update for Skype for Business 2015 (KB4484289) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{1C76EBD9-0A70-4094-A543-00CAA3B62113}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB4484289) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{1C76EBD9-0A70-4094-A543-00CAA3B62113}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB4484289) 64-Bit Edition (HKLM\...\{90150000-012B-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{1C76EBD9-0A70-4094-A543-00CAA3B62113}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB4484289) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{1C76EBD9-0A70-4094-A543-00CAA3B62113}) (Version: - Microsoft)
Zoner Photo Studio 17 (HKLM\...\ZonerPhotoStudio17_CZ_is1) (Version: 17.0.1.1 - ZONER software)

Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2025-07-21] ()
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2024-11-09] (INTEL CORP) [Startup Task]
Audio Controls -> C:\Program Files\WindowsApps\22094SynapticsIncorporate.AudioControls_1.3.99.0_x64__qt57b6kdvhcfw [2024-07-23] (Synaptics Hong Kong Limited, Taiwan Branch (H.K.))
Balíček prostředí funkcí systému Windows -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-04-09] (Microsoft Windows)
HP Desktop Support Utilities -> C:\Program Files\WindowsApps\AD2F1837.HPDesktopSupportUtilities_7.0.8.0_x64__v10z8vjag6ke6 [2024-07-24] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.46.17.0_x64__v10z8vjag6ke6 [2025-06-26] (HP Inc.)
Intel(R) Management and Security Status -> C:\Program Files\WindowsApps\AppUp.IntelManagementandSecurityStatus_2405.6.0.0_x64__8j3eq9eme6ctt [2024-12-31] (INTEL CORP) [Startup Task]
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0 [2025-07-29] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2791104590-3841432406-1029282173-1002_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2791104590-3841432406-1029282173-1002_Classes\CLSID\{CBDC2CE4-A7EE-4788-9C24-59AB47D52A60} -> [Xiaomi 13T Pro] => C:\Users\Petr Pejcha\CrossDevice\Xiaomi 13T Pro [2025-07-31 11:36]
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2025-07-15] (Adobe Inc. -> Adobe Systems Inc.)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2024-08-20 12:35 - 2009-02-27 16:38 - 000139264 ____R () [File not signed] C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2024-07-25 13:24 - 2008-05-02 14:32 - 000049152 _____ () [File not signed] C:\Program Files (x86)\Fujitsu Keyboard Lock Status driver\Keyboard Lock Status driver\3.0\kLockDll.dll
2024-07-24 13:08 - 2014-09-09 13:30 - 000603648 _____ () [File not signed] C:\Program Files\Zoner\Photo Studio 17\Program32\SpiderMonkey.dll
2024-08-20 12:35 - 2005-04-22 06:36 - 000143360 _____ () [File not signed] C:\WINDOWS\system32\BrSNMP64.dll
2025-07-16 00:44 - 2025-07-16 00:44 - 000030720 _____ (Adobe Systems Inc.) [File not signed] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\cs_cz\Acrobat Elements\ContextMenuShim64.cze
2024-08-20 12:35 - 2013-06-12 19:06 - 000385024 ____R (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\BrMonitor.dll
2024-08-20 12:35 - 2014-05-22 19:12 - 000137728 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcAssoc.dll
2024-08-20 12:35 - 2014-02-06 21:13 - 000083968 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcDlgRc.dll
2024-08-20 12:35 - 2014-02-06 21:13 - 017904640 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcGrImg.dll
2024-08-20 12:35 - 2014-01-09 17:36 - 000082944 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcLCze.dll
2024-08-20 12:35 - 2013-03-08 08:44 - 000087040 _____ (Brother Industries, Ltd.) [File not signed] C:\WINDOWS\system32\BrNetSti.dll
2009-09-16 18:44 - 2009-09-16 18:44 - 000153088 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\hptcpmib.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000331264 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\HpTcpMon.dll
2009-09-16 11:44 - 2009-09-16 11:44 - 000132096 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\hpzjrd01.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000317440 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\System32\HPTcpMUI.dll
2025-07-09 11:11 - 2025-07-09 11:11 - 000781312 _____ (The Apache Software Foundation) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\log4net\4bdf16eb1f5376b2653f8f32944c203d\log4net.ni.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2025-06-19] (HP Inc. -> HP Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2025-06-19] (HP Inc. -> HP Inc.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2021-08-17] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2022-05-07 07:24 - 2022-05-07 07:22 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.8.1
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Intel(R) Ethernet Connection (7) I219-LM -> e1d.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2791104590-3841432406-1029282173-1002\Control Panel\Desktop\\Wallpaper ->
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKU\S-1-5-21-2791104590-3841432406-1029282173-1002\...\StartupApproved\Run: => "btweb"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{46F2CAE6-FA1E-49EC-A67F-5B06A9B44DF4}] => (Allow) C:\Users\Petr Pejcha\Desktop\FRST64.exe (Farbar) [File not signed]
FirewallRules: [{EF673E7C-C888-4F12-8856-208A08801A88}] => (Allow) C:\Users\Petr Pejcha\Desktop\FRST64.exe (Farbar) [File not signed]
FirewallRules: [{E6FA3F8A-D2DD-4CC0-9566-AF8A1F633AF5}] => (Allow) C:\Users\Petr Pejcha\Desktop\FRST64.exe (Farbar) [File not signed]
FirewallRules: [{4F670F7B-EEDC-4133-8931-BDA897A4624D}] => (Allow) C:\Users\Petr Pejcha\Desktop\FRST64.exe (Farbar) [File not signed]
FirewallRules: [{FF74B7DB-DD8A-48E9-AAE6-0C86A1C6179C}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24334.1103.3302.5694_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4095938D-2DC2-4AB7-8EC5-3C452F93576D}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24334.1103.3302.5694_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B5D1EB89-2D2C-4EDE-91F5-E2CDD3AF6E9C}] => (Allow) C:\Program Files\Zoner\Photo Studio 17\Program32\MediaServer.exe (ZONER software, a.s. -> ZONER software)
FirewallRules: [TCP Query User{0C37CEA2-9916-4534-90EF-FCF1D04172A6}C:\users\petr pejcha\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\petr pejcha\appdata\roaming\utorrent\utorrent.exe (Zdenek Svub -> BitTorrent, Inc.)
FirewallRules: [UDP Query User{31C2BFB9-85BC-4E17-8449-2D393AA44DA1}C:\users\petr pejcha\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\petr pejcha\appdata\roaming\utorrent\utorrent.exe (Zdenek Svub -> BitTorrent, Inc.)
FirewallRules: [{DEA4ED20-0539-4F2E-AC5C-2EC1965D24A2}] => (Allow) C:\Users\Petr Pejcha\Downloads\Microsoft Office Professional Plus 2013\Microsoft Toolkit.exe => No File
FirewallRules: [{CA9D9CC9-30B4-4266-A395-AC1AE5ACBFB3}] => (Allow) C:\Users\Petr Pejcha\Downloads\Microsoft Office Professional Plus 2013\Microsoft Toolkit.exe => No File
FirewallRules: [{A5261281-1539-4507-9963-404A4CA2B51A}] => (Allow) C:\Program Files\KMSnano\data\qemu-system-i386.exe => No File
FirewallRules: [{87DC5B85-1544-495D-897C-17B7F0CE380B}] => (Allow) C:\Program Files\KMSnano\data\qemu-system-i386.exe => No File
FirewallRules: [{1020E1D0-26DC-4FD3-92C4-68E2067C3080}] => (Allow) LPort=54925
FirewallRules: [{1075ADE6-CFE1-4F8C-81EF-5B07F981CAA4}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24334.1103.3302.5694_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CE64A578-5F60-4FB3-9875-F7B1EEF94D61}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24334.1103.3302.5694_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{18903201-7E41-4903-8366-275FD9355C7E}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\139.0.7258.8\remoting_host.exe (Google LLC -> Google LLC)
FirewallRules: [{570ED301-E92F-419F-BAA3-D630B674BD72}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{8B384B15-2F18-4C11-A4CC-B17A4B0EEF25}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{42A8BD49-BD64-483D-80CC-AFB8E8F5EF9D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{827526BA-7566-4101-94D5-E823E1DA6CB7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{7406FDE4-7B40-48DB-BD06-4DF083F6C30B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{0435AC1F-AC9D-4200-9632-5E65F2551F7F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{D9671AB3-8613-4259-99F8-8010EF5EFDC5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{4B89ECB6-348E-4EB8-8774-782DC3DA8166}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{17A8A202-B36A-4D49-8108-EC2DEB049907}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{80E9BC5F-84C2-4668-BF30-03060942389B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.269.449.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{70B419B8-9A4B-4640-ACE1-983BBD9B7E36}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

07-08-2025 10:46:22 Windows Update
07-08-2025 10:46:22 Windows Update
07-08-2025 10:46:26 Windows Update
11-08-2025 08:57:36 Windows Update

==================== Faulty Device Manager Devices ============
Name: Standardní klávesnice PS/2
Description: Standardní klávesnice PS/2
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní klávesnice)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Kompatibilní myš PS/2
Description: Kompatibilní myš PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: ========================

Application errors:
==================
Error: (08/11/2025 10:57:00 AM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (4552,D,23,0) SRUJet: Databáze C:\WINDOWS\system32\SRU\SRUDB.dat: Index UserIdTimeStamp tabulky {5C8CF1C7-7257-4F13-B223-970EF5939312} je poškozený (0).

Error: (08/11/2025 10:57:00 AM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (4552,D,23,0) SRUJet: Databáze C:\WINDOWS\system32\SRU\SRUDB.dat: Index UserIdTimeStamp tabulky {973F5D5C-1D90-4944-BE8E-24B94231A174} je poškozený (0).

Error: (08/11/2025 10:49:57 AM) (Source: Application Error) (EventID: 1000) (User: Euronymous)
Description: Název chybující aplikace: chrome.exe, verze: 138.0.7204.184, časové razítko: 0x6887d89b
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000409
Posun chyby: 0x00007ffbffcc028f
ID chybujícího procesu: 0xbac
Čas spuštění chybující aplikace: 0x1dc0a9c34cc412a
Cesta k chybující aplikaci: C:\Program Files\Google\Chrome\Application\chrome.exe
Cesta k chybujícímu modulu: unknown
ID sestavy: 627bb5ee-8dcb-4895-a789-82c610889913
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (08/11/2025 09:58:54 AM) (Source: Application Error) (EventID: 1000) (User: Euronymous)
Description: Název chybující aplikace: chrome.exe, verze: 138.0.7204.184, časové razítko: 0x6887d89b
Název chybujícího modulu: chrome.dll, verze: 138.0.7204.184, časové razítko: 0x6887d89b
Kód výjimky: 0xc0000409
Posun chyby: 0x0000000004c1f0bd
ID chybujícího procesu: 0x2c30
Čas spuštění chybující aplikace: 0x1dc0a8d18c3d243
Cesta k chybující aplikaci: C:\Program Files\Google\Chrome\Application\chrome.exe
Cesta k chybujícímu modulu: C:\Program Files\Google\Chrome\Application\138.0.7204.184\chrome.dll
ID sestavy: c835b2c2-eceb-41e9-a8fa-7977e16413ec
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (08/11/2025 09:57:04 AM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (4552,D,23,0) SRUJet: Databáze C:\WINDOWS\system32\SRU\SRUDB.dat: Index UserIdTimeStamp tabulky {5C8CF1C7-7257-4F13-B223-970EF5939312} je poškozený (0).

Error: (08/11/2025 09:57:01 AM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (4552,D,23,0) SRUJet: Databáze C:\WINDOWS\system32\SRU\SRUDB.dat: Index UserIdTimeStamp tabulky {973F5D5C-1D90-4944-BE8E-24B94231A174} je poškozený (0).

Error: (08/07/2025 10:55:00 AM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (4620,D,23,0) SRUJet: Databáze C:\WINDOWS\system32\SRU\SRUDB.dat: Index UserIdTimeStamp tabulky {5C8CF1C7-7257-4F13-B223-970EF5939312} je poškozený (0).

Error: (08/07/2025 10:55:00 AM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (4620,D,23,0) SRUJet: Databáze C:\WINDOWS\system32\SRU\SRUDB.dat: Index UserIdTimeStamp tabulky {973F5D5C-1D90-4944-BE8E-24B94231A174} je poškozený (0).


System errors:
=============
Error: (08/11/2025 10:43:08 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Update byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.

Error: (08/11/2025 10:22:35 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073712): 2025-07 Kumulativní aktualizace (Preview) pro Windows 11 Version 24H2 pro systémy založené na platformě x64 (KB5062660) (26100.4770).

Error: (08/11/2025 09:31:20 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073712): 2025-07 Kumulativní aktualizace (Preview) pro Windows 11 Version 24H2 pro systémy založené na platformě x64 (KB5062660) (26100.4770).

Error: (08/11/2025 09:01:25 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error (-2147020471 = Zabezpečené spouštění není v tomto počítači zapnuto.). For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931

Error: (08/11/2025 08:56:26 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba CxUIUSvc neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (08/11/2025 08:56:26 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby CxUIUSvc bylo dosaženo časového limitu (45000 ms).

Error: (08/11/2025 08:56:24 AM) (Source: Microsoft-Windows-WER-SystemErrorReporting) (EventID: 1001) (User: NT AUTHORITY)
Description: 0x00000139 (0x0000000000000003, 0xffff970a48736830, 0xffff970a48736788, 0x0000000000000000)C:\WINDOWS\Minidump\081125-11546-01.dmpb9679cfc-c07d-4ee8-ba23-756d26ef73f7

Error: (08/11/2025 08:56:16 AM) (Source: volmgr) (EventID: 162) (User: )
Description: Soubor se stavem systému byl úspěšně vygenerován.


Windows Defender:
================
Date: 2025-08-11 10:57:44
Description:
Antivirová ochrana v programu Microsoft Defender zjistil potenciálně nežádoucí aplikaci.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUABundler:Win32/uTorrent_BundleInstaller
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\Users\Petr Pejcha\Downloads\utweb_installer.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: Euronymous\Petr Pejcha
Název procesu: C:\Users\Petr Pejcha\Desktop\FRST64.exe
Verze bezpečnostních informací: AV: 1.435.97.0, AS: 1.435.97.0, NIS: 1.435.97.0
Verze modulu: AM: 1.1.25070.4, NIS: 1.1.25070.4

Date: 2025-08-11 10:57:39
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: HackTool:Win32/AutoKMS
Závažnost: Vysoké
Kategorie: Nástroj
Cesta: file:_C:\Users\Petr Pejcha\Downloads\KMSAuto Net.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: Euronymous\Petr Pejcha
Název procesu: C:\Users\Petr Pejcha\Desktop\FRST64.exe
Verze bezpečnostních informací: AV: 1.435.97.0, AS: 1.435.97.0, NIS: 1.435.97.0
Verze modulu: AM: 1.1.25070.4, NIS: 1.1.25070.4

Date: 2025-08-11 10:57:38
Description:
Antivirová ochrana v programu Microsoft Defender zjistil potenciálně nežádoucí aplikaci.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUABundler:Win32/Rostpay
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\Users\Petr Pejcha\Downloads\installer__opgx89.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: Euronymous\Petr Pejcha
Název procesu: C:\Users\Petr Pejcha\Desktop\FRST64.exe
Verze bezpečnostních informací: AV: 1.435.97.0, AS: 1.435.97.0, NIS: 1.435.97.0
Verze modulu: AM: 1.1.25070.4, NIS: 1.1.25070.4

Date: 2025-08-11 09:23:17
Description:
Antivirová ochrana v programu Microsoft Defender ŝĉàʼn нåš ъè℮η śţőррзð веƒσге ćóмрľ℮ŧĭσň.%и %ťŚĉăй ĪÐ:%в{31C38515-AA5C-4E1F-87BA-54C2BA523A6A}%ʼn %тŜċàή Τỳφέ:%ьAntimalwarový program%ň %ŧЅĉăп Рàřáméŧėяѕ:%ъRychlé prohledávání%ή %ŧЦŝèя:%ъNT AUTHORITY\SYSTEM%ʼn %тŞтøр Ŕęаśòή:%ьŔΡÇ ċбňйεčтìσй ѓŭлðóщʼn

Date: 2025-08-06 04:49:04
Description:
Antivirová ochrana v programu Microsoft Defender ŝĉàʼn нåš ъè℮η śţőррзð веƒσге ćóмрľ℮ŧĭσň.%и %ťŚĉăй ĪÐ:%в{8040D8BF-35DC-44D1-84A3-4D194C18BFDB}%ʼn %тŜċàή Τỳφέ:%ьAntimalwarový program%ň %ŧЅĉăп Рàřáméŧėяѕ:%ъRychlé prohledávání%ή %ŧЦŝèя:%ъNT AUTHORITY\SYSTEM%ʼn %тŞтøр Ŕęаśòή:%ьŞςħеδΰĺэδ ŝćąń ŵάŝ şķïρρĕđ ьěċäύśé ţħė łªśт şΰćčêѕŝƒŭℓ śčàņ ŵαš ώîťђîп ťħз łáśť 7 δªỳş
Event[0]

Date: 2025-07-25 05:22:50
Description:
Modul Antivirová ochrana v programu Microsoft Defender byl ukončen z důvodu neočekávané chyby.
Typ chyby: Chyba
Kód výjimky: 0xc0000005
Prostředek: kód modulu
: 0

Date: 2025-07-24 09:16:05
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.433.28.0
Předchozí verze bezpečnostních informací: 1.433.7.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.25060.6
Předchozí verze modulu: 1.1.25060.6
Kód chyby: 0x80096010
Popis chyby: Digitální podpis objektu nebyl ověřen.

Date: 2025-07-24 09:16:05
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.433.28.0
Předchozí verze bezpečnostních informací: 1.433.7.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.25060.6
Předchozí verze modulu: 1.1.25060.6
Kód chyby: 0x80096010
Popis chyby: Digitální podpis objektu nebyl ověřen.

Date: 2025-07-23 20:57:32
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.433.10.0
Předchozí verze bezpečnostních informací: 1.433.7.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.25060.6
Předchozí verze modulu: 1.1.25060.6
Kód chyby: 0x8050a004
Popis chyby: Balíček neobsahuje aktuální soubor definic pro tento program. Další informace naleznete v nápovědě a podpoře.

Date: 2025-07-23 20:57:32
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.433.10.0
Předchozí verze bezpečnostních informací: 1.433.7.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.25060.6
Předchozí verze modulu: 1.1.25060.6
Kód chyby: 0x8050a004
Popis chyby: Balíček neobsahuje aktuální soubor definic pro tento program. Další informace naleznete v nápovědě a podpoře.

CodeIntegrity:
===============
Date: 2025-08-03 15:33:04
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

BIOS: HP R01 Ver. 02.20.00 12/13/2023
Motherboard: HP 8592
Processor: Intel(R) Core(TM) i7-8700 CPU @ 3.20GHz
Percentage of memory in use: 30%
Total physical RAM: 32542.28 MB
Available physical RAM: 22734.46 MB
Total Virtual: 34590.28 MB
Available Virtual: 25727.93 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:475.97 GB) (Free:374.74 GB) (Model: PC SN730 NVMe WDC 512GB) NTFS

\\?\Volume{9eaf00d7-da56-4678-aa20-8fe8a33dd18d}\ () (Fixed) (Total:0.74 GB) (Free:0.1 GB) NTFS
\\?\Volume{f71aa834-aeb4-4aa4-b0be-0365a3ae5f9a}\ () (Fixed) (Total:0.09 GB) (Free:0.02 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 6CB4F9A9)

Partition: GPT.

==================== End of Addition.txt =======================

[Rudy]

Zdravím!
Nejdříve spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

[TOMPET]

# -------------------------------
# Malwarebytes AdwCleaner 8.5.1.601
# -------------------------------
# Build: 03-26-2025
# Database: 2025-04-04.3 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 08-11-2025
# Duration: 00:00:00
# OS: Windows 11 (Build 26100.3775)
# Cleaned: 0
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [2539 octets] - [11/08/2025 17:57:21]
AdwCleaner[S01].txt - [1696 octets] - [11/08/2025 17:58:39]
AdwCleaner[C01].txt - [1794 octets] - [11/08/2025 17:58:49]
AdwCleaner[S02].txt - [1605 octets] - [11/08/2025 18:01:04]
AdwCleaner[S03].txt - [1666 octets] - [11/08/2025 18:02:09]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C03].txt ##########

[Rudy]

Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
ask: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {204718DD-1D59-481C-9239-932244D061A0} - System32\Tasks\Microsoft\Windows\Setup\SnapshotCleanupTask => C:\Windows\System32\OOBE\SetupPlatform\SetupPlatform.exe -removesnapshot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
C:\DumpStack.log.tmp
FirewallRules: [{DEA4ED20-0539-4F2E-AC5C-2EC1965D24A2}] => (Allow) C:\Users\Petr Pejcha\Downloads\Microsoft Office Professional Plus 2013\Microsoft Toolkit.exe => No File
FirewallRules: [{CA9D9CC9-30B4-4266-A395-AC1AE5ACBFB3}] => (Allow) C:\Users\Petr Pejcha\Downloads\Microsoft Office Professional Plus 2013\Microsoft Toolkit.exe => No File
FirewallRules: [{A5261281-1539-4507-9963-404A4CA2B51A}] => (Allow) C:\Program Files\KMSnano\data\qemu-system-i386.exe => No File
FirewallRules: [{87DC5B85-1544-495D-897C-17B7F0CE380B}] => (Allow) C:\Program Files\KMSnano\data\qemu-system-i386.exe => No File
FirewallRules: [{DEA4ED20-0539-4F2E-AC5C-2EC1965D24A2}] => (Allow) C:\Users\Petr Pejcha\Downloads\Microsoft Office Professional Plus 2013\Microsoft Toolkit.exe => No File
FirewallRules: [{CA9D9CC9-30B4-4266-A395-AC1AE5ACBFB3}] => (Allow) C:\Users\Petr Pejcha\Downloads\Microsoft Office Professional Plus 2013\Microsoft Toolkit.exe => No File
C:\Users\Petr Pejcha\Downloads\utweb_installer.exe
C:\Users\Petr Pejcha\Downloads\KMSAuto Net.exe
C:\Users\Petr Pejcha\Downloads\installer__opgx89.exe

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

V logu vidím minidumpy, což je oznámení o tom, že proběhla BSOD. Pokud by i po fixu problémy neustaly, oznamte:

1. zda jste neinstaloval nějaký nový software ( a zda má nainstalovaný ovladač)
2. aktualizujte ovladače hardwaru

[TOMPET]

Fix result of Farbar Recovery Scan Tool (x64) Version: 11-08-2025
Ran by Petr Pejcha (11-08-2025 19:35:07) Run:1
Running from C:\Users\Petr Pejcha\Desktop
Loaded Profiles: Petr Pejcha
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
ask: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {204718DD-1D59-481C-9239-932244D061A0} - System32\Tasks\Microsoft\Windows\Setup\SnapshotCleanupTask => C:\Windows\System32\OOBE\SetupPlatform\SetupPlatform.exe -removesnapshot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
C:\DumpStack.log.tmp
FirewallRules: [{DEA4ED20-0539-4F2E-AC5C-2EC1965D24A2}] => (Allow) C:\Users\Petr Pejcha\Downloads\Microsoft Office Professional Plus 2013\Microsoft Toolkit.exe => No File
FirewallRules: [{CA9D9CC9-30B4-4266-A395-AC1AE5ACBFB3}] => (Allow) C:\Users\Petr Pejcha\Downloads\Microsoft Office Professional Plus 2013\Microsoft Toolkit.exe => No File
FirewallRules: [{A5261281-1539-4507-9963-404A4CA2B51A}] => (Allow) C:\Program Files\KMSnano\data\qemu-system-i386.exe => No File
FirewallRules: [{87DC5B85-1544-495D-897C-17B7F0CE380B}] => (Allow) C:\Program Files\KMSnano\data\qemu-system-i386.exe => No File
FirewallRules: [{DEA4ED20-0539-4F2E-AC5C-2EC1965D24A2}] => (Allow) C:\Users\Petr Pejcha\Downloads\Microsoft Office Professional Plus 2013\Microsoft Toolkit.exe => No File
FirewallRules: [{CA9D9CC9-30B4-4266-A395-AC1AE5ACBFB3}] => (Allow) C:\Users\Petr Pejcha\Downloads\Microsoft Office Professional Plus 2013\Microsoft Toolkit.exe => No File
C:\Users\Petr Pejcha\Downloads\utweb_installer.exe
C:\Users\Petr Pejcha\Downloads\KMSAuto Net.exe
C:\Users\Petr Pejcha\Downloads\installer__opgx89.exe

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\SOFTWARE\Policies\Google => removed successfully
ask: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File) => Error: No automatic fix found for this entry.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{204718DD-1D59-481C-9239-932244D061A0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{204718DD-1D59-481C-9239-932244D061A0}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Setup\SnapshotCleanupTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\SnapshotCleanupTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
Could not move "C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2" => Scheduled to move on reboot.
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DEA4ED20-0539-4F2E-AC5C-2EC1965D24A2}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CA9D9CC9-30B4-4266-A395-AC1AE5ACBFB3}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A5261281-1539-4507-9963-404A4CA2B51A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{87DC5B85-1544-495D-897C-17B7F0CE380B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DEA4ED20-0539-4F2E-AC5C-2EC1965D24A2}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CA9D9CC9-30B4-4266-A395-AC1AE5ACBFB3}" => not found
C:\Users\Petr Pejcha\Downloads\utweb_installer.exe => moved successfully
"C:\Users\Petr Pejcha\Downloads\KMSAuto Net.exe" => not found
C:\Users\Petr Pejcha\Downloads\installer__opgx89.exe => moved successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 12897226 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 72674625 B
Edge => 0 B
Chrome => 1367884252 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 124 B
systemprofile32 => 124 B
LocalService => 627504 B
NetworkService => 627504 B
Petr Pejcha => 3979788062 B

RecycleBin => 1720979 B
EmptyTemp: => 5.1 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 11-08-2025 19:39:53)

C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 => Could not move
C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 19:39:53 ====

BSOD - probehne 1x do mesice, ale nestihnu vetsinou vyfotit (neco ve stylu secure kernel check)

1. instalace software - nic me nenapada za posledniho cca pul roku
2. ovladace zkusim aktualizovat

Nevim, zda to s tim muze mit neco spolecneho, ale od 31.7. mi nejde nainstalovat aktualizace pro Win 11:

2025-07 Kumulativní aktualizace (Preview) pro Windows 11 Version 24H2 pro systémy založené na platformě x64 (KB5062660) (26100.4770), Některé soubory aktualizace chybí nebo mají problémy. Tuto aktualizaci se pokusíme znovu stáhnout později. Kód chyby: (0x80073712).

děkuji.

[Rudy]

Bylo smazáno, log je již OK. Teď sledujte chod systému, ovladače se pokuste aktualizovat a k té chybě je něco více tady: https://wintip.cz/5268-chyba-0x80073712 .

[TOMPET]

Ovladače se tváří jako, že jsou aktuální. Dnes opět začal padat Excel při práci.

Nemůže být problém s HDD? Máme ve firmě několik PC a již jedno mělo problém s HDD.

Děkuji.

[JaRon]

Ahoj,
vloz obsah minidump Rudymu podla navodu https://forum.viry.cz/viewtopic.php?t=120729

[TOMPET]

Chtěl jsem poslat adresář Minidump v zipu , ale píše mi to, že příloha je příliš velká (1,7 mb).

Lze stáhnout zde: https://www.filemail.com/d/yxlunztlgsmribh

[Rudy]

Tom je v pořádku, mohu si ho stáhnout. Z těch souborů nelze jednoznačně určit příčinu problému. Budeme tedy postupovat po částech.

Stáhněte a nainstalujte CrystalDiskInfo: https://www.slunecnice.cz/sw/crystaldiskinfo/. Po instalaci spusťte a po skočení skenu (objeví se tabulka) přes Úpravy>Kopírovat sem dejte výsledek. Můžete také udělat snímek okna CDI.

[TOMPET]

----------------------------------------------------------------------------
CrystalDiskInfo 9.7.1 (C) 2008-2025 hiyohiyo
Crystal Dew World: https://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 11 Pro 24H2 [10.0 Build 26100] (x64)
Date : 2025/08/12 15:02:37

-- Controller Map ----------------------------------------------------------
- Intel(R) 300 Series Chipset Family SATA AHCI Controller [ATA]
- Řadič prostorů úložišť [SCSI]
+ Řadič Standard NVM Express [SCSI]
- PC SN730 NVMe WDC 512GB

-- Disk List ---------------------------------------------------------------
(01) PC SN730 NVMe WDC 512GB : 512,1 GB [0/1/0, sq] - nv

----------------------------------------------------------------------------
(01) PC SN730 NVMe WDC 512GB
----------------------------------------------------------------------------
Model : PC SN730 NVMe WDC 512GB
Firmware : 11121012
Serial Number : 2040GN453611
Disk Size : 512,1 GB
Interface : NVM Express
Standard : NVM Express 1.3
Transfer Mode : PCIe 3.0 x4 | PCIe 3.0 x4
Power On Hours : 33977 hodin
Power On Count : 101 krát
Host Reads : 5100 GB
Host Writes : 15136 GB
Temperature : 46 C (114 F)
Health Status : Dobrý (91 %)
Features : S.M.A.R.T., TRIM, VolatileWriteCache
Drive Letter : C:

-- S.M.A.R.T. --------------------------------------------------------------
ID RawValues(6) Attribute Name
01 000000000000 Kritické varování
02 00000000013F Složená teplota
03 000000000064 Rezerva k dispozici
04 000000000032 Dostupná náhradní prahová hodnota
05 000000000009 Použité procento
06 000000A33344 Čtení datových jednotek
07 000001E46219 Zapsané datové jednotky
08 000009836736 Příkazy pro hostitelské čtení
09 00003755E369 Příkazy pro zápis hostitele
0A 0000000002FF Čas obsazení řadiče
0B 000000000065 Napájecí cykly
0C 0000000084B9 Hodiny napájení
0D 00000000003B Nebezpečné vypnutí
0E 000000000000 Chyby v médiích a integritě dat
0F 000000000001 Počet položek protokolu chybových informací
10 000000000000 Warning Composite Temperature Time
11 000000000000 Critical Composite Temperature Time
1A 000000000000 Thermal Management Temperature 1 Transition Count
1B 000000000000 Thermal Management Temperature 2 Transition Count
1C 000000000000 Total Time For Thermal Management Temperature 1
1D 000000000000 Total Time For Thermal Management Temperature 2

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 15B7 15B7 3032 3034 4E47 3534 3633 3131 2020 2020
010: 2020 2020 4350 5320 374E 3033 4E20 4D56 2065 4457
020: 2043 3135 4732 2042 2020 2020 2020 2020 2020 2020
030: 2020 2020 3131 3231 3031 3231 4404 001B 0700 2017
040: 0300 0001 A120 0007 4240 000F 0200 0000 0002 0000
050: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
060: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
070: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
080: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
090: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
100: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
110: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
120: 0000 0000 0000 0000 0000 0000 0000 0000 0017 0704
130: 1E14 04FF 0101 0165 0169 0032 0000 0000 0000 0000
140: 6000 3C25 0077 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0034 0101
160: 0000 0001 0111 0165 0002 6000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0001 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 0000

-- SMART_NVME --------------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 00 3F 01 64 32 09 00 00 00 00 00 00 00 00 00 00
010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
020: 44 33 A3 00 00 00 00 00 00 00 00 00 00 00 00 00
030: 19 62 E4 01 00 00 00 00 00 00 00 00 00 00 00 00
040: 36 67 83 09 00 00 00 00 00 00 00 00 00 00 00 00
050: 69 E3 55 37 00 00 00 00 00 00 00 00 00 00 00 00
060: FF 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00
070: 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
080: B9 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00
090: 3B 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0B0: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

[Rudy]

Disk vypadá v pořádku. Teď zkontrolujte RAM: https://forum.viry.cz/viewtopic.php?t=106788 .

[TOMPET]

RAM, 2x test, 2x bez chyby.

[Rudy]

OK. Přes přík. řádek příkazem

sfc /scannow

a odentrováním spusťte skener systémových souborů. Proběhne sken a případná oprava systémových souborů. Restartujte PC. Pak zkuste systém otestovat běžným provozem.

[TOMPET]

Po scanu: Windows Resource Protection found corrupt files but was unable to fix some of them.

Log ke stažení zde: https://www.filemail.com/d/cunivpdulfuthwf

Děkuji.