Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 07-07-2026 01
Ran by Petr (administrator) on LAPTOP-CVO5E9CR (LENOVO 81AX) (09-07-2026 14:39:52)
Running from C:\Users\Petr\Desktop\FRST64.exe
Loaded Profiles: Petr
Platform: Microsoft Windows 11 Pro Version 25H2 26200.8737 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Autodesk, Inc. -> Autodesk) C:\Program Files\Autodesk\Genuine Service\GenuineService.exe
(Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessService.exe
(C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantage-(LenovoServiceBridgeAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2623.103.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\150.0.4078.48\msedgewebview2.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe
(Conexant Systems, Inc) [File not signed] [File is in use] C:\Program Files\CONEXANT\SAII\SmartAudio.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_8a8976fda8c58073\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8a8976fda8c58073\igfxEM.exe
(eM Client s.r.o. -> eM Client s.r.o.) C:\Program Files (x86)\eM Client\MailClient.exe
(ETDCtrl.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDTouch.exe
(ETDService.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDCtrl.exe
(ETDService.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDCtrlHelper.exe
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(explorer.exe ->) (eM Client s.r.o. -> eM Client s.r.o.) C:\Program Files (x86)\eM Client\MailClient.exe
(explorer.exe ->) (Fortemedia Inc -> ) C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(explorer.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <6>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\150.0.4078.48\msedgewebview2.exe <10>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Autodesk, Inc. -> ) C:\Program Files\Autodesk\Autodesk CER\service\cer_service.exe
(services.exe ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\16.3.1.15415\AdskLicensingService\AdskLicensingService.exe
(services.exe ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessServiceHost.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (Conexant Systems LLC -> Conexant Systems, Inc.) C:\Program Files\CONEXANT\SAII\CxUtilSvc.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDService.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(services.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_7ecc5be6ca7b3b0d\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_ece153ca769ec179\aesm_service.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8a8976fda8c58073\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8a8976fda8c58073\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8a8976fda8c58073\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_f222132bfa8270de\RstMwService.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\NisSrv.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(sihost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2623.103.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(sihost.exe ->) (Lenovo -> Lenovo) C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.7.18.0_x64__5grkq8ppsgwt4\LaunchUtility\utility.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2602.23002.0_x64__8wekyb3d8bbwe\MicrosoftSecurityApp\MicrosoftSecurityApp.exe
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.302.5.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Petr\AppData\Local\Microsoft\OneDrive\26.108.0607.0002\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
==================== Registry (Whitelisted) ===================
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [603992 2017-06-23] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] (Fortemedia Inc -> )
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [350184 2026-05-14] (Adobe Inc. -> Adobe Inc.)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [445800 2021-10-08] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Run: [Autodesk Access Service] => C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessService.exe [21901144 2026-01-15] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM\...\Run: [Autodesk Access] => C:\Program Files\Autodesk\AdODIS\V1\Access\AdskAccessCore.exe [40474968 2026-02-05] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1832280 2017-06-07] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [678624 2026-01-22] (Geek Software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [Bonus.SSR.FR12] => C:\Program Files (x86)\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1527960 2016-10-18] (ABBYY Production LLC -> ABBYY Production LLC.)
HKLM-x32\...\Run: [Autodesk Genuine Service ] => C:\Program Files\Autodesk\Genuine Service\GenuineService.exe [2691416 2025-11-10] (Autodesk, Inc. -> Autodesk)
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [365160 2020-03-25] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\Run: [EPSDNMON] => C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE [346712 2020-07-26] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [45052888 2026-06-24] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\Run: [MicrosoftEdgeAutoLaunch_88D36A2D9DF9AF2106D8CF7538FE64F2] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4970824 2026-07-02] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\Policies\Explorer: []
HKLM\...\Windows x64\Print Processors\Canon MP250 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD9W.DLL [28672 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP250 series: C:\WINDOWS\system32\CNMLM9W.DLL [336896 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\EPSON XP-900 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBRGE.DLL [187392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [558592 2012-11-12] (SEIKO EPSON CORPORATION) [File not signed]
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\Windows\system32\pxcpmL.dll [2044248 2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {B1A17782-C3AC-4E29-ADAA-7152978453F5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {92841B58-5E09-40A3-948B-7C3459861587} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [350184 2026-05-14] (Adobe Inc. -> Adobe Inc.)
Task: {AA821ED5-565E-4012-84CA-0DD8E07A89F3} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [6163432 2026-05-14] (Adobe Inc. -> Adobe Inc.)
Task: {E1D072A6-7F3D-4AA3-95B9-15661285EB04} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4682976 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
Task: {2B3208FF-CB6F-4377-A200-305DD4EE8BEF} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Avast Software\Avast\setup\overseer.exe [2977504 2025-10-13] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {F81838BC-5DA4-4F88-BF95-9C619BBF1CBF} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [3385640 2026-06-25] (Microsoft Windows -> Microsoft Corporation)
Task: {0C865056-1C60-4700-9E8B-3AF27F5797A3} - System32\Tasks\eM Client Database Backup (S-1-5-21-3231952856-1019465751-811631384-1001) => C:\Program Files (x86)\eM Client\MailClient.exe [266320 2024-10-15] (eM Client s.r.o. -> eM Client s.r.o.)
Task: {DD8346A8-C2C7-4E86-95DA-B43E0AAB7C2E} - System32\Tasks\EPSON XP-900 Series Update {1D34E24D-3602-4463-BC8C-53017AC68CA0} => C:\Windows\System32\spool\drivers\x64\3\E_YTSRGE.EXE [690536 2013-11-21] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Task: {86585920-EC30-4FD6-B93C-8AF7D85C4B59} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-28] (HP Inc. -> HP Inc.)
Task: {3829B766-0776-42D4-A627-2FEFFE7D9EE8} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-28] (HP Inc. -> HP Inc.)
Task: {93788829-E78A-4784-827C-1FD1487710B2} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [94496 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {D5ED7FC5-F3C4-498C-8589-C794D0053DFC} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\WINDOWS\system32\sc.exe [102400 2026-03-01] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService
Task: {3184A145-1881-4CB2-8D74-B57DF1E572C0} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => C:\WINDOWS\System32\reg.exe [110592 2026-03-01] (Microsoft Windows -> Microsoft Corporation) -> add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {1147DA14-A6DA-4061-B859-0CEBE9A91D91} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\282cbd1c-9a6d-4094-a094-7371c1718435 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {01278A15-FA16-47F7-AA38-486BD9EC764B} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\7e0ad1c9-bca2-49d9-8e96-4ab2758a910f => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {691C5591-33D3-4C91-A7A6-EE4BEE531454} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\820cabcb-7871-413b-9779-f284e97ccfd1 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {D7712497-51FD-40AE-A68C-238339771D3C} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [102400 2026-03-01] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {7F0742AB-72AF-40C8-A352-A4AC8F4F1BAB} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {7ECF50C5-3A41-49C9-82AD-60EAFE53E0C7} - System32\Tasks\Lenovo\Vantage\Schedule\ConsumerAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {739F6BEB-451C-4C2F-846D-3F3D7E1E60FB} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {6E1A6735-063C-498C-8BFE-94E504E65783} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {D408B24C-E2D9-42EE-B484-1CAC42BD5A80} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin_Pulsation => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {A2EFC83B-B5AA-4285-AA51-5E0BE1CC2C95} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {ABB122F0-6345-4405-B07E-CCB8AC93F425} - System32\Tasks\Lenovo\Vantage\Schedule\IdeaNotebookAddinDailyEvent => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {3E9E4CDD-E025-48D4-91AF-E2C7FDB731C5} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {893215DD-4335-48D8-B317-79ACCBC96472} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBatteryPartSalesMonthlyToast => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {E727B56B-E56C-4EF1-8C88-BF74A6EBF600} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBoostAddin.Prompt => C:\Program Files (x86)\Lenovo\VantageService\4.0.52.0\ScheduleEventAction.exe LenovoBoostAddin.Prompt (No File)
Task: {F5DFF47B-E969-43E2-80D6-037C03438DA7} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {0353D700-663F-4954-BB04-F9721BBB5174} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSupportHealthReportSchedule => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {8D61AD94-C8FE-4ECD-B24B-CED7A7F94DC0} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {CC30D9ED-72AF-4D6E-A5A6-8AE3840C311E} - System32\Tasks\Lenovo\Vantage\Schedule\NotificationCenter => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe NotificationCenter (No File)
Task: {20FADD54-9630-46A8-BCB7-06DB8102E803} - System32\Tasks\Lenovo\Vantage\Schedule\SettingsWidgetAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {AC80CB6D-5DC7-46A9-9527-E362833FD578} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {EE9A3088-4235-4BC5-8FDF-42549DB7EF8B} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {3612D17E-D10B-4A1A-84D6-C6214ECF9814} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.1.0.43\x86\IdleScheduleEventAction.exe [173536 2026-06-24] (Lenovo -> )
Task: {BEEF9833-2B75-44EB-993F-96CBA2B7A8B0} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {12A1993F-5251-4E31-93C0-8F4862DB2343} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\\uninstall.exe /repair (No File)
Task: {234AA176-3261-4615-91AA-E8E6BAC6AB6F} - System32\Tasks\LenovoUtility Startup => C:\Windows\explorer.exe [3385640 2026-06-25] (Microsoft Windows -> Microsoft Corporation)
Task: {777E1362-404F-492C-B45E-80510A9CA4B7} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16500608 2026-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {B103FF3C-42D3-43CD-A743-69EF0DDD2F50} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28493632 2026-06-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {3032E05A-1908-45FD-8990-56D2816A686D} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [73560 2026-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {F342D68A-41EA-45EA-8B56-987CBAC84EDE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28493632 2026-06-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {7AB3D2FC-6F42-4903-91E6-6A7FF192C517} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [432408 2026-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {3CAB8419-5866-4009-8EAF-6FF04F3B3CA6} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [432408 2026-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {CD4A10DF-D4F9-4671-A03F-DBCA7C9B2AAE} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1335576 2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {F2736502-7955-4E88-8F07-727475F2AE92} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16500608 2026-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {B38AEA6C-4682-473D-A026-4122DAC33E72} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe [83792 2026-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {F6F92FD5-FA1A-45CD-9F9A-F550A4FE2DE4} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {A83936AB-5BDC-4B9F-B814-4251912556F1} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {604E0FD2-5E03-4C5E-8AF7-CACBCBFFD85F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {F676008B-3627-4797-8BA1-A0549E460D2E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {364F0373-CDFC-4493-96E5-1DBAFD0FD74C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CE9983D2-B928-4A66-AE95-2EF4F0D30B9B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AFF961F4-67F6-47ED-8294-FB60E46E711F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1B3C9240-EA96-4FBF-ACC1-9A90D7BEE2F7} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [705152 2026-07-07] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {B0364986-9DF0-44E9-9283-5DCBDFBF3495} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3231952856-1019465751-811631384-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [705152 2026-07-07] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {B60EC365-7EDE-48E4-BF23-42148556105D} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-07-07] (Mozilla Corporation -> Mozilla Foundation)
Task: {FE62D1EE-6CB7-4B7A-909D-1D4A2F72D4BE} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-3231952856-1019465751-811631384-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [8070264 2026-06-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {57670A62-8A75-4CB1-9A62-A3B60758BD93} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-3231952856-1019465751-811631384-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [8070264 2026-06-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {29472CD7-6D44-4ABC-80C8-74B17948D0BE} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [6633736 2026-06-02] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {920FE206-7CF5-4A78-9C12-51450D701362} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [9274080 2026-01-19] (Gen Digital Inc. -> Gen Digital Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}: [DhcpDomain] home
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}\14B63656E647: [DhcpNameServer] 192.168.129.1
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}\14B63656E647: [DhcpDomain] localdomain
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}\255646D696021353: [DhcpNameServer] 10.29.33.177
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}\74967616365726560796374796E616: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}\F423D294E6475627E65647D25374D2433373: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}\F423D294E6475627E65647D25374D2433373: [DhcpDomain] Home
Tcpip\..\Interfaces\{cc70d8dd-3c19-47ad-9ce9-6e0aeba5712b}: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{e3709369-fac6-4489-8051-fc92393c6583}: [DhcpNameServer] 178.17.0.11 178.17.0.12
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: oazwnvzd.Petr -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\gc13wse2.default [2022-01-14]
FF NewTab: Mozilla\Firefox\Profiles\gc13wse2.default -> hxxps://securesearch.org/homepage?hp=2&pId=BT170603&iDate=2020-09-25 10:30:14&bName=
FF ProfilePath: C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\oazwnvzd.Petr [2026-07-09]
FF Homepage: Mozilla\Firefox\Profiles\oazwnvzd.Petr -> www.seznam.cz
FF Extension: (Použijte Google překladač) - C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\oazwnvzd.Petr\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2025-10-10]
FF Extension: (Hlídač Shopů) - C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\oazwnvzd.Petr\Extensions\{d6f0f975-91a3-4d78-96f7-5f1859ad18b6}.xpi [2026-05-28]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.311.2 -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\dtplugin\npDeployJava1.dll [2021-10-25] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.311.2 -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\plugin2\npjp2.dll [2021-10-25] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=3.0.10 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.12 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin HKU\S-1-5-21-3231952856-1019465751-811631384-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3231952856-1019465751-811631384-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3231952856-1019465751-811631384-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Petr\AppData\Local\Microsoft\Edge\User Data\Default [2026-07-09]
Edge Extension: (Dokumenty Google offline) - C:\Users\Petr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-22]
Edge Extension: (Edge relevant text changes) - C:\Users\Petr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
R2 AdskLicensingService; C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\Current\AdskLicensingService\AdskLicensingService.exe [17267544 2026-06-09] (Autodesk, Inc. -> Autodesk, Inc.)
R2 Autodesk Access Service Host; C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessServiceHost.exe [23084888 2026-02-02] (Autodesk, Inc. -> Autodesk, Inc.)
R2 Autodesk CER Service; C:\Program Files\Autodesk\Autodesk CER\service\cer_service.exe [24472136 2025-11-28] (Autodesk, Inc. -> )
R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [30663800 2026-06-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13397312 2026-06-30] (Microsoft Corporation -> Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4506728 2020-03-25] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [145224 2016-01-13] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2026-06-28] (HP Inc. -> HP Inc.)
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
S3 IsoEnvBroker; C:\WINDOWS\System32\IsoEnvBroker.dll [774144 2026-06-25] (Microsoft Windows -> Microsoft Corporation)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe [44096 2026-06-30] (Lenovo -> Lenovo)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [970080 2026-06-26] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpDefenderCoreService.exe [2100520 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [678624 2026-01-22] (Geek Software GmbH -> geek software GmbH)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [877528 2026-05-27] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\NisSrv.exe [4769792 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MsMpEng.exe [290704 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [35648 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [357320 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [249304 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [98760 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
S0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16832 2020-12-24] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [41272 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [175248 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [521336 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [107784 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83360 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [850112 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [465160 2021-03-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [326976 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [602112 2026-03-01] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [212992 2026-03-01] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [114688 2026-03-01] (Microsoft Corporation) [File not signed]
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2020-03-25] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2020-03-25] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-20] (Microsoft Windows -> Microsoft Corporation)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [50568 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21928 2026-07-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [616880 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [110984 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2026-03-01] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_a6dc64e436f22951\WSDScan.sys [61440 2026-03-01] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-07-09 14:39 - 2026-07-09 14:41 - 000044096 _____ C:\Users\Petr\Desktop\FRST.txt
2026-07-09 14:38 - 2026-07-09 14:38 - 002449920 _____ (Farbar) C:\Users\Petr\Desktop\FRST64.exe
2026-07-07 17:17 - 2026-07-07 17:18 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-07-06 19:46 - 2026-07-06 19:49 - 000000000 ____D C:\Users\Petr\AppData\Roaming\Hola
2026-07-06 18:56 - 2026-07-06 18:56 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-07-06 18:55 - 2026-07-06 18:55 - 000002059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox — anonymní prohlížení.lnk
2026-07-05 21:40 - 2026-07-08 12:14 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-07-01 16:14 - 2026-07-01 16:14 - 000486892 _____ C:\Users\Petr\Downloads\4023976368.pdf
2026-06-29 15:20 - 2026-06-29 15:20 - 000225048 _____ C:\Users\Petr\Downloads\000056961794_Potvrdenie o úhrade diaľničnej známky,_202606291519.pdf
2026-06-29 15:10 - 2026-06-29 15:10 - 000484321 _____ C:\Users\Petr\Downloads\4015329357.pdf
2026-06-25 11:21 - 2026-06-25 11:21 - 000000000 ____D C:\WINDOWS\Minidump
2026-06-25 09:39 - 2026-06-25 09:39 - 000714520 _____ C:\WINDOWS\system32\perfh005.dat
2026-06-25 09:39 - 2026-06-25 09:39 - 000153682 _____ C:\WINDOWS\system32\perfc005.dat
2026-06-25 08:53 - 2026-06-25 08:53 - 000004977 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-06-25 08:53 - 2026-06-25 08:53 - 000004647 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-06-25 08:53 - 2026-06-25 08:53 - 000004647 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-06-25 08:53 - 2026-06-25 08:53 - 000004647 _____ C:\WINDOWS\system32\ResPriImageList
2026-06-25 08:53 - 2026-06-25 08:53 - 000004647 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-06-25 08:53 - 2026-06-25 08:53 - 000004558 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-06-25 08:53 - 2026-06-25 08:53 - 000004558 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-06-25 08:52 - 2026-06-25 08:52 - 000087226 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-06-25 08:52 - 2026-06-25 08:52 - 000087226 _____ C:\WINDOWS\system32\ctac.json
2026-06-25 08:52 - 2026-06-25 08:52 - 000037624 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-06-25 08:52 - 2026-06-25 08:52 - 000037624 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-06-10 13:58 - 2026-06-10 13:58 - 000011668 _____ C:\Users\Petr\Desktop\Nehody docházka.xlsx
2026-06-10 05:59 - 2026-06-10 06:06 - 2387980159 _____ C:\Users\Petr\Downloads\I+Swear+-+Přísahám,+že+za+to+nemůžu+(2025)+CZ+titulky.mkv
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-07-09 14:41 - 2021-11-07 19:02 - 000000000 ____D C:\FRST
2026-07-09 14:40 - 2020-03-30 10:07 - 000000000 ____D C:\Users\Petr\AppData\Roaming\eM Client
2026-07-09 14:38 - 2020-03-30 19:32 - 000000000 ____D C:\Users\Petr\AppData\Roaming\vlc
2026-07-09 14:31 - 2021-02-09 19:03 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2026-07-09 14:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-07-09 14:26 - 2026-03-01 11:59 - 000003530 _____ C:\WINDOWS\system32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0
2026-07-09 14:26 - 2026-03-01 11:59 - 000003506 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2026-07-09 14:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-07-09 14:22 - 2020-03-16 12:36 - 000000000 ___RD C:\Users\Petr\OneDrive
2026-07-09 14:20 - 2024-11-15 13:33 - 000000000 ____D C:\ProgramData\boost_interprocess
2026-07-09 14:20 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-07-09 14:20 - 2022-02-09 17:25 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-07-09 14:19 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-07-09 14:19 - 2020-03-16 12:34 - 000000000 __SHD C:\Users\Petr\IntelGraphicsProfiles
2026-07-08 15:03 - 2026-03-01 12:01 - 000000000 ____D C:\Users\Petr\AppData\Local\D3DSCache
2026-07-08 14:38 - 2020-03-16 13:57 - 000000000 ____D C:\Users\Petr\AppData\Roaming\Microsoft\Excel
2026-07-08 14:01 - 2026-03-01 11:49 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-07-08 12:06 - 2019-04-19 07:00 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-07-07 22:21 - 2026-03-01 11:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-07-07 22:21 - 2020-03-24 12:41 - 000001084 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-07-07 17:17 - 2020-03-24 12:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-07-06 19:49 - 2022-07-21 10:15 - 000000000 ____D C:\Users\Petr\AppData\Local\luminati
2026-07-06 19:46 - 2020-03-16 12:34 - 000000000 ____D C:\Users\Petr\AppData\Local\Packages
2026-07-06 18:51 - 2019-11-30 00:01 - 000000000 ____D C:\Program Files\Microsoft Office
2026-07-05 22:34 - 2020-03-16 12:51 - 000000000 ____D C:\Users\Petr\AppData\Roaming\Kerio Connect
2026-07-05 17:44 - 2020-03-25 07:45 - 000000000 ____D C:\Users\Petr\AppData\Local\Autodesk
2026-07-04 15:32 - 2020-03-16 14:03 - 000000000 ____D C:\Users\Petr\AppData\Roaming\Microsoft\Word
2026-07-04 13:25 - 2026-03-01 11:59 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3231952856-1019465751-811631384-1001
2026-07-04 13:25 - 2026-03-01 11:59 - 000003568 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3231952856-1019465751-811631384-1001
2026-07-04 13:25 - 2026-03-01 11:59 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3231952856-1019465751-811631384-1001
2026-07-04 13:25 - 2021-04-18 22:44 - 000002387 _____ C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-07-04 11:53 - 2020-12-23 20:16 - 000000000 ____D C:\Olinka
2026-07-04 11:53 - 2020-06-08 19:44 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-06-30 19:25 - 2024-12-03 20:57 - 000000000 ____D C:\Program Files\Autodesk
2026-06-29 17:31 - 2026-03-01 11:59 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2026-06-28 17:58 - 2024-01-19 18:48 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-06-28 17:57 - 2026-03-01 11:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2026-06-28 11:53 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-06-28 09:58 - 2022-10-13 20:22 - 000002157 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-06-26 18:22 - 2019-11-30 00:18 - 000000000 ____D C:\ProgramData\McAfee
2026-06-25 09:59 - 2020-03-16 12:48 - 000000000 ____D C:\ProgramData\Packages
2026-06-25 09:43 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-06-25 09:39 - 2026-03-01 12:04 - 001692452 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-06-25 09:33 - 2026-03-01 11:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-06-25 09:33 - 2024-12-04 21:27 - 000015038 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-06-25 09:33 - 2021-04-18 22:42 - 000012288 ___SH C:\DumpStack.log.tmp
2026-06-25 09:32 - 2026-03-01 11:49 - 000001527 _____ C:\WINDOWS\system32\config\VSMIDK
2026-06-25 09:32 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-06-25 09:30 - 2026-03-01 11:49 - 000589880 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2026-06-25 09:28 - 2026-05-13 15:18 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-06-25 09:28 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-06-25 08:51 - 2026-03-01 11:52 - 003367424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-06-24 16:29 - 2026-02-02 22:19 - 000000000 ____D C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webová aplikace Firefoxu
2026-06-21 19:49 - 2026-03-01 11:59 - 000003640 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-21 19:49 - 2026-03-01 11:59 - 000003514 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-06-10 04:51 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-06-10 04:18 - 2020-03-16 12:44 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-06-10 04:13 - 2020-03-16 12:44 - 222431176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Files in the root of some directories ========
2021-02-10 17:21 - 2021-02-10 17:21 - 000000000 _____ () C:\Users\Petr\AppData\Local\oobelibMkey.log
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Prosím o preventivní kotrolu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Prosím o preventivní kotrolu
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-07-2026 01
Ran by Petr (09-07-2026 14:43:24)
Running from C:\Users\Petr\Desktop
Microsoft Windows 11 Pro Version 25H2 26200.8737 (X64) (2026-03-01 10:00:12)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-3231952856-1019465751-811631384-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-3231952856-1019465751-811631384-503 - Limited - Disabled)
Guest (S-1-5-21-3231952856-1019465751-811631384-501 - Limited - Disabled)
Petr (S-1-5-21-3231952856-1019465751-811631384-1001 - Administrators - Enabled) => C:\Users\Petr
WDAGUtilityAccount (S-1-5-21-3231952856-1019465751-811631384-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
ABBYY FineReader 12 Professional (HKLM-x32\...\{F12000FE-0001-0000-0000-074957833700}) (Version: 12.1.625 - ABBYY Production LLC)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 26.001.21691 - Adobe)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 9.1.0.52 - Adobe Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Asian Language And Spelling Dictionaries Support For Adobe Acrobat Reader (HKLM\...\{AC76BA86-7AD7-0000-0000-BC17084FC500}) (Version: 23.008.20421 - Adobe Systems Incorporated)
AutoCAD Open in Desktop (HKLM\...\{1C66A0B0-784E-4777-97B3-93F843D1C8CF}) (Version: 1.0.20.0 - Autodesk)
Autodesk Access (HKLM\...\{A3158B3E-5F28-358A-BF1A-9532D8EBC811}) (Version: 2.21.0.559 - Autodesk, Inc.)
Autodesk App Manager (HKLM-x32\...\{9C2E49CB-F671-47EC-8093-CC1A8749A92A}) (Version: 3.2.1 - Autodesk)
Autodesk AutoCAD 2022 - English (HKLM\...\{1E7D4EF7-A28E-3D3E-BA3C-C6FAE4AAB2E0}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk AutoCAD 2022 Language Pack – Čeština (Czech) (HKLM\...\{B914E66E-BDF2-3DB2-ADDC-782AC4A48F1F}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk CER (HKLM\...\{11D68ADA-767C-43E0-9716-C2E1ECD08AA2}) (Version: 7.2.4.927 - Autodesk Inc.) Hidden
Autodesk Genuine Service (HKLM\...\{83170d71-4e9d-459f-be9a-e12c6db2af55}) (Version: 7.6.0.229 - Autodesk)
Autodesk Identity Manager (HKLM\...\Autodesk Identity Manager) (Version: 1.12.0.7 - Autodesk)
Autodesk Material Library 2022 (HKLM-x32\...\{A9221A68-5AD0-4215-B54F-CB5DBA4FB27C}) (Version: 20.3.7.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2022 (HKLM-x32\...\{6256584F-B04B-41D4-8A59-44E70940C473}) (Version: 20.3.7.0 - Autodesk)
calibre 64bit (HKLM\...\{8DE722AD-4F10-4607-A247-8AF4437037B4}) (Version: 8.16.2 - Kovid Goyal)
Call of Duty Modern Warfare 2 (HKLM-x32\...\Call of Duty Modern Warfare 2_is1) (Version: - Activision)
Canon MP250 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP250_series) (Version: - )
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.8.1355.1753 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.12.0.1152 - Disc Soft Ltd)
Dynamic Application Loader Host Interface Service (HKLM\...\{C1FFE6F8-BB6C-40B3-9C65-A1CC0962896A}) (Version: 1.0.0.0 - Intel Corporation) Hidden
eM Client (HKLM-x32\...\{96840943-7217-440E-B72B-220180C51AD3}) (Version: 9.2.2307.0 - eM Client Inc.)
Epson Printer Connection Checker (HKLM-x32\...\{562C1C83-6199-49DD-987B-60D5FF7BC971}) (Version: 3.3.2.0 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{28C66F35-69BF-4376-BC80-4D5F4808FF3C}) (Version: 4.6.1 - Seiko Epson Corporation)
EPSON WF-7525 Series Printer Uninstall (HKLM\...\EPSON WF-7525 Series) (Version: - SEIKO EPSON Corporation)
EPSON XP-900 Series Printer Uninstall (HKLM\...\EPSON XP-900 Series) (Version: - Seiko Epson Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
FORM studio (HKLM-x32\...\FSCZ_is1) (Version: - KASTNER software s.r.o.)
FormatFactory 5.12.2.0 (HKLM-x32\...\FormatFactory) (Version: 5.12.2.0 - Free Time)
Free MP3 Cutter 2.1 (HKLM-x32\...\{847E0734-4457-4B48-BF49-998D1CF2CFA1}_is1) (Version: 2.1 - PolySoft Solutions)
Intel(R) Icls (HKLM\...\{CA2C7ABE-A8B2-4918-8F2B-351D9D69DDC3}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) LMS (HKLM\...\{DE1E4C1C-30F0-4549-8F34-D02934442A9F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1910.12.0.1239 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{340CC61F-5E51-448A-ACA8-267968DF1780}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{AB7D0B60-C65F-465A-9199-83B74684DD10}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{286D6964-3CC3-4396-BA28-4CB7FE3E52FC}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) OEM Extension (HKLM\...\{64079417-4BAE-4AD5-A35E-7E4D58F0AD61}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 26.20.100.7812 - Intel Corporation)
JA-100-Link 2.5.0.1250 (HKLM-x32\...\JA-100-Link 2.5.0.1250_is1) (Version: JA-100-Link 2.5.0.1250 - Jablotron Alarms a.s.)
Java 8 Update 311 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180311F0}) (Version: 8.0.3110.11 - Oracle Corporation)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kerio Connect (HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\KerioConnect) (Version: 10.0.7.19645 - Kerio Technologies Inc.)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Lenovo Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.82.00.18 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 5.1.2606.17 - Lenovo Group Ltd.)
Microsoft .NET Core Host - 3.1.10 (x64) (HKLM\...\{52B42932-15C1-45D4-8904-FC3117EEE69B}) (Version: 24.104.29419 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.10 (x64) (HKLM\...\{752B4412-A129-4CB2-AD96-B6D97EAD3090}) (Version: 24.104.29419 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.10 (x64) (HKLM\...\{396D7BC8-E3C8-4B3E-8C60-D50D94FDF09D}) (Version: 24.104.29419 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.10 (x64) (HKLM-x32\...\{4714dd0a-ebab-4f59-a708-f8d7a793b3f5}) (Version: 3.1.10.29419 - Microsoft Corporation)
Microsoft 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.20131.20112 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.10 - Shared Framework (HKLM-x32\...\{6efe3294-03d8-4977-9c67-9f57ab075130}) (Version: 3.1.10.20520 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.10 Shared Framework (x64) (HKLM\...\{7BEAA207-E3EB-3948-BBB3-336B04D8A2F1}) (Version: 3.1.10.20520 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 150.0.4078.48 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 150.0.4078.48 - Microsoft Corporation) Hidden
Microsoft Office 2016 pro podnikatele - cs-cz (HKLM\...\HomeBusinessRetail - cs-cz) (Version: 16.0.20131.20112 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\OneDriveSetup.exe) (Version: 26.108.0607.0002 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\Teams) (Version: 1.4.00.11161 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{75FDEEC2-3DEB-47CD-A629-9009BD09B75C}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{BD60B99B-A623-4E04-83F2-74EDDBFFD900}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) (HKLM\...\{90120064-0070-0000-0000-4000000FF1CE}) (Version: 7.1.00.00 - Microsoft Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) English (HKLM\...\{90F60409-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
MiniTool Partition Wizard (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: 12 - MiniTool Software Limited)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 152.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 152.0.4 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20131.20112 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
PDF24 Creator 11.29.1 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.29.1 - Geek Software GmbH)
PDF-XChange Editor (HKLM\...\{D7DBC941-C042-4276-93C9-A91B373AF0D8}) (Version: 9.0.351.0 - Tracker Software Products (Canada) Ltd.) Hidden
PDF-XChange Editor (HKLM-x32\...\{604944cd-f303-4436-bc7b-7a538b64c872}) (Version: 9.0.351.0 - Tracker Software Products (Canada) Ltd.)
Speciální aplikace Autodesk (HKLM-x32\...\{46EA8955-D629-4B3E-AAF0-D136031D7C95}) (Version: 3.2.1 - Autodesk)
Speciální aplikace Autodesk 2016-2018 (HKLM-x32\...\{384C4B74-B749-4AB6-9367-4D51A6AA9CB8}) (Version: 2.4.0 - Autodesk)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.50 - Ghisler Software GmbH)
Uložit do služby Autodesk Web and Mobile (HKLM\...\{192B349F-C3F7-4BBE-B49E-00DD4BD28373}) (Version: 3.0.29 - Autodesk) Hidden
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.12 - VideoLAN)
WebAdvisor od společnosti McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.1127 - McAfee, LLC)
WinRAR 5.80 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.80.0 - win.rar GmbH)
Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-06-28] ()
Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_10.15.0.0_x64__kgqvnymyfvs32 [2026-06-23] (king.com)
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_5.4.1.0_x64__kgqvnymyfvs32 [2026-06-17] (king.com)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-10-31] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_165.3.1107.0_x64__v10z8vjag6ke6 [2026-06-28] (HP Inc.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.7.18.0_x64__5grkq8ppsgwt4 [2025-05-15] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2603.12.0_x64__k1h2ywk1493x8 [2026-04-27] (LENOVO INC.)
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\AI [2026-07-06] ()
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-04-18] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-04-18] (Microsoft Corporation) [MS Ad]
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2602.23002.0_x64__8wekyb3d8bbwe [2026-03-17] (Microsoft Corporation) [Startup Task]
Microsoft.AIFabric.CBS.1.6 -> C:\WINDOWS\SystemApps\Microsoft.AIFabric.CBS.1.6_8wekyb3d8bbwe [2026-05-27] (Microsoft Corporation)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-07-06] ()
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-07-06] ()
Power2Go for Lenovo -> C:\Program Files\WindowsApps\CyberLinkCorp.th.Power2GoforLenovo_8.0.12518.0_x86__m916jedk64snt [2021-06-20] (CYBERLINKCOM CORPORATION) [Startup Task]
PowerDVD for Lenovo -> C:\Program Files\WindowsApps\CyberLinkCorp.th.PowerDVDforLenovo_14.2.6827.0_x86__m916jedk64snt [2024-09-10] (CYBERLINKCOM CORPORATION)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2623.103.0_neutral_split.scale-100_cv1g1gvanyjgm [2026-06-19] (WhatsApp Inc.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.1.3.0_x64__8wekyb3d8bbwe [2026-06-12] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{345D3165-3889-4694-AB75-A91A27B217E8}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{8B4929F8-076F-4AEC-AFEE-8928747B7AE3}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{AA46BA8A-9825-40FD-8493-0BA3C4D5CEB5}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\Petr\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2022\en-US\acadficn.dll (Autodesk, Inc. -> Autodesk, Inc.)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2021-01-29] (Autodesk, Inc. -> Autodesk, Inc.)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2021-01-29] (Autodesk, Inc. -> Autodesk)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [FineReader12ContextMenu] -> {55344AC6-630B-430C-B292-C7BE21F90061} => C:\Program Files (x86)\ABBYY FineReader 12\FRIntegration.x64.dll [2016-10-18] (ABBYY Production LLC -> ABBYY Production LLC.)
ContextMenuHandlers1: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx_108.dll [2022-04-19] (Free Time) [File not signed]
ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2020-03-25] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx_108.dll [2022-04-19] (Free Time) [File not signed]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8a8976fda8c58073\igfxDTCM.dll [2020-04-07] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [FineReader12ContextMenu] -> {55344AC6-630B-430C-B292-C7BE21F90061} => C:\Program Files (x86)\ABBYY FineReader 12\FRIntegration.x64.dll [2016-10-18] (ABBYY Production LLC -> ABBYY Production LLC.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webová aplikace Firefoxu\Dumbarev.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "-taskbar-tab" "f41d8530-b483-41a7-ac98-8ab6c3c2e83d" "-new-window" "hxxps://www.dumbarev.cz" "-profile" "C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\oazwnvzd.Petr" "-container" "0"
ShortcutWithArgument: C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webová aplikace Firefoxu\iVysílání.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "-taskbar-tab" "1ed5ad9a-4426-422b-81f7-f73729383032" "-new-window" "hxxps://www.ceskatelevize.cz/porady/16173577888-neuer/" "-profile" "C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\oazwnvzd.Petr" "-container" "0"
==================== Loaded Modules (Whitelisted) =============
2026-05-29 13:34 - 2026-05-29 13:34 - 000369152 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.CxHef9fb4ae#\d904bb9aa4eb2d56972a60e01bcbcb6e\Interop.CxHDAudioAPILib.ni.dll
2026-05-29 13:34 - 2026-05-29 13:34 - 000018944 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.CxUtilSvcLib\8b4b008cae9baab30b97938e70d0a795\Interop.CxUtilSvcLib.ni.dll
2019-11-30 00:14 - 2017-07-05 21:36 - 001168384 _____ (Conexant Systems, Inc.) [File not signed] [File is in use] C:\Program Files\Conexant\SAII\CxHDAudioAPI.dll
2023-06-20 13:03 - 2012-11-12 15:15 - 000558592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enppmon.dll
2023-06-20 13:03 - 2012-10-22 17:19 - 000219648 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enpres.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\WINDOWS\system32\Drivers\jirjuevi.sys:changelist [890]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\Software\Classes\.scr: AutoCADScriptFile => C:\WINDOWS\system32\notepad.exe "%1"
==================== Internet Explorer (Whitelisted) =============
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\ssv.dll [2021-10-25] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\jp2ssv.dll [2021-10-25] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\hola.org -> hxxp://hola.org
IE trusted site: HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\sharepoint.com -> hxxps://zstgmdrasov-files.sharepoint.com
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-03-19 06:49 - 2024-11-28 15:15 - 000005724 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 genuine-software2.autodesk.com # Block Autodesk AutoCAD Servers
127.0.0.1 ase-cdn-stg.autodesk.com
127.0.0.1 ase.autodesk.com
0.0.0.0 autodesk.fi
0.0.0.0 autodesk.de
0.0.0.0 autodesk.es
0.0.0.0 autodesk.ca
0.0.0.0 autodesk.dk
0.0.0.0 autodesk.pl
0.0.0.0 ns1.autodesk.com
0.0.0.0 ns2.autodesk.com
0.0.0.0 ns3.autodesk.com
0.0.0.0 a.gtld-servers.net
0.0.0.0 b.gtld-servers.net
0.0.0.0 c.gtld-servers.net
0.0.0.0 d.gtld-servers.net
0.0.0.0 e.gtld-servers.net
0.0.0.0 f.gtld-servers.net
0.0.0.0 g.gtld-servers.net
0.0.0.0 h.gtld-servers.net
0.0.0.0 i.gtld-servers.net
0.0.0.0 j.gtld-servers.net
0.0.0.0 k.gtld-servers.net
0.0.0.0 l.gtld-servers.net
0.0.0.0 ns1.autodesk.com
0.0.0.0 m.gtld-servers.net
0.0.0.0 adobeereg.com
0.0.0.0 126114-app1.autodesk.com
0.0.0.0 94175-app1.autodesk.com
0.0.0.0 94184-app2.autodesk.com
There are 114 more lines.
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.1.1
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
Wi-Fi: Intel(R) Dual Band Wireless-AC 3165 -> Netwtw04.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\;C:\Program Files\Calibre2\
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\lenovo\lenovowallpaper.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "Autodesk Access Service"
HKLM\...\StartupApproved\Run: => "Autodesk Access"
HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App"
HKLM\...\StartupApproved\Run32: => "Bonus.SSR.FR12"
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [UDP Query User{148E7D43-9A73-4603-85F1-A499A8A75426}C:\tizen-studio\tools\sdb.exe] => (Allow) C:\tizen-studio\tools\sdb.exe => No File
FirewallRules: [TCP Query User{15088D32-B9E0-44A6-B020-C8173BE498D4}C:\tizen-studio\tools\sdb.exe] => (Allow) C:\tizen-studio\tools\sdb.exe => No File
FirewallRules: [UDP Query User{996AFB30-04D5-4209-8A6B-D83DA38F7674}C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe
FirewallRules: [TCP Query User{3B32AE94-FFBA-44A4-977E-037E71F2C5CF}C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe
FirewallRules: [{F229238A-D239-4037-A9E5-78CFF6EEF5E6}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{B45FDAAA-4679-4B7C-A6F8-3D7BD68E7ACF}C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe
FirewallRules: [TCP Query User{0A3F5A99-7606-4827-BECD-3784D2F2BCC5}C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe
FirewallRules: [{3435932B-7CB2-4861-859F-25F499FFE5C8}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{3DE5EC64-1432-4079-85F0-92130329FF2C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.88.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C3DCD8FA-5556-421B-8F23-8439EE5EF3DD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.88.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{92DF6BFD-E348-4FA4-9CE6-69395AEF0079}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.88.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{51D9ACCD-698B-4096-87D4-846F3EE36AC3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.88.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8EAAA779-F9C0-48B5-9434-721D377F48CB}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [UDP Query User{E8E2499F-4F95-4D9D-9C37-7FB61018DA86}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{7350C966-40C8-45D2-A353-B9E96E6609BC}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{D9E71844-B62B-406A-B7D7-1BFC4A99B765}] => (Allow) C:\Program Files (x86)\FIFA19\FIFASetup\fifaconfig.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{68869588-0F0D-4BFA-8A78-D82288414A9E}] => (Allow) C:\Program Files (x86)\FIFA19\FIFASetup\fifaconfig.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{2F78084C-F2A2-45CB-B959-5D9FA0E4162A}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{D846A304-824E-4176-9CB0-2C4BDDBC626D}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{05AC3A0F-5C9D-4148-9158-A7E4440ABE11}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{095E8528-0149-4A50-A838-9247A041FC00}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{8F24FCDA-3FEC-4CAF-A383-EDF91CA1B2AB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C267C6E7-F616-4E26-AC97-13AF4671B0FA}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{347C3811-0109-43BB-B34C-C45047BC13DF}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [TCP Query User{83FAB628-FC4D-49A0-BA64-02A66D9F1A46}C:\program files (x86)\fifa19\fifa19.exe] => (Block) C:\program files (x86)\fifa19\fifa19.exe (Failed to return cbHash #2, Error: 2147942593 -> Electronic Arts) [File not signed]
FirewallRules: [UDP Query User{52344EB8-2CF9-4F55-98E0-E77B079DDD6E}C:\program files (x86)\fifa19\fifa19.exe] => (Block) C:\program files (x86)\fifa19\fifa19.exe (Failed to return cbHash #2, Error: 2147942593 -> Electronic Arts) [File not signed]
FirewallRules: [TCP Query User{BBD1A384-7934-462A-8ADB-8E5E86FBF634}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{316B2FCA-EF86-47C7-8755-BD1DF851F527}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3B2A912D-FDA3-4AE7-BAC1-9076F68FD9BD}] => (Allow) C:\Program Files (x86)\eM Client\MailClient.exe (eM Client s.r.o. -> eM Client s.r.o.)
FirewallRules: [{85461371-7BEB-4380-9E99-5000B7E6A39E}] => (Allow) C:\Program Files (x86)\eM Client\MailClient.exe (eM Client s.r.o. -> eM Client s.r.o.)
FirewallRules: [{A2F751BE-2D05-405B-9C3D-2C05A2CE6448}] => (Allow) C:\Program Files (x86)\eM Client\MailClient.exe (eM Client s.r.o. -> eM Client s.r.o.)
FirewallRules: [{5E2BEFB0-B1A0-4B07-BB94-DBF67F2045FE}] => (Allow) C:\Program Files (x86)\eM Client\MailClient.exe (eM Client s.r.o. -> eM Client s.r.o.)
FirewallRules: [TCP Query User{10761921-3FED-4E95-8B9B-9222C36F74E8}C:\users\petr\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\petr\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{31382625-C62D-4B6E-95D6-3E4F6894EE36}C:\users\petr\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\petr\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{F7144D2C-DDE6-40F2-A28C-6FF9FE556052}C:\totalcmd\totalcmd64.exe] => (Block) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [UDP Query User{AF7046A1-0BF8-41EF-9B31-FCE28313FDA0}C:\totalcmd\totalcmd64.exe] => (Block) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [TCP Query User{9B4C9D2F-6DE9-4E35-B216-C666F4244AB8}C:\users\petr\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\petr\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{1B9EE180-98B7-48B5-BCC1-4BFC86C7B852}C:\users\petr\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\petr\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1C23E446-D8A0-4C85-882A-4CB76A40F0F4}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E9FCE90A-8DDB-4390-A558-1B7D853DB45B}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{E42D0F7C-CD9E-48AC-A5B0-3E5F735F75E2}C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe => No File
FirewallRules: [UDP Query User{49EE2828-E2D2-41F6-BA70-92FAF3E8A7A9}C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe => No File
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{31C83078-8EE4-454E-9504-32654DFA113F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{988D9E2B-5B71-41A3-9B97-B3521E166039}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BC6BA8A3-F8E2-4A86-8FF5-60F35CE04C47}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F7C2E763-C6A7-4A9A-ADA0-6385E95384DB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
07-07-2026 23:31:34 Windows Update
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (07/06/2026 07:45:33 PM) (Source: Application Error) (EventID: 1000) (User: LAPTOP-CVO5E9CR)
Description: Název chybující aplikace: Hola-Setup.exe, verze: 1.254.572.0, časové razítko: 0x307c79fd
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.26100.8737, časové razítko: 0x7160435a
Kód výjimky: 0xe0434352
Posun chyby: 0x0016a394
ID chybujícího procesu: 0x1904
Čas spuštění chybující aplikace: 0x1dd0d6f3e558883
Cesta k chybující aplikaci: C:\Users\Petr\Downloads\Hola-Setup.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID sestavy: 0e00f651-0626-4ef8-b03a-f6aae9033f61
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (07/06/2026 07:45:33 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Hola-Setup.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.IO.IOException
at System.IO.__Error.WinIOError(Int32, System.String)
at System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
at System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
at System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean)
at System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean)
at System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding)
at hola_setup.Log..ctor()
at hola_setup.Log.get_Instance()
at hola_setup.App.Main()
Error: (07/06/2026 06:55:12 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x80070006, Neplatný popisovač..
Operace:
Spouštění asynchronní operace
Kontext:
Aktuální stav: DoSnapshotSet
Error: (07/05/2026 05:27:34 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 14092. ID zprávy: [0x2509].
Error: (07/05/2026 04:53:38 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 15812. ID zprávy: [0x2509].
Error: (07/05/2026 04:47:00 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 20548. ID zprávy: [0x2509].
Error: (07/04/2026 11:53:01 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 15316. ID zprávy: [0x2509].
Error: (07/02/2026 10:20:58 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 9916. ID zprávy: [0x2509].
System errors:
=============
Error: (07/08/2026 12:04:28 PM) (Source: Netwtw04) (EventID: 5010) (User: )
Description: Intel(R) Dual Band Wireless-AC 3165 : Síťový adaptér vrátil ovladači neplatnou hodnotu.
5010 - Driver DBG_ASSERT - instead of BSOD
Error: (07/07/2026 11:34:19 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.
Error: (07/06/2026 08:09:23 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného uživatelem se nepodařilo zvětšit úložiště stínové kopie.
Error: (07/06/2026 07:19:25 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Služba přidružení zařízení zjistila chybu zjišťování koncového bodu.
Error: (07/04/2026 05:04:44 PM) (Source: volsnap) (EventID: 35) (User: )
Description: Stínové kopie svazku C: byly přerušeny, protože se nepodařilo zvětšit úložiště stínové kopie.
Error: (07/04/2026 12:24:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9WZDNCRFJBH4-Microsoft.Windows.Photos.
Error: (07/04/2026 11:50:28 AM) (Source: disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk2\DR5.
Error: (07/04/2026 11:50:28 AM) (Source: disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR4.
Windows Defender:
================
TimeCreated : 06.07.2026 19:55:05
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (A9056116-618F-4FCD-B6F1-17FA7C952F4F}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 05.07.2026 18:36:33
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (2D57855B-D1B8-4908-BC2A-EC3E6290E57D}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вЯРČ çőпήзćťĂĎĐż ĐłĹâżÄ‘ŏщи)
TimeCreated : 05.07.2026 17:24:09
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (A238DEA7-501B-4337-8EB7-C8DD9A314972}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вЯРČ çőпήзćťĂĎĐż ĐłĹâżÄ‘ŏщи)
TimeCreated : 04.07.2026 17:33:31
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (963F95B4-B588-4858-A792-801AD54039B5}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 04.07.2026 12:22:59
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (29A4EF6B-8FCB-4CDE-AC63-382A112B3E8E}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 01.07.2026 17:11:41
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (6787A757-9E6F-46D5-AE6B-2DF4C1296CBC}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 30.06.2026 19:35:42
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (D6E600E9-BF65-4DCB-AD27-6B87F15C1AAE}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 29.06.2026 17:31:49
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (EE52E97C-D21A-4187-AAB8-1C44CA9ACBDC}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
CodeIntegrity:
===============
Date: 2026-06-25 09:32:57
Description:
Code Integrity determined that a process (Winload) attempted to load system32\drivers\aswElam.sys that did not meet the Authenticode signing level requirements or violated code integrity policy (Policy ID:{60fd87f8-4593-44a0-91b0-2e0da022f248}).
Date: 2026-06-25 09:32:57
Description:
The driver system32\drivers\aswElam.sys is blocked from loading as the driver has been revoked by Microsoft.
==================== Memory info ===========================
BIOS: LENOVO 6SCN54WW 05/17/2021
Motherboard: LENOVO LNVNB161216
Processor: Intel(R) Core(TM) i5-8250U CPU @ 1.60GHz
Percentage of memory in use: 85%
Total physical RAM: 7613.43 MB
Available physical RAM: 1127.48 MB
Total Virtual: 11850.62 MB
Available Virtual: 3735.15 MB
==================== Drives ================================
Drive c: (Windows-SSD) (Fixed) (Total:237.23 GB) (Free:11.17 GB) (Model: SAMSUNG MZALQ256HAJD-000L2) NTFS
\\?\Volume{3944c868-d993-4fad-89d1-4a62e0d8abf9}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.24 GB) NTFS
\\?\Volume{65b7ba2c-048c-4020-b359-4c7f8094bba3}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.21 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: C27D31B5)
Partition: GPT.
==================== End of Addition.txt =======================
Ran by Petr (09-07-2026 14:43:24)
Running from C:\Users\Petr\Desktop
Microsoft Windows 11 Pro Version 25H2 26200.8737 (X64) (2026-03-01 10:00:12)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-3231952856-1019465751-811631384-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-3231952856-1019465751-811631384-503 - Limited - Disabled)
Guest (S-1-5-21-3231952856-1019465751-811631384-501 - Limited - Disabled)
Petr (S-1-5-21-3231952856-1019465751-811631384-1001 - Administrators - Enabled) => C:\Users\Petr
WDAGUtilityAccount (S-1-5-21-3231952856-1019465751-811631384-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
ABBYY FineReader 12 Professional (HKLM-x32\...\{F12000FE-0001-0000-0000-074957833700}) (Version: 12.1.625 - ABBYY Production LLC)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 26.001.21691 - Adobe)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 9.1.0.52 - Adobe Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Asian Language And Spelling Dictionaries Support For Adobe Acrobat Reader (HKLM\...\{AC76BA86-7AD7-0000-0000-BC17084FC500}) (Version: 23.008.20421 - Adobe Systems Incorporated)
AutoCAD Open in Desktop (HKLM\...\{1C66A0B0-784E-4777-97B3-93F843D1C8CF}) (Version: 1.0.20.0 - Autodesk)
Autodesk Access (HKLM\...\{A3158B3E-5F28-358A-BF1A-9532D8EBC811}) (Version: 2.21.0.559 - Autodesk, Inc.)
Autodesk App Manager (HKLM-x32\...\{9C2E49CB-F671-47EC-8093-CC1A8749A92A}) (Version: 3.2.1 - Autodesk)
Autodesk AutoCAD 2022 - English (HKLM\...\{1E7D4EF7-A28E-3D3E-BA3C-C6FAE4AAB2E0}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk AutoCAD 2022 Language Pack – Čeština (Czech) (HKLM\...\{B914E66E-BDF2-3DB2-ADDC-782AC4A48F1F}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk CER (HKLM\...\{11D68ADA-767C-43E0-9716-C2E1ECD08AA2}) (Version: 7.2.4.927 - Autodesk Inc.) Hidden
Autodesk Genuine Service (HKLM\...\{83170d71-4e9d-459f-be9a-e12c6db2af55}) (Version: 7.6.0.229 - Autodesk)
Autodesk Identity Manager (HKLM\...\Autodesk Identity Manager) (Version: 1.12.0.7 - Autodesk)
Autodesk Material Library 2022 (HKLM-x32\...\{A9221A68-5AD0-4215-B54F-CB5DBA4FB27C}) (Version: 20.3.7.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2022 (HKLM-x32\...\{6256584F-B04B-41D4-8A59-44E70940C473}) (Version: 20.3.7.0 - Autodesk)
calibre 64bit (HKLM\...\{8DE722AD-4F10-4607-A247-8AF4437037B4}) (Version: 8.16.2 - Kovid Goyal)
Call of Duty Modern Warfare 2 (HKLM-x32\...\Call of Duty Modern Warfare 2_is1) (Version: - Activision)
Canon MP250 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP250_series) (Version: - )
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.8.1355.1753 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.12.0.1152 - Disc Soft Ltd)
Dynamic Application Loader Host Interface Service (HKLM\...\{C1FFE6F8-BB6C-40B3-9C65-A1CC0962896A}) (Version: 1.0.0.0 - Intel Corporation) Hidden
eM Client (HKLM-x32\...\{96840943-7217-440E-B72B-220180C51AD3}) (Version: 9.2.2307.0 - eM Client Inc.)
Epson Printer Connection Checker (HKLM-x32\...\{562C1C83-6199-49DD-987B-60D5FF7BC971}) (Version: 3.3.2.0 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{28C66F35-69BF-4376-BC80-4D5F4808FF3C}) (Version: 4.6.1 - Seiko Epson Corporation)
EPSON WF-7525 Series Printer Uninstall (HKLM\...\EPSON WF-7525 Series) (Version: - SEIKO EPSON Corporation)
EPSON XP-900 Series Printer Uninstall (HKLM\...\EPSON XP-900 Series) (Version: - Seiko Epson Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
FORM studio (HKLM-x32\...\FSCZ_is1) (Version: - KASTNER software s.r.o.)
FormatFactory 5.12.2.0 (HKLM-x32\...\FormatFactory) (Version: 5.12.2.0 - Free Time)
Free MP3 Cutter 2.1 (HKLM-x32\...\{847E0734-4457-4B48-BF49-998D1CF2CFA1}_is1) (Version: 2.1 - PolySoft Solutions)
Intel(R) Icls (HKLM\...\{CA2C7ABE-A8B2-4918-8F2B-351D9D69DDC3}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) LMS (HKLM\...\{DE1E4C1C-30F0-4549-8F34-D02934442A9F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1910.12.0.1239 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{340CC61F-5E51-448A-ACA8-267968DF1780}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{AB7D0B60-C65F-465A-9199-83B74684DD10}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{286D6964-3CC3-4396-BA28-4CB7FE3E52FC}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) OEM Extension (HKLM\...\{64079417-4BAE-4AD5-A35E-7E4D58F0AD61}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 26.20.100.7812 - Intel Corporation)
JA-100-Link 2.5.0.1250 (HKLM-x32\...\JA-100-Link 2.5.0.1250_is1) (Version: JA-100-Link 2.5.0.1250 - Jablotron Alarms a.s.)
Java 8 Update 311 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180311F0}) (Version: 8.0.3110.11 - Oracle Corporation)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kerio Connect (HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\KerioConnect) (Version: 10.0.7.19645 - Kerio Technologies Inc.)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Lenovo Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.82.00.18 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 5.1.2606.17 - Lenovo Group Ltd.)
Microsoft .NET Core Host - 3.1.10 (x64) (HKLM\...\{52B42932-15C1-45D4-8904-FC3117EEE69B}) (Version: 24.104.29419 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.10 (x64) (HKLM\...\{752B4412-A129-4CB2-AD96-B6D97EAD3090}) (Version: 24.104.29419 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.10 (x64) (HKLM\...\{396D7BC8-E3C8-4B3E-8C60-D50D94FDF09D}) (Version: 24.104.29419 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.10 (x64) (HKLM-x32\...\{4714dd0a-ebab-4f59-a708-f8d7a793b3f5}) (Version: 3.1.10.29419 - Microsoft Corporation)
Microsoft 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.20131.20112 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.10 - Shared Framework (HKLM-x32\...\{6efe3294-03d8-4977-9c67-9f57ab075130}) (Version: 3.1.10.20520 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.10 Shared Framework (x64) (HKLM\...\{7BEAA207-E3EB-3948-BBB3-336B04D8A2F1}) (Version: 3.1.10.20520 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 150.0.4078.48 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 150.0.4078.48 - Microsoft Corporation) Hidden
Microsoft Office 2016 pro podnikatele - cs-cz (HKLM\...\HomeBusinessRetail - cs-cz) (Version: 16.0.20131.20112 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\OneDriveSetup.exe) (Version: 26.108.0607.0002 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\Teams) (Version: 1.4.00.11161 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{75FDEEC2-3DEB-47CD-A629-9009BD09B75C}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{BD60B99B-A623-4E04-83F2-74EDDBFFD900}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) (HKLM\...\{90120064-0070-0000-0000-4000000FF1CE}) (Version: 7.1.00.00 - Microsoft Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) English (HKLM\...\{90F60409-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
MiniTool Partition Wizard (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: 12 - MiniTool Software Limited)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 152.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 152.0.4 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20131.20112 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
PDF24 Creator 11.29.1 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.29.1 - Geek Software GmbH)
PDF-XChange Editor (HKLM\...\{D7DBC941-C042-4276-93C9-A91B373AF0D8}) (Version: 9.0.351.0 - Tracker Software Products (Canada) Ltd.) Hidden
PDF-XChange Editor (HKLM-x32\...\{604944cd-f303-4436-bc7b-7a538b64c872}) (Version: 9.0.351.0 - Tracker Software Products (Canada) Ltd.)
Speciální aplikace Autodesk (HKLM-x32\...\{46EA8955-D629-4B3E-AAF0-D136031D7C95}) (Version: 3.2.1 - Autodesk)
Speciální aplikace Autodesk 2016-2018 (HKLM-x32\...\{384C4B74-B749-4AB6-9367-4D51A6AA9CB8}) (Version: 2.4.0 - Autodesk)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.50 - Ghisler Software GmbH)
Uložit do služby Autodesk Web and Mobile (HKLM\...\{192B349F-C3F7-4BBE-B49E-00DD4BD28373}) (Version: 3.0.29 - Autodesk) Hidden
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.12 - VideoLAN)
WebAdvisor od společnosti McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.1127 - McAfee, LLC)
WinRAR 5.80 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.80.0 - win.rar GmbH)
Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-06-28] ()
Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_10.15.0.0_x64__kgqvnymyfvs32 [2026-06-23] (king.com)
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_5.4.1.0_x64__kgqvnymyfvs32 [2026-06-17] (king.com)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-10-31] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_165.3.1107.0_x64__v10z8vjag6ke6 [2026-06-28] (HP Inc.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.7.18.0_x64__5grkq8ppsgwt4 [2025-05-15] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2603.12.0_x64__k1h2ywk1493x8 [2026-04-27] (LENOVO INC.)
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\AI [2026-07-06] ()
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-04-18] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-04-18] (Microsoft Corporation) [MS Ad]
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2602.23002.0_x64__8wekyb3d8bbwe [2026-03-17] (Microsoft Corporation) [Startup Task]
Microsoft.AIFabric.CBS.1.6 -> C:\WINDOWS\SystemApps\Microsoft.AIFabric.CBS.1.6_8wekyb3d8bbwe [2026-05-27] (Microsoft Corporation)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-07-06] ()
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-07-06] ()
Power2Go for Lenovo -> C:\Program Files\WindowsApps\CyberLinkCorp.th.Power2GoforLenovo_8.0.12518.0_x86__m916jedk64snt [2021-06-20] (CYBERLINKCOM CORPORATION) [Startup Task]
PowerDVD for Lenovo -> C:\Program Files\WindowsApps\CyberLinkCorp.th.PowerDVDforLenovo_14.2.6827.0_x86__m916jedk64snt [2024-09-10] (CYBERLINKCOM CORPORATION)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2623.103.0_neutral_split.scale-100_cv1g1gvanyjgm [2026-06-19] (WhatsApp Inc.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.1.3.0_x64__8wekyb3d8bbwe [2026-06-12] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{345D3165-3889-4694-AB75-A91A27B217E8}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{8B4929F8-076F-4AEC-AFEE-8928747B7AE3}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{AA46BA8A-9825-40FD-8493-0BA3C4D5CEB5}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\Petr\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2022\en-US\acadficn.dll (Autodesk, Inc. -> Autodesk, Inc.)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2021-01-29] (Autodesk, Inc. -> Autodesk, Inc.)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2021-01-29] (Autodesk, Inc. -> Autodesk)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [FineReader12ContextMenu] -> {55344AC6-630B-430C-B292-C7BE21F90061} => C:\Program Files (x86)\ABBYY FineReader 12\FRIntegration.x64.dll [2016-10-18] (ABBYY Production LLC -> ABBYY Production LLC.)
ContextMenuHandlers1: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx_108.dll [2022-04-19] (Free Time) [File not signed]
ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2020-03-25] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx_108.dll [2022-04-19] (Free Time) [File not signed]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8a8976fda8c58073\igfxDTCM.dll [2020-04-07] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [FineReader12ContextMenu] -> {55344AC6-630B-430C-B292-C7BE21F90061} => C:\Program Files (x86)\ABBYY FineReader 12\FRIntegration.x64.dll [2016-10-18] (ABBYY Production LLC -> ABBYY Production LLC.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webová aplikace Firefoxu\Dumbarev.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "-taskbar-tab" "f41d8530-b483-41a7-ac98-8ab6c3c2e83d" "-new-window" "hxxps://www.dumbarev.cz" "-profile" "C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\oazwnvzd.Petr" "-container" "0"
ShortcutWithArgument: C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webová aplikace Firefoxu\iVysílání.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "-taskbar-tab" "1ed5ad9a-4426-422b-81f7-f73729383032" "-new-window" "hxxps://www.ceskatelevize.cz/porady/16173577888-neuer/" "-profile" "C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\oazwnvzd.Petr" "-container" "0"
==================== Loaded Modules (Whitelisted) =============
2026-05-29 13:34 - 2026-05-29 13:34 - 000369152 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.CxHef9fb4ae#\d904bb9aa4eb2d56972a60e01bcbcb6e\Interop.CxHDAudioAPILib.ni.dll
2026-05-29 13:34 - 2026-05-29 13:34 - 000018944 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.CxUtilSvcLib\8b4b008cae9baab30b97938e70d0a795\Interop.CxUtilSvcLib.ni.dll
2019-11-30 00:14 - 2017-07-05 21:36 - 001168384 _____ (Conexant Systems, Inc.) [File not signed] [File is in use] C:\Program Files\Conexant\SAII\CxHDAudioAPI.dll
2023-06-20 13:03 - 2012-11-12 15:15 - 000558592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enppmon.dll
2023-06-20 13:03 - 2012-10-22 17:19 - 000219648 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enpres.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\WINDOWS\system32\Drivers\jirjuevi.sys:changelist [890]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\Software\Classes\.scr: AutoCADScriptFile => C:\WINDOWS\system32\notepad.exe "%1"
==================== Internet Explorer (Whitelisted) =============
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\ssv.dll [2021-10-25] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\jp2ssv.dll [2021-10-25] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\hola.org -> hxxp://hola.org
IE trusted site: HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\sharepoint.com -> hxxps://zstgmdrasov-files.sharepoint.com
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-03-19 06:49 - 2024-11-28 15:15 - 000005724 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 genuine-software2.autodesk.com # Block Autodesk AutoCAD Servers
127.0.0.1 ase-cdn-stg.autodesk.com
127.0.0.1 ase.autodesk.com
0.0.0.0 autodesk.fi
0.0.0.0 autodesk.de
0.0.0.0 autodesk.es
0.0.0.0 autodesk.ca
0.0.0.0 autodesk.dk
0.0.0.0 autodesk.pl
0.0.0.0 ns1.autodesk.com
0.0.0.0 ns2.autodesk.com
0.0.0.0 ns3.autodesk.com
0.0.0.0 a.gtld-servers.net
0.0.0.0 b.gtld-servers.net
0.0.0.0 c.gtld-servers.net
0.0.0.0 d.gtld-servers.net
0.0.0.0 e.gtld-servers.net
0.0.0.0 f.gtld-servers.net
0.0.0.0 g.gtld-servers.net
0.0.0.0 h.gtld-servers.net
0.0.0.0 i.gtld-servers.net
0.0.0.0 j.gtld-servers.net
0.0.0.0 k.gtld-servers.net
0.0.0.0 l.gtld-servers.net
0.0.0.0 ns1.autodesk.com
0.0.0.0 m.gtld-servers.net
0.0.0.0 adobeereg.com
0.0.0.0 126114-app1.autodesk.com
0.0.0.0 94175-app1.autodesk.com
0.0.0.0 94184-app2.autodesk.com
There are 114 more lines.
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 192.168.1.1
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
Wi-Fi: Intel(R) Dual Band Wireless-AC 3165 -> Netwtw04.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\;C:\Program Files\Calibre2\
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\lenovo\lenovowallpaper.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "Autodesk Access Service"
HKLM\...\StartupApproved\Run: => "Autodesk Access"
HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App"
HKLM\...\StartupApproved\Run32: => "Bonus.SSR.FR12"
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [UDP Query User{148E7D43-9A73-4603-85F1-A499A8A75426}C:\tizen-studio\tools\sdb.exe] => (Allow) C:\tizen-studio\tools\sdb.exe => No File
FirewallRules: [TCP Query User{15088D32-B9E0-44A6-B020-C8173BE498D4}C:\tizen-studio\tools\sdb.exe] => (Allow) C:\tizen-studio\tools\sdb.exe => No File
FirewallRules: [UDP Query User{996AFB30-04D5-4209-8A6B-D83DA38F7674}C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe
FirewallRules: [TCP Query User{3B32AE94-FFBA-44A4-977E-037E71F2C5CF}C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe
FirewallRules: [{F229238A-D239-4037-A9E5-78CFF6EEF5E6}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{B45FDAAA-4679-4B7C-A6F8-3D7BD68E7ACF}C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe
FirewallRules: [TCP Query User{0A3F5A99-7606-4827-BECD-3784D2F2BCC5}C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe
FirewallRules: [{3435932B-7CB2-4861-859F-25F499FFE5C8}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{3DE5EC64-1432-4079-85F0-92130329FF2C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.88.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C3DCD8FA-5556-421B-8F23-8439EE5EF3DD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.88.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{92DF6BFD-E348-4FA4-9CE6-69395AEF0079}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.88.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{51D9ACCD-698B-4096-87D4-846F3EE36AC3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.88.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8EAAA779-F9C0-48B5-9434-721D377F48CB}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [UDP Query User{E8E2499F-4F95-4D9D-9C37-7FB61018DA86}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{7350C966-40C8-45D2-A353-B9E96E6609BC}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{D9E71844-B62B-406A-B7D7-1BFC4A99B765}] => (Allow) C:\Program Files (x86)\FIFA19\FIFASetup\fifaconfig.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{68869588-0F0D-4BFA-8A78-D82288414A9E}] => (Allow) C:\Program Files (x86)\FIFA19\FIFASetup\fifaconfig.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{2F78084C-F2A2-45CB-B959-5D9FA0E4162A}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{D846A304-824E-4176-9CB0-2C4BDDBC626D}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{05AC3A0F-5C9D-4148-9158-A7E4440ABE11}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{095E8528-0149-4A50-A838-9247A041FC00}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{8F24FCDA-3FEC-4CAF-A383-EDF91CA1B2AB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C267C6E7-F616-4E26-AC97-13AF4671B0FA}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{347C3811-0109-43BB-B34C-C45047BC13DF}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [TCP Query User{83FAB628-FC4D-49A0-BA64-02A66D9F1A46}C:\program files (x86)\fifa19\fifa19.exe] => (Block) C:\program files (x86)\fifa19\fifa19.exe (Failed to return cbHash #2, Error: 2147942593 -> Electronic Arts) [File not signed]
FirewallRules: [UDP Query User{52344EB8-2CF9-4F55-98E0-E77B079DDD6E}C:\program files (x86)\fifa19\fifa19.exe] => (Block) C:\program files (x86)\fifa19\fifa19.exe (Failed to return cbHash #2, Error: 2147942593 -> Electronic Arts) [File not signed]
FirewallRules: [TCP Query User{BBD1A384-7934-462A-8ADB-8E5E86FBF634}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{316B2FCA-EF86-47C7-8755-BD1DF851F527}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3B2A912D-FDA3-4AE7-BAC1-9076F68FD9BD}] => (Allow) C:\Program Files (x86)\eM Client\MailClient.exe (eM Client s.r.o. -> eM Client s.r.o.)
FirewallRules: [{85461371-7BEB-4380-9E99-5000B7E6A39E}] => (Allow) C:\Program Files (x86)\eM Client\MailClient.exe (eM Client s.r.o. -> eM Client s.r.o.)
FirewallRules: [{A2F751BE-2D05-405B-9C3D-2C05A2CE6448}] => (Allow) C:\Program Files (x86)\eM Client\MailClient.exe (eM Client s.r.o. -> eM Client s.r.o.)
FirewallRules: [{5E2BEFB0-B1A0-4B07-BB94-DBF67F2045FE}] => (Allow) C:\Program Files (x86)\eM Client\MailClient.exe (eM Client s.r.o. -> eM Client s.r.o.)
FirewallRules: [TCP Query User{10761921-3FED-4E95-8B9B-9222C36F74E8}C:\users\petr\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\petr\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{31382625-C62D-4B6E-95D6-3E4F6894EE36}C:\users\petr\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\petr\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{F7144D2C-DDE6-40F2-A28C-6FF9FE556052}C:\totalcmd\totalcmd64.exe] => (Block) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [UDP Query User{AF7046A1-0BF8-41EF-9B31-FCE28313FDA0}C:\totalcmd\totalcmd64.exe] => (Block) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [TCP Query User{9B4C9D2F-6DE9-4E35-B216-C666F4244AB8}C:\users\petr\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\petr\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{1B9EE180-98B7-48B5-BCC1-4BFC86C7B852}C:\users\petr\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\petr\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1C23E446-D8A0-4C85-882A-4CB76A40F0F4}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E9FCE90A-8DDB-4390-A558-1B7D853DB45B}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{E42D0F7C-CD9E-48AC-A5B0-3E5F735F75E2}C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe => No File
FirewallRules: [UDP Query User{49EE2828-E2D2-41F6-BA70-92FAF3E8A7A9}C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe => No File
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{31C83078-8EE4-454E-9504-32654DFA113F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{988D9E2B-5B71-41A3-9B97-B3521E166039}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BC6BA8A3-F8E2-4A86-8FF5-60F35CE04C47}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F7C2E763-C6A7-4A9A-ADA0-6385E95384DB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
07-07-2026 23:31:34 Windows Update
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (07/06/2026 07:45:33 PM) (Source: Application Error) (EventID: 1000) (User: LAPTOP-CVO5E9CR)
Description: Název chybující aplikace: Hola-Setup.exe, verze: 1.254.572.0, časové razítko: 0x307c79fd
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.26100.8737, časové razítko: 0x7160435a
Kód výjimky: 0xe0434352
Posun chyby: 0x0016a394
ID chybujícího procesu: 0x1904
Čas spuštění chybující aplikace: 0x1dd0d6f3e558883
Cesta k chybující aplikaci: C:\Users\Petr\Downloads\Hola-Setup.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID sestavy: 0e00f651-0626-4ef8-b03a-f6aae9033f61
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (07/06/2026 07:45:33 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Hola-Setup.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.IO.IOException
at System.IO.__Error.WinIOError(Int32, System.String)
at System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
at System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
at System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean)
at System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean)
at System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding)
at hola_setup.Log..ctor()
at hola_setup.Log.get_Instance()
at hola_setup.App.Main()
Error: (07/06/2026 06:55:12 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x80070006, Neplatný popisovač..
Operace:
Spouštění asynchronní operace
Kontext:
Aktuální stav: DoSnapshotSet
Error: (07/05/2026 05:27:34 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 14092. ID zprávy: [0x2509].
Error: (07/05/2026 04:53:38 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 15812. ID zprávy: [0x2509].
Error: (07/05/2026 04:47:00 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 20548. ID zprávy: [0x2509].
Error: (07/04/2026 11:53:01 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 15316. ID zprávy: [0x2509].
Error: (07/02/2026 10:20:58 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 9916. ID zprávy: [0x2509].
System errors:
=============
Error: (07/08/2026 12:04:28 PM) (Source: Netwtw04) (EventID: 5010) (User: )
Description: Intel(R) Dual Band Wireless-AC 3165 : Síťový adaptér vrátil ovladači neplatnou hodnotu.
5010 - Driver DBG_ASSERT - instead of BSOD
Error: (07/07/2026 11:34:19 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.
Error: (07/06/2026 08:09:23 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného uživatelem se nepodařilo zvětšit úložiště stínové kopie.
Error: (07/06/2026 07:19:25 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Služba přidružení zařízení zjistila chybu zjišťování koncového bodu.
Error: (07/04/2026 05:04:44 PM) (Source: volsnap) (EventID: 35) (User: )
Description: Stínové kopie svazku C: byly přerušeny, protože se nepodařilo zvětšit úložiště stínové kopie.
Error: (07/04/2026 12:24:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9WZDNCRFJBH4-Microsoft.Windows.Photos.
Error: (07/04/2026 11:50:28 AM) (Source: disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk2\DR5.
Error: (07/04/2026 11:50:28 AM) (Source: disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR4.
Windows Defender:
================
TimeCreated : 06.07.2026 19:55:05
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (A9056116-618F-4FCD-B6F1-17FA7C952F4F}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 05.07.2026 18:36:33
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (2D57855B-D1B8-4908-BC2A-EC3E6290E57D}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вЯРČ çőпήзćťĂĎĐż ĐłĹâżÄ‘ŏщи)
TimeCreated : 05.07.2026 17:24:09
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (A238DEA7-501B-4337-8EB7-C8DD9A314972}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вЯРČ çőпήзćťĂĎĐż ĐłĹâżÄ‘ŏщи)
TimeCreated : 04.07.2026 17:33:31
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (963F95B4-B588-4858-A792-801AD54039B5}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 04.07.2026 12:22:59
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (29A4EF6B-8FCB-4CDE-AC63-382A112B3E8E}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 01.07.2026 17:11:41
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (6787A757-9E6F-46D5-AE6B-2DF4C1296CBC}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 30.06.2026 19:35:42
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (D6E600E9-BF65-4DCB-AD27-6B87F15C1AAE}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
TimeCreated : 29.06.2026 17:31:49
(Message : Antivirová ochrana v programu Microsoft Defender Ĺ›Ńªņ Ń’Ä…Ĺ› ъėěл šŧŏррÎĂ° ь℮ƒбŕë ćоmφĺęťιòń.%Đ» %ţŠĉαπ Ä®Ă:%ŃŚ{) (EE52E97C-D21A-4187-AAB8-1C44CA9ACBDC}%ή %ĹŁĹ Ńǻʼn ΤγĎâ„®:%вAntimalwarovĂ˝ program%Đż %ĹĄĐ…Ńäй Ρаѓаměτзřѕ:%ŃŠRychlĂ© ) (prohledávánĂ%Đą %ťÙŝěя:%ŃŚNT AUTHORITY\SYSTEM%Đ» %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺÎδ şćâñ áşÄ…Ĺ› šķÄĎφзð ъĕčà ùşė ţнε ÄľÄĹź) (ĹŁ şúċçзśšƒцŀ şçäπ Ńªš áşÎąŃ‚Ń›ÎĎ€ Ń‚ÄĄĂ© ľäšτ 7 đâýš)
CodeIntegrity:
===============
Date: 2026-06-25 09:32:57
Description:
Code Integrity determined that a process (Winload) attempted to load system32\drivers\aswElam.sys that did not meet the Authenticode signing level requirements or violated code integrity policy (Policy ID:{60fd87f8-4593-44a0-91b0-2e0da022f248}).
Date: 2026-06-25 09:32:57
Description:
The driver system32\drivers\aswElam.sys is blocked from loading as the driver has been revoked by Microsoft.
==================== Memory info ===========================
BIOS: LENOVO 6SCN54WW 05/17/2021
Motherboard: LENOVO LNVNB161216
Processor: Intel(R) Core(TM) i5-8250U CPU @ 1.60GHz
Percentage of memory in use: 85%
Total physical RAM: 7613.43 MB
Available physical RAM: 1127.48 MB
Total Virtual: 11850.62 MB
Available Virtual: 3735.15 MB
==================== Drives ================================
Drive c: (Windows-SSD) (Fixed) (Total:237.23 GB) (Free:11.17 GB) (Model: SAMSUNG MZALQ256HAJD-000L2) NTFS
\\?\Volume{3944c868-d993-4fad-89d1-4a62e0d8abf9}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.24 GB) NTFS
\\?\Volume{65b7ba2c-048c-4020-b359-4c7f8094bba3}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.21 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: C27D31B5)
Partition: GPT.
==================== End of Addition.txt =======================
-
Rudy
- Site Admin
- Příspěvky: 120027
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o preventivní kotrolu
Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
AlternateDataStreams: C:\WINDOWS\system32\Drivers\jirjuevi.sys:changelist [890]
FirewallRules: [UDP Query User{148E7D43-9A73-4603-85F1-A499A8A75426}C:\tizen-studio\tools\sdb.exe] => (Allow) C:\tizen-studio\tools\sdb.exe => No File
FirewallRules: [TCP Query User{15088D32-B9E0-44A6-B020-C8173BE498D4}C:\tizen-studio\tools\sdb.exe] => (Allow) C:\tizen-studio\tools\sdb.exe => No File
FirewallRules: [TCP Query User{E42D0F7C-CD9E-48AC-A5B0-3E5F735F75E2}C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe => No File
FirewallRules: [UDP Query User{49EE2828-E2D2-41F6-BA70-92FAF3E8A7A9}C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe => No File
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Task: {E727B56B-E56C-4EF1-8C88-BF74A6EBF600} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBoostAddin.Prompt => C:\Program Files (x86)\Lenovo\VantageService\4.0.52.0\ScheduleEventAction.exe LenovoBoostAddin.Prompt (No File)
Task: {CC30D9ED-72AF-4D6E-A5A6-8AE3840C311E} - System32\Tasks\Lenovo\Vantage\Schedule\NotificationCenter => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe NotificationCenter (No File)
Task: {12A1993F-5251-4E31-93C0-8F4862DB2343} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\\uninstall.exe /repair (No File)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {F6F92FD5-FA1A-45CD-9F9A-F550A4FE2DE4} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {A83936AB-5BDC-4B9F-B814-4251912556F1} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {604E0FD2-5E03-4C5E-8AF7-CACBCBFFD85F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
C:\DumpStack.log.tmp
EmptyTemp:
Hosts:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o preventivní kotrolu
Fix result of Farbar Recovery Scan Tool (x64) Version: 07-07-2026 01
Ran by Petr (09-07-2026 17:22:06) Run:5
Running from C:\Users\Petr\Desktop
Loaded Profiles: Petr
Boot Mode: Normal
==============================================
fixlist content:
*****************
*****************
==== End of Fixlog 17:22:06 ====
Ran by Petr (09-07-2026 17:22:06) Run:5
Running from C:\Users\Petr\Desktop
Loaded Profiles: Petr
Boot Mode: Normal
==============================================
fixlist content:
*****************
*****************
==== End of Fixlog 17:22:06 ====
-
Rudy
- Site Admin
- Příspěvky: 120027
- Registrován: 30 Říj 2003 13:42
- Místo/Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o preventivní kotrolu
Nějaký nesmysl. Fixlog vypadá přibližně takto: https://forum.viry.cz/viewtopic.php?p=1561117#p1561117. Toto je pouze hlavička a závěr logu. To, co má být mezi tím, chybí. Zkuste znovu.cudla11 napsal: Dnes 16:22 Fix result of Farbar Recovery Scan Tool (x64) Version: 07-07-2026 01
Ran by Petr (09-07-2026 17:22:06) Run:5
Running from C:\Users\Petr\Desktop
Loaded Profiles: Petr
Boot Mode: Normal
==============================================
fixlist content:
*****************
*****************
==== End of Fixlog 17:22:06 ====
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?