Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 18-08-2026
Ran by kater (administrator) on LAPTOP-KUQKOU8M (ASUSTeK COMPUTER INC. VivoBook_ASUSLaptop X421EAY_K413EA) (20-08-2026 19:09:58)
Running from C:\Users\kater\Desktop\FRST64 (1).exe
Loaded Profiles: kater
Platform: Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusOSD.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files (x86)\TeamViewer\crashpad_handler.exe
(C:\Program Files\AVG\Antivirus\AVGSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\aswEngSrv.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2632.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.93\msedgewebview2.exe
(C:\Program Files\WindowsApps\MSTeams_26213.1006.5014.9784_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.93\msedgewebview2.exe
(C:\Users\kater\AppData\Local\Programs\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\kater\AppData\Local\Programs\Opera\134.0.5954.66\opera_crashreporter.exe
(DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusOptimization.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusOptimizationStartupTask.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxEMN.exe
(explorer.exe ->) (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\TuneUp\TuneupUI.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe
(explorer.exe ->) (Ivaylo Beltchev -> IvoSoft) [File not signed] C:\Program Files\Classic Shell\ClassicStartMenu.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\kater\AppData\Local\Programs\Opera\opera.exe
(Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\TuneUp\TuneupUI.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\AVGUI.exe <4>
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <45>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.93\msedgewebview2.exe <17>
(Opera Norway AS -> Opera Software) C:\Users\kater\AppData\Local\Programs\Opera\opera.exe <10>
(services.exe ->) () [File not signed] C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe
(services.exe ->) () [File not signed] C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Windows\System32\DriverStore\FileRepository\asusptpfilter.inf_amd64_42de93a34b508315\AsusPTPService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\AsusAppService\AsusAppService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusOptimization.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSoftwareManager\AsusSoftwareManager.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSwitch\AsusSwitch.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemAnalysis\AsusSystemAnalysis.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe
(services.exe ->) (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\wsc_proxy.exe
(services.exe ->) (DTS, Inc. -> DTS Inc.) C:\Windows\System32\DTS\PC\APO4x\DtsApo4Service.exe
(services.exe ->) (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\TuneUp\TuneupSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\avgToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_a5ea1b1d8db1527e\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_6bfff1da475a22be\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e32ced29f236e322\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_fa928718b2f309e5\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_7c484f80872e1cd8\jhi_service.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_e3868713e3d137ef\esif_uf.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Program Files\Windows Defender\MpDefenderCoreService.exe
(services.exe ->) (Qualcomm Atheros, Inc. -> ) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Xerox Corporation -> Xerox Corporation) C:\Program Files\Xerox\XeroxPrintExperience\CommonFiles\XeroxPrintJobEventManagerService.exe
(sihost.exe ->) (Xerox Corporation -> Xerox Corporation) C:\Program Files\WindowsApps\XeroxCorp.PrintExperience_9.99.18.0_x64__f7egpvdyrs2a8\XeroxCorp.PrintHelper\XeroxCorp.PrintHelper.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2632.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner.exe
(svchost.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxextN.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe <2>
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [1108920 2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\...\Run: [AVG TuneUp UI] => C:\Program Files\AVG\TuneUp\TuneupUI.exe [7626744 2026-07-08] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [M17A] => C:\Windows\twain_32\Brimm17a\Common\TwDsUiLaunch.exe [89168 2024-06-18] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [145344 2019-07-26] (Brother Industries, Ltd. -> Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3140608 2021-01-29] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3588608 2021-04-02] (Brother Industries, Ltd.) [File not signed]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4753768 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [46787544 2026-08-10] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\Run: [Opera Stable] => "C:\Users\kater\AppData\Local\Programs\Opera\opera.exe" --autostart [3058632 2026-08-17] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\Run: [MicrosoftEdgeAutoLaunch_66090DDE054034F9917E2C99F86CD904] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [5018440 2026-08-16] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\WINDOWS\system32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{052EB454-9F19-CB42-7875-807F79F311C4}] -> C:\Program Files (x86)\CCleaner Browser\Application\150.0.35121.182\Installer\chrmstp.exe [6066592 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\151.0.7922.170\Installer\chrmstp.exe [7582872 2026-08-20] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {539B9F2E-9705-4C9D-95DD-D8409F8668CB} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {F7BCD6CA-1F5B-42FB-B3C4-360833EB1387} - System32\Tasks\ASUS Optimization 36D18D69AFC3 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusHotkey.exe [365096 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {728E36DD-D6B5-4A98-BB41-AEADCF2AB6D8} - System32\Tasks\ASUS Update Checker 2.0 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSoftwareManager\AsusUpdateChecker.exe [853040 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {BAA0A5C0-E4CD-466D-AF29-63E51D71549F} - System32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemAnalysis\AsusSystemAnalysis.exe [6498352 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {BD6A61F2-719A-42FF-A0D9-3809318A1F50} - System32\Tasks\AsusSystemDiagnosis_DriverQuality => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe [1514544 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
Task: {B2720852-765B-44A2-B80B-7658A5E97A71} - System32\Tasks\AVG\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [5842360 2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {A289155B-E982-4700-952C-A652DA83D43A} - System32\Tasks\AVG\AVG Antivirus Patcher => C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus.exe [9820152 2026-07-14] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {BC960853-8DB9-403E-BED3-2AE0DF611EFF} - System32\Tasks\AVG\AVG TuneUp BugReport => C:\Program Files\AVG\TuneUp\AvBugReport.exe [6618616 2026-07-08] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) -> --send "dumps|report" --silent --product 74 --programpath "C:\Program Files\AVG\TuneUp" --configpath "C:\ProgramData\AVG\TuneUp" --path "C:\ProgramData\AVG\TuneUp\log" --path "C:\ProgramData\AVG\Icarus\Logs" --logpath "C:\ProgramData\AVG\TuneUp\log" --guid 79dee6df-fec9-4394-b351-c1bd00111422
Task: {3ED8DFAF-0443-488E-A839-015104AB77E4} - System32\Tasks\AVG\AVG TuneUp Update => C:\Program Files\Common Files\AVG\Icarus\avg-tu\icarus.exe [9736416 2026-05-19] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {6A16E590-5E3F-47BD-B45E-F3AD79EB0B43} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [3763936 2026-05-28] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {9CDB39F9-5379-464E-AF8B-458F04BF55D5} - System32\Tasks\CCleaner 7 - Skip UAC - S-1-5-21-934306686-1168684271-2714761465-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7866256 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {CB98FCEA-CA46-47E0-99CC-40C16870B8F0} - System32\Tasks\CCleaner Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [4612608 2026-07-23] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {D02CDCD1-9956-4829-B636-F86FF5D090B0} - System32\Tasks\CCleaner Browser Heartbeat Task (Logon) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [4612608 2026-07-23] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {3E4FEA74-F63E-4551-B2E9-9A818F33E997} - System32\Tasks\CCleanerUpdateTaskMachineCore => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208168 2023-06-16] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {D26AB205-F354-46BD-8982-C2A4A2B63719} - System32\Tasks\CCleanerUpdateTaskMachineUA => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208168 2023-06-16] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {31B70DE1-B658-4013-A686-7D5082CAF3F0} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{6E7F2C72-5FE2-40D9-B05A-B9217A90C34D} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {4D54E8DC-A148-499C-AC3C-ACAC6740842A} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {26E593F1-68FA-41D9-AB8A-F7E2990F171A} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {83CCB707-E5EE-44D0-A577-B9DFC521CEF3} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelperOnUnlock => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {4D4D187A-A678-466B-99F7-B390F4C33B35} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-08-12] (HP Inc. -> HP Inc.)
Task: {39920AE6-D17B-42D9-A1CC-E96D0EDF6730} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-08-12] (HP Inc. -> HP Inc.)
Task: {7D66F412-53F1-4446-8652-30CDC0699A26} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16783144 2026-08-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {72C1A20E-88DF-4184-8D6F-56C350156206} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28726680 2026-08-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {A6BA5DCE-DFAA-4194-955B-4EC3E0C37FB8} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [74080 2026-08-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {BFA34AD2-30A8-473C-ACE8-36DCF30A28FB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28726680 2026-08-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {55D5C003-0388-4C34-A1F6-408AE2BDA1C1} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [441712 2026-08-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {40D6DF80-058B-4250-9EBD-65D44C23076D} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [441712 2026-08-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {4CA09BC2-E137-4EA4-ADBF-132B275F43F4} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1370480 2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {9E593235-E18A-4B65-84DE-93C0B007623A} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16783144 2026-08-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {86820B88-D791-4D07-9424-EA5F081E9095} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (No File)
Task: {904E9E2A-E3CA-4A8C-82B3-88C5A7E81236} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (No File)
Task: {73CDFB22-7130-4D46-B2F9-541DBB239B98} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {E127628E-187F-4CCC-8995-52CFF33A9398} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-934306686-1168684271-2714761465-1001 F041F896C13FDC3B => C:\Users\kater\AppData\Local\Mozilla Firefox\firefox.exe [1326720 2026-08-12] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\F041F896C13FDC3B\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\F041F896C13FDC3B\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {5E2B0E2C-067A-4E63-98DD-AAD3E1CD25E0} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4408208 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {C2F0C152-F9EF-42B6-AD41-4647BECAB0AD} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-934306686-1168684271-2714761465-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4408208 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {D3669538-59C6-4128-B354-AF76E735CC21} - System32\Tasks\OneDrive Startup Task-S-1-5-21-934306686-1168684271-2714761465-1001 => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\OneDriveLauncher.exe [852880 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {C77A48B0-4098-4213-A059-081EFC524D79} - System32\Tasks\Opera scheduled assistant Autoupdate 1623180993 => C:\Users\kater\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [7705544 2026-08-17] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Users\kater\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {35A2C9BF-64FE-4850-B08A-09712831ECD4} - System32\Tasks\Opera scheduled Autoupdate 1623180985 => C:\Users\kater\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [7705544 2026-08-17] (Opera Norway AS -> Opera Software)
Task: {0C4BD410-6555-476F-B861-7DB64806DF6B} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-934306686-1168684271-2714761465-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7866256 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {E0A6EF21-E6EE-4E84-A68B-49270FF43ECF} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-934306686-1168684271-2714761465-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7866256 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {51D293A0-DC8E-4E29-9850-9C37A7D71696} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [6558608 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {2889E74D-9E63-44E3-883B-1CDD6B71E661} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [9274080 2026-01-19] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {E87D2094-D74F-492F-9D91-58FC31A51B8A} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe [1961360 2023-11-01] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {36618E6E-08E1-4F0E-9156-DA0AE83EE55F} - System32\Tasks\Xerox XeroxPrintExperience Printer Configuration - New or Changed => c:\program files\xerox\xeroxprintexperience\xeroxprintexperience\XeroxPrinterConfiguration.exe [419928 2025-01-30] (Xerox Corporation -> Xerox Corporation)
Task: {A0AEAFA6-B723-45E6-BB6E-E20A269C1CEB} - System32\Tasks\Xerox XeroxPrintExperience Printer Configuration - Periodic Refresh => c:\program files\xerox\xeroxprintexperience\xeroxprintexperience\XeroxPrinterConfiguration.exe [419928 2025-01-30] (Xerox Corporation -> Xerox Corporation)
Task: {1076D4EF-22A7-4BBE-9134-889F66A25486} - System32\Tasks\Xerox XeroxPrintExperience Printer Configuration - User Logon => c:\program files\xerox\xeroxprintexperience\xeroxprintexperience\XeroxPrinterConfiguration.exe [419928 2025-01-30] (Xerox Corporation -> Xerox Corporation)
Task: {1319B0EA-51E2-4E32-B9BB-1F6F9D797D0C} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-934306686-1168684271-2714761465-1001 => C:\Users\kater\AppData\Roaming\Zoom\bin\Zoom.exe [511880 2026-08-04] (Zoom Communications, Inc. -> Zoom Communications, Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{982f643b-67d8-4795-a108-47723a5a2027}: [DhcpNameServer] 10.10.0.1 0.0.0.0
Tcpip\..\Interfaces\{982f643b-67d8-4795-a108-47723a5a2027}\275736B616F507574616: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{982f643b-67d8-4795-a108-47723a5a2027}\4505D2C494E4B4F554874756E6465627F5431333038324: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{982f643b-67d8-4795-a108-47723a5a2027}\75966696F565F6C6B6F66716: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{982f643b-67d8-4795-a108-47723a5a2027}\B4F6374756C6E696F546F6D616: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{c40337e9-8d13-43db-97a8-0e989d0168c2}: [DhcpNameServer] 10.10.0.1 0.0.0.0
Tcpip\..\Interfaces\{c40337e9-8d13-43db-97a8-0e989d0168c2}\255646D69602E4F64756021333020527F6: [DhcpNameServer] 192.168.27.251
Tcpip\..\Interfaces\{c40337e9-8d13-43db-97a8-0e989d0168c2}\B616E63656C616270235D435: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\44F6374716C6E2E45445: [DhcpNameServer] 77.48.31.69 93.99.200.155
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\44F6374716C6E2E45445: [DhcpDomain] raabnet.net
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\4505D2C496E6B6F514143314: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\B362027594649402D4F4255402B362: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\B616E63656C616270235D435: [DhcpNameServer] 1.1.1.1 8.8.8.8
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\B616E63656C616270235D435: [DhcpDomain] www.tendawifi.com
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\E455D4542594F514743353: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\F4230296E6475627E6564702: [DhcpNameServer] 10.0.1.138
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\F4230296E6475627E6564702: [DhcpDomain] home
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\F423D294E6475627E65647F5331403: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{fe538650-fd5b-46aa-a21d-3e9a716471e5}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{fe538650-fd5b-46aa-a21d-3e9a716471e5}\65F6C6B6F66796F5E41435D2E45445E2F62776: [DhcpNameServer] 10.10.0.1 0.0.0.0
Tcpip\..\Interfaces\{fe538650-fd5b-46aa-a21d-3e9a716471e5}\A7163756461636B6160235D435: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF TaskBarID: F041F896C13FDC3B -> C:\Users\kater\AppData\Local\Mozilla Firefox
FF DefaultProfile: njt0ozqb.default-release -> F041F896C13FDC3B
FF ProfilePath: C:\Users\kater\AppData\Roaming\Mozilla\Firefox\Profiles\6w6uy07b.default [2021-06-08]
FF ProfilePath: C:\Users\kater\AppData\Roaming\Mozilla\Firefox\Profiles\njt0ozqb.default-release [2026-08-20]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-07-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-08-10] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google Inc -> Google, Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-07-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=3 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1636.4\npCCleanerBrowserUpdate3.dll [2023-06-16] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=9 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1636.4\npCCleanerBrowserUpdate3.dll [2023-06-16] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
StartMenuInternet: Firefox-F041F896C13FDC3B - C:\Users\kater\AppData\Local\Mozilla Firefox\firefox.exe
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\kater\AppData\Local\Microsoft\Edge\User Data\Default [2026-08-20]
Edge Notifications: Default -> hxxps://www.smsadmin.cz
Edge Extension: (Dokumenty Google offline) - C:\Users\kater\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-07-30]
Edge Extension: (Edge relevant text changes) - C:\Users\kater\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Chrome:
=======
CHR Profile: C:\Users\kater\AppData\Local\Google\Chrome\User Data\Default [2026-08-20]
CHR Notifications: Default -> hxxps://captchawizard.top; hxxps://www.youtube.com
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee_uninternational&type=E211CZ885G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\kater\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-08-20]
CHR Extension: (Dokumenty Google offline) - C:\Users\kater\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-20]
CHR Extension: (MetaMask) - C:\Users\kater\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2026-08-20]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\kater\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-06-08]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKU\.DEFAULT\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-934306686-1168684271-2714761465-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
Opera:
=======
OPR DefaultProfile: Default
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
R2 AsusAppService; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\AsusAppService\AsusAppService.exe [1167408 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSOptimization; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusOptimization.exe [661552 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 AsusPTPService; C:\WINDOWS\System32\DriverStore\FileRepository\asusptpfilter.inf_amd64_42de93a34b508315\AsusPTPService.exe [1702448 2026-05-26] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
R2 ASUSSoftwareManager; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSoftwareManager\AsusSoftwareManager.exe [1444912 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSwitch; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSwitch\AsusSwitch.exe [653872 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemAnalysis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemAnalysis\AsusSystemAnalysis.exe [6498352 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemDiagnosis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe [1514544 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [1081784 2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AVG Tools; C:\Program Files\AVG\Antivirus\avgToolsSvc.exe [1134008 2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [8063928 2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AVGTuneUpSvc; C:\Program Files\AVG\TuneUp\TuneupSvc.exe [22297592 2026-07-08] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
R2 AVGWscReporter; C:\Program Files\AVG\Antivirus\wsc_proxy.exe [109480 2023-05-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [320000 2021-01-29] (Brother Industries, Ltd.) [File not signed]
S2 ccleaner; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208168 2023-06-16] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [31251856 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.)
S3 CCleanerBrowserElevationService; C:\Program Files (x86)\CCleaner Browser\Application\150.0.35121.182\elevation_service.exe [4057344 2026-07-23] (Gen Digital Inc. -> Gen Digital Inc.)
S3 ccleanerm; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208168 2023-06-16] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13546304 2026-08-10] (Microsoft Corporation -> Microsoft Corporation)
R2 DtsApo4Service; C:\WINDOWS\System32\DTS\PC\APO4x\DtsApo4Service.exe [442368 2023-12-18] (DTS, Inc. -> DTS Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncHelper.exe [3761040 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243720 2026-08-12] (HP Inc. -> HP Inc.)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_fa928718b2f309e5\AS\IAS\IntelAudioService.exe [532960 2026-03-26] (Intel Corporation -> Intel)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [889048 2026-08-06] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\Program Files\Windows Defender\MpDefenderCoreService.exe [2009656 2025-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.145.0728.0010\OneDriveUpdaterService.exe [4054928 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
R2 QcomWlanSrv; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [189808 2023-03-19] (Qualcomm Atheros, Inc. -> )
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [23720784 2026-08-10] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 USBAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe [12288 2023-07-25] () [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4414464 2025-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [282480 2025-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WorkflowAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe [19456 2023-07-25] () [File not signed]
R2 XeroxPrintJobEventManagerService; C:\Program Files\Xerox\XeroxPrintExperience\CommonFiles\XeroxPrintJobEventManagerService.exe [527960 2025-01-30] (Xerox Corporation -> Xerox Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AcxHdAudio; C:\WINDOWS\System32\drivers\AcxHdAudio.sys [585728 2026-05-13] (Microsoft Corporation) [File not signed]
R3 AsusPTPDrv; C:\WINDOWS\System32\DriverStore\FileRepository\asusptpfilter.inf_amd64_42de93a34b508315\AsusPTPFilter.sys [236080 2026-05-26] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R3 AsusSAIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemAnalysis\AsusSAIO.sys [51288 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R1 ATKWMIACPIIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusWmiAcpi.sys [50952 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R1 avgArPot; C:\WINDOWS\System32\drivers\avgArPot.sys [245856 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgbidsdriver; C:\WINDOWS\System32\drivers\avgbidsdriver.sys [393824 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgbidsh; C:\WINDOWS\System32\drivers\avgbidsh.sys [317024 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgbuniv; C:\WINDOWS\System32\drivers\avgbuniv.sys [80992 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgDrvBrg; C:\WINDOWS\System32\drivers\avgDrvBrg.sys [86112 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgElam; C:\WINDOWS\System32\drivers\avgElam.sys [29144 2025-07-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 avgKbd; C:\WINDOWS\System32\drivers\avgKbd.sys [34912 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgMonFlt; C:\WINDOWS\System32\drivers\avgMonFlt.sys [299616 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgNetHub; C:\WINDOWS\System32\drivers\avgNetHub.sys [637024 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgRdr; C:\WINDOWS\System32\drivers\avgRdr2.sys [100960 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgRvrt; C:\WINDOWS\System32\drivers\avgRvrt.sys [71776 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgSnx; C:\WINDOWS\System32\drivers\avgSnx.sys [857184 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgSP; C:\WINDOWS\System32\drivers\avgSP.sys [1299040 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 avgStm; C:\WINDOWS\System32\drivers\avgStm.sys [250976 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgVmm; C:\WINDOWS\System32\drivers\avgVmm.sys [473184 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [577536 2025-06-29] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2025-06-29] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-06-29] (Microsoft Corporation) [File not signed]
R3 iaLPSS2_GPIO2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_tgl.inf_amd64_4fcff055ed32f652\iaLPSS2_GPIO2_TGL.sys [132072 2024-04-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_tgl.inf_amd64_bd1c0a60b9594248\iaLPSS2_I2C_TGL.sys [205400 2024-04-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_SPI_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_spi_tgl.inf_amd64_b635eb8a44a8089d\iaLPSS2_SPI_TGL.sys [159320 2024-04-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_UART2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_tgl.inf_amd64_37bebcd2017f6992\iaLPSS2_UART2_TGL.sys [314456 2024-04-18] (Intel Corporation -> Intel Corporation)
R0 iaStorVD; C:\WINDOWS\System32\drivers\iaStorVD.sys [1544912 2021-08-26] (Intel Corporation -> Intel Corporation)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_dfa8107c194025f6\IntcUSB.sys [949216 2026-03-26] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_689d3d5fefeef458\gna.sys [84880 2020-11-06] (Gaussian Mixture Models and Neural Networks Accelerator -> Intel Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [20880 2025-12-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [627104 2025-12-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [102816 2025-12-10] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-06-29] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_bce55ac535cb3902\WSDScan.sys [61440 2026-08-12] (Microsoft Windows -> Microsoft Corporation)
U3 AVG Business Console Client Antivirus Service; no ImagePath
U3 AVG Firewall; no ImagePath
U3 avgArDisk; no ImagePath
U3 avgBcc; no ImagePath
U3 avgbdisk; no ImagePath
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-08-20 19:09 - 2026-08-20 19:10 - 000045273 _____ C:\Users\kater\Desktop\FRST.txt
2026-08-20 19:08 - 2026-08-20 19:08 - 002448896 _____ (Farbar) C:\Users\kater\Desktop\FRST64 (1).exe
2026-08-20 18:57 - 2026-08-20 18:57 - 000679834 _____ C:\WINDOWS\system32\perfh005.dat
2026-08-20 18:57 - 2026-08-20 18:57 - 000145634 _____ C:\WINDOWS\system32\perfc005.dat
2026-08-20 18:53 - 2026-08-20 18:53 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2026-08-20 18:50 - 2026-08-20 18:50 - 000002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox — anonymní prohlížení.lnk
2026-08-20 18:50 - 2026-08-20 18:50 - 000001454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-08-20 18:50 - 2026-08-20 18:50 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-08-20 12:17 - 2026-08-20 12:17 - 001056023 _____ C:\Users\kater\Downloads\Kasparek_KNZ_GL3_6485515842_smlouva_260820_121750.pdf
2026-08-20 12:17 - 2026-08-20 12:17 - 000347295 _____ C:\Users\kater\Downloads\Kasparek_KNZ_GL3_6485515842_smlouva_260820_121753.pdf
2026-08-20 12:17 - 2026-08-20 12:17 - 000347295 _____ C:\Users\kater\Downloads\Kasparek_KNZ_GL3_6485515842_smlouva_260820_121752.pdf
2026-08-20 12:05 - 2026-08-20 12:05 - 000939925 _____ C:\Users\kater\Downloads\Kasparkova_KNZ_1FN_zmena_260820_120526.pdf
2026-08-19 08:07 - 2026-08-19 08:07 - 001022208 _____ C:\Users\kater\Downloads\Zzj_zivot-10-003015-katerina-kasparkova-18_08_2026.pdf
2026-08-18 20:41 - 2026-08-18 20:41 - 000085865 _____ C:\Users\kater\Downloads\Infolist-automobil-2026-08-18-20-22-42669petr-kasparek.pdf
2026-08-18 20:37 - 2026-08-18 20:37 - 000117276 _____ C:\Users\kater\Downloads\Kasparek_KNZ_GL3__modelace_260818_203740.pdf
2026-08-18 19:19 - 2026-08-18 19:19 - 000053596 _____ C:\Users\kater\Downloads\wspdf3863002585305600377hlasenka.pdf
2026-08-18 19:11 - 2026-08-18 19:11 - 000476336 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-08-18 19:05 - 2026-08-18 19:05 - 000053577 _____ C:\Users\kater\Downloads\wspdf7521249830408291643hlasenka.pdf
2026-08-18 18:58 - 2026-08-18 18:58 - 000053556 _____ C:\Users\kater\Downloads\wspdf1083630069140435197hlasenka.pdf
2026-08-18 18:49 - 2026-08-18 18:49 - 000053538 _____ C:\Users\kater\Downloads\wspdf3243994038473020171hlasenka.pdf
2026-08-18 18:40 - 2026-08-18 18:40 - 000053532 _____ C:\Users\kater\Downloads\wspdf7917126967913856447hlasenka.pdf
2026-08-18 18:25 - 2026-08-18 18:25 - 001283764 _____ C:\Users\kater\Downloads\1425401628-smlouva-sken.pdf
2026-08-18 18:23 - 2026-08-18 18:23 - 001283764 _____ C:\Users\kater\Downloads\1425401528-smlouva-sken (1).pdf
2026-08-18 18:22 - 2026-08-18 18:22 - 001283764 _____ C:\Users\kater\Downloads\1425401528-smlouva-sken.pdf
2026-08-18 17:59 - 2026-08-18 17:59 - 000342002 _____ C:\Users\kater\Downloads\Kasparkova_KNZ_1FN_modelace_260818_175932.pdf
2026-08-18 16:46 - 2026-08-18 16:46 - 000053490 _____ C:\Users\kater\Downloads\wspdf3614967920489174402hlasenka.pdf
2026-08-18 16:35 - 2026-08-18 16:35 - 000053491 _____ C:\Users\kater\Downloads\wspdf3524679982052461569hlasenka.pdf
2026-08-18 16:06 - 2026-08-18 16:06 - 000053867 _____ C:\Users\kater\Downloads\wspdf3166307649297722953hlasenka.pdf
2026-08-18 15:24 - 2026-08-18 15:24 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-08-16 03:08 - 2026-08-20 11:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-08-14 15:53 - 2026-08-14 15:53 - 000053493 _____ C:\Users\kater\Downloads\wspdf1815736034836014085hlasenka.pdf
2026-08-14 15:45 - 2026-08-14 15:45 - 000052181 _____ C:\Users\kater\Downloads\wspdf7616535349657372984hlasenka.pdf
2026-08-14 15:45 - 2026-08-14 15:45 - 000052181 _____ C:\Users\kater\Downloads\wspdf7616535349657372984hlasenka (1).pdf
2026-08-14 13:31 - 2026-08-14 13:31 - 000850949 _____ C:\Users\kater\Downloads\4111249047-Classic-Invest-Michaela-Vicankova-Contract.pdf
2026-08-13 10:59 - 2026-08-13 10:59 - 000131026 _____ C:\Users\kater\Downloads\navrh-investicni-dotaznik-michaela-vicankova-cast-all-2026-08-13-10-59-06-00297900093.pdf
2026-08-12 05:51 - 2026-08-12 05:51 - 000038723 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-08-12 05:51 - 2026-08-12 05:51 - 000038723 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-08-10 09:59 - 2026-08-10 09:59 - 000054427 _____ C:\Users\kater\Downloads\wspdf6520175669143383000hlasenka.pdf
2026-08-06 22:16 - 2026-08-06 22:16 - 000825803 _____ C:\Users\kater\Downloads\8512122167-1.pdf
2026-08-06 08:56 - 2026-08-06 08:56 - 000035995 _____ C:\Users\kater\Downloads\72000036872310_20260803133304374_788.pdf
2026-08-06 08:22 - 2026-08-06 08:22 - 000952960 _____ C:\Users\kater\Downloads\Kompletní porovnání nabídek.pdf
2026-08-04 07:46 - 2026-08-04 07:46 - 000377402 _____ C:\Users\kater\Downloads\6466613615-smlouva-sken (2).pdf
2026-08-04 04:10 - 2026-08-04 04:10 - 000000000 ____D C:\Users\kater\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2026-07-30 09:01 - 2026-07-30 09:01 - 001327689 _____ C:\Users\kater\Downloads\Hanak_KNZ_1FG_smlouva_260730_090126.pdf
2026-07-29 17:06 - 2026-07-29 17:06 - 000266824 _____ C:\Users\kater\Downloads\Smlouva (12).pdf
2026-07-29 16:53 - 2026-07-29 16:53 - 000992903 _____ C:\Users\kater\Desktop\Hanáková - TP-nakup-MTPN-2411-tofill.pdf
2026-07-29 16:30 - 2026-07-29 16:30 - 000986366 _____ C:\Users\kater\Downloads\Zzj_zivot-10-002209-eliska-fabikova-29_07_2026 (1).pdf
2026-07-29 16:28 - 2026-07-29 16:28 - 001163374 _____ C:\Users\kater\Downloads\Zzj_zivot-10-002306-petr-hanak-29_07_2026.pdf
2026-07-29 16:12 - 2026-07-29 16:12 - 000986364 _____ C:\Users\kater\Downloads\Zzj_zivot-10-002209-eliska-fabikova-29_07_2026.pdf
2026-07-29 14:14 - 2026-07-29 14:14 - 000097683 _____ C:\Users\kater\Downloads\Infolist-penze-2026-07-29-13-57-15731-hanakova-karla.pdf
2026-07-29 10:55 - 2026-07-29 10:56 - 001054007 _____ C:\Users\kater\Downloads\4130761773-3.pdf
2026-07-28 16:00 - 2026-07-28 16:00 - 001152589 _____ C:\Users\kater\Downloads\Zzj_zivot-10-002306-petr-hanak-28_07_2026.pdf
2026-07-28 15:45 - 2026-07-28 15:45 - 000336449 _____ C:\Users\kater\Downloads\Hanak_KNZ_1FG_modelace_260728_154511.pdf
2026-07-28 14:51 - 2026-07-28 14:51 - 001341697 _____ C:\Users\kater\Downloads\Fabikova_KNZ_1FN_zmena_260728_145104.pdf
2026-07-28 14:50 - 2026-07-28 14:50 - 001347311 _____ C:\Users\kater\Downloads\Kiskova_KNZ_1FN_smlouva_260728_145009.pdf
2026-07-27 14:45 - 2026-07-27 14:45 - 000976721 _____ C:\Users\kater\Downloads\Zzj_zivot-10-002209-eliska-fabikova-27_07_2026.pdf
2026-07-27 14:42 - 2026-07-27 14:42 - 000351579 _____ C:\Users\kater\Downloads\Fabikova_KNZ_1FN_modelace_260727_144200.pdf
2026-07-27 13:47 - 2026-07-27 13:47 - 000346267 _____ C:\Users\kater\Downloads\Fabikova_KNZ_1FN_modelace_260727_134753.pdf
2026-07-27 13:44 - 2026-07-27 13:44 - 000351575 _____ C:\Users\kater\Downloads\Fabikova_KNZ_1FN_modelace_260727_134453.pdf
2026-07-27 13:03 - 2026-07-27 13:03 - 000325560 _____ (Gen Digital Inc.) C:\WINDOWS\system32\avgBoot.exe
2026-07-27 12:32 - 2026-07-27 12:32 - 001125526 _____ C:\Users\kater\Downloads\Zzj_zivot-10-002150-zuzana-kiskova-24_07_2026.pdf
2026-07-24 14:38 - 2026-07-24 14:38 - 000344535 _____ C:\Users\kater\Downloads\Kiskova_KNZ_1FN_modelace_260724_143819.pdf
2026-07-24 10:44 - 2026-07-24 10:44 - 000340424 _____ C:\Users\kater\Downloads\Kiskova_KNZ_1FN_modelace_260724_104437.pdf
2026-07-24 09:56 - 2026-07-24 09:56 - 008783182 _____ C:\Users\kater\Downloads\1423559867p-3.pdf
2026-07-24 09:55 - 2026-07-24 09:55 - 005466359 _____ C:\Users\kater\Downloads\1423559867p-4.pdf
2026-07-24 09:55 - 2026-07-24 09:55 - 000014984 _____ C:\Users\kater\Downloads\1423559867p-1.pdf
2026-07-22 13:35 - 2026-08-20 18:50 - 000000000 ____D C:\Users\kater\AppData\Local\Mozilla Firefox
2026-07-21 19:05 - 2026-07-21 19:05 - 001501033 _____ C:\Users\kater\Downloads\7153017619_Emríšková_Ľubica_Zdravotni predoceneni CPP.pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-08-20 19:10 - 2026-06-28 17:35 - 000003822 _____ C:\WINDOWS\system32\Tasks\AsusSystemDiagnosis_DriverQuality
2026-08-20 19:10 - 2026-05-22 13:51 - 000000000 ____D C:\FRST
2026-08-20 19:10 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-08-20 19:07 - 2025-06-29 03:30 - 000003752 _____ C:\WINDOWS\system32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474
2026-08-20 19:05 - 2025-06-29 03:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-08-20 19:05 - 2025-06-29 03:28 - 000018834 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-08-20 19:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-08-20 19:05 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-08-20 19:05 - 2023-05-24 09:25 - 000000000 ____D C:\ProgramData\AVG
2026-08-20 19:05 - 2022-09-30 14:17 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2026-08-20 19:05 - 2021-06-08 21:33 - 000000000 __SHD C:\Users\kater\IntelGraphicsProfiles
2026-08-20 19:05 - 2021-03-12 02:42 - 000000000 ___HD C:\Intel
2026-08-20 19:04 - 2024-04-01 09:21 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2026-08-20 19:04 - 2021-06-09 13:33 - 3069281280 _____ C:\Users\kater\Documents\katerina.volkova@sms-as.eu.pst
2026-08-20 19:04 - 2020-11-21 03:18 - 000012288 ___SH C:\DumpStack.log.tmp
2026-08-20 19:02 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-08-20 18:57 - 2025-06-29 03:35 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-08-20 18:55 - 2025-06-29 03:30 - 000003366 _____ C:\WINDOWS\system32\Tasks\RtkAudUService64_BG
2026-08-20 18:50 - 2025-06-29 03:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-08-20 18:50 - 2021-06-08 21:37 - 000002249 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-08-20 18:50 - 2021-06-08 21:37 - 000002208 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2026-08-20 18:49 - 2025-06-29 03:30 - 000004518 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1623180993
2026-08-20 18:49 - 2025-06-29 03:30 - 000004236 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1623180985
2026-08-20 18:49 - 2021-06-08 21:36 - 000001370 _____ C:\Users\kater\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2026-08-20 18:48 - 2022-04-04 12:40 - 000000000 ____D C:\ProgramData\Package Cache
2026-08-20 18:47 - 2021-06-08 21:42 - 000000918 _____ C:\Users\Public\Desktop\VLC media player.lnk
2026-08-20 18:38 - 2022-05-12 00:20 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-08-20 18:35 - 2025-06-29 03:24 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-08-20 15:22 - 2021-06-09 12:42 - 000000000 ____D C:\Users\kater\AppData\Roaming\Microsoft\Word
2026-08-20 12:18 - 2024-10-28 20:20 - 000000000 ____D C:\Users\kater\Desktop\SMLOUVY Z PROGRAMŮ BEZ HESEL
2026-08-20 11:03 - 2021-06-08 21:33 - 000000000 ____D C:\Users\kater\AppData\Local\D3DSCache
2026-08-20 10:38 - 2021-06-09 13:26 - 000000000 ____D C:\Users\kater\AppData\Roaming\Microsoft\Excel
2026-08-20 10:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-08-20 10:04 - 2021-06-08 21:34 - 000000000 ___RD C:\Users\kater\OneDrive
2026-08-20 09:21 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-08-20 09:19 - 2021-09-18 10:52 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-08-20 09:11 - 2025-06-29 03:30 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-934306686-1168684271-2714761465-1001
2026-08-20 09:11 - 2025-06-29 03:30 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-934306686-1168684271-2714761465-1001
2026-08-20 09:11 - 2025-06-29 03:30 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-08-20 09:11 - 2021-06-09 13:03 - 000002025 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-08-19 03:39 - 2023-01-17 11:28 - 000002276 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-08-19 03:39 - 2020-11-21 03:20 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-08-18 19:29 - 2022-09-30 14:18 - 000000000 ____D C:\Users\kater\AppData\Roaming\TeamViewer
2026-08-18 17:59 - 2023-03-09 17:29 - 000000000 ____D C:\Users\kater\Desktop\MODELACE DO ADMINU
2026-08-18 17:10 - 2021-06-09 12:42 - 000000000 ____D C:\Users\kater\AppData\Roaming\Microsoft\Office
2026-08-18 15:27 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-08-18 15:21 - 2020-11-21 03:23 - 000000000 ____D C:\Program Files\Microsoft Office
2026-08-16 03:11 - 2025-06-29 03:24 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-08-16 03:08 - 2025-12-10 05:20 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-08-16 03:08 - 2025-07-09 04:10 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-08-16 03:08 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-08-16 03:08 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-08-16 03:07 - 2026-05-14 02:48 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-08-16 03:07 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\DiagTrack
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-08-16 03:07 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-08-15 15:34 - 2025-06-29 03:30 - 000003640 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-08-15 15:34 - 2025-06-29 03:30 - 000003514 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-08-14 14:28 - 2022-05-02 12:12 - 000000000 ____D C:\Users\kater\Desktop\KLIENTI -VŠE
2026-08-14 14:06 - 2026-01-21 08:09 - 000004132 _____ C:\WINDOWS\system32\Tasks\ASUS Update Checker 2.0
2026-08-14 14:06 - 2025-06-29 03:30 - 000003756 _____ C:\WINDOWS\system32\Tasks\ASUS Optimization 36D18D69AFC3
2026-08-13 10:56 - 2021-06-08 21:33 - 000000000 ____D C:\Users\kater\AppData\Local\Packages
2026-08-13 10:50 - 2023-08-01 16:46 - 000002148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-08-12 08:35 - 2025-06-29 03:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2026-08-12 08:35 - 2023-11-13 10:30 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-08-12 05:49 - 2025-06-29 03:27 - 003375104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-08-12 05:38 - 2021-07-07 08:45 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-08-12 05:32 - 2021-07-07 08:45 - 228836432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-08-11 03:39 - 2023-05-24 09:34 - 000000000 ____D C:\Users\kater\AppData\Local\AVG
2026-08-07 18:27 - 2023-04-12 08:55 - 000000000 ____D C:\Users\kater\AppData\Roaming\Zoom
2026-08-04 04:10 - 2025-09-08 10:39 - 000004248 _____ C:\WINDOWS\system32\Tasks\ZoomUpdateTaskUser-S-1-5-21-934306686-1168684271-2714761465-1001
2026-08-03 14:54 - 2023-06-16 09:37 - 000002389 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner Browser.lnk
2026-08-03 14:54 - 2023-06-16 09:37 - 000002354 _____ C:\Users\Public\Desktop\CCleaner Browser.lnk
2026-08-03 14:54 - 2023-06-16 09:36 - 000000000 ____D C:\Program Files (x86)\CCleaner Browser
2026-08-03 09:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-07-30 09:30 - 2026-02-03 09:58 - 000390784 _____ (Mozilla Foundation) C:\Users\kater\Desktop\Firefox.exe
2026-07-30 09:30 - 2021-06-08 21:39 - 000001343 _____ C:\Users\kater\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-07-27 14:15 - 2023-06-20 15:31 - 000000000 ____D C:\Users\kater\AppData\Local\CrashDumps
2026-07-27 13:14 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-07-27 13:03 - 2025-06-29 03:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVG
2026-07-27 13:03 - 2023-05-24 09:25 - 001299040 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgSP.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000857184 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgSnx.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000637024 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgNetHub.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000473184 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgVmm.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000393824 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbidsdriver.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000317024 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbidsh.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000299616 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000245856 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgArPot.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000100960 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgRdr2.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000080992 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbuniv.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000071776 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgRvrt.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000034912 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgKbd.sys
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-08-2026
Ran by kater (20-08-2026 19:12:10)
Running from C:\Users\kater\Desktop
Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) (2025-06-29 01:30:49)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-934306686-1168684271-2714761465-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-934306686-1168684271-2714761465-503 - Limited - Disabled)
Guest (S-1-5-21-934306686-1168684271-2714761465-501 - Limited - Disabled)
kater (DisplayName: Kateřina Volková) (S-1-5-21-934306686-1168684271-2714761465-1001 - Administrators - Enabled) [MS Account] => C:\Users\kater
WDAGUtilityAccount (S-1-5-21-934306686-1168684271-2714761465-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee VirusScan (Disabled - Up to date) {9D4501E6-72F6-2877-C789-89AF6F535B2C}
AV: AVG Antivirus (Enabled - Up to date) {18A975F9-A60C-37D8-E30B-4BEF31AD3411}
FW: McAfee Firewall (Disabled) {A57E80C3-3899-292F-ECD6-209A91801C57}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 26.001.21789 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AppLogLibSetup (HKLM-x32\...\{52FB0C8F-DF05-4C61-AEB6-18C55F8C385F}) (Version: 1.0.3.0 - Brother Industries Ltd.) Hidden
AVG Internet Security (HKLM\...\AVG Antivirus) (Version: 26.7.11086.3749 - Gen Digital Inc.)
AVG TuneUp (HKLM\...\AVG TuneUp) (Version: 26.6.18812.12908 - Gen Digital Inc.)
BrLauncher (HKLM-x32\...\{42D26B47-887C-45FC-BCAE-0BE485C5C0BB}) (Version: 2.0.11.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{190861E7-09C5-42D8-BB4B-0AFB234BCFC1}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{9C9FD76C-DA62-48C3-9450-B5DBDA5E5484}) (Version: 10.7.0.24 - Brother Industries, Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{e06ff58b-3db9-4634-9545-fdbec7c2585f}) (Version: 10.7.0.24 - Brother Industries, Ltd.)
Brother Printer Driver (HKLM-x32\...\{35E7339E-FD1F-4B0B-B216-24BFCDAFC8B4}) (Version: 1.8.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{D1BF1A40-B582-4533-A908-0D582D747A21}) (Version: 1.0.26.1 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{32F47565-84B1-42CC-B09A-4CDDD9A32F94}) (Version: 1.0.20.0 - Brother Industries Ltd.) Hidden
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.10.1464.1889 - Piriform)
CCleaner Browser (HKLM-x32\...\CCleaner Browser) (Version: 150.0.35121.182 - Autoři prohlížeče CCleaner Browser)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1636.4 - Piriform Software) Hidden
Classic Shell (HKLM\...\{CABCE573-0A86-42FA-A52A-C7EA61D5BE08}) (Version: 4.3.1 - IvoSoft)
ControlCenter4 (HKLM-x32\...\{9091B952-8719-49C3-9CC7-6E20EC61081F}) (Version: 4.6.6.1 - Brother Industries, Ltd.) Hidden
ControlCenter4 CSDK (HKLM-x32\...\{FD8A9511-BFC9-43B5-BB75-9CEC0EA03CF0}) (Version: 4.6.1.1 - Brother Industries, Ltd.) Hidden
FORM studio (HKLM-x32\...\FSCZ_is1) (Version: - KASTNER software s.r.o.)
Google Chrome (HKLM\...\{8F334D58-3F69-3BBC-BCF9-517ED38C12E8}) (Version: 151.0.7922.170 - Google LLC)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
HP Dropbox Plugin (HKLM-x32\...\{19EDEC5D-055E-4AD0-88AC-C342608FC47E}) (Version: 36.0.445.57508 - HP)
HP Google Drive Plugin (HKLM-x32\...\{1B225296-B1F1-40B3-8427-844E97CB2D1B}) (Version: 36.0.445.57508 - HP)
HP LaserJet Pro MFP M426-M427 (HKLM-x32\...\{ba385a8d-d398-4df7-9507-0c6a318b1371}) (Version: 16.0.22049.102 - Hewlett-Packard)
HP LJ M426M427 Scan HP Scan (HKLM-x32\...\{C2DEBDE8-1481-4F9A-AE5D-7F9F72717598}) (Version: 1.0.302.0 - Hewlett-Packard Co.) Hidden
HP Unified IO (HKLM\...\{5C76ED0D-0F6F-4985-8B34-F9AE7834848F}) (Version: 2.0.0.434 - HP) Hidden
HP Unified IO (HKLM-x32\...\{F1390872-2500-4408-A46C-CD16C960C661}) (Version: 2.0.0.434 - HP) Hidden
HPLJProMFPM426M427 (HKLM-x32\...\{2304BE7D-2849-406C-9A96-58013461E506}) (Version: 0.05.0000 - Hewlett-Packard) Hidden
HttpToUsbBridge (HKLM-x32\...\{A92EB32D-F0D1-45D8-A071-262D1229D400}) (Version: 2.0.33.1 - Brother Industries Ltd.)
IrfanView 4.75 (64-bit) (HKLM\...\IrfanView64) (Version: 4.75 - Irfan Skiljan)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Microsoft 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft 365 - hu-hu (HKLM\...\O365HomePremRetail - hu-hu) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft 365 - pl-pl (HKLM\...\O365HomePremRetail - pl-pl) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft 365 - sk-sk (HKLM\...\O365HomePremRetail - sk-sk) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 151.0.4129.93 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 151.0.4129.93 - Microsoft Corporation) Hidden
Microsoft Office 2016 pro domácnosti - cs-cz (HKLM\...\HomeStudentRetail - cs-cz) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.145.0728.0010 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.24.31301 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 154.0 (x64 cs)) (Version: 154.0 - Mozilla)
Mozilla Firefox (x64 cs) (HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\Mozilla Firefox) (Version: 153.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 154.0 - Mozilla)
NetworkRepairTool (HKLM-x32\...\{86E68F57-FAFE-4052-BDD4-3B90C38236AE}) (Version: 1.2.16.0 - Brother Industries, Ltd.) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20228.20190 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14026.20246 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.14026.20246 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0415-1000-0000000FF1CE}) (Version: 16.0.20228.20190 - Microsoft Corporation) Hidden
Opera Stable 134.0.5954.66 (HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\Opera 134.0.5954.66) (Version: 134.0.5954.66 - Opera Software)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.255 - Google, Inc.)
ScannerUtilityInstaller (HKLM-x32\...\{D65C0754-7790-427F-AD73-D7C644260F57}) (Version: 1.19.9.1 - Brother) Hidden
SoftwareUpdateNotification (HKLM-x32\...\{E28A6F15-BFBE-4D20-8B5F-6EABAA1E545E}) (Version: 1.0.14.0 - Brother Industries, Ltd.) Hidden
StatusMonitor (HKLM-x32\...\{9D3555A9-C100-45A0-BE3E-33C62D9B2B9A}) (Version: 1.25.4.0 - Brother Industries, Ltd.) Hidden
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.80.6 - TeamViewer)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.58 - Ghisler Software GmbH)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)
UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 3.0.23 - VideoLAN)
WebAdvisor od společnosti McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.2.110 - McAfee, LLC)
WhatsApp (Outdated) (HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\WhatsApp) (Version: 2.2326.10 - WhatsApp)
WinRAR 7.13 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.13.0 - win.rar GmbH)
Xerox Desktop Print Experience 8.5 (HKLM\...\{16B4CC67-50F6-DD5B-CEF3-E2F2EF460494}) (Version: 8.158.0.0 - Xerox Corporation)
Zoom Workplace (HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\ZoomUMX) (Version: 7.0.6 (43848) - Zoom Communications, Inc.)
Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-08-13] ()
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-06-25] (INTEL CORP) [Startup Task]
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-04-16] (Microsoft Corporation)
DTS Audio Processing -> C:\Program Files\WindowsApps\DTSInc.DTSAudioProcessing_1.11.2.0_x64__t5j2fzbtdg37r [2026-05-26] (DTS, Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_166.1.1185.0_x64__v10z8vjag6ke6 [2026-08-12] (HP Inc.)
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\AI [2026-08-18] ()
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2602.23002.0_x64__8wekyb3d8bbwe [2026-04-02] (Microsoft Corporation) [Startup Task]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2023-09-15] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_56.20201.588.0_x64__8wekyb3d8bbwe [2026-03-02] (Microsoft Corporation)
Microsoft.HEVCVideoExtensionFirstParty -> C:\Program Files\WindowsApps\Microsoft.HEVCVideoExtensionFirstParty_2.4.44.0_x64__8wekyb3d8bbwe [2026-04-22] (Microsoft Corporation)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-08-18] ()
MyASUS -> C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.73.0_x64__qmba6cd70vzyy [2026-08-14] (ASUSTeK COMPUTER INC.) [Startup Task]
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-08-18] ()
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.48.312.0_x64__dt26b99r8h8gj [2024-01-17] (Realtek Semiconductor Corp)
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0 [2026-08-13] (Spotify AB) [Startup Task]
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2632.100.0_x64__cv1g1gvanyjgm [2026-08-20] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.3.1.0_x64__8wekyb3d8bbwe [2026-08-06] (Microsoft Corp.)
WinRAR -> C:\Program Files\WinRAR [2025-09-08] (win.rar GmbH)
Xerox Print and Scan Experience -> C:\Program Files\WindowsApps\XeroxCorp.PrintExperience_9.99.18.0_x64__f7egpvdyrs2a8 [2026-02-20] (Xerox Corp)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-934306686-1168684271-2714761465-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-934306686-1168684271-2714761465-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-934306686-1168684271-2714761465-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [AVG TuneUp] -> {13004120-FCAF-4232-A255-807EAD6E7D02} => C:\Program Files\AVG\TuneUp\tucontextmenu.dll [2025-12-11] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers3: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [AVG TuneUp] -> {13004120-FCAF-4232-A255-807EAD6E7D02} => C:\Program Files\AVG\TuneUp\tucontextmenu.dll [2025-12-11] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers6: [AVG TuneUp] -> {13004120-FCAF-4232-A255-807EAD6E7D02} => C:\Program Files\AVG\TuneUp\tucontextmenu.dll [2025-12-11] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\WINDOWS\System32\StartMenuHelper64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2022-04-04 12:37 - 2005-04-22 13:36 - 000143360 _____ () [File not signed] C:\WINDOWS\system32\BrSNMP64.dll
2022-04-04 12:37 - 2016-11-01 11:27 - 000090112 _____ (Brother Industries, Ltd.) [File not signed] C:\WINDOWS\system32\BrNetSti.dll
2009-09-16 18:44 - 2009-09-16 18:44 - 000153088 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\hptcpmib.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000331264 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\HpTcpMon.dll
2009-09-16 11:44 - 2009-09-16 11:44 - 000132096 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\hpzjrd01.dll
2018-07-15 13:15 - 2018-07-15 13:15 - 003664696 _____ (Ivaylo Beltchev -> IvoSoft) [File not signed] C:\Program Files\Classic Shell\ClassicStartMenuDLL.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000317440 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\System32\HPTcpMUI.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\avgSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\avgSP.sys => ""="Driver"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 11:14 - 2026-08-20 19:05 - 000001012 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 gen-webserver.local www.gen-webserver.local # gen digital helper server
127.0.0.1 revocation.gen-webserver.local www.revocation.gen-webserver.local # gen digital helper server
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.1.1
Windows Firewall is enabled.
Network Binding:
=============
Wi-Fi: Qualcomm Atheros QCA9377 Wireless Network Adapter -> Qcamain10x64.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\asus\wallpapers\asus.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "Classic Start Menu"
HKLM\...\StartupApproved\Run32: => "M17A"
HKLM\...\StartupApproved\Run32: => "ControlCenter4"
HKLM\...\StartupApproved\Run32: => "BrStsMon00"
HKLM\...\StartupApproved\Run32: => "BrotherSoftwareUpdateNotification"
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\StartupApproved\Run: => "Opera Stable"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{7065855F-059A-42D6-BA56-7F1E7FD71C85}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{6E3E2336-EDB6-4467-B44A-B6FA08B143AB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{D985F8BD-426F-4866-9B81-1389E9971A34}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{F2F4BCF5-B5CA-427B-9119-74B81405A109}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{5A74108D-AF79-48C9-A434-B34D1C038087}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25007.203.3359.7325_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{83CAD2A7-03AD-4676-A3BE-19ADB680C816}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25007.203.3359.7325_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4916A1C6-3062-4567-B870-7F2D3929CD26}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{CC878210-F834-4D3A-9140-009A58492D8C}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{FAD79280-7DD1-4BAB-A007-DAB5073F3C67}] => (Allow) LPort=54955
FirewallRules: [{E3F8560A-1843-4226-AF96-037609A9F481}] => (Allow) LPort=54950
FirewallRules: [{5A0446DA-7146-469E-8DDF-71333AD0A383}] => (Allow) C:\Program Files\AVG\Antivirus\AVGUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{81B45C03-16AB-4FB6-969D-9BD33E34F395}] => (Allow) C:\Program Files\AVG\Antivirus\AVGUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{1073AD4B-081E-423A-8DBF-3FDB17806081}] => (Allow) C:\Program Files (x86)\Browny02\Brother\BrPrintFinishNotice\BrPrintFinishNotice.exe (Brother Industries, Ltd. -> )
FirewallRules: [{2EABF101-50D5-4B05-BE00-3CAB3C95AD79}] => (Allow) C:\Program Files (x86)\Browny02\Brother\BrPrintFinishNotice\BrPrintFinishNotice.exe (Brother Industries, Ltd. -> )
FirewallRules: [{6BD216AB-37BE-49A5-9580-9A243840328E}] => (Allow) LPort=54925
FirewallRules: [{3D24D50A-37AF-479D-A933-F8B4FA60479E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{6573822C-598A-41B4-B39F-A5111306A47B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{0A37A45C-942D-461E-B94F-964CDD63D6A1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{7ACC9A52-4C0E-44CE-B6F1-CFBCF8DF2DA6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{D836E9D6-82B5-43F2-B8C7-C878B9464236}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{F25374A8-EC9F-4441-807A-E874FF78A6AC}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{7BA78620-C598-40E8-A144-3A49967475DA}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{D68652A4-A860-4C6E-85F3-092868E88C28}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{9D94E13B-0A4D-43CC-B0C1-0BB25EDC15D4}] => (Allow) C:\Users\kater\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [{96391DAE-C43C-4B16-8462-CAC9302C3877}] => (Allow) C:\Users\kater\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{DC443134-6B58-4DEF-A526-BDB842FC8C9A}] => (Allow) C:\Users\kater\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{2613458A-A31A-4FDE-8694-A6870B648882}] => (Allow) C:\Program Files\AVG\TuneUp\TuneupUI.exe (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
FirewallRules: [{C294FAC4-F5D0-4487-9044-F3262486FA83}] => (Allow) C:\Program Files\AVG\TuneUp\TuneupUI.exe (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
FirewallRules: [{7F0481C7-045A-42CD-AF08-E3A757D24839}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F8F83FC3-F893-4F9B-A0DE-495DD4E5239F}] => (Allow) C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{BE8C8F16-B035-4AF8-9AC3-7D4C95029C60}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F81EFB86-B44E-4FBC-BBE8-9834A4D7563F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{94AB4A27-5410-41DC-BC98-49A5A2B58E5F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2306C507-5188-4BD6-AB53-4DEB712183A0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D1FF3011-BAD8-498A-8D3D-9FC2695512FE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4EAC8ACB-4ECE-41EE-9D24-E441A1777FB9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{14EACDB1-A249-4BBD-B117-FCBCEB06F958}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F5D8ADC8-A3F2-402F-BDFB-41FB914F0CF6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C0B44FAF-2EBA-4E8F-B69E-1ECBF911772E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5115B35F-1A02-4CDD-885C-C39FBBFA54C6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D6A7D802-DF45-4B6D-9F39-9263647C263C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1EFBBC6F-38F3-419C-A2B7-37D23F470556}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{65818687-FAF0-48AE-8A7D-C666DCA21913}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{87DE05AE-1DA1-4C6E-88F1-BB6FEC7C824C}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.73.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{00EA0753-DC47-4938-B76E-693241C26DD9}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.73.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{F1489B94-0960-4E77-9E95-EF964AEEF9E1}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.73.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{9459CE90-DD79-4641-9C8A-2CF8D5513104}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.73.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{C2880B7B-B773-44CE-BD1A-CD90F9CF6DC7}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.46011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B6E9FD63-A5AA-4F3A-AEB0-FBFBD58092BA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.46011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0DF5AD94-FDD5-424B-8DAE-135848992B4B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.46011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{24C41370-1B6F-4626-A070-AB3F18F2217F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.46011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2E2C103A-E2C6-40E2-AB54-68C4C0A717EB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{63651F65-BEB8-4707-BA6F-CE05DC3FD128}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{15DE0617-5D5E-4863-BD69-6AE4C527E2F4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{F902C184-967D-4866-9C0B-0600D0410CA1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{138C24D4-EE16-4476-AD45-FAA8C7A006A7}] => (Allow) C:\Users\kater\AppData\Local\Programs\Opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{7AEB4FAC-A6C6-4514-9DDF-B661C0584CC1}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{37228596-5298-404D-BC62-7D9F91AE382C}] => (Allow) C:\Users\kater\AppData\Local\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{A1EA563F-FB3D-4864-838B-E3814E211701}] => (Allow) C:\Users\kater\AppData\Local\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E2618912-4E59-4B10-9D96-A8CB69D5E302}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSwitch\AsusSwitchNet.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{ACCE6D02-30CB-4B74-97B0-771F5C1C0A1F}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSwitch\AsusSwitchNetMDNS.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
==================== Restore Points =========================
20-08-2026 03:31:55 Windows Update
20-08-2026 18:51:54 Piriform Driver Updater Restore Point
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (08/20/2026 07:05:30 PM) (Source: CertEnroll) (EventID: 87) (User: NT AUTHORITY)
Description: Registrace certifikátu SCEP pro Místní systém přes https://INTC-KeyId-b066d9697f5d3a07b425 ... s/Aik/scep se nepovedla:
PkiStatus(11): SCEPDispositionPendingChallenge
EnrollStatus(32): EnrollUnknown
Operace byla dokončena úspěšně. 0x0 (WIN32: 0)
SubmitDone
SubmitV2Attestation: Bad Request
{"Message":"V2 Protocol AIK certificate requests with P-256 ECC public keys are not supported. Public key algorithm: 1.2.840.10045.2.1, Key length: 256."}
HTTP/1.1 400 Bad Request
Date: Thu, 20 Aug 2026 17:05:30 GMT
Content-Length: 154
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 4f9bf805-f3f3-4579-a26a-38cf4d780461
Metoda: POST(1938ms)
Fáze: SubmitDone
Chybná žádost (400) 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)
Error: (08/20/2026 07:05:16 PM) (Source: Universal Print) (EventID: 1) (User: )
Description: Failed to GetUserSid. hr: 0x8001012d
Error: (08/20/2026 07:05:16 PM) (Source: Universal Print) (EventID: 1) (User: )
Description: Failed to GetUserSid. hr: 0x8001012d
Error: (08/20/2026 07:05:07 PM) (Source: USBAppControl) (EventID: 32767) (User: )
Description: Wait Workflow Commands request from device.
Error: (08/20/2026 07:05:07 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Wait Workflow Commands request from device.
Error: (08/20/2026 07:05:07 PM) (Source: USBAppControl) (EventID: 32767) (User: )
Description: Start Server...
Error: (08/20/2026 07:05:06 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Start Broadcast Receiver Server...
Error: (08/20/2026 07:05:06 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Start Server...
System errors:
=============
Error: (08/20/2026 07:07:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (08/20/2026 07:07:09 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (30000 ms).
Error: (08/20/2026 07:05:04 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Intel(R) TPM Provisioning Service bylo dosaženo časového limitu (45000 ms).
Error: (08/20/2026 06:54:04 PM) (Source: IntcOED) (EventID: 387) (User: )
Description: Event-ID 387
Error: (08/20/2026 10:00:54 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (08/20/2026 10:00:54 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (30000 ms).
Error: (08/20/2026 09:57:55 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba Windows Update se po přijetí pokynu pro vypnutí neukončila správně.
Error: (08/20/2026 09:54:27 AM) (Source: Schannel) (EventID: 4108) (User: NT AUTHORITY)
Description: Certifikát přijatý od vzdáleného serveru nebyl správně ověřen. Kód chyby je 0x80092013. Žádost o připojení TLS selhala. Připojená data obsahují certifikát serveru.
proces klienta SSPI TuneupSvc (PID: 4984).
Windows Defender:
================
CodeIntegrity:
===============
Date: 2026-08-17 07:11:43
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\AVG\Antivirus\AVGSvc.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends International, LLC. X421EAY.308 01/20/2022
Motherboard: ASUSTeK COMPUTER INC. X421EAY
Processor: 11th Gen Intel(R) Core(TM) i3-1115G4 @ 3.00GHz
Percentage of memory in use: 77%
Total physical RAM: 7885.17 MB
Available physical RAM: 1796.68 MB
Total Virtual: 15770.34 MB
Available Virtual: 4719.16 MB
==================== Drives ================================
Disk 0 - Drive c: (OS) (Fixed) (Total:135.58 GB) (Free:15.26 GB) (Model: NVMe WDC PC SN530 SDBPNPZ-256G-1002) (Protected) NTFS
Disk 0 - Drive d: (DATA) (Fixed) (Total:101.45 GB) (Free:100.95 GB) (Model: NVMe WDC PC SN530 SDBPNPZ-256G-1002) (Protected) NTFS
Disk 0 - \\?\Volume{606e8319-babe-44a8-8998-8b19ac2ffab7}\ (RECOVERY) (Fixed) (Total:0.98 GB) (Free:0.06 GB) NTFS
Disk 0 - \\?\Volume{bdb66e61-81ce-4f10-a53c-9d2566cd94bd}\ (MYASUS) (Fixed) (Total:0.19 GB) (Free:0.14 GB) FAT32
Disk 0 - \\?\Volume{a4a4ae24-8cfb-4f13-8bc2-6b32c9bd3a2a}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.2 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: B82E8B7D)
Partition: GPT.
==================== End of Addition.txt =======================
prosím o kontrolu zpomalený NTB
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 120083
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu zpomalený NTB
Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {86820B88-D791-4D07-9424-EA5F081E9095} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (No File)
Task: {904E9E2A-E3CA-4A8C-82B3-88C5A7E81236} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (No File)
Task: {73CDFB22-7130-4D46-B2F9-541DBB239B98} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
U3 AVG Business Console Client Antivirus Service; no ImagePath
U3 AVG Firewall; no ImagePath
U3 avgArDisk; no ImagePath
U3 avgBcc; no ImagePath
U3 avgbdisk; no ImagePath
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FirewallRules: [{4916A1C6-3062-4567-B870-7F2D3929CD26}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{CC878210-F834-4D3A-9140-009A58492D8C}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{3D24D50A-37AF-479D-A933-F8B4FA60479E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{6573822C-598A-41B4-B39F-A5111306A47B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{0A37A45C-942D-461E-B94F-964CDD63D6A1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{7ACC9A52-4C0E-44CE-B6F1-CFBCF8DF2DA6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{D836E9D6-82B5-43F2-B8C7-C878B9464236}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{F25374A8-EC9F-4441-807A-E874FF78A6AC}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{7BA78620-C598-40E8-A144-3A49967475DA}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{D68652A4-A860-4C6E-85F3-092868E88C28}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosím o kontrolu zpomalený NTB
Fix result of Farbar Recovery Scan Tool (x64) Version: 18-08-2026
Ran by kater (20-08-2026 19:51:55) Run:1
Running from C:\Users\kater\Desktop
Loaded Profiles: kater
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {86820B88-D791-4D07-9424-EA5F081E9095} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (No File)
Task: {904E9E2A-E3CA-4A8C-82B3-88C5A7E81236} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (No File)
Task: {73CDFB22-7130-4D46-B2F9-541DBB239B98} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
U3 AVG Business Console Client Antivirus Service; no ImagePath
U3 AVG Firewall; no ImagePath
U3 avgArDisk; no ImagePath
U3 avgBcc; no ImagePath
U3 avgbdisk; no ImagePath
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FirewallRules: [{4916A1C6-3062-4567-B870-7F2D3929CD26}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{CC878210-F834-4D3A-9140-009A58492D8C}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{3D24D50A-37AF-479D-A933-F8B4FA60479E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{6573822C-598A-41B4-B39F-A5111306A47B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{0A37A45C-942D-461E-B94F-964CDD63D6A1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{7ACC9A52-4C0E-44CE-B6F1-CFBCF8DF2DA6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{D836E9D6-82B5-43F2-B8C7-C878B9464236}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{F25374A8-EC9F-4441-807A-E874FF78A6AC}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{7BA78620-C598-40E8-A144-3A49967475DA}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{D68652A4-A860-4C6E-85F3-092868E88C28}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{C885AA15-1764-4293-B82A-0586ADD46B35} => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{86820B88-D791-4D07-9424-EA5F081E9095}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{86820B88-D791-4D07-9424-EA5F081E9095}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{904E9E2A-E3CA-4A8C-82B3-88C5A7E81236}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{904E9E2A-E3CA-4A8C-82B3-88C5A7E81236}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{73CDFB22-7130-4D46-B2F9-541DBB239B98}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73CDFB22-7130-4D46-B2F9-541DBB239B98}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
HKLM\System\CurrentControlSet\Services\AVG Business Console Client Antivirus Service => removed successfully
AVG Business Console Client Antivirus Service => service removed successfully
HKLM\System\CurrentControlSet\Services\AVG Firewall => could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgArDisk => removed successfully
avgArDisk => service removed successfully
HKLM\System\CurrentControlSet\Services\avgBcc => could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgbdisk => could not remove, key could be protected
Could not move "C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2" => Scheduled to move on reboot.
"HKU\S-1-5-21-934306686-1168684271-2714761465-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4916A1C6-3062-4567-B870-7F2D3929CD26}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CC878210-F834-4D3A-9140-009A58492D8C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3D24D50A-37AF-479D-A933-F8B4FA60479E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6573822C-598A-41B4-B39F-A5111306A47B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0A37A45C-942D-461E-B94F-964CDD63D6A1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7ACC9A52-4C0E-44CE-B6F1-CFBCF8DF2DA6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D836E9D6-82B5-43F2-B8C7-C878B9464236}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F25374A8-EC9F-4441-807A-E874FF78A6AC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7BA78620-C598-40E8-A144-3A49967475DA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D68652A4-A860-4C6E-85F3-092868E88C28}" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 67219980 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 32284 B
Windows/system/drivers => 138285309 B
Edge => 144090360 B
Chrome => 1919645985 B
Firefox => 1632037 B
Opera => 142176345 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 4 B
ProgramData => 989729 B
Public => 0 B
systemprofile => 471122 B
systemprofile32 => 2 B
LocalService => 1449922 B
NetworkService => 4 B
kater => 294388894 B
defaultuser100000 => 7172 B
defaultuser100000.LAPTOP-KUQKOU8M => 10756 B
defaultuser100000.LAPTOP-KUQKOU8M.000 => 9220 B
RecycleBin => 0 B
EmptyTemp: => 2.5 GB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 20-08-2026 19:54:49)
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 => Could not move
Result of scheduled keys to remove after reboot:
HKLM\System\CurrentControlSet\Services\AVG Firewall => could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgBcc => could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgbdisk => could not remove, key could be protected
==== End of Fixlog 19:54:51 ====
Ran by kater (20-08-2026 19:51:55) Run:1
Running from C:\Users\kater\Desktop
Loaded Profiles: kater
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {86820B88-D791-4D07-9424-EA5F081E9095} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (No File)
Task: {904E9E2A-E3CA-4A8C-82B3-88C5A7E81236} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (No File)
Task: {73CDFB22-7130-4D46-B2F9-541DBB239B98} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
U3 AVG Business Console Client Antivirus Service; no ImagePath
U3 AVG Firewall; no ImagePath
U3 avgArDisk; no ImagePath
U3 avgBcc; no ImagePath
U3 avgbdisk; no ImagePath
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FirewallRules: [{4916A1C6-3062-4567-B870-7F2D3929CD26}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{CC878210-F834-4D3A-9140-009A58492D8C}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{3D24D50A-37AF-479D-A933-F8B4FA60479E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{6573822C-598A-41B4-B39F-A5111306A47B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{0A37A45C-942D-461E-B94F-964CDD63D6A1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{7ACC9A52-4C0E-44CE-B6F1-CFBCF8DF2DA6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{D836E9D6-82B5-43F2-B8C7-C878B9464236}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{F25374A8-EC9F-4441-807A-E874FF78A6AC}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{7BA78620-C598-40E8-A144-3A49967475DA}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{D68652A4-A860-4C6E-85F3-092868E88C28}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{C885AA15-1764-4293-B82A-0586ADD46B35} => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{86820B88-D791-4D07-9424-EA5F081E9095}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{86820B88-D791-4D07-9424-EA5F081E9095}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{904E9E2A-E3CA-4A8C-82B3-88C5A7E81236}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{904E9E2A-E3CA-4A8C-82B3-88C5A7E81236}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{73CDFB22-7130-4D46-B2F9-541DBB239B98}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73CDFB22-7130-4D46-B2F9-541DBB239B98}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
HKLM\System\CurrentControlSet\Services\AVG Business Console Client Antivirus Service => removed successfully
AVG Business Console Client Antivirus Service => service removed successfully
HKLM\System\CurrentControlSet\Services\AVG Firewall => could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgArDisk => removed successfully
avgArDisk => service removed successfully
HKLM\System\CurrentControlSet\Services\avgBcc => could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgbdisk => could not remove, key could be protected
Could not move "C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2" => Scheduled to move on reboot.
"HKU\S-1-5-21-934306686-1168684271-2714761465-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4916A1C6-3062-4567-B870-7F2D3929CD26}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CC878210-F834-4D3A-9140-009A58492D8C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3D24D50A-37AF-479D-A933-F8B4FA60479E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6573822C-598A-41B4-B39F-A5111306A47B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0A37A45C-942D-461E-B94F-964CDD63D6A1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7ACC9A52-4C0E-44CE-B6F1-CFBCF8DF2DA6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D836E9D6-82B5-43F2-B8C7-C878B9464236}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F25374A8-EC9F-4441-807A-E874FF78A6AC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7BA78620-C598-40E8-A144-3A49967475DA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D68652A4-A860-4C6E-85F3-092868E88C28}" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 67219980 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 32284 B
Windows/system/drivers => 138285309 B
Edge => 144090360 B
Chrome => 1919645985 B
Firefox => 1632037 B
Opera => 142176345 B
Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 4 B
ProgramData => 989729 B
Public => 0 B
systemprofile => 471122 B
systemprofile32 => 2 B
LocalService => 1449922 B
NetworkService => 4 B
kater => 294388894 B
defaultuser100000 => 7172 B
defaultuser100000.LAPTOP-KUQKOU8M => 10756 B
defaultuser100000.LAPTOP-KUQKOU8M.000 => 9220 B
RecycleBin => 0 B
EmptyTemp: => 2.5 GB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 20-08-2026 19:54:49)
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 => Could not move
Result of scheduled keys to remove after reboot:
HKLM\System\CurrentControlSet\Services\AVG Firewall => could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgBcc => could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgbdisk => could not remove, key could be protected
==== End of Fixlog 19:54:51 ====
-
Rudy
- Site Admin
- Příspěvky: 120083
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu zpomalený NTB
Smazáno. Zrychlil se chod NB?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosím o kontrolu zpomalený NTB
děkuji vyzkouším
-
Rudy
- Site Admin
- Příspěvky: 120083
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosím o kontrolu zpomalený NTB
OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?