Kontrola notebooku
Odeslal: 14 Srp 2026 20:08
Prosím o kontrolu - pomalý notebook, velké vytížení paměti.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-08-2026 01
Ran by pavuky (administrator) on LUDVA (HP HP Laptop 17-ca1xxx) (14-08-2026 19:28:11)
Running from C:\Users\pavuk\Downloads\FRST64.exe
Loaded Profiles: pavuky
Platform: Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2631.102.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe
(C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointGpuInfo.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\AppHelperCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\BridgeCommunication.exe
(DriverStore\FileRepository\u0373104.inf_amd64_beb660c61c852a40\B373048\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0373104.inf_amd64_beb660c61c852a40\B373048\atieclxx.exe
(explorer.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2631.102.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek) C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Media Network\HPMediaNetwork.exe
(HP Inc. -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe <11>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <38>
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0373104.inf_amd64_beb660c61c852a40\B373048\atiesrxx.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc; HP Development Company, L.P.) C:\Program Files\HP\HP One Agent\hp-one-agent-service.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.6.1.0_x64__v10z8vjag6ke6\DialogHost\ReconsentNotification.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2606.0.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1082144 2020-04-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2097600 2018-04-18] (Realtek Semiconductor Corp. -> Realtek)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe [80543384 2026-07-27] (Google LLC -> Google LLC.)
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919336 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe [80543384 2026-07-27] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919336 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe [80543384 2026-07-27] (Google LLC -> Google LLC.)
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45626272 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\Run: [HPSEU_Host_Launcher] => C:\Program Files\HP\HP System Event Utility\Host Launcher\HpseuHostLauncher.exe [545864 2025-11-08] (HP Inc. -> HP Inc.)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe [80543384 2026-07-27] (Google LLC -> Google LLC.)
HKLM\...\Windows x64\Print Processors\Canon TS3100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDR.DLL [482816 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series: C:\WINDOWS\system32\CNMLMDR.DLL [1302016 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series XPS: C:\WINDOWS\system32\CNMXLMDR.DLL [1304064 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\WINDOWS\system32\pxcpmL.dll [2155776 2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
HKLM\...\Print\Monitors\PDFescape Desktop Monitor: C:\WINDOWS\system32\spool\DRIVERS\x64\pdfescape desktop_pdfpmon_v.4.12.26.3.dll [932984 2021-03-19] (PDF Tools AG -> PDF Tools AG (hxxp://www.pdf-tools.com))
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\151.0.7922.138\Installer\chrmstp.exe [7602840 2026-08-14] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {9F8A2703-AC1B-4818-BBF5-7F32A115A225} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {2A3F4BDD-A207-4261-B148-930DEB9A24B6} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_453_Plugin.exe [1502776 2020-12-03] (Adobe Inc. -> Adobe)
Task: {4357130F-D3C2-4CA0-889F-C0577C4A6BE7} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{F9C15691-2728-4C83-9A55-C5BA28FC9381} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {E70DE904-D13F-46E5-BC22-E0712F9AE392} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{6D99ABFE-77F3-4EB6-A278-C42CC8E33ED5} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {CA3E7E42-EBC1-4251-B3B2-43FC14349CE7} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {8B35B6D0-A273-4609-B0AA-F792405A3DC0} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [5074848 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc. All rights reserved.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "4ad08d92-797e-4ced-af6c-290f91a208f3" --version "6.25.11093" --silent
Task: {AA846480-2955-4709-A158-9E49BA715F66} - System32\Tasks\CCleanerSkipUAC - pavuky => C:\Program Files\CCleaner\CCleaner.exe [39449504 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {82E4DABD-F3B6-473A-8F3F-96FBF6A2578C} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [3373256 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
Task: {3A1FA7FE-3F79-421F-B14D-AB93E62F6B0A} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{9B71B29D-8B5C-4607-A318-1D9849D64767} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {A6F58269-1234-4E5B-85A1-6F6664047CEC} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {D165D261-FA96-483D-B5AA-554C880025C4} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {C87300B1-EA4F-4071-A473-13B96DB66DA6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [1025096 2026-07-02] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {81A84996-72D0-41B2-A5F9-CBE7D043A92F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [480264 2026-07-02] (HP Inc. -> HP Inc.)
Task: {065F4B8D-4FEF-4DB7-BE6F-3B274D163326} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-08-13] (HP Inc. -> HP Inc.)
Task: {F1F4BFC8-DB66-45CB-B147-B7A0E9376B3C} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-08-13] (HP Inc. -> HP Inc.)
Task: {7B899FF8-3035-400C-801C-93227432BCFD} - System32\Tasks\HPOneAgentRepairTask => C:\ProgramData\Package Cache\{AC8A18BC-B573-49EB-9682-F0ECED135435}\HPOneAgent.exe [1170112 2026-07-20] (HP Inc. -> HP Inc; HP Development Company, L.P.)
Task: {D5B78230-9864-45B6-9A5E-945F9F83BA3D} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2023-03-20] () [File not signed]
Task: {4D5CEA6D-BEB3-4E9D-B08D-9059A9466702} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16782208 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {E3696B14-606D-4A23-ACE4-707251EC6947} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28726080 2026-08-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {6C03D788-2697-4DCC-8AB2-F79D64CAF297} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [74160 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {EA89EA13-19CC-4682-AA3F-D0A0B1BFD22C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28726080 2026-08-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {5AC2806B-4834-4911-8A23-08884482A4C8} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [441632 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {8E5E37D6-50E5-4EF3-8E21-DF3DC51EE9B0} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [441632 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {AF8BA207-9FD2-4551-8D2E-524D70B20FAB} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1370480 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {4E471246-817F-482A-A413-0D399800E281} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16782208 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {27B592DB-5B06-44CA-958F-A9D5C41622CE} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => %SystemRoot%\system32\clipesu.exe (No File)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {9A2887A4-4241-4A02-937B-63EE08DE87FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)
Task: {85E30EB0-C1CF-453B-914B-40B3D7F9E0EB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC Reboot (No File)
Task: {95832760-0DD9-41BA-A95A-C0B54C87B640} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery Reboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {F4B0D169-2EC1-49DD-947D-D3DC351ED71E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0636A128-66F6-41B2-8896-9829C04DEBE0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B72B1F83-4865-4557-ADD7-6035868FCF3B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {701CAD1F-9AF3-4A4E-96C1-05676F612245} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {21B925DF-2917-412F-A107-89FA873C2B32} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2401873512-1259376139-3579719326-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [704640 2026-08-13] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {D0E1B34E-2FAF-42EB-9D11-7D3B03CDA65D} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-08-13] (Mozilla Corporation -> Mozilla Foundation)
Task: {8E406788-4532-4221-BD17-A3CDC7A401E9} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {BED7E824-E8D0-4F34-AD8A-561C04AD9EA5} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2401873512-1259376139-3579719326-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {74683ED9-401C-498D-A129-A2989252C0B8} - System32\Tasks\ReclaimerUpdateFiles_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /UpdateFiles (No File)
Task: {7578E36F-64F1-4C9F-B641-11089F232581} - System32\Tasks\ReclaimerUpdateXML_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /UpdateXML (No File)
Task: {FD2D5EE8-B57C-45C8-82E7-17C347CC3955} - System32\Tasks\Remove AdwCleaner Application => C:\WINDOWS\system32\CMD.EXE [344064 2026-08-13] (Microsoft Windows -> Microsoft Corporation) -> /C DEL /F /Q "C:\Users\pavuk\Downloads\AdwCleaner.exe"
Task: {87DF74D5-3C2E-47DE-8D1A-4B7B1437CF6F} - System32\Tasks\RNUpgradeHelperLogonPrompt_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /prompt os_boot (No File)
Task: {C57A4A0B-3541-4132-9A9C-1CEACF7C8857} - System32\Tasks\RNUpgradeHelperResumePrompt_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /prompt os_resume (No File)
Task: {F6B3018E-C9B7-41CA-969C-732A1C0DE44D} - System32\Tasks\S-1-5-21-2401873512-1259376139-3579719326-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe (No File)
Task: {45BD8758-9680-4291-9F3B-31FAEFE7465B} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [49032 2018-12-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {7A623922-2D6A-4DC0-AF95-79CF968D74B7} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe [63880 2018-12-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {0F325BBF-730E-4BB9-8C04-E28989290DF2} - System32\Tasks\Uninstall AdwCleaner Application => C:\Users\pavuk\Downloads\AdwCleaner.exe [9566696 2026-07-20] (Malwarebytes Inc. -> Malwarebytes)
Task: {9CDD2FC4-F27A-4F27-AD5C-D319F4917890} - System32\Tasks\WD Device Agent Task pavuky => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [727384 2024-08-16] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {8619455B-F773-4CB3-92B6-49C0EE8802F0} - System32\Tasks\WD Discovery Service Task pavuky => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [82264 2024-08-16] (Western Digital Technologies, Inc. -> )
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{01eaf30d-0f97-4cff-95d8-bfe2aa7c513e}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{22ded6cb-3864-4466-88a1-8a935a0bdc2a}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{22ded6cb-3864-4466-88a1-8a935a0bdc2a}: [DhcpDomain] .
Tcpip\..\Interfaces\{465785fe-b270-4c9f-bb65-78f57de96d21}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{465785fe-b270-4c9f-bb65-78f57de96d21}: [DhcpDomain] .
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: tqo98esj.test -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test [2026-08-14]
FF DownloadDir: C:\Users\pavuk\Downloads
FF Homepage: Mozilla\Firefox\Profiles\tqo98esj.test -> seznam.cz
FF NewTab: Mozilla\Firefox\Profiles\tqo98esj.test -> hxxps://securesearch.org/homepage?hp=2&pId=BC180101&iDate=2020-12-28 10:42:45&iid=ae738d36-e6c7-4285-889d-b76c3c845805&bName=
FF Session Restore: Mozilla\Firefox\Profiles\tqo98esj.test -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\tqo98esj.test -> hxxps://home.netatmo.com; hxxps://aukro.cz
FF Extension: (Použijte Google překladač) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2026-07-23]
FF Extension: (Privacy Badger) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2026-07-23]
FF Extension: (uBlock Origin) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\uBlock0@raymondhill.net.xpi [2026-07-23]
FF Extension: (Bulk Media Downloader) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\{72b2e02b-3a71-4895-886c-fd12ebe36ba3}.xpi [2018-03-03]
FF Extension: (No Name) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2026-07-23]
FF ProfilePath: C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\l9169vx7.39mx0k8b.default-release [2026-07-21]
FF ProfilePath: C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox [2025-05-11]
FF Homepage: C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox -> seznam.cz
FF Session Restore: C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox -> is enabled.
FF Extension: (Záložky na iCloudu) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\firefoxdav@icloud.com.xpi [2025-05-11]
FF Extension: (To Google Translate) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2025-05-11]
FF Extension: (Privacy Badger) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2025-05-11]
FF Extension: (URL to QR code) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\jid1-ZSMfwe4lCAw9oQ@jetpack.xpi [2025-05-11]
FF Extension: (Torrentz2 Magnet Links +) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\ohmugin-tzmec@gmail.com.xpi [2025-05-11]
FF Extension: (Titulky++) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\titulkyplus@idzor.cf.xpi [2025-05-11]
FF Extension: (uBlock Origin) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\uBlock0@raymondhill.net.xpi [2025-05-11]
FF Extension: (DuckDuckGo Search) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{37220c34-b538-4f3e-af3d-47aa40026683}.xpi [2025-05-11]
FF Extension: (Search on Google Lens) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{56b8308e-566b-4dc0-9957-f6341ceb8552}.xpi [2025-05-11]
FF Extension: (Video DownloadHelper) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-05-11]
FF Extension: (No Name) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2025-05-11]
FF HKLM\...\Firefox\Extensions: [pdfescape_desktop_conv_v.1@pdfescape.com] - C:\Program Files\PDFescape Desktop\creator\plugins\FirefoxAddin\pdfescape_desktop_conv_v.1@pdfescape.com.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [pdfescape_desktop_conv_v.1@pdfescape.com] - C:\Program Files\PDFescape Desktop\creator\plugins\FirefoxAddin\pdfescape_desktop_conv_v.1@pdfescape.com.xpi => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_453.dll [2020-12-03] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\dtplugin\npDeployJava1.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\plugin2\npjp2.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-06-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-02-17] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_453.dll [2020-12-03] (Adobe Inc. -> )
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2019-07-02] (CANON INC.) [File not signed]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2026-06-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-06-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\pavuk\AppData\Local\Microsoft\Edge\User Data\Default [2026-07-21]
Edge Extension: (Dokumenty Google offline) - C:\Users\pavuk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-10-16]
Edge Extension: (Edge relevant text changes) - C:\Users\pavuk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-04]
Chrome:
=======
CHR Profile: C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default [2026-08-13]
CHR Notifications: Default -> hxxps://nomadsfit.com; hxxps://sdilej.cz; hxxps://www.facebook.com
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Session Restore: Default -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2026-08-13]
CHR Extension: (Video Downloader Plus) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjljdgfhkjbdbkcdkfojleidpldagmao [2025-04-20]
CHR Extension: (Fax.Plus - přijímání a odesílání faxů online) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhbnflghagkonoikejjbjinpbdcjjlbo [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-08-13]
CHR Extension: (Verifee) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\kaamlhinjaceanpdanmagllfeoelcfhl [2024-12-11]
CHR Extension: (Video Download Helper) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2026-08-13]
CHR Extension: (Video Downloader PLUS) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\njgehaondchbmjmajphnhlojfnbfokng [2024-07-27]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-03-15] [UpdateUrl:0] <==== ATTENTION
CHR HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
Opera:
=======
OPR Profile: C:\Users\pavuk\AppData\Roaming\Opera Software\Opera Stable [2026-07-21]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=o ... utEncoding}
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft, Inc. -> ArcSoft Inc.)
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
S4 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-03] (Adobe Inc. -> Adobe)
S4 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1085856 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
S4 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe [9728 2024-08-18] (GuinpinSoft inc) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13546384 2026-08-04] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncHelper.exe [3524664 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
S3 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2015-03-27] (Firebird Project) [File not signed]
S3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [3829760 2015-03-27] (Firebird Project) [File not signed]
S4 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [82216 2020-12-29] (Mixbyte Inc -> Freemake)
R2 hp-one-agent-service; C:\Program Files\HP\HP One Agent\hp-one-agent-service.exe [2457512 2026-06-15] (HP Inc. -> HP Inc; HP Development Company, L.P.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\AppHelperCap.exe [932032 2026-07-08] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\DiagsCap.exe [929984 2026-07-08] (HP Inc. -> HP Inc.)
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [478056 2018-06-01] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\NetworkCap.exe [925888 2026-07-08] (HP Inc. -> HP Inc.)
S4 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243720 2026-08-13] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\SysInfoCap.exe [1029832 2026-07-08] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe [639784 2025-10-01] (HP Inc. -> HP Inc.)
S3 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460992 2025-04-18] (Canon Inc. -> )
S3 luminati_net_updater_win_formatfactory_pcfreetime_com; C:\Program Files\FormatFactory\net_updater64.exe [10302056 2026-03-20] (Bright Data Ltd -> BrightData Ltd. (certified))
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpDefenderCoreService.exe [2113568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.196.0929.0005\OneDriveUpdaterService.exe [3867704 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
S4 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [372736 2024-01-03] (Western Digital Technologies, Inc.) [File not signed]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\NisSrv.exe [5183648 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MsMpEng.exe [291352 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.225\WsAppService.exe [473824 2017-05-05] (Wondershare Technology Co.,Ltd -> Wondershare)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AKCCID; C:\WINDOWS\System32\drivers\AKCCID.sys [87208 2024-03-26] (Alcorlink Corp. -> Generic)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [143904 2020-05-11] (Alcorlink Corp. -> )
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [518664 2020-11-03] (Avast Software s.r.o. -> AVAST Software)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-06-23] (Microsoft Corporation) [File not signed]
S3 e2eVAWdm; C:\WINDOWS\System32\drivers\VAud_WDM.sys [112696 2017-07-12] (ARTRAY CO., LTD. -> e2eSoft)
R2 googledrivefs31931; \??\C:\Program Files\Google\Drive File Stream\Drivers\31931\googledrivefs31931.sys [386256 2025-05-05] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1421dec2010cc057\x64\hpcustomcapdriver.sys [18984 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-29] (Microsoft Windows -> Microsoft Corporation)
S3 ManyCam; C:\WINDOWS\system32\DRIVERS\mcvidrv.sys [65448 2023-01-17] (ManyCam ULC -> ManyCam ULC)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2018-05-04] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R2 npf; \??\C:\WINDOWS\system32\drivers\npf.sys [36600 2018-12-07] (Riverbed Technology, Inc. -> )
R2 speedfan; \??\C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> )
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2018-05-04] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 UsbNcm; C:\WINDOWS\System32\DriverStore\FileRepository\usbncm.inf_amd64_507538fd4ad98089\UsbNcm.sys [212992 2026-08-13] (Microsoft Windows -> )
S3 VCamSDK; C:\WINDOWS\system32\DRIVERS\VCamSDK.sys [1090904 2019-12-22] (Shanghai Yitu Information Technology Co.,Ltd. -> e2eSoft)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-08-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [25704 2022-10-03] (WDKTestCert user,132375440089837053 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [625688 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [111640 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40208 2026-06-18] (HP Inc. -> HP)
R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_bce55ac535cb3902\WSDScan.sys [61440 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-08-14 19:28 - 2026-08-14 19:30 - 000040954 _____ C:\Users\pavuk\Downloads\FRST.txt
2026-08-14 19:26 - 2026-08-14 19:26 - 002448384 _____ (Farbar) C:\Users\pavuk\Downloads\FRST64.exe
2026-08-14 19:17 - 2026-08-14 19:17 - 000388608 _____ (Trend Micro Inc.) C:\Users\pavuk\Downloads\hijackthis.exe
2026-08-13 12:59 - 2026-08-13 12:59 - 000747294 _____ C:\WINDOWS\system32\perfh005.dat
2026-08-13 12:59 - 2026-08-13 12:59 - 000170868 _____ C:\WINDOWS\system32\perfc005.dat
2026-08-13 12:41 - 2026-08-14 12:46 - 000003714 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{44DC640E-0158-49BF-8CF3-5693EA9B06D6}
2026-08-13 12:41 - 2026-08-14 12:46 - 000003588 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{7183DF2B-E4A9-4C75-9F16-3982355AB668}
2026-08-13 11:34 - 2026-08-14 17:56 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-08-13 07:26 - 2026-08-13 07:26 - 000038723 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-08-13 07:26 - 2026-08-13 07:26 - 000038723 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-07-26 10:50 - 2026-07-26 11:00 - 4191288441 _____ C:\Users\pavuk\Downloads\Bílá+paní+1965+CZ+dabing+1080p+FHD.mp4
2026-07-23 18:43 - 2026-07-23 18:43 - 000000000 ____D C:\Users\pavuk\Downloads\BILA LUCIE - [1992] - Missariel (MP3.CBR.320)
2026-07-22 02:37 - 2026-07-22 02:42 - 2185388019 _____ C:\Users\pavuk\Downloads\Ja+milujem,+ty+miluješ+1980+SK+dabing+1080p+FHD.mkv
2026-07-22 01:41 - 2026-07-22 01:43 - 962213336 _____ C:\Users\pavuk\Downloads\Příliš+hlučná+samota.mkv
2026-07-21 16:47 - 2026-07-21 16:47 - 000000000 ____D C:\Users\pavuk\AppData\Local\MicrosoftEdge
2026-07-21 16:32 - 2026-08-14 19:29 - 000000000 ____D C:\FRST
2026-07-21 16:25 - 2026-07-21 16:25 - 000001722 _____ C:\Users\pavuk\OneDrive\Plocha\Rkill.txt
2026-07-21 00:47 - 2026-07-21 15:49 - 000000000 ____D C:\AdwCleaner
2026-07-20 19:24 - 2026-07-20 19:24 - 009566696 _____ (Malwarebytes) C:\Users\pavuk\Downloads\AdwCleaner.exe
2026-07-20 19:23 - 2026-07-21 16:07 - 000002576 _____ C:\WINDOWS\system32\Tasks\Remove AdwCleaner Application
2026-07-20 19:23 - 2026-07-21 16:07 - 000002558 _____ C:\WINDOWS\system32\Tasks\Uninstall AdwCleaner Application
2026-07-20 18:44 - 2026-07-20 18:44 - 000000000 ____D C:\WINDOWS\Minidump
2026-07-20 08:09 - 2026-07-20 08:09 - 000000000 ____D C:\WINDOWS\Panther
2026-07-19 19:27 - 2026-07-19 19:27 - 000004977 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-07-19 19:27 - 2026-07-19 19:27 - 000004647 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-07-19 19:27 - 2026-07-19 19:27 - 000004647 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-07-19 19:27 - 2026-07-19 19:27 - 000004647 _____ C:\WINDOWS\system32\ResPriImageList
2026-07-19 19:27 - 2026-07-19 19:27 - 000004647 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-07-19 19:27 - 2026-07-19 19:27 - 000004558 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-07-19 19:27 - 2026-07-19 19:27 - 000004558 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-07-19 19:26 - 2026-07-19 19:26 - 000087226 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-07-19 19:26 - 2026-07-19 19:26 - 000087226 _____ C:\WINDOWS\system32\ctac.json
2026-07-19 03:56 - 2026-07-19 03:56 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-08-14 19:20 - 2019-10-31 21:43 - 000000000 ____D C:\Users\pavuk\AppData\Local\D3DSCache
2026-08-14 19:19 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-08-14 19:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-08-14 18:16 - 2025-06-23 17:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-08-14 12:40 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-08-14 11:48 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-08-14 02:12 - 2023-01-22 19:24 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-08-13 17:48 - 2020-10-05 19:59 - 000000000 ____D C:\Users\pavuk\Downloads\seidl transport
2026-08-13 17:32 - 2022-12-18 22:02 - 000000000 ____D C:\Users\pavuk\OneDrive\Dokumenty\Soubory Outlooku
2026-08-13 17:32 - 2020-04-25 21:55 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Microsoft\Excel
2026-08-13 17:28 - 2019-10-31 21:42 - 000000000 ____D C:\Users\pavuk\AppData\Local\Packages
2026-08-13 13:12 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-08-13 12:59 - 2025-06-23 17:51 - 001841748 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-08-13 12:59 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-08-13 12:55 - 2025-06-23 17:51 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-08-13 12:55 - 2025-06-23 17:48 - 000006862 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-08-13 12:55 - 2025-05-11 15:08 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-08-13 12:55 - 2025-05-11 15:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-08-13 12:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-08-13 12:54 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-08-13 12:47 - 2018-11-07 08:47 - 000000000 ____D C:\ProgramData\Packages
2026-08-13 12:41 - 2026-01-03 14:37 - 000390784 _____ (Mozilla Foundation) C:\Users\pavuk\OneDrive\Plocha\Firefox.exe
2026-08-13 12:41 - 2025-06-23 17:51 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-08-13 12:41 - 2025-05-11 15:08 - 000001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-08-13 11:34 - 2025-06-23 17:46 - 000595696 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-08-13 11:33 - 2026-05-15 02:31 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-08-13 11:33 - 2025-12-10 21:43 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-08-13 11:33 - 2025-07-08 22:15 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-08-13 11:33 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-08-13 11:33 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-08-13 11:33 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\DiagTrack
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-08-13 11:33 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-08-13 07:44 - 2023-07-19 17:54 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-08-13 07:24 - 2025-06-23 17:50 - 003375104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-08-13 07:12 - 2018-11-07 08:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-08-13 07:11 - 2019-01-09 05:12 - 000000000 ____D C:\Program Files\HP
2026-08-13 07:09 - 2021-03-19 22:33 - 000000000 ____D C:\Program Files\Microsoft Office
2026-07-27 19:16 - 2021-09-24 08:50 - 000002180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2026-07-26 11:03 - 2025-02-28 21:05 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\vlc
2026-07-24 16:56 - 2020-11-05 22:42 - 000000000 ____D C:\Users\pavuk\AppData\Local\CrashDumps
2026-07-23 22:30 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-07-22 18:16 - 2019-10-31 22:00 - 000000000 ____D C:\Users\pavuk\AppData\Local\Comms
2026-07-22 09:40 - 2019-07-23 19:45 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2026-07-21 17:06 - 2019-11-16 19:15 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\uTorrent
2026-07-21 16:59 - 2025-06-23 17:51 - 000002256 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - pavuky
2026-07-21 16:59 - 2020-04-03 14:57 - 000000000 ____D C:\Program Files\CCleaner
2026-07-21 16:07 - 2025-06-23 17:51 - 000002836 _____ C:\WINDOWS\system32\Tasks\HPOneAgentRepairTask
2026-07-21 16:07 - 2025-06-23 17:51 - 000002262 _____ C:\WINDOWS\system32\Tasks\StartCN
2026-07-21 16:07 - 2025-06-23 17:51 - 000002176 _____ C:\WINDOWS\system32\Tasks\StartDVR
2026-07-21 16:06 - 2025-06-23 17:51 - 000003542 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2026-07-21 15:56 - 2025-11-13 01:59 - 000000000 ____D C:\Users\pavuk\AppData\LocalWondershare
2026-07-21 15:56 - 2020-12-06 12:36 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Wondershare
2026-07-21 15:56 - 2020-04-03 05:35 - 000000000 ____D C:\Users\pavuk\AppData\Local\Wondershare
2026-07-21 15:53 - 2020-10-06 18:18 - 000000000 ____D C:\ProgramData\SoftPerfect
2026-07-21 15:52 - 2025-03-13 01:22 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Nero
2026-07-21 15:52 - 2025-03-13 01:22 - 000000000 ____D C:\Users\pavuk\AppData\Local\Nero
2026-07-21 15:49 - 2019-10-31 22:03 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Hewlett-Packard
2026-07-21 15:49 - 2019-01-09 05:12 - 000000000 ____D C:\ProgramData\HP
2026-07-21 15:49 - 2019-01-09 05:12 - 000000000 ____D C:\Program Files (x86)\HP
2026-07-21 15:49 - 2018-12-25 02:48 - 000000000 ___HD C:\hp
2026-07-21 12:05 - 2019-07-23 19:46 - 000000000 ____D C:\ProgramData\Package Cache
2026-07-20 17:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-07-20 17:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2026-07-20 17:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-07-20 10:13 - 2025-09-04 22:19 - 000000000 ____D C:\ProgramData\CanonIJPLM
2026-07-20 01:45 - 2019-10-31 21:42 - 000000000 ____D C:\Users\pavuk\AppData\Local\ConnectedDevicesPlatform
2026-07-19 12:07 - 2019-10-31 23:14 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-07-19 04:00 - 2019-10-31 23:14 - 228534800 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Files in the root of some directories ========
2020-12-29 12:51 - 2020-12-29 13:01 - 000000004 _____ () C:\ProgramData\lock.dat
2020-12-29 12:52 - 2020-12-29 13:01 - 000000004 _____ () C:\ProgramData\rc.dat
2020-12-29 12:51 - 2020-12-29 12:51 - 000000008 _____ () C:\ProgramData\ts.dat
2013-02-26 08:34 - 2013-02-26 08:34 - 000234168 _____ (Beepa P/L) C:\Program Files\fraps32.dll
2013-02-26 08:34 - 2013-02-26 08:34 - 000068792 _____ (Beepa P/L) C:\Program Files\fraps64.dat
2013-02-26 08:34 - 2013-02-26 08:34 - 000186552 _____ (Beepa P/L) C:\Program Files\fraps64.dll
2024-08-18 19:01 - 2024-08-19 15:38 - 000099384 _____ () C:\Users\pavuk\AppData\Roaming\inst.exe
2024-08-18 19:01 - 2024-08-19 15:38 - 000007859 _____ () C:\Users\pavuk\AppData\Roaming\pcouffin.cat
2024-08-18 19:01 - 2024-08-19 15:38 - 000001167 _____ () C:\Users\pavuk\AppData\Roaming\pcouffin.inf
2024-08-18 19:01 - 2024-08-19 15:38 - 000000055 _____ () C:\Users\pavuk\AppData\Roaming\pcouffin.log
2024-08-18 19:01 - 2024-08-19 15:38 - 000082816 _____ (VSO Software) C:\Users\pavuk\AppData\Roaming\pcouffin.sys
2022-11-05 10:28 - 2024-11-06 23:32 - 000007601 _____ () C:\Users\pavuk\AppData\Local\Resmon.ResmonCfg
2021-09-23 19:23 - 2021-09-23 19:34 - 000017408 _____ () C:\Users\pavuk\AppData\Local\WebpageIcons.db
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-08-2026 01
Ran by pavuky (14-08-2026 19:33:07)
Running from C:\Users\pavuk\Downloads
Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) (2025-06-23 15:52:05)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2401873512-1259376139-3579719326-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-2401873512-1259376139-3579719326-503 - Limited - Disabled)
Guest (S-1-5-21-2401873512-1259376139-3579719326-501 - Limited - Disabled)
pavuky (DisplayName: l** **v) (S-1-5-21-2401873512-1259376139-3579719326-1001 - Administrators - Enabled) => C:\Users\pavuk
WDAGUtilityAccount (S-1-5-21-2401873512-1259376139-3579719326-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Enabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
3uTools(32bit) (HKLM-x32\...\3uToolsV3_x86) (Version: 3.02.012 - Shenzhen Aidapu Network Technology Co.,Ltd.)
Acronis Drivers (HKLM\...\{3BB511DE-CF00-4723-A89C-D7B7D6FADF11}) (Version: 27.0.39676 - Acronis) Hidden
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 25.001.21223 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.453 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Aegisub 3.2.2 (HKLM-x32\...\{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1) (Version: 3.2.2 - Aegisub Team)
Aegisub 3.4.2 (64bitový) (HKLM\...\{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1) (Version: 3.4.2 - Aegisub Team)
AMD Radeon Settings (HKLM\...\WUCCCApp) (Version: 2018.1218.1230.22499 - Advanced Micro Devices, Inc.)
ArcSoft WebCam Companion 4 (HKLM-x32\...\{AC5253C5-E282-4017-9740-DDA6ECF5C203}) (Version: 4.0.0.374 - ArcSoft)
aTube Catcher verze 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avidemux 2.4 (HKLM-x32\...\Avidemux 2.4) (Version: 2.4.0.3322 - )
Avidemux 2.7 - 32 bits (32-bit) (HKLM-x32\...\Avidemux 2.7 - 32 bits) (Version: 2.7.4.190815 - )
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.7.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX2 (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX2) (Version: 2.0.5.3 - Canon Inc.)
Canon IJ Printer Assistant Tool (HKLM-x32\...\Canon IJ Printer Assistant Tool) (Version: 1.65.1.09 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.4.0.16 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.4 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.8.5 - Canon Inc.)
Canon TS3100 series Elektronická příručka (HKLM-x32\...\Canon TS3100 series Elektronická příručka) (Version: 1.4.0 - Canon Inc.)
Canon TS3100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_TS3100_series) (Version: 1.01 - Canon Inc.)
Canon Wi-Fi Connection Assistant (HKLM-x32\...\Wi-Fi Connection Assistant) (Version: 1.70.0 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 6.25 - Piriform)
Datacho (HKLM-x32\...\{4E8DE3AB-4751-40BE-9472-DBF23F2A0B21}}_is1) (Version: 1.4.0.160 - WebDeal s.r.o.)
DownloadHelper CoApp (HKLM-x32\...\DownloadHelper CoApp) (Version: 2.0.19.0 - ACLAP)
Easy CD-DA Extractor 16 (HKLM-x32\...\Easy CD-DA Extractor 16) (Version: 16.0.9 - Poikosoft)
FastShare.cz verze 2.4.0 (HKLM-x32\...\FastShare.cz_is1) (Version: 2.4.0 - )
Firebird 2.5.4.26856 (Win32) (HKLM-x32\...\FBDBServer_2_5_is1) (Version: 2.5.4.26856 - Firebird Project)
FormatFactory 5.17.0.0 (HKLM-x32\...\FormatFactory) (Version: 5.17.0.0 - Free Time)
Free MP3 Cutter 2.1 (HKLM-x32\...\{847E0734-4457-4B48-BF49-998D1CF2CFA1}_is1) (Version: 2.1 - PolySoft Solutions)
Freemake Video Converter verze 4.1.13 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.13 - Mixbyte Inc.)
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 129.0.1.0 - Google LLC)
Google Earth Pro (HKLM\...\{E3B69BB6-FFD8-441C-933E-BB8A3136ED8F}) (Version: 7.3.7.1155 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 151.0.7922.138 - Google LLC)
HP Audio Switch (HKLM-x32\...\{3A5141D4-47DB-4302-9B1C-272BE585BC8A}) (Version: 1.0.179.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{016FBF6D-AEDE-4D33-87B4-DF6815EF674A}) (Version: 1.4.0.485 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{35556CCA-F14E-48F3-93F4-E29C4B3DBE30}) (Version: 1.4.485.0 - HP Inc.)
HP One Agent (HKLM\...\{AC8A18BC-B573-49EB-9682-F0ECED135435}) (Version: 1.3.345.6640 - HP Inc.)
HP One Agent (HKLM\...\{EA7416A9-13A2-4676-85AA-1D2C66E6A2A0}) (Version: 1.3.345.6640 - HP Inc.) Hidden
HP Registration Service (HKLM-x32\...\{280936C6-5D40-4AE1-9C13-F44E6208DDC4}) (Version: 1.0.0.65 - HP Inc.) Hidden
iCloud Outlook (HKLM\...\{58EF239A-565E-4854-9769-DE7BB82ED781}) (Version: 11.4.0.12 - Apple Inc.)
Inviska MKV Extract verze 11.0 (HKLM\...\{215C3EFC-2BE8-4A5A-9A1F-982C15E47CC9}_is1) (Version: 11.0 - Inviska Software)
Java 8 Update 231 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180231F0}) (Version: 8.0.2310.11 - Oracle Corporation)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0.1 - AppWork GmbH)
K-Lite Codec Pack 17.5.0 Standard (HKLM-x32\...\KLiteCodecPack_is1) (Version: 17.5.0 - KLCP)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Macro Recorder 5.8.0 (HKLM-x32\...\Macro Recorder_is1) (Version: 5.8.0 - Jitbit Software)
MakeMKV v1.17.7 (HKLM-x32\...\MakeMKV) (Version: v1.17.7 - GuinpinSoft inc)
MediaInfo 25.03 (HKLM\...\MediaInfo) (Version: 25.03 - MediaArea.net)
Microsoft .NET Host - 8.0.2 (x86) (HKLM-x32\...\{AFC83F5E-A70F-40EB-B8A0-E1F7B83ED30F}) (Version: 64.8.8795 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.2 (x86) (HKLM-x32\...\{8B3CFFA2-B674-4DB3-B0FF-F23EA1EDE9D0}) (Version: 64.8.8795 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.2 (x86) (HKLM-x32\...\{C259804F-E2F8-4240-8276-83302ABF17AE}) (Version: 64.8.8795 - Microsoft Corporation) Hidden
Microsoft 365 Apps pro velké organizace - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.20228.20158 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 151.0.4129.78 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 151.0.4129.78 - Microsoft Corporation) Hidden
Microsoft Office Professional 2019 - cs-cz (HKLM\...\Professional2019Retail - cs-cz) (Version: 16.0.20228.20158 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.196.0929.0005 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{650c9b4a-60ec-4e4e-8d8e-32d85ce3b7c5}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.50.35719 (HKLM\...\{AECD4ED0-8A3B-41E9-92D1-6BEE0374CCAF}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.50.35719 (HKLM\...\{61B44572-8722-4DAF-8ACF-8E742D30BCC5}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719 (HKLM-x32\...\{91ee571b-0e8a-4c65-9eaf-2e2f5fc60c00}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.2 (x86) (HKLM-x32\...\{3abfc6d6-ddca-44fd-a2b1-d8fc2b575ad6}) (Version: 8.0.2.33318 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.2 (x86) (HKLM-x32\...\{8396E7E6-F535-4E6F-9E2B-CB78A570547A}) (Version: 64.8.8806 - Microsoft Corporation) Hidden
MKVCleaver 64 bit (HKLM\...\{32886311-ABB4-45BE-8274-1F53641B2AC7}_is1) (Version: 0.8.0.0 - Ilia Bakhmoutski)
MKVToolNix 9.9.0 (64bit) (HKLM-x32\...\MKVToolNix) (Version: 9.9.0 - Moritz Bunkus)
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 153.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 138.0.1 - Mozilla)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20131.20112 - Microsoft Corporation) Hidden
PDFescape Desktop Asian Fonts Pack (HKLM\...\{D81F9B76-24DE-4DFF-8869-B31289B36FAC}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Convert Module (HKLM\...\{CC6DC81A-06C1-4933-8117-794710375AD3}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Create Module (HKLM\...\{CCBE3E06-E721-410C-8D36-EDEF37F56743}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Edit Module (HKLM\...\{00CEFC51-9626-4E7E-920B-4757DF0B9491}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Forms Module (HKLM\...\{87391E47-A919-4E89-8D07-EA259AD63DB8}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Insert Module (HKLM\...\{8B686E57-76A7-4330-A981-4AB69DF7A568}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Review Module (HKLM\...\{42EF2557-7C52-40EE-81CF-B658B64C7095}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Secure Module (HKLM\...\{B9EB4384-5195-4ED6-BAB0-661FC5B36E14}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop View Module (HKLM\...\{F108BACE-2CE0-447B-A953-68E2019F7B66}) (Version: 4.0.24.4617 - Red Software) Hidden
PDF-XChange Editor (HKLM\...\{29487948-D54A-4EE4-800D-E205919659C8}) (Version: 8.0.343.0 - Tracker Software Products (Canada) Ltd.) Hidden
PDF-XChange Editor (HKLM-x32\...\{911b790c-3fcf-4ecc-b0d4-8a573a6004b0}) (Version: 8.0.343.0 - Tracker Software Products (Canada) Ltd.)
PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 24.08.27.0 - Kakao Corp.)
PSPad editor (HKLM-x32\...\PSPad editor 32bit_is1) (Version: 5.0.7.775 - Jan Fiala)
Registrace tiskárny (HKLM-x32\...\Canon EISRegistration) (Version: 1.7.0 - Canon Inc.)
ReNamer (HKLM-x32\...\ReNamer_is1) (Version: 7.3.0.0 - den4b Team)
Revo Uninstaller Pro 4.2.3 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.2.3 - VS Revo Group, Ltd.)
SmartShare (HKLM-x32\...\{BAB337AE-DD9E-45C3-BED6-0EE4732AEC60}) (Version: 2.3.1712.1201 - LG Electronics Inc.)
Subtitle Edit 3.5.14 (HKLM\...\SubtitleEdit_is1) (Version: 3.5.14.1 - Nikse)
Tacho+Personal (HKLM-x32\...\{BA75B93A-AA3C-4B4F-B942-C078432E9A10}) (Version: 2.3.4.10417 - SoftProject AG CH-9000 St.Gallen) Hidden
TachoPlusFreeDriver (HKLM-x32\...\TachoPlusFreeDriver) (Version: 2.3.4.10417 - SoftProject)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
VdhCoApp 1.6.3 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version: - DownloadHelper)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)
vs2015_redist x86 (HKLM-x32\...\{BD46163A-0331-4A61-B65A-7B66D7C93F8E}) (Version: 1.0.0.0 - Realnetworks) Hidden
WD Discovery (HKLM-x32\...\WDDiscovery) (Version: 5.0.589 - Western Digital Technologies, Inc.)
WD Drive Utilities (HKLM-x32\...\{45BDDAE8-E34D-46D7-AC23-39C567A719B9}) (Version: 2.1.2.167 - Western Digital Technologies, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{f114c741-7aa6-4296-93f4-75082754ec24}) (Version: 2.1.2.167 - Western Digital Technologies, Inc.)
WD SES Driver Setup (HKLM-x32\...\{D9ABF771-729C-471F-A6DF-1010527DB376}) (Version: 2.1.0 - Western Digital) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.92.0 - Winamp SA)
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
XnView 2.49.3 (HKLM-x32\...\XnView_is1) (Version: 2.49.3 - Gougelet Pierre-e)
Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-02-20] ()
Adobe Reader Touch -> C:\Program Files\WindowsApps\AdobeSystemsIncorporated.AdobeReader_3.1.8.7675_x86__ynb6jyjzte8ga [2020-10-01] (Adobe Systems Incorporated)
Convert HEIC to JPG -> C:\Program Files\WindowsApps\SoftOrbits.ConvertHEICtoJPG_10.1.0.0_x64__9808nkjsftezr [2023-12-25] (SoftOrbits)
ELAN Touchpad Setting -> C:\Program Files\WindowsApps\ELANMicroelectronicsCorpo.ELANTouchpadSetting_11.2.63.0_x64__stws0m115j6hg [2022-04-14] (ELAN Microelectronics Corporation)
HP Audio Center -> C:\Program Files\WindowsApps\AD2F1837.HPAudioCenter_1.11.218.0_x64__v10z8vjag6ke6 [2022-04-14] (HP Inc.)
HP Inc. Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_2.0.11.0_x64__v10z8vjag6ke6 [2026-02-19] (HP Inc.)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.4.481.0_x86__v10z8vjag6ke6 [2019-07-23] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_3.2.0.0_x64__v10z8vjag6ke6 [2026-08-13] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.6.1.0_x64__v10z8vjag6ke6 [2026-07-20] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_166.1.1185.0_x64__v10z8vjag6ke6 [2026-08-13] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.54.3.0_x64__v10z8vjag6ke6 [2026-07-20] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6 [2026-05-04] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa [2026-03-05] (Apple Inc.) [Startup Task]
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-08-13] ()
Microsoft 365 companion apps -> C:\Program Files\WindowsApps\Microsoft.M365Companions_2.2512.12000.0_x64__8wekyb3d8bbwe [2026-01-08] (Microsoft Corporation)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-06-23] (Microsoft Corp.)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-08-13] ()
Narrator Extension - Excel -> C:\Program Files\WindowsApps\MicrosoftWindows.NarratorScript.Excel_1.0.14.0_neutral__cw5n1h2txyewy [2026-04-21] (Microsoft Windows)
Narrator Extension - Word -> C:\Program Files\WindowsApps\MicrosoftWindows.NarratorExtension-Word_2.0.3.0_neutral__cw5n1h2txyewy [2026-05-14] (Microsoft Windows)
NarratorExtension - Outlook -> C:\Program Files\WindowsApps\MicrosoftWindows.NarratorScript.Outlook_2.0.3.0_neutral__cw5n1h2txyewy [2026-05-14] (Microsoft Windows)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-08-13] ()
PDF X -> C:\Program Files\WindowsApps\6760NGPDFLab.PDFX_1.4.26.0_x64__sbe4t8mqwq93a [2026-04-29] (NG PDF Lab)
PhotoWindow -> C:\Program Files\WindowsApps\61711masaxjr.PhotoWindow_3.0.0.1_neutral__jwmqhy3chykh8 [2024-03-17] (Miyabi Software Dev.)
sMedio True DVD for HP -> C:\Program Files\WindowsApps\0E3921EB.sMedioTrueDVDforHP_1.1.160.0_x64__agwrg61xdd7p4 [2024-06-01] (sMedio Inc.)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2631.102.0_x64__cv1g1gvanyjgm [2026-08-13] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.3.1.0_x64__8wekyb3d8bbwe [2026-08-13] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{7d043d4e-4259-f459-3630-7b434fd7752c}\localserver32 -> C:\Program Files\HP\HP Media Network\HPMediaNetwork.exe (HP Inc. -> HP Inc.)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{CA65F600-9ABF-4B30-9809-343190721BC2} -> [Fotky na iCloudu] => C:\Users\pavuk\OneDrive\Obrázky\iCloud Photos\Photos
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{ED90173A-3B4C-4E7E-B9CF-79714425D4B5}\InprocServer32 -> C:\Program Files (x86)\PSPad editor\pspshellx64.dll () [File not signed]
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-02-17] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No File
ContextMenuHandlers1: [PDFescapeDesktop_ManagerExt] -> {D3C28D54-72B8-4B8D-B204-157EFA9BF3E7} => -> No File
ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-11-01] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2019-03-29] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-2401873512-1259376139-3579719326-1001: [EditWithPSPad] -> {ED90173A-3B4C-4E7E-B9CF-79714425D4B5} => C:\Program Files (x86)\PSPad editor\pspshellx64.dll [2014-11-02] () [File not signed]
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [VIDC.FPS1] => C:\WINDOWS\system32\frapsv64.dll [71680 2013-02-26] (Beepa P/L) [File not signed]
HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-18] (Fox Magic Software) [File not signed]
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [65536 2013-02-26] (Beepa P/L) [File not signed]
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2026-07-20 18:24 - 2026-07-20 18:24 - 000440320 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LauncherSDK\551efa932d3826e0e2b40c00ad1f4467\LauncherSDK.ni.dll
2026-07-20 18:24 - 2026-07-20 18:24 - 000038400 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Logging\50e79d78dcafde1e3f3eea72115ed09f\Logging.ni.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\OneDriveTemp:{68003400-7300-4F00-5300-690049006C00} [620]
AlternateDataStreams: C:\OneDriveTemp:{6D006200-5200-6F00-5700-6F0061003900} [576]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\Log Files:{68003400-7300-4F00-5300-690049006C00} [620]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop:{68003400-7300-4F00-5300-690049006C00} [576]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop:{6D006200-5200-6F00-5700-6F0061003900} [576]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://securesearch.org/homepage?hp=2&pId=BC180101&iDate=2020-12-28 10:42:45&iid=ae738d36-e6c7-4285-889d-b76c3c845805&bName=
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {CC2BC045-ED69-423A-8680-78EB23C27B96} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> {CC2BC045-ED69-423A-8680-78EB23C27B96} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001 -> {CC2BC045-ED69-423A-8680-78EB23C27B96} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_231\bin\ssv.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
BHO: No Name -> {9AF15867-1D90-423B-9853-E99761714165} -> No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_231\bin\jp2ssv.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.)
BHO-x32: PDFescape Desktop Helper -> {9AF15867-1D90-423B-9853-E99761714165} -> C:\Program Files (x86)\PDFescape Desktop\creator\plugins\IEAddin\creator-ie-helper.dll [2019-07-01] (PDFescape -> Red Software)
Toolbar: HKLM - No Name - {A6D4ADF0-4C82-4712-B9B8-69EE9CF06462} - No File
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.)
Toolbar: HKLM-x32 - PDFescape Desktop Toolbar - {A6D4ADF0-4C82-4712-B9B8-69EE9CF06462} - C:\Program Files (x86)\PDFescape Desktop\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-07-01] (PDFescape -> Red Software)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\sharepoint.com -> hxxps://dar20428422-files.sharepoint.com
IE restricted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\kmplayer.com -> kmplayer.com
IE restricted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\kmpmedia.net -> player.kmpmedia.net
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2018-09-15 09:31 - 2020-12-06 19:30 - 000001000 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 player.kmpmedia.net
127.0.0.1 www.activation.freemake.com
127.0.0.1 activation.freemake.com
127.0.0.1 fvc_stat.freemake.com
127.0.0.1 secure.mobiledit.com
2020-05-03 02:02 - 2024-10-02 12:19 - 000000498 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.137.1 ludva.mshome.net # 2029 10 1 1 10 19 7 960
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 10.0.0.138
Windows Firewall is disabled.
Network Binding:
=============
Wi-Fi: Realtek RTL8821CE 802.11ac PCIe Adapter -> rtwlane.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\Control Panel\Desktop\\Wallpaper ->
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 4) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\AppData\Roaming\uTorrent\uninstall.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\Downloads\axife_5fe916a7f3e60\FileSetup-v29.14.05.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\Downloads\axife_5fe9174d073aa\FileSetup-v29.14.05.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\AppData\Roaming\Axife Standard\FileSetup-v29.14.05.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\Downloads\5fe93e6505bec__Automatic-Mouse-and-Keyboard-6162-With-Crack-Latest-2021\Automatic-Mouse-and-Keyboard-6162-With-Crack-Latest-2021\5fe93e64c92985fe93-files\setup_x86_x64_install.exe
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\StartupFolder: => "Hodiny_T.lnk"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "NetWorx"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "ArcSoft Connection Service"
HKLM\...\StartupApproved\Run32: => "CanonQuickMenu"
HKLM\...\StartupApproved\Run32: => "WDDiscovery"
HKLM\...\StartupApproved\Run32: => "DriveUtilitiesHelper"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "Opera Browser Assistant"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "17964C220E9DA0D37FCF315CDC911E8A51B3BF9C._service_run"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "AshSnap"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "GoogleDriveFS"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_02305D6906FA6EC449BDD7C88E7783A3"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{D56D2201-4302-4327-82F2-B68A88547C56}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{2E9E7E81-7150-4DF5-A445-087D6DE452E2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C0FF1420-E546-4509-B5F1-1C56FA77AFA2}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{48F08F9D-80C9-40E4-9A0E-F5927EF3050A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{94A12505-C370-486E-A971-4E6AEDE7DC93}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{43872B87-4334-44E0-97F2-CCF1BA4081AD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0B936EF0-D742-4E2D-A2F0-891CB7484513}] => (Allow) C:\Program Files\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{77E2CA76-F42A-4218-B3CC-C285C5F9A16B}] => (Allow) C:\Program Files\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{4C5557AA-BA1E-48E4-A9CC-1E3C57843997}] => (Allow) C:\Program Files\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{5324AFF2-0344-407D-A68C-9ACBCF236D1D}] => (Allow) C:\Users\pavuk\OneDrive\Plocha\utorrent_2.2.1.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{BD8DA65E-6869-44C7-9E75-3B0205BFD610}] => (Allow) C:\Users\pavuk\OneDrive\Plocha\utorrent_2.2.1.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{EDF6B809-96F5-4677-A8E6-788B8CDA02C0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{38836E42-454D-48B5-833B-D953675540E2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C3EDE34E-1185-42CA-A294-CBA211DAA1A9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{60C2E295-E3BA-4A2E-8DEE-6BF6A38D0EC8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B286830C-8352-4FA0-B2D0-6D53A43C6891}] => (Allow) LPort=27015
FirewallRules: [{AB80D9B1-55EC-4DA1-B5BA-8DC8F1C91163}] => (Allow) LPort=27015
FirewallRules: [{1FFA0689-BCC8-49C0-A026-1F449BE019D9}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Winamp SA -> Winamp SA)
FirewallRules: [{48611094-C59C-4F8C-AB92-0B419BBC7AF4}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Winamp SA -> Winamp SA)
FirewallRules: [{1EE36E83-26A0-4E2E-BAEF-E294E8E1D04F}] => (Allow) C:\Program Files (x86)\Canon\Wi-Fi Connection Assistant\cnwidadr2.exe (Canon Inc. -> CANON INC.)
FirewallRules: [{637F6DE5-3517-4221-B591-9A4CDA4A5290}] => (Allow) C:\Program Files (x86)\Canon\Wi-Fi Connection Assistant\cnwiddsu\cnwiddsu2.exe (Canon Inc. -> CANON INC.)
FirewallRules: [{C3C74C48-F82C-423B-9EE8-00425B367E6F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F3305EB0-0AD6-45FD-B971-8E872DD48559}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B225607E-4AE0-45E3-9DB0-8EE3BFF8E045}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B47EA582-BE70-4C15-AD80-96F28B8D1EBF}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C953FB87-7BD3-4963-95A7-AD56C3C1DB1E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4431D43E-BA7E-41FB-A86B-95FFD23F69FB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E8717514-57FD-44E1-9B43-241E2B2D25A5}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AF5B6470-3478-42D4-A92F-5B6CF09B7D0B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6786F0A4-BF56-4447-9DC8-BB46F61D29EE}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{ED1BF230-5F84-42B7-A952-FB660CC5C5A9}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{86786159-A71E-4A91-BFDF-7DC05BBD2D7C}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C1A99624-5D0C-4493-BC41-9FE8B0CEFE80}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{48EACC1D-E52D-4B94-97E6-5B5EB855137B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9EC9E158-836A-467C-AA3B-04AE2A2DFF79}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{B9DCDC18-9F24-4D52-9104-F93B271E6E3C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{849759FF-B2DD-40B2-A9A1-C3FDAE75FD28}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8CCE0DC0-606C-4A59-B795-4C3ACC72026C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4EDF9CDE-090E-4F8F-A5B9-7BCF8DF6773E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (08/14/2026 12:47:31 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: NT AUTHORITY)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.
Error: (08/13/2026 11:34:11 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
Error: (08/13/2026 11:34:11 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (08/13/2026 11:34:11 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
Error: (08/13/2026 11:34:11 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (08/13/2026 08:12:30 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddWin32ServiceFiles: Unable to back up image of service Wondershare Native Push Service since QueryServiceConfig API failed
System Error:
Systém nemůže nalézt uvedený soubor..
Error: (08/13/2026 08:12:30 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddWin32ServiceFiles: Unable to back up image of service HP Comm Recovery since QueryServiceConfig API failed
System Error:
Systém nemůže nalézt uvedený soubor..
Error: (08/13/2026 07:26:34 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: NT AUTHORITY)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.
System errors:
=============
Error: (08/14/2026 11:14:07 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba HP System Info HSA Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.
Error: (08/14/2026 11:10:21 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby HPAppHelperCap bylo dosaženo časového limitu (30000 ms).
Error: (08/14/2026 11:09:43 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby HPAppHelperCap bylo dosaženo časového limitu (30000 ms).
Error: (08/14/2026 11:08:42 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby HPSysInfoCap bylo dosaženo časového limitu (30000 ms).
Error: (08/13/2026 11:29:48 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla neočekávaně ukončena. Tento stav nastal již 3krát.
Error: (08/13/2026 11:29:41 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.
Error: (08/13/2026 11:29:33 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.
Error: (08/13/2026 07:44:33 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience.
Windows Defender:
================
TimeCreated : 14.08.2026 12:42:29
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (B76AD8A5-67E1-477E-A088-C8CBCC325B41}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ьŔΡĆ çøήиĕçťîõп řциðőωñ)
TimeCreated : 13.08.2026 11:37:01
(Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu pĹ™i pokusu o aktualizaci bezpeÄŤnostnĂch) (informacĂ a pokusĂ se o obnovenĂ na pĹ™edchozĂ verzi.) (BezpeÄŤnostnĂ informace, kterĂ© se mÄ›ly naÄŤĂst: AktuálnĂ) (KĂłd chyby: 0x80501102) (Popis chyby: Došlo k neoÄŤekávanĂ˝m potĂĹľĂm. Nainstalujte všechny dostupnĂ© aktualizace a potom opakujte s) (puštÄ›nĂ programu. Informace o instalaci aktualizacĂ naleznete v nápovÄ›dÄ› a podpoĹ™e. ) (Verze bezpeÄŤnostnĂch informacĂ: 1.457.130.0;1.457.130.0) (Verze modulu: 1.1.26070.7)
TimeCreated : 28.07.2026 9:33:58
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (7ABA8833-437D-4E91-BCF0-BED11C64483A}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ŃŚĐ…Ä‹Ń’Îδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 27.07.2026 9:39:02
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (74D4DEFD-DFBB-476F-B889-4DFA1E2A8C48}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ŃŚĐ…Ä‹Ń’Îδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 26.07.2026 1:33:47
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (98E2B8E4-2038-4AA1-86C0-0BCF24E77511}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ŃŚĐ…Ä‹Ń’Îδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 25.07.2026 2:28:47
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (8A26BD48-B8B9-4B20-99E5-941012EDE9B8}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ŃŚĐ…Ä‹Ń’Îδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
==================== Memory info ===========================
BIOS: AMI F.42 07/03/2019
Motherboard: HP 85B3
Processor: AMD Ryzen 5 3500U with Radeon Vega Mobile Gfx
Percentage of memory in use: 94%
Total physical RAM: 6058.21 MB
Available physical RAM: 353.26 MB
Total Virtual: 14250.21 MB
Available Virtual: 2408.37 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:237.24 GB) (Free:19.95 GB) (Model: WDC PC SN520 SDAPNUW-256G-1006) NTFS
Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:502.02 GB) (Model: WDC WD10SPZX-60Z10T0) NTFS
\\?\Volume{6fba2790-035e-4972-a802-493339258e30}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.2 GB) NTFS
\\?\Volume{7c4eb51e-7024-4755-bb78-26dcf227b4bb}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.18 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: D22E9938)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 238.5 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-08-2026 01
Ran by pavuky (administrator) on LUDVA (HP HP Laptop 17-ca1xxx) (14-08-2026 19:28:11)
Running from C:\Users\pavuk\Downloads\FRST64.exe
Loaded Profiles: pavuky
Platform: Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2631.102.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe
(C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointGpuInfo.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\AppHelperCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\BridgeCommunication.exe
(DriverStore\FileRepository\u0373104.inf_amd64_beb660c61c852a40\B373048\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0373104.inf_amd64_beb660c61c852a40\B373048\atieclxx.exe
(explorer.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2631.102.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek) C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Media Network\HPMediaNetwork.exe
(HP Inc. -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.78\msedgewebview2.exe <11>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <38>
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0373104.inf_amd64_beb660c61c852a40\B373048\atiesrxx.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc; HP Development Company, L.P.) C:\Program Files\HP\HP One Agent\hp-one-agent-service.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.6.1.0_x64__v10z8vjag6ke6\DialogHost\ReconsentNotification.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2606.0.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1082144 2020-04-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2097600 2018-04-18] (Realtek Semiconductor Corp. -> Realtek)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe [80543384 2026-07-27] (Google LLC -> Google LLC.)
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919336 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe [80543384 2026-07-27] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919336 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe [80543384 2026-07-27] (Google LLC -> Google LLC.)
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45626272 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\Run: [HPSEU_Host_Launcher] => C:\Program Files\HP\HP System Event Utility\Host Launcher\HpseuHostLauncher.exe [545864 2025-11-08] (HP Inc. -> HP Inc.)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe [80543384 2026-07-27] (Google LLC -> Google LLC.)
HKLM\...\Windows x64\Print Processors\Canon TS3100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDR.DLL [482816 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series: C:\WINDOWS\system32\CNMLMDR.DLL [1302016 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series XPS: C:\WINDOWS\system32\CNMXLMDR.DLL [1304064 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\WINDOWS\system32\pxcpmL.dll [2155776 2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
HKLM\...\Print\Monitors\PDFescape Desktop Monitor: C:\WINDOWS\system32\spool\DRIVERS\x64\pdfescape desktop_pdfpmon_v.4.12.26.3.dll [932984 2021-03-19] (PDF Tools AG -> PDF Tools AG (hxxp://www.pdf-tools.com))
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\151.0.7922.138\Installer\chrmstp.exe [7602840 2026-08-14] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {9F8A2703-AC1B-4818-BBF5-7F32A115A225} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {2A3F4BDD-A207-4261-B148-930DEB9A24B6} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_453_Plugin.exe [1502776 2020-12-03] (Adobe Inc. -> Adobe)
Task: {4357130F-D3C2-4CA0-889F-C0577C4A6BE7} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{F9C15691-2728-4C83-9A55-C5BA28FC9381} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {E70DE904-D13F-46E5-BC22-E0712F9AE392} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{6D99ABFE-77F3-4EB6-A278-C42CC8E33ED5} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {CA3E7E42-EBC1-4251-B3B2-43FC14349CE7} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {8B35B6D0-A273-4609-B0AA-F792405A3DC0} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [5074848 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc. All rights reserved.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "4ad08d92-797e-4ced-af6c-290f91a208f3" --version "6.25.11093" --silent
Task: {AA846480-2955-4709-A158-9E49BA715F66} - System32\Tasks\CCleanerSkipUAC - pavuky => C:\Program Files\CCleaner\CCleaner.exe [39449504 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {82E4DABD-F3B6-473A-8F3F-96FBF6A2578C} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [3373256 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
Task: {3A1FA7FE-3F79-421F-B14D-AB93E62F6B0A} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{9B71B29D-8B5C-4607-A318-1D9849D64767} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {A6F58269-1234-4E5B-85A1-6F6664047CEC} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {D165D261-FA96-483D-B5AA-554C880025C4} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {C87300B1-EA4F-4071-A473-13B96DB66DA6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [1025096 2026-07-02] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {81A84996-72D0-41B2-A5F9-CBE7D043A92F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [480264 2026-07-02] (HP Inc. -> HP Inc.)
Task: {065F4B8D-4FEF-4DB7-BE6F-3B274D163326} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-08-13] (HP Inc. -> HP Inc.)
Task: {F1F4BFC8-DB66-45CB-B147-B7A0E9376B3C} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-08-13] (HP Inc. -> HP Inc.)
Task: {7B899FF8-3035-400C-801C-93227432BCFD} - System32\Tasks\HPOneAgentRepairTask => C:\ProgramData\Package Cache\{AC8A18BC-B573-49EB-9682-F0ECED135435}\HPOneAgent.exe [1170112 2026-07-20] (HP Inc. -> HP Inc; HP Development Company, L.P.)
Task: {D5B78230-9864-45B6-9A5E-945F9F83BA3D} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2023-03-20] () [File not signed]
Task: {4D5CEA6D-BEB3-4E9D-B08D-9059A9466702} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16782208 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {E3696B14-606D-4A23-ACE4-707251EC6947} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28726080 2026-08-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {6C03D788-2697-4DCC-8AB2-F79D64CAF297} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [74160 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {EA89EA13-19CC-4682-AA3F-D0A0B1BFD22C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28726080 2026-08-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {5AC2806B-4834-4911-8A23-08884482A4C8} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [441632 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {8E5E37D6-50E5-4EF3-8E21-DF3DC51EE9B0} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [441632 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {AF8BA207-9FD2-4551-8D2E-524D70B20FAB} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1370480 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {4E471246-817F-482A-A413-0D399800E281} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16782208 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {27B592DB-5B06-44CA-958F-A9D5C41622CE} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => %SystemRoot%\system32\clipesu.exe (No File)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {9A2887A4-4241-4A02-937B-63EE08DE87FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe ReadyToReboot (No File)
Task: {85E30EB0-C1CF-453B-914B-40B3D7F9E0EB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC Reboot (No File)
Task: {95832760-0DD9-41BA-A95A-C0B54C87B640} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery Reboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {F4B0D169-2EC1-49DD-947D-D3DC351ED71E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0636A128-66F6-41B2-8896-9829C04DEBE0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B72B1F83-4865-4557-ADD7-6035868FCF3B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {701CAD1F-9AF3-4A4E-96C1-05676F612245} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {21B925DF-2917-412F-A107-89FA873C2B32} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2401873512-1259376139-3579719326-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [704640 2026-08-13] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {D0E1B34E-2FAF-42EB-9D11-7D3B03CDA65D} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-08-13] (Mozilla Corporation -> Mozilla Foundation)
Task: {8E406788-4532-4221-BD17-A3CDC7A401E9} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {BED7E824-E8D0-4F34-AD8A-561C04AD9EA5} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2401873512-1259376139-3579719326-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {74683ED9-401C-498D-A129-A2989252C0B8} - System32\Tasks\ReclaimerUpdateFiles_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /UpdateFiles (No File)
Task: {7578E36F-64F1-4C9F-B641-11089F232581} - System32\Tasks\ReclaimerUpdateXML_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /UpdateXML (No File)
Task: {FD2D5EE8-B57C-45C8-82E7-17C347CC3955} - System32\Tasks\Remove AdwCleaner Application => C:\WINDOWS\system32\CMD.EXE [344064 2026-08-13] (Microsoft Windows -> Microsoft Corporation) -> /C DEL /F /Q "C:\Users\pavuk\Downloads\AdwCleaner.exe"
Task: {87DF74D5-3C2E-47DE-8D1A-4B7B1437CF6F} - System32\Tasks\RNUpgradeHelperLogonPrompt_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /prompt os_boot (No File)
Task: {C57A4A0B-3541-4132-9A9C-1CEACF7C8857} - System32\Tasks\RNUpgradeHelperResumePrompt_pavuky => C:\Users\pavuk\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.28\agent\rnupgagent.exe /prompt os_resume (No File)
Task: {F6B3018E-C9B7-41CA-969C-732A1C0DE44D} - System32\Tasks\S-1-5-21-2401873512-1259376139-3579719326-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe (No File)
Task: {45BD8758-9680-4291-9F3B-31FAEFE7465B} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [49032 2018-12-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {7A623922-2D6A-4DC0-AF95-79CF968D74B7} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe [63880 2018-12-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {0F325BBF-730E-4BB9-8C04-E28989290DF2} - System32\Tasks\Uninstall AdwCleaner Application => C:\Users\pavuk\Downloads\AdwCleaner.exe [9566696 2026-07-20] (Malwarebytes Inc. -> Malwarebytes)
Task: {9CDD2FC4-F27A-4F27-AD5C-D319F4917890} - System32\Tasks\WD Device Agent Task pavuky => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [727384 2024-08-16] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {8619455B-F773-4CB3-92B6-49C0EE8802F0} - System32\Tasks\WD Discovery Service Task pavuky => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [82264 2024-08-16] (Western Digital Technologies, Inc. -> )
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{01eaf30d-0f97-4cff-95d8-bfe2aa7c513e}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{22ded6cb-3864-4466-88a1-8a935a0bdc2a}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{22ded6cb-3864-4466-88a1-8a935a0bdc2a}: [DhcpDomain] .
Tcpip\..\Interfaces\{465785fe-b270-4c9f-bb65-78f57de96d21}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{465785fe-b270-4c9f-bb65-78f57de96d21}: [DhcpDomain] .
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: tqo98esj.test -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test [2026-08-14]
FF DownloadDir: C:\Users\pavuk\Downloads
FF Homepage: Mozilla\Firefox\Profiles\tqo98esj.test -> seznam.cz
FF NewTab: Mozilla\Firefox\Profiles\tqo98esj.test -> hxxps://securesearch.org/homepage?hp=2&pId=BC180101&iDate=2020-12-28 10:42:45&iid=ae738d36-e6c7-4285-889d-b76c3c845805&bName=
FF Session Restore: Mozilla\Firefox\Profiles\tqo98esj.test -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\tqo98esj.test -> hxxps://home.netatmo.com; hxxps://aukro.cz
FF Extension: (Použijte Google překladač) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2026-07-23]
FF Extension: (Privacy Badger) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2026-07-23]
FF Extension: (uBlock Origin) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\uBlock0@raymondhill.net.xpi [2026-07-23]
FF Extension: (Bulk Media Downloader) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\{72b2e02b-3a71-4895-886c-fd12ebe36ba3}.xpi [2018-03-03]
FF Extension: (No Name) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2026-07-23]
FF ProfilePath: C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\l9169vx7.39mx0k8b.default-release [2026-07-21]
FF ProfilePath: C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox [2025-05-11]
FF Homepage: C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox -> seznam.cz
FF Session Restore: C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox -> is enabled.
FF Extension: (Záložky na iCloudu) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\firefoxdav@icloud.com.xpi [2025-05-11]
FF Extension: (To Google Translate) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2025-05-11]
FF Extension: (Privacy Badger) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2025-05-11]
FF Extension: (URL to QR code) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\jid1-ZSMfwe4lCAw9oQ@jetpack.xpi [2025-05-11]
FF Extension: (Torrentz2 Magnet Links +) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\ohmugin-tzmec@gmail.com.xpi [2025-05-11]
FF Extension: (Titulky++) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\titulkyplus@idzor.cf.xpi [2025-05-11]
FF Extension: (uBlock Origin) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\uBlock0@raymondhill.net.xpi [2025-05-11]
FF Extension: (DuckDuckGo Search) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{37220c34-b538-4f3e-af3d-47aa40026683}.xpi [2025-05-11]
FF Extension: (Search on Google Lens) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{56b8308e-566b-4dc0-9957-f6341ceb8552}.xpi [2025-05-11]
FF Extension: (Video DownloadHelper) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-05-11]
FF Extension: (No Name) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2025-05-11]
FF HKLM\...\Firefox\Extensions: [pdfescape_desktop_conv_v.1@pdfescape.com] - C:\Program Files\PDFescape Desktop\creator\plugins\FirefoxAddin\pdfescape_desktop_conv_v.1@pdfescape.com.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [pdfescape_desktop_conv_v.1@pdfescape.com] - C:\Program Files\PDFescape Desktop\creator\plugins\FirefoxAddin\pdfescape_desktop_conv_v.1@pdfescape.com.xpi => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_453.dll [2020-12-03] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\dtplugin\npDeployJava1.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\plugin2\npjp2.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-06-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-02-17] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_453.dll [2020-12-03] (Adobe Inc. -> )
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2019-07-02] (CANON INC.) [File not signed]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2026-06-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-06-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\pavuk\AppData\Local\Microsoft\Edge\User Data\Default [2026-07-21]
Edge Extension: (Dokumenty Google offline) - C:\Users\pavuk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-10-16]
Edge Extension: (Edge relevant text changes) - C:\Users\pavuk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-04]
Chrome:
=======
CHR Profile: C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default [2026-08-13]
CHR Notifications: Default -> hxxps://nomadsfit.com; hxxps://sdilej.cz; hxxps://www.facebook.com
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Session Restore: Default -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2026-08-13]
CHR Extension: (Video Downloader Plus) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjljdgfhkjbdbkcdkfojleidpldagmao [2025-04-20]
CHR Extension: (Fax.Plus - přijímání a odesílání faxů online) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhbnflghagkonoikejjbjinpbdcjjlbo [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-08-13]
CHR Extension: (Verifee) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\kaamlhinjaceanpdanmagllfeoelcfhl [2024-12-11]
CHR Extension: (Video Download Helper) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2026-08-13]
CHR Extension: (Video Downloader PLUS) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\njgehaondchbmjmajphnhlojfnbfokng [2024-07-27]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-03-15] [UpdateUrl:0] <==== ATTENTION
CHR HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
Opera:
=======
OPR Profile: C:\Users\pavuk\AppData\Roaming\Opera Software\Opera Stable [2026-07-21]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=o ... utEncoding}
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft, Inc. -> ArcSoft Inc.)
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
S4 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-03] (Adobe Inc. -> Adobe)
S4 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1085856 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
S4 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe [9728 2024-08-18] (GuinpinSoft inc) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13546384 2026-08-04] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncHelper.exe [3524664 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
S3 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2015-03-27] (Firebird Project) [File not signed]
S3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [3829760 2015-03-27] (Firebird Project) [File not signed]
S4 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [82216 2020-12-29] (Mixbyte Inc -> Freemake)
R2 hp-one-agent-service; C:\Program Files\HP\HP One Agent\hp-one-agent-service.exe [2457512 2026-06-15] (HP Inc. -> HP Inc; HP Development Company, L.P.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\AppHelperCap.exe [932032 2026-07-08] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\DiagsCap.exe [929984 2026-07-08] (HP Inc. -> HP Inc.)
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [478056 2018-06-01] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\NetworkCap.exe [925888 2026-07-08] (HP Inc. -> HP Inc.)
S4 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243720 2026-08-13] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\SysInfoCap.exe [1029832 2026-07-08] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe [639784 2025-10-01] (HP Inc. -> HP Inc.)
S3 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460992 2025-04-18] (Canon Inc. -> )
S3 luminati_net_updater_win_formatfactory_pcfreetime_com; C:\Program Files\FormatFactory\net_updater64.exe [10302056 2026-03-20] (Bright Data Ltd -> BrightData Ltd. (certified))
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpDefenderCoreService.exe [2113568 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.196.0929.0005\OneDriveUpdaterService.exe [3867704 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
S4 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [372736 2024-01-03] (Western Digital Technologies, Inc.) [File not signed]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\NisSrv.exe [5183648 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MsMpEng.exe [291352 2026-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.225\WsAppService.exe [473824 2017-05-05] (Wondershare Technology Co.,Ltd -> Wondershare)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AKCCID; C:\WINDOWS\System32\drivers\AKCCID.sys [87208 2024-03-26] (Alcorlink Corp. -> Generic)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [143904 2020-05-11] (Alcorlink Corp. -> )
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [518664 2020-11-03] (Avast Software s.r.o. -> AVAST Software)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-06-23] (Microsoft Corporation) [File not signed]
S3 e2eVAWdm; C:\WINDOWS\System32\drivers\VAud_WDM.sys [112696 2017-07-12] (ARTRAY CO., LTD. -> e2eSoft)
R2 googledrivefs31931; \??\C:\Program Files\Google\Drive File Stream\Drivers\31931\googledrivefs31931.sys [386256 2025-05-05] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1421dec2010cc057\x64\hpcustomcapdriver.sys [18984 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-29] (Microsoft Windows -> Microsoft Corporation)
S3 ManyCam; C:\WINDOWS\system32\DRIVERS\mcvidrv.sys [65448 2023-01-17] (ManyCam ULC -> ManyCam ULC)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2018-05-04] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R2 npf; \??\C:\WINDOWS\system32\drivers\npf.sys [36600 2018-12-07] (Riverbed Technology, Inc. -> )
R2 speedfan; \??\C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> )
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2018-05-04] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 UsbNcm; C:\WINDOWS\System32\DriverStore\FileRepository\usbncm.inf_amd64_507538fd4ad98089\UsbNcm.sys [212992 2026-08-13] (Microsoft Windows -> )
S3 VCamSDK; C:\WINDOWS\system32\DRIVERS\VCamSDK.sys [1090904 2019-12-22] (Shanghai Yitu Information Technology Co.,Ltd. -> e2eSoft)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-08-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [25704 2022-10-03] (WDKTestCert user,132375440089837053 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [625688 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [111640 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40208 2026-06-18] (HP Inc. -> HP)
R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_bce55ac535cb3902\WSDScan.sys [61440 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-08-14 19:28 - 2026-08-14 19:30 - 000040954 _____ C:\Users\pavuk\Downloads\FRST.txt
2026-08-14 19:26 - 2026-08-14 19:26 - 002448384 _____ (Farbar) C:\Users\pavuk\Downloads\FRST64.exe
2026-08-14 19:17 - 2026-08-14 19:17 - 000388608 _____ (Trend Micro Inc.) C:\Users\pavuk\Downloads\hijackthis.exe
2026-08-13 12:59 - 2026-08-13 12:59 - 000747294 _____ C:\WINDOWS\system32\perfh005.dat
2026-08-13 12:59 - 2026-08-13 12:59 - 000170868 _____ C:\WINDOWS\system32\perfc005.dat
2026-08-13 12:41 - 2026-08-14 12:46 - 000003714 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{44DC640E-0158-49BF-8CF3-5693EA9B06D6}
2026-08-13 12:41 - 2026-08-14 12:46 - 000003588 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{7183DF2B-E4A9-4C75-9F16-3982355AB668}
2026-08-13 11:34 - 2026-08-14 17:56 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-08-13 07:26 - 2026-08-13 07:26 - 000038723 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-08-13 07:26 - 2026-08-13 07:26 - 000038723 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-07-26 10:50 - 2026-07-26 11:00 - 4191288441 _____ C:\Users\pavuk\Downloads\Bílá+paní+1965+CZ+dabing+1080p+FHD.mp4
2026-07-23 18:43 - 2026-07-23 18:43 - 000000000 ____D C:\Users\pavuk\Downloads\BILA LUCIE - [1992] - Missariel (MP3.CBR.320)
2026-07-22 02:37 - 2026-07-22 02:42 - 2185388019 _____ C:\Users\pavuk\Downloads\Ja+milujem,+ty+miluješ+1980+SK+dabing+1080p+FHD.mkv
2026-07-22 01:41 - 2026-07-22 01:43 - 962213336 _____ C:\Users\pavuk\Downloads\Příliš+hlučná+samota.mkv
2026-07-21 16:47 - 2026-07-21 16:47 - 000000000 ____D C:\Users\pavuk\AppData\Local\MicrosoftEdge
2026-07-21 16:32 - 2026-08-14 19:29 - 000000000 ____D C:\FRST
2026-07-21 16:25 - 2026-07-21 16:25 - 000001722 _____ C:\Users\pavuk\OneDrive\Plocha\Rkill.txt
2026-07-21 00:47 - 2026-07-21 15:49 - 000000000 ____D C:\AdwCleaner
2026-07-20 19:24 - 2026-07-20 19:24 - 009566696 _____ (Malwarebytes) C:\Users\pavuk\Downloads\AdwCleaner.exe
2026-07-20 19:23 - 2026-07-21 16:07 - 000002576 _____ C:\WINDOWS\system32\Tasks\Remove AdwCleaner Application
2026-07-20 19:23 - 2026-07-21 16:07 - 000002558 _____ C:\WINDOWS\system32\Tasks\Uninstall AdwCleaner Application
2026-07-20 18:44 - 2026-07-20 18:44 - 000000000 ____D C:\WINDOWS\Minidump
2026-07-20 08:09 - 2026-07-20 08:09 - 000000000 ____D C:\WINDOWS\Panther
2026-07-19 19:27 - 2026-07-19 19:27 - 000004977 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-07-19 19:27 - 2026-07-19 19:27 - 000004647 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-07-19 19:27 - 2026-07-19 19:27 - 000004647 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-07-19 19:27 - 2026-07-19 19:27 - 000004647 _____ C:\WINDOWS\system32\ResPriImageList
2026-07-19 19:27 - 2026-07-19 19:27 - 000004647 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-07-19 19:27 - 2026-07-19 19:27 - 000004558 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-07-19 19:27 - 2026-07-19 19:27 - 000004558 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-07-19 19:26 - 2026-07-19 19:26 - 000087226 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-07-19 19:26 - 2026-07-19 19:26 - 000087226 _____ C:\WINDOWS\system32\ctac.json
2026-07-19 03:56 - 2026-07-19 03:56 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-08-14 19:20 - 2019-10-31 21:43 - 000000000 ____D C:\Users\pavuk\AppData\Local\D3DSCache
2026-08-14 19:19 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-08-14 19:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-08-14 18:16 - 2025-06-23 17:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-08-14 12:40 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-08-14 11:48 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-08-14 02:12 - 2023-01-22 19:24 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-08-13 17:48 - 2020-10-05 19:59 - 000000000 ____D C:\Users\pavuk\Downloads\seidl transport
2026-08-13 17:32 - 2022-12-18 22:02 - 000000000 ____D C:\Users\pavuk\OneDrive\Dokumenty\Soubory Outlooku
2026-08-13 17:32 - 2020-04-25 21:55 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Microsoft\Excel
2026-08-13 17:28 - 2019-10-31 21:42 - 000000000 ____D C:\Users\pavuk\AppData\Local\Packages
2026-08-13 13:12 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-08-13 12:59 - 2025-06-23 17:51 - 001841748 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-08-13 12:59 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-08-13 12:55 - 2025-06-23 17:51 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-08-13 12:55 - 2025-06-23 17:48 - 000006862 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-08-13 12:55 - 2025-05-11 15:08 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-08-13 12:55 - 2025-05-11 15:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-08-13 12:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-08-13 12:54 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-08-13 12:47 - 2018-11-07 08:47 - 000000000 ____D C:\ProgramData\Packages
2026-08-13 12:41 - 2026-01-03 14:37 - 000390784 _____ (Mozilla Foundation) C:\Users\pavuk\OneDrive\Plocha\Firefox.exe
2026-08-13 12:41 - 2025-06-23 17:51 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-08-13 12:41 - 2025-05-11 15:08 - 000001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-08-13 11:34 - 2025-06-23 17:46 - 000595696 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-08-13 11:33 - 2026-05-15 02:31 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-08-13 11:33 - 2025-12-10 21:43 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-08-13 11:33 - 2025-07-08 22:15 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-08-13 11:33 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-08-13 11:33 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-08-13 11:33 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\DiagTrack
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-08-13 11:33 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-08-13 07:44 - 2023-07-19 17:54 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-08-13 07:24 - 2025-06-23 17:50 - 003375104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-08-13 07:12 - 2018-11-07 08:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-08-13 07:11 - 2019-01-09 05:12 - 000000000 ____D C:\Program Files\HP
2026-08-13 07:09 - 2021-03-19 22:33 - 000000000 ____D C:\Program Files\Microsoft Office
2026-07-27 19:16 - 2021-09-24 08:50 - 000002180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2026-07-26 11:03 - 2025-02-28 21:05 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\vlc
2026-07-24 16:56 - 2020-11-05 22:42 - 000000000 ____D C:\Users\pavuk\AppData\Local\CrashDumps
2026-07-23 22:30 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-07-22 18:16 - 2019-10-31 22:00 - 000000000 ____D C:\Users\pavuk\AppData\Local\Comms
2026-07-22 09:40 - 2019-07-23 19:45 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2026-07-21 17:06 - 2019-11-16 19:15 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\uTorrent
2026-07-21 16:59 - 2025-06-23 17:51 - 000002256 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - pavuky
2026-07-21 16:59 - 2020-04-03 14:57 - 000000000 ____D C:\Program Files\CCleaner
2026-07-21 16:07 - 2025-06-23 17:51 - 000002836 _____ C:\WINDOWS\system32\Tasks\HPOneAgentRepairTask
2026-07-21 16:07 - 2025-06-23 17:51 - 000002262 _____ C:\WINDOWS\system32\Tasks\StartCN
2026-07-21 16:07 - 2025-06-23 17:51 - 000002176 _____ C:\WINDOWS\system32\Tasks\StartDVR
2026-07-21 16:06 - 2025-06-23 17:51 - 000003542 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2026-07-21 15:56 - 2025-11-13 01:59 - 000000000 ____D C:\Users\pavuk\AppData\LocalWondershare
2026-07-21 15:56 - 2020-12-06 12:36 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Wondershare
2026-07-21 15:56 - 2020-04-03 05:35 - 000000000 ____D C:\Users\pavuk\AppData\Local\Wondershare
2026-07-21 15:53 - 2020-10-06 18:18 - 000000000 ____D C:\ProgramData\SoftPerfect
2026-07-21 15:52 - 2025-03-13 01:22 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Nero
2026-07-21 15:52 - 2025-03-13 01:22 - 000000000 ____D C:\Users\pavuk\AppData\Local\Nero
2026-07-21 15:49 - 2019-10-31 22:03 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Hewlett-Packard
2026-07-21 15:49 - 2019-01-09 05:12 - 000000000 ____D C:\ProgramData\HP
2026-07-21 15:49 - 2019-01-09 05:12 - 000000000 ____D C:\Program Files (x86)\HP
2026-07-21 15:49 - 2018-12-25 02:48 - 000000000 ___HD C:\hp
2026-07-21 12:05 - 2019-07-23 19:46 - 000000000 ____D C:\ProgramData\Package Cache
2026-07-20 17:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-07-20 17:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2026-07-20 17:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-07-20 10:13 - 2025-09-04 22:19 - 000000000 ____D C:\ProgramData\CanonIJPLM
2026-07-20 01:45 - 2019-10-31 21:42 - 000000000 ____D C:\Users\pavuk\AppData\Local\ConnectedDevicesPlatform
2026-07-19 12:07 - 2019-10-31 23:14 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-07-19 04:00 - 2019-10-31 23:14 - 228534800 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Files in the root of some directories ========
2020-12-29 12:51 - 2020-12-29 13:01 - 000000004 _____ () C:\ProgramData\lock.dat
2020-12-29 12:52 - 2020-12-29 13:01 - 000000004 _____ () C:\ProgramData\rc.dat
2020-12-29 12:51 - 2020-12-29 12:51 - 000000008 _____ () C:\ProgramData\ts.dat
2013-02-26 08:34 - 2013-02-26 08:34 - 000234168 _____ (Beepa P/L) C:\Program Files\fraps32.dll
2013-02-26 08:34 - 2013-02-26 08:34 - 000068792 _____ (Beepa P/L) C:\Program Files\fraps64.dat
2013-02-26 08:34 - 2013-02-26 08:34 - 000186552 _____ (Beepa P/L) C:\Program Files\fraps64.dll
2024-08-18 19:01 - 2024-08-19 15:38 - 000099384 _____ () C:\Users\pavuk\AppData\Roaming\inst.exe
2024-08-18 19:01 - 2024-08-19 15:38 - 000007859 _____ () C:\Users\pavuk\AppData\Roaming\pcouffin.cat
2024-08-18 19:01 - 2024-08-19 15:38 - 000001167 _____ () C:\Users\pavuk\AppData\Roaming\pcouffin.inf
2024-08-18 19:01 - 2024-08-19 15:38 - 000000055 _____ () C:\Users\pavuk\AppData\Roaming\pcouffin.log
2024-08-18 19:01 - 2024-08-19 15:38 - 000082816 _____ (VSO Software) C:\Users\pavuk\AppData\Roaming\pcouffin.sys
2022-11-05 10:28 - 2024-11-06 23:32 - 000007601 _____ () C:\Users\pavuk\AppData\Local\Resmon.ResmonCfg
2021-09-23 19:23 - 2021-09-23 19:34 - 000017408 _____ () C:\Users\pavuk\AppData\Local\WebpageIcons.db
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-08-2026 01
Ran by pavuky (14-08-2026 19:33:07)
Running from C:\Users\pavuk\Downloads
Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) (2025-06-23 15:52:05)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2401873512-1259376139-3579719326-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-2401873512-1259376139-3579719326-503 - Limited - Disabled)
Guest (S-1-5-21-2401873512-1259376139-3579719326-501 - Limited - Disabled)
pavuky (DisplayName: l** **v) (S-1-5-21-2401873512-1259376139-3579719326-1001 - Administrators - Enabled) => C:\Users\pavuk
WDAGUtilityAccount (S-1-5-21-2401873512-1259376139-3579719326-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Enabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
3uTools(32bit) (HKLM-x32\...\3uToolsV3_x86) (Version: 3.02.012 - Shenzhen Aidapu Network Technology Co.,Ltd.)
Acronis Drivers (HKLM\...\{3BB511DE-CF00-4723-A89C-D7B7D6FADF11}) (Version: 27.0.39676 - Acronis) Hidden
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 25.001.21223 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.453 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Aegisub 3.2.2 (HKLM-x32\...\{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1) (Version: 3.2.2 - Aegisub Team)
Aegisub 3.4.2 (64bitový) (HKLM\...\{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1) (Version: 3.4.2 - Aegisub Team)
AMD Radeon Settings (HKLM\...\WUCCCApp) (Version: 2018.1218.1230.22499 - Advanced Micro Devices, Inc.)
ArcSoft WebCam Companion 4 (HKLM-x32\...\{AC5253C5-E282-4017-9740-DDA6ECF5C203}) (Version: 4.0.0.374 - ArcSoft)
aTube Catcher verze 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avidemux 2.4 (HKLM-x32\...\Avidemux 2.4) (Version: 2.4.0.3322 - )
Avidemux 2.7 - 32 bits (32-bit) (HKLM-x32\...\Avidemux 2.7 - 32 bits) (Version: 2.7.4.190815 - )
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.7.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX2 (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX2) (Version: 2.0.5.3 - Canon Inc.)
Canon IJ Printer Assistant Tool (HKLM-x32\...\Canon IJ Printer Assistant Tool) (Version: 1.65.1.09 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.4.0.16 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.4 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.8.5 - Canon Inc.)
Canon TS3100 series Elektronická příručka (HKLM-x32\...\Canon TS3100 series Elektronická příručka) (Version: 1.4.0 - Canon Inc.)
Canon TS3100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_TS3100_series) (Version: 1.01 - Canon Inc.)
Canon Wi-Fi Connection Assistant (HKLM-x32\...\Wi-Fi Connection Assistant) (Version: 1.70.0 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 6.25 - Piriform)
Datacho (HKLM-x32\...\{4E8DE3AB-4751-40BE-9472-DBF23F2A0B21}}_is1) (Version: 1.4.0.160 - WebDeal s.r.o.)
DownloadHelper CoApp (HKLM-x32\...\DownloadHelper CoApp) (Version: 2.0.19.0 - ACLAP)
Easy CD-DA Extractor 16 (HKLM-x32\...\Easy CD-DA Extractor 16) (Version: 16.0.9 - Poikosoft)
FastShare.cz verze 2.4.0 (HKLM-x32\...\FastShare.cz_is1) (Version: 2.4.0 - )
Firebird 2.5.4.26856 (Win32) (HKLM-x32\...\FBDBServer_2_5_is1) (Version: 2.5.4.26856 - Firebird Project)
FormatFactory 5.17.0.0 (HKLM-x32\...\FormatFactory) (Version: 5.17.0.0 - Free Time)
Free MP3 Cutter 2.1 (HKLM-x32\...\{847E0734-4457-4B48-BF49-998D1CF2CFA1}_is1) (Version: 2.1 - PolySoft Solutions)
Freemake Video Converter verze 4.1.13 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.13 - Mixbyte Inc.)
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 129.0.1.0 - Google LLC)
Google Earth Pro (HKLM\...\{E3B69BB6-FFD8-441C-933E-BB8A3136ED8F}) (Version: 7.3.7.1155 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 151.0.7922.138 - Google LLC)
HP Audio Switch (HKLM-x32\...\{3A5141D4-47DB-4302-9B1C-272BE585BC8A}) (Version: 1.0.179.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{016FBF6D-AEDE-4D33-87B4-DF6815EF674A}) (Version: 1.4.0.485 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{35556CCA-F14E-48F3-93F4-E29C4B3DBE30}) (Version: 1.4.485.0 - HP Inc.)
HP One Agent (HKLM\...\{AC8A18BC-B573-49EB-9682-F0ECED135435}) (Version: 1.3.345.6640 - HP Inc.)
HP One Agent (HKLM\...\{EA7416A9-13A2-4676-85AA-1D2C66E6A2A0}) (Version: 1.3.345.6640 - HP Inc.) Hidden
HP Registration Service (HKLM-x32\...\{280936C6-5D40-4AE1-9C13-F44E6208DDC4}) (Version: 1.0.0.65 - HP Inc.) Hidden
iCloud Outlook (HKLM\...\{58EF239A-565E-4854-9769-DE7BB82ED781}) (Version: 11.4.0.12 - Apple Inc.)
Inviska MKV Extract verze 11.0 (HKLM\...\{215C3EFC-2BE8-4A5A-9A1F-982C15E47CC9}_is1) (Version: 11.0 - Inviska Software)
Java 8 Update 231 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180231F0}) (Version: 8.0.2310.11 - Oracle Corporation)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0.1 - AppWork GmbH)
K-Lite Codec Pack 17.5.0 Standard (HKLM-x32\...\KLiteCodecPack_is1) (Version: 17.5.0 - KLCP)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Macro Recorder 5.8.0 (HKLM-x32\...\Macro Recorder_is1) (Version: 5.8.0 - Jitbit Software)
MakeMKV v1.17.7 (HKLM-x32\...\MakeMKV) (Version: v1.17.7 - GuinpinSoft inc)
MediaInfo 25.03 (HKLM\...\MediaInfo) (Version: 25.03 - MediaArea.net)
Microsoft .NET Host - 8.0.2 (x86) (HKLM-x32\...\{AFC83F5E-A70F-40EB-B8A0-E1F7B83ED30F}) (Version: 64.8.8795 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.2 (x86) (HKLM-x32\...\{8B3CFFA2-B674-4DB3-B0FF-F23EA1EDE9D0}) (Version: 64.8.8795 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.2 (x86) (HKLM-x32\...\{C259804F-E2F8-4240-8276-83302ABF17AE}) (Version: 64.8.8795 - Microsoft Corporation) Hidden
Microsoft 365 Apps pro velké organizace - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.20228.20158 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 151.0.4129.78 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 151.0.4129.78 - Microsoft Corporation) Hidden
Microsoft Office Professional 2019 - cs-cz (HKLM\...\Professional2019Retail - cs-cz) (Version: 16.0.20228.20158 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.196.0929.0005 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{650c9b4a-60ec-4e4e-8d8e-32d85ce3b7c5}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.50.35719 (HKLM\...\{AECD4ED0-8A3B-41E9-92D1-6BEE0374CCAF}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.50.35719 (HKLM\...\{61B44572-8722-4DAF-8ACF-8E742D30BCC5}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719 (HKLM-x32\...\{91ee571b-0e8a-4c65-9eaf-2e2f5fc60c00}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.2 (x86) (HKLM-x32\...\{3abfc6d6-ddca-44fd-a2b1-d8fc2b575ad6}) (Version: 8.0.2.33318 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.2 (x86) (HKLM-x32\...\{8396E7E6-F535-4E6F-9E2B-CB78A570547A}) (Version: 64.8.8806 - Microsoft Corporation) Hidden
MKVCleaver 64 bit (HKLM\...\{32886311-ABB4-45BE-8274-1F53641B2AC7}_is1) (Version: 0.8.0.0 - Ilia Bakhmoutski)
MKVToolNix 9.9.0 (64bit) (HKLM-x32\...\MKVToolNix) (Version: 9.9.0 - Moritz Bunkus)
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 153.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 138.0.1 - Mozilla)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20131.20112 - Microsoft Corporation) Hidden
PDFescape Desktop Asian Fonts Pack (HKLM\...\{D81F9B76-24DE-4DFF-8869-B31289B36FAC}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Convert Module (HKLM\...\{CC6DC81A-06C1-4933-8117-794710375AD3}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Create Module (HKLM\...\{CCBE3E06-E721-410C-8D36-EDEF37F56743}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Edit Module (HKLM\...\{00CEFC51-9626-4E7E-920B-4757DF0B9491}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Forms Module (HKLM\...\{87391E47-A919-4E89-8D07-EA259AD63DB8}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Insert Module (HKLM\...\{8B686E57-76A7-4330-A981-4AB69DF7A568}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Review Module (HKLM\...\{42EF2557-7C52-40EE-81CF-B658B64C7095}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Secure Module (HKLM\...\{B9EB4384-5195-4ED6-BAB0-661FC5B36E14}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop View Module (HKLM\...\{F108BACE-2CE0-447B-A953-68E2019F7B66}) (Version: 4.0.24.4617 - Red Software) Hidden
PDF-XChange Editor (HKLM\...\{29487948-D54A-4EE4-800D-E205919659C8}) (Version: 8.0.343.0 - Tracker Software Products (Canada) Ltd.) Hidden
PDF-XChange Editor (HKLM-x32\...\{911b790c-3fcf-4ecc-b0d4-8a573a6004b0}) (Version: 8.0.343.0 - Tracker Software Products (Canada) Ltd.)
PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 24.08.27.0 - Kakao Corp.)
PSPad editor (HKLM-x32\...\PSPad editor 32bit_is1) (Version: 5.0.7.775 - Jan Fiala)
Registrace tiskárny (HKLM-x32\...\Canon EISRegistration) (Version: 1.7.0 - Canon Inc.)
ReNamer (HKLM-x32\...\ReNamer_is1) (Version: 7.3.0.0 - den4b Team)
Revo Uninstaller Pro 4.2.3 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.2.3 - VS Revo Group, Ltd.)
SmartShare (HKLM-x32\...\{BAB337AE-DD9E-45C3-BED6-0EE4732AEC60}) (Version: 2.3.1712.1201 - LG Electronics Inc.)
Subtitle Edit 3.5.14 (HKLM\...\SubtitleEdit_is1) (Version: 3.5.14.1 - Nikse)
Tacho+Personal (HKLM-x32\...\{BA75B93A-AA3C-4B4F-B942-C078432E9A10}) (Version: 2.3.4.10417 - SoftProject AG CH-9000 St.Gallen) Hidden
TachoPlusFreeDriver (HKLM-x32\...\TachoPlusFreeDriver) (Version: 2.3.4.10417 - SoftProject)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
VdhCoApp 1.6.3 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version: - DownloadHelper)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)
vs2015_redist x86 (HKLM-x32\...\{BD46163A-0331-4A61-B65A-7B66D7C93F8E}) (Version: 1.0.0.0 - Realnetworks) Hidden
WD Discovery (HKLM-x32\...\WDDiscovery) (Version: 5.0.589 - Western Digital Technologies, Inc.)
WD Drive Utilities (HKLM-x32\...\{45BDDAE8-E34D-46D7-AC23-39C567A719B9}) (Version: 2.1.2.167 - Western Digital Technologies, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{f114c741-7aa6-4296-93f4-75082754ec24}) (Version: 2.1.2.167 - Western Digital Technologies, Inc.)
WD SES Driver Setup (HKLM-x32\...\{D9ABF771-729C-471F-A6DF-1010527DB376}) (Version: 2.1.0 - Western Digital) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.92.0 - Winamp SA)
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
XnView 2.49.3 (HKLM-x32\...\XnView_is1) (Version: 2.49.3 - Gougelet Pierre-e)
Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-02-20] ()
Adobe Reader Touch -> C:\Program Files\WindowsApps\AdobeSystemsIncorporated.AdobeReader_3.1.8.7675_x86__ynb6jyjzte8ga [2020-10-01] (Adobe Systems Incorporated)
Convert HEIC to JPG -> C:\Program Files\WindowsApps\SoftOrbits.ConvertHEICtoJPG_10.1.0.0_x64__9808nkjsftezr [2023-12-25] (SoftOrbits)
ELAN Touchpad Setting -> C:\Program Files\WindowsApps\ELANMicroelectronicsCorpo.ELANTouchpadSetting_11.2.63.0_x64__stws0m115j6hg [2022-04-14] (ELAN Microelectronics Corporation)
HP Audio Center -> C:\Program Files\WindowsApps\AD2F1837.HPAudioCenter_1.11.218.0_x64__v10z8vjag6ke6 [2022-04-14] (HP Inc.)
HP Inc. Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_2.0.11.0_x64__v10z8vjag6ke6 [2026-02-19] (HP Inc.)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.4.481.0_x86__v10z8vjag6ke6 [2019-07-23] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_3.2.0.0_x64__v10z8vjag6ke6 [2026-08-13] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.6.1.0_x64__v10z8vjag6ke6 [2026-07-20] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_166.1.1185.0_x64__v10z8vjag6ke6 [2026-08-13] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.54.3.0_x64__v10z8vjag6ke6 [2026-07-20] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6 [2026-05-04] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa [2026-03-05] (Apple Inc.) [Startup Task]
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-08-13] ()
Microsoft 365 companion apps -> C:\Program Files\WindowsApps\Microsoft.M365Companions_2.2512.12000.0_x64__8wekyb3d8bbwe [2026-01-08] (Microsoft Corporation)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-06-23] (Microsoft Corp.)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-08-13] ()
Narrator Extension - Excel -> C:\Program Files\WindowsApps\MicrosoftWindows.NarratorScript.Excel_1.0.14.0_neutral__cw5n1h2txyewy [2026-04-21] (Microsoft Windows)
Narrator Extension - Word -> C:\Program Files\WindowsApps\MicrosoftWindows.NarratorExtension-Word_2.0.3.0_neutral__cw5n1h2txyewy [2026-05-14] (Microsoft Windows)
NarratorExtension - Outlook -> C:\Program Files\WindowsApps\MicrosoftWindows.NarratorScript.Outlook_2.0.3.0_neutral__cw5n1h2txyewy [2026-05-14] (Microsoft Windows)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-08-13] ()
PDF X -> C:\Program Files\WindowsApps\6760NGPDFLab.PDFX_1.4.26.0_x64__sbe4t8mqwq93a [2026-04-29] (NG PDF Lab)
PhotoWindow -> C:\Program Files\WindowsApps\61711masaxjr.PhotoWindow_3.0.0.1_neutral__jwmqhy3chykh8 [2024-03-17] (Miyabi Software Dev.)
sMedio True DVD for HP -> C:\Program Files\WindowsApps\0E3921EB.sMedioTrueDVDforHP_1.1.160.0_x64__agwrg61xdd7p4 [2024-06-01] (sMedio Inc.)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2631.102.0_x64__cv1g1gvanyjgm [2026-08-13] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.3.1.0_x64__8wekyb3d8bbwe [2026-08-13] (Microsoft Corp.)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{7d043d4e-4259-f459-3630-7b434fd7752c}\localserver32 -> C:\Program Files\HP\HP Media Network\HPMediaNetwork.exe (HP Inc. -> HP Inc.)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{CA65F600-9ABF-4B30-9809-343190721BC2} -> [Fotky na iCloudu] => C:\Users\pavuk\OneDrive\Obrázky\iCloud Photos\Photos
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{ED90173A-3B4C-4E7E-B9CF-79714425D4B5}\InprocServer32 -> C:\Program Files (x86)\PSPad editor\pspshellx64.dll () [File not signed]
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-02-17] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No File
ContextMenuHandlers1: [PDFescapeDesktop_ManagerExt] -> {D3C28D54-72B8-4B8D-B204-157EFA9BF3E7} => -> No File
ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-11-01] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\129.0.1.0\drivefsext.dll [2026-07-27] (Google LLC -> Google LLC.)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2019-03-29] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-2401873512-1259376139-3579719326-1001: [EditWithPSPad] -> {ED90173A-3B4C-4E7E-B9CF-79714425D4B5} => C:\Program Files (x86)\PSPad editor\pspshellx64.dll [2014-11-02] () [File not signed]
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [VIDC.FPS1] => C:\WINDOWS\system32\frapsv64.dll [71680 2013-02-26] (Beepa P/L) [File not signed]
HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-18] (Fox Magic Software) [File not signed]
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [65536 2013-02-26] (Beepa P/L) [File not signed]
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2026-07-20 18:24 - 2026-07-20 18:24 - 000440320 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LauncherSDK\551efa932d3826e0e2b40c00ad1f4467\LauncherSDK.ni.dll
2026-07-20 18:24 - 2026-07-20 18:24 - 000038400 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Logging\50e79d78dcafde1e3f3eea72115ed09f\Logging.ni.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\OneDriveTemp:{68003400-7300-4F00-5300-690049006C00} [620]
AlternateDataStreams: C:\OneDriveTemp:{6D006200-5200-6F00-5700-6F0061003900} [576]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\Log Files:{68003400-7300-4F00-5300-690049006C00} [620]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop:{68003400-7300-4F00-5300-690049006C00} [576]
AlternateDataStreams: C:\Users\pavuk\OneDrive\Dokumenty\PDFescape Desktop:{6D006200-5200-6F00-5700-6F0061003900} [576]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://securesearch.org/homepage?hp=2&pId=BC180101&iDate=2020-12-28 10:42:45&iid=ae738d36-e6c7-4285-889d-b76c3c845805&bName=
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {CC2BC045-ED69-423A-8680-78EB23C27B96} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> {CC2BC045-ED69-423A-8680-78EB23C27B96} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001 -> {CC2BC045-ED69-423A-8680-78EB23C27B96} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_231\bin\ssv.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
BHO: No Name -> {9AF15867-1D90-423B-9853-E99761714165} -> No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_231\bin\jp2ssv.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.)
BHO-x32: PDFescape Desktop Helper -> {9AF15867-1D90-423B-9853-E99761714165} -> C:\Program Files (x86)\PDFescape Desktop\creator\plugins\IEAddin\creator-ie-helper.dll [2019-07-01] (PDFescape -> Red Software)
Toolbar: HKLM - No Name - {A6D4ADF0-4C82-4712-B9B8-69EE9CF06462} - No File
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.)
Toolbar: HKLM-x32 - PDFescape Desktop Toolbar - {A6D4ADF0-4C82-4712-B9B8-69EE9CF06462} - C:\Program Files (x86)\PDFescape Desktop\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-07-01] (PDFescape -> Red Software)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\sharepoint.com -> hxxps://dar20428422-files.sharepoint.com
IE restricted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\kmplayer.com -> kmplayer.com
IE restricted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\kmpmedia.net -> player.kmpmedia.net
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2018-09-15 09:31 - 2020-12-06 19:30 - 000001000 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 player.kmpmedia.net
127.0.0.1 www.activation.freemake.com
127.0.0.1 activation.freemake.com
127.0.0.1 fvc_stat.freemake.com
127.0.0.1 secure.mobiledit.com
2020-05-03 02:02 - 2024-10-02 12:19 - 000000498 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.137.1 ludva.mshome.net # 2029 10 1 1 10 19 7 960
==================== Network ===========================
(Currently there is no automatic fix for this section.)
DNS Servers: 10.0.0.138
Windows Firewall is disabled.
Network Binding:
=============
Wi-Fi: Realtek RTL8821CE 802.11ac PCIe Adapter -> rtwlane.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\Control Panel\Desktop\\Wallpaper ->
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 4) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\AppData\Roaming\uTorrent\uninstall.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\Downloads\axife_5fe916a7f3e60\FileSetup-v29.14.05.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\Downloads\axife_5fe9174d073aa\FileSetup-v29.14.05.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\AppData\Roaming\Axife Standard\FileSetup-v29.14.05.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\Downloads\5fe93e6505bec__Automatic-Mouse-and-Keyboard-6162-With-Crack-Latest-2021\Automatic-Mouse-and-Keyboard-6162-With-Crack-Latest-2021\5fe93e64c92985fe93-files\setup_x86_x64_install.exe
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\StartupFolder: => "Hodiny_T.lnk"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "NetWorx"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "ArcSoft Connection Service"
HKLM\...\StartupApproved\Run32: => "CanonQuickMenu"
HKLM\...\StartupApproved\Run32: => "WDDiscovery"
HKLM\...\StartupApproved\Run32: => "DriveUtilitiesHelper"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "Opera Browser Assistant"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "17964C220E9DA0D37FCF315CDC911E8A51B3BF9C._service_run"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "AshSnap"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "GoogleDriveFS"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_02305D6906FA6EC449BDD7C88E7783A3"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{D56D2201-4302-4327-82F2-B68A88547C56}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{2E9E7E81-7150-4DF5-A445-087D6DE452E2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C0FF1420-E546-4509-B5F1-1C56FA77AFA2}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{48F08F9D-80C9-40E4-9A0E-F5927EF3050A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{94A12505-C370-486E-A971-4E6AEDE7DC93}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{43872B87-4334-44E0-97F2-CCF1BA4081AD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0B936EF0-D742-4E2D-A2F0-891CB7484513}] => (Allow) C:\Program Files\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{77E2CA76-F42A-4218-B3CC-C285C5F9A16B}] => (Allow) C:\Program Files\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{4C5557AA-BA1E-48E4-A9CC-1E3C57843997}] => (Allow) C:\Program Files\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{5324AFF2-0344-407D-A68C-9ACBCF236D1D}] => (Allow) C:\Users\pavuk\OneDrive\Plocha\utorrent_2.2.1.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{BD8DA65E-6869-44C7-9E75-3B0205BFD610}] => (Allow) C:\Users\pavuk\OneDrive\Plocha\utorrent_2.2.1.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{EDF6B809-96F5-4677-A8E6-788B8CDA02C0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{38836E42-454D-48B5-833B-D953675540E2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C3EDE34E-1185-42CA-A294-CBA211DAA1A9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{60C2E295-E3BA-4A2E-8DEE-6BF6A38D0EC8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B286830C-8352-4FA0-B2D0-6D53A43C6891}] => (Allow) LPort=27015
FirewallRules: [{AB80D9B1-55EC-4DA1-B5BA-8DC8F1C91163}] => (Allow) LPort=27015
FirewallRules: [{1FFA0689-BCC8-49C0-A026-1F449BE019D9}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Winamp SA -> Winamp SA)
FirewallRules: [{48611094-C59C-4F8C-AB92-0B419BBC7AF4}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Winamp SA -> Winamp SA)
FirewallRules: [{1EE36E83-26A0-4E2E-BAEF-E294E8E1D04F}] => (Allow) C:\Program Files (x86)\Canon\Wi-Fi Connection Assistant\cnwidadr2.exe (Canon Inc. -> CANON INC.)
FirewallRules: [{637F6DE5-3517-4221-B591-9A4CDA4A5290}] => (Allow) C:\Program Files (x86)\Canon\Wi-Fi Connection Assistant\cnwiddsu\cnwiddsu2.exe (Canon Inc. -> CANON INC.)
FirewallRules: [{C3C74C48-F82C-423B-9EE8-00425B367E6F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F3305EB0-0AD6-45FD-B971-8E872DD48559}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B225607E-4AE0-45E3-9DB0-8EE3BFF8E045}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B47EA582-BE70-4C15-AD80-96F28B8D1EBF}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C953FB87-7BD3-4963-95A7-AD56C3C1DB1E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4431D43E-BA7E-41FB-A86B-95FFD23F69FB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E8717514-57FD-44E1-9B43-241E2B2D25A5}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AF5B6470-3478-42D4-A92F-5B6CF09B7D0B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6786F0A4-BF56-4447-9DC8-BB46F61D29EE}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{ED1BF230-5F84-42B7-A952-FB660CC5C5A9}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{86786159-A71E-4A91-BFDF-7DC05BBD2D7C}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C1A99624-5D0C-4493-BC41-9FE8B0CEFE80}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{48EACC1D-E52D-4B94-97E6-5B5EB855137B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9EC9E158-836A-467C-AA3B-04AE2A2DFF79}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{B9DCDC18-9F24-4D52-9104-F93B271E6E3C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{849759FF-B2DD-40B2-A9A1-C3FDAE75FD28}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8CCE0DC0-606C-4A59-B795-4C3ACC72026C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4EDF9CDE-090E-4F8F-A5B9-7BCF8DF6773E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (08/14/2026 12:47:31 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: NT AUTHORITY)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.
Error: (08/13/2026 11:34:11 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
Error: (08/13/2026 11:34:11 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (08/13/2026 11:34:11 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..
Error: (08/13/2026 11:34:11 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (08/13/2026 08:12:30 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddWin32ServiceFiles: Unable to back up image of service Wondershare Native Push Service since QueryServiceConfig API failed
System Error:
Systém nemůže nalézt uvedený soubor..
Error: (08/13/2026 08:12:30 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddWin32ServiceFiles: Unable to back up image of service HP Comm Recovery since QueryServiceConfig API failed
System Error:
Systém nemůže nalézt uvedený soubor..
Error: (08/13/2026 07:26:34 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: NT AUTHORITY)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.
System errors:
=============
Error: (08/14/2026 11:14:07 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba HP System Info HSA Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.
Error: (08/14/2026 11:10:21 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby HPAppHelperCap bylo dosaženo časového limitu (30000 ms).
Error: (08/14/2026 11:09:43 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby HPAppHelperCap bylo dosaženo časového limitu (30000 ms).
Error: (08/14/2026 11:08:42 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby HPSysInfoCap bylo dosaženo časového limitu (30000 ms).
Error: (08/13/2026 11:29:48 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla neočekávaně ukončena. Tento stav nastal již 3krát.
Error: (08/13/2026 11:29:41 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.
Error: (08/13/2026 11:29:33 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.
Error: (08/13/2026 07:44:33 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience.
Windows Defender:
================
TimeCreated : 14.08.2026 12:42:29
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (B76AD8A5-67E1-477E-A088-C8CBCC325B41}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ьŔΡĆ çøήиĕçťîõп řциðőωñ)
TimeCreated : 13.08.2026 11:37:01
(Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu pĹ™i pokusu o aktualizaci bezpeÄŤnostnĂch) (informacĂ a pokusĂ se o obnovenĂ na pĹ™edchozĂ verzi.) (BezpeÄŤnostnĂ informace, kterĂ© se mÄ›ly naÄŤĂst: AktuálnĂ) (KĂłd chyby: 0x80501102) (Popis chyby: Došlo k neoÄŤekávanĂ˝m potĂĹľĂm. Nainstalujte všechny dostupnĂ© aktualizace a potom opakujte s) (puštÄ›nĂ programu. Informace o instalaci aktualizacĂ naleznete v nápovÄ›dÄ› a podpoĹ™e. ) (Verze bezpeÄŤnostnĂch informacĂ: 1.457.130.0;1.457.130.0) (Verze modulu: 1.1.26070.7)
TimeCreated : 28.07.2026 9:33:58
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (7ABA8833-437D-4E91-BCF0-BED11C64483A}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ŃŚĐ…Ä‹Ń’Îδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 27.07.2026 9:39:02
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (74D4DEFD-DFBB-476F-B889-4DFA1E2A8C48}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ŃŚĐ…Ä‹Ń’Îδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 26.07.2026 1:33:47
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (98E2B8E4-2038-4AA1-86C0-0BCF24E77511}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ŃŚĐ…Ä‹Ń’Îδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
TimeCreated : 25.07.2026 2:28:47
(Message : Antivirová ochrana v programu Microsoft Defender ŝćáñ нαš ъēěñ şţôĎĎĂ©ÄŹ ъĕƒǿґз ĉōмφℓэţїöĹ.%ʼn %ţŚ¢дʼn ЇĎ:%в{) (8A26BD48-B8B9-4B20-99E5-941012EDE9B8}%ή %ţŚçÄή Ťýφĕ:%вAntimalwarovĂ˝ program%Ĺ‹ %ŧЅćÄĐ» Ρǻřâmèťĕřş:%ŃŚRychlĂ© ) (prohledávánĂ%и %ťÙŝĕг:%вNT AUTHORITY\SYSTEM%ņ %ťŜťор Đ“Ń‘Äŝθπ:%ŃŚĐ…Ä‹Ń’Îδűľěð Ń•Ńâń áşÇ»Ĺź šќîрφëď ьèĉåųšё ĹŁÄĄŃ” ļάѕ) (ĹĄ ŝúċċеŝšƒĹÄľ šćà ⿠áşĂĄĹť ωįťнįή ţђε ŀąѕŧ 7 ďà ýŝ)
==================== Memory info ===========================
BIOS: AMI F.42 07/03/2019
Motherboard: HP 85B3
Processor: AMD Ryzen 5 3500U with Radeon Vega Mobile Gfx
Percentage of memory in use: 94%
Total physical RAM: 6058.21 MB
Available physical RAM: 353.26 MB
Total Virtual: 14250.21 MB
Available Virtual: 2408.37 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:237.24 GB) (Free:19.95 GB) (Model: WDC PC SN520 SDAPNUW-256G-1006) NTFS
Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:502.02 GB) (Model: WDC WD10SPZX-60Z10T0) NTFS
\\?\Volume{6fba2790-035e-4972-a802-493339258e30}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.2 GB) NTFS
\\?\Volume{7c4eb51e-7024-4755-bb78-26dcf227b4bb}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.18 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: D22E9938)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 238.5 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================
