VIRY.CZ

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 07-07-2026 01
Ran by Petr (administrator) on LAPTOP-CVO5E9CR (LENOVO 81AX) (09-07-2026 14:39:52)
Running from C:\Users\Petr\Desktop\FRST64.exe
Loaded Profiles: Petr
Platform: Microsoft Windows 11 Pro Version 25H2 26200.8737 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Autodesk, Inc. -> Autodesk) C:\Program Files\Autodesk\Genuine Service\GenuineService.exe
(Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessService.exe
(C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantage-(LenovoServiceBridgeAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2623.103.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\150.0.4078.48\msedgewebview2.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe
(Conexant Systems, Inc) [File not signed] [File is in use] C:\Program Files\CONEXANT\SAII\SmartAudio.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_8a8976fda8c58073\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8a8976fda8c58073\igfxEM.exe
(eM Client s.r.o. -> eM Client s.r.o.) C:\Program Files (x86)\eM Client\MailClient.exe
(ETDCtrl.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDTouch.exe
(ETDService.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDCtrl.exe
(ETDService.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDCtrlHelper.exe
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(explorer.exe ->) (eM Client s.r.o. -> eM Client s.r.o.) C:\Program Files (x86)\eM Client\MailClient.exe
(explorer.exe ->) (Fortemedia Inc -> ) C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(explorer.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <6>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\150.0.4078.48\msedgewebview2.exe <10>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Autodesk, Inc. -> ) C:\Program Files\Autodesk\Autodesk CER\service\cer_service.exe
(services.exe ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\16.3.1.15415\AdskLicensingService\AdskLicensingService.exe
(services.exe ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessServiceHost.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (Conexant Systems LLC -> Conexant Systems, Inc.) C:\Program Files\CONEXANT\SAII\CxUtilSvc.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDService.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(services.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_7ecc5be6ca7b3b0d\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_ece153ca769ec179\aesm_service.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8a8976fda8c58073\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8a8976fda8c58073\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8a8976fda8c58073\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_f222132bfa8270de\RstMwService.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\NisSrv.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(sihost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2623.103.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(sihost.exe ->) (Lenovo -> Lenovo) C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.7.18.0_x64__5grkq8ppsgwt4\LaunchUtility\utility.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2602.23002.0_x64__8wekyb3d8bbwe\MicrosoftSecurityApp\MicrosoftSecurityApp.exe
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.302.5.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Petr\AppData\Local\Microsoft\OneDrive\26.108.0607.0002\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe

==================== Registry (Whitelisted) ===================

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [603992 2017-06-23] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] (Fortemedia Inc -> )
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [350184 2026-05-14] (Adobe Inc. -> Adobe Inc.)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [445800 2021-10-08] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Run: [Autodesk Access Service] => C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessService.exe [21901144 2026-01-15] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM\...\Run: [Autodesk Access] => C:\Program Files\Autodesk\AdODIS\V1\Access\AdskAccessCore.exe [40474968 2026-02-05] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1832280 2017-06-07] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [678624 2026-01-22] (Geek Software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [Bonus.SSR.FR12] => C:\Program Files (x86)\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1527960 2016-10-18] (ABBYY Production LLC -> ABBYY Production LLC.)
HKLM-x32\...\Run: [Autodesk Genuine Service ] => C:\Program Files\Autodesk\Genuine Service\GenuineService.exe [2691416 2025-11-10] (Autodesk, Inc. -> Autodesk)
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [365160 2020-03-25] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\Run: [EPSDNMON] => C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE [346712 2020-07-26] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [45052888 2026-06-24] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\Run: [MicrosoftEdgeAutoLaunch_88D36A2D9DF9AF2106D8CF7538FE64F2] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4970824 2026-07-02] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\Policies\Explorer: []
HKLM\...\Windows x64\Print Processors\Canon MP250 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD9W.DLL [28672 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP250 series: C:\WINDOWS\system32\CNMLM9W.DLL [336896 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\EPSON XP-900 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBRGE.DLL [187392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [558592 2012-11-12] (SEIKO EPSON CORPORATION) [File not signed]
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\Windows\system32\pxcpmL.dll [2044248 2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {B1A17782-C3AC-4E29-ADAA-7152978453F5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {92841B58-5E09-40A3-948B-7C3459861587} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [350184 2026-05-14] (Adobe Inc. -> Adobe Inc.)
Task: {AA821ED5-565E-4012-84CA-0DD8E07A89F3} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [6163432 2026-05-14] (Adobe Inc. -> Adobe Inc.)
Task: {E1D072A6-7F3D-4AA3-95B9-15661285EB04} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4682976 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
Task: {2B3208FF-CB6F-4377-A200-305DD4EE8BEF} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Avast Software\Avast\setup\overseer.exe [2977504 2025-10-13] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {F81838BC-5DA4-4F88-BF95-9C619BBF1CBF} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [3385640 2026-06-25] (Microsoft Windows -> Microsoft Corporation)
Task: {0C865056-1C60-4700-9E8B-3AF27F5797A3} - System32\Tasks\eM Client Database Backup (S-1-5-21-3231952856-1019465751-811631384-1001) => C:\Program Files (x86)\eM Client\MailClient.exe [266320 2024-10-15] (eM Client s.r.o. -> eM Client s.r.o.)
Task: {DD8346A8-C2C7-4E86-95DA-B43E0AAB7C2E} - System32\Tasks\EPSON XP-900 Series Update {1D34E24D-3602-4463-BC8C-53017AC68CA0} => C:\Windows\System32\spool\drivers\x64\3\E_YTSRGE.EXE [690536 2013-11-21] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Task: {86585920-EC30-4FD6-B93C-8AF7D85C4B59} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-28] (HP Inc. -> HP Inc.)
Task: {3829B766-0776-42D4-A627-2FEFFE7D9EE8} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-28] (HP Inc. -> HP Inc.)
Task: {93788829-E78A-4784-827C-1FD1487710B2} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [94496 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {D5ED7FC5-F3C4-498C-8589-C794D0053DFC} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\WINDOWS\system32\sc.exe [102400 2026-03-01] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService
Task: {3184A145-1881-4CB2-8D74-B57DF1E572C0} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => C:\WINDOWS\System32\reg.exe [110592 2026-03-01] (Microsoft Windows -> Microsoft Corporation) -> add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {1147DA14-A6DA-4061-B859-0CEBE9A91D91} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\282cbd1c-9a6d-4094-a094-7371c1718435 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {01278A15-FA16-47F7-AA38-486BD9EC764B} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\7e0ad1c9-bca2-49d9-8e96-4ab2758a910f => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {691C5591-33D3-4C91-A7A6-EE4BEE531454} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\820cabcb-7871-413b-9779-f284e97ccfd1 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {D7712497-51FD-40AE-A68C-238339771D3C} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [102400 2026-03-01] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {7F0742AB-72AF-40C8-A352-A4AC8F4F1BAB} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {7ECF50C5-3A41-49C9-82AD-60EAFE53E0C7} - System32\Tasks\Lenovo\Vantage\Schedule\ConsumerAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {739F6BEB-451C-4C2F-846D-3F3D7E1E60FB} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {6E1A6735-063C-498C-8BFE-94E504E65783} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {D408B24C-E2D9-42EE-B484-1CAC42BD5A80} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin_Pulsation => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {A2EFC83B-B5AA-4285-AA51-5E0BE1CC2C95} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {ABB122F0-6345-4405-B07E-CCB8AC93F425} - System32\Tasks\Lenovo\Vantage\Schedule\IdeaNotebookAddinDailyEvent => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {3E9E4CDD-E025-48D4-91AF-E2C7FDB731C5} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {893215DD-4335-48D8-B317-79ACCBC96472} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBatteryPartSalesMonthlyToast => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {E727B56B-E56C-4EF1-8C88-BF74A6EBF600} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBoostAddin.Prompt => C:\Program Files (x86)\Lenovo\VantageService\4.0.52.0\ScheduleEventAction.exe LenovoBoostAddin.Prompt (No File)
Task: {F5DFF47B-E969-43E2-80D6-037C03438DA7} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {0353D700-663F-4954-BB04-F9721BBB5174} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSupportHealthReportSchedule => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {8D61AD94-C8FE-4ECD-B24B-CED7A7F94DC0} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {CC30D9ED-72AF-4D6E-A5A6-8AE3840C311E} - System32\Tasks\Lenovo\Vantage\Schedule\NotificationCenter => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe NotificationCenter (No File)
Task: {20FADD54-9630-46A8-BCB7-06DB8102E803} - System32\Tasks\Lenovo\Vantage\Schedule\SettingsWidgetAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {AC80CB6D-5DC7-46A9-9527-E362833FD578} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {EE9A3088-4235-4BC5-8FDF-42549DB7EF8B} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {3612D17E-D10B-4A1A-84D6-C6214ECF9814} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.1.0.43\x86\IdleScheduleEventAction.exe [173536 2026-06-24] (Lenovo -> )
Task: {BEEF9833-2B75-44EB-993F-96CBA2B7A8B0} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\ScheduleEventAction.exe [275008 2026-06-30] (Lenovo -> Lenovo)
Task: {12A1993F-5251-4E31-93C0-8F4862DB2343} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\\uninstall.exe /repair (No File)
Task: {234AA176-3261-4615-91AA-E8E6BAC6AB6F} - System32\Tasks\LenovoUtility Startup => C:\Windows\explorer.exe [3385640 2026-06-25] (Microsoft Windows -> Microsoft Corporation)
Task: {777E1362-404F-492C-B45E-80510A9CA4B7} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16500608 2026-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {B103FF3C-42D3-43CD-A743-69EF0DDD2F50} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28493632 2026-06-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {3032E05A-1908-45FD-8990-56D2816A686D} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [73560 2026-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {F342D68A-41EA-45EA-8B56-987CBAC84EDE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28493632 2026-06-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {7AB3D2FC-6F42-4903-91E6-6A7FF192C517} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [432408 2026-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {3CAB8419-5866-4009-8EAF-6FF04F3B3CA6} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [432408 2026-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {CD4A10DF-D4F9-4671-A03F-DBCA7C9B2AAE} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1335576 2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {F2736502-7955-4E88-8F07-727475F2AE92} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16500608 2026-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {B38AEA6C-4682-473D-A026-4122DAC33E72} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe [83792 2026-07-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {F6F92FD5-FA1A-45CD-9F9A-F550A4FE2DE4} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {A83936AB-5BDC-4B9F-B814-4251912556F1} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {604E0FD2-5E03-4C5E-8AF7-CACBCBFFD85F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {F676008B-3627-4797-8BA1-A0549E460D2E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {364F0373-CDFC-4493-96E5-1DBAFD0FD74C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CE9983D2-B928-4A66-AE95-2EF4F0D30B9B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AFF961F4-67F6-47ED-8294-FB60E46E711F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpCmdRun.exe [1893920 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1B3C9240-EA96-4FBF-ACC1-9A90D7BEE2F7} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [705152 2026-07-07] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {B0364986-9DF0-44E9-9283-5DCBDFBF3495} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3231952856-1019465751-811631384-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [705152 2026-07-07] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {B60EC365-7EDE-48E4-BF23-42148556105D} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-07-07] (Mozilla Corporation -> Mozilla Foundation)
Task: {FE62D1EE-6CB7-4B7A-909D-1D4A2F72D4BE} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-3231952856-1019465751-811631384-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [8070264 2026-06-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {57670A62-8A75-4CB1-9A62-A3B60758BD93} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-3231952856-1019465751-811631384-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [8070264 2026-06-02] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {29472CD7-6D44-4ABC-80C8-74B17948D0BE} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [6633736 2026-06-02] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {920FE206-7CF5-4A78-9C12-51450D701362} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [9274080 2026-01-19] (Gen Digital Inc. -> Gen Digital Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}: [DhcpDomain] home
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}\14B63656E647: [DhcpNameServer] 192.168.129.1
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}\14B63656E647: [DhcpDomain] localdomain
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}\255646D696021353: [DhcpNameServer] 10.29.33.177
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}\74967616365726560796374796E616: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}\F423D294E6475627E65647D25374D2433373: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{b1ca8d22-e5b4-4512-8091-211d1588dbe4}\F423D294E6475627E65647D25374D2433373: [DhcpDomain] Home
Tcpip\..\Interfaces\{cc70d8dd-3c19-47ad-9ce9-6e0aeba5712b}: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{e3709369-fac6-4489-8051-fc92393c6583}: [DhcpNameServer] 178.17.0.11 178.17.0.12

FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: oazwnvzd.Petr -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\gc13wse2.default [2022-01-14]
FF NewTab: Mozilla\Firefox\Profiles\gc13wse2.default -> hxxps://securesearch.org/homepage?hp=2&pId=BT170603&iDate=2020-09-25 10:30:14&bName=
FF ProfilePath: C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\oazwnvzd.Petr [2026-07-09]
FF Homepage: Mozilla\Firefox\Profiles\oazwnvzd.Petr -> www.seznam.cz
FF Extension: (Použijte Google překladač) - C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\oazwnvzd.Petr\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2025-10-10]
FF Extension: (Hlídač Shopů) - C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\oazwnvzd.Petr\Extensions\{d6f0f975-91a3-4d78-96f7-5f1859ad18b6}.xpi [2026-05-28]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-06-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.311.2 -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\dtplugin\npDeployJava1.dll [2021-10-25] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.311.2 -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\plugin2\npjp2.dll [2021-10-25] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=3.0.10 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.12 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin HKU\S-1-5-21-3231952856-1019465751-811631384-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3231952856-1019465751-811631384-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3231952856-1019465751-811631384-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Petr\AppData\Local\Microsoft\Edge\User Data\Default [2026-07-09]
Edge Extension: (Dokumenty Google offline) - C:\Users\Petr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-22]
Edge Extension: (Edge relevant text changes) - C:\Users\Petr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
R2 AdskLicensingService; C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\Current\AdskLicensingService\AdskLicensingService.exe [17267544 2026-06-09] (Autodesk, Inc. -> Autodesk, Inc.)
R2 Autodesk Access Service Host; C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessServiceHost.exe [23084888 2026-02-02] (Autodesk, Inc. -> Autodesk, Inc.)
R2 Autodesk CER Service; C:\Program Files\Autodesk\Autodesk CER\service\cer_service.exe [24472136 2025-11-28] (Autodesk, Inc. -> )
R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [30663800 2026-06-02] (Gen Digital Inc. -> Gen Digital Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13397312 2026-06-30] (Microsoft Corporation -> Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4506728 2020-03-25] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [145224 2016-01-13] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2026-06-28] (HP Inc. -> HP Inc.)
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
S3 IsoEnvBroker; C:\WINDOWS\System32\IsoEnvBroker.dll [774144 2026-06-25] (Microsoft Windows -> Microsoft Corporation)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\5.1.2606.17\LenovoVantageService.exe [44096 2026-06-30] (Lenovo -> Lenovo)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [970080 2026-06-26] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MpDefenderCoreService.exe [2100520 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [678624 2026-01-22] (Geek Software GmbH -> geek software GmbH)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [877528 2026-05-27] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\NisSrv.exe [4769792 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26060.3008-0\MsMpEng.exe [290704 2026-07-08] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [35648 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [357320 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [249304 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [98760 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
S0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16832 2020-12-24] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [41272 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [175248 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [521336 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [107784 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83360 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [850112 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [465160 2021-03-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [326976 2021-02-28] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [602112 2026-03-01] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [212992 2026-03-01] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [114688 2026-03-01] (Microsoft Corporation) [File not signed]
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2020-03-25] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2020-03-25] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-20] (Microsoft Windows -> Microsoft Corporation)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [50568 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21928 2026-07-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [616880 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [110984 2026-07-08] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2026-03-01] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_a6dc64e436f22951\WSDScan.sys [61440 2026-03-01] (Microsoft Windows -> Microsoft Corporation)

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-07-09 14:39 - 2026-07-09 14:41 - 000044096 _____ C:\Users\Petr\Desktop\FRST.txt
2026-07-09 14:38 - 2026-07-09 14:38 - 002449920 _____ (Farbar) C:\Users\Petr\Desktop\FRST64.exe
2026-07-07 17:17 - 2026-07-07 17:18 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-07-06 19:46 - 2026-07-06 19:49 - 000000000 ____D C:\Users\Petr\AppData\Roaming\Hola
2026-07-06 18:56 - 2026-07-06 18:56 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-07-06 18:55 - 2026-07-06 18:55 - 000002059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox — anonymní prohlížení.lnk
2026-07-05 21:40 - 2026-07-08 12:14 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-07-01 16:14 - 2026-07-01 16:14 - 000486892 _____ C:\Users\Petr\Downloads\4023976368.pdf
2026-06-29 15:20 - 2026-06-29 15:20 - 000225048 _____ C:\Users\Petr\Downloads\000056961794_Potvrdenie o úhrade diaľničnej známky,_202606291519.pdf
2026-06-29 15:10 - 2026-06-29 15:10 - 000484321 _____ C:\Users\Petr\Downloads\4015329357.pdf
2026-06-25 11:21 - 2026-06-25 11:21 - 000000000 ____D C:\WINDOWS\Minidump
2026-06-25 09:39 - 2026-06-25 09:39 - 000714520 _____ C:\WINDOWS\system32\perfh005.dat
2026-06-25 09:39 - 2026-06-25 09:39 - 000153682 _____ C:\WINDOWS\system32\perfc005.dat
2026-06-25 08:53 - 2026-06-25 08:53 - 000004977 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-06-25 08:53 - 2026-06-25 08:53 - 000004647 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-06-25 08:53 - 2026-06-25 08:53 - 000004647 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-06-25 08:53 - 2026-06-25 08:53 - 000004647 _____ C:\WINDOWS\system32\ResPriImageList
2026-06-25 08:53 - 2026-06-25 08:53 - 000004647 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-06-25 08:53 - 2026-06-25 08:53 - 000004558 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-06-25 08:53 - 2026-06-25 08:53 - 000004558 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-06-25 08:52 - 2026-06-25 08:52 - 000087226 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-06-25 08:52 - 2026-06-25 08:52 - 000087226 _____ C:\WINDOWS\system32\ctac.json
2026-06-25 08:52 - 2026-06-25 08:52 - 000037624 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-06-25 08:52 - 2026-06-25 08:52 - 000037624 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-06-10 13:58 - 2026-06-10 13:58 - 000011668 _____ C:\Users\Petr\Desktop\Nehody docházka.xlsx
2026-06-10 05:59 - 2026-06-10 06:06 - 2387980159 _____ C:\Users\Petr\Downloads\I+Swear+-+Přísahám,+že+za+to+nemůžu+(2025)+CZ+titulky.mkv

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-07-09 14:41 - 2021-11-07 19:02 - 000000000 ____D C:\FRST
2026-07-09 14:40 - 2020-03-30 10:07 - 000000000 ____D C:\Users\Petr\AppData\Roaming\eM Client
2026-07-09 14:38 - 2020-03-30 19:32 - 000000000 ____D C:\Users\Petr\AppData\Roaming\vlc
2026-07-09 14:31 - 2021-02-09 19:03 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2026-07-09 14:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-07-09 14:26 - 2026-03-01 11:59 - 000003530 _____ C:\WINDOWS\system32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0
2026-07-09 14:26 - 2026-03-01 11:59 - 000003506 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2026-07-09 14:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-07-09 14:22 - 2020-03-16 12:36 - 000000000 ___RD C:\Users\Petr\OneDrive
2026-07-09 14:20 - 2024-11-15 13:33 - 000000000 ____D C:\ProgramData\boost_interprocess
2026-07-09 14:20 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-07-09 14:20 - 2022-02-09 17:25 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-07-09 14:19 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-07-09 14:19 - 2020-03-16 12:34 - 000000000 __SHD C:\Users\Petr\IntelGraphicsProfiles
2026-07-08 15:03 - 2026-03-01 12:01 - 000000000 ____D C:\Users\Petr\AppData\Local\D3DSCache
2026-07-08 14:38 - 2020-03-16 13:57 - 000000000 ____D C:\Users\Petr\AppData\Roaming\Microsoft\Excel
2026-07-08 14:01 - 2026-03-01 11:49 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-07-08 12:06 - 2019-04-19 07:00 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-07-07 22:21 - 2026-03-01 11:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-07-07 22:21 - 2020-03-24 12:41 - 000001084 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-07-07 17:17 - 2020-03-24 12:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-07-06 19:49 - 2022-07-21 10:15 - 000000000 ____D C:\Users\Petr\AppData\Local\luminati
2026-07-06 19:46 - 2020-03-16 12:34 - 000000000 ____D C:\Users\Petr\AppData\Local\Packages
2026-07-06 18:51 - 2019-11-30 00:01 - 000000000 ____D C:\Program Files\Microsoft Office
2026-07-05 22:34 - 2020-03-16 12:51 - 000000000 ____D C:\Users\Petr\AppData\Roaming\Kerio Connect
2026-07-05 17:44 - 2020-03-25 07:45 - 000000000 ____D C:\Users\Petr\AppData\Local\Autodesk
2026-07-04 15:32 - 2020-03-16 14:03 - 000000000 ____D C:\Users\Petr\AppData\Roaming\Microsoft\Word
2026-07-04 13:25 - 2026-03-01 11:59 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3231952856-1019465751-811631384-1001
2026-07-04 13:25 - 2026-03-01 11:59 - 000003568 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3231952856-1019465751-811631384-1001
2026-07-04 13:25 - 2026-03-01 11:59 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3231952856-1019465751-811631384-1001
2026-07-04 13:25 - 2021-04-18 22:44 - 000002387 _____ C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-07-04 11:53 - 2020-12-23 20:16 - 000000000 ____D C:\Olinka
2026-07-04 11:53 - 2020-06-08 19:44 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-06-30 19:25 - 2024-12-03 20:57 - 000000000 ____D C:\Program Files\Autodesk
2026-06-29 17:31 - 2026-03-01 11:59 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2026-06-28 17:58 - 2024-01-19 18:48 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-06-28 17:57 - 2026-03-01 11:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2026-06-28 11:53 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-06-28 09:58 - 2022-10-13 20:22 - 000002157 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-06-26 18:22 - 2019-11-30 00:18 - 000000000 ____D C:\ProgramData\McAfee
2026-06-25 09:59 - 2020-03-16 12:48 - 000000000 ____D C:\ProgramData\Packages
2026-06-25 09:43 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-06-25 09:39 - 2026-03-01 12:04 - 001692452 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-06-25 09:33 - 2026-03-01 11:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-06-25 09:33 - 2024-12-04 21:27 - 000015038 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-06-25 09:33 - 2021-04-18 22:42 - 000012288 ___SH C:\DumpStack.log.tmp
2026-06-25 09:32 - 2026-03-01 11:49 - 000001527 _____ C:\WINDOWS\system32\config\VSMIDK
2026-06-25 09:32 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-06-25 09:30 - 2026-03-01 11:49 - 000589880 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2026-06-25 09:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2026-06-25 09:28 - 2026-05-13 15:18 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-06-25 09:28 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-06-25 09:28 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-06-25 08:51 - 2026-03-01 11:52 - 003367424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-06-24 16:29 - 2026-02-02 22:19 - 000000000 ____D C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webová aplikace Firefoxu
2026-06-21 19:49 - 2026-03-01 11:59 - 000003640 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-21 19:49 - 2026-03-01 11:59 - 000003514 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-06-10 04:51 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-06-10 04:18 - 2020-03-16 12:44 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-06-10 04:13 - 2020-03-16 12:44 - 222431176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Files in the root of some directories ========

2021-02-10 17:21 - 2021-02-10 17:21 - 000000000 _____ () C:\Users\Petr\AppData\Local\oobelibMkey.log

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-07-2026 01
Ran by Petr (09-07-2026 14:43:24)
Running from C:\Users\Petr\Desktop
Microsoft Windows 11 Pro Version 25H2 26200.8737 (X64) (2026-03-01 10:00:12)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3231952856-1019465751-811631384-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-3231952856-1019465751-811631384-503 - Limited - Disabled)
Guest (S-1-5-21-3231952856-1019465751-811631384-501 - Limited - Disabled)
Petr (S-1-5-21-3231952856-1019465751-811631384-1001 - Administrators - Enabled) => C:\Users\Petr
WDAGUtilityAccount (S-1-5-21-3231952856-1019465751-811631384-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 12 Professional (HKLM-x32\...\{F12000FE-0001-0000-0000-074957833700}) (Version: 12.1.625 - ABBYY Production LLC)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 26.001.21691 - Adobe)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 9.1.0.52 - Adobe Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Asian Language And Spelling Dictionaries Support For Adobe Acrobat Reader (HKLM\...\{AC76BA86-7AD7-0000-0000-BC17084FC500}) (Version: 23.008.20421 - Adobe Systems Incorporated)
AutoCAD Open in Desktop (HKLM\...\{1C66A0B0-784E-4777-97B3-93F843D1C8CF}) (Version: 1.0.20.0 - Autodesk)
Autodesk Access (HKLM\...\{A3158B3E-5F28-358A-BF1A-9532D8EBC811}) (Version: 2.21.0.559 - Autodesk, Inc.)
Autodesk App Manager (HKLM-x32\...\{9C2E49CB-F671-47EC-8093-CC1A8749A92A}) (Version: 3.2.1 - Autodesk)
Autodesk AutoCAD 2022 - English (HKLM\...\{1E7D4EF7-A28E-3D3E-BA3C-C6FAE4AAB2E0}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk AutoCAD 2022 Language Pack – Čeština (Czech) (HKLM\...\{B914E66E-BDF2-3DB2-ADDC-782AC4A48F1F}) (Version: 24.1.51.0 - Autodesk, Inc.)
Autodesk CER (HKLM\...\{11D68ADA-767C-43E0-9716-C2E1ECD08AA2}) (Version: 7.2.4.927 - Autodesk Inc.) Hidden
Autodesk Genuine Service (HKLM\...\{83170d71-4e9d-459f-be9a-e12c6db2af55}) (Version: 7.6.0.229 - Autodesk)
Autodesk Identity Manager (HKLM\...\Autodesk Identity Manager) (Version: 1.12.0.7 - Autodesk)
Autodesk Material Library 2022 (HKLM-x32\...\{A9221A68-5AD0-4215-B54F-CB5DBA4FB27C}) (Version: 20.3.7.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2022 (HKLM-x32\...\{6256584F-B04B-41D4-8A59-44E70940C473}) (Version: 20.3.7.0 - Autodesk)
calibre 64bit (HKLM\...\{8DE722AD-4F10-4607-A247-8AF4437037B4}) (Version: 8.16.2 - Kovid Goyal)
Call of Duty Modern Warfare 2 (HKLM-x32\...\Call of Duty Modern Warfare 2_is1) (Version: - Activision)
Canon MP250 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP250_series) (Version: - )
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.8.1355.1753 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.12.0.1152 - Disc Soft Ltd)
Dynamic Application Loader Host Interface Service (HKLM\...\{C1FFE6F8-BB6C-40B3-9C65-A1CC0962896A}) (Version: 1.0.0.0 - Intel Corporation) Hidden
eM Client (HKLM-x32\...\{96840943-7217-440E-B72B-220180C51AD3}) (Version: 9.2.2307.0 - eM Client Inc.)
Epson Printer Connection Checker (HKLM-x32\...\{562C1C83-6199-49DD-987B-60D5FF7BC971}) (Version: 3.3.2.0 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{28C66F35-69BF-4376-BC80-4D5F4808FF3C}) (Version: 4.6.1 - Seiko Epson Corporation)
EPSON WF-7525 Series Printer Uninstall (HKLM\...\EPSON WF-7525 Series) (Version: - SEIKO EPSON Corporation)
EPSON XP-900 Series Printer Uninstall (HKLM\...\EPSON XP-900 Series) (Version: - Seiko Epson Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
FORM studio (HKLM-x32\...\FSCZ_is1) (Version: - KASTNER software s.r.o.)
FormatFactory 5.12.2.0 (HKLM-x32\...\FormatFactory) (Version: 5.12.2.0 - Free Time)
Free MP3 Cutter 2.1 (HKLM-x32\...\{847E0734-4457-4B48-BF49-998D1CF2CFA1}_is1) (Version: 2.1 - PolySoft Solutions)
Intel(R) Icls (HKLM\...\{CA2C7ABE-A8B2-4918-8F2B-351D9D69DDC3}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) LMS (HKLM\...\{DE1E4C1C-30F0-4549-8F34-D02934442A9F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1910.12.0.1239 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{340CC61F-5E51-448A-ACA8-267968DF1780}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{AB7D0B60-C65F-465A-9199-83B74684DD10}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{286D6964-3CC3-4396-BA28-4CB7FE3E52FC}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) OEM Extension (HKLM\...\{64079417-4BAE-4AD5-A35E-7E4D58F0AD61}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 26.20.100.7812 - Intel Corporation)
JA-100-Link 2.5.0.1250 (HKLM-x32\...\JA-100-Link 2.5.0.1250_is1) (Version: JA-100-Link 2.5.0.1250 - Jablotron Alarms a.s.)
Java 8 Update 311 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180311F0}) (Version: 8.0.3110.11 - Oracle Corporation)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kerio Connect (HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\KerioConnect) (Version: 10.0.7.19645 - Kerio Technologies Inc.)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Lenovo Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.82.00.18 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 5.1.2606.17 - Lenovo Group Ltd.)
Microsoft .NET Core Host - 3.1.10 (x64) (HKLM\...\{52B42932-15C1-45D4-8904-FC3117EEE69B}) (Version: 24.104.29419 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.10 (x64) (HKLM\...\{752B4412-A129-4CB2-AD96-B6D97EAD3090}) (Version: 24.104.29419 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.10 (x64) (HKLM\...\{396D7BC8-E3C8-4B3E-8C60-D50D94FDF09D}) (Version: 24.104.29419 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.10 (x64) (HKLM-x32\...\{4714dd0a-ebab-4f59-a708-f8d7a793b3f5}) (Version: 3.1.10.29419 - Microsoft Corporation)
Microsoft 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.20131.20112 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.10 - Shared Framework (HKLM-x32\...\{6efe3294-03d8-4977-9c67-9f57ab075130}) (Version: 3.1.10.20520 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.10 Shared Framework (x64) (HKLM\...\{7BEAA207-E3EB-3948-BBB3-336B04D8A2F1}) (Version: 3.1.10.20520 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 150.0.4078.48 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 150.0.4078.48 - Microsoft Corporation) Hidden
Microsoft Office 2016 pro podnikatele - cs-cz (HKLM\...\HomeBusinessRetail - cs-cz) (Version: 16.0.20131.20112 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\OneDriveSetup.exe) (Version: 26.108.0607.0002 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\Teams) (Version: 1.4.00.11161 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{75FDEEC2-3DEB-47CD-A629-9009BD09B75C}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{BD60B99B-A623-4E04-83F2-74EDDBFFD900}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) (HKLM\...\{90120064-0070-0000-0000-4000000FF1CE}) (Version: 7.1.00.00 - Microsoft Corporation) Hidden
Microsoft Visual Basic for Applications 7.1 (x64) English (HKLM\...\{90F60409-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
MiniTool Partition Wizard (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: 12 - MiniTool Software Limited)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 152.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 152.0.4 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20131.20112 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
PDF24 Creator 11.29.1 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.29.1 - Geek Software GmbH)
PDF-XChange Editor (HKLM\...\{D7DBC941-C042-4276-93C9-A91B373AF0D8}) (Version: 9.0.351.0 - Tracker Software Products (Canada) Ltd.) Hidden
PDF-XChange Editor (HKLM-x32\...\{604944cd-f303-4436-bc7b-7a538b64c872}) (Version: 9.0.351.0 - Tracker Software Products (Canada) Ltd.)
Speciální aplikace Autodesk (HKLM-x32\...\{46EA8955-D629-4B3E-AAF0-D136031D7C95}) (Version: 3.2.1 - Autodesk)
Speciální aplikace Autodesk 2016-2018 (HKLM-x32\...\{384C4B74-B749-4AB6-9367-4D51A6AA9CB8}) (Version: 2.4.0 - Autodesk)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.50 - Ghisler Software GmbH)
Uložit do služby Autodesk Web and Mobile (HKLM\...\{192B349F-C3F7-4BBE-B49E-00DD4BD28373}) (Version: 3.0.29 - Autodesk) Hidden
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.12 - VideoLAN)
WebAdvisor od společnosti McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.1127 - McAfee, LLC)
WinRAR 5.80 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.80.0 - win.rar GmbH)

Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-06-28] ()
Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_10.15.0.0_x64__kgqvnymyfvs32 [2026-06-23] (king.com)
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_5.4.1.0_x64__kgqvnymyfvs32 [2026-06-17] (king.com)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-10-31] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_165.3.1107.0_x64__v10z8vjag6ke6 [2026-06-28] (HP Inc.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.7.18.0_x64__5grkq8ppsgwt4 [2025-05-15] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2603.12.0_x64__k1h2ywk1493x8 [2026-04-27] (LENOVO INC.)
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\AI [2026-07-06] ()
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-04-18] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-04-18] (Microsoft Corporation) [MS Ad]
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2602.23002.0_x64__8wekyb3d8bbwe [2026-03-17] (Microsoft Corporation) [Startup Task]
Microsoft.AIFabric.CBS.1.6 -> C:\WINDOWS\SystemApps\Microsoft.AIFabric.CBS.1.6_8wekyb3d8bbwe [2026-05-27] (Microsoft Corporation)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-07-06] ()
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-07-06] ()
Power2Go for Lenovo -> C:\Program Files\WindowsApps\CyberLinkCorp.th.Power2GoforLenovo_8.0.12518.0_x86__m916jedk64snt [2021-06-20] (CYBERLINKCOM CORPORATION) [Startup Task]
PowerDVD for Lenovo -> C:\Program Files\WindowsApps\CyberLinkCorp.th.PowerDVDforLenovo_14.2.6827.0_x86__m916jedk64snt [2024-09-10] (CYBERLINKCOM CORPORATION)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2623.103.0_neutral_split.scale-100_cv1g1gvanyjgm [2026-06-19] (WhatsApp Inc.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.1.3.0_x64__8wekyb3d8bbwe [2026-06-12] (Microsoft Corp.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{345D3165-3889-4694-AB75-A91A27B217E8}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{8B4929F8-076F-4AEC-AFEE-8928747B7AE3}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{AA46BA8A-9825-40FD-8493-0BA3C4D5CEB5}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) [File not signed]
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\Petr\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3231952856-1019465751-811631384-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2022\en-US\acadficn.dll (Autodesk, Inc. -> Autodesk, Inc.)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2021-01-29] (Autodesk, Inc. -> Autodesk, Inc.)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2021-01-29] (Autodesk, Inc. -> Autodesk)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [FineReader12ContextMenu] -> {55344AC6-630B-430C-B292-C7BE21F90061} => C:\Program Files (x86)\ABBYY FineReader 12\FRIntegration.x64.dll [2016-10-18] (ABBYY Production LLC -> ABBYY Production LLC.)
ContextMenuHandlers1: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx_108.dll [2022-04-19] (Free Time) [File not signed]
ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2021-01-21] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2020-03-25] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx_108.dll [2022-04-19] (Free Time) [File not signed]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_8a8976fda8c58073\igfxDTCM.dll [2020-04-07] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [FineReader12ContextMenu] -> {55344AC6-630B-430C-B292-C7BE21F90061} => C:\Program Files (x86)\ABBYY FineReader 12\FRIntegration.x64.dll [2016-10-18] (ABBYY Production LLC -> ABBYY Production LLC.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webová aplikace Firefoxu\Dumbarev.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "-taskbar-tab" "f41d8530-b483-41a7-ac98-8ab6c3c2e83d" "-new-window" "hxxps://www.dumbarev.cz" "-profile" "C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\oazwnvzd.Petr" "-container" "0"
ShortcutWithArgument: C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webová aplikace Firefoxu\iVysílání.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "-taskbar-tab" "1ed5ad9a-4426-422b-81f7-f73729383032" "-new-window" "hxxps://www.ceskatelevize.cz/porady/16173577888-neuer/" "-profile" "C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\oazwnvzd.Petr" "-container" "0"

==================== Loaded Modules (Whitelisted) =============

2026-05-29 13:34 - 2026-05-29 13:34 - 000369152 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.CxHef9fb4ae#\d904bb9aa4eb2d56972a60e01bcbcb6e\Interop.CxHDAudioAPILib.ni.dll
2026-05-29 13:34 - 2026-05-29 13:34 - 000018944 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.CxUtilSvcLib\8b4b008cae9baab30b97938e70d0a795\Interop.CxUtilSvcLib.ni.dll
2019-11-30 00:14 - 2017-07-05 21:36 - 001168384 _____ (Conexant Systems, Inc.) [File not signed] [File is in use] C:\Program Files\Conexant\SAII\CxHDAudioAPI.dll
2023-06-20 13:03 - 2012-11-12 15:15 - 000558592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enppmon.dll
2023-06-20 13:03 - 2012-10-22 17:19 - 000219648 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enpres.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\WINDOWS\system32\Drivers\jirjuevi.sys:changelist [890]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-3231952856-1019465751-811631384-1001\Software\Classes\.scr: AutoCADScriptFile => C:\WINDOWS\system32\notepad.exe "%1"

==================== Internet Explorer (Whitelisted) =============

HKU\S-1-5-21-3231952856-1019465751-811631384-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\ssv.dll [2021-10-25] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\jp2ssv.dll [2021-10-25] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-06-29] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\hola.org -> hxxp://hola.org
IE trusted site: HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\sharepoint.com -> hxxps://zstgmdrasov-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 06:49 - 2024-11-28 15:15 - 000005724 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 genuine-software2.autodesk.com # Block Autodesk AutoCAD Servers
127.0.0.1 ase-cdn-stg.autodesk.com
127.0.0.1 ase.autodesk.com
0.0.0.0 autodesk.fi
0.0.0.0 autodesk.de
0.0.0.0 autodesk.es
0.0.0.0 autodesk.ca
0.0.0.0 autodesk.dk
0.0.0.0 autodesk.pl
0.0.0.0 ns1.autodesk.com
0.0.0.0 ns2.autodesk.com
0.0.0.0 ns3.autodesk.com
0.0.0.0 a.gtld-servers.net
0.0.0.0 b.gtld-servers.net
0.0.0.0 c.gtld-servers.net
0.0.0.0 d.gtld-servers.net
0.0.0.0 e.gtld-servers.net
0.0.0.0 f.gtld-servers.net
0.0.0.0 g.gtld-servers.net
0.0.0.0 h.gtld-servers.net
0.0.0.0 i.gtld-servers.net
0.0.0.0 j.gtld-servers.net
0.0.0.0 k.gtld-servers.net
0.0.0.0 l.gtld-servers.net
0.0.0.0 ns1.autodesk.com
0.0.0.0 m.gtld-servers.net
0.0.0.0 adobeereg.com
0.0.0.0 126114-app1.autodesk.com
0.0.0.0 94175-app1.autodesk.com
0.0.0.0 94184-app2.autodesk.com

There are 114 more lines.


==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.1.1
Windows Firewall is enabled.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
Wi-Fi: Intel(R) Dual Band Wireless-AC 3165 -> Netwtw04.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\;C:\Program Files\Calibre2\
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\lenovo\lenovowallpaper.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "Autodesk Access Service"
HKLM\...\StartupApproved\Run: => "Autodesk Access"
HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App"
HKLM\...\StartupApproved\Run32: => "Bonus.SSR.FR12"
HKU\S-1-5-21-3231952856-1019465751-811631384-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{148E7D43-9A73-4603-85F1-A499A8A75426}C:\tizen-studio\tools\sdb.exe] => (Allow) C:\tizen-studio\tools\sdb.exe => No File
FirewallRules: [TCP Query User{15088D32-B9E0-44A6-B020-C8173BE498D4}C:\tizen-studio\tools\sdb.exe] => (Allow) C:\tizen-studio\tools\sdb.exe => No File
FirewallRules: [UDP Query User{996AFB30-04D5-4209-8A6B-D83DA38F7674}C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe
FirewallRules: [TCP Query User{3B32AE94-FFBA-44A4-977E-037E71F2C5CF}C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe
FirewallRules: [{F229238A-D239-4037-A9E5-78CFF6EEF5E6}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{B45FDAAA-4679-4B7C-A6F8-3D7BD68E7ACF}C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe
FirewallRules: [TCP Query User{0A3F5A99-7606-4827-BECD-3784D2F2BCC5}C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin_experimental\sunnyhomewin\jdk-17.0.6\bin\java.exe
FirewallRules: [{3435932B-7CB2-4861-859F-25F499FFE5C8}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{3DE5EC64-1432-4079-85F0-92130329FF2C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.88.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C3DCD8FA-5556-421B-8F23-8439EE5EF3DD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.88.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{92DF6BFD-E348-4FA4-9CE6-69395AEF0079}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.88.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{51D9ACCD-698B-4096-87D4-846F3EE36AC3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.88.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8EAAA779-F9C0-48B5-9434-721D377F48CB}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [UDP Query User{E8E2499F-4F95-4D9D-9C37-7FB61018DA86}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{7350C966-40C8-45D2-A353-B9E96E6609BC}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{D9E71844-B62B-406A-B7D7-1BFC4A99B765}] => (Allow) C:\Program Files (x86)\FIFA19\FIFASetup\fifaconfig.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{68869588-0F0D-4BFA-8A78-D82288414A9E}] => (Allow) C:\Program Files (x86)\FIFA19\FIFASetup\fifaconfig.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{2F78084C-F2A2-45CB-B959-5D9FA0E4162A}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{D846A304-824E-4176-9CB0-2C4BDDBC626D}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{05AC3A0F-5C9D-4148-9158-A7E4440ABE11}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{095E8528-0149-4A50-A838-9247A041FC00}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{8F24FCDA-3FEC-4CAF-A383-EDF91CA1B2AB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C267C6E7-F616-4E26-AC97-13AF4671B0FA}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{347C3811-0109-43BB-B34C-C45047BC13DF}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [TCP Query User{83FAB628-FC4D-49A0-BA64-02A66D9F1A46}C:\program files (x86)\fifa19\fifa19.exe] => (Block) C:\program files (x86)\fifa19\fifa19.exe (Failed to return cbHash #2, Error: 2147942593 -> Electronic Arts) [File not signed]
FirewallRules: [UDP Query User{52344EB8-2CF9-4F55-98E0-E77B079DDD6E}C:\program files (x86)\fifa19\fifa19.exe] => (Block) C:\program files (x86)\fifa19\fifa19.exe (Failed to return cbHash #2, Error: 2147942593 -> Electronic Arts) [File not signed]
FirewallRules: [TCP Query User{BBD1A384-7934-462A-8ADB-8E5E86FBF634}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{316B2FCA-EF86-47C7-8755-BD1DF851F527}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3B2A912D-FDA3-4AE7-BAC1-9076F68FD9BD}] => (Allow) C:\Program Files (x86)\eM Client\MailClient.exe (eM Client s.r.o. -> eM Client s.r.o.)
FirewallRules: [{85461371-7BEB-4380-9E99-5000B7E6A39E}] => (Allow) C:\Program Files (x86)\eM Client\MailClient.exe (eM Client s.r.o. -> eM Client s.r.o.)
FirewallRules: [{A2F751BE-2D05-405B-9C3D-2C05A2CE6448}] => (Allow) C:\Program Files (x86)\eM Client\MailClient.exe (eM Client s.r.o. -> eM Client s.r.o.)
FirewallRules: [{5E2BEFB0-B1A0-4B07-BB94-DBF67F2045FE}] => (Allow) C:\Program Files (x86)\eM Client\MailClient.exe (eM Client s.r.o. -> eM Client s.r.o.)
FirewallRules: [TCP Query User{10761921-3FED-4E95-8B9B-9222C36F74E8}C:\users\petr\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\petr\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{31382625-C62D-4B6E-95D6-3E4F6894EE36}C:\users\petr\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\petr\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{F7144D2C-DDE6-40F2-A28C-6FF9FE556052}C:\totalcmd\totalcmd64.exe] => (Block) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [UDP Query User{AF7046A1-0BF8-41EF-9B31-FCE28313FDA0}C:\totalcmd\totalcmd64.exe] => (Block) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [TCP Query User{9B4C9D2F-6DE9-4E35-B216-C666F4244AB8}C:\users\petr\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\petr\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{1B9EE180-98B7-48B5-BCC1-4BFC86C7B852}C:\users\petr\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\petr\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1C23E446-D8A0-4C85-882A-4CB76A40F0F4}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E9FCE90A-8DDB-4390-A558-1B7D853DB45B}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24004.1403.2634.2418_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{E42D0F7C-CD9E-48AC-A5B0-3E5F735F75E2}C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe => No File
FirewallRules: [UDP Query User{49EE2828-E2D2-41F6-BA70-92FAF3E8A7A9}C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe => No File
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{31C83078-8EE4-454E-9504-32654DFA113F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{988D9E2B-5B71-41A3-9B97-B3521E166039}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BC6BA8A3-F8E2-4A86-8FF5-60F35CE04C47}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F7C2E763-C6A7-4A9A-ADA0-6385E95384DB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

07-07-2026 23:31:34 Windows Update

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (07/06/2026 07:45:33 PM) (Source: Application Error) (EventID: 1000) (User: LAPTOP-CVO5E9CR)
Description: Název chybující aplikace: Hola-Setup.exe, verze: 1.254.572.0, časové razítko: 0x307c79fd
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.26100.8737, časové razítko: 0x7160435a
Kód výjimky: 0xe0434352
Posun chyby: 0x0016a394
ID chybujícího procesu: 0x1904
Čas spuštění chybující aplikace: 0x1dd0d6f3e558883
Cesta k chybující aplikaci: C:\Users\Petr\Downloads\Hola-Setup.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID sestavy: 0e00f651-0626-4ef8-b03a-f6aae9033f61
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (07/06/2026 07:45:33 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Hola-Setup.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.IO.IOException
at System.IO.__Error.WinIOError(Int32, System.String)
at System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
at System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
at System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean)
at System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean)
at System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding)
at hola_setup.Log..ctor()
at hola_setup.Log.get_Instance()
at hola_setup.App.Main()

Error: (07/06/2026 06:55:12 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x80070006, Neplatný popisovač..

Operace:
Spouštění asynchronní operace

Kontext:
Aktuální stav: DoSnapshotSet

Error: (07/05/2026 05:27:34 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 14092. ID zprávy: [0x2509].

Error: (07/05/2026 04:53:38 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 15812. ID zprávy: [0x2509].

Error: (07/05/2026 04:47:00 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 20548. ID zprávy: [0x2509].

Error: (07/04/2026 11:53:01 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 15316. ID zprávy: [0x2509].

Error: (07/02/2026 10:20:58 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Došlo k chybě při inicializaci infrastruktury připojení profilovacího rozhraní API. Tento proces neumožní připojení profileru. HRESULT: 0x80004005. ID procesu (desítkově): 9916. ID zprávy: [0x2509].


System errors:
=============
Error: (07/08/2026 12:04:28 PM) (Source: Netwtw04) (EventID: 5010) (User: )
Description: Intel(R) Dual Band Wireless-AC 3165 : Síťový adaptér vrátil ovladači neplatnou hodnotu.
5010 - Driver DBG_ASSERT - instead of BSOD

Error: (07/07/2026 11:34:19 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.

Error: (07/06/2026 08:09:23 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného uživatelem se nepodařilo zvětšit úložiště stínové kopie.

Error: (07/06/2026 07:19:25 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Služba přidružení zařízení zjistila chybu zjišťování koncového bodu.

Error: (07/04/2026 05:04:44 PM) (Source: volsnap) (EventID: 35) (User: )
Description: Stínové kopie svazku C: byly přerušeny, protože se nepodařilo zvětšit úložiště stínové kopie.

Error: (07/04/2026 12:24:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9WZDNCRFJBH4-Microsoft.Windows.Photos.

Error: (07/04/2026 11:50:28 AM) (Source: disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk2\DR5.

Error: (07/04/2026 11:50:28 AM) (Source: disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR4.


Windows Defender:
================
TimeCreated : 06.07.2026 19:55:05
(Message : Antivirová ochrana v programu Microsoft Defender śсªņ ђąś ъėěл šŧŏррέð ь℮ƒбŕë ćоmφĺęťιòń.%л %ţŠĉαπ ĮÐ:%ь{) (A9056116-618F-4FCD-B6F1-17FA7C952F4F}%ή %ţŠсǻʼn Τγρ℮:%вAntimalwarový program%п %ťЅсäй Ρаѓаměτзřѕ:%ъRychlé ) (prohledávání%й %ťÙŝěя:%ьNT AUTHORITY\SYSTEM%л %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺέδ şćâñ ẁąś šķĭρφзð ъĕčàùşė ţнε ľāş) (ţ şúċçзśšƒцŀ şçäπ шªš ẃιтћΐπ тĥé ľäšτ 7 đâýš)
TimeCreated : 05.07.2026 18:36:33
(Message : Antivirová ochrana v programu Microsoft Defender śсªņ ђąś ъėěл šŧŏррέð ь℮ƒбŕë ćоmφĺęťιòń.%л %ţŠĉαπ ĮÐ:%ь{) (2D57855B-D1B8-4908-BC2A-EC3E6290E57D}%ή %ţŠсǻʼn Τγρ℮:%вAntimalwarový program%п %ťЅсäй Ρаѓаměτзřѕ:%ъRychlé ) (prohledávání%й %ťÙŝěя:%ьNT AUTHORITY\SYSTEM%л %ťŠŧōφ Гεαšöŋ:%вЯРČ çőпήзćťíσп гŭⁿđŏщи)
TimeCreated : 05.07.2026 17:24:09
(Message : Antivirová ochrana v programu Microsoft Defender śсªņ ђąś ъėěл šŧŏррέð ь℮ƒбŕë ćоmφĺęťιòń.%л %ţŠĉαπ ĮÐ:%ь{) (A238DEA7-501B-4337-8EB7-C8DD9A314972}%ή %ţŠсǻʼn Τγρ℮:%вAntimalwarový program%п %ťЅсäй Ρаѓаměτзřѕ:%ъRychlé ) (prohledávání%й %ťÙŝěя:%ьNT AUTHORITY\SYSTEM%л %ťŠŧōφ Гεαšöŋ:%вЯРČ çőпήзćťíσп гŭⁿđŏщи)
TimeCreated : 04.07.2026 17:33:31
(Message : Antivirová ochrana v programu Microsoft Defender śсªņ ђąś ъėěл šŧŏррέð ь℮ƒбŕë ćоmφĺęťιòń.%л %ţŠĉαπ ĮÐ:%ь{) (963F95B4-B588-4858-A792-801AD54039B5}%ή %ţŠсǻʼn Τγρ℮:%вAntimalwarový program%п %ťЅсäй Ρаѓаměτзřѕ:%ъRychlé ) (prohledávání%й %ťÙŝěя:%ьNT AUTHORITY\SYSTEM%л %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺέδ şćâñ ẁąś šķĭρφзð ъĕčàùşė ţнε ľāş) (ţ şúċçзśšƒцŀ şçäπ шªš ẃιтћΐπ тĥé ľäšτ 7 đâýš)
TimeCreated : 04.07.2026 12:22:59
(Message : Antivirová ochrana v programu Microsoft Defender śсªņ ђąś ъėěл šŧŏррέð ь℮ƒбŕë ćоmφĺęťιòń.%л %ţŠĉαπ ĮÐ:%ь{) (29A4EF6B-8FCB-4CDE-AC63-382A112B3E8E}%ή %ţŠсǻʼn Τγρ℮:%вAntimalwarový program%п %ťЅсäй Ρаѓаměτзřѕ:%ъRychlé ) (prohledávání%й %ťÙŝěя:%ьNT AUTHORITY\SYSTEM%л %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺέδ şćâñ ẁąś šķĭρφзð ъĕčàùşė ţнε ľāş) (ţ şúċçзśšƒцŀ şçäπ шªš ẃιтћΐπ тĥé ľäšτ 7 đâýš)
TimeCreated : 01.07.2026 17:11:41
(Message : Antivirová ochrana v programu Microsoft Defender śсªņ ђąś ъėěл šŧŏррέð ь℮ƒбŕë ćоmφĺęťιòń.%л %ţŠĉαπ ĮÐ:%ь{) (6787A757-9E6F-46D5-AE6B-2DF4C1296CBC}%ή %ţŠсǻʼn Τγρ℮:%вAntimalwarový program%п %ťЅсäй Ρаѓаměτзřѕ:%ъRychlé ) (prohledávání%й %ťÙŝěя:%ьNT AUTHORITY\SYSTEM%л %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺέδ şćâñ ẁąś šķĭρφзð ъĕčàùşė ţнε ľāş) (ţ şúċçзśšƒцŀ şçäπ шªš ẃιтћΐπ тĥé ľäšτ 7 đâýš)
TimeCreated : 30.06.2026 19:35:42
(Message : Antivirová ochrana v programu Microsoft Defender śсªņ ђąś ъėěл šŧŏррέð ь℮ƒбŕë ćоmφĺęťιòń.%л %ţŠĉαπ ĮÐ:%ь{) (D6E600E9-BF65-4DCB-AD27-6B87F15C1AAE}%ή %ţŠсǻʼn Τγρ℮:%вAntimalwarový program%п %ťЅсäй Ρаѓаměτзřѕ:%ъRychlé ) (prohledávání%й %ťÙŝěя:%ьNT AUTHORITY\SYSTEM%л %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺέδ şćâñ ẁąś šķĭρφзð ъĕčàùşė ţнε ľāş) (ţ şúċçзśšƒцŀ şçäπ шªš ẃιтћΐπ тĥé ľäšτ 7 đâýš)
TimeCreated : 29.06.2026 17:31:49
(Message : Antivirová ochrana v programu Microsoft Defender śсªņ ђąś ъėěл šŧŏррέð ь℮ƒбŕë ćоmφĺęťιòń.%л %ţŠĉαπ ĮÐ:%ь{) (EE52E97C-D21A-4187-AAB8-1C44CA9ACBDC}%ή %ţŠсǻʼn Τγρ℮:%вAntimalwarový program%п %ťЅсäй Ρаѓаměτзřѕ:%ъRychlé ) (prohledávání%й %ťÙŝěя:%ьNT AUTHORITY\SYSTEM%л %ťŠŧōφ Гεαšöŋ:%вŞςћēðµĺέδ şćâñ ẁąś šķĭρφзð ъĕčàùşė ţнε ľāş) (ţ şúċçзśšƒцŀ şçäπ шªš ẃιтћΐπ тĥé ľäšτ 7 đâýš)

CodeIntegrity:
===============
Date: 2026-06-25 09:32:57
Description:
Code Integrity determined that a process (Winload) attempted to load system32\drivers\aswElam.sys that did not meet the Authenticode signing level requirements or violated code integrity policy (Policy ID:{60fd87f8-4593-44a0-91b0-2e0da022f248}).

Date: 2026-06-25 09:32:57
Description:
The driver system32\drivers\aswElam.sys is blocked from loading as the driver has been revoked by Microsoft.


==================== Memory info ===========================

BIOS: LENOVO 6SCN54WW 05/17/2021
Motherboard: LENOVO LNVNB161216
Processor: Intel(R) Core(TM) i5-8250U CPU @ 1.60GHz
Percentage of memory in use: 85%
Total physical RAM: 7613.43 MB
Available physical RAM: 1127.48 MB
Total Virtual: 11850.62 MB
Available Virtual: 3735.15 MB

==================== Drives ================================

Drive c: (Windows-SSD) (Fixed) (Total:237.23 GB) (Free:11.17 GB) (Model: SAMSUNG MZALQ256HAJD-000L2) NTFS

\\?\Volume{3944c868-d993-4fad-89d1-4a62e0d8abf9}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.24 GB) NTFS
\\?\Volume{65b7ba2c-048c-4020-b359-4c7f8094bba3}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.21 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: C27D31B5)

Partition: GPT.

==================== End of Addition.txt =======================

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
AlternateDataStreams: C:\WINDOWS\system32\Drivers\jirjuevi.sys:changelist [890]
FirewallRules: [UDP Query User{148E7D43-9A73-4603-85F1-A499A8A75426}C:\tizen-studio\tools\sdb.exe] => (Allow) C:\tizen-studio\tools\sdb.exe => No File
FirewallRules: [TCP Query User{15088D32-B9E0-44A6-B020-C8173BE498D4}C:\tizen-studio\tools\sdb.exe] => (Allow) C:\tizen-studio\tools\sdb.exe => No File
FirewallRules: [TCP Query User{E42D0F7C-CD9E-48AC-A5B0-3E5F735F75E2}C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe => No File
FirewallRules: [UDP Query User{49EE2828-E2D2-41F6-BA70-92FAF3E8A7A9}C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe] => (Allow) C:\users\petr\desktop\sunnyhomewin\jdk-17.0.6\bin\java.exe => No File
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Task: {E727B56B-E56C-4EF1-8C88-BF74A6EBF600} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBoostAddin.Prompt => C:\Program Files (x86)\Lenovo\VantageService\4.0.52.0\ScheduleEventAction.exe LenovoBoostAddin.Prompt (No File)
Task: {CC30D9ED-72AF-4D6E-A5A6-8AE3840C311E} - System32\Tasks\Lenovo\Vantage\Schedule\NotificationCenter => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe NotificationCenter (No File)
Task: {12A1993F-5251-4E31-93C0-8F4862DB2343} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\\uninstall.exe /repair (No File)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {F6F92FD5-FA1A-45CD-9F9A-F550A4FE2DE4} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {A83936AB-5BDC-4B9F-B814-4251912556F1} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {604E0FD2-5E03-4C5E-8AF7-CACBCBFFD85F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
C:\DumpStack.log.tmp

EmptyTemp:
Hosts:

End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 07-07-2026 01
Ran by Petr (09-07-2026 17:22:06) Run:5
Running from C:\Users\Petr\Desktop
Loaded Profiles: Petr
Boot Mode: Normal
==============================================

fixlist content:
*****************

*****************


==== End of Fixlog 17:22:06 ====

cudla11 napsal: Dnes 16:22 Fix result of Farbar Recovery Scan Tool (x64) Version: 07-07-2026 01
Ran by Petr (09-07-2026 17:22:06) Run:5
Running from C:\Users\Petr\Desktop
Loaded Profiles: Petr
Boot Mode: Normal
==============================================

fixlist content:
*****************

*****************


==== End of Fixlog 17:22:06 ====

Nějaký nesmysl. Fixlog vypadá přibližně takto: https://forum.viry.cz/viewtopic.php?p=1561117#p1561117. Toto je pouze hlavička a závěr logu. To, co má být mezi tím, chybí. Zkuste znovu.