prosím o pomoc s pc

Zpráva

shrek.r · #1 Příspěvek od **shrek.r** » 09 led 2026 22:39

Zdravím,
chtěl bych poprosit o pomoc s vrácením pc do kondice. je dost pomalé, internet načítá jak na vytačeném připojení

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-11-2025
Ran by Josef (administrator) on HP (Hewlett-Packard HP 15 Notebook PC) (09-01-2026 22:13:01)
Running from C:\Users\Josef\Downloads\FRST64.exe
Loaded Profiles: Josef
Platform: Microsoft Windows 8.1 (Update) (X64) Language: Čeština (Česká republika)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(%CFullName%) [File not signed] C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
() [File not signed] C:\Users\Josef\AppData\Local\Temp\7zSC72D3640\setup.exe <2>
(atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe ->) (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(C:\Program Files\AVAST Software\Avast\AvastSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe ->) (Softex Incorporated -> Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(explorer.exe ->) (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <8>
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\AvastUI.exe <4>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.372\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.372\GoogleCrashHandler64.exe
(Mozilla Corporation -> Mozilla) C:\Users\Josef\Downloads\Firefox Setup 115.31.0esr.exe
(services.exe ->) () [File not signed] C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(services.exe ->) () [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(services.exe ->) (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(services.exe ->) (Andrea Electronics -> Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(services.exe ->) (Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(services.exe ->) (Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(services.exe ->) (Huawei Technologies Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(services.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Softex Inc.) [File not signed] C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(svchost.exe ->) (CyberLink Corp. -> CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(svchost.exe ->) (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(svchost.exe ->) (Hewlett Packard -> Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(svchost.exe ->) (Softex Incorporated -> Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe
(svchost.exe ->) (Softex Incorporated -> Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7636696 2015-01-22] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2818800 2015-01-22] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1396592 2015-01-22] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [869032 2026-01-08] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\Run: [Power2GoExpress8] => NA (No File)
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\Run: [Microsoft Edge Update] => C:\Users\Josef\AppData\Local\Microsoft\EdgeUpdate\1.3.215.9\MicrosoftEdgeUpdateCore.exe [277088 2026-01-08] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {0f600f65-31ca-11e9-82dd-3863bb871149} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {0f601210-31ca-11e9-82dd-3863bb871149} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {2d525e0d-3033-11e5-826f-1008b13b4b06} - "G:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {42ae0188-977f-11e5-8286-1008b13b4b06} - "G:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {98beca3a-11b9-11e6-8298-3863bb871149} - "F:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {98beca5a-11b9-11e6-8298-3863bb871149} - "F:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {9adefe6a-684e-11e6-82b0-3863bb871149} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {a7de893c-96d8-11e5-8285-1008b13b4b06} - "F:\autorun.exe"
HKLM\...\Windows x64\Print Processors\Canon MG3100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAR.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MG3500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBV.DLL [30208 2013-04-04] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\hpzppw71: C:\Windows\System32\spool\prtprocs\x64\hpzppw71.dll [230400 2009-07-14] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3100 series: C:\Windows\system32\CNMLMAR.DLL [385024 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3500 series: C:\Windows\system32\CNMLMBV.DLL [391168 2013-04-04] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\Windows\system32\CNMN6PPM.DLL [359936 2013-01-24] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\HP Universal Port Monitor: C:\Windows\system32\hpbprtmon.dll [404992 2013-08-10] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard)
HKLM\...\Print\Monitors\LIDIL hpzllw71: C:\Windows\system32\hpzllw71.dll [53248 2009-07-14] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\109.0.5414.168\Installer\chrmstp.exe [2023-11-28] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\...\Authentication\Credential Providers: [{538C240D-3DEE-4032-AB4C-08A3A6EB0861}] -> C:\Program Files (x86)\CyberLink\YouCam\CLCredProv\x64\CLCredProv.dll [2014-03-07] (CyberLink Corp. -> CyberLink)
HKLM\Software\...\Authentication\Credential Providers: [{F3F1B0FA-4775-41d8-8578-436772D93FB4}] -> C:\Program Files\Hewlett-Packard\SimplePass\OmniPassCredProv.dll [2015-12-24] (Softex Inc..) [File not signed]
HKLM\Software\...\Authentication\Credential Provider Filters: [{F3F1B0FA-4775-41d8-8578-436772D93FB4}] -> C:\Program Files\Hewlett-Packard\SimplePass\OmniPassCredProv.dll [2015-12-24] (Softex Inc..) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2018-12-15]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {A5E04952-7EFD-49CF-BBAF-CD3C450BAC9A} - System32\Tasks\Avast Software\Avast Antivirus Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-av\icarus.exe [9212640 2025-12-03] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B41D7039-F88B-4E87-9AC4-AECFCD33C295} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5601960 2026-01-08] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {3F3A34FB-28DE-4553-8197-2911FBBB283B} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe -> C:\Program Files\Common Files\AV\avast! Antivirus\/backup /iavs
Task: {4E56C55C-90A7-4C71-98DB-9E12C333D4E9} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2977504 2025-11-13] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {D14B1D4B-D739-400D-87E3-F07658157EBA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-04-09] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {50A8087D-6FB6-4ACD-BC79-B32FD26AAE1B} - System32\Tasks\CCleanerClean => C:\Program Files\CCleaner\CCleaner.exe [39622960 2025-04-09] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B8AED0BD-7A58-42EB-8656-DE31E91CE92A} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6139696 2025-04-09] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "175c1bb4-f568-4638-b081-51cbf84c6473" --version "6.35.0.11488" --silent
Task: {521088BD-ADF5-46D9-BA89-90E747F83AEB} - System32\Tasks\CCleanerSkipUAC - Josef => C:\Program Files\CCleaner\CCleaner.exe [39622960 2025-04-09] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {07D686B3-19C9-49E3-B0FF-BEB2F02BC189} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
Task: {4C86740A-3360-444E-8095-FA72B418F6B7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
Task: {551EE2BC-6610-4C59-94F6-B68648884FAD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [542008 2014-01-13] (Hewlett-Packard Company -> Hewlett-Packard Company) -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\\/taskrestart
Task: {03CAACCD-8209-451C-9C05-3AD5B1E19C8F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFReport.exe [88120 2016-02-18] (Hewlett-Packard Company -> Hewlett-Packard)
Task: {01DF4DDA-CF66-4BFE-A18C-479E824869FE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSFUpdaterRedux => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [651400 2017-09-20] (Hewlett Packard -> HP Inc.) -> C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\\/s /p 1
Task: {72788611-C3A8-4631-8E35-7AFF65A2E805} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [542008 2014-01-13] (Hewlett-Packard Company -> Hewlett-Packard Company) -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\\/L Analysis
Task: {904CF8BF-BD6C-447A-A94A-9B14509A945B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [208760 2018-06-27] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\\/noreport
Task: {E0E96431-A71A-417A-9744-7DAC9E7109AA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [651400 2017-09-20] (Hewlett Packard -> HP Inc.) -> C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\\/s /p 1
Task: {16CF6CC8-6C17-4610-B3EF-CF554914E05C} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe [3271576 2015-11-03] (McAfee, Inc. -> McAfee, Inc.)
Task: {2C66650F-D472-41D6-ADD2-AB11CFA4EF8D} - System32\Tasks\McUpdaterModuleTask => C:\Program Files (x86)\McAfee Security Scan\4.1.274\McUpdaterModule.exe (No File)
Task: {16E6D0DE-208F-40E7-A525-4E7DE7303447} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {972BBEFD-21EB-454E-9F78-AEACB2E886F0} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-122881653-3073476654-141236064-1002Core{E8E5C0C7-A1B5-4600-A309-5ED0E7B862AA} => C:\Users\Josef\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205920 2026-01-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {90B589D4-595F-438F-89D9-375A3424B923} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-122881653-3073476654-141236064-1002UA{C2FA388D-A969-4C63-8AD0-A75389C8AC76} => C:\Users\Josef\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205920 2026-01-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {1722BEB2-6468-4C10-9852-72C0997E1827} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [725632 2025-12-01] (Mozilla Corporation -> Mozilla Foundation)
Task: {C4B68436-9597-4256-8403-B447268B14DC} - System32\Tasks\SecurityScannerScheduler => C:\Program Files (x86)\McAfee Security Scan\4.1.274\SSScheduler.exe (No File)
Task: {044230F6-773F-46FF-8BD2-2F15FCFC931D} - System32\Tasks\simplitec Power Suite => C:\Program Files (x86)\simplitec\KMPFaster\PowerSuite.exe -> C:\Program Files (x86)\simplitec\KMPFaster\-task <==== ATTENTION
Task: {212799AA-DD00-4312-951B-3C4D233CB82B} - System32\Tasks\simplitec Power Suite (Tray) => C:\Program Files (x86)\simplitec\KMPFaster\ServiceProvider.exe (No File) <==== ATTENTION
Task: {5127859C-6F5A-440F-8C3D-1E023DE5C124} - System32\Tasks\Start OPBHOBroker => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [506104 2015-12-24] (Softex Incorporated -> Hewlett-Packard)
Task: {65A9CF2D-03F9-413E-8883-53D572760AD4} - System32\Tasks\Start OPBHOBrokerDesktop => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [506104 2015-12-24] (Softex Incorporated -> Hewlett-Packard)
Task: {9DFA14CA-C1F3-42CB-92A7-8537FE71B368} - System32\Tasks\Start SimplePass => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [4822264 2015-12-24] (Softex Incorporated -> Hewlett-Packard)
Task: {13185B96-80B7-4169-812F-683F10758102} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2818800 2015-01-22] (Synaptics Incorporated -> Synaptics Incorporated)
Task: {753C847B-8EF3-4128-BB58-1FD2D9BD22EF} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2014-03-07] (CyberLink Corp. -> CyberLink Corp.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\CCleanerClean.job => C:\Program Files\CCleaner\CCleaner.exe
Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\Windows\Tasks\simplitec Power Suite (Tray).job => C:\Program Files (x86)\simplitec\KMPFaster\ServiceProvider.exe
Task: C:\Windows\Tasks\simplitec Power Suite.job => C:\Program Files (x86)\simplitec\KMPFaster\PowerSuite.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{BCAC36F0-5C92-4ECA-A756-4F5F7D9EFD41}: [DhcpNameServer] 192.168.0.1 192.168.0.1
Tcpip\..\Interfaces\{E9952D85-E3A6-46DC-BD19-1B370217F11A}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{E9952D85-E3A6-46DC-BD19-1B370217F11A}\7596E646F67737020586F6E65643134353: [DhcpNameServer] 192.168.137.1
Tcpip\..\Interfaces\{E9952D85-E3A6-46DC-BD19-1B370217F11A}\7596E646F67737020586F6E65643134353: [DhcpDomain] mshome.net
Tcpip\..\Interfaces\{E9952D85-E3A6-46DC-BD19-1B370217F11A}\8445340205F627471626C6560284F6473707F6470203738383: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E9952D85-E3A6-46DC-BD19-1B370217F11A}\8445340205F627471626C6560284F6473707F6470233240324: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E9952D85-E3A6-46DC-BD19-1B370217F11A}\B41647B616F577966696: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{FDBD3EF8-3482-4881-89AF-4B9E65EA1FC6}: [DhcpNameServer] 192.168.2.1 192.168.2.51
Tcpip\..\Interfaces\{FDBD3EF8-3482-4881-89AF-4B9E65EA1FC6}\2416A7162702E6F6E213: [DhcpNameServer] 10.72.0.1
Tcpip\..\Interfaces\{FDBD3EF8-3482-4881-89AF-4B9E65EA1FC6}\2416A7162702E6F6E213: [DhcpDomain] lan

Edge:
=======
Edge Profile: C:\Users\Josef\AppData\Local\Microsoft\Edge\User Data\Default [2026-01-09]

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [firefox@bho.com] - C:\Program Files\Hewlett-Packard\SimplePass\FFBHOExt
FF Extension: (HPSimplePass) - C:\Program Files\Hewlett-Packard\SimplePass\FFBHOExt [2016-07-22] [Legacy]
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.) [File not signed]
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default [2026-01-09]
CHR Notifications: Default -> hxxps://www.kupi.cz
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee_uninternational&type=E210CZ91105G91827&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2023-11-28]
CHR Extension: (Komponenta pro aplikaci BUSINESS 24) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnbkaminnbffdjkdlahealilagcdfdi [2017-11-05]
CHR Extension: (Vyhledávání Google) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2026-01-08]
CHR Extension: (HP SimplePass) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\fidikogfgleiaefnjbmnjaplmgknppkg [2018-02-10]
CHR Extension: (Dokumenty Google offline) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-11]
CHR Extension: (FormApps Extension) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2024-08-19]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-31]
CHR Extension: (PDF to EPUB Converter) - C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\odemhfmmeblhckehnjoaibognocbkadj [2021-02-23]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [fidikogfgleiaefnjbmnjaplmgknppkg]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [140288 2014-06-05] () [File not signed]
R2 AERTFilters; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [98208 2014-02-13] (Andrea Electronics -> Andrea Electronics Corporation)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-06-05] (Advanced Micro Devices, Inc.) [File not signed]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [7830184 2026-01-08] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [1036968 2026-01-08] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [1090216 2026-01-08] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56912 2022-11-06] (Avast Software s.r.o. -> AVAST Software)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [98816 2014-10-11] () [File not signed]
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1088816 2025-04-09] (Gen Digital Inc. -> Gen Digital Inc.)
S2 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
S3 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
R2 HPWMISVC; c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [608520 2015-02-17] (Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [190784 2018-12-12] (Huawei Technologies Co., Ltd. -> ) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [8965728 2024-12-20] (Malwarebytes Inc. -> Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [125440 2015-12-24] (Softex Inc.) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [112144 2021-05-18] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [21088 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [286816 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [435296 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [304736 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [88160 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [32856 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [289376 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [584800 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [97376 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [73312 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [898144 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [1314912 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\Windows\System32\drivers\aswStm.sys [219744 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [403552 2026-01-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2018-12-12] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R2 mbamchameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [231504 2024-12-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239568 2024-12-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [294104 2015-01-22] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [31840 2016-03-23] (Hewlett-Packard Company -> HP)
R3 WirelessButtonDriver64; C:\Windows\system32\DRIVERS\WirelessButtonDriver64.sys [31840 2016-03-23] (Hewlett-Packard Company -> HP)
U3 McAPExe; no ImagePath
U3 McMPFSvc; no ImagePath
U3 McNaiAnn; no ImagePath
U3 mfecore; no ImagePath
U3 MSK80Service; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

Error Reading file: "C:\ProgramData\Desktop\Revo Uninstaller.lnk"
Error Reading file: "C:\ProgramData\Desktop\Microsoft Edge.lnk"
Error Reading file: "C:\ProgramData\Desktop\Malwarebytes.lnk"
Error Reading file: "C:\ProgramData\Desktop\HP Quick Access to Miracast.lnk"
Error Reading file: "C:\ProgramData\Desktop\HP Connected Music.lnk"
Error Reading file: "C:\ProgramData\Desktop\HiSuite.lnk"
Error Reading file: "C:\ProgramData\Desktop\Google Chrome.lnk"
Error Reading file: "C:\ProgramData\Desktop\Firefox.lnk"
Error Reading file: "C:\ProgramData\Desktop\desktop.ini"
Error Reading file: "C:\ProgramData\Desktop\Centrum řešení HP.lnk"
Error Reading file: "C:\ProgramData\Desktop\CCleaner.lnk"
Error Reading file: "C:\ProgramData\Desktop\Canon Quick Menu.lnk"
Error Reading file: "C:\ProgramData\Desktop\Canon MG3500 series Elektronická příručka.lnk"
Error Reading file: "C:\ProgramData\Desktop\Avast Free Antivirus.lnk"
2026-01-09 22:13 - 2026-01-09 22:14 - 000029887 _____ C:\Users\Josef\Downloads\FRST.txt
2026-01-09 22:12 - 2026-01-09 22:13 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-01-09 22:12 - 2026-01-09 22:12 - 000002085 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Private Browsing.lnk
2026-01-09 22:12 - 2026-01-09 22:12 - 000000955 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-01-09 22:12 - 2026-01-09 22:12 - 000000943 _____ C:\Users\Public\Desktop\Firefox.lnk
2026-01-09 22:12 - 2026-01-09 22:12 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2026-01-09 22:12 - 2026-01-09 22:12 - 000000000 ____D C:\Users\Josef\AppData\Roaming\Mozilla
2026-01-09 22:12 - 2026-01-09 22:12 - 000000000 ____D C:\Users\Josef\AppData\Local\Mozilla
2026-01-09 22:12 - 2026-01-09 22:12 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-01-09 22:12 - 2026-01-09 22:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-01-09 22:11 - 2026-01-09 22:13 - 000000000 ____D C:\FRST
2026-01-09 22:11 - 2026-01-09 22:11 - 002444288 _____ (Farbar) C:\Users\Josef\Downloads\FRST64.exe
2026-01-09 21:56 - 2026-01-09 21:58 - 058760144 _____ (Mozilla) C:\Users\Josef\Downloads\Firefox Setup 115.31.0esr.exe
2026-01-09 20:22 - 2026-01-09 20:22 - 000002248 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-01-09 20:22 - 2026-01-09 20:22 - 000002207 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-01-09 20:21 - 2026-01-09 20:21 - 000003484 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-01-09 20:21 - 2026-01-09 20:21 - 000003356 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-01-09 13:21 - 2026-01-09 17:40 - 000000280 _____ C:\Windows\Tasks\CCleanerClean.job
2026-01-09 13:21 - 2026-01-09 13:21 - 000003518 _____ C:\Windows\system32\Tasks\CCleanerClean
2026-01-08 21:55 - 2026-01-08 21:55 - 000000000 ____D C:\Program Files\chrome_BITS_6896_907501132
2026-01-08 21:54 - 2026-01-08 21:54 - 000000000 ____D C:\Program Files\Google
2026-01-08 21:53 - 2026-01-08 21:53 - 000000000 ____D C:\Users\Josef\AppData\Local\VS Revo Group
2026-01-08 21:46 - 2026-01-08 21:43 - 000323752 _____ (Gen Digital Inc.) C:\Windows\system32\aswBoot.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-01-09 21:38 - 2015-01-20 15:06 - 000003596 _____ C:\Windows\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-122881653-3073476654-141236064-1002
2026-01-09 21:34 - 2015-01-20 15:03 - 000000000 ____D C:\Users\Josef\Documents\Youcam
2026-01-09 21:31 - 2015-01-23 10:47 - 000000000 ____D C:\Program Files (x86)\Google
2026-01-09 21:23 - 2023-12-06 11:10 - 000000000 ____D C:\Users\Josef\AppData\Local\Malwarebytes
2026-01-09 21:23 - 2015-01-20 15:03 - 000000000 ___RD C:\Users\Josef\OneDrive
2026-01-09 21:22 - 2015-11-06 08:41 - 000000432 _____ C:\Windows\Tasks\simplitec Power Suite (Tray).job
2026-01-09 21:21 - 2025-08-31 07:32 - 000003246 _____ C:\Windows\system32\Tasks\CCleanerCrashReporting
2026-01-09 21:21 - 2025-08-31 07:32 - 000000670 _____ C:\Windows\Tasks\CCleanerCrashReporting.job
2026-01-09 21:19 - 2015-01-20 15:26 - 000000000 ____D C:\ProgramData\AVAST Software
2026-01-09 21:19 - 2013-08-22 15:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-01-09 21:18 - 2014-10-15 02:19 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2026-01-09 21:04 - 2013-08-22 16:20 - 000000000 ____D C:\Windows\CbsTemp
2026-01-09 20:19 - 2013-08-22 14:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2026-01-09 18:35 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\Inf
2026-01-09 17:24 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\WinStore
2026-01-09 14:07 - 2014-03-18 10:38 - 000000000 ____D C:\Windows\ShellNew
2026-01-09 14:02 - 2018-12-15 13:40 - 000000000 ____D C:\Program Files (x86)\HP
2026-01-09 13:44 - 2014-05-07 14:42 - 000768392 _____ C:\Windows\system32\perfh005.dat
2026-01-09 13:44 - 2014-05-07 14:42 - 000166490 _____ C:\Windows\system32\perfc005.dat
2026-01-09 13:44 - 2014-03-18 10:53 - 001883104 _____ C:\Windows\system32\PerfStringBackup.INI
2026-01-09 13:35 - 2017-05-10 17:18 - 000000000 ____D C:\Program Files\CCleaner
2026-01-09 13:34 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\AppReadiness
2026-01-09 13:33 - 2015-01-20 15:00 - 000000000 ____D C:\Users\Josef\AppData\Local\Packages
2026-01-09 13:33 - 2013-08-22 16:36 - 000000000 ___HD C:\Program Files\WindowsApps
2026-01-09 02:15 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\rescache
2026-01-09 01:05 - 2015-02-06 08:13 - 000000000 ____D C:\Windows\system32\MRT
2026-01-08 23:45 - 2014-10-15 02:30 - 000000000 ____D C:\ProgramData\McAfee
2026-01-08 23:45 - 2014-10-15 02:30 - 000000000 ____D C:\Program Files\mcafee
2026-01-08 23:33 - 2015-02-06 08:13 - 218369424 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2026-01-08 23:05 - 2017-07-25 19:34 - 000000000 ____D C:\Users\Josef\AppData\Roaming\uTorrent
2026-01-08 23:02 - 2018-10-26 04:08 - 000000000 ____D C:\Users\Josef\AppData\Local\CrashDumps
2026-01-08 23:02 - 2015-06-22 18:37 - 000000000 ____D C:\Windows\Minidump
2026-01-08 23:02 - 2014-04-02 11:25 - 000000000 ____D C:\Windows\Panther
2026-01-08 22:26 - 2015-11-06 08:41 - 000000368 _____ C:\Windows\Tasks\simplitec Power Suite.job
2026-01-08 22:22 - 2016-02-24 19:43 - 000000000 ____D C:\Users\Josef\AppData\Roaming\COWON
2026-01-08 21:52 - 2015-12-03 22:09 - 000000000 ____D C:\Windows\system32\Tasks\AVAST Software
2026-01-08 21:47 - 2017-05-10 16:41 - 000001057 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2026-01-08 21:47 - 2017-05-10 16:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2026-01-08 21:44 - 2015-11-07 10:57 - 001314912 _____ (Gen Digital Inc.) C:\Windows\system32\Drivers\aswSP.sys
2026-01-08 21:43 - 2020-08-17 14:36 - 000289376 _____ (Gen Digital Inc.) C:\Windows\system32\Drivers\aswMonFlt.sys
2026-01-08 21:43 - 2020-05-21 13:49 - 000584800 _____ (Gen Digital Inc.) C:\Windows\system32\Drivers\aswNetHub.sys
2026-01-08 21:43 - 2019-01-20 14:28 - 000435296 _____ (Gen Digital Inc.) C:\Windows\system32\Drivers\aswbidsdriver.sys
2026-01-08 21:43 - 2019-01-20 14:28 - 000304736 _____ (Gen Digital Inc.) C:\Windows\system32\Drivers\aswbidsh.sys
2026-01-08 21:43 - 2019-01-20 14:28 - 000088160 _____ (Gen Digital Inc.) C:\Windows\system32\Drivers\aswbuniv.sys
2026-01-08 21:43 - 2019-01-20 14:28 - 000021088 _____ (Gen Digital Inc.) C:\Windows\system32\Drivers\aswArDisk.sys
2026-01-08 21:43 - 2018-10-26 04:14 - 000032856 _____ (Gen Digital Inc.) C:\Windows\system32\Drivers\aswKbd.sys
2026-01-08 21:43 - 2017-11-23 21:13 - 000286816 _____ (Gen Digital Inc.) C:\Windows\system32\Drivers\aswArPot.sys
2026-01-08 21:43 - 2015-11-07 10:57 - 000898144 _____ (Gen Digital Inc.) C:\Windows\system32\Drivers\aswSnx.sys
2026-01-08 21:43 - 2015-11-07 10:57 - 000403552 _____ (Gen Digital Inc.) C:\Windows\system32\Drivers\aswVmm.sys
2026-01-08 21:43 - 2015-11-07 10:57 - 000097376 _____ (Gen Digital Inc.) C:\Windows\system32\Drivers\aswRdr2.sys
2026-01-08 21:43 - 2015-11-07 10:57 - 000073312 _____ (Gen Digital Inc.) C:\Windows\system32\Drivers\aswRvrt.sys
2026-01-08 20:22 - 2022-09-25 11:12 - 000003712 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-122881653-3073476654-141236064-1002UA{C2FA388D-A969-4C63-8AD0-A75389C8AC76}
2026-01-08 20:22 - 2022-09-25 11:12 - 000003642 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-122881653-3073476654-141236064-1002Core{E8E5C0C7-A1B5-4600-A309-5ED0E7B862AA}
2026-01-08 20:20 - 2020-02-09 11:37 - 000000000 ____D C:\Users\Josef\AppData\Local\BitTorrentHelper
2026-01-08 19:27 - 2022-11-30 17:15 - 000003130 _____ C:\Windows\system32\Tasks\McUpdaterModuleTask
2026-01-08 19:27 - 2022-11-30 17:15 - 000003122 _____ C:\Windows\system32\Tasks\SecurityScannerScheduler
2026-01-08 19:27 - 2022-09-25 13:06 - 000002796 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC - Josef
2026-01-08 19:27 - 2020-10-20 16:48 - 000004128 _____ C:\Windows\system32\Tasks\CCleaner Update
2026-01-08 19:27 - 2016-07-22 14:18 - 000002986 _____ C:\Windows\system32\Tasks\Start SimplePass
2026-01-08 19:27 - 2016-07-22 14:18 - 000002924 _____ C:\Windows\system32\Tasks\Start OPBHOBrokerDesktop
2026-01-08 19:27 - 2016-07-22 14:18 - 000002912 _____ C:\Windows\system32\Tasks\Start OPBHOBroker
2026-01-08 19:27 - 2016-03-28 12:59 - 000003348 _____ C:\Windows\system32\Tasks\McAfee Remediation (Prepare)
2026-01-08 19:27 - 2015-11-06 08:41 - 000002784 _____ C:\Windows\system32\Tasks\simplitec Power Suite (Tray)
2026-01-08 19:27 - 2015-11-06 08:41 - 000002728 _____ C:\Windows\system32\Tasks\simplitec Power Suite
2026-01-08 19:27 - 2015-01-23 10:47 - 000003682 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2026-01-08 19:27 - 2015-01-23 10:47 - 000003554 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2026-01-08 19:27 - 2014-10-15 02:38 - 000003156 _____ C:\Windows\system32\Tasks\YCMServiceAgent
2026-01-08 19:27 - 2014-10-15 02:22 - 000002990 _____ C:\Windows\system32\Tasks\Synaptics TouchPad Enhancements
2026-01-08 19:24 - 2022-11-28 16:46 - 000000000 ____D C:\Users\Josef\AppData\Roaming\Kodi
2025-12-12 14:13 - 2017-02-17 11:08 - 000000000 ____D C:\Users\Josef\AppData\Local\Windows Live

==================== Files in the root of some directories ========

2016-07-16 09:04 - 2016-07-16 09:04 - 000000038 ___SH () C:\Users\Josef\AppData\Local\69ff07055291669bb2b218.72821112
2025-06-08 12:02 - 2025-06-08 12:02 - 000003584 _____ () C:\Users\Josef\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

LastRegBack: 2026-01-08 23:29
==================== End of FRST.txt ========================

shrek.r · #2 Příspěvek od **shrek.r** » 09 led 2026 22:39

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-11-2025
Ran by Josef (09-01-2026 22:16:00)
Running from C:\Users\Josef\Downloads
Microsoft Windows 8.1 (Update) (X64) (2015-01-20 14:00:41)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-122881653-3073476654-141236064-500 - Administrator - Disabled)
Guest (S-1-5-21-122881653-3073476654-141236064-501 - Limited - Disabled)
Josef (S-1-5-21-122881653-3073476654-141236064-1002 - Administrator - Enabled) => C:\Users\Josef

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{B7B3E9B3-FB14-4927-894B-E9124509AF5A}) (Version: 10.0.32.18 - Adobe Systems, Inc.)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.216 - Adobe)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.4.194 - Adobe Systems, Inc.)
AMD Accelerated Video Transcoding (HKLM\...\{E1AB750C-28E1-8438-23EF-3A488AA07720}) (Version: 13.30.100.40605 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{89D9FBD5-7D44-509B-D17D-71FF2B2E7BDD}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 25.12.10659.3321 - Gen Digital Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.6.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.3.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG3100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3100_series) (Version: - Canon Inc.)
Canon MG3500 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3500_series) (Version: 1.01 - Canon Inc.)
Canon MG3500 series On-screen Manual (HKLM-x32\...\Canon MG3500 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.2.0 - Canon Inc.)
Catalyst Control Center - Branding (HKLM-x32\...\{D3C49D06-7FA6-CE04-A17A-2074E314DBB6}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 6.35 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CyberLink LabelPrint (HKLM-x32\...\{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.5.6902 - CyberLink Corp.) Hidden
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.5.6902 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.8.4420 - CyberLink Corp.) Hidden
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.8.4420 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.6.5104 - CyberLink Corp.) Hidden
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.6.5104 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.8.4316 - CyberLink Corp.) Hidden
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.8.4316 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.3.3907 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.3.3907 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DisableMSDefender (HKLM\...\{74FE39A0-FB76-47CD-84BA-91E2BBB17EF2}) (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Energy Star (HKLM\...\{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}) (Version: 1.0.9 - Hewlett-Packard Company)
FormApps Signing Extension (HKLM-x32\...\{ACA43D91-8B42-4D42-8C8B-A893BD6AA40D}) (Version: 2.8.2.28 - Software602 a.s.)
Fotogaléria (HKLM-x32\...\{08466673-3905-4437-93E8-34A221B7CA4E}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotogalerie (HKLM-x32\...\{AEA7CE08-09DC-4186-99FD-66A26F3B8B21}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 109.0.5414.168 - Google LLC)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HiSuite (HKLM-x32\...\Hi Suite) (Version: 9.0.3.300 - )
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd)
HP Customer Experience Enhancements (HKLM-x32\...\{07FA4960-B038-49EB-891B-9F95930AA544}) (Version: 6.0.1.8 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet All-In-One Software (HKLM\...\{2CB8566A-8EA6-417A-BAB1-1B10A88C79BB}) (Version: 14.0 - HP)
HP Documentation (HKLM-x32\...\{F29E3AA8-CF19-4452-92B7-F1FE31CD11C5}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Postscript Converter (HKLM\...\{6E14E6D6-3175-4E1A-B934-CAB5A86367CD}) (Version: 4.5.12202 - Hewlett-Packard) Hidden
HP Recovery Manager (HKLM-x32\...\{FD49537C-C3A6-4F8D-93E6-68C778A1E192}) (Version: 12.00 - Hewlett-Packard) Hidden
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7372.4698 - Hewlett-Packard)
HP SimplePass (HKLM\...\{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.01.53 - Hewlett-Packard) Hidden
HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.01.53 - Hewlett-Packard)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Assistant (HKLM-x32\...\{8C696B4B-6AB1-44BC-9416-96EAC474CABE}) (Version: 7.5.2.12 - Hewlett-Packard Company)
HP System Event Utility (HKLM-x32\...\{D17A3B70-B75E-4C49-83D6-C17DDF65B35F}) (Version: 1.3.4 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP Utility Center (HKLM\...\{891A1782-8B20-4403-8383-458962525926}) (Version: 2.3.4 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
Inst5675 (HKLM\...\{2DE6247C-7077-451B-8BA7-FFD1A2ABBB47}) (Version: 8.01.53 - Softex Inc.) Hidden
Inst5676 (HKLM\...\{878F6913-7421-4713-97F7-0A736EE2A188}) (Version: 8.01.53 - Softex Inc.) Hidden
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.0.1.5 - PandoraTV)
Kodi (HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\Kodi) (Version: 19.4.0.0 - XBMC Foundation)
Malwarebytes version 4.6.17.334 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.6.17.334 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 88.0.705.81 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\Microsoft EdgeWebView) (Version: 109.0.1518.140 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Excel MUI (Czech) 2007 (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (HKLM-x32\...\{90120000-002C-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Czech) 2007 (HKLM\...\{90120000-002A-0405-1000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Standard 2007 (HKLM-x32\...\{90120000-0012-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Standard 2007 (HKLM-x32\...\STANDARD) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Word MUI (Czech) 2007 (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs (HKLM-x32\...\{90120000-00B2-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (HKLM\...\{3C28BFD4-90C7-3138-87EF-418DC16E9598}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (HKLM\...\{5AF4E09F-5C9B-3AAF-B731-544D3DC821DD}) (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (HKLM-x32\...\{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (HKLM-x32\...\{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30133 (HKLM-x32\...\{295d1583-fdb9-414b-a4c8-da539362a26b}) (Version: 14.29.30133.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.31.31103 (HKLM-x32\...\{41d7b770-418a-43b7-95a5-f925fff05789}) (Version: 14.31.31103.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.29.30133 (HKLM\...\{E699E009-1C3C-4E50-9B57-2B39F0954C7F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.29.30133 (HKLM\...\{6CD9E9ED-906D-4196-8DC3-F987D2F6615F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.31.31103 (HKLM-x32\...\{5720EC03-F26F-40B7-980C-50B5D420B5DE}) (Version: 14.31.31103 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.31.31103 (HKLM-x32\...\{799E3FFF-705C-461F-B400-6DE27398B3E5}) (Version: 14.31.31103 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{379A0618-EF50-423C-9637-EEB2D25A4BB4}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{3C5F91EF-5C0B-4D13-BCBE-0FC6FC3ED7F9}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{45898170-E68C-4F02-AA35-C2186BF347A3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{CFBFE244-6269-41DC-85B6-86F99C88ED02}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox ESR (x64 en-US) (HKLM\...\Mozilla Firefox 115.31.0 ESR (x64 en-US)) (Version: 115.31.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 115.31.0 - Mozilla)
MSVCRT (HKLM-x32\...\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}) (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (HKLM-x32\...\{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}) (Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (HKLM\...\{E9FA781F-3E80-4399-825A-AD3E11C28C77}) (Version: 16.4.1109.0912 - Microsoft) Hidden
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
OEM Application Profile (HKLM-x32\...\{1D464EFF-EC8B-F225-2F74-F74143200DDF}) (Version: 1.00.0000 - Název společnosti:)
OEM Application Profile (HKLM-x32\...\{315F1A48-D883-B234-7C79-15873574ACC1}) (Version: 1.00.0000 - Název společnosti:)
Photo Common (HKLM-x32\...\{140754E1-C019-44A9-A81B-2D7625AABE8A}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Common (HKLM-x32\...\{147FBA18-A6BB-4AD5-8F0A-37380AAABD76}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Common (HKLM-x32\...\{23AAEBF8-12B1-43EA-B75D-CDC613CA6CB4}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (HKLM-x32\...\{0F929651-F516-4956-90F2-FFBD2CD5D30E}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (HKLM-x32\...\{2020C08E-74F5-4E9F-BD2A-41F8CB6EBA10}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 1.0.0.24 - REALTEK Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.29082 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 8.35.716.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7335 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.0.0.43 - REALTEK Semiconductor Corp.)
Registrace uživatele zařízení Canon MG3500 series (HKLM-x32\...\Registrace uživatele zařízení Canon MG3500 series) (Version: - ‭Canon Inc.)
Revo Uninstaller 2.6.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.6.5 - VS Revo Group, Ltd.)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 18.1.7.9 - Synaptics Incorporated)
Windows Live Communications Platform (HKLM-x32\...\{03D562B5-C4E2-4846-A920-33178788BE00}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\{936D4074-6A57-45ED-AF5A-F7CF5A56DE6F}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\{9976E0BD-56A6-4A32-8597-B80FCE62063A}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\{FA29B84F-8306-4A62-A340-F2C41305E7AF}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Installer (HKLM-x32\...\{5A0EE0F0-E909-4F3B-B437-AAD9252427CB}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (HKLM-x32\...\{C6B0EE9E-2128-4448-B7AE-5E2B46E0F0E7}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (HKLM-x32\...\{E3445598-4424-4EE2-B71C-C23325F7FB71}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (HKLM-x32\...\{6B6923B9-8719-425B-916C-CD2908F31AAF}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (HKLM-x32\...\{0FF9CC94-EF23-401E-BDBD-37403D1A2B38}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (HKLM-x32\...\{F0E58739-2B4C-498F-9B0D-FF0F2FD52B61}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (HKLM-x32\...\{10640F6D-6AB0-401E-9FC6-A94D19C580BC}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (HKLM-x32\...\{28950295-A98C-4081-AC82-045E9879945E}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (HKLM-x32\...\{D310DD60-9EF2-4C9C-AD66-A58185A1C7CB}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Packages:
=========
Bing Translator -> C:\Program Files\WindowsApps\Microsoft.BingTranslator_1.7.2.0_x64__8wekyb3d8bbwe [2014-10-15] (Microsoft Corporation)
Box -> C:\Program Files\WindowsApps\134D4F5B.Box_1.6.3.1920_neutral__2qk4zy5s3qmee [2014-10-15] (Box, Inc.)
Cestování Bing -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.2.258_x64__8wekyb3d8bbwe [2014-10-15] (Microsoft Corporation) [MS Ad]
Getting Started with Windows 8 -> C:\Program Files\WindowsApps\AD2F1837.GettingStartedwithWindows8_1.2.4.35_neutral__v10z8vjag6ke6 [2014-10-15] (Hewlett-Packard Company)
HP Registration -> C:\Program Files\WindowsApps\AD2F1837.HPRegistration_1.2.1.141_neutral__v10z8vjag6ke6 [2014-10-15] (Hewlett-Packard Company)
Hry -> C:\Program Files\WindowsApps\Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe [2014-10-15] (Microsoft Corporation) [MS Ad]
Hudba -> C:\Program Files\WindowsApps\Microsoft.ZuneMusic_2.2.849.0_x64__8wekyb3d8bbwe [2014-10-15] (Microsoft Corporation) [MS Ad]
Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.2.258_x64__8wekyb3d8bbwe [2014-10-15] (Microsoft Corporation) [MS Ad]
Sport Bing -> C:\Program Files\WindowsApps\Microsoft.BingSports_3.0.2.258_x64__8wekyb3d8bbwe [2014-10-15] (Microsoft Corporation) [MS Ad]
Video -> C:\Program Files\WindowsApps\Microsoft.ZuneVideo_2.2.849.0_x64__8wekyb3d8bbwe [2014-10-15] (Microsoft Corporation) [MS Ad]
YouCam for HP -> C:\Program Files\WindowsApps\CyberLinkCorp.hs.YouCamforHP_1.0.2.27571_x86__06qsbagp91rvg [2014-10-15] (CYBERLINKCOM CORP)
Zdraví a fitness Bing -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.2.258_x64__8wekyb3d8bbwe [2014-10-15] (Microsoft Corporation) [MS Ad]
Zprávy Bing -> C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.2.258_x64__8wekyb3d8bbwe [2014-10-15] (Microsoft Corporation) [MS Ad]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-122881653-3073476654-141236064-1002_Classes\CLSID\{448DD314-7FBB-429C-9DAA-C05A00D235A8}\InprocServer32 -> C:\Users\Josef\AppData\Local\Microsoft\EdgeUpdate\1.3.215.9\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-122881653-3073476654-141236064-1002_Classes\CLSID\{5EA43877-C6D8-4885-B77A-C0BB27E94372}\InprocServer32 -> C:\Users\Josef\AppData\Local\Microsoft\EdgeUpdate\1.3.215.9\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-122881653-3073476654-141236064-1002_Classes\CLSID\{81093D63-7825-417B-BFC8-ADC63FA4E53D}\InprocServer32 -> C:\Users\Josef\AppData\Local\Microsoft\EdgeUpdate\1.3.215.9\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-122881653-3073476654-141236064-1002_Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}\Shell\Open\Command -> rundll32.exe "C:\Program Files\Synaptics\SynTP\SynTPCpl.dll",ShowDevicePropPage 0
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-01-08] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-01-08] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-01-08] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [BtSendToMenuEx] -> {CF24E6B8-F148-4BCB-9108-ADF313966E80} => -> No File
ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt_20150122_19_13_44.dll [2015-01-22] (CyberLink Corp. -> Cyberlink)
ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt_20150122_19_13_44.dll [2015-01-22] (CyberLink Corp. -> Cyberlink)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-01-08] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-11-28] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2014-06-05] (Advanced Micro Devices, Inc.) [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-01-08] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-11-28] (Malwarebytes Inc. -> Malwarebytes)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2015-12-24 04:09 - 2015-12-24 04:09 - 000022528 _____ (%CFullName%) [File not signed] C:\Program Files\Hewlett-Packard\SimplePass\cryptodll.dll
2015-12-24 04:11 - 2015-12-24 04:11 - 000888320 _____ (%CFullName%) [File not signed] C:\Program Files\Hewlett-Packard\SimplePass\OpBHO64.dll
2015-12-24 04:09 - 2015-12-24 04:09 - 000055808 _____ (%CFullName%) [File not signed] C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll
2015-12-24 04:09 - 2015-12-24 04:09 - 000036864 _____ (%CFullName%) [File not signed] C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll
2014-06-05 22:40 - 2014-06-05 22:40 - 000127488 _____ () [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2015-09-04 10:39 - 2013-01-24 08:24 - 000359936 _____ (CANON INC.) [File not signed] C:\Windows\System32\CNMN6PPM.DLL
2012-09-15 00:17 - 2012-09-15 00:17 - 000032256 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpotra08.rsc
2011-04-29 11:34 - 2011-04-29 11:34 - 000934400 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsem08.rsc
2011-04-29 11:34 - 2011-04-29 11:34 - 000012288 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqstp08.rsc
2011-04-29 19:08 - 2011-04-29 19:08 - 000048128 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.rsc
2015-12-24 04:12 - 2015-12-24 04:12 - 002175488 _____ (Hewlett-Packard) [File not signed] C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll
2015-12-24 04:11 - 2015-12-24 04:11 - 000717312 _____ (Hewlett-Packard) [File not signed] C:\Program Files\Hewlett-Packard\SimplePass\storeng.dll
2015-12-24 04:12 - 2015-12-24 04:12 - 001137664 _____ (Hewlett-Packard) [File not signed] C:\Program Files\Hewlett-Packard\SimplePass\userdata.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000071680 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzinw12.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000089600 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzipm12.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000054784 _____ (Hewlett-Packard) [File not signed] C:\Windows\SYSTEM32\hpzipr12.dll
2014-10-15 02:34 - 2014-10-15 02:34 - 001093120 _____ (Microsoft Corporation) [File not signed] C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80U.DLL
2014-10-15 02:26 - 2013-04-01 22:19 - 000574464 _____ (Realtek Semiconductor Corp.) [File not signed] C:\Windows\system32\Rtlihvs.dll
2015-12-24 04:25 - 2015-12-24 04:25 - 000863824 _____ (Softex Incorporated -> %CFullName%) [File not signed] C:\Program Files\Hewlett-Packard\SimplePass\GraphicalPwd.dll
2015-12-24 04:25 - 2015-12-24 04:25 - 000764496 _____ (Softex Incorporated -> Hewlett-Packard) [File not signed] C:\Program Files\Hewlett-Packard\SimplePass\hdddrv.dll
2015-12-24 04:25 - 2015-12-24 04:25 - 000543824 _____ (Softex Incorporated -> Hewlett-Packard) [File not signed] C:\Program Files\Hewlett-Packard\SimplePass\mstrpwd.dll
2015-12-24 04:25 - 2015-12-24 04:25 - 001616976 _____ (Softex Incorporated -> Hewlett-Packard) [File not signed] C:\Program Files\Hewlett-Packard\SimplePass\Wbf.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HPNTDFJS
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HPNTDFJS
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HPNTDFJS
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HPNTDFJS
HKU\S-1-5-21-122881653-3073476654-141236064-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/
HKU\S-1-5-21-122881653-3073476654-141236064-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HPNTDFJS
SearchScopes: HKLM -> {20EE2E19-D82B-4014-8712-64AE615791B6} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> {20EE2E19-D82B-4014-8712-64AE615791B6} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-122881653-3073476654-141236064-1002 -> {20EE2E19-D82B-4014-8712-64AE615791B6} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-122881653-3073476654-141236064-1002 -> {E0AA9906-AFF6-4791-99A2-A1502B8CE97C} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (Canon Inc. -> CANON INC.)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard Company -> Hewlett-Packard)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (Canon Inc. -> CANON INC.)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard Company -> Hewlett-Packard)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (Canon Inc. -> CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (Canon Inc. -> CANON INC.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2022-11-30 17:15 - 000000873 _____ C:\Windows\system32\drivers\etc\hosts
0.0.0.1 mssplus.mcafee.com

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.2.1
Windows Firewall is enabled.

Network Binding:
=============
Wi-Fi: Realtek RTL8723BE 802.11 b/g/n Wi-Fi Adapter -> rtwlane.sys
Síť Ethernet: Realtek PCIe FE Family Controller -> Rt630x64.sys

ms_rasman: Remote Access Connection Manager
ms_steelhead: Steelhead
MS_RasSrv: Dial-Up Server
ms_agilevpn: AgileVpn based VPN
ms_pptp: Point to Point Tunneling Protocol
ms_l2tp: Layer 2 Tunneling Protocol
ms_sstp: SSTP based VPN

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-122881653-3073476654-141236064-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Josef\Desktop\wolfsight_20_fotky_plaz3.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run32: => "Opera Browser Assistant"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{E56D9FEE-C27F-44B5-B17E-82F46623E409}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BD14AA6F-862A-4E97-967B-CA980A72110D}] => (Allow) LPort=2869
FirewallRules: [{B7FEB8C0-94FB-405C-9DCA-1897009186C4}] => (Allow) LPort=1900
FirewallRules: [{B6B3D4F9-E6C9-46ED-8BD4-79ED38764198}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{B75607CA-9F82-4936-B14D-D3F783113E40}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{879E7986-18E4-44C7-B0F7-218F8E84C4AE}] => (Allow) C:\Users\Josef\AppData\Local\HPConnectedMusic\Application\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{10075665-A171-4248-B04E-0777859F7A99}] => (Allow) C:\Users\Josef\AppData\Local\HPConnectedMusic\Application\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{00B597A0-2F09-401E-BAFD-D29C7263427C}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPSOCKSVC.exe (Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.)
FirewallRules: [{39A28F0F-25C7-4191-8E46-6C94CD3E965E}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{9FB3FFFA-AAEC-4FE9-BA21-B857A70093C4}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe (CyberLink Corp. -> CyberLink)
FirewallRules: [{8F05F607-9BA9-44DB-8868-0CE731F5460D}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{6DBD3FC9-CC93-498E-813E-25F03206F864}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{2C768873-30B3-41F4-B116-7D4160457FC6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{533BC817-3FF8-47AE-BE43-953C90AF3EF7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{58E982AD-AF0F-479D-961A-7EE873332318}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{E88AEF4F-D65F-4A4B-B836-F491223A158A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{C53F6D70-08A7-49C9-A7AC-DAF03E381487}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{7E6D3756-E587-4E31-AD50-82CC06DE3DCE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{7764E305-F49F-4D9C-A022-4179F1CD82B3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe (Hewlett-Packard Co.) [File not signed]
FirewallRules: [{F529C1B6-C69F-40BB-9366-E5B6AC2E029A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{D2D8B956-C519-4856-AE1B-D240FE154759}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{EF5EFAF2-09EE-4A36-A750-2169B16D1738}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Hewlett Packard -> Hewlett-Packard)
FirewallRules: [{5E16077F-F723-423A-8B3B-CA8D7CD2C3D0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{2AA171A3-2766-4B67-9FBD-32FF5D5370BD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{964CBD7F-556A-4A2A-A4C4-4E37F26C3330}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe (Hewlett-Packard Company -> Hewlett-Packard)
FirewallRules: [TCP Query User{CB9DA115-3F3C-456A-B38A-0B049F511F61}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [UDP Query User{FFC4D0BF-4937-4A30-AAA2-BB6C888B5519}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [{5C162D36-A945-4891-B7ED-02EC87A6C63D}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{68942230-F5C2-41E0-AE9F-7012DC4D4F7B}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [TCP Query User{03443ADB-1861-4835-87FD-36ED5F7F04C5}C:\program files\kodi\kodi.exe] => (Block) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [UDP Query User{3D230D6F-B467-491B-B67F-F8EA60E1E563}C:\program files\kodi\kodi.exe] => (Block) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [{4A810B72-D630-4D88-A2F4-176FD24E8485}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{64B3AD72-B7E0-45B1-A6D9-5E8280E93596}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{8A6D6BC1-BFFB-4B18-9462-5EA82ACE819D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

==================== Restore Points =========================

09-01-2026 02:03:50 Naplánovaný kontrolní bod
09-01-2026 13:28:14 Revo Uninstaller's restore point - Bing Food & Drink
09-01-2026 13:29:18 Revo Uninstaller's restore point - Bing Food & Drink
09-01-2026 13:32:22 Revo Uninstaller's restore point - Finance
09-01-2026 13:32:58 Revo Uninstaller's restore point - Finance

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (01/09/2026 05:24:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (01/09/2026 05:24:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (01/09/2026 05:24:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (01/09/2026 05:24:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (01/09/2026 05:24:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (01/09/2026 05:24:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (01/08/2026 10:21:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddWin32ServiceFiles: Unable to back up image of service Služba Microsoft Edge Update (edgeupdatem) since QueryServiceConfig API failed

System Error:
Systém nemůže nalézt uvedený soubor..

Error: (01/08/2026 10:21:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddWin32ServiceFiles: Unable to back up image of service Služba Microsoft Edge Update (edgeupdate) since QueryServiceConfig API failed

System Error:
Systém nemůže nalézt uvedený soubor..

System errors:
=============
Error: (01/09/2026 10:21:44 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server {BB6DF56B-CACE-11DC-9992-0019B93A3A84} se v daném časovém limitu neregistroval u služby DCOM.

Error: (01/09/2026 10:19:44 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server {1ECCA34C-E88A-44E3-8D6A-8921BDE9E452} se v daném časovém limitu neregistroval u služby DCOM.

Error: (01/09/2026 08:16:15 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba Windows Update se po přijetí pokynu pro vypnutí neukončila správně.

Error: (01/09/2026 05:24:28 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server {F9717507-6651-4EDB-BFF7-AE615179BCCF} se v daném časovém limitu neregistroval u služby DCOM.

Error: (01/09/2026 05:24:25 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server {F9717507-6651-4EDB-BFF7-AE615179BCCF} se v daném časovém limitu neregistroval u služby DCOM.

Error: (01/09/2026 05:24:25 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1 se v daném časovém limitu neregistroval u služby DCOM.

Error: (01/09/2026 05:24:25 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1 se v daném časovém limitu neregistroval u služby DCOM.

Error: (01/09/2026 05:24:25 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1 se v daném časovém limitu neregistroval u služby DCOM.

Windows Defender:
================
Date: 2015-11-07 09:53:35.640
Description:
Prohledávání Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... terprise=0
Název: SoftwareBundler:Win32/Dowadmin
Závažnost: Vysoké
Kategorie: Software instalující další produkty
Cesta: file:_C:\Users\Josef\AppData\Local\Microsoft\Windows\Temporary Internet Files\IE\4NZ60OFK\additionaloffers-setup[1].exe
Původ zjišťování: Místní počítač
Typ zjišťování: Konkrétní
Zdroj zjišťování: Systém
Uživatel: NT AUTHORITY\SYSTEM
Název procesu: Unknown
Verze podpisu: AV: 1.209.1921.0, AS: 1.209.1921.0, NIS: 115.26.0.0
Verze modulu: AM: 1.1.12205.0, NIS: 2.1.11804.0

Date: 2015-11-05 10:01:35.893
Description:
Prohledávání Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {51D0714F-06DF-4D1F-92DA-9EAC9BB58AA2}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2015-11-05 09:37:40.747
Description:
Prohledávání Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {36C48FFF-F7CF-4DE9-9854-D3D825304F74}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2015-11-05 09:28:28.561
Description:
Prohledávání Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {AAFC2034-AC0D-4588-A107-96EC62E6B6DA}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2015-11-05 08:54:17.132
Description:
Prohledávání Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {E9455F26-E33D-4A83-9C8E-8555A5F9BBD1}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Event[0]:

Date: 2016-09-10 09:35:26.604
Description:
Prohledávání Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.209.1921.0
Zdroj aktualizace: Server Microsoft Update
Typ podpisu: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.12205.0
Kód chyby: 0x80240016
Popis chyby

ři zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře.

Date: 2016-09-10 09:35:26.600
Description:
Prohledávání Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.209.1921.0
Zdroj aktualizace: Server Microsoft Update
Typ podpisu: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.12205.0
Kód chyby: 0x80240016
Popis chyby

ři zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře.

Date: 2016-09-10 09:23:41.823
Description:
Prohledávání Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 115.26.0.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ podpisu: Systém kontroly sítě
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 2.1.11804.0
Kód chyby: 0x80072ee7
Popis chyby :Nelze rozpoznat název nebo adresu serveru.

Date: 2016-09-10 09:23:41.807
Description:
Prohledávání Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.209.1921.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ podpisu: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.12205.0
Kód chyby: 0x80072ee7
Popis chyby :Nelze rozpoznat název nebo adresu serveru.

==================== Memory info ===========================

BIOS: Insyde F.32 11/12/2014
Motherboard: Hewlett-Packard 22CE
Processor: AMD A4-6210 APU with AMD Radeon R3 Graphics
Percentage of memory in use: 33%
Total physical RAM: 7112.98 MB
Available physical RAM: 4713.04 MB
Total Virtual: 8264.98 MB
Available Virtual: 5970.26 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:913.46 GB) (Free:831.83 GB) (Model: TOSHIBA MQ01ABD100 SATA Disk Device) NTFS
Drive d: (RECOVERY) (Fixed) (Total:17.04 GB) (Free:1.64 GB) (Model: TOSHIBA MQ01ABD100 SATA Disk Device) NTFS ==>[system with boot components (obtained from drive)]

\\?\Volume{cf1d9189-eb6b-4fda-aa63-7cb194de1072}\ (WINRE) (Fixed) (Total:0.63 GB) (Free:0.35 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: D2092FDA)

Partition: GPT.

==================== End of Addition.txt =======================

#3 Příspěvek od **Rudy** » 10 led 2026 11:48

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
ContextMenuHandlers1: [BtSendToMenuEx] -> {CF24E6B8-F148-4BCB-9108-ADF313966E80} => -> No File
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HPNTDFJS
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HPNTDFJS
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HPNTDFJS
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HPNTDFJS
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
C:\Users\Josef\AppData\Local\Microsoft\Windows\Temporary Internet Files
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\Run: [Power2GoExpress8] => NA (No File)
KU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {0f600f65-31ca-11e9-82dd-3863bb871149} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {0f601210-31ca-11e9-82dd-3863bb871149} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {2d525e0d-3033-11e5-826f-1008b13b4b06} - "G:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {42ae0188-977f-11e5-8286-1008b13b4b06} - "G:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {98beca3a-11b9-11e6-8298-3863bb871149} - "F:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {98beca5a-11b9-11e6-8298-3863bb871149} - "F:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {9adefe6a-684e-11e6-82b0-3863bb871149} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {a7de893c-96d8-11e5-8285-1008b13b4b06} - "F:\autorun.exe"
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {2C66650F-D472-41D6-ADD2-AB11CFA4EF8D} - System32\Tasks\McUpdaterModuleTask => C:\Program Files (x86)\McAfee Security Scan\4.1.274\McUpdaterModule.exe (No File)
Task: {C4B68436-9597-4256-8403-B447268B14DC} - System32\Tasks\SecurityScannerScheduler => C:\Program Files (x86)\McAfee Security Scan\4.1.274\SSScheduler.exe (No File)
Task: {044230F6-773F-46FF-8BD2-2F15FCFC931D} - System32\Tasks\simplitec Power Suite => C:\Program Files (x86)\simplitec\KMPFaster\PowerSuite.exe -> C:\Program Files (x86)\simplitec\KMPFaster\-task <==== ATTENTION
Task: {212799AA-DD00-4312-951B-3C4D233CB82B} - System32\Tasks\simplitec Power Suite (Tray) => C:\Program Files (x86)\simplitec\KMPFaster\ServiceProvider.exe (No File) <==== ATTENTION
U3 McAPExe; no ImagePath
U3 McMPFSvc; no ImagePath
U3 McNaiAnn; no ImagePath
U3 mfecore; no ImagePath
U3 MSK80Service; no ImagePath
Error Reading file: "C:\ProgramData\Desktop\Revo Uninstaller.lnk"
Error Reading file: "C:\ProgramData\Desktop\Microsoft Edge.lnk"
Error Reading file: "C:\ProgramData\Desktop\Malwarebytes.lnk"
Error Reading file: "C:\ProgramData\Desktop\HP Quick Access to Miracast.lnk"
Error Reading file: "C:\ProgramData\Desktop\HP Connected Music.lnk"
Error Reading file: "C:\ProgramData\Desktop\HiSuite.lnk"
Error Reading file: "C:\ProgramData\Desktop\Google Chrome.lnk"
Error Reading file: "C:\ProgramData\Desktop\Firefox.lnk"
Error Reading file: "C:\ProgramData\Desktop\desktop.ini"
Error Reading file: "C:\ProgramData\Desktop\Centrum řešení HP.lnk"
Error Reading file: "C:\ProgramData\Desktop\CCleaner.lnk"
Error Reading file: "C:\ProgramData\Desktop\Canon Quick Menu.lnk"
Error Reading file: "C:\ProgramData\Desktop\Canon MG3500 series Elektronická příručka.lnk"
Error Reading file: "C:\ProgramData\Desktop\Avast Free Antivirus.lnk"

EmptyTemp:
Hosts:
End

Uložte do C:\Users\Josef\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

shrek.r · #4 Příspěvek od **shrek.r** » 10 led 2026 13:12

Fix result of Farbar Recovery Scan Tool (x64) Version: 20-11-2025
Ran by Josef (10-01-2026 12:55:41) Run:1
Running from C:\Users\Josef\Downloads
Loaded Profiles: Josef
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
ContextMenuHandlers1: [BtSendToMenuEx] -> {CF24E6B8-F148-4BCB-9108-ADF313966E80} => -> No File
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HPNTDFJS
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HPNTDFJS
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HPNTDFJS
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HPNTDFJS
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
C:\Users\Josef\AppData\Local\Microsoft\Windows\Temporary Internet Files
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\Run: [Power2GoExpress8] => NA (No File)
KU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {0f600f65-31ca-11e9-82dd-3863bb871149} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {0f601210-31ca-11e9-82dd-3863bb871149} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {2d525e0d-3033-11e5-826f-1008b13b4b06} - "G:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {42ae0188-977f-11e5-8286-1008b13b4b06} - "G:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {98beca3a-11b9-11e6-8298-3863bb871149} - "F:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {98beca5a-11b9-11e6-8298-3863bb871149} - "F:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {9adefe6a-684e-11e6-82b0-3863bb871149} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {a7de893c-96d8-11e5-8285-1008b13b4b06} - "F:\autorun.exe"
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {2C66650F-D472-41D6-ADD2-AB11CFA4EF8D} - System32\Tasks\McUpdaterModuleTask => C:\Program Files (x86)\McAfee Security Scan\4.1.274\McUpdaterModule.exe (No File)
Task: {C4B68436-9597-4256-8403-B447268B14DC} - System32\Tasks\SecurityScannerScheduler => C:\Program Files (x86)\McAfee Security Scan\4.1.274\SSScheduler.exe (No File)
Task: {044230F6-773F-46FF-8BD2-2F15FCFC931D} - System32\Tasks\simplitec Power Suite => C:\Program Files (x86)\simplitec\KMPFaster\PowerSuite.exe -> C:\Program Files (x86)\simplitec\KMPFaster\-task <==== ATTENTION
Task: {212799AA-DD00-4312-951B-3C4D233CB82B} - System32\Tasks\simplitec Power Suite (Tray) => C:\Program Files (x86)\simplitec\KMPFaster\ServiceProvider.exe (No File) <==== ATTENTION
U3 McAPExe; no ImagePath
U3 McMPFSvc; no ImagePath
U3 McNaiAnn; no ImagePath
U3 mfecore; no ImagePath
U3 MSK80Service; no ImagePath
Error Reading file: "C:\ProgramData\Desktop\Revo Uninstaller.lnk"
Error Reading file: "C:\ProgramData\Desktop\Microsoft Edge.lnk"
Error Reading file: "C:\ProgramData\Desktop\Malwarebytes.lnk"
Error Reading file: "C:\ProgramData\Desktop\HP Quick Access to Miracast.lnk"
Error Reading file: "C:\ProgramData\Desktop\HP Connected Music.lnk"
Error Reading file: "C:\ProgramData\Desktop\HiSuite.lnk"
Error Reading file: "C:\ProgramData\Desktop\Google Chrome.lnk"
Error Reading file: "C:\ProgramData\Desktop\Firefox.lnk"
Error Reading file: "C:\ProgramData\Desktop\desktop.ini"
Error Reading file: "C:\ProgramData\Desktop\Centrum �e�en� HP.lnk"
Error Reading file: "C:\ProgramData\Desktop\CCleaner.lnk"
Error Reading file: "C:\ProgramData\Desktop\Canon Quick Menu.lnk"
Error Reading file: "C:\ProgramData\Desktop\Canon MG3500 series Elektronick� p��ru�ka.lnk"
Error Reading file: "C:\ProgramData\Desktop\Avast Free Antivirus.lnk"

EmptyTemp:
Hosts:
End
*****************

Processes closed successfully.
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BtSendToMenuEx => removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\Classes\PROTOCOLS\Handler\sacore => removed successfully
Symbolic link found: "C:\Users\Josef\AppData\Local\Microsoft\Windows\Temporary Internet Files" => "C:\Users\Josef\AppData\Local\Microsoft\Windows\INetCache"
"C:\Users\Josef\AppData\Local\Microsoft\Windows\Temporary Internet Files" => Symbolic link removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
"HKU\S-1-5-21-122881653-3073476654-141236064-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Power2GoExpress8" => removed successfully
KU\S-1-5-21-122881653-3073476654-141236064-1002\...\MountPoints2: {0f600f65-31ca-11e9-82dd-3863bb871149} - "F:\HiSuiteDownLoader.exe" => Error: No automatic fix found for this entry.
HKU\S-1-5-21-122881653-3073476654-141236064-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0f601210-31ca-11e9-82dd-3863bb871149} => removed successfully
HKU\S-1-5-21-122881653-3073476654-141236064-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2d525e0d-3033-11e5-826f-1008b13b4b06} => removed successfully
HKU\S-1-5-21-122881653-3073476654-141236064-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{42ae0188-977f-11e5-8286-1008b13b4b06} => removed successfully
HKU\S-1-5-21-122881653-3073476654-141236064-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{98beca3a-11b9-11e6-8298-3863bb871149} => removed successfully
HKU\S-1-5-21-122881653-3073476654-141236064-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{98beca5a-11b9-11e6-8298-3863bb871149} => removed successfully
HKU\S-1-5-21-122881653-3073476654-141236064-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9adefe6a-684e-11e6-82b0-3863bb871149} => removed successfully
HKU\S-1-5-21-122881653-3073476654-141236064-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a7de893c-96d8-11e5-8285-1008b13b4b06} => removed successfully
C:\ProgramData\NTUSER.pol => moved successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2C66650F-D472-41D6-ADD2-AB11CFA4EF8D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C66650F-D472-41D6-ADD2-AB11CFA4EF8D}" => removed successfully
C:\Windows\System32\Tasks\McUpdaterModuleTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\McUpdaterModuleTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C4B68436-9597-4256-8403-B447268B14DC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C4B68436-9597-4256-8403-B447268B14DC}" => removed successfully
C:\Windows\System32\Tasks\SecurityScannerScheduler => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SecurityScannerScheduler" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{044230F6-773F-46FF-8BD2-2F15FCFC931D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{044230F6-773F-46FF-8BD2-2F15FCFC931D}" => removed successfully
C:\Windows\System32\Tasks\simplitec Power Suite => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\simplitec Power Suite" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{212799AA-DD00-4312-951B-3C4D233CB82B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{212799AA-DD00-4312-951B-3C4D233CB82B}" => removed successfully
C:\Windows\System32\Tasks\simplitec Power Suite (Tray) => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\simplitec Power Suite (Tray)" => removed successfully
HKLM\System\CurrentControlSet\Services\McAPExe => removed successfully
McAPExe => service removed successfully
HKLM\System\CurrentControlSet\Services\McMPFSvc => removed successfully
McMPFSvc => service removed successfully
HKLM\System\CurrentControlSet\Services\McNaiAnn => removed successfully
McNaiAnn => service removed successfully
HKLM\System\CurrentControlSet\Services\mfecore => removed successfully
mfecore => service removed successfully
HKLM\System\CurrentControlSet\Services\MSK80Service => removed successfully
MSK80Service => service removed successfully
Error Reading file: "C:\ProgramData\Desktop\Revo Uninstaller.lnk" => Error: No automatic fix found for this entry.
Error Reading file: "C:\ProgramData\Desktop\Microsoft Edge.lnk" => Error: No automatic fix found for this entry.
Error Reading file: "C:\ProgramData\Desktop\Malwarebytes.lnk" => Error: No automatic fix found for this entry.
Error Reading file: "C:\ProgramData\Desktop\HP Quick Access to Miracast.lnk" => Error: No automatic fix found for this entry.
Error Reading file: "C:\ProgramData\Desktop\HP Connected Music.lnk" => Error: No automatic fix found for this entry.
Error Reading file: "C:\ProgramData\Desktop\HiSuite.lnk" => Error: No automatic fix found for this entry.
Error Reading file: "C:\ProgramData\Desktop\Google Chrome.lnk" => Error: No automatic fix found for this entry.
Error Reading file: "C:\ProgramData\Desktop\Firefox.lnk" => Error: No automatic fix found for this entry.
Error Reading file: "C:\ProgramData\Desktop\desktop.ini" => Error: No automatic fix found for this entry.
Error Reading file: "C:\ProgramData\Desktop\Centrum �e�en� HP.lnk" => Error: No automatic fix found for this entry.
Error Reading file: "C:\ProgramData\Desktop\CCleaner.lnk" => Error: No automatic fix found for this entry.
Error Reading file: "C:\ProgramData\Desktop\Canon Quick Menu.lnk" => Error: No automatic fix found for this entry.
Error Reading file: "C:\ProgramData\Desktop\Canon MG3500 series Elektronick� p��ru�ka.lnk" => Error: No automatic fix found for this entry.
Error Reading file: "C:\ProgramData\Desktop\Avast Free Antivirus.lnk" => Error: No automatic fix found for this entry.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 14795045 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 13783005 B
Edge => 0 B
Chrome => 21381134 B
Firefox => 87574933 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 9547 B
ProgramData => 9547 B
Public => 9547 B
systemprofile => 168788 B
systemprofile32 => 168916 B
LocalService => 193676 B
NetworkService => 193676 B
Josef => 36290323 B

RecycleBin => 0 B
EmptyTemp: => 166.5 MB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 12:56:00 ====

#5 Příspěvek od **Rudy** » 10 led 2026 14:38

OK. Zlepšilo se načítání?

shrek.r · #6 Příspěvek od **shrek.r** » 10 led 2026 15:28

Je to lepší. Ještě to není super ale přecijen je to i starší pc. Ješte zvažuju odstranit (nahradit) avast je dost otravný až agresivní s nabídkama na placenou verzi.

#7 Příspěvek od **Rudy** » 10 led 2026 16:48

Mohl byste zkusit vyčistit samotné prohlížeče. Stáhněte a spusťte postupně tyto utility:

1. Stahnete Zoek.exe https://sdilej.cz/29519076/zoek.rar a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.

a po něm

2. Junkware removal tool: https://www.stahuj.cz/utility_a_ostatni ... oval-tool/
•Ulozte nejlepe na plochu
•Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
•Probehne vytvoreni zalohy a nasledne prohledavani
•Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte.

shrek.r · #8 Příspěvek od **shrek.r** » 10 led 2026 18:16

první krok hazelo několikrát chybu

: chyba.png (56.04 KiB) Zobrazeno 562 x

shrek.r · #9 Příspěvek od **shrek.r** » 10 led 2026 18:16

Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Josef on so 10. 01. 2026 at 17:13:22,41.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\Josef\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

10. 1. 2026 17:15:59 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Seznam.cz deleted successfully
C:\PROGRA~3\Canon IJ Network Tool deleted successfully
C:\Users\Josef\AppData\Roaming\COWON deleted successfully
C:\Users\Josef\AppData\Roaming\hpqlog deleted successfully
C:\Users\Josef\AppData\Roaming\Seznam.cz deleted successfully
C:\Users\Josef\AppData\Local\Adobe deleted successfully
C:\Users\Josef\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Josef\AppData\Local\EmieSiteList deleted successfully
C:\Users\Josef\AppData\Local\EmieUserList deleted successfully
C:\Users\Josef\AppData\Local\MediaShow deleted successfully
C:\Users\Josef\AppData\Local\ms-drivers deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-122881653-3073476654-141236064-1002\Software\Microsoft\Internet Explorer\SearchScopes\{20EE2E19-D82B-4014-8712-64AE615791B6} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{20EE2E19-D82B-4014-8712-64AE615791B6} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{20EE2E19-D82B-4014-8712-64AE615791B6} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\Josef\AppData\Roaming\Mozilla\Firefox\Profiles\xchoonfp.default-esr\prefs.js:
user_pref("browser.startup.homepage", "https://www.seznam.cz/");

Added to C:\Users\Josef\AppData\Roaming\Mozilla\Firefox\Profiles\xchoonfp.default-esr\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Seznam.cz not found
C:\Users\Josef\AppData\Roaming\uTorrent deleted
C:\Users\Josef\.android deleted
C:\PROGRA~3\simplitec deleted
C:\PROGRA~3\Package Cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\simplitec deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\windows\SysNative\GroupPolicy\machine deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted
"C:\Users\Josef\AppData\Local\AVAST Software\APM\kv_pam.db" not deleted
"C:\Users\Josef\AppData\Local\AVAST Software\Avast\datascan.json" not deleted
"C:\Users\Josef\AppData\Local\AVAST Software\APM\Josef\kv_pam.db" not deleted
"C:\Users\Josef\AppData\Local\AVAST Software\Avast\ATT\att_results.dat" not deleted
"C:\Users\Josef\AppData\Local\AVAST Software" not deleted
"C:\Users\Josef\AppData\Local\AVAST Software\APM" not deleted
"C:\Users\Josef\AppData\Local\AVAST Software\Avast" not deleted
"C:\Users\Josef\AppData\Local\AVAST Software\APM\Josef" not deleted
"C:\Users\Josef\AppData\Local\AVAST Software\Avast\ATT" not deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Josef\AppData\Roaming\Mozilla\Firefox\Profiles\xchoonfp.default-esr
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"firefox@bho.com"="C:\Program Files\Hewlett-Packard\SimplePass\FFBHOExt" [22. 07. 2016 14:15]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Josef\AppData\Roaming\Mozilla\Firefox\Profiles\xchoonfp.default-esr
- Undetermined - %ProfilePath%\extensions\langpack-cs@firefox.mozilla.org.xpi

==== Firefox Plugins ======================

==== Fake Chromium Profiles Check ======================

Fake profile C:\Users\Default\AppData\Local\Google\Chrome deleted

==== Chromium Look ======================

Google Chrome Version: 46.0.2490.86

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
eofcbnmajmjmplflapaojjnihcjkigck - No path found[]
fidikogfgleiaefnjbmnjaplmgknppkg - No path found[]

KAK B24 - Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnbkaminnbffdjkdlahealilagcdfdi
__MSG_appName__ - Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
HP SimplePass - Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\fidikogfgleiaefnjbmnjaplmgknppkg
FormApps Extension - Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi
PDF to EPUB Converter - Josef\AppData\Local\Google\Chrome\User Data\Default\Extensions\odemhfmmeblhckehnjoaibognocbkadj

==== Chromium Startpages ======================

C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Preferences
kfioiadnlibdjbkf":"F01101E2829CDE836B5F57E672400693EC39B043D5089075515B8AC879BA69AF","mhjfbmdgcfjbbpaeojofohoefgiehjai":"1D258971E932C8BCC7FB807E44D35744B89A28C383A9BF5961B7F91717520E54","neajdppkdcdipfabeoofebfddakdcjhd":"85C0EAA1BFB730460145971FB1DC35622B8A3C83397CE5B061F72D1BFFB94DE0","nkeimhogjdpnpccoofpliimaahmaaome":"E2F474B53AEE96C3FEF0F36D701749CDF716F47CB9AE9740C48BF81E9D4191B1","nmmhkkegccagdldgiimedpiccmgmieda":"1C2521C8D1DF918D0504C28C5ECB1C15605C0A04E5684ED5A37F4DFCF4D98C6F","odemhfmmeblhckehnjoaibognocbkadj":"6C012593DD2BD14DBACB32176FCF9ED5623D052F404E0930B8247A030256594A","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"7CBF0E028B204DFF66A3543EE68AA1DF94C1B1382A94D7D0B43690F15B6D015A","pjkljhegncpnkpknbcohdijeoejaedia":"AFBABF014B304C7582243BFDD08CA9B539B26B9268519EB311FAC5AFB042A955","pkedcjkdefgpdelpbcmbmeomcjbeemfm":"091F928CFEBB63EA2259F68252E091CF10A7BC3AD13EB967E3839DC15CF48740"}},"google":{"services":{"account_id":"FD1056AD3FE4607FB6CB8DE29F47CD102AA941EC35923D164CD331AFC2748AF8","last_account_id":"241820A1AD2BC44D74A844062035D76E2C74C43DE7AB855D222886F95EEA3EB7","last_username":"407505867B4CEF8E667D8254653F469C56EA53F893E67EBA7409E0124F0F2E40","username":"BCEB9C4D25B4BE70259EC7952C7354500BA916D942A89567D466D42206812217"}},"homepage":"1BC276A636C654BDF46333F44DCE991F670E0AD3F8BB8CBAD3ECAD745639C26F","homepage_is_newtabpage":"67507D575BB830703E1A006EB40A74886C1E617DE41EE8FB65535D27A19AD6CA","media":{"cdm":{"origin_data":"28001BDF686073DF6FCD41E25F4D5C693C34C70186F22DCDC57D85977DD9F46D","origins":"EA81FDDF551B178A9B65D758B43A20C32B9CAE44F098FC117C424A19CA157EAB"},"storage_id_salt":"808D68ED3A5A66F669A3613121F941DF8D6666239287248900153479468E18F4"},"module_blocklist_cache_md5_digest":"77CDA9A536C00E97AAED74557CF9DA9FC601D04978FB6116B62B5FC82F178C63","pinned_tabs":"3C68400AD68B17EC9A9E4E6359488B9DB8C51D2CD4BEFD4F65B84AFC2C6D25D9","prefs":{"preference_reset_time":"2A875498B851BB866FCEFBA5B98BF759F07DC9A3921C96AA41E5431D4C702574"},"profile":{"reset_prompt_memento":"6E29AC05A7C143D15944A9B514A8497CDC24C0393B2D46113ED917B6BFD20852"},"safebrowsing":{"incidents_sent":"F469A6A66E86AEA857535F6BA4CDDCF454E320732F4B789FBCD2B1FAE0F621D3"},"search_provider_overrides":"28F624C2E4B73D411CC8F1736A014D261C7830B17AA0A8EE923F803EBD4E49A0","session":{"restore_on_startup":"E39CC01B6023B8313B2F84CC08EA0E540E42F6CE4B488D26C62651B42BB4694D","startup_urls":"644C76C4F1B795674AA00CB0712E37A59190FC849BCC116A9AA1BB455203F97B"},"settings_reset_prompt":{"last_triggered_for_default_search":"4A7461FD72B93D62FB658779AD7ACFAA46788DE72D75C13987E866F4B1096EA8","last_triggered_for_homepage":"DCD6F5694D290DF5F62A79E24D1F782DF087970C5D4C7E435279BD286AABCAD3","last_triggered_for_startup_urls":"EFA042D91A99F45B9D026A3990D161C1D67C55017896A901C2ACC7265D6A61C5","prompt_wave":"B4CA30FA402DEF868B9FBF8C5DA5441042FED056A01F1CF8496AE76FC28D96F3"},"software_reporter":{"prompt_seed":"5742800649D8268B922FC50D0B375A7293B1FCDE5976B0E43EE2D168BD52D236","prompt_version":"A14A44FFC401DBFF4B04DD0BF3A0E51A07CDE3B78AAD73E91D5082F45F684EA6","reporting":"922D235F7E8596D68398403FC896C14A624D173898B20844575A5F4105E9A24E"}},"super_mac":"DFEE3F3885D7172CFE2803F4BC15119570FBEAED12FDF49F0423C1E3966BCB96"},"safebrowsing":{"incidents_sent":{"1":{"default_search_provider_data.template_url_data":"4044991280","extensions.settings":"2576901303"},"6":{"domain_request_incident":"42","script_request_incident":"42"}}},"session":{"startup_urls":["http://www.seznam.cz/"]},"settings_reset_prompt":{"prompt_wave":20190606}}

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.seznam.cz/"
"Default_Page_URL"="http://www.bing.com?pc=HPNTDFJS"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="https://www.seznam.cz/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... c=CPNTDFJS"
{E0AA9906-AFF6-4791-99A2-A1502B8CE97C} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_12454"

==== Reset Google Chrome ======================

C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Josef\AppData\Local\Microsoft\Edge\User Data\Default\Preferences was reset successfully
C:\Users\Josef\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences was reset successfully
C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Josef\AppData\Local\Microsoft\Edge\User Data\Default\Web Data was reset successfully
C:\Users\Josef\AppData\Local\Microsoft\Edge\User Data\Default\Web Data-journal was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Josef\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Josef\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Josef\AppData\Local\Mozilla\Firefox\Profiles\xchoonfp.default-esr\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Josef\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Josef\AppData\Local\Microsoft\Edge\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=183 folders=105 144174483 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Josef\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Josef\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Josef\AppData\Local\AVAST Software\APM\kv_pam.db" not found
"C:\Users\Josef\AppData\Local\AVAST Software\Avast\datascan.json" not found
"C:\Users\Josef\AppData\Local\AVAST Software\APM\Josef\kv_pam.db" not found
"C:\Users\Josef\AppData\Local\AVAST Software\Avast\ATT\att_results.dat" not found
"C:\Users\Josef\AppData\Local\AVAST Software" not found

==== EOF on so 10. 01. 2026 at 18:07:30,56 ======================

#10 Příspěvek od **Rudy** » 10 led 2026 18:21

Spuštění se nakonec zdařilo. Nevím, kde byla chyba. Utility smazaly co měly. Zlepšilo se načítání?

shrek.r · #11 Příspěvek od **shrek.r** » 10 led 2026 18:28

tady ten druhej log, při stažení psalo že obsahuje malware

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 8.1 x64
Ran by Josef (Administrator) on so 10. 01. 2026 at 18:18:18,67
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 0

Registry: 2

Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} (Registry Key)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 10. 01. 2026 at 18:27:25,63
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

#12 Příspěvek od **Rudy** » 10 led 2026 18:45

Tyto utility něco mažou. Proto je některé AV nemají rádi. Všechno, co zde doporučujeme je naprosto bez virů a neublíží za předpokladu, že se budete chovat podle našeho návodu. Jak to vypadá nyní?

shrek.r · #13 Příspěvek od **shrek.r** » 10 led 2026 19:07

Je to rychlejší, sice když jsem zadal jako první adresu viry.cz trvalo víc jak půl minuty než načetlo, pak se to zlepšilo.
Ale proti tomu co bylo na začátku je to ted mnohem lepší.
Můžu poprosit ještě o radu na antivir místo avastu? nejlepe v češtině hlavně at pořad nevyskakují strašidelné okna jak je vše na Pi... a je třeba koupil placenou verzi.
Díky

#14 Příspěvek od **Rudy** » 10 led 2026 19:55

Tak to jsem rád, že se to zlepšilo. Z free antivirů zkuste AVIRu: https://www.avira.com/?srsltid=AfmBOorB ... Gpr1ujC3sn , free verze je ovšem bohužel pouze v AJ. Pak už byste musel jít do placený. Z nich bych doporučil ESET.

shrek.r · #15 Příspěvek od **shrek.r** » 11 led 2026 10:58

Díky,
skusil jsem tu Aviru tak uvidíme.
Ještě jednou díky,

VIRY.CZ

prosím o pomoc s pc

prosím o pomoc s pc

Re: prosím o pomoc s pc

Re: prosím o pomoc s pc

Re: prosím o pomoc s pc

Re: prosím o pomoc s pc

Re: prosím o pomoc s pc

Re: prosím o pomoc s pc

Re: prosím o pomoc s pc

Re: prosím o pomoc s pc

Re: prosím o pomoc s pc

Re: prosím o pomoc s pc

Re: prosím o pomoc s pc

Re: prosím o pomoc s pc

Re: prosím o pomoc s pc

Re: prosím o pomoc s pc