VIRY.CZ

Zdravím, asi jsem se unáhlil s konstatováním o švihákovi. https://forum.viry.cz/viewtopic.php?t=160856
Vytížení paměti sice spadlo, ale zůstaly problémy s otvíráním čehokoliv. Všechno dlouho načítá nebo se zobrazuje. Webovky, složky, kontextové menu, otvírání aplikací, jpg, pdf apod.
Je pravda, že jsem to minule nezmínil.
Teď u toho asi 14 dní nebudu. Mám se potom ozvat?

Bylo by to určitě vhodné. Obávám se ovšem, že tohle nebude virový problém. Projistotu zkuste dříve, než se ozvete, zkuste provést tento sken:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Tím se buď potvrdí, nebo vyvrátí virový problém a nám to ukáže, jak dál postupovat.

# -------------------------------
# Malwarebytes AdwCleaner 8.5.0.595
# -------------------------------
# Build: 03-05-2025
# Database: 2024-10-23.4 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 08-28-2026
# Duration: 00:00:01
# OS: Windows 11 (Build 26200.9168)
# Cleaned: 5
# Awaiting reboot:1
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted Preinstalled.HPCleanFLC Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|HPSEU_Host_Launcher
Deleted Preinstalled.HPCleanFLC Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Run|HPSEU_Host_Launcher
Deleted Preinstalled.HPJumpStartBridge Folder C:\Program Files (x86)\HP\HP JUMPSTART BRIDGE
Deleted Preinstalled.HPSupportAssistant Folder C:\ProgramData\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Needs Reboot Preinstalled.HPTouchpointAnalyticsClient Folder C:\ProgramData\HP\HP TOUCHPOINT ANALYTICS CLIENT


*************************

[+] Delete Tracing Keys
[+] Reset Winsock
[+] Reset Windows Installer

*************************

***** Reboot Required to Complete *****


***** [ Folders ] *****

Cleaning failed C:\ProgramData\HP\HP TOUCHPOINT ANALYTICS CLIENT

*************************

AdwCleaner[S00].txt - [1924 octets] - [28/08/2026 16:12:37]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Tohle je v pořádku. Dejte logy FRST+Addition.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-08-2026
Ran by pavuky (administrator) on LUDVA (HP HP Laptop 17-ca1xxx) (28-08-2026 20:22:46)
Running from C:\Users\pavuk\Downloads\FRST64(1).exe
Loaded Profiles: pavuky
Platform: Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3916CC4A-1FF4-495E-A219-4B8573563D0F}\MicrosoftEdge_X64_152.0.4191.53_151.0.4129.107.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3916CC4A-1FF4-495E-A219-4B8573563D0F}\EDGEMITMP_256BA.tmp\setup.exe
(C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3916CC4A-1FF4-495E-A219-4B8573563D0F}\MicrosoftEdge_X64_152.0.4191.53_151.0.4129.107.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2632.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.107\msedgewebview2.exe
(C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MsMpEng.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\DefenderSessionHelper.exe
(DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointGpuInfo.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\NetworkCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\BridgeCommunication.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\SysInfoCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\BridgeCommunication.exe
(DriverStore\FileRepository\u0373104.inf_amd64_beb660c61c852a40\B373048\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0373104.inf_amd64_beb660c61c852a40\B373048\atieclxx.exe
(explorer.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2632.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek) C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Media Network\HPMediaNetwork.exe
(HP Inc. -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.107\msedgewebview2.exe <11>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <25>
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0373104.inf_amd64_beb660c61c852a40\B373048\atiesrxx.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc; HP Development Company, L.P.) C:\Program Files\HP\HP One Agent\hp-one-agent-service.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.6.2.0_x64__v10z8vjag6ke6\DialogHost\ReconsentNotification.exe <2>
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1082144 2020-04-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2097600 2018-04-18] (Realtek Semiconductor Corp. -> Realtek)
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\130.0.2.0\GoogleDriveFS.exe [106912920 2026-08-27] (Google LLC -> Google LLC.)
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919336 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\130.0.2.0\GoogleDriveFS.exe [106912920 2026-08-27] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919336 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\130.0.2.0\GoogleDriveFS.exe [106912920 2026-08-27] (Google LLC -> Google LLC.)
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45626272 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\Run: [HPSEU_Host_Launcher] => C:\Program Files\HP\HP System Event Utility\Host Launcher\HpseuHostLauncher.exe [545864 2025-11-08] (HP Inc. -> HP Inc.)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\130.0.2.0\GoogleDriveFS.exe [106912920 2026-08-27] (Google LLC -> Google LLC.)
HKLM\...\Windows x64\Print Processors\Canon TS3100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDR.DLL [482816 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series: C:\WINDOWS\system32\CNMLMDR.DLL [1302016 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series XPS: C:\WINDOWS\system32\CNMXLMDR.DLL [1304064 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\WINDOWS\system32\pxcpmL.dll [2155776 2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
HKLM\...\Print\Monitors\PDFescape Desktop Monitor: C:\WINDOWS\system32\spool\DRIVERS\x64\pdfescape desktop_pdfpmon_v.4.12.26.3.dll [932984 2021-03-19] (PDF Tools AG -> PDF Tools AG (hxxp://www.pdf-tools.com))
HKLM\Software\...\AppCompatFlags\Custom\patchsdbtest.exe: [{22221111-1111-1111-1111-111111111111}.sdb] -> Microsoft Windows Application Compatibility Fix Database
HKLM\Software\...\AppCompatFlags\InstalledSDB\{22221111-1111-1111-1111-111111111111}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{22221111-1111-1111-1111-111111111111}.sdb [2026-08-26]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\151.0.7922.174\Installer\chrmstp.exe [7598232 2026-08-27] (Google LLC -> Google LLC)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {9F8A2703-AC1B-4818-BBF5-7F32A115A225} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {2A3F4BDD-A207-4261-B148-930DEB9A24B6} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_453_Plugin.exe [1502776 2020-12-03] (Adobe Inc. -> Adobe)
Task: {4357130F-D3C2-4CA0-889F-C0577C4A6BE7} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{F9C15691-2728-4C83-9A55-C5BA28FC9381} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {E70DE904-D13F-46E5-BC22-E0712F9AE392} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{6D99ABFE-77F3-4EB6-A278-C42CC8E33ED5} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {CA3E7E42-EBC1-4251-B3B2-43FC14349CE7} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {8B35B6D0-A273-4609-B0AA-F792405A3DC0} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [5074848 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc. All rights reserved.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "4ad08d92-797e-4ced-af6c-290f91a208f3" --version "6.25.11093" --silent
Task: {AA846480-2955-4709-A158-9E49BA715F66} - System32\Tasks\CCleanerSkipUAC - pavuky => C:\Program Files\CCleaner\CCleaner.exe [39449504 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {82E4DABD-F3B6-473A-8F3F-96FBF6A2578C} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [3373256 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
Task: {3A1FA7FE-3F79-421F-B14D-AB93E62F6B0A} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{9B71B29D-8B5C-4607-A318-1D9849D64767} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {A6F58269-1234-4E5B-85A1-6F6664047CEC} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {D165D261-FA96-483D-B5AA-554C880025C4} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
Task: {C87300B1-EA4F-4071-A473-13B96DB66DA6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [1025096 2026-07-02] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {81A84996-72D0-41B2-A5F9-CBE7D043A92F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [480264 2026-07-02] (HP Inc. -> HP Inc.)
Task: {065F4B8D-4FEF-4DB7-BE6F-3B274D163326} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-08-13] (HP Inc. -> HP Inc.)
Task: {F1F4BFC8-DB66-45CB-B147-B7A0E9376B3C} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-08-13] (HP Inc. -> HP Inc.)
Task: {7B899FF8-3035-400C-801C-93227432BCFD} - System32\Tasks\HPOneAgentRepairTask => C:\ProgramData\Package Cache\{01AE670E-308A-484E-A010-1F2784972271}\HPOneAgent.exe [1170384 2026-08-28] (HP Inc. -> HP Inc; HP Development Company, L.P.)
Task: {D5B78230-9864-45B6-9A5E-945F9F83BA3D} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2023-03-20] () [File not signed]
Task: {444B1BD7-0CC6-4575-A899-AEF89DF6AA2E} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16783144 2026-08-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {CC262431-97CA-4C04-BF93-56E479F61541} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28726680 2026-08-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {3816A6C2-3DB6-4F61-B4C2-8202C5DFA2FF} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [74080 2026-08-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {E3DED221-BE00-40C1-A677-71577F7E3CF9} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28726680 2026-08-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {15F5945E-68C2-4E34-AAD5-AC300E9DE04D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [441712 2026-08-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {5B71F22C-DA6F-431A-A54F-6E99E547097C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [441712 2026-08-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {02E8E8F6-23D2-4378-B773-89783B638B51} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1370480 2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {6FC9D101-35A6-4A72-8DD0-5431893AAA42} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16783144 2026-08-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {F4B0D169-2EC1-49DD-947D-D3DC351ED71E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpCmdRun.exe [1902840 2026-08-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0636A128-66F6-41B2-8896-9829C04DEBE0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpCmdRun.exe [1902840 2026-08-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B72B1F83-4865-4557-ADD7-6035868FCF3B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpCmdRun.exe [1902840 2026-08-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {701CAD1F-9AF3-4A4E-96C1-05676F612245} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpCmdRun.exe [1902840 2026-08-27] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {21B925DF-2917-412F-A107-89FA873C2B32} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2401873512-1259376139-3579719326-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1326720 2026-08-28] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {4669FA97-BBA7-4BF5-95A9-70368BDDEA30} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-08-28] (Mozilla Corporation -> Mozilla Foundation)
Task: {8E406788-4532-4221-BD17-A3CDC7A401E9} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {BED7E824-E8D0-4F34-AD8A-561C04AD9EA5} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2401873512-1259376139-3579719326-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {FD2D5EE8-B57C-45C8-82E7-17C347CC3955} - System32\Tasks\Remove AdwCleaner Application => C:\WINDOWS\system32\CMD.EXE [344064 2026-08-13] (Microsoft Windows -> Microsoft Corporation) -> /C DEL /F /Q "C:\Users\pavuk\Downloads\AdwCleaner.exe"
Task: {45BD8758-9680-4291-9F3B-31FAEFE7465B} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [49032 2018-12-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {7A623922-2D6A-4DC0-AF95-79CF968D74B7} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe [63880 2018-12-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {0F325BBF-730E-4BB9-8C04-E28989290DF2} - System32\Tasks\Uninstall AdwCleaner Application => C:\Users\pavuk\Downloads\AdwCleaner.exe /uninstall (No File)
Task: {9CDD2FC4-F27A-4F27-AD5C-D319F4917890} - System32\Tasks\WD Device Agent Task pavuky => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [727384 2024-08-16] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {8619455B-F773-4CB3-92B6-49C0EE8802F0} - System32\Tasks\WD Discovery Service Task pavuky => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [82264 2024-08-16] (Western Digital Technologies, Inc. -> )

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{01eaf30d-0f97-4cff-95d8-bfe2aa7c513e}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{22ded6cb-3864-4466-88a1-8a935a0bdc2a}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{22ded6cb-3864-4466-88a1-8a935a0bdc2a}: [DhcpDomain] .
Tcpip\..\Interfaces\{465785fe-b270-4c9f-bb65-78f57de96d21}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{465785fe-b270-4c9f-bb65-78f57de96d21}: [DhcpDomain] .

FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: tqo98esj.test -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test [2026-08-28]
FF DownloadDir: C:\Users\pavuk\Downloads
FF Homepage: Mozilla\Firefox\Profiles\tqo98esj.test -> seznam.cz
FF NewTab: Mozilla\Firefox\Profiles\tqo98esj.test -> hxxps://securesearch.org/homepage?hp=2&pId=BC180101&iDate=2020-12-28 10:42:45&iid=ae738d36-e6c7-4285-889d-b76c3c845805&bName=
FF Session Restore: Mozilla\Firefox\Profiles\tqo98esj.test -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\tqo98esj.test -> hxxps://home.netatmo.com; hxxps://aukro.cz
FF Extension: (Použijte Google překladač) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2026-07-23]
FF Extension: (Privacy Badger) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2026-07-23]
FF Extension: (uBlock Origin) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\uBlock0@raymondhill.net.xpi [2026-07-23]
FF Extension: (Bulk Media Downloader) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\{72b2e02b-3a71-4895-886c-fd12ebe36ba3}.xpi [2018-03-03]
FF Extension: (No Name) - C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\tqo98esj.test\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2026-07-23]
FF ProfilePath: C:\Users\pavuk\AppData\Roaming\Mozilla\Firefox\Profiles\l9169vx7.39mx0k8b.default-release [2026-08-15]
FF ProfilePath: C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox [2025-05-11]
FF Homepage: C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox -> seznam.cz
FF Session Restore: C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox -> is enabled.
FF Extension: (Záložky na iCloudu) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\firefoxdav@icloud.com.xpi [2025-05-11]
FF Extension: (To Google Translate) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2025-05-11]
FF Extension: (Privacy Badger) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2025-05-11]
FF Extension: (URL to QR code) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\jid1-ZSMfwe4lCAw9oQ@jetpack.xpi [2025-05-11]
FF Extension: (Torrentz2 Magnet Links +) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\ohmugin-tzmec@gmail.com.xpi [2025-05-11]
FF Extension: (Titulky++) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\titulkyplus@idzor.cf.xpi [2025-05-11]
FF Extension: (uBlock Origin) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\uBlock0@raymondhill.net.xpi [2025-05-11]
FF Extension: (DuckDuckGo Search) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{37220c34-b538-4f3e-af3d-47aa40026683}.xpi [2025-05-11]
FF Extension: (Search on Google Lens) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{56b8308e-566b-4dc0-9957-f6341ceb8552}.xpi [2025-05-11]
FF Extension: (Video DownloadHelper) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-05-11]
FF Extension: (No Name) - C:\Users\pavuk\OneDrive\Plocha\Původní data aplikace Firefox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2025-05-11]
FF HKLM\...\Firefox\Extensions: [pdfescape_desktop_conv_v.1@pdfescape.com] - C:\Program Files\PDFescape Desktop\creator\plugins\FirefoxAddin\pdfescape_desktop_conv_v.1@pdfescape.com.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [pdfescape_desktop_conv_v.1@pdfescape.com] - C:\Program Files\PDFescape Desktop\creator\plugins\FirefoxAddin\pdfescape_desktop_conv_v.1@pdfescape.com.xpi => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_453.dll [2020-12-03] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\dtplugin\npDeployJava1.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\plugin2\npjp2.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-06-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-02-17] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_453.dll [2020-12-03] (Adobe Inc. -> )
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2019-07-02] (CANON INC.) [File not signed]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2026-06-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-06-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\pavuk\AppData\Local\Microsoft\Edge\User Data\Default [2026-08-15]
Edge Extension: (Dokumenty Google offline) - C:\Users\pavuk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-10-16]
Edge Extension: (Edge relevant text changes) - C:\Users\pavuk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-04]

Chrome:
=======
CHR Profile: C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default [2026-08-17]
CHR Notifications: Default -> hxxps://nomadsfit.com; hxxps://sdilej.cz; hxxps://www.facebook.com
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Session Restore: Default -> is enabled.
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2026-08-15]
CHR Extension: (Video Downloader Plus) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjljdgfhkjbdbkcdkfojleidpldagmao [2025-04-20]
CHR Extension: (Fax.Plus - přijímání a odesílání faxů online) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhbnflghagkonoikejjbjinpbdcjjlbo [2025-03-06]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-08-15]
CHR Extension: (Verifee) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\kaamlhinjaceanpdanmagllfeoelcfhl [2024-12-11]
CHR Extension: (Video Download Helper) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2026-08-15]
CHR Extension: (Video Downloader PLUS) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\njgehaondchbmjmajphnhlojfnbfokng [2024-07-27]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\pavuk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-03-15] [UpdateUrl:0] <==== ATTENTION
CHR HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

Opera:
=======
OPR Profile: C:\Users\pavuk\AppData\Roaming\Opera Software\Opera Stable [2026-08-15]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=o ... utEncoding}

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft, Inc. -> ArcSoft Inc.)
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
S4 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-03] (Adobe Inc. -> Adobe)
S4 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-05] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1085856 2024-06-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
S4 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe [9728 2024-08-18] (GuinpinSoft inc) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13546304 2026-08-10] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncHelper.exe [3524664 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
S3 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2015-03-27] (Firebird Project) [File not signed]
S3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [3829760 2015-03-27] (Firebird Project) [File not signed]
S4 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [82216 2020-12-29] (Mixbyte Inc -> Freemake)
R2 hp-one-agent-service; C:\Program Files\HP\HP One Agent\hp-one-agent-service.exe [2457312 2026-07-29] (HP Inc. -> HP Inc; HP Development Company, L.P.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\AppHelperCap.exe [932032 2026-07-08] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\DiagsCap.exe [929984 2026-07-08] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\NetworkCap.exe [925888 2026-07-08] (HP Inc. -> HP Inc.)
S4 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243720 2026-08-13] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\SysInfoCap.exe [1029832 2026-07-08] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_ef460d1f2a35fc16\x64\TouchpointAnalyticsClientService.exe [639784 2025-10-01] (HP Inc. -> HP Inc.)
S3 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460992 2025-04-18] (Canon Inc. -> )
S3 luminati_net_updater_win_formatfactory_pcfreetime_com; C:\Program Files\FormatFactory\net_updater64.exe [10302056 2026-03-20] (Bright Data Ltd -> BrightData Ltd. (certified))
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpDefenderCoreService.exe [2307816 2026-08-27] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.196.0929.0005\OneDriveUpdaterService.exe [3867704 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
S4 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [372736 2024-01-03] (Western Digital Technologies, Inc.) [File not signed]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\NisSrv.exe [5311736 2026-08-27] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MsMpEng.exe [291360 2026-08-27] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.225\WsAppService.exe [473824 2017-05-05] (Wondershare Technology Co.,Ltd -> Wondershare)
S2 HPJumpStartBridge; "c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe" (No File)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AKCCID; C:\WINDOWS\System32\drivers\AKCCID.sys [87208 2024-03-26] (Alcorlink Corp. -> Generic)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [143904 2020-05-11] (Alcorlink Corp. -> )
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [518664 2020-11-03] (Avast Software s.r.o. -> AVAST Software)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-06-23] (Microsoft Corporation) [File not signed]
S3 e2eVAWdm; C:\WINDOWS\System32\drivers\VAud_WDM.sys [112696 2017-07-12] (ARTRAY CO., LTD. -> e2eSoft)
R2 googledrivefs31931; \??\C:\Program Files\Google\Drive File Stream\Drivers\31931\googledrivefs31931.sys [386256 2025-05-05] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1421dec2010cc057\x64\hpcustomcapdriver.sys [18984 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [83008 2026-08-27] (Microsoft Windows -> Microsoft Corporation)
S3 ManyCam; C:\WINDOWS\system32\DRIVERS\mcvidrv.sys [65448 2023-01-17] (ManyCam ULC -> ManyCam ULC)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2018-05-04] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R2 npf; \??\C:\WINDOWS\system32\drivers\npf.sys [36600 2018-12-07] (Riverbed Technology, Inc. -> )
R2 speedfan; \??\C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> )
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2018-05-04] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 UsbNcm; C:\WINDOWS\System32\DriverStore\FileRepository\usbncm.inf_amd64_507538fd4ad98089\UsbNcm.sys [212992 2026-08-13] (Microsoft Windows -> )
S3 VCamSDK; C:\WINDOWS\system32\DRIVERS\VCamSDK.sys [1090904 2019-12-22] (Shanghai Yitu Information Technology Co.,Ltd. -> e2eSoft)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-08-27] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21672 2026-08-27] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [25704 2022-10-03] (WDKTestCert user,132375440089837053 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [660504 2026-08-27] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [137240 2026-08-27] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40208 2026-06-18] (HP Inc. -> HP)
R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_bce55ac535cb3902\WSDScan.sys [61440 2026-08-13] (Microsoft Windows -> Microsoft Corporation)

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-08-28 20:22 - 2026-08-28 20:25 - 000039616 _____ C:\Users\pavuk\Downloads\FRST.txt
2026-08-28 20:18 - 2026-08-28 20:18 - 002450944 _____ (Farbar) C:\Users\pavuk\Downloads\FRST64(1).exe
2026-08-28 16:23 - 2026-08-28 16:23 - 000747294 _____ C:\WINDOWS\system32\perfh005.dat
2026-08-28 16:23 - 2026-08-28 16:23 - 000170868 _____ C:\WINDOWS\system32\perfc005.dat
2026-08-28 12:26 - 2026-08-28 12:26 - 000464896 _____ C:\Users\pavuk\Downloads\Dohoda o úpravě smlouvy byt dlouhá.pdf
2026-08-28 12:24 - 2026-08-28 12:24 - 000000000 ____D C:\Users\pavuk\AppData\LocalLow\Temp
2026-08-28 12:21 - 2026-08-28 12:21 - 000464896 _____ C:\Users\pavuk\Downloads\Dohoda o úpravě smlouvy poštovní.pdf
2026-08-28 10:38 - 2026-08-28 10:38 - 000002144 _____ C:\Users\pavuk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-08-28 09:31 - 2026-08-28 09:31 - 009566696 _____ (Malwarebytes) C:\Users\pavuk\Downloads\AdwCleaner(1).exe
2026-08-28 00:15 - 2026-08-28 00:15 - 000003714 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{44DC640E-0158-49BF-8CF3-5693EA9B06D6}
2026-08-28 00:15 - 2026-08-28 00:15 - 000003588 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{7183DF2B-E4A9-4C75-9F16-3982355AB668}
2026-08-16 11:25 - 2026-08-16 11:25 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-08-16 11:24 - 2026-08-16 11:24 - 000000000 ____D C:\Users\pavuk\AppData\Local\MicrosoftEdge
2026-08-15 16:54 - 2026-08-15 16:54 - 000000000 ____D C:\Users\pavuk\Downloads\Tekutý písek
2026-08-15 12:51 - 2026-08-28 20:23 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-08-14 19:17 - 2026-08-14 19:17 - 000388608 _____ (Trend Micro Inc.) C:\Users\pavuk\Downloads\hijackthis.exe
2026-08-13 11:34 - 2026-08-28 18:16 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-08-13 07:26 - 2026-08-13 07:26 - 000038723 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-08-13 07:26 - 2026-08-13 07:26 - 000038723 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-08-28 20:25 - 2026-07-21 16:32 - 000000000 ____D C:\FRST
2026-08-28 20:24 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-08-28 20:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-08-28 20:19 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-08-28 18:11 - 2019-10-31 21:43 - 000000000 ____D C:\Users\pavuk\AppData\Local\D3DSCache
2026-08-28 17:23 - 2025-06-23 17:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-08-28 16:23 - 2025-06-23 17:51 - 001841748 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-08-28 16:23 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-08-28 16:17 - 2025-06-23 17:51 - 000003846 _____ C:\WINDOWS\system32\Tasks\HPOneAgentRepairTask
2026-08-28 16:17 - 2019-07-23 19:46 - 000000000 ____D C:\ProgramData\Package Cache
2026-08-28 16:16 - 2025-06-23 17:51 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-08-28 16:16 - 2025-06-23 17:48 - 000000438 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-08-28 16:16 - 2025-05-11 15:08 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-08-28 16:16 - 2025-05-11 15:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-08-28 16:16 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-08-28 16:16 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-08-28 16:15 - 2019-07-23 19:45 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2026-08-28 16:15 - 2019-01-09 05:12 - 000000000 ____D C:\Program Files (x86)\HP
2026-08-28 15:49 - 2020-11-05 22:42 - 000000000 ____D C:\Users\pavuk\AppData\Local\CrashDumps
2026-08-28 13:45 - 2022-12-18 22:02 - 000000000 ____D C:\Users\pavuk\OneDrive\Dokumenty\Soubory Outlooku
2026-08-28 13:45 - 2020-10-05 19:59 - 000000000 ____D C:\Users\pavuk\Downloads\seidl transport
2026-08-28 13:44 - 2020-04-25 21:55 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Microsoft\Excel
2026-08-28 12:29 - 2025-02-28 21:05 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\vlc
2026-08-28 10:53 - 2019-10-31 21:42 - 000000000 ____D C:\Users\pavuk\AppData\Local\Packages
2026-08-28 10:38 - 2026-01-03 14:37 - 000390784 _____ (Mozilla Foundation) C:\Users\pavuk\OneDrive\Plocha\Firefox.exe
2026-08-28 10:38 - 2025-06-23 17:51 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-08-28 10:38 - 2025-05-11 15:08 - 000001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-08-28 00:25 - 2018-11-07 08:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-08-28 00:17 - 2023-01-22 19:24 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-08-28 00:16 - 2021-09-24 08:50 - 000002180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2026-08-28 00:14 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\appcompat
2026-08-17 15:33 - 2025-01-23 16:34 - 000000000 ____D C:\Users\pavuk\OneDrive\Plocha\booking
2026-08-17 13:15 - 2019-10-31 22:33 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Microsoft\Word
2026-08-16 11:23 - 2021-03-19 22:33 - 000000000 ____D C:\Program Files\Microsoft Office
2026-08-15 23:14 - 2020-04-03 14:57 - 000000000 ____D C:\Program Files\CCleaner
2026-08-15 11:47 - 2025-06-23 09:56 - 000000000 ____D C:\Users\pavuk\AppData\Roaming\Microsoft\Windows
2026-08-15 11:44 - 2024-04-01 09:26 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows
2026-08-15 11:39 - 2025-06-23 17:51 - 000000000 ____D C:\WINDOWS\system32\Tasks\S-1-5-21-2401873512-1259376139-3579719326-1001
2026-08-13 13:12 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-08-13 12:47 - 2018-11-07 08:47 - 000000000 ____D C:\ProgramData\Packages
2026-08-13 11:34 - 2025-06-23 17:46 - 000595696 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-08-13 11:33 - 2026-05-15 02:31 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-08-13 11:33 - 2025-12-10 21:43 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-08-13 11:33 - 2025-07-08 22:15 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-08-13 11:33 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-08-13 11:33 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-08-13 11:33 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\DiagTrack
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-08-13 11:33 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-08-13 11:33 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-08-13 07:44 - 2023-07-19 17:54 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-08-13 07:24 - 2025-06-23 17:50 - 003375104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-08-13 07:11 - 2019-01-09 05:12 - 000000000 ____D C:\Program Files\HP

==================== Files in the root of some directories ========

2020-12-29 12:51 - 2020-12-29 13:01 - 000000004 _____ () C:\ProgramData\lock.dat
2020-12-29 12:52 - 2020-12-29 13:01 - 000000004 _____ () C:\ProgramData\rc.dat
2020-12-29 12:51 - 2020-12-29 12:51 - 000000008 _____ () C:\ProgramData\ts.dat
2013-02-26 08:34 - 2013-02-26 08:34 - 000234168 _____ (Beepa P/L) C:\Program Files\fraps32.dll
2013-02-26 08:34 - 2013-02-26 08:34 - 000068792 _____ (Beepa P/L) C:\Program Files\fraps64.dat
2013-02-26 08:34 - 2013-02-26 08:34 - 000186552 _____ (Beepa P/L) C:\Program Files\fraps64.dll
2024-08-18 19:01 - 2024-08-19 15:38 - 000099384 _____ () C:\Users\pavuk\AppData\Roaming\inst.exe
2024-08-18 19:01 - 2024-08-19 15:38 - 000007859 _____ () C:\Users\pavuk\AppData\Roaming\pcouffin.cat
2024-08-18 19:01 - 2024-08-19 15:38 - 000001167 _____ () C:\Users\pavuk\AppData\Roaming\pcouffin.inf
2024-08-18 19:01 - 2024-08-19 15:38 - 000000055 _____ () C:\Users\pavuk\AppData\Roaming\pcouffin.log
2024-08-18 19:01 - 2024-08-19 15:38 - 000082816 _____ (VSO Software) C:\Users\pavuk\AppData\Roaming\pcouffin.sys
2022-11-05 10:28 - 2024-11-06 23:32 - 000007601 _____ () C:\Users\pavuk\AppData\Local\Resmon.ResmonCfg
2021-09-23 19:23 - 2021-09-23 19:34 - 000017408 _____ () C:\Users\pavuk\AppData\Local\WebpageIcons.db

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-08-2026
Ran by pavuky (28-08-2026 20:30:16)
Running from C:\Users\pavuk\Downloads
Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) (2025-06-23 15:52:05)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-2401873512-1259376139-3579719326-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-2401873512-1259376139-3579719326-503 - Limited - Disabled)
Guest (S-1-5-21-2401873512-1259376139-3579719326-501 - Limited - Disabled)
pavuky (DisplayName: l** **v) (S-1-5-21-2401873512-1259376139-3579719326-1001 - Administrators - Enabled) [MS Account] => C:\Users\pavuk
WDAGUtilityAccount (S-1-5-21-2401873512-1259376139-3579719326-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Enabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

3uTools(32bit) (HKLM-x32\...\3uToolsV3_x86) (Version: 3.02.012 - Shenzhen Aidapu Network Technology Co.,Ltd.)
Acronis Drivers (HKLM\...\{3BB511DE-CF00-4723-A89C-D7B7D6FADF11}) (Version: 27.0.39676 - Acronis) Hidden
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 25.001.21223 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.453 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Aegisub 3.2.2 (HKLM-x32\...\{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1) (Version: 3.2.2 - Aegisub Team)
Aegisub 3.4.2 (64bitový) (HKLM\...\{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1) (Version: 3.4.2 - Aegisub Team)
AMD Radeon Settings (HKLM\...\WUCCCApp) (Version: 2018.1218.1230.22499 - Advanced Micro Devices, Inc.)
ArcSoft WebCam Companion 4 (HKLM-x32\...\{AC5253C5-E282-4017-9740-DDA6ECF5C203}) (Version: 4.0.0.374 - ArcSoft)
aTube Catcher verze 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avidemux 2.4 (HKLM-x32\...\Avidemux 2.4) (Version: 2.4.0.3322 - )
Avidemux 2.7 - 32 bits (32-bit) (HKLM-x32\...\Avidemux 2.7 - 32 bits) (Version: 2.7.4.190815 - )
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.7.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX2 (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX2) (Version: 2.0.5.3 - Canon Inc.)
Canon IJ Printer Assistant Tool (HKLM-x32\...\Canon IJ Printer Assistant Tool) (Version: 1.65.1.09 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.4.0.16 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.4 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.8.5 - Canon Inc.)
Canon TS3100 series Elektronická příručka (HKLM-x32\...\Canon TS3100 series Elektronická příručka) (Version: 1.4.0 - Canon Inc.)
Canon TS3100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_TS3100_series) (Version: 1.01 - Canon Inc.)
Canon Wi-Fi Connection Assistant (HKLM-x32\...\Wi-Fi Connection Assistant) (Version: 1.70.0 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 6.25 - Piriform)
Datacho (HKLM-x32\...\{4E8DE3AB-4751-40BE-9472-DBF23F2A0B21}}_is1) (Version: 1.4.0.160 - WebDeal s.r.o.)
DownloadHelper CoApp (HKLM-x32\...\DownloadHelper CoApp) (Version: 2.0.19.0 - ACLAP)
Easy CD-DA Extractor 16 (HKLM-x32\...\Easy CD-DA Extractor 16) (Version: 16.0.9 - Poikosoft)
FastShare.cz verze 2.4.0 (HKLM-x32\...\FastShare.cz_is1) (Version: 2.4.0 - )
Firebird 2.5.4.26856 (Win32) (HKLM-x32\...\FBDBServer_2_5_is1) (Version: 2.5.4.26856 - Firebird Project)
FormatFactory 5.17.0.0 (HKLM-x32\...\FormatFactory) (Version: 5.17.0.0 - Free Time)
Free MP3 Cutter 2.1 (HKLM-x32\...\{847E0734-4457-4B48-BF49-998D1CF2CFA1}_is1) (Version: 2.1 - PolySoft Solutions)
Freemake Video Converter verze 4.1.13 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.13 - Mixbyte Inc.)
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 130.0.2.0 - Google LLC)
Google Earth Pro (HKLM\...\{E3B69BB6-FFD8-441C-933E-BB8A3136ED8F}) (Version: 7.3.7.1155 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 151.0.7922.174 - Google LLC)
HP Audio Switch (HKLM-x32\...\{3A5141D4-47DB-4302-9B1C-272BE585BC8A}) (Version: 1.0.179.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{016FBF6D-AEDE-4D33-87B4-DF6815EF674A}) (Version: 1.4.0.485 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{35556CCA-F14E-48F3-93F4-E29C4B3DBE30}) (Version: 1.4.485.0 - HP Inc.)
HP One Agent (HKLM\...\{01AE670E-308A-484E-A010-1F2784972271}) (Version: 1.3.408.2214 - HP Inc.)
HP One Agent (HKLM\...\{051BEB29-D361-453F-9C58-E3E451B1A7E1}) (Version: 1.3.408.2214 - HP Inc.) Hidden
HP Registration Service (HKLM-x32\...\{280936C6-5D40-4AE1-9C13-F44E6208DDC4}) (Version: 1.0.0.65 - HP Inc.) Hidden
iCloud Outlook (HKLM\...\{58EF239A-565E-4854-9769-DE7BB82ED781}) (Version: 11.4.0.12 - Apple Inc.)
Inviska MKV Extract verze 11.0 (HKLM\...\{215C3EFC-2BE8-4A5A-9A1F-982C15E47CC9}_is1) (Version: 11.0 - Inviska Software)
Java 8 Update 231 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180231F0}) (Version: 8.0.2310.11 - Oracle Corporation)
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0.1 - AppWork GmbH)
K-Lite Codec Pack 17.5.0 Standard (HKLM-x32\...\KLiteCodecPack_is1) (Version: 17.5.0 - KLCP)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Macro Recorder 5.8.0 (HKLM-x32\...\Macro Recorder_is1) (Version: 5.8.0 - Jitbit Software)
MakeMKV v1.17.7 (HKLM-x32\...\MakeMKV) (Version: v1.17.7 - GuinpinSoft inc)
MediaInfo 25.03 (HKLM\...\MediaInfo) (Version: 25.03 - MediaArea.net)
Microsoft .NET Host - 8.0.2 (x86) (HKLM-x32\...\{AFC83F5E-A70F-40EB-B8A0-E1F7B83ED30F}) (Version: 64.8.8795 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.2 (x86) (HKLM-x32\...\{8B3CFFA2-B674-4DB3-B0FF-F23EA1EDE9D0}) (Version: 64.8.8795 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.2 (x86) (HKLM-x32\...\{C259804F-E2F8-4240-8276-83302ABF17AE}) (Version: 64.8.8795 - Microsoft Corporation) Hidden
Microsoft 365 Apps pro velké organizace - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 152.0.4191.53 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 151.0.4129.107 - Microsoft Corporation) Hidden
Microsoft Office Professional 2019 - cs-cz (HKLM\...\Professional2019Retail - cs-cz) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.196.0929.0005 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{650c9b4a-60ec-4e4e-8d8e-32d85ce3b7c5}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.50.35719 (HKLM\...\{AECD4ED0-8A3B-41E9-92D1-6BEE0374CCAF}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.50.35719 (HKLM\...\{61B44572-8722-4DAF-8ACF-8E742D30BCC5}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719 (HKLM-x32\...\{91ee571b-0e8a-4c65-9eaf-2e2f5fc60c00}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Microsoft Windows Desktop Runtime - 8.0.2 (x86) (HKLM-x32\...\{3abfc6d6-ddca-44fd-a2b1-d8fc2b575ad6}) (Version: 8.0.2.33318 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.2 (x86) (HKLM-x32\...\{8396E7E6-F535-4E6F-9E2B-CB78A570547A}) (Version: 64.8.8806 - Microsoft Corporation) Hidden
MKVCleaver 64 bit (HKLM\...\{32886311-ABB4-45BE-8274-1F53641B2AC7}_is1) (Version: 0.8.0.0 - Ilia Bakhmoutski)
MKVToolNix 9.9.0 (64bit) (HKLM-x32\...\MKVToolNix) (Version: 9.9.0 - Moritz Bunkus)
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 154.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 138.0.1 - Mozilla)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20228.20190 - Microsoft Corporation) Hidden
PDFescape Desktop Asian Fonts Pack (HKLM\...\{D81F9B76-24DE-4DFF-8869-B31289B36FAC}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Convert Module (HKLM\...\{CC6DC81A-06C1-4933-8117-794710375AD3}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Create Module (HKLM\...\{CCBE3E06-E721-410C-8D36-EDEF37F56743}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Edit Module (HKLM\...\{00CEFC51-9626-4E7E-920B-4757DF0B9491}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Forms Module (HKLM\...\{87391E47-A919-4E89-8D07-EA259AD63DB8}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Insert Module (HKLM\...\{8B686E57-76A7-4330-A981-4AB69DF7A568}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Review Module (HKLM\...\{42EF2557-7C52-40EE-81CF-B658B64C7095}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop Secure Module (HKLM\...\{B9EB4384-5195-4ED6-BAB0-661FC5B36E14}) (Version: 4.0.24.4617 - Red Software) Hidden
PDFescape Desktop View Module (HKLM\...\{F108BACE-2CE0-447B-A953-68E2019F7B66}) (Version: 4.0.24.4617 - Red Software) Hidden
PDF-XChange Editor (HKLM\...\{29487948-D54A-4EE4-800D-E205919659C8}) (Version: 8.0.343.0 - Tracker Software Products (Canada) Ltd.) Hidden
PDF-XChange Editor (HKLM-x32\...\{911b790c-3fcf-4ecc-b0d4-8a573a6004b0}) (Version: 8.0.343.0 - Tracker Software Products (Canada) Ltd.)
PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 24.08.27.0 - Kakao Corp.)
PSPad editor (HKLM-x32\...\PSPad editor 32bit_is1) (Version: 5.0.7.775 - Jan Fiala)
Registrace tiskárny (HKLM-x32\...\Canon EISRegistration) (Version: 1.7.0 - Canon Inc.)
ReNamer (HKLM-x32\...\ReNamer_is1) (Version: 7.3.0.0 - den4b Team)
Revo Uninstaller Pro 4.2.3 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.2.3 - VS Revo Group, Ltd.)
SmartShare (HKLM-x32\...\{BAB337AE-DD9E-45C3-BED6-0EE4732AEC60}) (Version: 2.3.1712.1201 - LG Electronics Inc.)
Subtitle Edit 3.5.14 (HKLM\...\SubtitleEdit_is1) (Version: 3.5.14.1 - Nikse)
Tacho+Personal (HKLM-x32\...\{BA75B93A-AA3C-4B4F-B942-C078432E9A10}) (Version: 2.3.4.10417 - SoftProject AG CH-9000 St.Gallen) Hidden
TachoPlusFreeDriver (HKLM-x32\...\TachoPlusFreeDriver) (Version: 2.3.4.10417 - SoftProject)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
VdhCoApp 1.6.3 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version: - DownloadHelper)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)
vs2015_redist x86 (HKLM-x32\...\{BD46163A-0331-4A61-B65A-7B66D7C93F8E}) (Version: 1.0.0.0 - Realnetworks) Hidden
WD Discovery (HKLM-x32\...\WDDiscovery) (Version: 5.0.589 - Western Digital Technologies, Inc.)
WD Drive Utilities (HKLM-x32\...\{45BDDAE8-E34D-46D7-AC23-39C567A719B9}) (Version: 2.1.2.167 - Western Digital Technologies, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{f114c741-7aa6-4296-93f4-75082754ec24}) (Version: 2.1.2.167 - Western Digital Technologies, Inc.)
WD SES Driver Setup (HKLM-x32\...\{D9ABF771-729C-471F-A6DF-1010527DB376}) (Version: 2.1.0 - Western Digital) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.92.0 - Winamp SA)
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
XnView 2.49.3 (HKLM-x32\...\XnView_is1) (Version: 2.49.3 - Gougelet Pierre-e)

Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-02-20] ()
Adobe Reader Touch -> C:\Program Files\WindowsApps\AdobeSystemsIncorporated.AdobeReader_3.1.8.7675_x86__ynb6jyjzte8ga [2020-10-01] (Adobe Systems Incorporated)
Convert HEIC to JPG -> C:\Program Files\WindowsApps\SoftOrbits.ConvertHEICtoJPG_10.1.0.0_x64__9808nkjsftezr [2023-12-25] (SoftOrbits)
ELAN Touchpad Setting -> C:\Program Files\WindowsApps\ELANMicroelectronicsCorpo.ELANTouchpadSetting_11.2.63.0_x64__stws0m115j6hg [2022-04-14] (ELAN Microelectronics Corporation)
HP Audio Center -> C:\Program Files\WindowsApps\AD2F1837.HPAudioCenter_1.11.218.0_x64__v10z8vjag6ke6 [2022-04-14] (HP Inc.)
HP Inc. Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_2.0.11.0_x64__v10z8vjag6ke6 [2026-02-19] (HP Inc.)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.4.481.0_x86__v10z8vjag6ke6 [2019-07-23] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_3.2.0.0_x64__v10z8vjag6ke6 [2026-08-13] (HP Inc.)
HP PC Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.6.2.0_x64__v10z8vjag6ke6 [2026-08-28] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_166.1.1185.0_x64__v10z8vjag6ke6 [2026-08-13] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.54.3.0_x64__v10z8vjag6ke6 [2026-07-20] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.2.24.0_x64__v10z8vjag6ke6 [2026-05-04] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa [2026-03-05] (Apple Inc.) [Startup Task]
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-08-16] ()
Microsoft 365 companion apps -> C:\Program Files\WindowsApps\Microsoft.M365Companions_2.2512.12000.0_x64__8wekyb3d8bbwe [2026-01-08] (Microsoft Corporation)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-06-23] (Microsoft Corp.)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-08-16] ()
Narrator Extension - Excel -> C:\Program Files\WindowsApps\MicrosoftWindows.NarratorScript.Excel_1.0.14.0_neutral__cw5n1h2txyewy [2026-04-21] (Microsoft Windows)
Narrator Extension - Word -> C:\Program Files\WindowsApps\MicrosoftWindows.NarratorExtension-Word_2.0.3.0_neutral__cw5n1h2txyewy [2026-05-14] (Microsoft Windows)
NarratorExtension - Outlook -> C:\Program Files\WindowsApps\MicrosoftWindows.NarratorScript.Outlook_2.0.3.0_neutral__cw5n1h2txyewy [2026-05-14] (Microsoft Windows)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-08-16] ()
PDF X -> C:\Program Files\WindowsApps\6760NGPDFLab.PDFX_1.4.26.0_x64__sbe4t8mqwq93a [2026-04-29] (NG PDF Lab)
PhotoWindow -> C:\Program Files\WindowsApps\61711masaxjr.PhotoWindow_3.0.0.1_neutral__jwmqhy3chykh8 [2024-03-17] (Miyabi Software Dev.)
sMedio True DVD for HP -> C:\Program Files\WindowsApps\0E3921EB.sMedioTrueDVDforHP_1.1.160.0_x64__agwrg61xdd7p4 [2024-06-01] (sMedio Inc.)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2632.100.0_x64__cv1g1gvanyjgm [2026-08-28] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.4.0.0_x64__8wekyb3d8bbwe [2026-08-28] (Microsoft Corp.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{7d043d4e-4259-f459-3630-7b434fd7752c}\localserver32 -> C:\Program Files\HP\HP Media Network\HPMediaNetwork.exe (HP Inc. -> HP Inc.)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{CA65F600-9ABF-4B30-9809-343190721BC2} -> [Fotky na iCloudu] => C:\Users\pavuk\OneDrive\Obrázky\iCloud Photos\Photos
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001_Classes\CLSID\{ED90173A-3B4C-4E7E-B9CF-79714425D4B5}\InprocServer32 -> C:\Program Files (x86)\PSPad editor\pspshellx64.dll () [File not signed]
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\130.0.2.0\drivefsext.dll [2026-08-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\130.0.2.0\drivefsext.dll [2026-08-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\130.0.2.0\drivefsext.dll [2026-08-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\130.0.2.0\drivefsext.dll [2026-08-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\130.0.2.0\drivefsext.dll [2026-08-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\130.0.2.0\drivefsext.dll [2026-08-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\130.0.2.0\drivefsext.dll [2026-08-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\130.0.2.0\drivefsext.dll [2026-08-27] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-02-17] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\130.0.2.0\drivefsext.dll [2026-08-27] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No File
ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2020-11-18] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\130.0.2.0\drivefsext.dll [2026-08-27] (Google LLC -> Google LLC.)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.196.0929.0005\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-11-01] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\130.0.2.0\drivefsext.dll [2026-08-27] (Google LLC -> Google LLC.)
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2019-03-29] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-2401873512-1259376139-3579719326-1001: [EditWithPSPad] -> {ED90173A-3B4C-4E7E-B9CF-79714425D4B5} => C:\Program Files (x86)\PSPad editor\pspshellx64.dll [2014-11-02] () [File not signed]

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.FPS1] => C:\WINDOWS\system32\frapsv64.dll [71680 2013-02-26] (Beepa P/L) [File not signed]
HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-18] (Fox Magic Software) [File not signed]
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [65536 2013-02-26] (Beepa P/L) [File not signed]

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2026-08-13 17:55 - 2026-08-13 17:55 - 000869376 _____ (.NET Foundation) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.T417b639d#\12665327c2dbd2f5438a072c1c6c59d6\Microsoft.Toolkit.Uwp.Notifications.ni.dll
2026-07-20 18:24 - 2026-07-20 18:24 - 000440320 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LauncherSDK\551efa932d3826e0e2b40c00ad1f4467\LauncherSDK.ni.dll
2026-07-20 18:24 - 2026-07-20 18:24 - 000038400 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Logging\50e79d78dcafde1e3f3eea72115ed09f\Logging.ni.dll
2026-08-13 17:55 - 2026-08-13 17:55 - 000153600 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\RpcClient\db691e04b152a6afaf53f2ca889aecf7\RpcClient.ni.dll
2026-08-13 17:55 - 2026-08-13 17:55 - 003884544 _____ (Newtonsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Newtonsoft.Json\214df181fabdb85dd5470a9d49d9cb91\Newtonsoft.Json.ni.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://securesearch.org/homepage?hp=2&pId=BC180101&iDate=2020-12-28 10:42:45&iid=ae738d36-e6c7-4285-889d-b76c3c845805&bName=
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {CC2BC045-ED69-423A-8680-78EB23C27B96} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> {CC2BC045-ED69-423A-8680-78EB23C27B96} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001 -> {CC2BC045-ED69-423A-8680-78EB23C27B96} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_231\bin\ssv.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_231\bin\jp2ssv.dll [2019-10-31] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.)
BHO-x32: PDFescape Desktop Helper -> {9AF15867-1D90-423B-9853-E99761714165} -> C:\Program Files (x86)\PDFescape Desktop\creator\plugins\IEAddin\creator-ie-helper.dll [2019-07-01] (PDFescape -> Red Software)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.)
Toolbar: HKLM-x32 - PDFescape Desktop Toolbar - {A6D4ADF0-4C82-4712-B9B8-69EE9CF06462} - C:\Program Files (x86)\PDFescape Desktop\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-07-01] (PDFescape -> Red Software)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-13] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\sharepoint.com -> hxxps://dar20428422-files.sharepoint.com
IE restricted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\kmplayer.com -> kmplayer.com
IE restricted site: HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\kmpmedia.net -> player.kmpmedia.net

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-09-15 09:31 - 2026-08-15 11:39 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost

2020-05-03 02:02 - 2024-10-02 12:19 - 000000498 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.137.1 ludva.mshome.net # 2029 10 1 1 10 19 7 960

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 10.0.0.138
Windows Firewall is disabled.

Network Binding:
=============
Wi-Fi: Realtek RTL8821CE 802.11ac PCIe Adapter -> rtwlane.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\Control Panel\Desktop\\Wallpaper ->
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 4) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\AppData\Roaming\uTorrent\uninstall.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\Downloads\axife_5fe916a7f3e60\FileSetup-v29.14.05.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\Downloads\axife_5fe9174d073aa\FileSetup-v29.14.05.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\AppData\Roaming\Axife Standard\FileSetup-v29.14.05.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\pavuk\Downloads\5fe93e6505bec__Automatic-Mouse-and-Keyboard-6162-With-Crack-Latest-2021\Automatic-Mouse-and-Keyboard-6162-With-Crack-Latest-2021\5fe93e64c92985fe93-files\setup_x86_x64_install.exe


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\StartupFolder: => "Hodiny_T.lnk"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "NetWorx"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "ArcSoft Connection Service"
HKLM\...\StartupApproved\Run32: => "CanonQuickMenu"
HKLM\...\StartupApproved\Run32: => "WDDiscovery"
HKLM\...\StartupApproved\Run32: => "DriveUtilitiesHelper"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "Opera Browser Assistant"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "17964C220E9DA0D37FCF315CDC911E8A51B3BF9C._service_run"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "AshSnap"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "GoogleDriveFS"
HKU\S-1-5-21-2401873512-1259376139-3579719326-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_02305D6906FA6EC449BDD7C88E7783A3"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{D56D2201-4302-4327-82F2-B68A88547C56}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{2E9E7E81-7150-4DF5-A445-087D6DE452E2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C0FF1420-E546-4509-B5F1-1C56FA77AFA2}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{48F08F9D-80C9-40E4-9A0E-F5927EF3050A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{94A12505-C370-486E-A971-4E6AEDE7DC93}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{43872B87-4334-44E0-97F2-CCF1BA4081AD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0B936EF0-D742-4E2D-A2F0-891CB7484513}] => (Allow) C:\Program Files\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{77E2CA76-F42A-4218-B3CC-C285C5F9A16B}] => (Allow) C:\Program Files\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{4C5557AA-BA1E-48E4-A9CC-1E3C57843997}] => (Allow) C:\Program Files\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{5324AFF2-0344-407D-A68C-9ACBCF236D1D}] => (Allow) C:\Users\pavuk\OneDrive\Plocha\utorrent_2.2.1.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{BD8DA65E-6869-44C7-9E75-3B0205BFD610}] => (Allow) C:\Users\pavuk\OneDrive\Plocha\utorrent_2.2.1.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{EDF6B809-96F5-4677-A8E6-788B8CDA02C0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{38836E42-454D-48B5-833B-D953675540E2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C3EDE34E-1185-42CA-A294-CBA211DAA1A9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{60C2E295-E3BA-4A2E-8DEE-6BF6A38D0EC8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.114.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B286830C-8352-4FA0-B2D0-6D53A43C6891}] => (Allow) LPort=27015
FirewallRules: [{AB80D9B1-55EC-4DA1-B5BA-8DC8F1C91163}] => (Allow) LPort=27015
FirewallRules: [{1FFA0689-BCC8-49C0-A026-1F449BE019D9}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Winamp SA -> Winamp SA)
FirewallRules: [{48611094-C59C-4F8C-AB92-0B419BBC7AF4}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Winamp SA -> Winamp SA)
FirewallRules: [{1EE36E83-26A0-4E2E-BAEF-E294E8E1D04F}] => (Allow) C:\Program Files (x86)\Canon\Wi-Fi Connection Assistant\cnwidadr2.exe (Canon Inc. -> CANON INC.)
FirewallRules: [{637F6DE5-3517-4221-B591-9A4CDA4A5290}] => (Allow) C:\Program Files (x86)\Canon\Wi-Fi Connection Assistant\cnwiddsu\cnwiddsu2.exe (Canon Inc. -> CANON INC.)
FirewallRules: [{C3C74C48-F82C-423B-9EE8-00425B367E6F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F3305EB0-0AD6-45FD-B971-8E872DD48559}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B225607E-4AE0-45E3-9DB0-8EE3BFF8E045}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B47EA582-BE70-4C15-AD80-96F28B8D1EBF}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C953FB87-7BD3-4963-95A7-AD56C3C1DB1E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4431D43E-BA7E-41FB-A86B-95FFD23F69FB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E8717514-57FD-44E1-9B43-241E2B2D25A5}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AF5B6470-3478-42D4-A92F-5B6CF09B7D0B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6786F0A4-BF56-4447-9DC8-BB46F61D29EE}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{ED1BF230-5F84-42B7-A952-FB660CC5C5A9}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{86786159-A71E-4A91-BFDF-7DC05BBD2D7C}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C1A99624-5D0C-4493-BC41-9FE8B0CEFE80}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{48EACC1D-E52D-4B94-97E6-5B5EB855137B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.10003.61011.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B03BBA49-4ADA-4996-AB97-1A92199B1629}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{3DA31366-912B-403F-9BC8-447F2F69495E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.54041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2E1801AD-CA0B-42A2-AC40-416CCFAA0F85}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.54041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F4AF4E34-4D4D-4230-B97F-93488F882E0E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.54041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FBB18B63-FBD0-49EE-A861-7D02F41951F4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.54041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

28-08-2026 16:15:40 AdwCleaner_BeforeCleaning_28/08/2026_16:15:40

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (08/28/2026 03:49:51 PM) (Source: Application Error) (EventID: 1000) (User: LUDVA)
Description: Název chybující aplikace: BridgeCommunication.exe, verze: 1.87.4769.0, časové razítko: 0x6a4c2b7b
Název chybujícího modulu: VCRUNTIME140.dll, verze: 14.44.35208.0, časové razítko: 0x6b478ebd
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000012201
ID chybujícího procesu: 0xc34
Čas spuštění chybující aplikace: 0x1dd36f4162bb800
Cesta k chybující aplikaci: C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\BridgeCommunication.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_166246cb8bd387ff\x64\VCRUNTIME140.dll
ID sestavy: 34b3066b-ac2b-4cf0-a437-85dbb9bde3e3
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (08/28/2026 12:28:31 PM) (Source: MsiInstaller) (EventID: 11730) (User: LUDVA)
Description: Product: Adobe Refresh Manager -- Error 1730.You must be an Administrator to remove this application. To remove this application, you can log on as an administrator, or contact your technical support group for assistance.

Error: (08/28/2026 12:28:31 PM) (Source: MsiInstaller) (EventID: 11730) (User: LUDVA)
Description: Product: Adobe Refresh Manager -- Error 1730.You must be an Administrator to remove this application. To remove this application, you can log on as an administrator, or contact your technical support group for assistance.

Error: (08/28/2026 12:10:30 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: NT AUTHORITY)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.

Error: (08/17/2026 12:15:14 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: NT AUTHORITY)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.

Error: (08/16/2026 10:51:28 AM) (Source: Application Error) (EventID: 1000) (User: LUDVA)
Description: Název chybující aplikace: defraggler64.exe, verze: 2.22.33.995, časové razítko: 0x5ae9d580
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.26100.9168, časové razítko: 0xef4c9cab
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000061d85
ID chybujícího procesu: 0x2050
Čas spuštění chybující aplikace: 0x1dd2d5c6d649ab9
Cesta k chybující aplikaci: C:\Program Files\Defraggler\defraggler64.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID sestavy: 98c34e06-2d76-4d4a-9fea-71ba62357272
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:

Error: (08/16/2026 10:02:06 AM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: Verze 2.22.33.995 programu Defraggler64.exe ukončila interakci se systémem Windows a byla ukončena. Pokud chcete zjistit, zda jsou k dispozici další informace o problému, zkontrolujte historii problémů v ovládacím panelu Zabezpečení a údržba.

Error: (08/16/2026 01:43:08 AM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: Verze 153.0.4.591 programu firefox.exe ukončila interakci se systémem Windows a byla ukončena. Pokud chcete zjistit, zda jsou k dispozici další informace o problému, zkontrolujte historii problémů v ovládacím panelu Zabezpečení a údržba.


System errors:
=============
Error: (08/28/2026 04:16:00 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba HP One Agent Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

Error: (08/28/2026 04:15:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba HP Insights Analytics byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (08/28/2026 04:15:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba HP System Info HSA Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

Error: (08/28/2026 04:15:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Realtek Audio Universal Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (08/28/2026 04:15:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla neočekávaně ukončena. Tento stav nastal již 4krát.

Error: (08/28/2026 04:15:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba HP JumpStart Bridge byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.

Error: (08/28/2026 04:15:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba HP Diagnostics HSA Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

Error: (08/28/2026 04:15:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba HP App Helper HSA Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.


Windows Defender:
================
TimeCreated : 28.08.2026 9:11:58
Message : Antivirová ochrana v programu Microsoft Defender šćаň ђăѕ ьё℮ň śŧőφφĕď взƒοгè čőmрŀ℮ţîŏñ.%π %τŜčдň ΊĐ:%в{
70DBE9F4-E6B4-43D1-97A3-253DCCCCD72D}%л %ţŠ¢ăň Тýρэ:%ьAntimalwarový program%ŋ %ťŞсàπ Ράгамέŧęŗŝ:%ъRychlé
prohledávání%ņ %ŧŪŝėř:%ьNT AUTHORITY\SYSTEM%ñ %тŞτõρ Ґėâšóй:%вΓРĆ ¢ôŋήэçťïŏń řυлđοώή

TimeCreated : 28.08.2026 0:07:36
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.457.214.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.26070.7
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

TimeCreated : 28.08.2026 0:07:36
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.457.214.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.26070.7
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

TimeCreated : 28.08.2026 0:07:36
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.457.214.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.26070.7
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

TimeCreated : 28.08.2026 0:07:36
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.457.214.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.26070.7
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

TimeCreated : 28.08.2026 0:07:36
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.457.214.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.26070.7
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

TimeCreated : 28.08.2026 0:07:36
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.457.214.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.26070.7
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

TimeCreated : 28.08.2026 0:07:36
Message : Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních
informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.457.214.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.26070.7
Kód chyby: 0x8024402c
Popis chyby: Při zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení
potíží s aktualizacemi naleznete v nápovědě a podpoře.


CodeIntegrity:
===============
Date: 2026-08-28 16:16:40
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\DefenderSessionHelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

BIOS: AMI F.42 07/03/2019
Motherboard: HP 85B3
Processor: AMD Ryzen 5 3500U with Radeon Vega Mobile Gfx
Percentage of memory in use: 53%
Total physical RAM: 6058.21 MB
Available physical RAM: 2797.06 MB
Total Virtual: 14250.21 MB
Available Virtual: 9072.6 MB

==================== Drives ================================

Disk 1 - Drive c: (Windows) (Fixed) (Total:237.24 GB) (Free:17.01 GB) (Model: WDC PC SN520 SDAPNUW-256G-1006) NTFS
Disk 0 - Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:502.02 GB) (Model: WDC WD10SPZX-60Z10T0) NTFS

Disk 1 - \\?\Volume{6fba2790-035e-4972-a802-493339258e30}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.2 GB) NTFS
Disk 1 - \\?\Volume{7c4eb51e-7024-4755-bb78-26dcf227b4bb}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.18 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: D22E9938)

Partition: GPT.

==========================================================
Disk: 1 (Protective MBR) (Size: 238.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => -> No File
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No File
Task: {0F325BBF-730E-4BB9-8C04-E28989290DF2} - System32\Tasks\Uninstall AdwCleaner Application => C:\Users\pavuk\Downloads\AdwCleaner.exe /uninstall (No File)
S2 HPJumpStartBridge; "c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe" (No File)

EmptyTemp:
Hosts:
End

Uložte do C:\Users\pavuk\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 28-08-2026
Ran by pavuky (28-08-2026 21:41:54) Run:3
Running from C:\Users\pavuk\Downloads
Loaded Profiles: pavuky
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => -> No File
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => -> No File
Task: {0F325BBF-730E-4BB9-8C04-E28989290DF2} - System32\Tasks\Uninstall AdwCleaner Application => C:\Users\pavuk\Downloads\AdwCleaner.exe /uninstall (No File)
S2 HPJumpStartBridge; "c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe" (No File)

EmptyTemp:
Hosts:
End
*****************

Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ GoogleDriveBlacklisted => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ GoogleDriveSynced => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ GoogleDriveSyncing => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\GDContextMenu => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0F325BBF-730E-4BB9-8C04-E28989290DF2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0F325BBF-730E-4BB9-8C04-E28989290DF2}" => removed successfully
C:\WINDOWS\System32\Tasks\Uninstall AdwCleaner Application => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstall AdwCleaner Application" => removed successfully
HKLM\System\CurrentControlSet\Services\HPJumpStartBridge => removed successfully
HPJumpStartBridge => service removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 30759189 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 11147470 B
Edge => 0 B
Chrome => 46457732 B
Firefox => 1053628417 B
Opera => 0 B

Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 0 B
ProgramData => 1003393 B
Public => 0 B
systemprofile => 477730 B
systemprofile32 => 0 B
LocalService => 2534 B
NetworkService => 0 B
pavuk => 24385025 B

RecycleBin => 758024725 B
EmptyTemp: => 1.8 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 21:44:56 ====

Smazáno. Změnilo se něco k lepšímu?

Ještě nevím a zase odjíždím. Myslím, že se budu muset zabývat Firefoxem, protože ve správci žere i 2500 MB. Zatím děkuji.

Jj. Zkuste udělat zálohu FF a FF samotný přeinstalovat. Ze zálohy, pokud můžete, obnovte jen záložky. Ozvěte se.