VIRY.CZ

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 18-08-2026
Ran by kater (administrator) on LAPTOP-KUQKOU8M (ASUSTeK COMPUTER INC. VivoBook_ASUSLaptop X421EAY_K413EA) (20-08-2026 19:09:58)
Running from C:\Users\kater\Desktop\FRST64 (1).exe
Loaded Profiles: kater
Platform: Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusOSD.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files (x86)\TeamViewer\crashpad_handler.exe
(C:\Program Files\AVG\Antivirus\AVGSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\aswEngSrv.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2632.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.93\msedgewebview2.exe
(C:\Program Files\WindowsApps\MSTeams_26213.1006.5014.9784_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.93\msedgewebview2.exe
(C:\Users\kater\AppData\Local\Programs\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\kater\AppData\Local\Programs\Opera\134.0.5954.66\opera_crashreporter.exe
(DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusOptimization.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusOptimizationStartupTask.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxEMN.exe
(explorer.exe ->) (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\TuneUp\TuneupUI.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe
(explorer.exe ->) (Ivaylo Beltchev -> IvoSoft) [File not signed] C:\Program Files\Classic Shell\ClassicStartMenu.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\kater\AppData\Local\Programs\Opera\opera.exe
(Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\TuneUp\TuneupUI.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\AVGUI.exe <4>
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <45>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.93\msedgewebview2.exe <17>
(Opera Norway AS -> Opera Software) C:\Users\kater\AppData\Local\Programs\Opera\opera.exe <10>
(services.exe ->) () [File not signed] C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe
(services.exe ->) () [File not signed] C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Windows\System32\DriverStore\FileRepository\asusptpfilter.inf_amd64_42de93a34b508315\AsusPTPService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\AsusAppService\AsusAppService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusOptimization.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSoftwareManager\AsusSoftwareManager.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSwitch\AsusSwitch.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemAnalysis\AsusSystemAnalysis.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe
(services.exe ->) (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\wsc_proxy.exe
(services.exe ->) (DTS, Inc. -> DTS Inc.) C:\Windows\System32\DTS\PC\APO4x\DtsApo4Service.exe
(services.exe ->) (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\TuneUp\TuneupSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\avgToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_a5ea1b1d8db1527e\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_6bfff1da475a22be\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e32ced29f236e322\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_fa928718b2f309e5\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_7c484f80872e1cd8\jhi_service.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_e3868713e3d137ef\esif_uf.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Program Files\Windows Defender\MpDefenderCoreService.exe
(services.exe ->) (Qualcomm Atheros, Inc. -> ) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Xerox Corporation -> Xerox Corporation) C:\Program Files\Xerox\XeroxPrintExperience\CommonFiles\XeroxPrintJobEventManagerService.exe
(sihost.exe ->) (Xerox Corporation -> Xerox Corporation) C:\Program Files\WindowsApps\XeroxCorp.PrintExperience_9.99.18.0_x64__f7egpvdyrs2a8\XeroxCorp.PrintHelper\XeroxCorp.PrintHelper.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2632.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner.exe
(svchost.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxextN.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe <2>

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [1108920 2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\...\Run: [AVG TuneUp UI] => C:\Program Files\AVG\TuneUp\TuneupUI.exe [7626744 2026-07-08] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [M17A] => C:\Windows\twain_32\Brimm17a\Common\TwDsUiLaunch.exe [89168 2024-06-18] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [145344 2019-07-26] (Brother Industries, Ltd. -> Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3140608 2021-01-29] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3588608 2021-04-02] (Brother Industries, Ltd.) [File not signed]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4753768 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [46787544 2026-08-10] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\Run: [Opera Stable] => "C:\Users\kater\AppData\Local\Programs\Opera\opera.exe" --autostart [3058632 2026-08-17] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\Run: [MicrosoftEdgeAutoLaunch_66090DDE054034F9917E2C99F86CD904] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [5018440 2026-08-16] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\WINDOWS\system32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{052EB454-9F19-CB42-7875-807F79F311C4}] -> C:\Program Files (x86)\CCleaner Browser\Application\150.0.35121.182\Installer\chrmstp.exe [6066592 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\151.0.7922.170\Installer\chrmstp.exe [7582872 2026-08-20] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {539B9F2E-9705-4C9D-95DD-D8409F8668CB} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {F7BCD6CA-1F5B-42FB-B3C4-360833EB1387} - System32\Tasks\ASUS Optimization 36D18D69AFC3 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusHotkey.exe [365096 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {728E36DD-D6B5-4A98-BB41-AEADCF2AB6D8} - System32\Tasks\ASUS Update Checker 2.0 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSoftwareManager\AsusUpdateChecker.exe [853040 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {BAA0A5C0-E4CD-466D-AF29-63E51D71549F} - System32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemAnalysis\AsusSystemAnalysis.exe [6498352 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {BD6A61F2-719A-42FF-A0D9-3809318A1F50} - System32\Tasks\AsusSystemDiagnosis_DriverQuality => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe [1514544 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
Task: {B2720852-765B-44A2-B80B-7658A5E97A71} - System32\Tasks\AVG\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [5842360 2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {A289155B-E982-4700-952C-A652DA83D43A} - System32\Tasks\AVG\AVG Antivirus Patcher => C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus.exe [9820152 2026-07-14] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {BC960853-8DB9-403E-BED3-2AE0DF611EFF} - System32\Tasks\AVG\AVG TuneUp BugReport => C:\Program Files\AVG\TuneUp\AvBugReport.exe [6618616 2026-07-08] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.) -> --send "dumps|report" --silent --product 74 --programpath "C:\Program Files\AVG\TuneUp" --configpath "C:\ProgramData\AVG\TuneUp" --path "C:\ProgramData\AVG\TuneUp\log" --path "C:\ProgramData\AVG\Icarus\Logs" --logpath "C:\ProgramData\AVG\TuneUp\log" --guid 79dee6df-fec9-4394-b351-c1bd00111422
Task: {3ED8DFAF-0443-488E-A839-015104AB77E4} - System32\Tasks\AVG\AVG TuneUp Update => C:\Program Files\Common Files\AVG\Icarus\avg-tu\icarus.exe [9736416 2026-05-19] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {6A16E590-5E3F-47BD-B45E-F3AD79EB0B43} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [3763936 2026-05-28] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {9CDB39F9-5379-464E-AF8B-458F04BF55D5} - System32\Tasks\CCleaner 7 - Skip UAC - S-1-5-21-934306686-1168684271-2714761465-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7866256 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {CB98FCEA-CA46-47E0-99CC-40C16870B8F0} - System32\Tasks\CCleaner Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [4612608 2026-07-23] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {D02CDCD1-9956-4829-B636-F86FF5D090B0} - System32\Tasks\CCleaner Browser Heartbeat Task (Logon) => C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe [4612608 2026-07-23] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {3E4FEA74-F63E-4551-B2E9-9A818F33E997} - System32\Tasks\CCleanerUpdateTaskMachineCore => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208168 2023-06-16] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {D26AB205-F354-46BD-8982-C2A4A2B63719} - System32\Tasks\CCleanerUpdateTaskMachineUA => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208168 2023-06-16] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
Task: {31B70DE1-B658-4013-A686-7D5082CAF3F0} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{6E7F2C72-5FE2-40D9-B05A-B9217A90C34D} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {4D54E8DC-A148-499C-AC3C-ACAC6740842A} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {26E593F1-68FA-41D9-AB8A-F7E2990F171A} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {83CCB707-E5EE-44D0-A577-B9DFC521CEF3} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelperOnUnlock => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
Task: {4D4D187A-A678-466B-99F7-B390F4C33B35} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-08-12] (HP Inc. -> HP Inc.)
Task: {39920AE6-D17B-42D9-A1CC-E96D0EDF6730} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-08-12] (HP Inc. -> HP Inc.)
Task: {7D66F412-53F1-4446-8652-30CDC0699A26} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16783144 2026-08-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {72C1A20E-88DF-4184-8D6F-56C350156206} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28726680 2026-08-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {A6BA5DCE-DFAA-4194-955B-4EC3E0C37FB8} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [74080 2026-08-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {BFA34AD2-30A8-473C-ACE8-36DCF30A28FB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28726680 2026-08-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {55D5C003-0388-4C34-A1F6-408AE2BDA1C1} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [441712 2026-08-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {40D6DF80-058B-4250-9EBD-65D44C23076D} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [441712 2026-08-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {4CA09BC2-E137-4EA4-ADBF-132B275F43F4} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1370480 2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {9E593235-E18A-4B65-84DE-93C0B007623A} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16783144 2026-08-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {86820B88-D791-4D07-9424-EA5F081E9095} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (No File)
Task: {904E9E2A-E3CA-4A8C-82B3-88C5A7E81236} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (No File)
Task: {73CDFB22-7130-4D46-B2F9-541DBB239B98} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {E127628E-187F-4CCC-8995-52CFF33A9398} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-934306686-1168684271-2714761465-1001 F041F896C13FDC3B => C:\Users\kater\AppData\Local\Mozilla Firefox\firefox.exe [1326720 2026-08-12] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\F041F896C13FDC3B\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\F041F896C13FDC3B\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {5E2B0E2C-067A-4E63-98DD-AAD3E1CD25E0} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4408208 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {C2F0C152-F9EF-42B6-AD41-4647BECAB0AD} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-934306686-1168684271-2714761465-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4408208 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {D3669538-59C6-4128-B354-AF76E735CC21} - System32\Tasks\OneDrive Startup Task-S-1-5-21-934306686-1168684271-2714761465-1001 => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\OneDriveLauncher.exe [852880 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {C77A48B0-4098-4213-A059-081EFC524D79} - System32\Tasks\Opera scheduled assistant Autoupdate 1623180993 => C:\Users\kater\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [7705544 2026-08-17] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Users\kater\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {35A2C9BF-64FE-4850-B08A-09712831ECD4} - System32\Tasks\Opera scheduled Autoupdate 1623180985 => C:\Users\kater\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [7705544 2026-08-17] (Opera Norway AS -> Opera Software)
Task: {0C4BD410-6555-476F-B861-7DB64806DF6B} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-934306686-1168684271-2714761465-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7866256 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {E0A6EF21-E6EE-4E84-A68B-49270FF43ECF} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-934306686-1168684271-2714761465-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7866256 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {51D293A0-DC8E-4E29-9850-9C37A7D71696} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [6558608 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {2889E74D-9E63-44E3-883B-1CDD6B71E661} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [9274080 2026-01-19] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {E87D2094-D74F-492F-9D91-58FC31A51B8A} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe [1961360 2023-11-01] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {36618E6E-08E1-4F0E-9156-DA0AE83EE55F} - System32\Tasks\Xerox XeroxPrintExperience Printer Configuration - New or Changed => c:\program files\xerox\xeroxprintexperience\xeroxprintexperience\XeroxPrinterConfiguration.exe [419928 2025-01-30] (Xerox Corporation -> Xerox Corporation)
Task: {A0AEAFA6-B723-45E6-BB6E-E20A269C1CEB} - System32\Tasks\Xerox XeroxPrintExperience Printer Configuration - Periodic Refresh => c:\program files\xerox\xeroxprintexperience\xeroxprintexperience\XeroxPrinterConfiguration.exe [419928 2025-01-30] (Xerox Corporation -> Xerox Corporation)
Task: {1076D4EF-22A7-4BBE-9134-889F66A25486} - System32\Tasks\Xerox XeroxPrintExperience Printer Configuration - User Logon => c:\program files\xerox\xeroxprintexperience\xeroxprintexperience\XeroxPrinterConfiguration.exe [419928 2025-01-30] (Xerox Corporation -> Xerox Corporation)
Task: {1319B0EA-51E2-4E32-B9BB-1F6F9D797D0C} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-934306686-1168684271-2714761465-1001 => C:\Users\kater\AppData\Roaming\Zoom\bin\Zoom.exe [511880 2026-08-04] (Zoom Communications, Inc. -> Zoom Communications, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{982f643b-67d8-4795-a108-47723a5a2027}: [DhcpNameServer] 10.10.0.1 0.0.0.0
Tcpip\..\Interfaces\{982f643b-67d8-4795-a108-47723a5a2027}\275736B616F507574616: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{982f643b-67d8-4795-a108-47723a5a2027}\4505D2C494E4B4F554874756E6465627F5431333038324: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{982f643b-67d8-4795-a108-47723a5a2027}\75966696F565F6C6B6F66716: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{982f643b-67d8-4795-a108-47723a5a2027}\B4F6374756C6E696F546F6D616: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{c40337e9-8d13-43db-97a8-0e989d0168c2}: [DhcpNameServer] 10.10.0.1 0.0.0.0
Tcpip\..\Interfaces\{c40337e9-8d13-43db-97a8-0e989d0168c2}\255646D69602E4F64756021333020527F6: [DhcpNameServer] 192.168.27.251
Tcpip\..\Interfaces\{c40337e9-8d13-43db-97a8-0e989d0168c2}\B616E63656C616270235D435: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\44F6374716C6E2E45445: [DhcpNameServer] 77.48.31.69 93.99.200.155
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\44F6374716C6E2E45445: [DhcpDomain] raabnet.net
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\4505D2C496E6B6F514143314: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\B362027594649402D4F4255402B362: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\B616E63656C616270235D435: [DhcpNameServer] 1.1.1.1 8.8.8.8
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\B616E63656C616270235D435: [DhcpDomain] www.tendawifi.com
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\E455D4542594F514743353: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\F4230296E6475627E6564702: [DhcpNameServer] 10.0.1.138
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\F4230296E6475627E6564702: [DhcpDomain] home
Tcpip\..\Interfaces\{f501c246-c724-4ec4-9648-ee29fb882994}\F423D294E6475627E65647F5331403: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{fe538650-fd5b-46aa-a21d-3e9a716471e5}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{fe538650-fd5b-46aa-a21d-3e9a716471e5}\65F6C6B6F66796F5E41435D2E45445E2F62776: [DhcpNameServer] 10.10.0.1 0.0.0.0
Tcpip\..\Interfaces\{fe538650-fd5b-46aa-a21d-3e9a716471e5}\A7163756461636B6160235D435: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF TaskBarID: F041F896C13FDC3B -> C:\Users\kater\AppData\Local\Mozilla Firefox
FF DefaultProfile: njt0ozqb.default-release -> F041F896C13FDC3B
FF ProfilePath: C:\Users\kater\AppData\Roaming\Mozilla\Firefox\Profiles\6w6uy07b.default [2021-06-08]
FF ProfilePath: C:\Users\kater\AppData\Roaming\Mozilla\Firefox\Profiles\njt0ozqb.default-release [2026-08-20]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-07-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-08-10] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google Inc -> Google, Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-07-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=3 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1636.4\npCCleanerBrowserUpdate3.dll [2023-06-16] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=9 -> C:\Program Files (x86)\CCleaner Browser\Update\1.8.1636.4\npCCleanerBrowserUpdate3.dll [2023-06-16] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
StartMenuInternet: Firefox-F041F896C13FDC3B - C:\Users\kater\AppData\Local\Mozilla Firefox\firefox.exe

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\kater\AppData\Local\Microsoft\Edge\User Data\Default [2026-08-20]
Edge Notifications: Default -> hxxps://www.smsadmin.cz
Edge Extension: (Dokumenty Google offline) - C:\Users\kater\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-07-30]
Edge Extension: (Edge relevant text changes) - C:\Users\kater\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]

Chrome:
=======
CHR Profile: C:\Users\kater\AppData\Local\Google\Chrome\User Data\Default [2026-08-20]
CHR Notifications: Default -> hxxps://captchawizard.top; hxxps://www.youtube.com
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee_uninternational&type=E211CZ885G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\kater\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-08-20]
CHR Extension: (Dokumenty Google offline) - C:\Users\kater\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-20]
CHR Extension: (MetaMask) - C:\Users\kater\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2026-08-20]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\kater\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-06-08]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKU\.DEFAULT\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-934306686-1168684271-2714761465-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

Opera:
=======
OPR DefaultProfile: Default

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
R2 AsusAppService; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\AsusAppService\AsusAppService.exe [1167408 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSOptimization; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusOptimization.exe [661552 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 AsusPTPService; C:\WINDOWS\System32\DriverStore\FileRepository\asusptpfilter.inf_amd64_42de93a34b508315\AsusPTPService.exe [1702448 2026-05-26] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
R2 ASUSSoftwareManager; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSoftwareManager\AsusSoftwareManager.exe [1444912 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSwitch; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSwitch\AsusSwitch.exe [653872 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemAnalysis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemAnalysis\AsusSystemAnalysis.exe [6498352 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemDiagnosis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe [1514544 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [1081784 2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AVG Tools; C:\Program Files\AVG\Antivirus\avgToolsSvc.exe [1134008 2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [8063928 2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AVGTuneUpSvc; C:\Program Files\AVG\TuneUp\TuneupSvc.exe [22297592 2026-07-08] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
R2 AVGWscReporter; C:\Program Files\AVG\Antivirus\wsc_proxy.exe [109480 2023-05-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [320000 2021-01-29] (Brother Industries, Ltd.) [File not signed]
S2 ccleaner; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208168 2023-06-16] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [31251856 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.)
S3 CCleanerBrowserElevationService; C:\Program Files (x86)\CCleaner Browser\Application\150.0.35121.182\elevation_service.exe [4057344 2026-07-23] (Gen Digital Inc. -> Gen Digital Inc.)
S3 ccleanerm; C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe [208168 2023-06-16] (PIRIFORM SOFTWARE LIMITED -> Piriform Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13546304 2026-08-10] (Microsoft Corporation -> Microsoft Corporation)
R2 DtsApo4Service; C:\WINDOWS\System32\DTS\PC\APO4x\DtsApo4Service.exe [442368 2023-12-18] (DTS, Inc. -> DTS Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncHelper.exe [3761040 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243720 2026-08-12] (HP Inc. -> HP Inc.)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_fa928718b2f309e5\AS\IAS\IntelAudioService.exe [532960 2026-03-26] (Intel Corporation -> Intel)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [889048 2026-08-06] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\Program Files\Windows Defender\MpDefenderCoreService.exe [2009656 2025-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.145.0728.0010\OneDriveUpdaterService.exe [4054928 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
R2 QcomWlanSrv; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [189808 2023-03-19] (Qualcomm Atheros, Inc. -> )
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [23720784 2026-08-10] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 USBAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe [12288 2023-07-25] () [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4414464 2025-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [282480 2025-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WorkflowAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe [19456 2023-07-25] () [File not signed]
R2 XeroxPrintJobEventManagerService; C:\Program Files\Xerox\XeroxPrintExperience\CommonFiles\XeroxPrintJobEventManagerService.exe [527960 2025-01-30] (Xerox Corporation -> Xerox Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AcxHdAudio; C:\WINDOWS\System32\drivers\AcxHdAudio.sys [585728 2026-05-13] (Microsoft Corporation) [File not signed]
R3 AsusPTPDrv; C:\WINDOWS\System32\DriverStore\FileRepository\asusptpfilter.inf_amd64_42de93a34b508315\AsusPTPFilter.sys [236080 2026-05-26] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R3 AsusSAIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSystemAnalysis\AsusSAIO.sys [51288 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R1 ATKWMIACPIIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSOptimization\AsusWmiAcpi.sys [50952 2026-08-04] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R1 avgArPot; C:\WINDOWS\System32\drivers\avgArPot.sys [245856 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgbidsdriver; C:\WINDOWS\System32\drivers\avgbidsdriver.sys [393824 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgbidsh; C:\WINDOWS\System32\drivers\avgbidsh.sys [317024 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgbuniv; C:\WINDOWS\System32\drivers\avgbuniv.sys [80992 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgDrvBrg; C:\WINDOWS\System32\drivers\avgDrvBrg.sys [86112 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgElam; C:\WINDOWS\System32\drivers\avgElam.sys [29144 2025-07-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 avgKbd; C:\WINDOWS\System32\drivers\avgKbd.sys [34912 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgMonFlt; C:\WINDOWS\System32\drivers\avgMonFlt.sys [299616 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgNetHub; C:\WINDOWS\System32\drivers\avgNetHub.sys [637024 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgRdr; C:\WINDOWS\System32\drivers\avgRdr2.sys [100960 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgRvrt; C:\WINDOWS\System32\drivers\avgRvrt.sys [71776 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgSnx; C:\WINDOWS\System32\drivers\avgSnx.sys [857184 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgSP; C:\WINDOWS\System32\drivers\avgSP.sys [1299040 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 avgStm; C:\WINDOWS\System32\drivers\avgStm.sys [250976 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgVmm; C:\WINDOWS\System32\drivers\avgVmm.sys [473184 2026-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [577536 2025-06-29] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2025-06-29] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-06-29] (Microsoft Corporation) [File not signed]
R3 iaLPSS2_GPIO2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_tgl.inf_amd64_4fcff055ed32f652\iaLPSS2_GPIO2_TGL.sys [132072 2024-04-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_tgl.inf_amd64_bd1c0a60b9594248\iaLPSS2_I2C_TGL.sys [205400 2024-04-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_SPI_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_spi_tgl.inf_amd64_b635eb8a44a8089d\iaLPSS2_SPI_TGL.sys [159320 2024-04-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_UART2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_tgl.inf_amd64_37bebcd2017f6992\iaLPSS2_UART2_TGL.sys [314456 2024-04-18] (Intel Corporation -> Intel Corporation)
R0 iaStorVD; C:\WINDOWS\System32\drivers\iaStorVD.sys [1544912 2021-08-26] (Intel Corporation -> Intel Corporation)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_dfa8107c194025f6\IntcUSB.sys [949216 2026-03-26] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_689d3d5fefeef458\gna.sys [84880 2020-11-06] (Gaussian Mixture Models and Neural Networks Accelerator -> Intel Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [20880 2025-12-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [627104 2025-12-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [102816 2025-12-10] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-06-29] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_bce55ac535cb3902\WSDScan.sys [61440 2026-08-12] (Microsoft Windows -> Microsoft Corporation)
U3 AVG Business Console Client Antivirus Service; no ImagePath
U3 AVG Firewall; no ImagePath
U3 avgArDisk; no ImagePath
U3 avgBcc; no ImagePath
U3 avgbdisk; no ImagePath

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-08-20 19:09 - 2026-08-20 19:10 - 000045273 _____ C:\Users\kater\Desktop\FRST.txt
2026-08-20 19:08 - 2026-08-20 19:08 - 002448896 _____ (Farbar) C:\Users\kater\Desktop\FRST64 (1).exe
2026-08-20 18:57 - 2026-08-20 18:57 - 000679834 _____ C:\WINDOWS\system32\perfh005.dat
2026-08-20 18:57 - 2026-08-20 18:57 - 000145634 _____ C:\WINDOWS\system32\perfc005.dat
2026-08-20 18:53 - 2026-08-20 18:53 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2026-08-20 18:50 - 2026-08-20 18:50 - 000002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox — anonymní prohlížení.lnk
2026-08-20 18:50 - 2026-08-20 18:50 - 000001454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-08-20 18:50 - 2026-08-20 18:50 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-08-20 12:17 - 2026-08-20 12:17 - 001056023 _____ C:\Users\kater\Downloads\Kasparek_KNZ_GL3_6485515842_smlouva_260820_121750.pdf
2026-08-20 12:17 - 2026-08-20 12:17 - 000347295 _____ C:\Users\kater\Downloads\Kasparek_KNZ_GL3_6485515842_smlouva_260820_121753.pdf
2026-08-20 12:17 - 2026-08-20 12:17 - 000347295 _____ C:\Users\kater\Downloads\Kasparek_KNZ_GL3_6485515842_smlouva_260820_121752.pdf
2026-08-20 12:05 - 2026-08-20 12:05 - 000939925 _____ C:\Users\kater\Downloads\Kasparkova_KNZ_1FN_zmena_260820_120526.pdf
2026-08-19 08:07 - 2026-08-19 08:07 - 001022208 _____ C:\Users\kater\Downloads\Zzj_zivot-10-003015-katerina-kasparkova-18_08_2026.pdf
2026-08-18 20:41 - 2026-08-18 20:41 - 000085865 _____ C:\Users\kater\Downloads\Infolist-automobil-2026-08-18-20-22-42669petr-kasparek.pdf
2026-08-18 20:37 - 2026-08-18 20:37 - 000117276 _____ C:\Users\kater\Downloads\Kasparek_KNZ_GL3__modelace_260818_203740.pdf
2026-08-18 19:19 - 2026-08-18 19:19 - 000053596 _____ C:\Users\kater\Downloads\wspdf3863002585305600377hlasenka.pdf
2026-08-18 19:11 - 2026-08-18 19:11 - 000476336 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-08-18 19:05 - 2026-08-18 19:05 - 000053577 _____ C:\Users\kater\Downloads\wspdf7521249830408291643hlasenka.pdf
2026-08-18 18:58 - 2026-08-18 18:58 - 000053556 _____ C:\Users\kater\Downloads\wspdf1083630069140435197hlasenka.pdf
2026-08-18 18:49 - 2026-08-18 18:49 - 000053538 _____ C:\Users\kater\Downloads\wspdf3243994038473020171hlasenka.pdf
2026-08-18 18:40 - 2026-08-18 18:40 - 000053532 _____ C:\Users\kater\Downloads\wspdf7917126967913856447hlasenka.pdf
2026-08-18 18:25 - 2026-08-18 18:25 - 001283764 _____ C:\Users\kater\Downloads\1425401628-smlouva-sken.pdf
2026-08-18 18:23 - 2026-08-18 18:23 - 001283764 _____ C:\Users\kater\Downloads\1425401528-smlouva-sken (1).pdf
2026-08-18 18:22 - 2026-08-18 18:22 - 001283764 _____ C:\Users\kater\Downloads\1425401528-smlouva-sken.pdf
2026-08-18 17:59 - 2026-08-18 17:59 - 000342002 _____ C:\Users\kater\Downloads\Kasparkova_KNZ_1FN_modelace_260818_175932.pdf
2026-08-18 16:46 - 2026-08-18 16:46 - 000053490 _____ C:\Users\kater\Downloads\wspdf3614967920489174402hlasenka.pdf
2026-08-18 16:35 - 2026-08-18 16:35 - 000053491 _____ C:\Users\kater\Downloads\wspdf3524679982052461569hlasenka.pdf
2026-08-18 16:06 - 2026-08-18 16:06 - 000053867 _____ C:\Users\kater\Downloads\wspdf3166307649297722953hlasenka.pdf
2026-08-18 15:24 - 2026-08-18 15:24 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-08-16 03:08 - 2026-08-20 11:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-08-14 15:53 - 2026-08-14 15:53 - 000053493 _____ C:\Users\kater\Downloads\wspdf1815736034836014085hlasenka.pdf
2026-08-14 15:45 - 2026-08-14 15:45 - 000052181 _____ C:\Users\kater\Downloads\wspdf7616535349657372984hlasenka.pdf
2026-08-14 15:45 - 2026-08-14 15:45 - 000052181 _____ C:\Users\kater\Downloads\wspdf7616535349657372984hlasenka (1).pdf
2026-08-14 13:31 - 2026-08-14 13:31 - 000850949 _____ C:\Users\kater\Downloads\4111249047-Classic-Invest-Michaela-Vicankova-Contract.pdf
2026-08-13 10:59 - 2026-08-13 10:59 - 000131026 _____ C:\Users\kater\Downloads\navrh-investicni-dotaznik-michaela-vicankova-cast-all-2026-08-13-10-59-06-00297900093.pdf
2026-08-12 05:51 - 2026-08-12 05:51 - 000038723 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-08-12 05:51 - 2026-08-12 05:51 - 000038723 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-08-10 09:59 - 2026-08-10 09:59 - 000054427 _____ C:\Users\kater\Downloads\wspdf6520175669143383000hlasenka.pdf
2026-08-06 22:16 - 2026-08-06 22:16 - 000825803 _____ C:\Users\kater\Downloads\8512122167-1.pdf
2026-08-06 08:56 - 2026-08-06 08:56 - 000035995 _____ C:\Users\kater\Downloads\72000036872310_20260803133304374_788.pdf
2026-08-06 08:22 - 2026-08-06 08:22 - 000952960 _____ C:\Users\kater\Downloads\Kompletní porovnání nabídek.pdf
2026-08-04 07:46 - 2026-08-04 07:46 - 000377402 _____ C:\Users\kater\Downloads\6466613615-smlouva-sken (2).pdf
2026-08-04 04:10 - 2026-08-04 04:10 - 000000000 ____D C:\Users\kater\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2026-07-30 09:01 - 2026-07-30 09:01 - 001327689 _____ C:\Users\kater\Downloads\Hanak_KNZ_1FG_smlouva_260730_090126.pdf
2026-07-29 17:06 - 2026-07-29 17:06 - 000266824 _____ C:\Users\kater\Downloads\Smlouva (12).pdf
2026-07-29 16:53 - 2026-07-29 16:53 - 000992903 _____ C:\Users\kater\Desktop\Hanáková - TP-nakup-MTPN-2411-tofill.pdf
2026-07-29 16:30 - 2026-07-29 16:30 - 000986366 _____ C:\Users\kater\Downloads\Zzj_zivot-10-002209-eliska-fabikova-29_07_2026 (1).pdf
2026-07-29 16:28 - 2026-07-29 16:28 - 001163374 _____ C:\Users\kater\Downloads\Zzj_zivot-10-002306-petr-hanak-29_07_2026.pdf
2026-07-29 16:12 - 2026-07-29 16:12 - 000986364 _____ C:\Users\kater\Downloads\Zzj_zivot-10-002209-eliska-fabikova-29_07_2026.pdf
2026-07-29 14:14 - 2026-07-29 14:14 - 000097683 _____ C:\Users\kater\Downloads\Infolist-penze-2026-07-29-13-57-15731-hanakova-karla.pdf
2026-07-29 10:55 - 2026-07-29 10:56 - 001054007 _____ C:\Users\kater\Downloads\4130761773-3.pdf
2026-07-28 16:00 - 2026-07-28 16:00 - 001152589 _____ C:\Users\kater\Downloads\Zzj_zivot-10-002306-petr-hanak-28_07_2026.pdf
2026-07-28 15:45 - 2026-07-28 15:45 - 000336449 _____ C:\Users\kater\Downloads\Hanak_KNZ_1FG_modelace_260728_154511.pdf
2026-07-28 14:51 - 2026-07-28 14:51 - 001341697 _____ C:\Users\kater\Downloads\Fabikova_KNZ_1FN_zmena_260728_145104.pdf
2026-07-28 14:50 - 2026-07-28 14:50 - 001347311 _____ C:\Users\kater\Downloads\Kiskova_KNZ_1FN_smlouva_260728_145009.pdf
2026-07-27 14:45 - 2026-07-27 14:45 - 000976721 _____ C:\Users\kater\Downloads\Zzj_zivot-10-002209-eliska-fabikova-27_07_2026.pdf
2026-07-27 14:42 - 2026-07-27 14:42 - 000351579 _____ C:\Users\kater\Downloads\Fabikova_KNZ_1FN_modelace_260727_144200.pdf
2026-07-27 13:47 - 2026-07-27 13:47 - 000346267 _____ C:\Users\kater\Downloads\Fabikova_KNZ_1FN_modelace_260727_134753.pdf
2026-07-27 13:44 - 2026-07-27 13:44 - 000351575 _____ C:\Users\kater\Downloads\Fabikova_KNZ_1FN_modelace_260727_134453.pdf
2026-07-27 13:03 - 2026-07-27 13:03 - 000325560 _____ (Gen Digital Inc.) C:\WINDOWS\system32\avgBoot.exe
2026-07-27 12:32 - 2026-07-27 12:32 - 001125526 _____ C:\Users\kater\Downloads\Zzj_zivot-10-002150-zuzana-kiskova-24_07_2026.pdf
2026-07-24 14:38 - 2026-07-24 14:38 - 000344535 _____ C:\Users\kater\Downloads\Kiskova_KNZ_1FN_modelace_260724_143819.pdf
2026-07-24 10:44 - 2026-07-24 10:44 - 000340424 _____ C:\Users\kater\Downloads\Kiskova_KNZ_1FN_modelace_260724_104437.pdf
2026-07-24 09:56 - 2026-07-24 09:56 - 008783182 _____ C:\Users\kater\Downloads\1423559867p-3.pdf
2026-07-24 09:55 - 2026-07-24 09:55 - 005466359 _____ C:\Users\kater\Downloads\1423559867p-4.pdf
2026-07-24 09:55 - 2026-07-24 09:55 - 000014984 _____ C:\Users\kater\Downloads\1423559867p-1.pdf
2026-07-22 13:35 - 2026-08-20 18:50 - 000000000 ____D C:\Users\kater\AppData\Local\Mozilla Firefox
2026-07-21 19:05 - 2026-07-21 19:05 - 001501033 _____ C:\Users\kater\Downloads\7153017619_Emríšková_Ľubica_Zdravotni predoceneni CPP.pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-08-20 19:10 - 2026-06-28 17:35 - 000003822 _____ C:\WINDOWS\system32\Tasks\AsusSystemDiagnosis_DriverQuality
2026-08-20 19:10 - 2026-05-22 13:51 - 000000000 ____D C:\FRST
2026-08-20 19:10 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-08-20 19:07 - 2025-06-29 03:30 - 000003752 _____ C:\WINDOWS\system32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474
2026-08-20 19:05 - 2025-06-29 03:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-08-20 19:05 - 2025-06-29 03:28 - 000018834 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-08-20 19:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-08-20 19:05 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-08-20 19:05 - 2023-05-24 09:25 - 000000000 ____D C:\ProgramData\AVG
2026-08-20 19:05 - 2022-09-30 14:17 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2026-08-20 19:05 - 2021-06-08 21:33 - 000000000 __SHD C:\Users\kater\IntelGraphicsProfiles
2026-08-20 19:05 - 2021-03-12 02:42 - 000000000 ___HD C:\Intel
2026-08-20 19:04 - 2024-04-01 09:21 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2026-08-20 19:04 - 2021-06-09 13:33 - 3069281280 _____ C:\Users\kater\Documents\katerina.volkova@sms-as.eu.pst
2026-08-20 19:04 - 2020-11-21 03:18 - 000012288 ___SH C:\DumpStack.log.tmp
2026-08-20 19:02 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-08-20 18:57 - 2025-06-29 03:35 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-08-20 18:55 - 2025-06-29 03:30 - 000003366 _____ C:\WINDOWS\system32\Tasks\RtkAudUService64_BG
2026-08-20 18:50 - 2025-06-29 03:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-08-20 18:50 - 2021-06-08 21:37 - 000002249 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-08-20 18:50 - 2021-06-08 21:37 - 000002208 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2026-08-20 18:49 - 2025-06-29 03:30 - 000004518 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1623180993
2026-08-20 18:49 - 2025-06-29 03:30 - 000004236 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1623180985
2026-08-20 18:49 - 2021-06-08 21:36 - 000001370 _____ C:\Users\kater\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2026-08-20 18:48 - 2022-04-04 12:40 - 000000000 ____D C:\ProgramData\Package Cache
2026-08-20 18:47 - 2021-06-08 21:42 - 000000918 _____ C:\Users\Public\Desktop\VLC media player.lnk
2026-08-20 18:38 - 2022-05-12 00:20 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-08-20 18:35 - 2025-06-29 03:24 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-08-20 15:22 - 2021-06-09 12:42 - 000000000 ____D C:\Users\kater\AppData\Roaming\Microsoft\Word
2026-08-20 12:18 - 2024-10-28 20:20 - 000000000 ____D C:\Users\kater\Desktop\SMLOUVY Z PROGRAMŮ BEZ HESEL
2026-08-20 11:03 - 2021-06-08 21:33 - 000000000 ____D C:\Users\kater\AppData\Local\D3DSCache
2026-08-20 10:38 - 2021-06-09 13:26 - 000000000 ____D C:\Users\kater\AppData\Roaming\Microsoft\Excel
2026-08-20 10:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-08-20 10:04 - 2021-06-08 21:34 - 000000000 ___RD C:\Users\kater\OneDrive
2026-08-20 09:21 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-08-20 09:19 - 2021-09-18 10:52 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-08-20 09:11 - 2025-06-29 03:30 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-934306686-1168684271-2714761465-1001
2026-08-20 09:11 - 2025-06-29 03:30 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-934306686-1168684271-2714761465-1001
2026-08-20 09:11 - 2025-06-29 03:30 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-08-20 09:11 - 2021-06-09 13:03 - 000002025 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-08-19 03:39 - 2023-01-17 11:28 - 000002276 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-08-19 03:39 - 2020-11-21 03:20 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-08-18 19:29 - 2022-09-30 14:18 - 000000000 ____D C:\Users\kater\AppData\Roaming\TeamViewer
2026-08-18 17:59 - 2023-03-09 17:29 - 000000000 ____D C:\Users\kater\Desktop\MODELACE DO ADMINU
2026-08-18 17:10 - 2021-06-09 12:42 - 000000000 ____D C:\Users\kater\AppData\Roaming\Microsoft\Office
2026-08-18 15:27 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-08-18 15:21 - 2020-11-21 03:23 - 000000000 ____D C:\Program Files\Microsoft Office
2026-08-16 03:11 - 2025-06-29 03:24 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-08-16 03:08 - 2025-12-10 05:20 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-08-16 03:08 - 2025-07-09 04:10 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-08-16 03:08 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-08-16 03:08 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-08-16 03:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-08-16 03:07 - 2026-05-14 02:48 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-08-16 03:07 - 2024-04-01 18:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\DiagTrack
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-08-16 03:07 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-08-16 03:07 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-08-15 15:34 - 2025-06-29 03:30 - 000003640 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-08-15 15:34 - 2025-06-29 03:30 - 000003514 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-08-14 14:28 - 2022-05-02 12:12 - 000000000 ____D C:\Users\kater\Desktop\KLIENTI -VŠE
2026-08-14 14:06 - 2026-01-21 08:09 - 000004132 _____ C:\WINDOWS\system32\Tasks\ASUS Update Checker 2.0
2026-08-14 14:06 - 2025-06-29 03:30 - 000003756 _____ C:\WINDOWS\system32\Tasks\ASUS Optimization 36D18D69AFC3
2026-08-13 10:56 - 2021-06-08 21:33 - 000000000 ____D C:\Users\kater\AppData\Local\Packages
2026-08-13 10:50 - 2023-08-01 16:46 - 000002148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-08-12 08:35 - 2025-06-29 03:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2026-08-12 08:35 - 2023-11-13 10:30 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-08-12 05:49 - 2025-06-29 03:27 - 003375104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-08-12 05:38 - 2021-07-07 08:45 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-08-12 05:32 - 2021-07-07 08:45 - 228836432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-08-11 03:39 - 2023-05-24 09:34 - 000000000 ____D C:\Users\kater\AppData\Local\AVG
2026-08-07 18:27 - 2023-04-12 08:55 - 000000000 ____D C:\Users\kater\AppData\Roaming\Zoom
2026-08-04 04:10 - 2025-09-08 10:39 - 000004248 _____ C:\WINDOWS\system32\Tasks\ZoomUpdateTaskUser-S-1-5-21-934306686-1168684271-2714761465-1001
2026-08-03 14:54 - 2023-06-16 09:37 - 000002389 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner Browser.lnk
2026-08-03 14:54 - 2023-06-16 09:37 - 000002354 _____ C:\Users\Public\Desktop\CCleaner Browser.lnk
2026-08-03 14:54 - 2023-06-16 09:36 - 000000000 ____D C:\Program Files (x86)\CCleaner Browser
2026-08-03 09:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-07-30 09:30 - 2026-02-03 09:58 - 000390784 _____ (Mozilla Foundation) C:\Users\kater\Desktop\Firefox.exe
2026-07-30 09:30 - 2021-06-08 21:39 - 000001343 _____ C:\Users\kater\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-07-27 14:15 - 2023-06-20 15:31 - 000000000 ____D C:\Users\kater\AppData\Local\CrashDumps
2026-07-27 13:14 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-07-27 13:03 - 2025-06-29 03:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVG
2026-07-27 13:03 - 2023-05-24 09:25 - 001299040 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgSP.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000857184 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgSnx.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000637024 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgNetHub.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000473184 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgVmm.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000393824 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbidsdriver.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000317024 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbidsh.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000299616 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000245856 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgArPot.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000100960 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgRdr2.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000080992 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbuniv.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000071776 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgRvrt.sys
2026-07-27 13:03 - 2023-05-24 09:25 - 000034912 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgKbd.sys

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-08-2026
Ran by kater (20-08-2026 19:12:10)
Running from C:\Users\kater\Desktop
Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) (2025-06-29 01:30:49)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-934306686-1168684271-2714761465-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-934306686-1168684271-2714761465-503 - Limited - Disabled)
Guest (S-1-5-21-934306686-1168684271-2714761465-501 - Limited - Disabled)
kater (DisplayName: Kateřina Volková) (S-1-5-21-934306686-1168684271-2714761465-1001 - Administrators - Enabled) [MS Account] => C:\Users\kater
WDAGUtilityAccount (S-1-5-21-934306686-1168684271-2714761465-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee VirusScan (Disabled - Up to date) {9D4501E6-72F6-2877-C789-89AF6F535B2C}
AV: AVG Antivirus (Enabled - Up to date) {18A975F9-A60C-37D8-E30B-4BEF31AD3411}
FW: McAfee Firewall (Disabled) {A57E80C3-3899-292F-ECD6-209A91801C57}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 26.001.21789 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AppLogLibSetup (HKLM-x32\...\{52FB0C8F-DF05-4C61-AEB6-18C55F8C385F}) (Version: 1.0.3.0 - Brother Industries Ltd.) Hidden
AVG Internet Security (HKLM\...\AVG Antivirus) (Version: 26.7.11086.3749 - Gen Digital Inc.)
AVG TuneUp (HKLM\...\AVG TuneUp) (Version: 26.6.18812.12908 - Gen Digital Inc.)
BrLauncher (HKLM-x32\...\{42D26B47-887C-45FC-BCAE-0BE485C5C0BB}) (Version: 2.0.11.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{190861E7-09C5-42D8-BB4B-0AFB234BCFC1}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{9C9FD76C-DA62-48C3-9450-B5DBDA5E5484}) (Version: 10.7.0.24 - Brother Industries, Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{e06ff58b-3db9-4634-9545-fdbec7c2585f}) (Version: 10.7.0.24 - Brother Industries, Ltd.)
Brother Printer Driver (HKLM-x32\...\{35E7339E-FD1F-4B0B-B216-24BFCDAFC8B4}) (Version: 1.8.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{D1BF1A40-B582-4533-A908-0D582D747A21}) (Version: 1.0.26.1 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{32F47565-84B1-42CC-B09A-4CDDD9A32F94}) (Version: 1.0.20.0 - Brother Industries Ltd.) Hidden
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.10.1464.1889 - Piriform)
CCleaner Browser (HKLM-x32\...\CCleaner Browser) (Version: 150.0.35121.182 - Autoři prohlížeče CCleaner Browser)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1636.4 - Piriform Software) Hidden
Classic Shell (HKLM\...\{CABCE573-0A86-42FA-A52A-C7EA61D5BE08}) (Version: 4.3.1 - IvoSoft)
ControlCenter4 (HKLM-x32\...\{9091B952-8719-49C3-9CC7-6E20EC61081F}) (Version: 4.6.6.1 - Brother Industries, Ltd.) Hidden
ControlCenter4 CSDK (HKLM-x32\...\{FD8A9511-BFC9-43B5-BB75-9CEC0EA03CF0}) (Version: 4.6.1.1 - Brother Industries, Ltd.) Hidden
FORM studio (HKLM-x32\...\FSCZ_is1) (Version: - KASTNER software s.r.o.)
Google Chrome (HKLM\...\{8F334D58-3F69-3BBC-BCF9-517ED38C12E8}) (Version: 151.0.7922.170 - Google LLC)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
HP Dropbox Plugin (HKLM-x32\...\{19EDEC5D-055E-4AD0-88AC-C342608FC47E}) (Version: 36.0.445.57508 - HP)
HP Google Drive Plugin (HKLM-x32\...\{1B225296-B1F1-40B3-8427-844E97CB2D1B}) (Version: 36.0.445.57508 - HP)
HP LaserJet Pro MFP M426-M427 (HKLM-x32\...\{ba385a8d-d398-4df7-9507-0c6a318b1371}) (Version: 16.0.22049.102 - Hewlett-Packard)
HP LJ M426M427 Scan HP Scan (HKLM-x32\...\{C2DEBDE8-1481-4F9A-AE5D-7F9F72717598}) (Version: 1.0.302.0 - Hewlett-Packard Co.) Hidden
HP Unified IO (HKLM\...\{5C76ED0D-0F6F-4985-8B34-F9AE7834848F}) (Version: 2.0.0.434 - HP) Hidden
HP Unified IO (HKLM-x32\...\{F1390872-2500-4408-A46C-CD16C960C661}) (Version: 2.0.0.434 - HP) Hidden
HPLJProMFPM426M427 (HKLM-x32\...\{2304BE7D-2849-406C-9A96-58013461E506}) (Version: 0.05.0000 - Hewlett-Packard) Hidden
HttpToUsbBridge (HKLM-x32\...\{A92EB32D-F0D1-45D8-A071-262D1229D400}) (Version: 2.0.33.1 - Brother Industries Ltd.)
IrfanView 4.75 (64-bit) (HKLM\...\IrfanView64) (Version: 4.75 - Irfan Skiljan)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Microsoft 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft 365 - hu-hu (HKLM\...\O365HomePremRetail - hu-hu) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft 365 - pl-pl (HKLM\...\O365HomePremRetail - pl-pl) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft 365 - sk-sk (HKLM\...\O365HomePremRetail - sk-sk) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 151.0.4129.93 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 151.0.4129.93 - Microsoft Corporation) Hidden
Microsoft Office 2016 pro domácnosti - cs-cz (HKLM\...\HomeStudentRetail - cs-cz) (Version: 16.0.20228.20190 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.145.0728.0010 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.24.31301 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 154.0 (x64 cs)) (Version: 154.0 - Mozilla)
Mozilla Firefox (x64 cs) (HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\Mozilla Firefox) (Version: 153.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 154.0 - Mozilla)
NetworkRepairTool (HKLM-x32\...\{86E68F57-FAFE-4052-BDD4-3B90C38236AE}) (Version: 1.2.16.0 - Brother Industries, Ltd.) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20228.20190 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14026.20246 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.14026.20246 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0415-1000-0000000FF1CE}) (Version: 16.0.20228.20190 - Microsoft Corporation) Hidden
Opera Stable 134.0.5954.66 (HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\Opera 134.0.5954.66) (Version: 134.0.5954.66 - Opera Software)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.255 - Google, Inc.)
ScannerUtilityInstaller (HKLM-x32\...\{D65C0754-7790-427F-AD73-D7C644260F57}) (Version: 1.19.9.1 - Brother) Hidden
SoftwareUpdateNotification (HKLM-x32\...\{E28A6F15-BFBE-4D20-8B5F-6EABAA1E545E}) (Version: 1.0.14.0 - Brother Industries, Ltd.) Hidden
StatusMonitor (HKLM-x32\...\{9D3555A9-C100-45A0-BE3E-33C62D9B2B9A}) (Version: 1.25.4.0 - Brother Industries, Ltd.) Hidden
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.80.6 - TeamViewer)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.58 - Ghisler Software GmbH)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)
UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 3.0.23 - VideoLAN)
WebAdvisor od společnosti McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.2.110 - McAfee, LLC)
WhatsApp (Outdated) (HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\WhatsApp) (Version: 2.2326.10 - WhatsApp)
WinRAR 7.13 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.13.0 - win.rar GmbH)
Xerox Desktop Print Experience 8.5 (HKLM\...\{16B4CC67-50F6-DD5B-CEF3-E2F2EF460494}) (Version: 8.158.0.0 - Xerox Corporation)
Zoom Workplace (HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\ZoomUMX) (Version: 7.0.6 (43848) - Zoom Communications, Inc.)

Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-08-13] ()
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-06-25] (INTEL CORP) [Startup Task]
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-04-16] (Microsoft Corporation)
DTS Audio Processing -> C:\Program Files\WindowsApps\DTSInc.DTSAudioProcessing_1.11.2.0_x64__t5j2fzbtdg37r [2026-05-26] (DTS, Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_166.1.1185.0_x64__v10z8vjag6ke6 [2026-08-12] (HP Inc.)
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\AI [2026-08-18] ()
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2602.23002.0_x64__8wekyb3d8bbwe [2026-04-02] (Microsoft Corporation) [Startup Task]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2023-09-15] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_56.20201.588.0_x64__8wekyb3d8bbwe [2026-03-02] (Microsoft Corporation)
Microsoft.HEVCVideoExtensionFirstParty -> C:\Program Files\WindowsApps\Microsoft.HEVCVideoExtensionFirstParty_2.4.44.0_x64__8wekyb3d8bbwe [2026-04-22] (Microsoft Corporation)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-08-18] ()
MyASUS -> C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.73.0_x64__qmba6cd70vzyy [2026-08-14] (ASUSTeK COMPUTER INC.) [Startup Task]
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-08-18] ()
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.48.312.0_x64__dt26b99r8h8gj [2024-01-17] (Realtek Semiconductor Corp)
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0 [2026-08-13] (Spotify AB) [Startup Task]
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2632.100.0_x64__cv1g1gvanyjgm [2026-08-20] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.3.1.0_x64__8wekyb3d8bbwe [2026-08-06] (Microsoft Corp.)
WinRAR -> C:\Program Files\WinRAR [2025-09-08] (win.rar GmbH)
Xerox Print and Scan Experience -> C:\Program Files\WindowsApps\XeroxCorp.PrintExperience_9.99.18.0_x64__f7egpvdyrs2a8 [2026-02-20] (Xerox Corp)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-934306686-1168684271-2714761465-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-934306686-1168684271-2714761465-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-934306686-1168684271-2714761465-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers1: [AVG TuneUp] -> {13004120-FCAF-4232-A255-807EAD6E7D02} => C:\Program Files\AVG\TuneUp\tucontextmenu.dll [2025-12-11] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers3: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [AVG TuneUp] -> {13004120-FCAF-4232-A255-807EAD6E7D02} => C:\Program Files\AVG\TuneUp\tucontextmenu.dll [2025-12-11] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.145.0728.0010\FileSyncShell64.dll [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2026-07-27] (Gen Digital Inc. -> Gen Digital Inc.)
ContextMenuHandlers6: [AVG TuneUp] -> {13004120-FCAF-4232-A255-807EAD6E7D02} => C:\Program Files\AVG\TuneUp\tucontextmenu.dll [2025-12-11] (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\WINDOWS\System32\StartMenuHelper64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2022-04-04 12:37 - 2005-04-22 13:36 - 000143360 _____ () [File not signed] C:\WINDOWS\system32\BrSNMP64.dll
2022-04-04 12:37 - 2016-11-01 11:27 - 000090112 _____ (Brother Industries, Ltd.) [File not signed] C:\WINDOWS\system32\BrNetSti.dll
2009-09-16 18:44 - 2009-09-16 18:44 - 000153088 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\hptcpmib.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000331264 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\HpTcpMon.dll
2009-09-16 11:44 - 2009-09-16 11:44 - 000132096 _____ (Hewlett Packard) [File not signed] C:\WINDOWS\System32\hpzjrd01.dll
2018-07-15 13:15 - 2018-07-15 13:15 - 003664696 _____ (Ivaylo Beltchev -> IvoSoft) [File not signed] C:\Program Files\Classic Shell\ClassicStartMenuDLL.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000317440 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\System32\HPTcpMUI.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\avgSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\avgSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-07-28] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 11:14 - 2026-08-20 19:05 - 000001012 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 gen-webserver.local www.gen-webserver.local # gen digital helper server
127.0.0.1 revocation.gen-webserver.local www.revocation.gen-webserver.local # gen digital helper server

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.1.1
Windows Firewall is enabled.

Network Binding:
=============
Wi-Fi: Qualcomm Atheros QCA9377 Wireless Network Adapter -> Qcamain10x64.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-934306686-1168684271-2714761465-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\asus\wallpapers\asus.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "Classic Start Menu"
HKLM\...\StartupApproved\Run32: => "M17A"
HKLM\...\StartupApproved\Run32: => "ControlCenter4"
HKLM\...\StartupApproved\Run32: => "BrStsMon00"
HKLM\...\StartupApproved\Run32: => "BrotherSoftwareUpdateNotification"
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\...\StartupApproved\Run: => "Opera Stable"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{7065855F-059A-42D6-BA56-7F1E7FD71C85}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{6E3E2336-EDB6-4467-B44A-B6FA08B143AB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{D985F8BD-426F-4866-9B81-1389E9971A34}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{F2F4BCF5-B5CA-427B-9119-74B81405A109}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{5A74108D-AF79-48C9-A434-B34D1C038087}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25007.203.3359.7325_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{83CAD2A7-03AD-4676-A3BE-19ADB680C816}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25007.203.3359.7325_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4916A1C6-3062-4567-B870-7F2D3929CD26}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{CC878210-F834-4D3A-9140-009A58492D8C}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{FAD79280-7DD1-4BAB-A007-DAB5073F3C67}] => (Allow) LPort=54955
FirewallRules: [{E3F8560A-1843-4226-AF96-037609A9F481}] => (Allow) LPort=54950
FirewallRules: [{5A0446DA-7146-469E-8DDF-71333AD0A383}] => (Allow) C:\Program Files\AVG\Antivirus\AVGUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{81B45C03-16AB-4FB6-969D-9BD33E34F395}] => (Allow) C:\Program Files\AVG\Antivirus\AVGUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{1073AD4B-081E-423A-8DBF-3FDB17806081}] => (Allow) C:\Program Files (x86)\Browny02\Brother\BrPrintFinishNotice\BrPrintFinishNotice.exe (Brother Industries, Ltd. -> )
FirewallRules: [{2EABF101-50D5-4B05-BE00-3CAB3C95AD79}] => (Allow) C:\Program Files (x86)\Browny02\Brother\BrPrintFinishNotice\BrPrintFinishNotice.exe (Brother Industries, Ltd. -> )
FirewallRules: [{6BD216AB-37BE-49A5-9580-9A243840328E}] => (Allow) LPort=54925
FirewallRules: [{3D24D50A-37AF-479D-A933-F8B4FA60479E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{6573822C-598A-41B4-B39F-A5111306A47B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{0A37A45C-942D-461E-B94F-964CDD63D6A1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{7ACC9A52-4C0E-44CE-B6F1-CFBCF8DF2DA6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{D836E9D6-82B5-43F2-B8C7-C878B9464236}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{F25374A8-EC9F-4441-807A-E874FF78A6AC}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{7BA78620-C598-40E8-A144-3A49967475DA}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{D68652A4-A860-4C6E-85F3-092868E88C28}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{9D94E13B-0A4D-43CC-B0C1-0BB25EDC15D4}] => (Allow) C:\Users\kater\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [{96391DAE-C43C-4B16-8462-CAC9302C3877}] => (Allow) C:\Users\kater\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{DC443134-6B58-4DEF-A526-BDB842FC8C9A}] => (Allow) C:\Users\kater\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{2613458A-A31A-4FDE-8694-A6870B648882}] => (Allow) C:\Program Files\AVG\TuneUp\TuneupUI.exe (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
FirewallRules: [{C294FAC4-F5D0-4487-9044-F3262486FA83}] => (Allow) C:\Program Files\AVG\TuneUp\TuneupUI.exe (Gen Digital Inc. -> AVG Technologies CZ, s.r.o.)
FirewallRules: [{7F0481C7-045A-42CD-AF08-E3A757D24839}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F8F83FC3-F893-4F9B-A0DE-495DD4E5239F}] => (Allow) C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe (Gen Digital Inc. -> Gen Digital Inc.)
FirewallRules: [{BE8C8F16-B035-4AF8-9AC3-7D4C95029C60}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F81EFB86-B44E-4FBC-BBE8-9834A4D7563F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{94AB4A27-5410-41DC-BC98-49A5A2B58E5F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2306C507-5188-4BD6-AB53-4DEB712183A0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D1FF3011-BAD8-498A-8D3D-9FC2695512FE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4EAC8ACB-4ECE-41EE-9D24-E441A1777FB9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{14EACDB1-A249-4BBD-B117-FCBCEB06F958}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F5D8ADC8-A3F2-402F-BDFB-41FB914F0CF6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C0B44FAF-2EBA-4E8F-B69E-1ECBF911772E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5115B35F-1A02-4CDD-885C-C39FBBFA54C6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D6A7D802-DF45-4B6D-9F39-9263647C263C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1EFBBC6F-38F3-419C-A2B7-37D23F470556}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{65818687-FAF0-48AE-8A7D-C666DCA21913}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.296.518.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{87DE05AE-1DA1-4C6E-88F1-BB6FEC7C824C}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.73.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{00EA0753-DC47-4938-B76E-693241C26DD9}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.73.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{F1489B94-0960-4E77-9E95-EF964AEEF9E1}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.73.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{9459CE90-DD79-4641-9C8A-2CF8D5513104}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_4.0.73.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ASUSTeK COMPUTER INC.)
FirewallRules: [{C2880B7B-B773-44CE-BD1A-CD90F9CF6DC7}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.46011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B6E9FD63-A5AA-4F3A-AEB0-FBFBD58092BA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.46011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0DF5AD94-FDD5-424B-8DAE-135848992B4B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.46011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{24C41370-1B6F-4626-A070-AB3F18F2217F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.46011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2E2C103A-E2C6-40E2-AB54-68C4C0A717EB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{63651F65-BEB8-4707-BA6F-CE05DC3FD128}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{15DE0617-5D5E-4863-BD69-6AE4C527E2F4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{F902C184-967D-4866-9C0B-0600D0410CA1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{138C24D4-EE16-4476-AD45-FAA8C7A006A7}] => (Allow) C:\Users\kater\AppData\Local\Programs\Opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{7AEB4FAC-A6C6-4514-9DDF-B661C0584CC1}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{37228596-5298-404D-BC62-7D9F91AE382C}] => (Allow) C:\Users\kater\AppData\Local\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{A1EA563F-FB3D-4864-838B-E3814E211701}] => (Allow) C:\Users\kater\AppData\Local\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E2618912-4E59-4B10-9D96-A8CB69D5E302}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSwitch\AsusSwitchNet.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{ACCE6D02-30CB-4B74-97B0-771F5C1C0A1F}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_40d9f1ecf566b220\ASUSSwitch\AsusSwitchNetMDNS.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)

==================== Restore Points =========================

20-08-2026 03:31:55 Windows Update
20-08-2026 18:51:54 Piriform Driver Updater Restore Point

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (08/20/2026 07:05:30 PM) (Source: CertEnroll) (EventID: 87) (User: NT AUTHORITY)
Description: Registrace certifikátu SCEP pro Místní systém přes https://INTC-KeyId-b066d9697f5d3a07b425 ... s/Aik/scep se nepovedla:

PkiStatus(11): SCEPDispositionPendingChallenge
EnrollStatus(32): EnrollUnknown
Operace byla dokončena úspěšně. 0x0 (WIN32: 0)
SubmitDone
SubmitV2Attestation: Bad Request
{"Message":"V2 Protocol AIK certificate requests with P-256 ECC public keys are not supported. Public key algorithm: 1.2.840.10045.2.1, Key length: 256."}
HTTP/1.1 400 Bad Request
Date: Thu, 20 Aug 2026 17:05:30 GMT
Content-Length: 154
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 4f9bf805-f3f3-4579-a26a-38cf4d780461

Metoda: POST(1938ms)
Fáze: SubmitDone
Chybná žádost (400) 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)

Error: (08/20/2026 07:05:16 PM) (Source: Universal Print) (EventID: 1) (User: )
Description: Failed to GetUserSid. hr: 0x8001012d

Error: (08/20/2026 07:05:16 PM) (Source: Universal Print) (EventID: 1) (User: )
Description: Failed to GetUserSid. hr: 0x8001012d

Error: (08/20/2026 07:05:07 PM) (Source: USBAppControl) (EventID: 32767) (User: )
Description: Wait Workflow Commands request from device.

Error: (08/20/2026 07:05:07 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Wait Workflow Commands request from device.

Error: (08/20/2026 07:05:07 PM) (Source: USBAppControl) (EventID: 32767) (User: )
Description: Start Server...

Error: (08/20/2026 07:05:06 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Start Broadcast Receiver Server...

Error: (08/20/2026 07:05:06 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Start Server...


System errors:
=============
Error: (08/20/2026 07:07:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (08/20/2026 07:07:09 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (30000 ms).

Error: (08/20/2026 07:05:04 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Intel(R) TPM Provisioning Service bylo dosaženo časového limitu (45000 ms).

Error: (08/20/2026 06:54:04 PM) (Source: IntcOED) (EventID: 387) (User: )
Description: Event-ID 387

Error: (08/20/2026 10:00:54 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (08/20/2026 10:00:54 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (30000 ms).

Error: (08/20/2026 09:57:55 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba Windows Update se po přijetí pokynu pro vypnutí neukončila správně.

Error: (08/20/2026 09:54:27 AM) (Source: Schannel) (EventID: 4108) (User: NT AUTHORITY)
Description: Certifikát přijatý od vzdáleného serveru nebyl správně ověřen. Kód chyby je 0x80092013. Žádost o připojení TLS selhala. Připojená data obsahují certifikát serveru.
proces klienta SSPI TuneupSvc (PID: 4984).


Windows Defender:
================
CodeIntegrity:
===============
Date: 2026-08-17 07:11:43
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\AVG\Antivirus\AVGSvc.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

BIOS: American Megatrends International, LLC. X421EAY.308 01/20/2022
Motherboard: ASUSTeK COMPUTER INC. X421EAY
Processor: 11th Gen Intel(R) Core(TM) i3-1115G4 @ 3.00GHz
Percentage of memory in use: 77%
Total physical RAM: 7885.17 MB
Available physical RAM: 1796.68 MB
Total Virtual: 15770.34 MB
Available Virtual: 4719.16 MB

==================== Drives ================================

Disk 0 - Drive c: (OS) (Fixed) (Total:135.58 GB) (Free:15.26 GB) (Model: NVMe WDC PC SN530 SDBPNPZ-256G-1002) (Protected) NTFS
Disk 0 - Drive d: (DATA) (Fixed) (Total:101.45 GB) (Free:100.95 GB) (Model: NVMe WDC PC SN530 SDBPNPZ-256G-1002) (Protected) NTFS

Disk 0 - \\?\Volume{606e8319-babe-44a8-8998-8b19ac2ffab7}\ (RECOVERY) (Fixed) (Total:0.98 GB) (Free:0.06 GB) NTFS
Disk 0 - \\?\Volume{bdb66e61-81ce-4f10-a53c-9d2566cd94bd}\ (MYASUS) (Fixed) (Total:0.19 GB) (Free:0.14 GB) FAT32
Disk 0 - \\?\Volume{a4a4ae24-8cfb-4f13-8bc2-6b32c9bd3a2a}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.2 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: B82E8B7D)

Partition: GPT.

==================== End of Addition.txt =======================

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {86820B88-D791-4D07-9424-EA5F081E9095} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (No File)
Task: {904E9E2A-E3CA-4A8C-82B3-88C5A7E81236} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (No File)
Task: {73CDFB22-7130-4D46-B2F9-541DBB239B98} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
U3 AVG Business Console Client Antivirus Service; no ImagePath
U3 AVG Firewall; no ImagePath
U3 avgArDisk; no ImagePath
U3 avgBcc; no ImagePath
U3 avgbdisk; no ImagePath
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FirewallRules: [{4916A1C6-3062-4567-B870-7F2D3929CD26}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{CC878210-F834-4D3A-9140-009A58492D8C}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{3D24D50A-37AF-479D-A933-F8B4FA60479E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{6573822C-598A-41B4-B39F-A5111306A47B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{0A37A45C-942D-461E-B94F-964CDD63D6A1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{7ACC9A52-4C0E-44CE-B6F1-CFBCF8DF2DA6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{D836E9D6-82B5-43F2-B8C7-C878B9464236}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{F25374A8-EC9F-4441-807A-E874FF78A6AC}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{7BA78620-C598-40E8-A144-3A49967475DA}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{D68652A4-A860-4C6E-85F3-092868E88C28}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 18-08-2026
Ran by kater (20-08-2026 19:51:55) Run:1
Running from C:\Users\kater\Desktop
Loaded Profiles: kater
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {86820B88-D791-4D07-9424-EA5F081E9095} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (No File)
Task: {904E9E2A-E3CA-4A8C-82B3-88C5A7E81236} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (No File)
Task: {73CDFB22-7130-4D46-B2F9-541DBB239B98} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
U3 AVG Business Console Client Antivirus Service; no ImagePath
U3 AVG Firewall; no ImagePath
U3 avgArDisk; no ImagePath
U3 avgBcc; no ImagePath
U3 avgbdisk; no ImagePath
C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-934306686-1168684271-2714761465-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FirewallRules: [{4916A1C6-3062-4567-B870-7F2D3929CD26}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{CC878210-F834-4D3A-9140-009A58492D8C}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{3D24D50A-37AF-479D-A933-F8B4FA60479E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{6573822C-598A-41B4-B39F-A5111306A47B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{0A37A45C-942D-461E-B94F-964CDD63D6A1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{7ACC9A52-4C0E-44CE-B6F1-CFBCF8DF2DA6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.83.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{D836E9D6-82B5-43F2-B8C7-C878B9464236}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{F25374A8-EC9F-4441-807A-E874FF78A6AC}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22133.500.1346.3200_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{7BA78620-C598-40E8-A144-3A49967475DA}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{D68652A4-A860-4C6E-85F3-092868E88C28}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe => No File

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{C885AA15-1764-4293-B82A-0586ADD46B35} => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{86820B88-D791-4D07-9424-EA5F081E9095}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{86820B88-D791-4D07-9424-EA5F081E9095}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{904E9E2A-E3CA-4A8C-82B3-88C5A7E81236}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{904E9E2A-E3CA-4A8C-82B3-88C5A7E81236}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{73CDFB22-7130-4D46-B2F9-541DBB239B98}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73CDFB22-7130-4D46-B2F9-541DBB239B98}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
HKLM\System\CurrentControlSet\Services\AVG Business Console Client Antivirus Service => removed successfully
AVG Business Console Client Antivirus Service => service removed successfully
HKLM\System\CurrentControlSet\Services\AVG Firewall => could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgArDisk => removed successfully
avgArDisk => service removed successfully
HKLM\System\CurrentControlSet\Services\avgBcc => could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgbdisk => could not remove, key could be protected
Could not move "C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2" => Scheduled to move on reboot.

"HKU\S-1-5-21-934306686-1168684271-2714761465-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-934306686-1168684271-2714761465-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4916A1C6-3062-4567-B870-7F2D3929CD26}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CC878210-F834-4D3A-9140-009A58492D8C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3D24D50A-37AF-479D-A933-F8B4FA60479E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6573822C-598A-41B4-B39F-A5111306A47B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0A37A45C-942D-461E-B94F-964CDD63D6A1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7ACC9A52-4C0E-44CE-B6F1-CFBCF8DF2DA6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D836E9D6-82B5-43F2-B8C7-C878B9464236}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F25374A8-EC9F-4441-807A-E874FF78A6AC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7BA78620-C598-40E8-A144-3A49967475DA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D68652A4-A860-4C6E-85F3-092868E88C28}" => removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 67219980 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 32284 B
Windows/system/drivers => 138285309 B
Edge => 144090360 B
Chrome => 1919645985 B
Firefox => 1632037 B
Opera => 142176345 B

Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 4 B
ProgramData => 989729 B
Public => 0 B
systemprofile => 471122 B
systemprofile32 => 2 B
LocalService => 1449922 B
NetworkService => 4 B
kater => 294388894 B
defaultuser100000 => 7172 B
defaultuser100000.LAPTOP-KUQKOU8M => 10756 B
defaultuser100000.LAPTOP-KUQKOU8M.000 => 9220 B

RecycleBin => 0 B
EmptyTemp: => 2.5 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 20-08-2026 19:54:49)

C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 => Could not move

Result of scheduled keys to remove after reboot:

HKLM\System\CurrentControlSet\Services\AVG Firewall => could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgBcc => could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgbdisk => could not remove, key could be protected

==== End of Fixlog 19:54:51 ====

Smazáno. Zrychlil se chod NB?

děkuji vyzkouším

OK.