VIRY.CZ

prosím o kotrolu logu

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 05-06-2026
Ran by Win10 (administrator) on DESKTOP-9USA425 (Acer Swift SF113-31) (08-06-2026 21:50:12)
Running from C:\Users\Win10\Desktop\FRST64.exe
Loaded Profiles: Win10 & venad
Platform: Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) Language: Němčina (Německo) -> Čeština (Česko)
Default browser: "C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --single-argument %1
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files (x86)\Avast Software\Browser\Update\AvastBrowserUpdate.exe
(C:\Program Files\AVAST Software\AntiTrack\x86\ATServiceHost.exe ->) (Gen Digital Inc. -> AVAST Software) C:\Program Files\AVAST Software\AntiTrack\x86\ATTray.exe
(C:\Program Files\AVAST Software\Avast\AvastSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\AvastUI.exe <4>
(C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\wa_3rd_party_host_32.exe
(C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\wa_3rd_party_host_64.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_98728bfffafc23c2\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_98728bfffafc23c2\igfxEM.exe
(explorer.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\SecureLine VPN\Vpn.exe <4>
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Cleanup\TuneupUI.exe <3>
(Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(services.exe ->) (Gen Digital Inc. -> AVAST Software) C:\Program Files\AVAST Software\AntiTrack\x86\ATServiceHost.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Cleanup\TuneupSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\SecureLine VPN\VpnSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (Hewlett-Packard Company -> HP) C:\Windows\System32\HPSIsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_98728bfffafc23c2\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_22dff82e7da0099b\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_b53c057d22ce6f37\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_b53c057d22ce6f37\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Zoom Video Communications, Inc. -> Zoom Communications, Inc.) C:\Program Files\Common Files\Zoom\Support\CptService.exe
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe <3>
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.4151.0_x64__8wekyb3d8bbwe\GameBar.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.4151.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18394608 2017-07-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_ASC] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1502704 2017-07-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_CTPreset] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1502704 2017-07-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [1061544 2026-05-10] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Run: [Avast Cleanup UI] => C:\Program Files\Avast Software\Cleanup\TuneupUI.exe [7612640 2026-06-08] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM-x32\...\Run: [C17A] => C:\WINDOWS\twain_32\Brimc17a\Common\TwDsUiLaunch.exe [103344 2019-12-25] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [146584 2017-11-07] (Brother Industries, Ltd. -> Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2893312 2017-12-05] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3581952 2017-04-05] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [AvastAntiTrack] => C:\Program Files\Avast Software\AntiTrack\x86\ATTray.exe [237280 2026-05-05] (Gen Digital Inc. -> AVAST Software)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\Software\Policies\...\system: [EnableSmartScreen] 0 <==== ATTENTION
HKU\S-1-5-21-4100794883-594294777-4078157440-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4748688 2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4100794883-594294777-4078157440-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [41671128 2026-01-31] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-4100794883-594294777-4078157440-1001\...\MountPoints2: {cb632fe1-1b6d-11e9-9ddf-34f64bdaae48} - "D:\SISetup.exe"
HKU\S-1-5-21-4100794883-594294777-4078157440-1002\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4748688 2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4100794883-594294777-4078157440-1002\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4748688 2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\HPM1210PrintProc: C:\Windows\System32\spool\prtprocs\x64\HPM1210PP.dll [74240 2012-09-29] () [File not signed]
HKLM\...\Print\Monitors\HPM1210LM: C:\WINDOWS\system32\HPM1210LM.DLL [409088 2012-09-29] () [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [3971224 2026-04-18] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\148.0.7778.168\Installer\chrmstp.exe [7605912 2026-05-18] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files\AVAST Software\Browser\Application\147.0.34541.118\Installer\chrmstp.exe [6105552 2026-05-11] (Gen Digital Inc. -> Gen Digital Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2026-05-19]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\AVAST Software\SecureLine VPN\Vpn.exe (Gen Digital Inc. -> Gen Digital Inc.)
BootExecute: autocheck autochk * icarus_rvrt.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {F5EA76F4-F127-4E2D-A750-912EEA773E11} - System32\Tasks\Microsoft\Windows\WindowsUpdate\RUXIM\PLUGScheduler
Task: {AD6DA67D-9F13-4D17-9B8C-AC76F874D9B6} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1581568 2025-08-24] (Adobe Inc. -> Adobe Inc.)
Task: {B821388E-C377-4E8B-B48E-356954BB6ABD} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4364408 2026-04-28] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {7D1B41FE-75DF-45DA-8DA8-D720F0D48AC7} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4364408 2026-04-28] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {ABDD4F80-A619-4080-9453-72B5A48159E2} - System32\Tasks\Avast Secure Browser VPS Differential Update => C:\Program Files\AVAST Software\Browser\Application\vps_helper.exe [2481240 2026-04-28] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {E589ACE3-9A3F-4010-934A-A2C3F9CA8722} - System32\Tasks\Avast Software\Avast Antivirus Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-av\icarus.exe [9607904 2026-04-21] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {8081DD6F-33E0-4925-BD44-7CD454EF9007} - System32\Tasks\Avast Software\Avast Cleanup BugReport => C:\Program Files\Avast Software\Cleanup\AvBugReport.exe [6618336 2026-06-08] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --silent --product 62 --programpath "C:\Program Files\Avast Software\Cleanup" --configpath "C:\ProgramData\Avast Software\Cleanup" --path "C:\ProgramData\Avast Software\Cleanup\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\Cle (the data entry has 53 more characters).
Task: {ED087005-F5ED-4BAA-A10B-1388B075D776} - System32\Tasks\Avast Software\Avast Cleanup Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe [9711840 2026-05-25] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {59455D6F-1699-4575-AF1C-C2FAFE884368} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5783720 2026-05-10] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {C8795379-0DF4-462C-87AB-1EA019AC24A6} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [6599848 2026-05-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramDat (the data entry has 80 more characters).
Task: {AF31FAC6-76B8-4750-BE20-5E4FBBD5A8DF} - System32\Tasks\Avast Software\Avast SecureLine VPN Emergency Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [3962024 2026-05-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {64F851AC-9DC5-4F82-8D93-E722CF4E2053} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [9607904 2026-04-22] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {8FF5E1D4-2301-4147-9A7C-C740DA0D4EED} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2977504 2025-10-13] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {62849193-DCCA-43F2-BBEF-A4965F81B7E5} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-12-20] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {B4DBBC08-B154-4D4A-BFEC-5A5919B45F4E} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-12-20] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {6645D3B6-B054-4BB2-8FA0-CAD12559956E} - System32\Tasks\CCleaner 7 - Skip UAC - S-1-5-21-4100794883-594294777-4078157440-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [8070264 2026-06-08] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {C94B5387-D667-48D7-90BA-A60D275C4D3C} - System32\Tasks\Driver Easy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe [3978504 2021-07-29] (Easeware Technology Limited -> Easeware) -> C:\Program Files\Easeware\DriverEasy\--scan
Task: {D7E64E95-675F-4D7B-8152-70206E3F4782} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem150.0.7863.0{B4855A26-A5B2-42A3-86FA-064973AB3D02} => C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe [8728216 2026-05-28] (Google LLC -> Google LLC)
Task: {332BA3F2-647E-4F68-972E-D96063AF45E5} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28644032 2024-11-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {301DA454-CB17-49A2-857B-E8697009A517} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28644032 2024-11-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {FD07FBB9-DB7A-45A6-8350-620F09F8E58D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312408 2024-11-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {9718E1B5-6F76-4E69-8429-4B0AA55FBC16} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312408 2024-11-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {FBA6C3D1-D71B-4318-8649-E31A58A7AB7F} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [187600 2024-11-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {F0967C94-4003-4F2E-BC23-35C1254E3973} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4463024 2024-11-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {8CAA8C6A-0118-4520-AF3F-A96ECD2ACAAA} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4428136 2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {547F0924-581E-4096-9B1E-F93D2922AE95} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-4100794883-594294777-4078157440-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4428136 2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {4E19860A-DD24-412B-89E5-E14A431C1FEC} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-4100794883-594294777-4078157440-1002 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4428136 2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {1D936731-2918-4DB8-BB0C-28F2DC962CDC} - System32\Tasks\OneDrive Startup Task-S-1-5-21-4100794883-594294777-4078157440-1001 => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\OneDriveLauncher.exe [758672 2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {2C69AC19-6CC4-489F-8C1E-D7EF8C7CEC59} - System32\Tasks\OneDrive Startup Task-S-1-5-21-4100794883-594294777-4078157440-1002 => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\OneDriveLauncher.exe [758672 2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {D9BAAD56-7E21-4588-AF1A-2E5ED9F17AFD} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-4100794883-594294777-4078157440-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [8070264 2026-06-08] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {098176F0-A36D-46BB-9807-FA400857B42B} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-4100794883-594294777-4078157440-1002 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [8070264 2026-06-08] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {5C5043BA-A727-4AE0-A936-0B595556501D} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-4100794883-594294777-4078157440-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [8070264 2026-06-08] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {010D94B8-647E-4AE9-8A53-24FB48AEE89F} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [6633736 2026-06-08] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {7C100259-C016-412E-A7FE-EF2A1EDF88F0} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [9274080 2026-01-19] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {836B4CE6-F3B6-4A55-8D92-5433B786A917} - System32\Tasks\SVC Update => C:\Windows\explorer.exe [6089584 2025-10-17] (Microsoft Windows -> Microsoft Corporation) -> "hxxp://sh.st/AeotZ"
Task: {BD31C756-945E-451D-960A-36DD42CA35DE} - System32\Tasks\Yahoo! Powered loros => C:\Windows\System32\wscript.exe [181760 2025-05-19] (Microsoft Windows -> Microsoft Corporation) -> "C:\ProgramData\{508095E3-DAC2-1F25-5C04-8167C6460AA9}\dome.txt" "68747470733a2f2f7275647564756c752e636f6d" "//B" "//E:jscript" "--IsErIk"

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Driver Easy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{55ce6633-305c-40a9-a070-23b119cc62e3}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{55ce6633-305c-40a9-a070-23b119cc62e3}\255646D696: [DhcpNameServer] 192.168.203.58
Tcpip\..\Interfaces\{55ce6633-305c-40a9-a070-23b119cc62e3}\64259445A51224F687026343930302341626C656: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{55ce6633-305c-40a9-a070-23b119cc62e3}\64259445A51224F687026343930302341626C656: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{55ce6633-305c-40a9-a070-23b119cc62e3}\64259445A51224F6870264F6E60275C414E40273336303: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{55ce6633-305c-40a9-a070-23b119cc62e3}\64259445A51224F6870264F6E60275C414E40273336303: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{55ce6633-305c-40a9-a070-23b119cc62e3}\75C414E4D2632343336383: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{55ce6633-305c-40a9-a070-23b119cc62e3}\75C414E4D2632343336383: [DhcpDomain] speedport.ip
Tcpip\..\Interfaces\{55ce6633-305c-40a9-a070-23b119cc62e3}\A5C61647F6E6B616: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{55ce6633-305c-40a9-a070-23b119cc62e3}\D6F647F6027682330392F583331363: [DhcpNameServer] 10.207.221.63
Tcpip\..\Interfaces\{55ce6633-305c-40a9-a070-23b119cc62e3}\F623D275C414E49373: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{55ce6633-305c-40a9-a070-23b119cc62e3}\F623D275C414E49373: [DhcpDomain] localdomain
Tcpip\..\Interfaces\{a52be96a-74db-4743-942c-58b4084397db}: [NameServer] 10.8.0.1
Tcpip\..\Interfaces\{ebf21f83-2c88-4ad0-b337-d1497d87215a}: [NameServer] 10.8.0.1

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-10-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-01-31] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-10-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\npAvastBrowserUpdate3.dll [2024-12-20] (Avast Software s.r.o. -> Gen Digital Inc.)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\npAvastBrowserUpdate3.dll [2024-12-20] (Avast Software s.r.o. -> Gen Digital Inc.)

Edge:
=======
Edge DefaultProfile: Profile 1
Edge Profile: C:\Users\Win10\AppData\Local\Microsoft\Edge\User Data\Default [2026-04-15]
Edge Extension: (Google Docs Offline) - C:\Users\Win10\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-09]
Edge Extension: (Edge relevant text changes) - C:\Users\Win10\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge Profile: C:\Users\Win10\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2026-06-08]
Edge Extension: (Dokumenty Google offline) - C:\Users\Win10\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-17]
Edge Extension: (Edge relevant text changes) - C:\Users\Win10\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Default [2026-06-08]
CHR Notifications: Default -> hxxps://meet.google.com
CHR Session Restore: Default -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2026-06-08]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-06-08]
CHR Extension: (Avast Passwords) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Default\Extensions\emhginjpijfggbofeediiojmdlmlkoik [2025-05-03]
CHR Extension: (Google Docs Offline) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-08]
CHR Extension: (Secured Search) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilnidodcffjfecahcfiihlhiohnaobic [2019-11-01]
CHR Extension: (Search Manager) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce [2019-11-26]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-30]
CHR Extension: (Avast AntiTrack) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppdidpcihajhihmghhhkfnpklgdehold [2026-04-20]
CHR Profile: C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Guest Profile [2025-06-26]
CHR Profile: C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Profile 6 [2026-06-08]
CHR Notifications: Profile 6 -> hxxps://teams.microsoft.com
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-05-20]
CHR Extension: (Google Docs Offline) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-17]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-03-19]
CHR Extension: (Avast AntiTrack) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ppdidpcihajhihmghhhkfnpklgdehold [2026-04-22]
CHR Profile: C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Profile 7 [2026-04-15]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-09-16]
CHR Extension: (Google Docs Offline) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-11-07]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Win10\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-09-26]
CHR Profile: C:\Users\Win10\AppData\Local\Google\Chrome\User Data\System Profile [2026-06-08]
CHR HKLM\...\Chrome\Extension: [ilnidodcffjfecahcfiihlhiohnaobic]
CHR HKLM\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce]
CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej]
CHR HKU\S-1-5-21-4100794883-594294777-4078157440-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-4100794883-594294777-4078157440-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ilnidodcffjfecahcfiihlhiohnaobic]
CHR HKU\S-1-5-21-4100794883-594294777-4078157440-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce]
CHR HKU\S-1-5-21-4100794883-594294777-4078157440-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ilnidodcffjfecahcfiihlhiohnaobic]
CHR HKLM-x32\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce]
CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174584 2025-08-24] (Adobe Inc. -> Adobe Inc.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [7984296 2026-05-10] (Gen Digital Inc. -> Gen Digital Inc.)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-12-20] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [1038504 2026-05-10] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2736296 2026-05-10] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [1091752 2026-05-10] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastATServiceHost; C:\Program Files\Avast Software\AntiTrack\x86\ATServiceHost.exe [237280 2026-05-05] (Gen Digital Inc. -> AVAST Software)
R2 AvastCleanupSvc; C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe [22259936 2026-06-08] (Gen Digital Inc. -> Gen Digital Inc.)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-12-20] (Avast Software s.r.o. -> Gen Digital Inc.)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\147.0.34541.118\elevation_service.exe [3733200 2026-04-28] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56912 2021-05-24] (Avast Software s.r.o. -> AVAST Software)
S3 brlapi; C:\WINDOWS\brltty\bin\brltty.exe [847886 2019-10-15] (Microsoft Windows -> )
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [298496 2017-12-05] (Brother Industries, Ltd.) [File not signed]
R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [30663800 2026-06-08] (Gen Digital Inc. -> Gen Digital Inc.)
S4 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13652176 2024-11-09] (Microsoft Corporation -> Microsoft Corporation)
S4 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncHelper.exe [3610984 2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
R2 HPSIService; C:\WINDOWS\system32\HPSIsvc.exe [126856 2012-11-08] (Hewlett-Packard Company -> HP)
S3 OfficeSvcManagerAddons; C:\WINDOWS\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [22384 2023-11-18] (Microsoft Windows -> Microsoft Corporation)
S4 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.078.0426.0002\OneDriveUpdaterService.exe [4018024 2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
R2 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [15081640 2026-05-18] (Gen Digital Inc. -> Gen Digital Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803064 2025-10-17] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ZoomCptService; "C:\Program Files\Common Files\Zoom\Support\CptService.exe" -user_path "C:\Users\Win10\AppData\Roaming\Zoom"

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 asw-ovpn-dco; C:\WINDOWS\System32\drivers\asw-ovpn-dco.sys [148720 2026-03-11] (Microsoft Windows Hardware Compatibility Publisher -> OpenVPN, Inc)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [259168 2026-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [451168 2026-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [315488 2026-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [87136 2026-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [29144 2025-07-31] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [32864 2026-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [289376 2026-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [633440 2026-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [96864 2026-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [71776 2026-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [911456 2026-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1292896 2026-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [250464 2026-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [466016 2026-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 aswVpnRdr; C:\WINDOWS\System32\drivers\aswVpnRdr.sys [87792 2026-04-16] (Microsoft Windows Hardware Compatibility Publisher -> Avast Software)
R3 aswWintun; C:\WINDOWS\System32\drivers\aswWintun.sys [40832 2024-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Avast Software)
S3 aswWireGuard; C:\WINDOWS\System32\drivers\aswWireguard.sys [174912 2025-06-23] (Microsoft Windows Hardware Compatibility Publisher -> Avast Software)
S3 mvusbews; C:\WINDOWS\System32\Drivers\mvusbews.sys [19968 2012-11-08] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.)
R3 taphss6; C:\WINDOWS\System32\drivers\taphss6.sys [42064 2017-08-22] (AnchorFree Inc -> Anchorfree Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 cpuz148; \??\C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys (No File) <==== ATTENTION

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-06-08 21:50 - 2026-06-08 21:51 - 000035631 _____ C:\Users\Win10\Desktop\FRST.txt
2026-06-08 21:49 - 2026-06-08 21:50 - 000000000 ____D C:\FRST
2026-06-08 21:45 - 2026-06-08 21:46 - 002646016 _____ (Farbar) C:\Users\Win10\Desktop\FRST64.exe
2026-05-21 21:40 - 2026-05-21 21:40 - 000008262 _____ C:\Users\Win10\Downloads\Seznam žáků konzulární výuka_2025_26 ČŠŘ.xlsx
2026-05-19 07:58 - 2026-05-19 07:58 - 000000140 _____ C:\Users\Win10\Desktop\Erikaweg 77, 93053 Regensburg.url
2026-05-13 12:17 - 2026-05-13 12:17 - 000004614 _____ C:\Users\Win10\Downloads\Konzulární výuka - seznam žáků ČŠŘ.ods
2026-05-12 20:14 - 2026-05-12 22:46 - 000012720 _____ C:\Users\Win10\Downloads\Seznam_zaku_Weiden_2026_27 (1).xlsx
2026-05-12 20:13 - 2026-05-12 20:13 - 000012792 _____ C:\Users\Win10\Downloads\Seznam_zaku_Weiden_2026_27.xlsx
2026-05-12 11:44 - 2026-05-12 11:45 - 000013361 _____ C:\Users\Win10\Downloads\Texty na web.odt
2026-05-10 17:28 - 2026-05-10 17:28 - 000324264 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-06-08 21:53 - 2020-09-17 11:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2026-06-08 21:46 - 2025-02-10 21:03 - 000000000 ____D C:\Users\Win10\AppData\Local\Avast AntiTrack
2026-06-08 21:45 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-06-08 21:31 - 2019-09-26 21:48 - 000000000 ____D C:\Users\Win10\AppData\Local\D3DSCache
2026-06-08 21:27 - 2020-09-17 10:42 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-06-08 21:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-06-08 21:05 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2026-06-08 20:58 - 2021-12-18 23:45 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-06-08 20:55 - 2022-12-12 21:30 - 000000000 ____D C:\ProgramData\Package Cache
2026-06-08 20:11 - 2020-08-04 22:34 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-06-08 19:52 - 2020-09-17 11:01 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-08 19:52 - 2020-09-17 11:01 - 000003630 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-06-08 19:47 - 2017-11-10 17:24 - 000000000 __SHD C:\Users\Win10\IntelGraphicsProfiles
2026-05-20 09:04 - 2026-04-16 14:02 - 000002776 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-05-20 09:04 - 2026-04-16 14:01 - 000003140 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-4100794883-594294777-4078157440-1002
2026-05-20 09:04 - 2026-04-16 14:01 - 000003126 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4100794883-594294777-4078157440-1002
2026-05-20 09:04 - 2025-02-07 21:22 - 000003140 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-4100794883-594294777-4078157440-1001
2026-05-20 09:04 - 2021-12-11 10:21 - 000003126 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4100794883-594294777-4078157440-1001
2026-05-19 09:22 - 2019-02-06 00:01 - 000000000 ____D C:\Users\Win10\AppData\Local\CrashDumps
2026-05-19 09:22 - 2018-01-08 11:35 - 000000000 ____D C:\Users\Win10\AppData\Roaming\Microsoft\Office
2026-05-19 07:54 - 2026-04-16 14:01 - 000002202 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-05-19 07:54 - 2026-04-16 14:01 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-05-19 07:24 - 2020-09-17 11:07 - 000721640 _____ C:\WINDOWS\system32\perfh005.dat
2026-05-19 07:24 - 2020-09-17 11:07 - 000145958 _____ C:\WINDOWS\system32\perfc005.dat
2026-05-19 07:24 - 2020-09-17 10:55 - 002575330 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-05-19 07:24 - 2019-12-07 16:51 - 000733960 _____ C:\WINDOWS\system32\perfh007.dat
2026-05-19 07:24 - 2019-12-07 16:51 - 000150344 _____ C:\WINDOWS\system32\perfc007.dat
2026-05-19 07:24 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2026-05-19 07:20 - 2020-09-17 11:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-05-19 07:20 - 2020-09-17 10:42 - 000008192 ___SH C:\DumpStack.log.tmp
2026-05-19 07:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2026-05-19 07:20 - 2018-01-08 05:29 - 000000000 ____D C:\ProgramData\AVAST Software
2026-05-19 07:20 - 2017-11-10 17:23 - 000000000 ____D C:\Intel
2026-05-18 12:13 - 2020-09-17 10:43 - 000000000 ____D C:\Users\venad
2026-05-18 12:13 - 2019-12-07 11:03 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2026-05-18 11:09 - 2018-01-05 05:06 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-05-13 12:17 - 2018-01-08 11:24 - 000000000 ____D C:\Users\Win10\AppData\Roaming\Microsoft\Excel
2026-05-13 09:22 - 2018-01-05 18:40 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-05-13 09:14 - 2018-01-05 18:40 - 220340424 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-05-12 20:19 - 2018-01-08 11:35 - 000000000 ____D C:\Users\Win10\AppData\Roaming\Microsoft\Word
2026-05-12 20:14 - 2017-10-23 08:32 - 000000000 ____D C:\Users\Win10\AppData\Local\Packages
2026-05-11 20:42 - 2025-10-18 20:38 - 000003642 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser VPS Differential Update
2026-05-11 20:42 - 2024-12-20 22:33 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2026-05-11 20:42 - 2024-12-20 22:33 - 000002409 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2026-05-11 12:38 - 2020-09-17 10:43 - 000000000 ____D C:\Users\Win10
2026-05-11 10:41 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-05-10 17:33 - 2020-09-17 11:01 - 000003252 _____ C:\WINDOWS\system32\Tasks\Yahoo! Powered loros
2026-05-10 17:28 - 2020-10-13 23:40 - 000289376 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2026-05-10 17:28 - 2020-04-14 21:32 - 000633440 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2026-05-10 17:28 - 2019-01-06 13:43 - 000315488 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2026-05-10 17:28 - 2019-01-06 13:43 - 000087136 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2026-05-10 17:28 - 2018-10-30 00:56 - 000032864 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2026-05-10 17:28 - 2018-01-08 00:31 - 001292896 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSP.sys
2026-05-10 17:28 - 2018-01-08 00:31 - 000466016 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswVmm.sys
2026-05-10 17:28 - 2018-01-08 00:31 - 000096864 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2026-05-10 17:28 - 2018-01-08 00:31 - 000071776 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2026-05-10 17:27 - 2019-01-14 23:21 - 000451168 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2026-05-10 17:27 - 2018-01-08 00:31 - 000911456 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2026-05-10 17:27 - 2018-01-08 00:31 - 000259168 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArPot.sys

==================== Files in the root of some directories ========

2018-01-08 12:39 - 2018-01-08 12:39 - 000000045 _____ () C:\Users\Win10\AppData\Roaming\WB.CFG
2018-01-03 03:45 - 2018-01-03 03:45 - 000032038 _____ () C:\Users\Win10\AppData\Local\SquareClock.Production_Home_Siko_WebIcon.ico

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-06-2026
Ran by Win10 (08-06-2026 21:55:28)
Running from C:\Users\Win10\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) (2020-09-17 09:01:59)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-4100794883-594294777-4078157440-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-4100794883-594294777-4078157440-503 - Limited - Disabled)
Gast (S-1-5-21-4100794883-594294777-4078157440-501 - Limited - Disabled)
venad (S-1-5-21-4100794883-594294777-4078157440-1002 - Limited - Enabled) => C:\Users\venad
WDAGUtilityAccount (S-1-5-21-4100794883-594294777-4078157440-504 - Limited - Disabled)
Win10 (S-1-5-21-4100794883-594294777-4078157440-1001 - Administrators - Enabled) => C:\Users\Win10

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 25.001.21151 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601120}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Aiseesoft Launcher 1.0.16 (HKLM-x32\...\{F628FD57-7A1A-43BB-B0CA-6B25856D1353}_is1) (Version: 1.0.16 - Aiseesoft Studio)
AppLogLibSetup (HKLM-x32\...\{52FB0C8F-DF05-4C61-AEB6-18C55F8C385F}) (Version: 1.0.3.0 - Brother Industries Ltd.) Hidden
Avast AntiTrack (HKLM-x32\...\AvastAntiTrackPremium) (Version: 4.5.6990.13980 - Avast Software)
Avast Cleanup Premium (HKLM\...\Avast Cleanup) (Version: 26.6.18725.23578 - Gen Digital Inc.)
Avast Premium Security (HKLM\...\Avast Antivirus) (Version: 26.4.10932.3593 - Gen Digital Inc.)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 147.0.34541.118 - Autoři prohlížeče Avast Secure Browser)
Avast SecureLine VPN (HKLM\...\Avast SecureLine) (Version: 26.4.12238.17036 - Avast Software)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1697.6 - AVAST Software) Hidden
BrLauncher (HKLM-x32\...\{88FCD471-DBBF-4A75-8066-ACACE05DE3CF}) (Version: 2.0.14.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{190861E7-09C5-42D8-BB4B-0AFB234BCFC1}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden
Brother PCFax Driver (HKLM-x32\...\{79262B43-9E15-4732-A034-BFD29D9BD077}) (Version: 1.4.1.0 - Brother Industries Ltd.) Hidden
Brother Printer Driver (HKLM-x32\...\{815D4CF3-0244-4142-98F8-51E5C7442DB7}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{01A1E3D8-E030-4A0B-B91E-4E1E8E1E02D3}) (Version: 1.0.23.1 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{D0F69DE9-EE0B-4A7A-8248-6D5EC97D171C}) (Version: 1.0.23.0 - Brother Industries Ltd.) Hidden
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.8.1355.1753 - Piriform)
CCleaner Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.8.1067.0 - Piriform Software) Hidden
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1583.3 - Piriform Software) Hidden
ControlCenter4 (HKLM-x32\...\{CAFE5834-5440-41B8-8C56-4DD946A1A5E1}) (Version: 4.6.21.1 - Brother Industries, Ltd.) Hidden
ControlCenter4 CSDK (HKLM-x32\...\{FD8A9511-BFC9-43B5-BB75-9CEC0EA03CF0}) (Version: 4.6.1.1 - Brother Industries, Ltd.) Hidden
Documentation Manager (HKLM\...\{6EEC9A89-A963-48FB-9B63-368C997963E7}) (Version: 22.190.0.4 - Intel Corporation) Hidden
Driver Easy 5.7.0 (HKLM\...\DriverEasy_is1) (Version: 5.7.0 - Easeware)
Google Chrome (HKLM\...\{AB53BB27-D54C-3E8F-8EFF-C3B1068B5BA5}) (Version: 148.0.7778.168 - Google LLC)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
HP LaserJet Professional M1130-M1210 MFP Series (HKLM\...\HP LaserJet Professional M1130-M1210 MFP Series) (Version: - )
HttpToUsbBridge (HKLM-x32\...\{6FF1DBC1-A313-460D-B1F2-6444D2F01DEE}) (Version: 2.0.18.1 - Brother Industries Ltd.)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 25.20.100.6446 - Intel Corporation)
Intel® Software Installer (HKLM-x32\...\{17ca2588-1bb5-40ca-b48f-6a80ffbce846}) (Version: 22.190.0.4 - Intel Corporation) Hidden
IrfanView 4.73 (64-bit) (HKLM\...\IrfanView64) (Version: 4.73 - Irfan Skiljan)
Microsoft Edge (HKLM-x32\...\{95BD5391-9A58-375B-859C-1F6CBA883AC1}) (Version: 149.0.4022.52 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 148.0.3967.70 - Microsoft Corporation) Hidden
Microsoft Office 2016 pro podnikatele - cs-cz (HKLM\...\HomeBusinessRetail - cs-cz) (Version: 16.0.18129.20158 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.078.0426.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{2953E19B-9F91-4A49-A23B-7E25970A1951}) (Version: 3.73.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4048 (HKLM\...\{91415F19-4C22-3609-A105-92ED3522D83C}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 (HKLM-x32\...\{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
NetworkRepairTool (HKLM-x32\...\{96CEE8C3-B934-48A4-ADA6-91B7CE8A5002}) (Version: 1.2.17.0 - Brother Industries, Ltd.) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18129.20100 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18129.20158 - Microsoft Corporation) Hidden
PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0002 - Nuance Communications, Inc.)
PC-FAXReceive (HKLM-x32\...\{9C609AF4-9CC1-45F0-B954-29DF7DD40329}) (Version: 1.8.004.0 - Brother Insutries Ltd.) Hidden
PCFaxTx (HKLM-x32\...\{FD9C7169-7728-477A-91D1-AF3822CE494F}) (Version: 3.7.5.1 - Brother Industries Ltd.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8216 - Realtek Semiconductor Corp.)
RemoteSetup (HKLM-x32\...\{FAB8A30A-B074-48F9-9D73-5E9A757403F8}) (Version: 3.10.2.0 - Brother Industries Ltd.) Hidden
Scan To (HKLM\...\{E8A34AC8-0137-4515-A94B-0A0946DDC251}) (Version: 2.0.1 - HP)
ScannerUtilityInstaller (HKLM-x32\...\{D65C0754-7790-427F-AD73-D7C644260F57}) (Version: 1.19.9.1 - Brother) Hidden
SlimPDF Reader 1.0 (HKLM-x32\...\{7E1FEE27-F869-4D4B-8AA3-64C7FD99BD7C}_is1) (Version: 1.0 - Investintech.com Inc.)
SoftwareUpdateNotification (HKLM-x32\...\{34F12379-C924-41E6-921D-51C71217F58C}) (Version: 1.0.9.0 - Brother Industries, Ltd.) Hidden
StatusMonitor (HKLM-x32\...\{D42470A0-E4C3-41C9-9A92-B1B23FD13F8C}) (Version: 1.21.6.0 - Brother Insutries Ltd.) Hidden
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.2781 - Microsoft Corporation)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
WinRAR 7.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.01.0 - win.rar GmbH)
Zoom Workplace (64-bit) (HKLM\...\{8B11DE91-11A7-4DDC-8CD8-0C551728F53D}) (Version: 6.6.23272 - Zoom)

Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC [2026-03-13] ()
Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-14] (Autodesk Inc.)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.27.9360.0_x64__rz1tebttyb220 [2026-05-10] (Dolby Laboratories)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-02-17] (Microsoft Corporation)
Doplněk pro Fotky -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-03-14] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_164.1.1128.0_x64__v10z8vjag6ke6 [2026-04-26] (HP Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-12] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-12] (Microsoft Corporation) [MS Ad]
Ovládací centrum grafiky Intel® -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-01-18] (INTEL CORP) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-4100794883-594294777-4078157440-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-4100794883-594294777-4078157440-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-4100794883-594294777-4078157440-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-05-10] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-05-10] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-01-31] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-05-10] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [Avast Cleanup Premium] -> {13004120-FCAF-4232-A255-807EAD6E7D01} => C:\Program Files\Avast Software\Cleanup\tucontextmenu.dll [2025-12-15] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-05-10] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [Avast Cleanup Premium] -> {13004120-FCAF-4232-A255-807EAD6E7D01} => C:\Program Files\Avast Software\Cleanup\tucontextmenu.dll [2025-12-15] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.078.0426.0002\FileSyncShell64.dll [2026-05-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2026-05-10] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers6: [Avast Cleanup Premium] -> {13004120-FCAF-4232-A255-807EAD6E7D01} => C:\Program Files\Avast Software\Cleanup\tucontextmenu.dll [2025-12-15] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Win10\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\371b6590bc8d800\Česká škola v Řezně (ceskaskolavrezne@gmail.com) - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 6"

==================== Loaded Modules (Whitelisted) =============

2022-12-12 21:29 - 2018-05-02 16:25 - 000091648 _____ () [File not signed] C:\WINDOWS\system32\BrNetSti.dll
2022-12-12 21:29 - 2005-04-22 14:36 - 000143360 _____ () [File not signed] C:\WINDOWS\system32\BrSNMP64.dll
2019-01-29 01:30 - 2012-09-29 14:25 - 000409088 _____ () [File not signed] C:\WINDOWS\System32\HPM1210LM.DLL
2019-01-29 01:30 - 2012-09-29 14:53 - 001038336 _____ () [File not signed] C:\WINDOWS\system32\spool\DRIVERS\x64\3\HPM1210GC.dll
2019-01-29 01:30 - 2012-09-29 14:26 - 003120128 _____ () [File not signed] C:\WINDOWS\system32\spool\DRIVERS\x64\3\hpm1210su.dll
2019-01-29 01:30 - 2012-09-29 14:25 - 000074240 _____ () [File not signed] C:\WINDOWS\system32\spool\PRTPROCS\x64\HPM1210PP.dll
2025-08-15 02:15 - 2025-08-15 02:15 - 000030720 _____ (Adobe Systems Inc.) [File not signed] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\cs_cz\Acrobat Elements\ContextMenuShim64.cze

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_nxtad_18_02&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dus%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutAyE0FyCyE0B0D0A0A0EyEzzyCyByCzztN0D0Tzu0StBtCzyzytN1L2XzuyEtFtBtCtFtDtFyDtCtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyCzzyBtA0BtBtC0AtGyBtA0B0DtGtCyEtAtDtGtCyBtBtCtGyCyE0B0EyEzyzytCyBtA0B0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC1P1S1TtDzytDtAtGyEyEyC1OtGyEyEtB1TtGzyyC1S1RtG1RtDyE1R1RyCyDyE1O1TyBzy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDtCyDyEtDyBzzzyzz%26cr%3D1857007285%26a%3Dwbf_nxtad_18_02%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_nxtad_18_02&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dus%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutAyE0FyCyE0B0D0A0A0EyEzzyCyByCzztN0D0Tzu0StBtCzyzytN1L2XzuyEtFtBtCtFtDtFyDtCtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyCzzyBtA0BtBtC0AtGyBtA0B0DtGtCyEtAtDtGtCyBtBtCtGyCyE0B0EyEzyzytCyBtA0B0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC1P1S1TtDzytDtAtGyEyEyC1OtGyEyEtB1TtGzyyC1S1RtG1RtDyE1R1RyCyDyE1O1TyBzy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDtCyDyEtDyBzzzyzz%26cr%3D1857007285%26a%3Dwbf_nxtad_18_02%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_nxtad_18_02&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dus%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutAyE0FyCyE0B0D0A0A0EyEzzyCyByCzztN0D0Tzu0StBtCzyzytN1L2XzuyEtFtBtCtFtDtFyDtCtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyCzzyBtA0BtBtC0AtGyBtA0B0DtGtCyEtAtDtGtCyBtBtCtGyCyE0B0EyEzyzytCyBtA0B0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC1P1S1TtDzytDtAtGyEyEyC1OtGyEyEtB1TtGzyyC1S1RtG1RtDyE1R1RyCyDyE1O1TyBzy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDtCyDyEtDyBzzzyzz%26cr%3D1857007285%26a%3Dwbf_nxtad_18_02%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_nxtad_18_02&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dus%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutAyE0FyCyE0B0D0A0A0EyEzzyCyByCzztN0D0Tzu0StBtCzyzytN1L2XzuyEtFtBtCtFtDtFyDtCtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyCzzyBtA0BtBtC0AtGyBtA0B0DtGtCyEtAtDtGtCyBtBtCtGyCyE0B0EyEzyzytCyBtA0B0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC1P1S1TtDzytDtAtGyEyEyC1OtGyEyEtB1TtGzyyC1S1RtG1RtDyE1R1RyCyDyE1O1TyBzy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDtCyDyEtDyBzzzyzz%26cr%3D1857007285%26a%3Dwbf_nxtad_18_02%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro&p={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_nxtad_18_02&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dus%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutAyE0FyCyE0B0D0A0A0EyEzzyCyByCzztN0D0Tzu0StBtCzyzytN1L2XzuyEtFtBtCtFtDtFyDtCtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyCzzyBtA0BtBtC0AtGyBtA0B0DtGtCyEtAtDtGtCyBtBtCtGyCyE0B0EyEzyzytCyBtA0B0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC1P1S1TtDzytDtAtGyEyEyC1OtGyEyEtB1TtGzyyC1S1RtG1RtDyE1R1RyCyDyE1O1TyBzy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDtCyDyEtDyBzzzyzz%26cr%3D1857007285%26a%3Dwbf_nxtad_18_02%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro&p={searchTerms}
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-10-15] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-11-18] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-11-18] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-11-18] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-11-18] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-11-18] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-11-18] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-11-18] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-11-18] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-4100794883-594294777-4078157440-1001\...\sharepoint.com -> hxxps://uniregensburg-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-09-29 15:46 - 2019-01-06 13:41 - 000000862 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.0.1
Windows Firewall is enabled.

Network Binding:
=============
Avast SecureLine VPN: Avast SecureLine Wintun Adapter -> aswWintun.sys
Ethernet 2: Anchorfree HSS VPN Adapter -> taphss6.sys
Avast SecureLine VPN OpenVPN Data Channel Offload: Avast SecureLine OpenVPN Data Channel Offload -> asw-ovpn-dco.sys
WLAN 2: Intel(R) Dual Band Wireless-AC 7265 -> Netwtw04.sys
Bluetooth-Netzwerkverbindung 3: Bluetooth Device (Personal Area Network) #3 -> bthpan.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4100794883-594294777-4078157440-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Win10\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\4884467258948709200\134048997145697797.jpg
HKU\S-1-5-21-4100794883-594294777-4078157440-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 0) (TamperProtectionSource: )
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "RtHDVBg_ASC"
HKLM\...\StartupApproved\Run: => "RtHDVBg_CTPreset"
HKLM\...\StartupApproved\Run32: => "ControlCenter4"
HKLM\...\StartupApproved\Run32: => "BrStsMon00"
HKLM\...\StartupApproved\Run32: => "BrotherSoftwareUpdateNotification"
HKLM\...\StartupApproved\Run32: => "PDFProHook"
HKU\S-1-5-21-4100794883-594294777-4078157440-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-4100794883-594294777-4078157440-1001\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{E0C0FE22-1749-43D9-B55D-28A42369571E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.121.1654.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{F6034572-5C00-4CC6-8E87-EA9FB53D8F99}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.121.1654.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{48E2AF9B-BAB2-40D3-8BFD-250E30F57A8E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.121.1654.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{382E47CF-53AB-467D-AF70-5DA65F87421F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.121.1654.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{13861FF3-FBAB-4C61-8943-02AB9D6EB0D5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.121.1654.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{391405A9-C422-4A15-8069-1744B9152A67}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.121.1654.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{36484CF9-63C1-4E94-8FF3-B27520B6D7B8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.121.1654.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{009A831E-DD8D-4E3D-B9C6-9DB561FAD3E4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.121.1654.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{DB290DB1-CF81-4EA9-BF6E-8251828765C2}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{DC1668CF-8B60-4D98-A0EF-079676DCB90D}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{7CF7BFB4-DB2F-496A-B986-2F010486007F}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{23D5C5A5-107C-49FF-A41B-37AA3C3C7F77}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{966A7EC3-B47F-41FC-870F-1FD7173F0052}] => (Allow) C:\Users\Win10\Downloads\Install\wlan_wiz\.\wlan_assistant\waw.exe () [File not signed]
FirewallRules: [{3D542DF4-EB30-4A3F-951E-1E529324E7DB}] => (Allow) LPort=54925
FirewallRules: [{6AF0F5E9-A3B3-4887-80CF-041FC2A9A0B4}] => (Allow) c:\program files (x86)\pc-faxreceive\brengineprocess.exe (Brother Industries, Ltd. -> Brother Industries, Ltd.)
FirewallRules: [{BBF83237-2129-40D7-A443-24614993072F}] => (Allow) c:\program files (x86)\pc-faxreceive\brengineprocess.exe (Brother Industries, Ltd. -> Brother Industries, Ltd.)
FirewallRules: [{AA7CB7C3-1F1F-4E6B-892A-0D9A2ED51A5D}] => (Allow) C:\Program Files\Easeware\DriverEasy\DriverEasy.exe (Easeware Technology Limited -> Easeware)
FirewallRules: [{88B93FCD-D564-420C-9848-9C142705C0D9}] => (Allow) C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\CefSharp.BrowserSubprocess.exe => No File
FirewallRules: [{1275582F-5278-4C2B-B1F5-188FA85D17BC}] => (Allow) C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\CefSharp.BrowserSubprocess.exe => No File
FirewallRules: [{DA8B6EB7-B09F-4637-A6D2-1F1E55521E83}] => (Allow) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{D8A541EB-88F3-459A-80FF-CF25B871C5C5}] => (Allow) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{BEDE3570-AA4E-4A38-B25E-28B2F6E67346}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.123.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{0A445ADA-488A-4477-BD51-AA172794BDD9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.123.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{DA7BBD3A-9060-478B-A2F1-AC11C976FB24}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.123.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{6160C577-87C2-44A5-81CE-2ECDA6E32F11}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.123.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{D046FF12-9948-40AE-BC8F-A7D7D0C9CA52}] => (Allow) C:\Users\Win10\AppData\Roaming\Zoom\bin\Zoom.exe => No File
FirewallRules: [{9054A91B-99FB-4E99-AA8A-D3E851B9B98E}] => (Allow) C:\Users\Win10\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{71D3FFAE-A01B-4FFE-9425-0BBA6DC5F7DB}] => (Allow) C:\Users\Win10\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{9893B72D-3B5F-431C-8EA7-DB1530ADD522}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.125.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{CDE105D0-2BB6-4B87-8740-985C91574D71}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.125.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7A71BB49-1606-4C81-B4AA-FDB23F225234}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.125.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A8F4A18F-BB16-4B2F-825B-866B78914D01}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.125.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8BE7DC06-8577-4C2E-832E-B7ABDFDE56DC}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{80505E9F-38C9-4C70-A4F0-E93FDC843D60}] => (Allow) C:\Program Files\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [{6A515D62-4487-449D-A56E-F1A6237FA587}] => (Allow) C:\Program Files\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{E747843E-6733-4EDA-8334-2A978D6E09B1}] => (Allow) C:\Program Files\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{3318439E-E0F3-4BE7-A2FD-0F976A46A6A9}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{2212B1A9-1C8F-4723-B741-2EC871BFFA51}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:117.68 GB) (Free:3.32 GB) (3%)

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (06/08/2026 08:55:27 PM) (Source: MsiInstaller) (EventID: 11605) (User: DESKTOP-9USA425)
Description: Product: Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36231 -- Disk full: There is not enough disk space on the volume 'C:' to continue the install with recovery enabled. 2 528 KB are required, but only 1 920 KB are available. Click Ignore to continue the install without saving recovery information, click Retry to check for available space again, or click Cancel to quit the installation.

Error: (06/08/2026 08:54:52 PM) (Source: MsiInstaller) (EventID: 11714) (User: DESKTOP-9USA425)
Description: Product: Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36231 -- Error 1714. The older version of Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36231 cannot be removed. Contact your technical support group. System Error 1612.

Error: (06/08/2026 08:50:12 PM) (Source: MsiInstaller) (EventID: 11714) (User: DESKTOP-9USA425)
Description: Product: Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36231 -- Error 1714. The older version of Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36231 cannot be removed. Contact your technical support group. System Error 1612.

Error: (06/08/2026 08:45:25 PM) (Source: MsiInstaller) (EventID: 11714) (User: DESKTOP-9USA425)
Description: Product: Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36231 -- Error 1714. The older version of Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36231 cannot be removed. Contact your technical support group. System Error 1612.

Error: (06/08/2026 08:42:55 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVAST Software\Browser\Application\defs\26060806\aswEngin.dll se nezdařilo.
Závislé sestavení local.crt,processorArchitecture="amd64",publicKeyToken="6d2c827d54b21b5d",type="win32",version="14.0.0.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (05/13/2026 11:27:42 AM) (Source: MsiInstaller) (EventID: 11714) (User: NT-AUTORITÄT)
Description: Product: Adobe Refresh Manager -- Error 1714.The older version of Adobe Refresh Manager cannot be removed. Contact your technical support group. System Error 1612.

Error: (05/13/2026 09:38:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AcroCEF.exe, verze: 25.1.21151.0, časové razítko: 0x697e3cf2
Název chybujícího modulu: libcef.dll, verze: 112.7.0.0, časové razítko: 0x631bae2d
Kód výjimky: 0x80000003
Posun chyby: 0x00000000035e8476
ID chybujícího procesu: 0x3970
Čas spuštění chybující aplikace: 0x01dce2ab76700eb3
Cesta k chybující aplikaci: C:\Program Files\Adobe\Acrobat DC\Acrobat\AcroCEF\AcroCEF.exe
Cesta k chybujícímu modulu: C:\Program Files\Adobe\Acrobat DC\Acrobat\AcroCEF\libcef.dll
ID zprávy: b4cc7924-9ee8-4278-bbfd-43ec23b378a0
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (05/13/2026 09:37:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AcroCEF.exe, verze: 25.1.21151.0, časové razítko: 0x697e3cf2
Název chybujícího modulu: libcef.dll, verze: 112.7.0.0, časové razítko: 0x631bae2d
Kód výjimky: 0x80000003
Posun chyby: 0x00000000035e8476
ID chybujícího procesu: 0x3e50
Čas spuštění chybující aplikace: 0x01dce2ab6b8ae965
Cesta k chybující aplikaci: C:\Program Files\Adobe\Acrobat DC\Acrobat\AcroCEF\AcroCEF.exe
Cesta k chybujícímu modulu: C:\Program Files\Adobe\Acrobat DC\Acrobat\AcroCEF\libcef.dll
ID zprávy: 9e28b67b-4e59-4882-8fd8-84051dd05502
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (06/08/2026 08:58:30 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Server {ABE0ADC7-22F4-5F3C-BC9F-A97BDCC41E24} se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/08/2026 08:56:29 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Server {ABE0ADC7-22F4-5F3C-BC9F-A97BDCC41E24} se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/08/2026 07:47:45 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby FDResPub bylo dosaženo časového limitu (30000 ms).

Error: (05/21/2026 10:10:34 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9USA425)
Description: Server Microsoft.Windows.ContentDeliveryManager_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy!App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (05/21/2026 08:37:13 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby FDResPub bylo dosaženo časového limitu (30000 ms).

Error: (05/21/2026 08:36:46 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9USA425)
Description: Server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} se v daném časovém limitu neregistroval u služby DCOM.

Error: (05/20/2026 11:49:07 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9USA425)
Description: Server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} se v daném časovém limitu neregistroval u služby DCOM.

Error: (05/20/2026 11:49:07 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9USA425)
Description: Server Microsoft.AAD.BrokerPlugin_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy!Windows.Security.Authentication.Web.Core.BackgroundGetTokenTask.ClassId.WebAccountProvider se v daném časovém limitu neregistroval u služby DCOM.


Windows Defender:
================Event[0]:

Date: 2026-04-15 11:22:55
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.303.25.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT-AUTORITÄT\Netzwerkdienst
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16400.2
Kód chyby: 0x80072ee7
Popis chyby: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Date: 2026-04-15 11:22:55
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.303.25.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT-AUTORITÄT\Netzwerkdienst
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16400.2
Kód chyby: 0x80072ee7
Popis chyby: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Date: 2026-04-15 11:22:55
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.303.25.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT-AUTORITÄT\Netzwerkdienst
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16400.2
Kód chyby: 0x80072ee7
Popis chyby: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Date: 2026-04-15 11:22:55
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.303.25.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT-AUTORITÄT\Netzwerkdienst
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16400.2
Kód chyby: 0x80072ee7
Popis chyby: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Date: 2026-04-15 11:22:55
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.303.25.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT-AUTORITÄT\Netzwerkdienst
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16400.2
Kód chyby: 0x80072ee7
Popis chyby: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

CodeIntegrity:
===============
Date: 2026-01-31 16:41:40
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\144.0.7559.110\chrome.dll that did not meet the Microsoft signing level requirements.

Date: 2025-07-11 08:58:16
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.

Date: 2025-07-11 08:58:12
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

BIOS: INSYDE Corp. V1.06 06/26/2017
Motherboard: APL ASAHI_AP
Processor: Intel(R) Pentium(R) CPU N4200 @ 1.10GHz
Percentage of memory in use: 76%
Total physical RAM: 3936.22 MB
Available physical RAM: 933.5 MB
Total Virtual: 10950.35 MB
Available Virtual: 6618.04 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:117.68 GB) (Free:3.32 GB) (Model: HFS128G39TND-N210A) NTFS

\\?\Volume{06c8d6f0-b448-475e-b6a0-16cff428fa5a}\ (Wiederherstellung) (Fixed) (Total:0.49 GB) (Free:0.47 GB) NTFS
\\?\Volume{41fe8dbe-9697-4a09-86a0-592c411d7a30}\ () (Fixed) (Total:0.85 GB) (Free:0.13 GB) NTFS
\\?\Volume{671fbb72-550f-4964-a185-2deb4fe7fa9c}\ () (Fixed) (Total:0.1 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 1BF85FCF)

Partition: GPT.

==================== End of Addition.txt =======================

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\Software\Policies\...\system: [EnableSmartScreen] 0 <==== ATTENTION
HKU\S-1-5-21-4100794883-594294777-4078157440-1001\...\MountPoints2: {cb632fe1-1b6d-11e9-9ddf-34f64bdaae48} - "D:\SISetup.exe"
BootExecute: autocheck autochk * icarus_rvrt.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
S3 cpuz148; \??\C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys (No File) <==== ATTENTION
C:\DumpStack.log.tmp
BHO-x32: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File
FirewallRules: [{BEDE3570-AA4E-4A38-B25E-28B2F6E67346}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.123.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{0A445ADA-488A-4477-BD51-AA172794BDD9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.123.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{DA7BBD3A-9060-478B-A2F1-AC11C976FB24}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.123.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{6160C577-87C2-44A5-81CE-2ECDA6E32F11}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.123.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{D046FF12-9948-40AE-BC8F-A7D7D0C9CA52}] => (Allow) C:\Users\Win10\AppData\Roaming\Zoom\bin\Zoom.exe => No File
FirewallRules: [{9054A91B-99FB-4E99-AA8A-D3E851B9B98E}] => (Allow) C:\Users\Win10\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{71D3FFAE-A01B-4FFE-9425-0BBA6DC5F7DB}] => (Allow) C:\Users\Win10\AppData\Roaming\Zoom\bin\airhost.exe => No File

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 11-06-2026
Ran by Win10 (12-06-2026 20:19:56) Run:1
Running from C:\Users\Win10\Downloads
Loaded Profiles: Win10 & venad
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\Software\Policies\...\system: [EnableSmartScreen] 0 <==== ATTENTION
HKU\S-1-5-21-4100794883-594294777-4078157440-1001\...\MountPoints2: {cb632fe1-1b6d-11e9-9ddf-34f64bdaae48} - "D:\SISetup.exe"
BootExecute: autocheck autochk * icarus_rvrt.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
S3 cpuz148; \??\C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys (No File) <==== ATTENTION
C:\DumpStack.log.tmp
BHO-x32: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File
FirewallRules: [{BEDE3570-AA4E-4A38-B25E-28B2F6E67346}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.123.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{0A445ADA-488A-4477-BD51-AA172794BDD9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.123.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{DA7BBD3A-9060-478B-A2F1-AC11C976FB24}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.123.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{6160C577-87C2-44A5-81CE-2ECDA6E32F11}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.123.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{D046FF12-9948-40AE-BC8F-A7D7D0C9CA52}] => (Allow) C:\Users\Win10\AppData\Roaming\Zoom\bin\Zoom.exe => No File
FirewallRules: [{9054A91B-99FB-4E99-AA8A-D3E851B9B98E}] => (Allow) C:\Users\Win10\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{71D3FFAE-A01B-4FFE-9425-0BBA6DC5F7DB}] => (Allow) C:\Users\Win10\AppData\Roaming\Zoom\bin\airhost.exe => No File

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
"HKLM\Software\Policies\Microsoft\Windows\System\\EnableSmartScreen" => removed successfully
HKU\S-1-5-21-4100794883-594294777-4078157440-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cb632fe1-1b6d-11e9-9ddf-34f64bdaae48} => removed successfully
HKLM\System\CurrentControlSet\Control\Session Manager\\"BootExecute"="autocheck autochk *" => value restored successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
HKLM\System\CurrentControlSet\Services\cpuz148 => removed successfully
cpuz148 => service removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BEDE3570-AA4E-4A38-B25E-28B2F6E67346}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0A445ADA-488A-4477-BD51-AA172794BDD9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DA7BBD3A-9060-478B-A2F1-AC11C976FB24}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6160C577-87C2-44A5-81CE-2ECDA6E32F11}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D046FF12-9948-40AE-BC8F-A7D7D0C9CA52}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9054A91B-99FB-4E99-AA8A-D3E851B9B98E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{71D3FFAE-A01B-4FFE-9425-0BBA6DC5F7DB}" => removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 14896612 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 7210 B
Windows/system/drivers => 2027215547 B
Edge => 27210648 B
Chrome => 892644212 B
Firefox => 0 B
Opera => 0 B

Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 3212 B
systemprofile32 => 0 B
LocalService => 8466 B
NetworkService => 0 B
Win10 => 919474828 B
venad => 648048 B

RecycleBin => 1002 B
EmptyTemp: => 3.6 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 12-06-2026 20:42:16)

C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 20:42:16 ====

Smazáno. Log již vypadá OK.

dekuji

Rádo se stalo!