VIRY.CZ

Přeji dobrý den.

Prosím o pomoc s počítačem mé vnučky.
Je pomalý a harddisk stále něco dělá.
Nechal jsem ho prohlédnout ESET Online programem a také jsem nechal přes noc proběhnout všechny aktualizace.
Problém ale toto nevyřešilo.


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-11-2025
Ran by Gige (administrator) on DESKTOP-45VH2CU (HP HP Pavilion Gaming Desktop 690-00xx) (16-01-2026 16:15:42)
Running from C:\Users\Gige\Downloads\FRST64.exe
Loaded Profiles: Gige
Platform: Microsoft Windows 11 Home Version 25H2 26200.7623 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\Google\Chrome\Application\chrome.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files\mcafee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\mcafee\WebAdvisor\uihost.exe
(C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.15.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.15.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(cmd.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\mcafee\WebAdvisor\browserhost.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\SysInfoCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\BridgeCommunication.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.15.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <10>
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Media Network\HPMediaNetwork.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <8>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SrTasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\SysInfoCap.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\mcafee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2512.1001.34.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.195.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HPLightingBarControl] => C:\Program Files\HP\LightingBarControl\LightingBar.exe [4413376 2018-09-28] (Wistron Corporation -> HP Inc.)
HKLM\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2097600 2018-04-18] (Realtek Semiconductor Corp. -> Realtek)
HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [39520672 2025-11-28] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1848064 2025-02-17] (Overwolf Ltd -> Overwolf Ltd.)
HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\...\Run: [MicrosoftEdgeAutoLaunch_5D8C3063FA9DAB358D0609B84D66B707] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4228176 2026-01-08] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\...\Run: [HPSEU_Host_Launcher] => C:\Program Files\HP\HP System Event Utility\Host Launcher\HpseuHostLauncher.exe [545864 2025-11-15] (HP Inc. -> HP Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2025-11-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\143.0.7499.193\Installer\chrmstp.exe [2026-01-11] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {E0CF4895-06C8-4064-87F9-436427ABDBE8} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Gige\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [15205744 2026-01-15] (ESET, spol. s r.o. -> ESET)
Task: {CFECA71B-689E-4CE3-8602-2B5E2F9BA6C4} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Gige\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [15205744 2026-01-15] (ESET, spol. s r.o. -> ESET)
Task: {E50044B1-E523-4934-8ECB-E34472D86F82} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem144.0.7547.0{35E82A18-0164-46FD-8635-5DDA2E512A2C} => C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe [7056536 2025-11-26] (Google LLC -> Google LLC)
Task: {7D9274B9-1D38-4F0F-AA54-FFFD63745672} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [1015880 2025-12-15] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {EEB79B5F-2FBE-46D5-82E9-1B9E6AD9F224} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [91656 2025-11-21] (HP Inc. -> HP Inc.)
Task: {56F08703-D569-4283-9E96-DDF53112872A} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [91656 2025-11-21] (HP Inc. -> HP Inc.)
Task: {BD099E0B-C9AE-4B9C-B565-0B5D01A0D29E} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1644984 2018-07-18] (HP Inc. -> HP Inc.)
Task: {2103FAD1-15A9-46B0-A7C2-1ADB660F7A6C} - System32\Tasks\HPJumpStartLaunch => C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe [462696 2018-06-01] (HP Inc. -> HP Inc.)
Task: {8E33DBF6-B308-4C4A-9BB4-9DCEE0D70FC2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {EB389587-6DF1-4CA8-9B72-D7739F566B3A} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {B04FE0F0-7A94-4D3D-84FD-1F9FEB5909BF} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => %WINDIR%\system32\SecureBootEncodeUEFI.exe (No File)
Task: {4867E7B4-73E6-45D0-916F-FCA15CC84917} - System32\Tasks\Microsoft\Windows\Security\Pwdless\IntelligentPwdlessTask => {8702A841-D5CA-47C3-812D-9CEDC304C200}
Task: {B5C3340E-29EF-415D-8887-B78C2BD3F486} - System32\Tasks\Microsoft\Windows\Setup\PITRTask => {093cb270-c282-4c22-b2ea-7d2bf1c30bbf} C:\WINDOWS\system32\oobe\PITRTask.dll [118784 2025-12-10] (Microsoft Windows -> Microsoft Corporation)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {7306E50E-061F-4640-B4C5-12FE93F3C156} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F8044D72-AE40-4B27-8C1D-62D147C2FFE3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {255EAE91-DE02-4B78-9D0E-765A94B0DAE0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AB3709FA-6742-4D7C-BD4F-DF3FE7371F8E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7EC36FEA-7823-49C8-8986-C5682AF65674} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [787336 2019-01-15] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {00C38443-4BA3-4CD1-AA8E-7B2268CB39CB} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [787336 2019-01-15] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {B6C38BBA-2269-46CC-801A-A0AEF6F9F5D5} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3560840 2019-01-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A46CCA6D-F198-4E43-A434-4B5A1338F536} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [1004424 2019-01-15] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {7AB7B641-513F-416E-A50A-BC9B7EE1ED2C} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [855944 2019-01-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1E239979-E015-4AC4-AE27-DB4712DC123A} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [855944 2019-01-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {75BDE364-750E-40A8-8302-7598F9E74F6E} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [563080 2019-01-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8B3274A6-9B8C-40D0-AB2C-3C97405BEE49} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [887688 2019-01-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {91E8C2C0-B0A0-4CBC-B97F-60DE42B1270D} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [887688 2019-01-15] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\Update Core\/noshim
Task: {99282D1E-F1D5-44B0-AA40-764FF8C1AF0F} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [887688 2019-01-15] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\Update Core\/noshim
Task: {6CDF6B51-6535-4836-97E5-64C13E9A244F} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [887688 2019-01-15] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\Update Core\/noshim
Task: {971D38DF-6B40-4E06-A237-4840CF53E426} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2508919243-2607656370-1342838071-1001 => C:\Users\Gige\AppData\Local\Microsoft\OneDrive\25.224.1116.0003\OneDriveLauncher.exe [745832 2026-01-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {556882E1-F681-4249-818A-6D7CC73B73E3} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-2508919243-2607656370-1342838071-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe /bg /scheduledHC (No File)
Task: {452AE4B2-633E-4A1E-9B89-A9D9D9EA5064} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-03-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{a579d971-e538-48ef-a914-1f283c6a295d}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{a579d971-e538-48ef-a914-1f283c6a295d}: [DhcpDomain] docsis.vodafone.cz
Tcpip\..\Interfaces\{a579d971-e538-48ef-a914-1f283c6a295d}\960586F6E656: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{d3051248-e7a2-4c9d-bc4e-0f7110a634a4}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d3051248-e7a2-4c9d-bc4e-0f7110a634a4}: [DhcpDomain] home

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Gige\AppData\Local\Microsoft\Edge\User Data\Default [2026-01-16]
Edge Extension: (Stylish - Custom themes for any website) - C:\Users\Gige\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2025-12-18]
Edge Extension: (Dokumenty Google offline) - C:\Users\Gige\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-12-20]
Edge Extension: (No Name) - C:\Users\Gige\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hokifickgkhplphjiodbggjmoafhignh [2025-02-23]
Edge Extension: (Edge relevant text changes) - C:\Users\Gige\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-09-11]

Chrome:
=======
CHR Profile: C:\Users\Gige\AppData\Local\Google\Chrome\User Data\Default [2026-01-16]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Gige\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2026-01-02]
CHR Extension: (Dokumenty Google offline) - C:\Users\Gige\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-01-02]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Gige\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-12-09]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [964904 2025-12-06] (EasyAntiCheat Oy -> Epic Games, Inc.)
S3 EpicGamesUpdater; C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3071904 2025-11-28] (Epic Games Inc. -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-08-02] (Epic Games Inc. -> Epic Games, Inc.)
S3 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [141680 2025-10-20] (Microsoft Corporation -> Microsoft Corporation)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1321096 2018-09-28] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\AppHelperCap.exe [909496 2025-09-30] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\DiagsCap.exe [907960 2025-09-30] (HP Inc. -> HP Inc.)
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [478056 2018-06-01] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\NetworkCap.exe [903856 2025-09-30] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2025-11-21] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_383a15da209a6794\x64\SysInfoCap.exe [909464 2025-09-30] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe [639784 2025-10-01] (HP Inc. -> HP Inc.)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [963968 2026-01-16] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpDefenderCoreService.exe [2063376 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\NisSrv.exe [4426832 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MsMpEng.exe [290704 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1421dec2010cc057\x64\hpcustomcapdriver.sys [18984 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [333192 2025-11-21] (Microsoft Windows -> Microsoft Corporation)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [76832 2022-09-30] (Samsung Electronics CO., LTD. -> QUALCOMM Incorporated)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21928 2025-12-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [635272 2025-12-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102792 2025-12-18] (Microsoft Windows -> Microsoft Corporation)
U3 aspnet_state; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-01-16 16:15 - 2026-01-16 16:18 - 000023322 _____ C:\Users\Gige\Downloads\FRST.txt
2026-01-16 16:15 - 2026-01-16 16:17 - 000000000 ____D C:\FRST
2026-01-16 16:08 - 2026-01-16 16:08 - 002444288 _____ (Farbar) C:\Users\Gige\Downloads\FRST64.exe
2026-01-16 15:39 - 2026-01-16 15:39 - 000754188 _____ C:\WINDOWS\system32\perfh005.dat
2026-01-16 15:39 - 2026-01-16 15:39 - 000172452 _____ C:\WINDOWS\system32\perfc005.dat
2026-01-16 15:28 - 2026-01-16 15:28 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-01-16 06:05 - 2026-01-16 06:05 - 000003854 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2026-01-16 06:05 - 2026-01-16 06:05 - 000003412 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2026-01-15 18:58 - 2026-01-15 18:59 - 000001282 _____ C:\Users\Gige\Desktop\ESET Online Scanner.lnk
2026-01-15 18:57 - 2026-01-15 18:58 - 000001388 _____ C:\Users\Gige\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2026-01-15 18:57 - 2026-01-15 18:57 - 008412528 _____ (ESET) C:\Users\Gige\Downloads\esetonlinescanner.exe
2026-01-15 18:57 - 2026-01-15 18:57 - 000000000 ____D C:\Users\Gige\AppData\Local\ESET
2026-01-15 13:28 - 2026-01-15 13:28 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\D3DSCache
2026-01-15 13:26 - 2026-01-15 13:26 - 000000000 ____D C:\Users\WsiAccount\AppData\Roaming\HP
2026-01-15 13:26 - 2026-01-15 13:26 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\CEF
2026-01-15 13:25 - 2026-01-15 13:26 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\NVIDIA Corporation
2026-01-15 13:25 - 2026-01-15 13:25 - 000000000 ____D C:\Users\WsiAccount\AppData\Roaming\CCleaner
2026-01-15 13:25 - 2026-01-15 13:25 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\VirtualStore
2026-01-15 13:25 - 2026-01-15 13:25 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\NVIDIA
2026-01-15 12:43 - 2026-01-15 12:43 - 000000000 ____D C:\Users\Gige\AppData\Roaming\GHISLER
2026-01-15 12:43 - 2026-01-15 12:43 - 000000000 ____D C:\Users\Gige\AppData\Local\GHISLER
2026-01-15 12:34 - 2026-01-16 15:58 - 000000000 ____D C:\Users\Gige\AppData\Local\Malwarebytes
2026-01-15 12:29 - 2026-01-15 12:29 - 002844952 _____ (Malwarebytes) C:\Users\Gige\Downloads\MBSetup.exe
2025-12-28 01:52 - 2025-12-28 01:54 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-01-16 16:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-01-16 15:58 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-01-16 15:58 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-01-16 15:58 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-01-16 15:57 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-01-16 15:51 - 2024-09-11 14:54 - 000000000 ____D C:\ProgramData\NVIDIA
2026-01-16 15:43 - 2025-02-24 08:27 - 000012702 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-01-16 15:43 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-01-16 15:41 - 2025-02-24 08:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-01-16 15:41 - 2020-11-06 16:48 - 000012288 ___SH C:\DumpStack.log.tmp
2026-01-16 15:39 - 2025-02-24 08:12 - 001807696 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-01-16 15:39 - 2024-04-01 08:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-01-16 15:31 - 2025-02-24 08:03 - 000420920 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-01-16 15:29 - 2025-03-21 19:15 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2026-01-16 15:26 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-01-16 15:26 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-01-16 15:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-01-16 15:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-01-16 15:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-01-16 15:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-01-16 15:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-01-16 15:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-01-16 15:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-01-16 15:26 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-01-16 08:36 - 2025-02-24 08:04 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-01-16 06:40 - 2025-02-24 08:10 - 003276800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-01-15 20:52 - 2024-01-28 17:23 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2026-01-15 19:50 - 2025-10-22 11:52 - 000000000 ____D C:\WINDOWS\system32\Tasks\Piriform
2026-01-15 19:50 - 2025-10-22 11:50 - 000000000 ____D C:\ProgramData\Piriform
2026-01-15 16:41 - 2019-01-29 10:21 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2026-01-15 13:34 - 2025-02-24 08:15 - 000000000 ____D C:\Users\Gige
2026-01-15 13:33 - 2024-09-11 14:54 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2026-01-15 13:26 - 2025-03-14 14:04 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\Packages
2026-01-15 12:33 - 2025-02-23 11:32 - 000000000 ____D C:\Users\Gige\AppData\Local\NVIDIA
2026-01-15 12:33 - 2024-09-11 16:33 - 000000000 ____D C:\Users\Gige\AppData\Local\NVIDIA Corporation
2026-01-15 12:32 - 2024-09-11 16:34 - 000000000 ____D C:\Users\Gige\AppData\Local\Packages
2026-01-15 12:32 - 2018-11-07 07:47 - 000000000 ____D C:\ProgramData\Packages
2026-01-14 22:13 - 2024-09-11 17:04 - 000000000 ____D C:\Users\Gige\AppData\Local\Roblox
2026-01-14 19:05 - 2025-05-27 21:11 - 000000000 ____D C:\WINDOWS\Minidump
2026-01-14 19:05 - 2024-09-29 08:57 - 000000000 ____D C:\Users\Gige\AppData\Local\CrashDumps
2026-01-14 18:58 - 2019-03-23 16:19 - 000000000 ____D C:\Program Files\mcafee
2026-01-14 18:46 - 2019-03-23 16:19 - 000000000 ____D C:\ProgramData\McAfee
2026-01-14 18:31 - 2024-09-11 16:37 - 000000000 ____D C:\Users\Gige\AppData\Local\D3DSCache
2026-01-14 17:05 - 2025-02-24 08:37 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2508919243-2607656370-1342838071-1001
2026-01-14 17:05 - 2025-02-24 08:37 - 000003574 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2508919243-2607656370-1342838071-1001
2026-01-14 17:05 - 2025-02-24 08:37 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2508919243-2607656370-1342838071-1001
2026-01-14 17:05 - 2024-09-11 16:39 - 000002387 _____ C:\Users\Gige\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-01-12 22:15 - 2019-10-31 19:44 - 000000000 ____D C:\Users\Gige\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2026-01-11 18:57 - 2024-12-09 18:52 - 000002254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-01-10 20:16 - 2024-09-11 14:51 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-01-10 20:16 - 2024-09-11 14:51 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-01-04 21:21 - 2025-05-10 07:42 - 000001401 _____ C:\Users\Gige\Desktop\Adinky svet.lnk
2025-12-28 01:56 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2025-12-28 01:56 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\WUModels
2025-12-28 01:56 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2025-12-28 01:56 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2025-12-28 01:56 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-12-28 01:56 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2025-12-28 01:56 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2025-12-28 01:54 - 2025-07-09 20:38 - 000000000 ____D C:\WINDOWS\system32\ruxim
2025-12-28 01:54 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-12-28 01:54 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-12-28 01:54 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2025-12-28 01:54 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-12-28 01:54 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-12-28 01:54 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-12-28 01:54 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-12-28 01:54 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-12-28 01:54 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-12-28 01:54 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2025-12-28 01:54 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-12-28 01:52 - 2025-02-24 01:19 - 000000000 ____D C:\WINDOWS\InboxApps
2025-12-28 01:52 - 2024-04-01 08:26 - 000000000 ___RD C:\Program Files\Windows Defender
2025-12-28 01:52 - 2024-04-01 08:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2025-12-28 01:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-12-28 01:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-12-28 01:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-12-28 01:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\DiagTrack
2025-12-28 01:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2025-12-28 01:52 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\System
2025-12-28 01:52 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2025-12-25 20:24 - 2024-09-22 18:48 - 000000000 ____D C:\Users\Gige\AppData\Roaming\EasyAntiCheat
2025-12-23 22:50 - 2025-02-24 08:37 - 000003714 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{D23FD3F7-15E7-4E0C-A784-6ED2B7B3DE02}
2025-12-23 22:50 - 2025-02-24 08:37 - 000003588 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{680B6999-D1A5-4CCA-A528-A3DBCC393401}
2025-12-21 10:25 - 2025-02-24 08:37 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2025-12-20 12:08 - 2025-09-24 17:27 - 000440696 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_b.dll
2025-12-20 12:08 - 2025-02-23 11:23 - 004606328 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2025-12-20 12:08 - 2025-02-23 11:23 - 000878968 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2025-12-20 12:08 - 2025-02-23 11:23 - 000289144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2025-12-20 12:08 - 2025-02-23 11:23 - 000244088 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2025-12-20 12:08 - 2025-02-23 11:23 - 000166256 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2025-12-20 12:08 - 2025-02-23 11:23 - 000153976 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2025-12-20 12:08 - 2025-02-23 11:23 - 000076152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2025-12-18 12:50 - 2018-11-07 07:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

==================== Files in the root of some directories ========

2021-12-17 11:03 - 2021-11-09 12:56 - 036398264 _____ (Greatis Software, LLC. ) C:\Users\Gige\ReanimatorStart.exe

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================



Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-11-2025
Ran by Gige (16-01-2026 16:21:03)
Running from C:\Users\Gige\Downloads
Microsoft Windows 11 Home Version 25H2 26200.7623 (X64) (2025-02-24 07:41:32)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-2508919243-2607656370-1342838071-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2508919243-2607656370-1342838071-503 - Limited - Disabled)
Gige (S-1-5-21-2508919243-2607656370-1342838071-1001 - Administrator - Enabled) => C:\Users\Gige
Guest (S-1-5-21-2508919243-2607656370-1342838071-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2508919243-2607656370-1342838071-504 - Limited - Disabled)
WsiAccount (S-1-5-21-2508919243-2607656370-1342838071-1041 - Limited - Disabled) => C:\Users\WsiAccount

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

CurseForge (HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\...\Overwolf_cchhcaiapeikjbdbpfplgmpobbcdkdaphclbmkbj) (Version: 1.288.0.8211 - Overwolf app)
Epic Games Launcher (HKLM-x32\...\{B85FAA6E-A9AA-4655-9029-E1A4EDC05E1A}) (Version: 1.3.93.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{57A956AB-4BCC-45C6-9B40-957E4E125568}) (Version: 2.0.44.0 - Epic Games, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 143.0.7499.193 - Google LLC)
HP Audio Switch (HKLM-x32\...\{20A40E7C-E470-4E9F-9B5C-DDB2C205E856}) (Version: 1.0.154.0 - HP Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.15.0 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{016FBF6D-AEDE-4D33-87B4-DF6815EF674A}) (Version: 1.4.0.485 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{35556CCA-F14E-48F3-93F4-E29C4B3DBE30}) (Version: 1.4.485.0 - HP Inc.)
HP Registration Service (HKLM-x32\...\{280936C6-5D40-4AE1-9C13-F44E6208DDC4}) (Version: 1.0.0.65 - HP Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 143.0.3650.139 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 143.0.3650.139 - Microsoft Corporation) Hidden
Microsoft GameInput (HKLM\...\{ECB4BDD1-984C-9F25-299C-A9EF75C14197}) (Version: 10.1.26100.6879 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\...\OneDriveSetup.exe) (Version: 25.224.1116.0003 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34438 (HKLM-x32\...\{b49c10dd-4d54-45f8-ad13-fa25704456a4}) (Version: 14.42.34438.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 x86 Additional Runtime - 14.13.26020 (HKLM-x32\...\{895D5198-C5DB-375E-86AB-133F4DAA9FE2}) (Version: 14.13.26020 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.13.26020 (HKLM-x32\...\{8F271F6C-6E7B-3D0A-951B-6E7B694D78BD}) (Version: 14.13.26020 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34438 (HKLM\...\{E528AD94-12D7-42C4-91A3-908BE28E9BD2}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34438 (HKLM\...\{2E15F519-4FDA-4834-B4EE-7EFCE7D8D4EE}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
NVIDIA GeForce Experience 3.16.0.122 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.16.0.122 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.18.0907 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.18.0907 - NVIDIA Corporation)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.267.1.1 - Overwolf Ltd.)
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 1.0.0.97 - REALTEK Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8924.1 - Realtek Semiconductor Corp.)
Roblox Player for Gige (HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\...\roblox-player) (Version: - Roblox Corporation)
Roblox Studio for Gige (HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\...\roblox-studio) (Version: - Roblox Corporation)
WebAdvisor od společnosti McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.1086 - McAfee, LLC)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-17] ()
@{MicrosoftWindows.57242383.Tasbar_1000.26100.7462.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57242383.Tasbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy [2026-01-16] (Microsoft Windows)
@{MicrosoftWindows.58683691.InpApp_1000.26100.6899.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.58683691.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.58683691.InpApp_cw5n1h2txyewy [2025-12-28] ()
@{MicrosoftWindows.59379618.InpApp_1000.26100.7171.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59379618.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy [2026-01-16] (Microsoft Windows)
@{MicrosoftWindows.59379618.InpApp_1000.26100.7462.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59379618.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy [2026-01-16] (Microsoft Windows)
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-01-26] (INTEL CORP) [Startup Task]
Balíček prostředí funkcí systému Windows -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy [2026-01-16] (Microsoft Windows)
Balíček prostředí funkcí systému Windows -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy [2026-01-16] (Microsoft Windows)
Dropbox promotion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.36.0_x64__xbfy0k16fey96 [2025-11-22] (Dropbox Inc.)
Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_1.2.0.0_x64__v10z8vjag6ke6 [2025-02-16] (HP Inc.)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.4.481.0_x86__v10z8vjag6ke6 [2024-09-11] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_2.9.0.0_x64__v10z8vjag6ke6 [2025-11-05] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_162.3.1128.0_x64__v10z8vjag6ke6 [2025-12-13] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.50.34.0_x64__v10z8vjag6ke6 [2025-12-20] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.15.0_x64__v10z8vjag6ke6 [2025-12-20] (HP Inc.)
LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_3.0.43.0_x64__w1wdnht996qgy [2025-12-20] (LinkedIn) [Startup Task]
Microsoft Access -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.19127.20402.0_x86__8wekyb3d8bbwe [2025-12-13] (Microsoft Corporation)
Microsoft Excel -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.19127.20402.0_x86__8wekyb3d8bbwe [2025-12-13] (Microsoft Corporation)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-02-26] (Microsoft Corp.)
Microsoft Office Desktop Apps -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.19127.20402.0_x86__8wekyb3d8bbwe [2025-12-13] (Microsoft Corporation)
Microsoft Outlook -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.19127.20402.0_x86__8wekyb3d8bbwe [2025-12-13] (Microsoft Corporation)
Microsoft PowerPoint -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.19127.20402.0_x86__8wekyb3d8bbwe [2025-12-13] (Microsoft Corporation)
Microsoft Publisher -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.19127.20402.0_x86__8wekyb3d8bbwe [2025-12-13] (Microsoft Corporation)
Microsoft Word -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.19127.20402.0_x86__8wekyb3d8bbwe [2025-12-13] (Microsoft Corporation)
Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_2.5.2.0_x64__8wekyb3d8bbwe [2025-12-09] (Microsoft Studios)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_7.0.8.0_neutral__mcm4njqhnhss8 [2024-10-11] (Netflix, Inc.)
Simple Solitaire -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleSolitaire_7.5.27.0_x64__kx24dqmazqk8j [2025-07-18] (Random Salad Games LLC)
sMedio True DVD for HP -> C:\Program Files\WindowsApps\0E3921EB.sMedioTrueDVDforHP_1.1.160.0_x64__agwrg61xdd7p4 [2025-02-16] (sMedio Inc.)
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0 [2025-12-22] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2508919243-2607656370-1342838071-1001_Classes\CLSID\{47E6DCAF-41F8-441C-BD0E-A50D5FE6C4D1}\localserver32 -> C:\Users\Gige\AppData\Local\Microsoft\OneDrive\25.224.1116.0003\OneDrive.Sync.Service.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2508919243-2607656370-1342838071-1001_Classes\CLSID\{7d043d4e-4259-f459-3630-7b434fd7752c}\localserver32 -> C:\Program Files\HP\HP Media Network\HPMediaNetwork.exe (HP Inc. -> HP Inc.)
CustomCLSID: HKU\S-1-5-21-2508919243-2607656370-1342838071-1001_Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}\localserver32 -> C:\Users\Gige\AppData\Local\Microsoft\OneDrive\25.224.1116.0003\OneDrive.Sync.Service.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2508919243-2607656370-1342838071-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2019-12-07] (NVIDIA Corporation -> NVIDIA Corporation)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [MidisrvTransferComplete] => 0

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============


==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Gige\Downloads\esetonlinescanner.exe:MBAM.Zone.Identifier [368]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [7188]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2508919243-2607656370-1342838071-1041\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2508919243-2607656370-1342838071-1041\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {EC44EBDA-C77D-402F-A90B-D6E83DAA5EBF} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> {EC44EBDA-C77D-402F-A90B-D6E83DAA5EBF} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2025-12-15] (HP Inc. -> HP Inc.)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2025-12-15] (HP Inc. -> HP Inc.)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-09-15 08:31 - 2018-09-15 08:31 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.0.1
Windows Firewall is enabled.

Network Binding:
=============
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
Wi-Fi: Realtek RTL8822BE 802.11ac PCIe Adapter -> rtwlane.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Gige\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\2-FAST-2-FURIOUS-668398.png
HKU\S-1-5-21-2508919243-2607656370-1342838071-1041\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "HPLightingBarControl"
HKLM\...\StartupApproved\Run: => "HPSEU_Host_Launcher"
HKLM\...\StartupApproved\Run: => "RtlS5Wake"
HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_5D8C3063FA9DAB358D0609B84D66B707"
HKU\S-1-5-21-2508919243-2607656370-1342838071-1001\...\StartupApproved\Run: => "HPSEU_Host_Launcher"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{BEE7FD9C-423C-4F78-B9DB-40F3873ED6A2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F5407AD8-76CD-43E7-A668-01B25D77D6E3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{722F149B-D4EB-459E-AC6C-5F95723D800C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{02EC3434-387A-458B-BA0C-F2FD1261AFED}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{625E7801-920E-4859-B976-9E18AAC1B31B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{88EC8546-34F6-46F3-A8B3-5F45F4D247B4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C2FC4657-EDE8-4258-8A4D-CA929AAC1DEA}] => (Allow) C:\Program Files\WindowsApps\microsoftteams_24215.1105.3082.1600_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{742AB8B0-4861-4201-AE4C-48EED686DA8B}] => (Allow) C:\Program Files\WindowsApps\microsoftteams_24215.1105.3082.1600_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{04446FD6-7A87-47E5-8605-C62D6CE469FB}C:\users\gige\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe] => (Block) C:\users\gige\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe
FirewallRules: [UDP Query User{0D4C729F-918B-409E-8212-B74576661D19}C:\users\gige\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe] => (Block) C:\users\gige\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe
FirewallRules: [TCP Query User{CF9AC027-7C10-4A51-B8FF-7954E49D0070}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{5AC20328-FEBE-422E-B72B-E203DABCFDAF}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{058EA544-678E-4383-B97B-BBF72D00D1FF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.19127.20402.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6907B786-FF91-44B4-A968-D19C0926B5E0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{B3C4DB10-943E-4E3C-8A8F-D92A713C6423}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{4D7A3576-5A72-477A-9FA5-EAC29BDD25AD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{8A328437-FB32-4EEC-89C3-B3EDD96082D3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{661B558D-761B-48BA-B81A-F31277E196A0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{54698360-2999-41B3-975E-1B7E08C753BF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{A0361CB0-8ED2-4B25-922F-80835F349EDD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{6E462F5B-EC1E-4512-BA0C-C333340149EC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{23EA4DB6-6C49-4DE7-A807-49C45DDF3F68}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{AF063F88-ACAC-4BDD-B75F-968E3C5E8945}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{91463836-29FC-4FFD-8E31-E7444B3DC5F6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{46DC906E-81C7-400A-BEE1-3E295E51B5C6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{91E4C45C-2BE4-44AA-9B80-85D184FCFF63}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.279.427.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{60D858B0-D4E1-4428-A37E-CE7F4E5B5D7A}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

12-01-2026 22:20:35 Windows Update
15-01-2026 12:20:15 Instalační služba modulů systému Windows
15-01-2026 19:54:37 Removed Blender
15-01-2026 22:08:28 Removed Blender
16-01-2026 15:52:53 Removed Blender

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (01/16/2026 04:09:22 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Users\Gige\Downloads\chrome.exe se nezdařilo.
Závislé sestavení 133.0.6943.127,language="&#x2a;",type="win32",version="133.0.6943.127" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (01/16/2026 03:44:13 PM) (Source: Universal Print) (EventID: 1) (User: )
Description: Failed to GetUserSid. hr: 0x8001012d

Error: (01/16/2026 03:36:13 PM) (Source: Universal Print) (EventID: 1) (User: )
Description: Failed to GetUserSid. hr: 0x8001012d

Error: (01/16/2026 06:04:48 AM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Název chybující aplikace: msiexec.exe, verze: 5.0.26100.5074, časové razítko: 0xf316b6e8
Název chybujícího modulu: RPCRT4.dll, verze: 10.0.26100.7309, časové razítko: 0xf2db1f44
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000035563
ID chybujícího procesu: 0x1ba4
Čas spuštění chybující aplikace: 0x1dc866313a7224a
Cesta k chybující aplikaci: C:\WINDOWS\system32\msiexec.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\RPCRT4.dll
ID sestavy: c6385105-fbbe-4052-b5de-e5e877567533
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (01/15/2026 10:09:47 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddWin32ServiceFiles: Unable to back up image of service CCleaner 7 since QueryServiceConfig API failed

System Error:
Systém nemůže nalézt uvedený soubor..

Error: (01/15/2026 10:06:16 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Název chybující aplikace: msiexec.exe, verze: 5.0.26100.5074, časové razítko: 0xf316b6e8
Název chybujícího modulu: RPCRT4.dll, verze: 10.0.26100.7309, časové razítko: 0xf2db1f44
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000035563
ID chybujícího procesu: 0x37ac
Čas spuštění chybující aplikace: 0x1dc865060ee9c85
Cesta k chybující aplikaci: C:\WINDOWS\system32\msiexec.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\RPCRT4.dll
ID sestavy: ea6fd875-ed3e-473a-98eb-2c8a1ff46f02
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (01/15/2026 07:56:04 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddWin32ServiceFiles: Unable to back up image of service CCleaner 7 since QueryServiceConfig API failed

System Error:
Systém nemůže nalézt uvedený soubor..

Error: (01/15/2026 02:37:50 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: Verze 10.0.26100.7309 programu WWAHost.exe ukončila interakci se systémem Windows a byla ukončena. Pokud chcete zjistit, zda jsou k dispozici další informace o problému, zkontrolujte historii problémů v ovládacím panelu Zabezpečení a údržba.


System errors:
=============
Error: (01/16/2026 03:57:53 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Malwarebytes Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

Error: (01/16/2026 03:47:28 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update SBAT with error -1878589247. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931

Error: (01/16/2026 03:47:24 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
Description: Updated Secure Boot certificates are available on this device but have not yet been applied to the firmware. Review the published guidance to complete the update and maintain full protection. This device signature information is included here.
DeviceAttributes: FirmwareManufacturer:AMI;FirmwareVersion:F.48;OEMModelBaseBoard:843B;OEMManufacturerName:HP;OSArchitecture:amd64;
BucketId: efff7bf97d27436f4437e97bcbbbdc30d7103fcb9e53d2bce01db2185c8cabc1
BucketConfidenceLevel:
UpdateType:
For more information, please see https://go.microsoft.com/fwlink/?linkid=2301018.

Error: (01/16/2026 03:42:55 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Aktualizovat službu Orchestrator byla ukončena s následující chybou:
%%2149884192

Error: (01/16/2026 03:39:32 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: Server {B91D5831-B1BD-4608-8198-D72E155020F7} se v daném časovém limitu neregistroval u služby DCOM.

Error: (01/16/2026 03:39:15 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba Malwarebytes Service se po přijetí pokynu pro vypnutí neukončila správně.

Error: (01/16/2026 03:38:33 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Aktualizovat službu Orchestrator byla ukončena s následující chybou:
%%2149884192

Error: (01/16/2026 03:38:32 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: Server {46687F54-2097-4FC1-9173-3863021DC370} se v daném časovém limitu neregistroval u služby DCOM.


Windows Defender:
================
Date: 2026-01-12 18:30:42
Description:
Antivirová ochrana v programu Microsoft Defender śсǻη ħдѕ ъэεή šтőρρéδ ьëƒόѓë ςσмрļєťíőň.%л %τŞčąη ĮÐ:%в{824A8DF5-C156-4FFF-8360-53E164D9070F}%й %ŧŚčâń Τỳφε:%вAntimalwarový program%ń %ŧŜċăņ Ρдѓámĕťëяš:%ъRychlé prohledávání%π %ţÚѕêґ:%ьNT AUTHORITY\SYSTEM%ń %тŠŧõρ Ŕéāşôň:%ьŞĉĥеδũĺέđ şĉāⁿ ŵāѕ ŝĸïφрёď вëčάùśε ŧĥе ℓдśт ŝůĉčęśśƒűł ѕčåñ щāś ώϊţђĭи ŧĥě ℓàŝт 7 ďàŷѕ

Date: 2026-01-11 13:58:36
Description:
Antivirová ochrana v programu Microsoft Defender śсǻη ħдѕ ъэεή šтőρρéδ ьëƒόѓë ςσмрļєťíőň.%л %τŞčąη ĮÐ:%в{8C9EA13B-59BB-471F-B7B2-321BCEB80603}%й %ŧŚčâń Τỳφε:%вAntimalwarový program%ń %ŧŜċăņ Ρдѓámĕťëяš:%ъRychlé prohledávání%π %ţÚѕêґ:%ьNT AUTHORITY\SYSTEM%ń %тŠŧõρ Ŕéāşôň:%ьŞĉĥеδũĺέđ şĉāⁿ ŵāѕ ŝĸïφрёď вëčάùśε ŧĥе ℓдśт ŝůĉčęśśƒűł ѕčåñ щāś ώϊţђĭи ŧĥě ℓàŝт 7 ďàŷѕ

Date: 2026-01-11 13:49:37
Description:
Antivirová ochrana v programu Microsoft Defender śсǻη ħдѕ ъэεή šтőρρéδ ьëƒόѓë ςσмрļєťíőň.%л %τŞčąη ĮÐ:%в{174798DE-69FF-4635-A236-99C07F2F5FDB}%й %ŧŚčâń Τỳφε:%вAntimalwarový program%ń %ŧŜċăņ Ρдѓámĕťëяš:%ъRychlé prohledávání%π %ţÚѕêґ:%ьNT AUTHORITY\SYSTEM%ń %тŠŧõρ Ŕéāşôň:%ьŞĉĥеδũĺέđ şĉāⁿ ŵāѕ ŝĸïφрёď вëčάùśε ŧĥе ℓдśт ŝůĉčęśśƒűł ѕčåñ щāś ώϊţђĭи ŧĥě ℓàŝт 7 ďàŷѕ

Date: 2026-01-10 19:25:00
Description:
Antivirová ochrana v programu Microsoft Defender śсǻη ħдѕ ъэεή šтőρρéδ ьëƒόѓë ςσмрļєťíőň.%л %τŞčąη ĮÐ:%в{83C2CAF4-A200-4298-8CC1-D3B73307D203}%й %ŧŚčâń Τỳφε:%вAntimalwarový program%ń %ŧŜċăņ Ρдѓámĕťëяš:%ъRychlé prohledávání%π %ţÚѕêґ:%ьNT AUTHORITY\SYSTEM%ń %тŠŧõρ Ŕéāşôň:%ьŞĉĥеδũĺέđ şĉāⁿ ŵāѕ ŝĸïφрёď вëčάùśε ŧĥе ℓдśт ŝůĉčęśśƒűł ѕčåñ щāś ώϊţђĭи ŧĥě ℓàŝт 7 ďàŷѕ

Date: 2026-01-09 19:20:46
Description:
Antivirová ochrana v programu Microsoft Defender śсǻη ħдѕ ъэεή šтőρρéδ ьëƒόѓë ςσмрļєťíőň.%л %τŞčąη ĮÐ:%в{4A482BF7-DB49-4AD3-BF52-28FB39AEB6FE}%й %ŧŚčâń Τỳφε:%вAntimalwarový program%ń %ŧŜċăņ Ρдѓámĕťëяš:%ъRychlé prohledávání%π %ţÚѕêґ:%ьNT AUTHORITY\SYSTEM%ń %тŠŧõρ Ŕéāşôň:%ьŞĉĥеδũĺέđ şĉāⁿ ŵāѕ ŝĸïφрёď вëčάùśε ŧĥе ℓдśт ŝůĉčęśśƒűł ѕčåñ щāś ώϊţђĭи ŧĥě ℓàŝт 7 ďàŷѕ
Event[0]

Date: 2026-01-15 17:24:21
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte spuštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.443.671.0;1.443.671.0
Verze modulu: 1.1.25110.1

Date: 2026-01-15 13:35:25
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací a pokusí se o obnovení na předchozí verzi.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80501102
Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné aktualizace a potom opakujte spuštění programu. Informace o instalaci aktualizací naleznete v nápovědě a podpoře.
Verze bezpečnostních informací: 1.443.671.0;1.443.671.0
Verze modulu: 1.1.25110.1

Date: 2026-01-01 15:21:48
Description:
Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Microsoft Defender zjistila chybu a došlo k jejímu selhání.
Funkce: Systém kontroly sítě
Kód chyby: 0x8007041d
Popis chyby: Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Důvod: V systému chybí aktualizace potřebné ke spuštění systému kontroly sítě. Nainstalujte potřebné aktualizace a restartujte zařízení.

CodeIntegrity:
===============
Date: 2026-01-16 15:56:58
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.

Date: 2026-01-16 15:56:55
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.


==================== Memory info ===========================

BIOS: AMI F.48 07/27/2022
Motherboard: HP 843B
Processor: Intel(R) Core(TM) i5-8400 CPU @ 2.80GHz
Percentage of memory in use: 59%
Total physical RAM: 8059.34 MB
Available physical RAM: 3255.95 MB
Total Virtual: 12411.34 MB
Available Virtual: 6777.06 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:930.28 GB) (Free:701.39 GB) (Model: ST1000DM003-1SB102) NTFS

\\?\Volume{e3f882a0-ca68-4f51-bd80-7e4fc4e92709}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.32 GB) NTFS
\\?\Volume{6300b2c0-7771-401d-acaf-f397cc198f20}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.16 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: A50E1C7D)

Partition: GPT.

==================== End of Addition.txt =======================

Zdravím!
Spusťte nejprve tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

# -------------------------------
# Malwarebytes AdwCleaner 8.5.0.595
# -------------------------------
# Build: 03-05-2025
# Database: 2024-10-23.4 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-16-2026
# Duration: 00:00:07
# OS: Windows 11 (Build 26200.7623)
# Cleaned: 0
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4186 octets] - [16/01/2026 18:33:53]
AdwCleaner[S01].txt - [1483 octets] - [16/01/2026 18:35:56]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########

Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Task: {8E33DBF6-B308-4C4A-9BB4-9DCEE0D70FC2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {EB389587-6DF1-4CA8-9B72-D7739F566B3A} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {B04FE0F0-7A94-4D3D-84FD-1F9FEB5909BF} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => %WINDIR%\system32\SecureBootEncodeUEFI.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {556882E1-F681-4249-818A-6D7CC73B73E3} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-2508919243-2607656370-1342838071-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe /bg /scheduledHC (No File)
U3 aspnet_state; no ImagePath
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
C:\DumpStack.log.tmp
AlternateDataStreams: C:\Users\Gige\Downloads\esetonlinescanner.exe:MBAM.Zone.Identifier [368]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [7188]

EmptyTemp:
End

Uložte do C:\Users\Gige\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 20-11-2025
Ran by Gige (16-01-2026 19:30:41) Run:1
Running from C:\Users\Gige\Downloads
Loaded Profiles: Gige & WsiAccount
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Task: {8E33DBF6-B308-4C4A-9BB4-9DCEE0D70FC2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {EB389587-6DF1-4CA8-9B72-D7739F566B3A} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {B04FE0F0-7A94-4D3D-84FD-1F9FEB5909BF} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => %WINDIR%\system32\SecureBootEncodeUEFI.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {556882E1-F681-4249-818A-6D7CC73B73E3} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-2508919243-2607656370-1342838071-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe /bg /scheduledHC (No File)
U3 aspnet_state; no ImagePath
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
C:\DumpStack.log.tmp
AlternateDataStreams: C:\Users\Gige\Downloads\esetonlinescanner.exe:MBAM.Zone.Identifier [368]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [7188]

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{C885AA15-1764-4293-B82A-0586ADD46B35} => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8E33DBF6-B308-4C4A-9BB4-9DCEE0D70FC2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8E33DBF6-B308-4C4A-9BB4-9DCEE0D70FC2}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EB389587-6DF1-4CA8-9B72-D7739F566B3A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EB389587-6DF1-4CA8-9B72-D7739F566B3A}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{B04FE0F0-7A94-4D3D-84FD-1F9FEB5909BF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B04FE0F0-7A94-4D3D-84FD-1F9FEB5909BF}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\PI\SecureBootEncodeUEFI" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{556882E1-F681-4249-818A-6D7CC73B73E3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{556882E1-F681-4249-818A-6D7CC73B73E3}" => removed successfully
C:\WINDOWS\System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-2508919243-2607656370-1342838071-1001 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-2508919243-2607656370-1342838071-1001" => removed successfully
HKLM\System\CurrentControlSet\Services\aspnet_state => removed successfully
aspnet_state => service removed successfully
Could not move "C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2" => Scheduled to move on reboot.
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
C:\Users\Gige\Downloads\esetonlinescanner.exe => ":MBAM.Zone.Identifier" ADS removed successfully
C:\Users\Public\Shared Files => ":VersionCache" ADS removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 11641705 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 4458758 B
Edge => 0 B
Chrome => 427158303 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 27510 B
NetworkService => 30094 B
Gige => 29579693 B
WsiAccount => 29579693 B

RecycleBin => 0 B
EmptyTemp: => 480.4 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 16-01-2026 19:36:00)

C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 => Could not move
C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 19:36:00 ====

Smazáno.Nastalka změna k lepšímu?

Je to mnohem lepší. Počítač se chová svižně.
Sice po restartu ještě asi 5 minut (možná méně) disk hodně pracuje ale asi to je už normální.
Ve Správci úloh vidím že HDD je vytížen "Hostitel služby" a "System" pár minut a pak se HDD uklidní.
To před tím jel neustále na 100 procent.
Děkuji MOC za pomoc.

Ještě můžete zkusit defragmentovat disk.

Dobrý den.

Děkuji.
Už se na tom pracuje.
Přeji hezký den.

I vám hezký den a nemáte zač!