Prosím o kontrolu - pomalý notebook, velké vytížení paměti.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-08-2026 01
Ran by pavuky (administrator) on LUDVA (HP HP Laptop 17-ca1xxx) (14-08-2026 19:28:11)
Running from C:\Users\pavuk\Downloads\FRST64.exe
Loaded Profiles: pavuky
Platform: Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2631.102.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe
(C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointGpuInfo.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\AppHelperCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\BridgeCommunication.exe
(DriverStore\FileRepository\u0373104.inf_amd64_beb660c61c852a40\B373048\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0373104.inf_amd64_beb660c61c852a40\B373048\atieclxx.exe
(explorer.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2631.102.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek) C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Media Network\HPMediaNetwork.exe
(HP Inc. -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe <11>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <38>
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0373104.inf_amd64_beb660c61c852a40\B373048\atiesrxx.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc; HP Development Company, L.P.) C:\Program Files\HP\HP One Agent\hp-one-agent-service.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.6.1.0_x64__v10z8vjag6ke6\DialogHost\ReconsentNotification.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2606.0.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1082144 2020-04-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2097600 2018-04-18] (Realtek Semiconductor Corp. -> Realtek)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe [80543384 2026-07-27] (Google LLC -> Google LLC.)
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919336 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe [80543384 2026-07-27] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919336 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe [80543384 2026-07-27] (Google LLC -> Google LLC.)
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45626272 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\Run: [HPSEU_Host_Launcher] => C:\Program Files\HP\HP System Event Utility\Host Launcher\HpseuHostLauncher.exe [545864 2025-11-08] (HP Inc. -> HP Inc.)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe [80543384 2026-07-27] (Google LLC -> Google LLC.)
HKLM\...\Windows x64\Print Processors\Canon TS3100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDR.DLL [482816 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series: C:\WINDOWS\system32\CNMLMDR.DLL [1302016 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series XPS: C:\WINDOWS\system32\CNMXLMDR.DLL [1304064 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\WINDOWS\system32\pxcpmL.dll [2155776 2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
HKLM\...\Print\Monitors\PDFescape Desktop Monitor: C:\WINDOWS\system32\spool\DRIVERS\x64\pdfescape desktop_pdfpmon_v.4.12.26.3.dll [932984 2021-03-19] (PDF Tools AG -> PDF Tools AG (hxxp://www.pdf-tools.com))
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\151.0.7922.138\Installer\chrmstp.exe [7602840 2026-08-14] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {9F8A2703-AC1B-4818-BBF5-7F32A115A225} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {2A3F4BDD-A207-4261-B148-930DEB9A24B6} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_453_Plugin.exe [1502776 2020-12-03] (Adobe Inc. -> Adobe)
Task: {4357130F-D3C2-4CA0-889F-C0577C4A6BE7} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{F9C15691-2728-4C83-9A55-C5BA28FC9381} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {E70DE904-D13F-46E5-BC22-E0712F9AE392} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{6D99ABFE-77F3-4EB6-A278-C42CC8E33ED5} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {CA3E7E42-EBC1-4251-B3B2-43FC14349CE7} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {8B35B6D0-A273-4609-B0AA-F792405A3DC0} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [5074848 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc. All rights reserved.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "4ad08d92-797e-4ced-af6c-290f91a208f3" --version "6.25.11093" --silent
Task: {AA846480-2955-4709-A158-9E49BA715F66} - System32\Tasks\CCleanerSkipUAC - pavuky => C:\Program Files\CCleaner\CCleaner.exe [39449504 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {82E4DABD-F3B6-473A-8F3F-96FBF6A2578C} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [3373256 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
Task: {3A1FA7FE-3F79-421F-B14D-AB93E62F6B0A} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{9B71B29D-8B5C-4607-A318-1D9849D64767} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {A6F58269-1234-4E5B-85A1-6F6664047CEC} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {D165D261-FA96-483D-B5AA-554C880025C4} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {C87300B1-EA4F-4071-A473-13B96DB66DA6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [1025096 2026-07-02] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {81A84996-72D0-41B2-A5F9-CBE7D043A92F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [480264 2026-07-02] (HP Inc. -> HP Inc.)
Task: {065F4B8D-4FEF-4DB7-BE6F-3B274D163326} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-08-13] (HP Inc. -> HP Inc.)
Task: {F1F4BFC8-DB66-45CB-B147-B7A0E9376B3C} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-08-13] (HP Inc. -> HP Inc.)
Task: {7B899FF8-3035-400C-801C-93227432BCFD} - System32\Tasks\HPOneAgentRepairTask => C:\ProgramData\Package Cache\{AC8A18BC-B573-49EB-9682-F0ECED135435}\HPOneAgent.exe [1170112 2026-07-20] (HP Inc. -> HP Inc; HP Development Company, L.P.)
Task: {D5B78230-9864-45B6-9A5E-945F9F83BA3D} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2023-03-20] () [File not signed]
Task: {4D5CEA6D-BEB3-4E9D-B08D-9059A9466702} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16782208 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {E3696B14-606D-4A23-ACE4-707251EC6947} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28726080 2026-08-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {6C03D788-2697-4DCC-8AB2-F79D64CAF297} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [74160 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {EA89EA13-19CC-4682-AA3F-D0A0B1BFD22C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28726080 2026-08-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {5AC2806B-4834-4911-8A23-08884482A4C8} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [441632 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {8E5E37D6-50E5-4EF3-8E21-DF3DC51EE9B0} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [441632 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {AF8BA207-9FD2-4551-8D2E-524D70B20FAB} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1370480 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {4E471246-817F-482A-A413-0D399800E281} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16782208 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {27B592DB-5B06-44CA-958F-A9D5C41622CE} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => %SystemRoot%\system32\clipesu.exe (No File)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {9A2887A4-4241-4A02-937B-63EE08DE87FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)
Task: {85E30EB0-C1CF-453B-914B-40B3D7F9E0EB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC Reboot (No File)
Task: {95832760-0DD9-41BA-A95A-C0B54C87B640} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery Reboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {F4B0D169-2EC1-49DD-947D-D3DC351ED71E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0636A128-66F6-41B2-8896-9829C04DEBE0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B72B1F83-4865-4557-ADD7-6035868FCF3B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {701CAD1F-9AF3-4A4E-96C1-05676F612245} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {21B925DF-2917-412F-A107-89FA873C2B32} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2401873512-1259376139-3579719326-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [704640 2026-08-13] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {D0E1B34E-2FAF-42EB-9D11-7D3B03CDA65D} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-08-13] (Mozilla Corporation -> Mozilla Foundation)
Task: {8E406788-4532-4221-BD17-A3CDC7A401E9} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {BED7E824-E8D0-4F34-AD8A-561C04AD9EA5} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2401873512-1259376139-3579719326-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {74683ED9-401C-498D-A129-A2989252C0B8} - System32\Tasks\ReclaimerUpdateFiles_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /UpdateFiles (No File)
Task: {7578E36F-64F1-4C9F-B641-11089F232581} - System32\Tasks\ReclaimerUpdateXML_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /UpdateXML (No File)
Task: {FD2D5EE8-B57C-45C8-82E7-17C347CC3955} - System32\Tasks\Remove AdwCleaner Application => C:\WINDOWS\system32\CMD.EXE [344064 2026-08-13] (Microsoft Windows -> Microsoft Corporation) -> /C DEL /F /Q "C:\Users\pavuk\Downloads\AdwCleaner.exe"
Task: {87DF74D5-3C2E-47DE-8D1A-4B7B1437CF6F} - System32\Tasks\RNUpgradeHelperLogonPrompt_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /prompt os_boot (No File)
Task: {C57A4A0B-3541-4132-9A9C-1CEACF7C8857} - System32\Tasks\RNUpgradeHelperResumePrompt_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /prompt os_resume (No File)
Task: {F6B3018E-C9B7-41CA-969C-732A1C0DE44D} - System32\Tasks\S-1-5-21-2401873512-1259376139-3579719326-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe (No File)
Task: {45BD8758-9680-4291-9F3B-31FAEFE7465B} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [49032 2018-12-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {7A623922-2D6A-4DC0-AF95-79CF968D74B7} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe [63880 2018-12-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {0F325BBF-730E-4BB9-8C04-E28989290DF2} - System32\Tasks\Uninstall AdwCleaner Application => C:\Users\pavuk\Downloads\AdwCleaner.exe [9566696 2026-07-20] (Malwarebytes Inc. -> Malwarebytes)
Task: {9CDD2FC4-F27A-4F27-AD5C-D319F4917890} - System32\Tasks\WD Device Agent Task pavuky => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [727384 2024-08-16] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {8619455B-F773-4CB3-92B6-49C0EE8802F0} - System32\Tasks\WD Discovery Service Task pavuky => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [82264 2024-08-16] (Western Digital Technologies, Inc. -> )
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{01eaf30d-0f97-4cff-95d8-bfe2aa7c513e}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{22ded6cb-3864-4466-88a1-8a935a0bdc2a}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{22ded6cb-3864-4466-88a1-8a935a0bdc2a}: [DhcpDomain] .
Tcpip\..\Interfaces\{465785fe-b270-4c9f-bb65-78f57de96d21}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{465785fe-b270-4c9f-bb65-78f57de96d21}: [DhcpDomain] .
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: tqo98esj.test -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test [2026-08-14]
FF DownloadDir: C:\Users\pavuk\Downloads
FF Homepage: Mozilla\Firefox\Profiles\tqo98esj.test -> seznam.cz
FF NewTab: Mozilla\Firefox\Profiles\tqo98esj.test -> hxxps://securesearch.org/homepage?hp=2&pId=BC180101&iDate=2020-12-28 10:42:45&iid=ae738d36-e6c7-4285-889d-b76c3c845805&bName=
FF Session Restore: Mozilla\Firefox\Profiles\tqo98esj.test -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\tqo98esj.test -> hxxps://home.netatmo.com; hxxps://aukro.cz
FF Extension: (Použijte Google překladač) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2026-07-23]
FF Extension: (Privacy Badger) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2026-07-23]
FF Extension: (uBlock Origin) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\uBlock0@raymondhill.net.xpi [2026-07-23]
FF Extension: (Bulk Media Downloader) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\{72b2e02b-3a71-4895-886c-fd12ebe36ba3}.xpi [2018-03-03]
FF Extension: (No Name) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2026-07-23]
FF ProfilePath: C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\l9169vx7.39mx0k8b.default-release [2026-07-21]
FF ProfilePath: C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox [2025-05-11]
FF Homepage: C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox -> seznam.cz
FF Session Restore: C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox -> is enabled.
FF Extension: (Záložky na iCloudu) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\firefoxdav@icloud.com.xpi [2025-05-11]
FF Extension: (To Google Translate) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2025-05-11]
FF Extension: (Privacy Badger) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2025-05-11]
FF Extension: (URL to QR code) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\jid1-ZSMfwe4lCAw9oQ@jetpack.xpi [2025-05-11]
FF Extension: (Torrentz2 Magnet Links +) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\ohmugin-tzmec@gmail.com.xpi [2025-05-11]
FF Extension: (Titulky++) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\titulkyplus@idzor.cf.xpi [2025-05-11]
FF Extension: (uBlock Origin) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\uBlock0@raymondhill.net.xpi [2025-05-11]
FF Extension: (DuckDuckGo Search) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{37220c34-b538-4f3e-af3d-47aa40026683}.xpi [2025-05-11]
FF Extension: (Search on Google Lens) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{56b8308e-566b-4dc0-9957-f6341ceb8552}.xpi [2025-05-11]
FF Extension: (Video DownloadHelper) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-05-11]
FF Extension: (No Name) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2025-05-11]
FF HKLM\...\Firefox\Extensions: [pdfescape_desktop_conv_v.1@pdfescape.com] - C:\Program Files\PDFescape Desktop\creator\plugins\FirefoxAddin\pdfescape_desktop_conv_v.1@pdfescape.com.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [pdfescape_desktop_conv_v.1@pdfescape.com] - C:\Program Files\PDFescape Desktop\creator\plugins\FirefoxAddin\pdfescape_desktop_conv_v.1@pdfescape.com.xpi => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_453.dll [2020-12-03] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\dtplugin\npDeployJava1.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\plugin2\npjp2.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-06-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-02-17] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_453.dll [2020-12-03] (Adobe Inc. -> )
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2019-07-02] (CANON INC.) [File not signed]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2026-06-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-06-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\pavuk\AppData\Local\Microsoft\Edge\User Data\Default [2026-07-21]
Edge Extension: (Dokumenty Google offline) - C:\Users\pavuk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-10-16]
Edge Extension: (Edge relevant text changes) - C:\Users\pavuk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-04]
Chrome:
=======
CHR Profile: C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default [2026-08-13]
CHR Notifications: Default -> hxxps://nomadsfit.com; hxxps://sdilej.cz; hxxps://www.facebook.com
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Session Restore: Default -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2026-08-13]
CHR Extension: (Video Downloader Plus) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjljdgfhkjbdbkcdkfojleidpldagmao [2025-04-20]
CHR Extension: (Fax.Plus - přijímání a odesílání faxů online) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhbnflghagkonoikejjbjinpbdcjjlbo [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-08-13]
CHR Extension: (Verifee) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\kaamlhinjaceanpdanmagllfeoelcfhl [2024-12-11]
CHR Extension: (Video Download Helper) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2026-08-13]
CHR Extension: (Video Downloader PLUS) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\njgehaondchbmjmajphnhlojfnbfokng [2024-07-27]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-03-15] [UpdateUrl:0] <==== ATTENTION
CHR HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
Opera:
=======
OPR Profile: C:\Users\pavuk\AppData\Roaming\Opera Software\Opera Stable [2026-07-21]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=o ... utEncoding}
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft, Inc. -> ArcSoft Inc.)
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
S4 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-03] (Adobe Inc. -> Adobe)
S4 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1085856 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
S4 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe [9728 2024-08-18] (GuinpinSoft inc) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13546384 2026-08-04] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncHelper.exe [3524664 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
S3 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2015-03-27] (Firebird Project) [File not signed]
S3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [3829760 2015-03-27] (Firebird Project) [File not signed]
S4 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [82216 2020-12-29] (Mixbyte Inc -> Freemake)
R2 hp-one-agent-service; C:\Program Files\HP\HP One Agent\hp-one-agent-service.exe [2457512 2026-06-15] (HP Inc. -> HP Inc; HP Development Company, L.P.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\AppHelperCap.exe [932032 2026-07-08] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\DiagsCap.exe [929984 2026-07-08] (HP Inc. -> HP Inc.)
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [478056 2018-06-01] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\NetworkCap.exe [925888 2026-07-08] (HP Inc. -> HP Inc.)
S4 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243720 2026-08-13] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\SysInfoCap.exe [1029832 2026-07-08] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe [639784 2025-10-01] (HP Inc. -> HP Inc.)
S3 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460992 2025-04-18] (Canon Inc. -> )
S3 luminati_net_updater_win_formatfactory_pcfreetime_com; C:\Program Files\FormatFactory\net_updater64.exe [10302056 2026-03-20] (Bright Data Ltd -> BrightData Ltd. (certified))
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpDefenderCoreService.exe [2113568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.196.0929.0005\OneDriveUpdaterService.exe [3867704 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
S4 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [372736 2024-01-03] (Western Digital Technologies, Inc.) [File not signed]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\NisSrv.exe [5183648 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MsMpEng.exe [291352 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.225\WsAppService.exe [473824 2017-05-05] (Wondershare Technology Co.,Ltd -> Wondershare)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AKCCID; C:\WINDOWS\System32\drivers\AKCCID.sys [87208 2024-03-26] (Alcorlink Corp. -> Generic)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [143904 2020-05-11] (Alcorlink Corp. -> )
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [518664 2020-11-03] (Avast Software s.r.o. -> AVAST Software)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-06-23] (Microsoft Corporation) [File not signed]
S3 e2eVAWdm; C:\WINDOWS\System32\drivers\VAud_WDM.sys [112696 2017-07-12] (ARTRAY CO., LTD. -> e2eSoft)
R2 googledrivefs31931; \??\C:\Program Files\Google\Drive File Stream\Drivers\31931\googledrivefs31931.sys [386256 2025-05-05] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1421dec2010cc057\x64\hpcustomcapdriver.sys [18984 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-29] (Microsoft Windows -> Microsoft Corporation)
S3 ManyCam; C:\WINDOWS\system32\DRIVERS\mcvidrv.sys [65448 2023-01-17] (ManyCam ULC -> ManyCam ULC)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2018-05-04] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R2 npf; \??\C:\WINDOWS\system32\drivers\npf.sys [36600 2018-12-07] (Riverbed Technology, Inc. -> )
R2 speedfan; \??\C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> )
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2018-05-04] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 UsbNcm; C:\WINDOWS\System32\DriverStore\FileRepository\usbncm.inf_amd64_507538fd4ad98089\UsbNcm.sys [212992 2026-08-13] (Microsoft Windows -> )
S3 VCamSDK; C:\WINDOWS\system32\DRIVERS\VCamSDK.sys [1090904 2019-12-22] (Shanghai Yitu Information Technology Co.,Ltd. -> e2eSoft)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-08-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [25704 2022-10-03] (WDKTestCert user,132375440089837053 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [625688 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [111640 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40208 2026-06-18] (HP Inc. -> HP)
R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_bce55ac535cb3902\WSDScan.sys [61440 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-08-14 19:28 - 2026-08-14 19:30 - 000040954 _____ C:\Users\pavuk\Downloads\FRST.txt
2026-08-14 19:26 - 2026-08-14 19:26 - 002448384 _____ (Farbar) C:\Users\pavuk\Downloads\FRST64.exe
2026-08-14 19:17 - 2026-08-14 19:17 - 000388608 _____ (Trend Micro Inc.) C:\Users\pavuk\Downloads\hijackthis.exe
2026-08-13 12:59 - 2026-08-13 12:59 - 000747294 _____ C:\WINDOWS\system32\perfh005.dat
2026-08-13 12:59 - 2026-08-13 12:59 - 000170868 _____ C:\WINDOWS\system32\perfc005.dat
2026-08-13 12:41 - 2026-08-14 12:46 - 000003714 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{44DC640E-0158-49BF-8CF3-5693EA9B06D6}
2026-08-13 12:41 - 2026-08-14 12:46 - 000003588 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{7183DF2B-E4A9-4C75-9F16-3982355AB668}
2026-08-13 11:34 - 2026-08-14 17:56 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-08-13 07:26 - 2026-08-13 07:26 - 000038723 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-08-13 07:26 - 2026-08-13 07:26 - 000038723 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-07-26 10:50 - 2026-07-26 11:00 - 4191288441 _____ C:\Users\pavuk\Downloads\Bílá+paní+1965+CZ+dabing+1080p+FHD.mp4
2026-07-23 18:43 - 2026-07-23 18:43 - 000000000 ____D C:\Users\pavuk\Downloads\BILA LUCIE - [1992] - Missariel (MP3.CBR.320)
2026-07-22 02:37 - 2026-07-22 02:42 - 2185388019 _____ C:\Users\pavuk\Downloads\Ja+milujem,+ty+miluješ+1980+SK+dabing+1080p+FHD.mkv
2026-07-22 01:41 - 2026-07-22 01:43 - 962213336 _____ C:\Users\pavuk\Downloads\Příliš+hlučná+samota.mkv
2026-07-21 16:47 - 2026-07-21 16:47 - 000000000 ____D C:\Users\pavuk\AppData\Local\MicrosoftEdge
2026-07-21 16:32 - 2026-08-14 19:29 - 000000000 ____D C:\FRST
2026-07-21 16:25 - 2026-07-21 16:25 - 000001722 _____ C:\Users\pavuk\OneDrive\Plocha\Rkill.txt
2026-07-21 00:47 - 2026-07-21 15:49 - 000000000 ____D C:\AdwCleaner
2026-07-20 19:24 - 2026-07-20 19:24 - 009566696 _____ (Malwarebytes) C:\Users\pavuk\Downloads\AdwCleaner.exe
2026-07-20 19:23 - 2026-07-21 16:07 - 000002576 _____ C:\WINDOWS\system32\Tasks\Remove AdwCleaner Application
2026-07-20 19:23 - 2026-07-21 16:07 - 000002558 _____ C:\WINDOWS\system32\Tasks\Uninstall AdwCleaner Application
2026-07-20 18:44 - 2026-07-20 18:44 - 000000000 ____D C:\WINDOWS\Minidump
2026-07-20 08:09 - 2026-07-20 08:09 - 000000000 ____D C:\WINDOWS\Panther
2026-07-19 19:27 - 2026-07-19 19:27 - 000004977 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-07-19 19:27 - 2026-07-19 19:27 - 000004647 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-07-19 19:27 - 2026-07-19 19:27 - 000004647 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-07-19 19:27 - 2026-07-19 19:27 - 000004647 _____ C:\WINDOWS\system32\ResPriImageList
2026-07-19 19:27 - 2026-07-19 19:27 - 000004647 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-07-19 19:27 - 2026-07-19 19:27 - 000004558 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-07-19 19:27 - 2026-07-19 19:27 - 000004558 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-07-19 19:26 - 2026-07-19 19:26 - 000087226 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-07-19 19:26 - 2026-07-19 19:26 - 000087226 _____ C:\WINDOWS\system32\ctac.json
2026-07-19 03:56 - 2026-07-19 03:56 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-08-14 19:20 - 2019-10-31 21:43 - 000000000 ____D C:\Users\pavuk\AppData\Local\D3DSCache
2026-08-14 19:19 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-08-14 19:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-08-14 18:16 - 2025-06-23 17:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-08-14 12:40 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-08-14 11:48 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-08-14 02:12 - 2023-01-22 19:24 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-08-13 17:48 - 2020-10-05 19:59 - 000000000 ____D C:\Users\pavuk\Downloads\seidl transport
2026-08-13 17:32 - 2022-12-18 22:02 - 000000000 ____D C:\Users\pavuk\OneDrive\Dokumenty\Soubory Outlooku
2026-08-13 17:32 - 2020-04-25 21:55 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Microsoft\Excel
2026-08-13 17:28 - 2019-10-31 21:42 - 000000000 ____D C:\Users\pavuk\AppData\Local\Packages
2026-08-13 13:12 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-08-13 12:59 - 2025-06-23 17:51 - 001841748 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-08-13 12:59 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-08-13 12:55 - 2025-06-23 17:51 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-08-13 12:55 - 2025-06-23 17:48 - 000006862 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-08-13 12:55 - 2025-05-11 15:08 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-08-13 12:55 - 2025-05-11 15:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-08-13 12:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-08-13 12:54 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-08-13 12:47 - 2018-11-07 08:47 - 000000000 ____D C:\ProgramData\Packages
2026-08-13 12:41 - 2026-01-03 14:37 - 000390784 _____ (Mozilla Foundation) C:\Users\pavuk\OneDrive\Plocha\Firefox.exe
2026-08-13 12:41 - 2025-06-23 17:51 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-08-13 12:41 - 2025-05-11 15:08 - 000001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-08-13 11:34 - 2025-06-23 17:46 - 000595696 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-08-13 11:33 - 2026-05-15 02:31 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-08-13 11:33 - 2025-12-10 21:43 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-08-13 11:33 - 2025-07-08 22:15 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-08-13 11:33 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-08-13 11:33 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-08-13 11:33 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\DiagTrack
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-08-13 11:33 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-08-13 07:44 - 2023-07-19 17:54 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-08-13 07:24 - 2025-06-23 17:50 - 003375104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-08-13 07:12 - 2018-11-07 08:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-08-13 07:11 - 2019-01-09 05:12 - 000000000 ____D C:\Program Files\HP
2026-08-13 07:09 - 2021-03-19 22:33 - 000000000 ____D C:\Program Files\Microsoft Office
2026-07-27 19:16 - 2021-09-24 08:50 - 000002180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2026-07-26 11:03 - 2025-02-28 21:05 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\vlc
2026-07-24 16:56 - 2020-11-05 22:42 - 000000000 ____D C:\Users\pavuk\AppData\Local\CrashDumps
2026-07-23 22:30 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-07-22 18:16 - 2019-10-31 22:00 - 000000000 ____D C:\Users\pavuk\AppData\Local\Comms
2026-07-22 09:40 - 2019-07-23 19:45 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2026-07-21 17:06 - 2019-11-16 19:15 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\uTorrent
2026-07-21 16:59 - 2025-06-23 17:51 - 000002256 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - pavuky
2026-07-21 16:59 - 2020-04-03 14:57 - 000000000 ____D C:\Program Files\CCleaner
2026-07-21 16:07 - 2025-06-23 17:51 - 000002836 _____ C:\WINDOWS\system32\Tasks\HPOneAgentRepairTask
2026-07-21 16:07 - 2025-06-23 17:51 - 000002262 _____ C:\WINDOWS\system32\Tasks\StartCN
2026-07-21 16:07 - 2025-06-23 17:51 - 000002176 _____ C:\WINDOWS\system32\Tasks\StartDVR
2026-07-21 16:06 - 2025-06-23 17:51 - 000003542 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2026-07-21 15:56 - 2025-11-13 01:59 - 000000000 ____D C:\Users\pavuk\AppData\LocalWondershare
2026-07-21 15:56 - 2020-12-06 12:36 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Wondershare
2026-07-21 15:56 - 2020-04-03 05:35 - 000000000 ____D C:\Users\pavuk\AppData\Local\Wondershare
2026-07-21 15:53 - 2020-10-06 18:18 - 000000000 ____D C:\ProgramData\SoftPerfect
2026-07-21 15:52 - 2025-03-13 01:22 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Nero
2026-07-21 15:52 - 2025-03-13 01:22 - 000000000 ____D C:\Users\pavuk\AppData\Local\Nero
2026-07-21 15:49 - 2019-10-31 22:03 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Hewlett-Packard
2026-07-21 15:49 - 2019-01-09 05:12 - 000000000 ____D C:\ProgramData\HP
2026-07-21 15:49 - 2019-01-09 05:12 - 000000000 ____D C:\Program Files (x86)\HP
2026-07-21 15:49 - 2018-12-25 02:48 - 000000000 ___HD C:\hp
2026-07-21 12:05 - 2019-07-23 19:46 - 000000000 ____D C:\ProgramData\Package Cache
2026-07-20 17:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-07-20 17:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2026-07-20 17:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-07-20 10:13 - 2025-09-04 22:19 - 000000000 ____D C:\ProgramData\CanonIJPLM
2026-07-20 01:45 - 2019-10-31 21:42 - 000000000 ____D C:\Users\pavuk\AppData\Local\ConnectedDevicesPlatform
2026-07-19 12:07 - 2019-10-31 23:14 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-07-19 04:00 - 2019-10-31 23:14 - 228534800 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Files in the root of some directories ========
2020-12-29 12:51 - 2020-12-29 13:01 - 000000004 _____ () C:\ProgramData\lock.dat
2020-12-29 12:52 - 2020-12-29 13:01 - 000000004 _____ () C:\ProgramData\rc.dat
2020-12-29 12:51 - 2020-12-29 12:51 - 000000008 _____ () C:\ProgramData\ts.dat
2013-02-26 08:34 - 2013-02-26 08:34 - 000234168 _____ (Beepa P/L) C:\Program Files\fraps32.dll
2013-02-26 08:34 - 2013-02-26 08:34 - 000068792 _____ (Beepa P/L) C:\Program Files\fraps64.dat
2013-02-26 08:34 - 2013-02-26 08:34 - 000186552 _____ (Beepa P/L) C:\Program Files\fraps64.dll
2024-08-18 19:01 - 2024-08-19 15:38 - 000099384 _____ () C:\Users\pavuk\AppData\Roaming\inst.exe
2024-08-18 19:01 - 2024-08-19 15:38 - 000007859 _____ () C:\Users\pavuk\AppData\Roaming\pcouffin.cat
2024-08-18 19:01 - 2024-08-19 15:38 - 000001167 _____ () C:\Users\pavuk\AppData\Roaming\pcouffin.inf
2024-08-18 19:01 - 2024-08-19 15:38 - 000000055 _____ () C:\Users\pavuk\AppData\Roaming\pcouffin.log
2024-08-18 19:01 - 2024-08-19 15:38 - 000082816 _____ (VSO Software) C:\Users\pavuk\AppData\Roaming\pcouffin.sys
2022-11-05 10:28 - 2024-11-06 23:32 - 000007601 _____ () C:\Users\pavuk\AppData\Local\Resmon.ResmonCfg
2021-09-23 19:23 - 2021-09-23 19:34 - 000017408 _____ () C:\Users\pavuk\AppData\Local\WebpageIcons.db
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-08-2026 01
Ran by pavuky (14-08-2026 19:33:07)
Running from C:\Users\pavuk\Downloads
Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) (2025-06-23 15:52:05)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2401873512-1259376139-3579719326-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-2401873512-1259376139-3579719326-503 - Limited - Disabled)
Guest (S-1-5-21-2401873512-1259376139-3579719326-501 - Limited - Disabled)
pavuky (DisplayName: l** **v) (S-1-5-21-2401873512-1259376139-3579719326-1001 - Administrators - Enabled) => C:\Users\pavuk
WDAGUtilityAccount (S-1-5-21-2401873512-1259376139-3579719326-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Enabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
3uTools(32bit) (HKLM-x32\...\3uToolsV3_x86) (Version: 3.02.012 - Shenzhen Aidapu Network Technology Co.,Ltd.)
Acronis Drivers (HKLM\...\{3BB511DE-CF00-4723-A89C-D7B7D6FADF11}) (Version: 27.0.39676 - Acronis) Hidden
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 25.001.21223 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.453 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Aegisub 3.2.2 (HKLM-x32\...\{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1) (Version: 3.2.2 - Aegisub Team)
Aegisub 3.4.2 (64bitový) (HKLM\...\{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1) (Version: 3.4.2 - Aegisub Team)
AMD Radeon Settings (HKLM\...\WUCCCApp) (Version: 2018.1218.1230.22499 - Advanced Micro Devices, Inc.)
ArcSoft WebCam Companion 4 (HKLM-x32\...\{AC5253C5-E282-4017-9740-DDA6ECF5C203}) (Version: 4.0.0.374 - ArcSoft)
aTube Catcher verze 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avidemux 2.4 (HKLM-x32\...\Avidemux 2.4) (Version: 2.4.0.3322 - )
Avidemux 2.7 - 32 bits (32-bit) (HKLM-x32\...\Avidemux 2.7 - 32 bits) (Version: 2.7.4.190815 - )
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.7.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX2 (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX2) (Version: 2.0.5.3 - Canon Inc.)
Canon IJ Printer Assistant Tool (HKLM-x32\...\Canon IJ Printer Assistant Tool) (Version: 1.65.1.09 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.4.0.16 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.4 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.8.5 - Canon Inc.)
Canon TS3100 series Elektronická příručka (HKLM-x32\...\Canon TS3100 series Elektronická příručka) (Version: 1.4.0 - Canon Inc.)
Canon TS3100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_TS3100_series) (Version: 1.01 - Canon Inc.)
Canon Wi-Fi Connection Assistant (HKLM-x32\...\Wi-Fi Connection Assistant) (Version: 1.70.0 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 6.25 - Piriform)
Datacho (HKLM-x32\...\{4E8DE3AB-4751-40BE-9472-DBF23F2A0B21}}_is1) (Version: 1.4.0.160 - WebDeal s.r.o.)
DownloadHelper CoApp (HKLM-x32\...\DownloadHelper CoApp) (Version: 2.0.19.0 - ACLAP)
Easy CD-DA Extractor 16 (HKLM-x32\...\Easy CD-DA Extractor 16) (Version: 16.0.9 - Poikosoft)
FastShare.cz verze 2.4.0 (HKLM-x32\...\FastShare.cz_is1) (Version: 2.4.0 - )
Firebird 2.5.4.26856 (Win32) (HKLM-x32\...\FBDBServer_2_5_is1) (Version: 2.5.4.26856 - Firebird Project)
FormatFactory 5.17.0.0 (HKLM-x32\...\FormatFactory) (Version: 5.17.0.0 - Free Time)
Free MP3 Cutter 2.1 (HKLM-x32\...\{847E0734-4457-4B48-BF49-998D1CF2CFA1}_is1) (Version: 2.1 - PolySoft Solutions)
Freemake Video Converter verze 4.1.13 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.13 - Mixbyte Inc.)
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 129.0.1.0 - Google LLC)
Google Earth Pro (HKLM\...\{E3B69BB6-FFD8-441C-933E-BB8A3136ED8F}) (Version: 7.3.7.1155 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 151.0.7922.138 - Google LLC)
HP Audio Switch (HKLM-x32\...\{3A5141D4-47DB-4302-9B1C-272BE585BC8A}) (Version: 1.0.179.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{016FBF6D-AEDE-4D33-87B4-DF6815EF674A}) (Version: 1.4.0.485 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{35556CCA-F14E-48F3-93F4-E29C4B3DBE30}) (Version: 1.4.485.0 - HP Inc.)
HP One Agent (HKLM\...\{AC8A18BC-B573-49EB-9682-F0ECED135435}) (Version: 1.3.345.6640 - HP Inc.)
HP One Agent (HKLM\...\{EA7416A9-13A2-4676-85AA-1D2C66E6A2A0}) (Version: 1.3.345.6640 - HP Inc.) Hidden
HP Registration Service (HKLM-x32\...\{280936C6-5D40-4AE1-9C13-F44E6208DDC4}) (Version: 1.0.0.65 - HP Inc.) Hidden
iCloud Outlook (HKLM\...\{58EF239A-565E-4854-9769-DE7BB82ED781}) (Version: 11.4.0.12 - Apple Inc.)
Inviska MKV Extract verze 11.0 (HKLM\...\{215C3EFC-2BE8-4A5A-9A1F-982C15E47CC9}_is1) (Version: 11.0 - Inviska Software)
Java 8 Update 231 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180231F0}) (Version: 8.0.2310.11 - Oracle Corporation)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0.1 - AppWork GmbH)
K-Lite Codec Pack 17.5.0 Standard (HKLM-x32\...\KLiteCodecPack_is1) (Version: 17.5.0 - KLCP)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Macro Recorder 5.8.0 (HKLM-x32\...\Macro Recorder_is1) (Version: 5.8.0 - Jitbit Software)
MakeMKV v1.17.7 (HKLM-x32\...\MakeMKV) (Version: v1.17.7 - GuinpinSoft inc)
MediaInfo 25.03 (HKLM\...\MediaInfo) (Version: 25.03 - MediaArea.net)
Microsoft .NET Host - 8.0.2 (x86) (HKLM-x32\...\{AFC83F5E-A70F-40EB-B8A0-E1F7B83ED30F}) (Version: 64.8.8795 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.2 (x86) (HKLM-x32\...\{8B3CFFA2-B674-4DB3-B0FF-F23EA1EDE9D0}) (Version: 64.8.8795 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.2 (x86) (HKLM-x32\...\{C259804F-E2F8-4240-8276-83302ABF17AE}) (Version: 64.8.8795 - Microsoft Corporation) Hidden
Microsoft 365 Apps pro velké organizace - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.20228.20158 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 151.0.4129.78 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 151.0.4129.78 - Microsoft Corporation) Hidden
Microsoft Office Professional 2019 - cs-cz (HKLM\...\Professional2019Retail - cs-cz) (Version: 16.0.20228.20158 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.196.0929.0005 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{650c9b4a-60ec-4e4e-8d8e-32d85ce3b7c5}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.50.35719 (HKLM\...\{AECD4ED0-8A3B-41E9-92D1-6BEE0374CCAF}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.50.35719 (HKLM\...\{61B44572-8722-4DAF-8ACF-8E742D30BCC5}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719 (HKLM-x32\...\{91ee571b-0e8a-4c65-9eaf-2e2f5fc60c00}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.2 (x86) (HKLM-x32\...\{3abfc6d6-ddca-44fd-a2b1-d8fc2b575ad6}) (Version: 8.0.2.33318 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.2 (x86) (HKLM-x32\...\{8396E7E6-F535-4E6F-9E2B-CB78A570547A}) (Version: 64.8.8806 - Microsoft Corporation) Hidden
MKVCleaver 64 bit (HKLM\...\{32886311-ABB4-45BE-8274-1F53641B2AC7}_is1) (Version: 0.8.0.0 - Ilia Bakhmoutski)
MKVToolNix 9.9.0 (64bit) (HKLM-x32\...\MKVToolNix) (Version: 9.9.0 - Moritz Bunkus)
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 153.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 138.0.1 - Mozilla)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20131.20112 - Microsoft Corporation) Hidden
PDFescape Desktop Asian Fonts Pack (HKLM\...\{D81F9B76-24DE-4DFF-8869-B31289B36FAC}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Convert Module (HKLM\...\{CC6DC81A-06C1-4933-8117-794710375AD3}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Create Module (HKLM\...\{CCBE3E06-E721-410C-8D36-EDEF37F56743}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Edit Module (HKLM\...\{00CEFC51-9626-4E7E-920B-4757DF0B9491}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Forms Module (HKLM\...\{87391E47-A919-4E89-8D07-EA259AD63DB8}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Insert Module (HKLM\...\{8B686E57-76A7-4330-A981-4AB69DF7A568}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Review Module (HKLM\...\{42EF2557-7C52-40EE-81CF-B658B64C7095}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Secure Module (HKLM\...\{B9EB4384-5195-4ED6-BAB0-661FC5B36E14}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop View Module (HKLM\...\{F108BACE-2CE0-447B-A953-68E2019F7B66}) (Version: 4.0.24.4617 - Red Software) Hidden
PDF-XChange Editor (HKLM\...\{29487948-D54A-4EE4-800D-E205919659C8}) (Version: 8.0.343.0 - Tracker Software Products (Canada) Ltd.) Hidden
PDF-XChange Editor (HKLM-x32\...\{911b790c-3fcf-4ecc-b0d4-8a573a6004b0}) (Version: 8.0.343.0 - Tracker Software Products (Canada) Ltd.)
PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 24.08.27.0 - Kakao Corp.)
PSPad editor (HKLM-x32\...\PSPad editor 32bit_is1) (Version: 5.0.7.775 - Jan Fiala)
Registrace tiskárny (HKLM-x32\...\Canon EISRegistration) (Version: 1.7.0 - Canon Inc.)
ReNamer (HKLM-x32\...\ReNamer_is1) (Version: 7.3.0.0 - den4b Team)
Revo Uninstaller Pro 4.2.3 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.2.3 - VS Revo Group, Ltd.)
SmartShare (HKLM-x32\...\{BAB337AE-DD9E-45C3-BED6-0EE4732AEC60}) (Version: 2.3.1712.1201 - LG Electronics Inc.)
Subtitle Edit 3.5.14 (HKLM\...\SubtitleEdit_is1) (Version: 3.5.14.1 - Nikse)
Tacho+Personal (HKLM-x32\...\{BA75B93A-AA3C-4B4F-B942-C078432E9A10}) (Version: 2.3.4.10417 - SoftProject AG CH-9000 St.Gallen) Hidden
TachoPlusFreeDriver (HKLM-x32\...\TachoPlusFreeDriver) (Version: 2.3.4.10417 - SoftProject)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
VdhCoApp 1.6.3 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version: - DownloadHelper)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)
vs2015_redist x86 (HKLM-x32\...\{BD46163A-0331-4A61-B65A-7B66D7C93F8E}) (Version: 1.0.0.0 - Realnetworks) Hidden
WD Discovery (HKLM-x32\...\WDDiscovery) (Version: 5.0.589 - Western Digital Technologies, Inc.)
WD Drive Utilities (HKLM-x32\...\{45BDDAE8-E34D-46D7-AC23-39C567A719B9}) (Version: 2.1.2.167 - Western Digital Technologies, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{f114c741-7aa6-4296-93f4-75082754ec24}) (Version: 2.1.2.167 - Western Digital Technologies, Inc.)
WD SES Driver Setup (HKLM-x32\...\{D9ABF771-729C-471F-A6DF-1010527DB376}) (Version: 2.1.0 - Western Digital) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.92.0 - Winamp SA)
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
XnView 2.49.3 (HKLM-x32\...\XnView_is1) (Version: 2.49.3 - Gougelet Pierre-e)
Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-02-20] ()
Adobe Reader Touch -> C:\Program Files\WindowsApps\AdobeSystemsIncorporated.AdobeReader_3.1.8.7675_x86__ynb6jyjzte8ga [2020-10-01] (Adobe Systems Incorporated)
Convert HEIC to JPG -> C:\Program Files\WindowsApps\SoftOrbits.ConvertHEICtoJPG_10.1.0.0_x64__9808nkjsftezr [2023-12-25] (SoftOrbits)
ELAN Touchpad Setting -> C:\Program Files\WindowsApps\ELANMicroelectronicsCorpo.ELANTouchpadSetting_11.2.63.0_x64__stws0m115j6hg [2022-04-14] (ELAN Microelectronics Corporation)
HP Audio Center -> C:\Program Files\WindowsApps\AD2F1837.HPAudioCenter_1.11.218.0_x64__v10z8vjag6ke6 [2022-04-14] (HP Inc.)
HP Inc. Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_2.0.11.0_x64__v10z8vjag6ke6 [2026-02-19] (HP Inc.)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.4.481.0_x86__v10z8vjag6ke6 [2019-07-23] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_3.2.0.0_x64__v10z8vjag6ke6 [2026-08-13] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.6.1.0_x64__v10z8vjag6ke6 [2026-07-20] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_166.1.1185.0_x64__v10z8vjag6ke6 [2026-08-13] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.54.3.0_x64__v10z8vjag6ke6 [2026-07-20] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6 [2026-05-04] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa [2026-03-05] (Apple Inc.) [Startup Task]
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-08-13] ()
Microsoft 365 companion apps -> C:\Program Files\WindowsApps\Microsoft.M365Companions_2.2512.12000.0_x64__8wekyb3d8bbwe [2026-01-08] (Microsoft Corporation)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-06-23] (Microsoft Corp.)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-08-13] ()
Narrator Extension - Excel -> C:\Program Files\WindowsApps\MicrosoftWindows.NarratorScript.Excel_1.0.14.0_neutral__cw5n1h2txyewy [2026-04-21] (Microsoft Windows)
Narrator Extension - Word -> C:\Program Files\WindowsApps\MicrosoftWindows.NarratorExtension-Word_2.0.3.0_neutral__cw5n1h2txyewy [2026-05-14] (Microsoft Windows)
NarratorExtension - Outlook -> C:\Program Files\WindowsApps\MicrosoftWindows.NarratorScript.Outlook_2.0.3.0_neutral__cw5n1h2txyewy [2026-05-14] (Microsoft Windows)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-08-13] ()
PDF X -> C:\Program Files\WindowsApps\6760NGPDFLab.PDFX_1.4.26.0_x64__sbe4t8mqwq93a [2026-04-29] (NG PDF Lab)
PhotoWindow -> C:\Program Files\WindowsApps\61711masaxjr.PhotoWindow_3.0.0.1_neutral__jwmqhy3chykh8 [2024-03-17] (Miyabi Software Dev.)
sMedio True DVD for HP -> C:\Program Files\WindowsApps\0E3921EB.sMedioTrueDVDforHP_1.1.160.0_x64__agwrg61xdd7p4 [2024-06-01] (sMedio Inc.)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2631.102.0_x64__cv1g1gvanyjgm [2026-08-13] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.3.1.0_x64__8wekyb3d8bbwe [2026-08-13] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{7d043d4e-4259-f459-3630-7b434fd7752c}\localserver32 -> C:\Program Files\HP\HP Media Network\HPMediaNetwork.exe (HP Inc. -> HP Inc.)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{CA65F600-9ABF-4B30-9809-343190721BC2} -> [Fotky na iCloudu] => C:\Users\pavuk\OneDrive\Obrázky\iCloud Photos\Photos
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{ED90173A-3B4C-4E7E-B9CF-79714425D4B5}\InprocServer32 -> C:\Program Files (x86)\PSPad editor\pspshellx64.dll () [File not signed]
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-02-17] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No File
ContextMenuHandlers1: [PDFescapeDesktop_ManagerExt] -> {D3C28D54-72B8-4B8D-B204-157EFA9BF3E7} => -> No File
ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-11-01] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2019-03-29] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-2401873512-1259376139-3579719326-1001: [EditWithPSPad] -> {ED90173A-3B4C-4E7E-B9CF-79714425D4B5} => C:\Program Files (x86)\PSPad editor\pspshellx64.dll [2014-11-02] () [File not signed]
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [VIDC.FPS1] => C:\WINDOWS\system32\frapsv64.dll [71680 2013-02-26] (Beepa P/L) [File not signed]
HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-18] (Fox Magic Software) [File not signed]
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [65536 2013-02-26] (Beepa P/L) [File not signed]
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2026-07-20 18:24 - 2026-07-20 18:24 - 000440320 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LauncherSDK\551efa932d3826e0e2b40c00ad1f4467\LauncherSDK.ni.dll
2026-07-20 18:24 - 2026-07-20 18:24 - 000038400 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Logging\50e79d78dcafde1e3f3eea72115ed09f\Logging.ni.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\OneDriveTemp:{68003400-7300-4F00-5300-690049006C00} [620]
AlternateDataStreams: C:\OneDriveTemp:{6D006200-5200-6F00-5700-6F0061003900} [576]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\Log Files:{68003400-7300-4F00-5300-690049006C00} [620]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop:{68003400-7300-4F00-5300-690049006C00} [576]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop:{6D006200-5200-6F00-5700-6F0061003900} [576]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://securesearch.org/homepage?hp=2&pId=BC180101&iDate=2020-12-28 10:42:45&iid=ae738d36-e6c7-4285-889d-b76c3c845805&bName=
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {CC2BC045-ED69-423A-8680-78EB23C27B96} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> {CC2BC045-ED69-423A-8680-78EB23C27B96} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001 -> {CC2BC045-ED69-423A-8680-78EB23C27B96} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_231\bin\ssv.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
BHO: No Name -> {9AF15867-1D90-423B-9853-E99761714165} -> No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_231\bin\jp2ssv.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.)
BHO-x32: PDFescape Desktop Helper -> {9AF15867-1D90-423B-9853-E99761714165} -> C:\Program Files (x86)\PDFescape Desktop\creator\plugins\IEAddin\creator-ie-helper.dll [2019-07-01] (PDFescape -> Red Software)
Toolbar: HKLM - No Name - {A6D4ADF0-4C82-4712-B9B8-69EE9CF06462} - No File
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.)
Toolbar: HKLM-x32 - PDFescape Desktop Toolbar - {A6D4ADF0-4C82-4712-B9B8-69EE9CF06462} - C:\Program Files (x86)\PDFescape Desktop\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-07-01] (PDFescape -> Red Software)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\sharepoint.com -> hxxps://dar20428422-files.sharepoint.com
IE restricted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\kmplayer.com -> kmplayer.com
IE restricted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\kmpmedia.net -> player.kmpmedia.net
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2018-09-15 09:31 - 2020-12-06 19:30 - 000001000 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 player.kmpmedia.net
127.0.0.1 www.activation.freemake.com
127.0.0.1 activation.freemake.com
127.0.0.1 fvc_stat.freemake.com
127.0.0.1 secure.mobiledit.com
2020-05-03 02:02 - 2024-10-02 12:19 - 000000498 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.137.1 ludva.mshome.net # 2029 10 1 1 10 19 7 960
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 10.0.0.138
Windows Firewall is disabled.
Network Binding:
=============
Wi-Fi: Realtek RTL8821CE 802.11ac PCIe Adapter -> rtwlane.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\Control Panel\Desktop\\Wallpaper ->
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 4) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\AppData\Roaming\uTorrent\uninstall.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\Downloads\axife_5fe916a7f3e60\FileSetup-v29.14.05.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\Downloads\axife_5fe9174d073aa\FileSetup-v29.14.05.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\AppData\Roaming\Axife Standard\FileSetup-v29.14.05.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\Downloads\5fe93e6505bec__Automatic-Mouse-and-Keyboard-6162-With-Crack-Latest-2021\Automatic-Mouse-and-Keyboard-6162-With-Crack-Latest-2021\5fe93e64c92985fe93-files\setup_x86_x64_install.exe
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\StartupFolder: => "Hodiny_T.lnk"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "NetWorx"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "ArcSoft Connection Service"
HKLM\...\StartupApproved\Run32: => "CanonQuickMenu"
HKLM\...\StartupApproved\Run32: => "WDDiscovery"
HKLM\...\StartupApproved\Run32: => "DriveUtilitiesHelper"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "Opera Browser Assistant"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "17964C220E9DA0D37FCF315CDC911E8A51B3BF9C._service_run"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "AshSnap"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "GoogleDriveFS"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_02305D6906FA6EC449BDD7C88E7783A3"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{D56D2201-4302-4327-82F2-B68A88547C56}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{2E9E7E81-7150-4DF5-A445-087D6DE452E2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C0FF1420-E546-4509-B5F1-1C56FA77AFA2}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{48F08F9D-80C9-40E4-9A0E-F5927EF3050A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{94A12505-C370-486E-A971-4E6AEDE7DC93}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{43872B87-4334-44E0-97F2-CCF1BA4081AD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0B936EF0-D742-4E2D-A2F0-891CB7484513}] => (Allow) C:\Program Files\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{77E2CA76-F42A-4218-B3CC-C285C5F9A16B}] => (Allow) C:\Program Files\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{4C5557AA-BA1E-48E4-A9CC-1E3C57843997}] => (Allow) C:\Program Files\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{5324AFF2-0344-407D-A68C-9ACBCF236D1D}] => (Allow) C:\Users\pavuk\OneDrive\Plocha\utorrent_2.2.1.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{BD8DA65E-6869-44C7-9E75-3B0205BFD610}] => (Allow) C:\Users\pavuk\OneDrive\Plocha\utorrent_2.2.1.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{EDF6B809-96F5-4677-A8E6-788B8CDA02C0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{38836E42-454D-48B5-833B-D953675540E2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C3EDE34E-1185-42CA-A294-CBA211DAA1A9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{60C2E295-E3BA-4A2E-8DEE-6BF6A38D0EC8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B286830C-8352-4FA0-B2D0-6D53A43C6891}] => (Allow) LPort=27015
FirewallRules: [{AB80D9B1-55EC-4DA1-B5BA-8DC8F1C91163}] => (Allow) LPort=27015
FirewallRules: [{1FFA0689-BCC8-49C0-A026-1F449BE019D9}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Winamp SA -> Winamp SA)
FirewallRules: [{48611094-C59C-4F8C-AB92-0B419BBC7AF4}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Winamp SA -> Winamp SA)
FirewallRules: [{1EE36E83-26A0-4E2E-BAEF-E294E8E1D04F}] => (Allow) C:\Program Files (x86)\Canon\Wi-Fi Connection Assistant\cnwidadr2.exe (Canon Inc. -> CANON INC.)
FirewallRules: [{637F6DE5-3517-4221-B591-9A4CDA4A5290}] => (Allow) C:\Program Files (x86)\Canon\Wi-Fi Connection Assistant\cnwiddsu\cnwiddsu2.exe (Canon Inc. -> CANON INC.)
FirewallRules: [{C3C74C48-F82C-423B-9EE8-00425B367E6F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F3305EB0-0AD6-45FD-B971-8E872DD48559}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B225607E-4AE0-45E3-9DB0-8EE3BFF8E045}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B47EA582-BE70-4C15-AD80-96F28B8D1EBF}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C953FB87-7BD3-4963-95A7-AD56C3C1DB1E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4431D43E-BA7E-41FB-A86B-95FFD23F69FB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E8717514-57FD-44E1-9B43-241E2B2D25A5}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AF5B6470-3478-42D4-A92F-5B6CF09B7D0B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6786F0A4-BF56-4447-9DC8-BB46F61D29EE}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{ED1BF230-5F84-42B7-A952-FB660CC5C5A9}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{86786159-A71E-4A91-BFDF-7DC05BBD2D7C}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C1A99624-5D0C-4493-BC41-9FE8B0CEFE80}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{48EACC1D-E52D-4B94-97E6-5B5EB855137B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9EC9E158-836A-467C-AA3B-04AE2A2DFF79}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{B9DCDC18-9F24-4D52-9104-F93B271E6E3C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{849759FF-B2DD-40B2-A9A1-C3FDAE75FD28}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8CCE0DC0-606C-4A59-B795-4C3ACC72026C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4EDF9CDE-090E-4F8F-A5B9-7BCF8DF6773E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (08/14/2026 12:47:31 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: NT AUTHORITY)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.
Error: (08/13/2026 11:34:11 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
Error: (08/13/2026 11:34:11 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (08/13/2026 11:34:11 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
Error: (08/13/2026 11:34:11 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (08/13/2026 08:12:30 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddWin32ServiceFiles: Unable to back up image of service Wondershare Native Push Service since QueryServiceConfig API failed
System Error:
Systém nemůže nalézt uvedený soubor..
Error: (08/13/2026 08:12:30 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddWin32ServiceFiles: Unable to back up image of service HP Comm Recovery since QueryServiceConfig API failed
System Error:
Systém nemůže nalézt uvedený soubor..
Error: (08/13/2026 07:26:34 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: NT AUTHORITY)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.
System errors:
=============
Error: (08/14/2026 11:14:07 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba HP System Info HSA Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.
Error: (08/14/2026 11:10:21 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby HPAppHelperCap bylo dosaženo časového limitu (30000 ms).
Error: (08/14/2026 11:09:43 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby HPAppHelperCap bylo dosaženo časového limitu (30000 ms).
Error: (08/14/2026 11:08:42 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby HPSysInfoCap bylo dosaženo časového limitu (30000 ms).
Error: (08/13/2026 11:29:48 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla neočekávaně ukončena. Tento stav nastal již 3krát.
Error: (08/13/2026 11:29:41 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.
Error: (08/13/2026 11:29:33 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.
Error: (08/13/2026 07:44:33 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience.
Windows Defender:
================
TimeCreated : 14.08.2026 12:42:29
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (B76AD8A5-67E1-477E-A088-C8CBCC325B41}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ьŔΡĆ çøήиĕçťîõп řциðőωñ)
TimeCreated : 13.08.2026 11:37:01
(Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu pĹ™i pokusu o aktualizaci bezpeÄŤnostnĂch) (informacĂ a pokusĂ se o obnovenĂ na pĹ™edchozĂ verzi.) (BezpeÄŤnostnĂ informace, kterĂ© se mÄ›ly naÄŤĂst: AktuálnĂ) (KĂłd chyby: 0x80501102) (Popis chyby: Došlo k neoÄŤekávanĂ˝m potĂĹľĂm. Nainstalujte všechny dostupnĂ© aktualizace a potom opakujte s) (puštÄ›nĂ programu. Informace o instalaci aktualizacĂ naleznete v nápovÄ›dÄ› a podpoĹ™e. ) (Verze bezpeÄŤnostnĂch informacĂ: 1.457.130.0;1.457.130.0) (Verze modulu: 1.1.26070.7)
TimeCreated : 28.07.2026 9:33:58
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (7ABA8833-437D-4E91-BCF0-BED11C64483A}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ŃŚĐ…Ä‹Ń’Îδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 27.07.2026 9:39:02
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (74D4DEFD-DFBB-476F-B889-4DFA1E2A8C48}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ŃŚĐ…Ä‹Ń’Îδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 26.07.2026 1:33:47
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (98E2B8E4-2038-4AA1-86C0-0BCF24E77511}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ŃŚĐ…Ä‹Ń’Îδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 25.07.2026 2:28:47
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (8A26BD48-B8B9-4B20-99E5-941012EDE9B8}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ŃŚĐ…Ä‹Ń’Îδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
==================== Memory info ===========================
BIOS: AMI F.42 07/03/2019
Motherboard: HP 85B3
Processor: AMD Ryzen 5 3500U with Radeon Vega Mobile Gfx
Percentage of memory in use: 94%
Total physical RAM: 6058.21 MB
Available physical RAM: 353.26 MB
Total Virtual: 14250.21 MB
Available Virtual: 2408.37 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:237.24 GB) (Free:19.95 GB) (Model: WDC PC SN520 SDAPNUW-256G-1006) NTFS
Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:502.02 GB) (Model: WDC WD10SPZX-60Z10T0) NTFS
\\?\Volume{6fba2790-035e-4972-a802-493339258e30}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.2 GB) NTFS
\\?\Volume{7c4eb51e-7024-4755-bb78-26dcf227b4bb}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.18 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: D22E9938)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 238.5 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================
Kontrola notebooku
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 120059
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola notebooku
Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {27B592DB-5B06-44CA-958F-A9D5C41622CE} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => %SystemRoot%\system32\clipesu.exe (No File)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {9A2887A4-4241-4A02-937B-63EE08DE87FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)
Task: {85E30EB0-C1CF-453B-914B-40B3D7F9E0EB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC Reboot (No File)
Task: {95832760-0DD9-41BA-A95A-C0B54C87B640} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery Reboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {74683ED9-401C-498D-A129-A2989252C0B8} - System32\Tasks\ReclaimerUpdateFiles_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /UpdateFiles (No File)
Task: {7578E36F-64F1-4C9F-B641-11089F232581} - System32\Tasks\ReclaimerUpdateXML_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /UpdateXML (No File)
Task: {87DF74D5-3C2E-47DE-8D1A-4B7B1437CF6F} - System32\Tasks\RNUpgradeHelperLogonPrompt_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /prompt os_boot (No File)
Task: {C57A4A0B-3541-4132-9A9C-1CEACF7C8857} - System32\Tasks\RNUpgradeHelperResumePrompt_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /prompt os_resume (No File)
Task: {F6B3018E-C9B7-41CA-969C-732A1C0DE44D} - System32\Tasks\S-1-5-21-2401873512-1259376139-3579719326-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe (No File)
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-03-15] [UpdateUrl:0] <==== ATTENTION
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [PDFescapeDesktop_ManagerExt] -> {D3C28D54-72B8-4B8D-B204-157EFA9BF3E7} => -> No File
[GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No FileContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
AlternateDataStreams: C:\OneDriveTemp:{68003400-7300-4F00-5300-690049006C00} [620]
AlternateDataStreams: C:\OneDriveTemp:{6D006200-5200-6F00-5700-6F0061003900} [576]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\Log Files:{68003400-7300-4F00-5300-690049006C00} [620]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop:{68003400-7300-4F00-5300-690049006C00} [576]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop:{6D006200-5200-6F00-5700-6F0061003900} [576]
BHO: No Name -> {9AF15867-1D90-423B-9853-E99761714165} -> No File
Toolbar: HKLM - No Name - {A6D4ADF0-4C82-4712-B9B8-69EE9CF06462} - No File
EmptyTemp:
Hosts:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola notebooku
Fix result of Farbar Recovery Scan Tool (x64) Version: 11-08-2026 01
Ran by pavuky (15-08-2026 11:39:20) Run:2
Running from C:\Users\pavuk\Downloads
Loaded Profiles: pavuky
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {27B592DB-5B06-44CA-958F-A9D5C41622CE} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => %SystemRoot%\system32\clipesu.exe (No File)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {9A2887A4-4241-4A02-937B-63EE08DE87FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)
Task: {85E30EB0-C1CF-453B-914B-40B3D7F9E0EB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC Reboot (No File)
Task: {95832760-0DD9-41BA-A95A-C0B54C87B640} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery Reboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {74683ED9-401C-498D-A129-A2989252C0B8} - System32\Tasks\ReclaimerUpdateFiles_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /UpdateFiles (No File)
Task: {7578E36F-64F1-4C9F-B641-11089F232581} - System32\Tasks\ReclaimerUpdateXML_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /UpdateXML (No File)
Task: {87DF74D5-3C2E-47DE-8D1A-4B7B1437CF6F} - System32\Tasks\RNUpgradeHelperLogonPrompt_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /prompt os_boot (No File)
Task: {C57A4A0B-3541-4132-9A9C-1CEACF7C8857} - System32\Tasks\RNUpgradeHelperResumePrompt_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /prompt os_resume (No File)
Task: {F6B3018E-C9B7-41CA-969C-732A1C0DE44D} - System32\Tasks\S-1-5-21-2401873512-1259376139-3579719326-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe (No File)
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-03-15] [UpdateUrl:0] <==== ATTENTION
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [PDFescapeDesktop_ManagerExt] -> {D3C28D54-72B8-4B8D-B204-157EFA9BF3E7} => -> No File
[GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No FileContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
AlternateDataStreams: C:\OneDriveTemp:{68003400-7300-4F00-5300-690049006C00} [620]
AlternateDataStreams: C:\OneDriveTemp:{6D006200-5200-6F00-5700-6F0061003900} [576]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\Log Files:{68003400-7300-4F00-5300-690049006C00} [620]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop:{68003400-7300-4F00-5300-690049006C00} [576]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop:{6D006200-5200-6F00-5700-6F0061003900} [576]
BHO: No Name -> {9AF15867-1D90-423B-9853-E99761714165} -> No File
Toolbar: HKLM - No Name - {A6D4ADF0-4C82-4712-B9B8-69EE9CF06462} - No File
EmptyTemp:
Hosts:
End
*****************
Processes closed successfully.
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{C885AA15-1764-4293-B82A-0586ADD46B35} => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{27B592DB-5B06-44CA-958F-A9D5C41622CE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{27B592DB-5B06-44CA-958F-A9D5C41622CE}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Clip\ClipESU => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Clip\ClipESU" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E88D9B2C-DDEA-47B2-9582-085153004DB5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E88D9B2C-DDEA-47B2-9582-085153004DB5}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9A2887A4-4241-4A02-937B-63EE08DE87FB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9A2887A4-4241-4A02-937B-63EE08DE87FB}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{85E30EB0-C1CF-453B-914B-40B3D7F9E0EB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{85E30EB0-C1CF-453B-914B-40B3D7F9E0EB}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{95832760-0DD9-41BA-A95A-C0B54C87B640}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{95832760-0DD9-41BA-A95A-C0B54C87B640}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{74683ED9-401C-498D-A129-A2989252C0B8}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74683ED9-401C-498D-A129-A2989252C0B8}" => removed successfully
C:\WINDOWS\System32\Tasks\ReclaimerUpdateFiles_pavuky => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ReclaimerUpdateFiles_pavuky" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7578E36F-64F1-4C9F-B641-11089F232581}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7578E36F-64F1-4C9F-B641-11089F232581}" => removed successfully
C:\WINDOWS\System32\Tasks\ReclaimerUpdateXML_pavuky => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ReclaimerUpdateXML_pavuky" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{87DF74D5-3C2E-47DE-8D1A-4B7B1437CF6F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{87DF74D5-3C2E-47DE-8D1A-4B7B1437CF6F}" => removed successfully
C:\WINDOWS\System32\Tasks\RNUpgradeHelperLogonPrompt_pavuky => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RNUpgradeHelperLogonPrompt_pavuky" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C57A4A0B-3541-4132-9A9C-1CEACF7C8857}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C57A4A0B-3541-4132-9A9C-1CEACF7C8857}" => removed successfully
C:\WINDOWS\System32\Tasks\RNUpgradeHelperResumePrompt_pavuky => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RNUpgradeHelperResumePrompt_pavuky" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F6B3018E-C9B7-41CA-969C-732A1C0DE44D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F6B3018E-C9B7-41CA-969C-732A1C0DE44D}" => removed successfully
C:\WINDOWS\System32\Tasks\S-1-5-21-2401873512-1259376139-3579719326-1001\DataSenseLiveTileTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\S-1-5-21-2401873512-1259376139-3579719326-1001\DataSenseLiveTileTask" => removed successfully
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-03-15] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
Could not move "C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2" => Scheduled to move on reboot.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ GoogleDriveBlacklisted => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ GoogleDriveSynced => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ GoogleDriveSyncing => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PDFescapeDesktop_ManagerExt => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\GDContextMenu => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
C:\OneDriveTemp => ":{68003400-7300-4F00-5300-690049006C00}" ADS removed successfully
C:\OneDriveTemp => ":{6D006200-5200-6F00-5700-6F0061003900}" ADS removed successfully
C:\Users\pavuk\OneDrive\Dokumenty\Log Files => ":{68003400-7300-4F00-5300-690049006C00}" ADS removed successfully
C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop => ":{68003400-7300-4F00-5300-690049006C00}" ADS removed successfully
C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop => ":{6D006200-5200-6F00-5700-6F0061003900}" ADS removed successfully
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9AF15867-1D90-423B-9853-E99761714165} => removed successfully
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{A6D4ADF0-4C82-4712-B9B8-69EE9CF06462}" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1835008 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 14759473 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 145922663 B
Edge => 19772004 B
Chrome => 57392659 B
Firefox => 2333607948 B
Opera => 139264 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 4 B
ProgramData => 1003393 B
Public => 0 B
systemprofile => 482590 B
systemprofile32 => 0 B
LocalService => 1250435 B
NetworkService => 16388 B
pavuk => 29613987 B
RecycleBin => 1819884659 B
EmptyTemp: => 4.1 GB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 15-08-2026 11:47:45)
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 => Could not move
==== End of Fixlog 11:47:45 ====
Ran by pavuky (15-08-2026 11:39:20) Run:2
Running from C:\Users\pavuk\Downloads
Loaded Profiles: pavuky
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {27B592DB-5B06-44CA-958F-A9D5C41622CE} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => %SystemRoot%\system32\clipesu.exe (No File)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {9A2887A4-4241-4A02-937B-63EE08DE87FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)
Task: {85E30EB0-C1CF-453B-914B-40B3D7F9E0EB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC Reboot (No File)
Task: {95832760-0DD9-41BA-A95A-C0B54C87B640} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery Reboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {74683ED9-401C-498D-A129-A2989252C0B8} - System32\Tasks\ReclaimerUpdateFiles_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /UpdateFiles (No File)
Task: {7578E36F-64F1-4C9F-B641-11089F232581} - System32\Tasks\ReclaimerUpdateXML_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /UpdateXML (No File)
Task: {87DF74D5-3C2E-47DE-8D1A-4B7B1437CF6F} - System32\Tasks\RNUpgradeHelperLogonPrompt_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /prompt os_boot (No File)
Task: {C57A4A0B-3541-4132-9A9C-1CEACF7C8857} - System32\Tasks\RNUpgradeHelperResumePrompt_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /prompt os_resume (No File)
Task: {F6B3018E-C9B7-41CA-969C-732A1C0DE44D} - System32\Tasks\S-1-5-21-2401873512-1259376139-3579719326-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe (No File)
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-03-15] [UpdateUrl:0] <==== ATTENTION
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [PDFescapeDesktop_ManagerExt] -> {D3C28D54-72B8-4B8D-B204-157EFA9BF3E7} => -> No File
[GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No FileContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
AlternateDataStreams: C:\OneDriveTemp:{68003400-7300-4F00-5300-690049006C00} [620]
AlternateDataStreams: C:\OneDriveTemp:{6D006200-5200-6F00-5700-6F0061003900} [576]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\Log Files:{68003400-7300-4F00-5300-690049006C00} [620]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop:{68003400-7300-4F00-5300-690049006C00} [576]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop:{6D006200-5200-6F00-5700-6F0061003900} [576]
BHO: No Name -> {9AF15867-1D90-423B-9853-E99761714165} -> No File
Toolbar: HKLM - No Name - {A6D4ADF0-4C82-4712-B9B8-69EE9CF06462} - No File
EmptyTemp:
Hosts:
End
*****************
Processes closed successfully.
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{C885AA15-1764-4293-B82A-0586ADD46B35} => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{27B592DB-5B06-44CA-958F-A9D5C41622CE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{27B592DB-5B06-44CA-958F-A9D5C41622CE}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Clip\ClipESU => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Clip\ClipESU" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E88D9B2C-DDEA-47B2-9582-085153004DB5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E88D9B2C-DDEA-47B2-9582-085153004DB5}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9A2887A4-4241-4A02-937B-63EE08DE87FB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9A2887A4-4241-4A02-937B-63EE08DE87FB}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{85E30EB0-C1CF-453B-914B-40B3D7F9E0EB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{85E30EB0-C1CF-453B-914B-40B3D7F9E0EB}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{95832760-0DD9-41BA-A95A-C0B54C87B640}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{95832760-0DD9-41BA-A95A-C0B54C87B640}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{74683ED9-401C-498D-A129-A2989252C0B8}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74683ED9-401C-498D-A129-A2989252C0B8}" => removed successfully
C:\WINDOWS\System32\Tasks\ReclaimerUpdateFiles_pavuky => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ReclaimerUpdateFiles_pavuky" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7578E36F-64F1-4C9F-B641-11089F232581}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7578E36F-64F1-4C9F-B641-11089F232581}" => removed successfully
C:\WINDOWS\System32\Tasks\ReclaimerUpdateXML_pavuky => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ReclaimerUpdateXML_pavuky" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{87DF74D5-3C2E-47DE-8D1A-4B7B1437CF6F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{87DF74D5-3C2E-47DE-8D1A-4B7B1437CF6F}" => removed successfully
C:\WINDOWS\System32\Tasks\RNUpgradeHelperLogonPrompt_pavuky => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RNUpgradeHelperLogonPrompt_pavuky" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C57A4A0B-3541-4132-9A9C-1CEACF7C8857}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C57A4A0B-3541-4132-9A9C-1CEACF7C8857}" => removed successfully
C:\WINDOWS\System32\Tasks\RNUpgradeHelperResumePrompt_pavuky => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RNUpgradeHelperResumePrompt_pavuky" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F6B3018E-C9B7-41CA-969C-732A1C0DE44D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F6B3018E-C9B7-41CA-969C-732A1C0DE44D}" => removed successfully
C:\WINDOWS\System32\Tasks\S-1-5-21-2401873512-1259376139-3579719326-1001\DataSenseLiveTileTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\S-1-5-21-2401873512-1259376139-3579719326-1001\DataSenseLiveTileTask" => removed successfully
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-03-15] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
Could not move "C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2" => Scheduled to move on reboot.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ GoogleDriveBlacklisted => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ GoogleDriveSynced => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ GoogleDriveSyncing => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PDFescapeDesktop_ManagerExt => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\GDContextMenu => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
C:\OneDriveTemp => ":{68003400-7300-4F00-5300-690049006C00}" ADS removed successfully
C:\OneDriveTemp => ":{6D006200-5200-6F00-5700-6F0061003900}" ADS removed successfully
C:\Users\pavuk\OneDrive\Dokumenty\Log Files => ":{68003400-7300-4F00-5300-690049006C00}" ADS removed successfully
C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop => ":{68003400-7300-4F00-5300-690049006C00}" ADS removed successfully
C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop => ":{6D006200-5200-6F00-5700-6F0061003900}" ADS removed successfully
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9AF15867-1D90-423B-9853-E99761714165} => removed successfully
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{A6D4ADF0-4C82-4712-B9B8-69EE9CF06462}" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1835008 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 14759473 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 145922663 B
Edge => 19772004 B
Chrome => 57392659 B
Firefox => 2333607948 B
Opera => 139264 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 4 B
ProgramData => 1003393 B
Public => 0 B
systemprofile => 482590 B
systemprofile32 => 0 B
LocalService => 1250435 B
NetworkService => 16388 B
pavuk => 29613987 B
RecycleBin => 1819884659 B
EmptyTemp: => 4.1 GB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 15-08-2026 11:47:45)
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 => Could not move
==== End of Fixlog 11:47:45 ====
-
Rudy
- Site Admin
- Příspěvky: 120059
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola notebooku
Vše smazáno, log je již OK. 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola notebooku
Děkuji. Zdá se, že je opět švihák. Posílám všimné.
-
Rudy
- Site Admin
- Příspěvky: 120059
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola notebooku
Nemáte zač a za příspěvek děkujeme!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?