VIRY.CZ

Pěkný den.
Každou chvíli vyskakuje upozornění od esetu Zablokována síťová hrozba. Prosím o radu co s tím mám udělat. Vkládám logy.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2026
Ran by Karel (administrator) on LAPTOP-16MPJ5UM (Acer Aspire A317-51G) (02-09-2026 17:27:37)
Running from C:\Users\Karel\Desktop\FRST64.exe
Loaded Profiles: Karel
Platform: Microsoft Windows 11 Home Version 25H2 26200.9278 (X64) Language: Čeština (Česko)
Default browser: "C:\Users\Karel\AppData\Local\Programs\Opera\opera.exe" -noautoupdate -- "%1"
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ABBYY Software House -> ABBYY Software Ltd) C:\Program Files (x86)\ABBYY Screenshot Reader\ScreenshotReader.exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
(C:\Program Files (x86)\Sticky Password\stpass.exe ->) (Lamantine Software a.s. -> Lamantine Software a.s.) C:\Program Files (x86)\Sticky Password\spUIAManager.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eServiceHost.exe <3>
(C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\wa_3rd_party_host_32.exe
(C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\wa_3rd_party_host_64.exe
(C:\Users\Karel\AppData\Local\Programs\Opera\opera.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Users\Karel\AppData\Local\Programs\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Karel\AppData\Local\Programs\Opera\135.0.5973.66\opera_crashreporter.exe
(C:\Users\Karel\AppData\Local\Programs\Zoner\ZPS X\binary\Program64\Zps.exe ->) (ZONER a.s. -> ) C:\Users\Karel\AppData\Local\Programs\Zoner\ZPS X\binary\Program64\ZpsHost.exe
(cmd.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\BrowserPrivacyAndSecurity.exe
(cmd.exe ->) (Lamantine Software a.s. -> Lamantine Software a.s.) C:\Program Files (x86)\Sticky Password\spNMHost.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_b578901fbed94a8e\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b578901fbed94a8e\igfxEM.exe
(explorer.exe ->) (Lamantine Software a.s. -> Lamantine Software a.s.) C:\Program Files (x86)\Sticky Password\stpass.exe
(explorer.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2605.37.0_x64__8wekyb3d8bbwe\SnippingTool\SnippingTool.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Karel\AppData\Local\Programs\Opera\opera.exe
(explorer.exe ->) (ZONER a.s. -> ZONER a.s.) C:\Users\Karel\AppData\Local\Programs\Zoner\ZPS X\binary\Program64\Zps.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <10>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.107\msedgewebview2.exe <5>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_8800fc3ca8108dbc\Display.NvContainer\NVDisplay.Container.exe
(Opera Norway AS -> Opera Software) C:\Users\Karel\AppData\Local\Programs\Opera\opera.exe <17>
(services.exe ->) (ABBYY Software House -> ABBYY (BIT Software)) C:\Program Files (x86)\ABBYY Screenshot Reader\NetworkLicenseServer.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe
(services.exe ->) (Huawei Technologies Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_581d7e91d349facc\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b578901fbed94a8e\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_3d18534d52d73f63\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_1405215c1cf67526\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_1405215c1cf67526\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_ef0d14a478b232f4\RstMwService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_8800fc3ca8108dbc\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Qualcomm Atheros, Inc. -> ) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(sihost.exe ->) (Acer Incorporated -> ) C:\Program Files\WindowsApps\AcerIncorporated.AcerRegistration_2.0.3044.0_x64__48frkmn4z8aw4\DesktopApp\AcerRegistrationBackGroundTask.exe
(svchost.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Piriform\CCleaner 7\CCleaner.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.4019.0_x64__8wekyb3d8bbwe\EdgeGameAssist.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2608.1001.17.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Spotify AB -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\SpotifyXboxGamebarWebView.exe
(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <6>
(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1138992 2020-08-05] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [285104 2026-07-11] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [Nero BackItUp] => C:\Program Files (x86)\Nero\Nero 2022\3-2-1 Backup\BackItUp.exe [1306696 2025-04-29] (Nero AG -> Nero AG)
HKLM-x32\...\Run: [ABBYY Screenshot Reader Retail] => C:\Program Files (x86)\ABBYY Screenshot Reader\ScreenShotReader.exe [959776 2008-12-08] (ABBYY Software House -> ABBYY Software Ltd)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX2] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe [271496 2017-11-02] (Canon Inc. -> CANON INC.)
HKLM\...\RunOnce: [msedge_cleanup_{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}] => C:\Program Files (x86)\Microsoft\EdgeWebView\Application\152.0.4191.53\Installer\setup.exe [5862728 2026-08-28] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\Run: [Adobe Reader Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [46787544 2026-08-10] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\Run: [ABBYY Screenshot Reader Retail] => [X]
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4753768 2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\Run: [Opera Stable] => "C:\Users\Karel\AppData\Local\Programs\Opera\opera.exe" --autostart [3112392 2026-09-01] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\Run: [ESET VPN] => C:\Program Files\ESET\ESET VPN\esetvpn.exe [5494232 2026-05-26] (Windscribe Limited -> ESET, spol. s r.o.)
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\Run: [MicrosoftEdgeAutoLaunch_EADC2331AEA11A7C2115598A7830EF60] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5365576 2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon G3020 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDGL.DLL [525824 2021-09-12] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon TS9500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDER.DLL [525824 2024-05-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [109288 2018-10-12] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS9500 series: C:\Windows\system32\CNMLMER.DLL [946688 2024-05-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\PCL hpz3llhn: C:\Windows\system32\hpz3llhn.dll [44288 2018-10-12] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
HKLM\Software\...\AppCompatFlags\Custom\AsusDialService.exe: [{22221111-1111-1111-1111-111111111111}.sdb] -> Microsoft Windows Application Compatibility Fix Database

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0E68AF70-2267-4C03-8E43-C6EF6B7863DA} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2971808 2021-12-30] (Acer Incorporated -> ) -> C:\Program Files (x86)\Acer\Care Center\-auto
Task: {BC5F1B6E-2B3A-46B0-96BB-9701DC00561C} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [41632 2021-12-30] (Acer Incorporated -> )
Task: {F276ABBB-9430-4579-8E4D-A5C0DFAF2A8A} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [4836512 2021-12-30] (Acer Incorporated -> )
Task: {B52D9D75-2811-4E49-A4EB-E9F5AE27B0DE} - System32\Tasks\AcerCMUpdateTask2.5.22250 => C:\Program Files (x86)\Acer\Amundsen\2.5.22250\awc.exe [96904 2022-09-25] (Acer Incorporated -> )
Task: {BE579ED5-68C8-46D2-B336-257C69158414} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {89239216-0F31-4CC5-BD21-FCCD4CA3AD49} - System32\Tasks\CareCenter\Opera Browser Assistant_Reg_HKCURun_S-1-5-21-851827749-1828096854-3146880355-1001 => C:\Users\Karel\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [7881160 2026-08-28] (Opera Norway AS -> Opera Software)
Task: {91C1FADE-E1B1-48FD-9B23-3F44CDBC8499} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{3ACF78D5-A8E6-4A55-8802-A0A4263309D6} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {83E50F3C-A575-4C22-B883-7F46F59E3191} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28616592 2026-08-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {E8523181-0CFA-444D-81C7-DEB51DF35216} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28616592 2026-08-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {4CAD436C-4B4E-4981-831E-D31DE16D92CF} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313712 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {82CCC1AE-2003-4628-94ED-426B39834D4B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313712 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {896C8688-0BB9-4187-B803-21FBD59D7A06} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [188184 2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {B6915C0E-D113-4132-9566-A25599F39A04} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1326720 2026-08-24] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {449174A1-0056-466C-A9FC-A8EC030DB574} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-851827749-1828096854-3146880355-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1326720 2026-08-24] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {79CFD550-E527-4411-A1A8-4A74154513CB} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Nero\Nero Apps\NeroInfo\NeroInfo.exe [3950928 2025-04-29] (Nero AG -> Nero AG)
Task: {04E50C7F-9BD3-4827-8291-48D4FAA90F30} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [850928 2020-03-18] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {0BEED5FF-78F0-4551-8910-E57576DD0CBB} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [850928 2020-03-18] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {8A173901-A269-43BF-BE8A-84A4BB68D3EA} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3293168 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8C181E83-9296-43BD-8A9D-3301B9510B8F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646456 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {80FCB519-585E-42B2-B194-D75651CE7F2F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {0099A389-158E-4216-9305-9E92B0856D06} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4C9D14F3-0565-4307-BA28-306CDB9A3B52} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A2FC42C2-F33C-4800-999C-E3AE506D0534} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4201CAA6-2BDF-4805-9D99-91A4677FE4CD} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {28A6BA29-0993-439C-9422-B90A2A053629} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5B1B551F-CF06-4173-AB8F-97103AF77346} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [70792 2022-08-15] (Acer Incorporated -> )
Task: {B4CF600D-ADA1-44AD-A65F-784343E2E2D3} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4408208 2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {C55AE12E-ABC8-4F90-A3D4-DE3E64C8F197} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-851827749-1828096854-3146880355-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4408208 2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {C78AAC0B-2F5E-45EB-92EB-5174827493E3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-851827749-1828096854-3146880355-1001 => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\OneDriveLauncher.exe [854376 2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
Task: {6040A2CC-B344-4AAE-AE85-26DC4EFE3FA3} - System32\Tasks\Opera scheduled assistant Autoupdate 1612535774 => C:\Users\Karel\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [7742408 2026-08-28] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Users\Karel\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {EB7B1120-15C9-423F-AF23-C23DA229ED68} - System32\Tasks\Opera scheduled Autoupdate 1612535771 => C:\Users\Karel\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [7742408 2026-08-28] (Opera Norway AS -> Opera Software)
Task: {304632A7-8AA6-4BF7-B96B-23DFB891136D} - System32\Tasks\Piriform\CCleaner 7 - S-1-5-21-851827749-1828096854-3146880355-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7866256 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {23F093C6-D317-4BFC-BF3C-7C43BC133BEB} - System32\Tasks\Piriform\CCleaner 7 - Scheduled Cleaning - default - S-1-5-21-851827749-1828096854-3146880355-1001 => C:\Program Files\Piriform\CCleaner 7\CCleaner.exe [7866256 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {A7C5FEF0-7E62-44A1-A8AD-26F28EA3BCEB} - System32\Tasks\Piriform\CCleaner 7 BugReport => C:\Program Files\Piriform\CCleaner 7\CCleanerBugReport.exe [6558608 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --product 234 --programpath "C:\Program Files\Piriform\CCleaner 7" --configpath "C:\Program Files\Piriform\CCleaner 7\data" --path "C:\Program Files\Piriform\CCleaner 7\log" --path "C:\Program Files\Piriform\CCleaner 7\data\dumps" --logpath "C:\Program Files\Piriform\CCleaner 7 (the data entry has 58 more characters).
Task: {F4013630-4D41-4639-A0D8-3F7E27597F09} - System32\Tasks\Piriform\CCleaner 7 Update => C:\Program Files\Common Files\Piriform\Icarus\piriform-ccl\icarus.exe [9274080 2026-01-19] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {056F7AAC-536A-4B03-8F52-6828561759BB} - System32\Tasks\Power Button => C:\Program Files\Acer\Quick Access Service\ePowerButton_NB.exe [2771616 2022-01-03] (Acer Incorporated -> Acer Incorporated)
Task: {DE25B126-F93F-4793-8FA9-F28377A0E058} - System32\Tasks\Quick Access => C:\Program Files\Acer\Quick Access Service\QALauncher.exe [446624 2022-01-03] (Acer Incorporated -> Acer Incorporated)
Task: {75F35CB5-EB91-4940-A5B9-5E251C0FD5CC} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [461472 2022-01-03] (Acer Incorporated -> Acer Incorporated)
Task: {78533241-59A4-4080-AFDC-80E5B123DC74} - System32\Tasks\StorPSCTL => C:\Program Files\Acer\StorPSCTL\StorPSCTL.exe [151080 2020-04-01] (Acer Incorporated -> Microsoft)
Task: {3E1AF38C-BE24-4655-94ED-063AD48D5BAA} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\TriggerFramework.exe [268328 2020-04-15] (Acer Incorporated -> Acer Incorporated)
Task: {C12B31F5-1AA1-4677-89F7-0C929B7CAB94} - System32\Tasks\UEIPInvitation => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UEIPOOBECheck.exe [2211368 2020-04-15] (Acer Incorporated -> Acer Incorporated)
Task: {6AD93734-2CA9-4314-924C-3CC3E8F4B062} - System32\Tasks\Zoner.Updater.S-1-5-21-851827749-1828096854-3146880355-1001 => C:\ProgramData\Zoner\Zoner.Installer.Core\updater.exe [1591632 2026-07-31] (ZONER a.s. -> ZONER a.s.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{a25a1f13-d718-44a2-8ecc-b026d0c969d2}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{d249dc18-5303-4a00-aad1-2de860c7029e}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{d249dc18-5303-4a00-aad1-2de860c7029e}\4505D2C496E6B6F553737314: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{d249dc18-5303-4a00-aad1-2de860c7029e}\E416374757E65616B684F6D656: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: pw0by2uf.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\u3kngsgi.default [2023-11-14]
FF ProfilePath: C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\pw0by2uf.default-release [2026-09-02]
FF Extension: (No Name) - C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\pw0by2uf.default-release\Extensions\browserextension@eset.com.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\pw0by2uf.default-release\Extensions\graffiti-balanced-colorway@mozilla.org.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\pw0by2uf.default-release\Extensions\newtab@mozilla.org.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\pw0by2uf.default-release\Extensions\{0668a87f-e3bb-4ed3-a096-e145c1e9f1d2}.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Karel\AppData\Roaming\Mozilla\Firefox\Profiles\pw0by2uf.default-release\Extensions\{ecb80162-dfbd-4d91-a8da-17b35ba4707a}.xpi [0] [not signed]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-06-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-08-10] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2026-06-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-06-21] (Microsoft Corporation -> Microsoft Corporation)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2026-09-02]

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Karel\AppData\Local\Microsoft\Edge\User Data\Default [2026-09-02]
Error reading preferences. Please make sure ESET "Secure Browser" option is disabled. <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Karel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-26] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Karel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Karel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2026-08-25] [UpdateUrl:0] <==== ATTENTION
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]

Opera:
=======
OPR DefaultProfile: Default

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.ScreenshotReader.9.0; C:\Program Files (x86)\ABBYY Screenshot Reader\NetworkLicenseServer.exe [759072 2008-10-27] (ABBYY Software House -> ABBYY (BIT Software))
S4 ACCSvc; C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe [259232 2021-12-30] (Acer Incorporated -> Acer Incorporated)
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
R2 CCleaner7; C:\Program Files\Piriform\CCleaner 7\CCleaner_service.exe [31251856 2026-08-03] (Gen Digital Inc. -> Gen Digital Inc.)
S4 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14057872 2026-08-06] (Microsoft Corporation -> Microsoft Corporation)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5748144 2026-07-11] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [5058536 2026-07-11] (ESET, spol. s r.o. -> ESET)
R2 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [5058536 2026-07-11] (ESET, spol. s r.o. -> ESET)
S4 ESETVPNService; C:\Program Files\ESET\ESET VPN\esetvpnservice.exe [1076696 2026-05-26] (Windscribe Limited -> ESET, spol. s r.o.)
S4 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncHelper.exe [3761000 2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [236864 2021-06-03] (Huawei Technologies Co., Ltd. -> ) [File not signed]
S4 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460992 2025-04-18] (Canon Inc. -> )
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_581d7e91d349facc\AS\IAS\IntelAudioService.exe [412128 2022-10-27] (Intel Corporation -> Intel)
S3 IsolationSession; C:\WINDOWS\System32\IsoSessionServer.dll [1015808 2026-08-28] (Microsoft Windows -> Microsoft Corporation)
S4 NeroBackItUpBackgroundServiceForVerbatim; C:\Program Files (x86)\Nero\Nero 2022\3-2-1 Backup\NBService.exe [319048 2025-04-29] (Nero AG -> Nero AG)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvaci.inf_amd64_8800fc3ca8108dbc\Display.NvContainer\NVDisplay.Container.exe [1275624 2026-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
S4 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.150.0804.0011\OneDriveUpdaterService.exe [4055400 2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
S4 QALSvc; C:\Program Files\Acer\Quick Access Service\QALSvc.exe [466080 2022-01-03] (Acer Incorporated -> Acer Incorporated)
S4 QASvc; C:\Program Files\Acer\Quick Access Service\QASvc.exe [504480 2022-01-03] (Acer Incorporated -> Acer Incorporated)
R2 QcomWlanSrv; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [189808 2023-03-19] (Qualcomm Atheros, Inc. -> )
S4 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UBTService.exe [306728 2020-04-15] (Acer Incorporated -> Acer Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe [3199672 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe [141952 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AcerAirplaneModeController; C:\WINDOWS\System32\DriverStore\FileRepository\acerairplanemodecontroller.inf_amd64_e668774e90b08283\AcerAirplaneModeController.sys [35608 2025-10-01] (Acer Incorporated -> Acer Incorporated)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [573440 2025-05-01] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2025-05-01] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-05-01] (Microsoft Corporation) [File not signed]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [176976 2026-04-21] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 eamonm; C:\WINDOWS\System32\DriverStore\FileRepository\eamonm.inf_amd64_e4f755ec36b88414\eamonm.sys [233992 2026-07-11] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DriverStore\FileRepository\edevmon.inf_amd64_9180e3c9bcb3752f\edevmon.sys [142504 2026-07-11] (Microsoft Windows Hardware Compatibility Publisher -> ESET)
S0 eelam; C:\WINDOWS\System32\DriverStore\FileRepository\eelam.inf_amd64_bf61a63a81bb4969\eelam.sys [17872 2026-07-11] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\System32\DriverStore\FileRepository\ehdrv.inf_amd64_8f80c31ce10ec549\ehdrv.sys [374992 2026-07-11] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\System32\DriverStore\FileRepository\ekbdflt.inf_amd64_6b205c1a212ad927\ekbdflt.sys [57928 2026-07-11] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\System32\DriverStore\FileRepository\epfw.inf_amd64_f578b661b8122eff\epfw.sys [83704 2026-07-11] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\System32\DriverStore\FileRepository\epfwwfp.inf_amd64_a4a2e12ddbaccd9e\epfwwfp.sys [127584 2026-07-11] (ESET, spol. s r.o. -> ESET)
S3 ESETVPNSplitTunnel; C:\WINDOWS\system32\DRIVERS\esetvpnsplittunnel.sys [38152 2026-05-26] (Windscribe Limited -> )
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2021-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2020-03-31] (NVIDIA Corporation -> )
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_20065bda6b2bb937\rt68cx21x64.sys [934952 2026-03-27] (Realtek Semiconductor Corp. -> Realtek)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174416 2026-04-21] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22104 2024-10-31] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [606624 2024-10-31] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105888 2024-10-31] (Microsoft Windows -> Microsoft Corporation)
S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2026-06-12] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-05-01] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_8ce330c68e1a560b\WSDScan.sys [61440 2026-08-28] (Microsoft Windows -> Microsoft Corporation)

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-09-02 17:27 - 2026-09-02 17:28 - 000035163 _____ C:\Users\Karel\Desktop\FRST.txt
2026-09-02 16:59 - 2026-09-02 16:59 - 002450944 _____ (Farbar) C:\Users\Karel\Desktop\FRST64.exe
2026-09-02 16:22 - 2026-09-02 16:22 - 000002137 _____ C:\Users\Karel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-01 17:12 - 2026-09-01 17:12 - 000239455 _____ C:\Users\Karel\Downloads\Dokument (5).pdf
2026-09-01 17:12 - 2026-09-01 17:12 - 000161074 _____ C:\Users\Karel\Downloads\Dokument (4).pdf
2026-09-01 17:03 - 2026-09-02 14:58 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-09-01 13:08 - 2026-09-01 13:08 - 000004036 _____ C:\WINDOWS\system32\Tasks\PostponeDeviceSetupToast_S-1-5-21-851827749-1828096854-3146880355-1001_3
2026-08-29 11:56 - 2026-08-29 11:56 - 000713018 _____ C:\WINDOWS\system32\perfh005.dat
2026-08-29 11:56 - 2026-08-29 11:56 - 000153196 _____ C:\WINDOWS\system32\perfc005.dat
2026-08-28 07:27 - 2026-08-28 07:27 - 000004646 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-08-28 07:27 - 2026-08-28 07:27 - 000004646 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-08-28 07:27 - 2026-08-28 07:27 - 000004646 _____ C:\WINDOWS\system32\ResPriImageList
2026-08-28 07:27 - 2026-08-28 07:27 - 000004646 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-08-28 07:27 - 2026-08-28 07:27 - 000004555 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-08-28 07:27 - 2026-08-28 07:27 - 000004555 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-08-28 07:26 - 2026-08-28 07:26 - 000039215 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-08-28 07:26 - 2026-08-28 07:26 - 000039215 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-08-28 07:24 - 2026-08-28 07:24 - 000014689 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-08-27 10:49 - 2026-08-27 10:49 - 000002257 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2026-08-27 10:49 - 2026-08-27 10:49 - 000002245 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk
2026-08-27 10:49 - 2026-08-27 10:49 - 000000000 ____D C:\Program Files\Google
2026-08-26 13:16 - 2026-08-26 13:16 - 000485994 _____ C:\Users\Karel\Downloads\2951901612 (1).pdf
2026-08-26 13:16 - 2026-08-26 13:16 - 000485990 _____ C:\Users\Karel\Downloads\2951901612.pdf
2026-08-24 16:05 - 2026-08-24 16:05 - 000174936 _____ C:\Users\Karel\Downloads\Nabidka uctu a sazebnik uroku pro fyzicke osoby - revize (1).pdf
2026-08-24 16:03 - 2026-08-24 16:03 - 000174212 _____ C:\Users\Karel\Downloads\Nabidka uctu a sazebnik uroku pro fyzicke osoby (2).pdf
2026-08-21 16:37 - 2026-08-21 16:37 - 003257488 _____ () C:\Users\Karel\Desktop\OperaSetup.exe
2026-08-20 07:43 - 2026-08-20 07:43 - 000161074 _____ C:\Users\Karel\Downloads\Dokument (3).pdf
2026-08-20 07:43 - 2026-08-20 07:43 - 000161074 _____ C:\Users\Karel\Downloads\Dokument (2).pdf
2026-08-19 17:31 - 2026-08-19 17:31 - 000239563 _____ C:\Users\Karel\Downloads\Pokyn (3).pdf
2026-08-19 17:26 - 2026-08-19 17:26 - 000255617 _____ C:\Users\Karel\Downloads\Pokyn (2).pdf
2026-08-19 17:26 - 2026-08-19 17:26 - 000255617 _____ C:\Users\Karel\Downloads\Pokyn (1).pdf
2026-08-19 17:25 - 2026-08-19 17:26 - 000255617 _____ C:\Users\Karel\Downloads\Pokyn.pdf
2026-08-18 16:03 - 2026-08-18 16:03 - 000002245 _____ C:\Users\Karel\Downloads\vodafone-export.json
2026-08-18 15:44 - 2026-08-18 15:44 - 000114006 _____ C:\Users\Karel\Downloads\1037438007.pdf
2026-08-16 17:13 - 2026-08-16 17:13 - 000094072 _____ C:\Users\Karel\Downloads\Vypis_0012168242_20260814.pdf
2026-08-16 17:11 - 2026-08-16 17:11 - 000193362 _____ C:\Users\Karel\Downloads\Vypis_Karel Kakuska_20260816171146.zip
2026-08-04 13:24 - 2026-08-04 13:24 - 003259590 _____ C:\Users\Karel\Downloads\Photo1501625.m4a

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-09-02 17:27 - 2025-10-21 16:14 - 000000000 ____D C:\FRST
2026-09-02 17:21 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-09-02 17:20 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-09-02 17:20 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-09-02 17:20 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-09-02 17:20 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-02 17:15 - 2021-02-10 21:50 - 000000000 ____D C:\Program Files (x86)\Steam
2026-09-02 16:52 - 2021-03-09 07:55 - 000000000 ____D C:\Users\Karel\AppData\Local\Zoner
2026-09-02 16:36 - 2022-02-09 16:56 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-09-02 16:34 - 2021-02-16 11:07 - 000000000 ____D C:\Users\Karel\AppData\Local\D3DSCache
2026-09-02 16:31 - 2021-02-05 16:36 - 000000000 ____D C:\Users\Karel\AppData\Local\Programs\Opera
2026-09-02 15:47 - 2026-06-09 17:05 - 000016537 _____ C:\Users\Karel\Desktop\výpočet hodnoty fondu.xlsx
2026-09-02 15:47 - 2021-02-11 08:44 - 000000000 ____D C:\Users\Karel\AppData\Roaming\Microsoft\Excel
2026-09-02 15:28 - 2021-02-06 17:01 - 000000000 ____D C:\Users\Karel\AppData\Roaming\Microsoft\Word
2026-09-02 13:55 - 2021-03-09 07:54 - 000000000 ____D C:\ProgramData\Zoner
2026-09-02 12:54 - 2020-12-16 11:09 - 000000000 ____D C:\ProgramData\NVIDIA
2026-09-02 12:52 - 2021-02-06 06:59 - 000000000 __SHD C:\Users\Karel\IntelGraphicsProfiles
2026-09-01 20:35 - 2025-05-01 14:31 - 000003638 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-09-01 20:35 - 2025-05-01 14:31 - 000003512 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-09-01 09:09 - 2021-02-05 16:36 - 000001384 _____ C:\Users\Karel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2026-08-31 14:26 - 2025-05-01 14:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-08-29 13:10 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-08-29 13:07 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-08-29 11:56 - 2025-05-01 14:31 - 001692324 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-08-29 11:52 - 2025-10-22 13:27 - 000009490 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-08-29 11:49 - 2025-05-01 14:31 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-08-29 11:49 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-08-29 11:49 - 2020-12-16 10:34 - 000012288 ___SH C:\DumpStack.log.tmp
2026-08-29 11:49 - 2020-12-16 10:34 - 000000000 ___HD C:\Intel
2026-08-28 22:47 - 2024-04-01 09:21 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2026-08-28 22:46 - 2025-05-01 14:26 - 000575384 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-08-28 22:44 - 2025-12-04 14:37 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-08-28 22:44 - 2025-06-29 15:56 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-08-28 22:44 - 2025-05-01 12:46 - 000000000 ____D C:\WINDOWS\InboxApps
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\L2Schemas
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-08-28 22:44 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-08-28 22:44 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-08-28 07:48 - 2021-03-26 10:47 - 000000000 ___SD C:\Users\Karel\Documents\Sticky Passwords
2026-08-28 07:24 - 2025-05-01 14:30 - 003379712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-08-28 07:00 - 2023-01-16 08:57 - 000002278 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-08-28 07:00 - 2020-12-16 10:39 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-08-27 14:07 - 2025-10-22 14:18 - 000000000 ____D C:\Program Files (x86)\ABBYY Screenshot Reader
2026-08-27 14:07 - 2025-06-05 10:47 - 000000000 ____D C:\Program Files (x86)\Sticky Password
2026-08-27 14:07 - 2025-05-01 11:10 - 000000000 ___DC C:\WINDOWS\Panther
2026-08-27 14:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords
2026-08-27 14:07 - 2021-03-16 12:45 - 000000000 ____D C:\Program Files (x86)\Kyodai Mahjongg
2026-08-27 13:54 - 2025-05-01 14:31 - 000003542 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2026-08-27 10:56 - 2021-02-05 16:46 - 000000000 ____D C:\Users\Karel\AppData\Local\CrashDumps
2026-08-27 10:51 - 2026-04-17 15:50 - 000002776 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-08-27 10:51 - 2025-05-01 14:31 - 000003140 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-851827749-1828096854-3146880355-1001
2026-08-27 10:51 - 2025-05-01 14:31 - 000003126 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-851827749-1828096854-3146880355-1001
2026-08-27 10:50 - 2026-04-17 15:50 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-08-27 10:50 - 2025-04-17 22:55 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2026-08-27 10:50 - 2021-02-08 17:39 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-08-27 10:49 - 2026-04-17 15:50 - 000002027 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-08-27 10:48 - 2025-01-24 00:59 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-08-27 10:48 - 2021-02-08 17:39 - 000001077 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-08-27 10:44 - 2025-05-01 14:31 - 000003970 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1612535774
2026-08-27 10:44 - 2025-05-01 14:31 - 000003688 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1612535771
2026-08-27 09:53 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\appcompat
2026-08-23 16:15 - 2021-02-10 18:46 - 000001059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-08-20 21:29 - 2020-12-16 11:25 - 000000000 ____D C:\Program Files\Microsoft Office
2026-08-17 13:54 - 2021-02-06 06:59 - 000000000 ____D C:\Users\Karel\AppData\Local\Packages
2026-08-16 20:46 - 2022-10-13 09:18 - 000002150 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-08-16 20:46 - 2022-10-13 09:18 - 000002065 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2026-08-13 22:35 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2026-08-13 22:34 - 2026-05-13 12:07 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-08-13 22:34 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-08-13 22:34 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-08-13 22:07 - 2021-02-05 15:25 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-08-13 22:02 - 2021-02-05 15:25 - 228836432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-08-04 13:27 - 2022-01-08 21:57 - 000000000 ____D C:\Users\Karel\AppData\Roaming\vlc
2026-08-03 21:21 - 2025-07-22 16:25 - 000002499 _____ C:\Users\Karel\Desktop\Zoner Studio.lnk
2026-08-03 21:21 - 2021-03-09 07:55 - 000002501 _____ C:\Users\Karel\AppData\Roaming\Microsoft\Windows\Start Menu\Zoner Studio.lnk

==================== Files in the root of some directories ========

2025-09-15 22:22 - 2025-09-15 22:22 - 001097784 _____ (Microsoft Corporation) C:\Users\Karel\Jewels Magic Installer.exe
2025-09-14 20:55 - 2025-09-14 20:55 - 001097784 _____ (Microsoft Corporation) C:\Users\Karel\Jewels of the Wild West Installer.exe
2021-09-11 12:10 - 2021-09-11 12:10 - 000000017 _____ () C:\Users\Karel\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================



Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2026
Ran by Karel (02-09-2026 17:29:34)
Running from C:\Users\Karel\Desktop
Microsoft Windows 11 Home Version 25H2 26200.9278 (X64) (2025-05-01 12:32:07)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-851827749-1828096854-3146880355-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-851827749-1828096854-3146880355-503 - Limited - Disabled)
Guest (S-1-5-21-851827749-1828096854-3146880355-501 - Limited - Disabled)
Karel (S-1-5-21-851827749-1828096854-3146880355-1001 - Administrators - Enabled) => C:\Users\Karel
WDAGUtilityAccount (S-1-5-21-851827749-1828096854-3146880355-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Security (Enabled - Up to date) {DF8BEACB-94C9-218A-73AD-A78362A8C516}
AV: ESET Security (Enabled - Up to date) {89B55CC4-3881-78B2-11E2-479AE0371896}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {26E0861C-6FB9-CEF9-E4F0-531986211ACE}
FW: ESET Firewall (Enabled) {E7B06BEE-DEA6-20D2-58F2-0EB69C7B826D}
FW: ESET Firewall (Enabled) {B18EDDE1-72EE-79EA-3ABD-EEAF1EE45FED}
FW: ESET Firewall (Enabled) {1EDB0739-25D6-CFA1-CFAF-FA2C78F25DB5}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

3-2-1 Eternity Backup (HKLM-x32\...\3-2-1 Eternity Backup) (Version: 1.0.0.44 - Nero AG)
7-Zip 26.02 (x64) (HKLM\...\7-Zip) (Version: 26.02 - Igor Pavlov)
ABBYY Screenshot Reader (HKLM-x32\...\{F9000000-0015-0000-0000-074957833700}) (Version: 9.010.194.5986 - ABBYY)
Acer Configuration Manager (HKLM-x32\...\{8CB1A03C-9849-4744-AD56-341A18F9E3E2}) (Version: 2.5.22250 - Acer)
Acer Jumpstart (HKLM-x32\...\{0C5ED25A-B8D1-4E71-BFCB-6B370A4EA19C}) (Version: 3.5.22220.20 - Acer)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 26.001.21789 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601149}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Canon Easy-PhotoPrint Editor (HKLM-x32\...\Canon Easy-PhotoPrint Editor) (Version: 1.10.2 - Canon Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.7.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX2 (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX2) (Version: 2.0.10.2 - Canon Inc.)
Canon IJ Printer Assistant Tool (HKLM-x32\...\Canon IJ Printer Assistant Tool) (Version: 1.90.3.36 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 2.2.0.5 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 6.7.0 - Canon Inc.)
Canon TS9500 series Elektronická příručka (HKLM-x32\...\Canon TS9500 series Elektronická příručka) (Version: 1.2.0 - Canon Inc.)
Canon TS9500 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_TS9500_series) (Version: 1.06 - Canon Inc.)
Care Center Service (HKLM\...\{AFB52E98-7597-4484-9202-58F0FD3512ED}) (Version: 4.00.3042 - Acer Incorporated)
CCleaner 7 (HKLM\...\CCleaner 7) (Version: 7.10.1464.1889 - Piriform)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1990.6 - Piriform Software) Hidden
DriverSetupUtility (HKLM\...\{2B51C83A-465D-4EA9-9CDC-1ED95ED09AC6}) (Version: 1.00.3026 - Acer Incorporated)
Dynamic Application Loader Host Interface Service (HKLM\...\{BB78A7A1-B716-49D2-81C4-5A3ABE32C7E2}) (Version: 1.0.0.0 - Intel Corporation) Hidden
ESET Security (HKLM\...\{3B47BDC5-99BF-4F5C-A303-1F0F9DBC74F6}) (Version: 19.2.7.0 - ESET, spol. s r.o.)
ESET VPN (HKLM\...\{ac2ff246-998c-4014-bea8-b20edd0a2eda}_is1) (Version: 1.6.11 - ESET, spol. s r.o.)
Google Earth Pro (HKLM\...\{3D62248F-DE98-4CEB-A1D9-E69073E085D3}) (Version: 7.3.7.1327 - Google)
HiSuite (HKLM-x32\...\Hi Suite) (Version: 11.0.0.550 - Huawei Technologies Co., Ltd.)
Intel(R) Chipset Device Software (HKLM\...\{351A0D24-F6F1-4105-AA50-5D2CCC71E0DD}) (Version: 10.1.18019.8144 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{4551f75f-3c54-4f09-8221-8c8a061bad00}) (Version: 10.1.18019.8144 - Intel(R) Corporation)
Intel(R) Icls (HKLM\...\{8A803181-323A-4876-887C-413A43B455CB}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) LMS (HKLM\...\{8B91A857-9616-48AB-8E1B-DAB7D510545A}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2004.14.0.1447 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{3BB0BA84-70E4-48D2-8674-A6CB8BC7EDD6}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{A2004714-8E43-4063-97E7-0965262B3CCD}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{02A60659-049B-4E62-9E13-C52BF2A01AB4}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Kyodai Mahjongg (HKLM-x32\...\Kyodai Mahjongg_is1) (Version: - Rene-Gilles Deberdt)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 152.0.4191.53 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 152.0.4191.53 - Microsoft Corporation) Hidden
Microsoft Office Installer version 1.0 (HKLM-x32\...\Microsoft Office Installer_is1) (Version: 1.0 - )
Microsoft Office LTSC Professional Plus 2024 - cs-cz (HKLM\...\ProPlus2024Volume - cs-cz) (Version: 16.0.17932.20910 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.150.0804.0011 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.28902 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox) (Version: 154.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 154.0.1 - Mozilla)
Mozilla Thunderbird (x64 cs) (HKLM\...\Mozilla Thunderbird 154.0 (x64 cs)) (Version: 154.0 - Mozilla)
Nero Info (HKLM-x32\...\Nero Info) (Version: 27.5.1.1 - Nero AG)
Nero Start (HKLM-x32\...\Nero Common) (Version: 27.5.54.0 - Nero AG)
NVIDIA GeForce Experience 3.20.3.63 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.3.63 - NVIDIA Corporation)
NVIDIA Graphics Driver 451.67 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 451.67 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20216 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.19127.20154 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.19127.20154 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17932.20910 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.19127.20302 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
Opera Stable 135.0.5973.66 (HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\Opera 135.0.5973.66) (Version: 135.0.5973.66 - Opera Software)
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.9.0 - Prolific Technology INC)
Quick Access Service (HKLM\...\{AB25551C-74EF-4BAB-9989-891517FCF9FF}) (Version: 3.00.3038 - Acer Incorporated)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9000.1 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.35.510.2019 - Realtek)
Registrace tiskárny (HKLM-x32\...\Canon EISRegistration) (Version: 1.9.3 - Canon Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Sticky Password (HKLM-x32\...\Sticky Password_is1) (Version: 8.9.9.2265 - Lamantine Software)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
User Experience Improvement Program Service (HKLM\...\{E9495FD3-F73D-4D33-A104-047F9E8BE6C7}) (Version: 4.00.3114 - Acer Incorporated)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.23 - VideoLAN)
WinRAR 6.10 beta 3 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.10.3 - win.rar GmbH)
Zoner Callisto 5 (HKLM-x32\...\{4F62B1AE-E778-49E2-9C57-C1C65A122098}) (Version: 5.0.5000.1 - ZONER software)
Zoner Studio CS (HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\ZPS X) (Version: 19.2606.2.702 - ZONER a.s.)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\Windows\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-07] ()
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3912.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-07] ()
828B5831.JewelsofEgyptMatchGame -> C:\Program Files\WindowsApps\828B5831.JewelsofEgyptMatchGame_1.77.7702.0_x64__ytsefhwckbdv6 [2026-08-21] (G5 Entertainment AB)
828B5831.JewelsoftheWildWest -> C:\Program Files\WindowsApps\828B5831.JewelsoftheWildWest_1.76.7601.0_x64__ytsefhwckbdv6 [2026-08-21] (G5 Entertainment AB)
Acer Product Registration -> C:\Program Files\WindowsApps\AcerIncorporated.AcerRegistration_2.0.3044.0_x64__48frkmn4z8aw4 [2024-01-26] (Acer Incorporated)
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-08-16] ()
Amazon Landscapes PREMIUM -> C:\Program Files\WindowsApps\Microsoft.AmazonLandscapesPREMIUM_1.0.0.0_neutral__8wekyb3d8bbwe [2025-05-21] (Microsoft Corporation)
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-04-15] (INTEL CORP) [Startup Task]
Care Center S -> C:\Program Files\WindowsApps\AcerIncorporated.AcerCareCenterS_4.0.3042.0_x64__48frkmn4z8aw4 [2022-01-11] (Acer Incorporated)
Cribbage Deluxe -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.CribbageDeluxe_2.12.190.0_x64__kx24dqmazqk8j [2026-08-29] (Random Salad Games LLC)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-11-05] (Microsoft Corporation)
Doplněk pro Fotky -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-11-05] (Microsoft Corporation)
Dropbox promotion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.38.0_x64__xbfy0k16fey96 [2026-07-27] (Dropbox Inc.)
ESET Context Menu -> C:\Program Files\ESET\ESET Security [2026-08-31] (Sparse Package)
GoTrust ID -> C:\Program Files\WindowsApps\GOTrustTechnologyInc.GO-TrustAuthenticator_3.1.21.0_x64__0r04f53sqacg6 [2025-04-17] (GoTrustID Inc.)
Hearts Deluxe -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.HeartsDeluxe_6.13.137.0_x64__kx24dqmazqk8j [2026-06-15] (Random Salad Games LLC)
Jewels Magic: Mystery Match3 -> C:\Program Files\WindowsApps\BitMango.JewelsMagicMysteryMatch3_25.618.0.0_x64__2b8nme4t3zjry [2025-09-14] (BitMango, inc.)
Messenger -> C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_2250.1.0.0_x64__8xx8rvfyw5nnt [2025-04-15] (Meta)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-05-01] (Microsoft Corp.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-10] (NVIDIA Corp.)
Painter Essentials -> C:\Program Files\WindowsApps\CorelCorporation.PainterEssentials_8.0.4.0_x64__wbjqpk9xt50t4 [2026-03-25] (Corel Corporation)
PhotoDirector for acer -> C:\Program Files\WindowsApps\CyberLinkCorp.ac.PhotoDirectorforacerDesktop_8.0.6428.0_x64__ypz87dpxkv292 [2020-12-16] (CYBERLINK COM CORP)
PowerDirector for acer -> C:\Program Files\WindowsApps\CyberLinkCorp.ac.PowerDirectorforacerDesktop_14.0.4304.0_x64__ypz87dpxkv292 [2020-12-16] (CYBERLINK COM CORP)
QuickAccess -> C:\Program Files\WindowsApps\AcerIncorporated.QuickAccess_3.0.3038.0_x64__48frkmn4z8aw4 [2022-02-11] (Acer Incorporated)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.14.226.0_x64__dt26b99r8h8gj [2020-12-16] (Realtek Semiconductor Corp)
Simple Mahjong -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleMahjong_6.5.45.0_x64__kx24dqmazqk8j [2026-07-01] (Random Salad Games LLC)
Simple Solitaire -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleSolitaire_7.5.40.0_x64__kx24dqmazqk8j [2026-03-10] (Random Salad Games LLC)
Simple Spider Solitaire -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleSpiderSolitaire_3.8.45.0_x64__kx24dqmazqk8j [2025-05-01] (Random Salad Games LLC)
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0 [2026-08-28] (Spotify AB) [Startup Task]
User Experience Improvement Program -> C:\Program Files\WindowsApps\AcerIncorporated.UserExperienceImprovementProgram_4.0.3114.0_x64__48frkmn4z8aw4 [2020-12-16] (Acer Incorporated)
Wild West -> C:\Program Files\WindowsApps\39631WildWest.WildWest_3.2.0.0_x64__qyjzfs50ssadr [2024-03-31] (Wild West)
Wild West: New Frontier -> C:\Program Files\WindowsApps\SocialQuantumIreland.WildWestNewFrontier_57.4.36113.0_x86__qkh4jy2njbgaw [2026-08-11] (Social Quantum Limited)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-851827749-1828096854-3146880355-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-851827749-1828096854-3146880355-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-851827749-1828096854-3146880355-1001_Classes\CLSID\{5733c3e6-5a1f-4212-a0b4-55ee61168b22}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-851827749-1828096854-3146880355-1001_Classes\CLSID\{BB754DA5-E202-4EAC-B7C7-DE4DB1D96E28}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-851827749-1828096854-3146880355-1001_Classes\CLSID\{DF1F7848-595D-4570-8E7C-35F77861C552}\InprocServer32 -> C:\Users\Karel\AppData\Local\Programs\Zoner\ZPS X\binary\Program64\ZpsThumbnailHandler.dll (ZONER a.s. -> )
CustomCLSID: HKU\S-1-5-21-851827749-1828096854-3146880355-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\Karel\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.25.28902\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-06-25] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2026-07-11] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2022-01-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2022-01-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2026-07-11] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-06-25] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.150.0804.0011\FileSyncShell64.dll [2026-08-27] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvaci.inf_amd64_8800fc3ca8108dbc\nvshext.dll [2026-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-06-25] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2026-07-11] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2022-01-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2022-01-01] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2026-07-29 16:03 - 2026-07-24 19:40 - 002291712 _____ () [File not signed] C:\Program Files (x86)\Steam\libpyrowave-shared-0.dll
2025-06-16 17:49 - 2025-06-16 17:49 - 002628096 _____ () [File not signed] C:\Users\Karel\AppData\Local\Programs\Zoner\ZPS X\binary\Program64\CNNDetector.dll
2025-06-16 17:49 - 2025-06-16 17:49 - 000203264 _____ () [File not signed] C:\Users\Karel\AppData\Local\Programs\Zoner\ZPS X\binary\Program64\librectify.dll
2025-08-15 02:15 - 2025-08-15 02:15 - 000030720 _____ (Adobe Systems Inc.) [File not signed] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\cs_cz\Acrobat Elements\ContextMenuShim64.cze
2026-02-27 17:50 - 2026-06-25 12:00 - 000101888 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2008-04-11 11:54 - 2008-04-11 11:54 - 000348160 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\ABBYY Screenshot Reader\MSVCR71.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2026-06-21] (Microsoft Corporation -> Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-06-21] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-20] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 11:14 - 2023-11-14 12:23 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost

2021-03-26 17:20 - 2022-08-14 13:43 - 000000446 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: 192.168.0.1
Windows Firewall is enabled.

Network Binding:
=============
Wi-Fi: Qualcomm Atheros QCA9377 Wireless Network Adapter -> Qcamain10x64.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-851827749-1828096854-3146880355-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Karel\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\Karel\Desktop\FRST64.exe


==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "RtkAudUService"
HKLM\...\StartupApproved\Run32: => "ABBYY Screenshot Reader Retail"
HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX2"
HKLM\...\StartupApproved\Run32: => "Nero BackItUp"
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_EADC2331AEA11A7C2115598A7830EF60"
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\StartupApproved\Run: => "ABBYY Screenshot Reader Retail"
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\StartupApproved\Run: => "OneDriveSetup"
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\StartupApproved\Run: => "Opera Stable"
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\StartupApproved\Run: => "Adobe Reader Synchronizer"
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\StartupApproved\Run: => "ESET VPN"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{B8CC24B6-58BF-454F-B812-30E6A62BEAB3}] => (Allow) C:\Program Files (x86)\Nero\Nero Common\Nero Launcher\NeroLauncher.exe (Nero AG -> Nero AG)
FirewallRules: [{C904C279-92FC-46A8-8898-DA2043F2F20A}] => (Allow) C:\Program Files (x86)\Nero\Nero 2022\3-2-1 Backup\NBService.exe (Nero AG -> Nero AG)
FirewallRules: [{BE9A92F4-360F-4A25-B070-47BD4DCFF2CC}] => (Allow) C:\Program Files (x86)\Nero\Nero 2022\3-2-1 Backup\BackItUp.exe (Nero AG -> Nero AG)
FirewallRules: [{178CB5BD-5EDB-4D54-BADF-AF5E26B7B6EC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe (TODO: <Company name>) [File not signed]
FirewallRules: [{696084F0-C442-4EA0-BA9E-6157D27783ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe (TODO: <Company name>) [File not signed]
FirewallRules: [{B7818D8C-2FCD-4145-980E-0C7570B302C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age of Mythology\AoMX.exe (Microsoft Corp) [File not signed]
FirewallRules: [{72CC2D7A-064B-4ADC-A077-DC704CFE4BAA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age of Mythology\AoMX.exe (Microsoft Corp) [File not signed]
FirewallRules: [{5F1E0BCB-7368-43BD-9459-0B7307A5C664}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age of Mythology\Launcher.exe (TODO: <Company name>) [File not signed]
FirewallRules: [{41DC18EB-99F2-4070-AF13-E32E58B2DF03}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age of Mythology\Launcher.exe (TODO: <Company name>) [File not signed]
FirewallRules: [{DCA9BD71-CF83-42B8-B88A-EF906FA02BFF}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{1CAC4D4A-AED7-4A0E-B19C-4CE69A8DB93D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{90D3B457-E11C-4394-A5CA-CC708E9CF31E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{EFA5D375-1958-486F-B921-B23266FE3A31}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{A224C448-3B93-4200-9B13-507E245E38CC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{CF007677-E857-43E5-A9A5-1FE2BE5333ED}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{2CDE2EE7-FF89-4ACB-88D3-514B574CD2F8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{6A493841-AD60-4D1A-8840-B760B772B66E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{217A8E60-64DA-40F6-AD64-C0F0DB7FC0A7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{1B4DE359-E4F9-4B0D-86C8-15E384CF21EF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{B9D27620-FAF3-4BE5-A2D5-BF0DCF5F5891}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7CBFDED6-C584-4E4D-95D9-E2ED3883D156}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe => No File
FirewallRules: [{04A2180A-38E0-4A20-A5C4-61265E88D318}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe => No File
FirewallRules: [{9A074114-A12A-4496-9102-F5483577CFA4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FB822FAD-1DB3-4E60-9638-FFD7AA7DCB2A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{B9282530-F0BB-4F0C-8128-FE7819897552}] => (Allow) C:\Program Files (x86)\Sticky Password\stpass.exe (Lamantine Software a.s. -> Lamantine Software a.s.)
FirewallRules: [{655357BC-DD24-46D5-B89B-606603512EFA}] => (Allow) C:\Program Files (x86)\Sticky Password\stpass.exe (Lamantine Software a.s. -> Lamantine Software a.s.)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9AA091B5-9D9A-47A3-8B2C-A85DD5D942A7}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E1CE4B0B-BA6E-4C44-A2A9-D9955FEE68E5}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{16545BB1-9A3C-4037-A4B4-CEDC3DA68E45}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C65640A2-CF4C-40F5-9986-95901762C5C0}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{68B4D96A-2567-4EE0-8C2E-D48292610A96}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{661542A7-1A40-4831-915D-B581C9070252}] => (Allow) C:\Users\Karel\AppData\Local\Programs\Opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{CDFBAD14-5C74-4051-B6E5-E894C278D659}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.54041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3976954A-0494-49DC-8D6A-5ED659F7BD3E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.54041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D2EF39D9-69AF-4EDD-A43F-7F2F4C6DE140}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.54041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3B7B55EC-F4CC-429E-8E25-FB826296BE3F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.54041.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{91314533-B004-490F-8DBB-16F69F2DB5BC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7504AA76-7D6A-48AE-990D-E4786E99B2F5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C61C516A-3248-4852-ADD7-A4001E4B2D21}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{675FBA0D-4209-41C9-B213-2A405B3008B8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B2998EBE-FD06-408C-8AC9-8E3E2E7EA6E0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A3671856-C661-4656-B975-D086880AF648}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{684B50B7-78C8-4E0B-9816-489AA86487D9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{44EE2789-9D0C-4E7E-8593-B63D3C3B53EF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E9794D6A-4279-4833-A308-4C7B294A193A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B16B4B1E-55C6-45A1-B6A3-E05CE7A95F3B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{474530E0-7C9D-4D53-8143-BB028830A351}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F4F492FB-A8DC-4E1A-A3E6-41C23F712B6B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CBBC883E-9936-4BBB-9FD1-6AF3E4F0B5E8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.298.301.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)

==================== Restore Points =========================

31-08-2026 16:59:58 Windows Update
31-08-2026 16:59:59 Windows Update

==================== Faulty Device Manager Devices ============
Name: VGA WebCam
Description: Zobrazovací zařízení USB
Class Guid: {ca3e7ab9-b4c3-4ae6-8251-579ef933890f}
Manufacturer: Microsoft
Service: usbvideo
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: ========================

Application errors:
==================
Error: (09/02/2026 03:16:10 PM) (Source: Microsoft Security Client) (EventID: 3002) (User: )
Description: Event-ID 3002

Error: (09/02/2026 03:16:10 PM) (Source: Microsoft Security Client) (EventID: 2002) (User: )
Description: Event-ID 2002

Error: (09/02/2026 03:16:10 PM) (Source: Microsoft Security Client) (EventID: 2003) (User: )
Description: Event-ID 2003

Error: (09/02/2026 03:10:04 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: NT AUTHORITY)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.

Error: (08/27/2026 10:48:49 AM) (Source: Firefox Default Browser Agent) (EventID: 1332) (User: )
Description: Event-ID 1332

Error: (08/13/2026 10:07:03 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: NT AUTHORITY)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.

Error: (07/29/2026 05:47:32 PM) (Source: Firefox Default Browser Agent) (EventID: 1332) (User: )
Description: Event-ID 1332

Error: (07/29/2026 05:46:03 PM) (Source: MsiInstaller) (EventID: 11714) (User: NT AUTHORITY)
Description: Product: Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 -- Error 1714. The older version of Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 cannot be removed. Contact your technical support group. System Error 1612.


System errors:
=============
Error: (09/02/2026 02:14:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Steam Client Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (09/02/2026 02:14:24 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Steam Client Service bylo dosaženo časového limitu (30000 ms).

Error: (09/02/2026 12:52:44 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1803) (User: NT AUTHORITY)
Description: A PK-signed Key Exchange Key (KEK) cannot be found for this device. Check with the device manufacturer for proper key provisioning.
This device signature information is included here.
DeviceAttributes: FirmwareManufacturer:Insyde Corp.;FirmwareVersion:V1.11;OEMModelNumber:Aspire A317-51G;OEMModelBaseBoard:Dopey_WC;OEMManufacturerName:Acer;OSArchitecture:amd64;
BucketId: 96d618e6109071dfd5aa2815aedf666b6fd5def2e7d6c9c30fb56a63f8079901
BucketConfidenceLevel: High Confidence.
For more information, please see https://go.microsoft.com/fwlink/?linkid=2339472

Error: (09/01/2026 09:52:25 PM) (Source: Tcpip) (EventID: 4199) (User: )
Description: Systém zjistil konflikt IP adresy 192.168.0.141 se systémem,
jehož síťová hardwarová adresa je 76-FE-CE-01-0A-E3. Síťové operace v systému mohou
být přerušeny.

Error: (09/01/2026 09:41:15 PM) (Source: Tcpip) (EventID: 4199) (User: )
Description: Systém zjistil konflikt IP adresy 192.168.0.140 se systémem,
jehož síťová hardwarová adresa je 76-FE-CE-01-0A-E3. Síťové operace v systému mohou
být přerušeny.

Error: (09/01/2026 08:50:59 PM) (Source: Tcpip) (EventID: 4199) (User: )
Description: Systém zjistil konflikt IP adresy 192.168.0.139 se systémem,
jehož síťová hardwarová adresa je 76-FE-CE-01-0A-E3. Síťové operace v systému mohou
být přerušeny.

Error: (09/01/2026 01:07:48 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1803) (User: NT AUTHORITY)
Description: A PK-signed Key Exchange Key (KEK) cannot be found for this device. Check with the device manufacturer for proper key provisioning.
This device signature information is included here.
DeviceAttributes: FirmwareManufacturer:Insyde Corp.;FirmwareVersion:V1.11;OEMModelNumber:Aspire A317-51G;OEMModelBaseBoard:Dopey_WC;OEMManufacturerName:Acer;OSArchitecture:amd64;
BucketId: 96d618e6109071dfd5aa2815aedf666b6fd5def2e7d6c9c30fb56a63f8079901
BucketConfidenceLevel: High Confidence.
For more information, please see https://go.microsoft.com/fwlink/?linkid=2339472

Error: (09/01/2026 09:08:42 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1803) (User: NT AUTHORITY)
Description: A PK-signed Key Exchange Key (KEK) cannot be found for this device. Check with the device manufacturer for proper key provisioning.
This device signature information is included here.
DeviceAttributes: FirmwareManufacturer:Insyde Corp.;FirmwareVersion:V1.11;OEMModelNumber:Aspire A317-51G;OEMModelBaseBoard:Dopey_WC;OEMManufacturerName:Acer;OSArchitecture:amd64;
BucketId: 96d618e6109071dfd5aa2815aedf666b6fd5def2e7d6c9c30fb56a63f8079901
BucketConfidenceLevel: High Confidence.
For more information, please see https://go.microsoft.com/fwlink/?linkid=2339472


Windows Defender:
================
CodeIntegrity:
===============
Date: 2026-09-02 17:30:04
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Windows signing level requirements.

Date: 2026-09-02 17:29:40
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

BIOS: Insyde Corp. V1.11 06/23/2020
Motherboard: CML Dopey_WC
Processor: Intel(R) Core(TM) i5-10210U CPU @ 1.60GHz
Percentage of memory in use: 88%
Total physical RAM: 8023.05 MB
Available physical RAM: 906.57 MB
Total Virtual: 11356.81 MB
Available Virtual: 1880.77 MB

==================== Drives ================================

Disk 0 - Drive c: (Acer) (Fixed) (Total:475.48 GB) (Free:353.72 GB) (Model: KINGSTON RBUSNS8154P3512GJ1) NTFS

Disk 0 - \\?\Volume{2ef69224-811d-4720-8ff1-c670b261ae69}\ () (Fixed) (Total:1.34 GB) (Free:0.1 GB) NTFS
Disk 0 - \\?\Volume{db5a1488-daed-4a1b-84f2-050c4b091f3e}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 77C63C48)

Partition: GPT.

==================== End of Addition.txt =======================

Zdravím!
Pokud byla zablokována, mělo by to být vyřešené (AV oznamuje přerušení vstupu malwaru do systému). Nicméně otevřte poznámkový blok a zkopírujte do něj:

Start

ClkoseProcesses:
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\Run: [ABBYY Screenshot Reader Retail] => [X]
Error reading preferences. Please make sure ESET "Secure Browser" option is disabled. <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Karel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-26] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Karel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Karel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2026-08-25] [UpdateUrl:0] <==== ATTENTION
C:\DumpStack.log.tmp
FirewallRules: [{DCA9BD71-CF83-42B8-B88A-EF906FA02BFF}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{1CAC4D4A-AED7-4A0E-B19C-4CE69A8DB93D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{7CBFDED6-C584-4E4D-95D9-E2ED3883D156}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe => No File
FirewallRules: [{04A2180A-38E0-4A20-A5C4-61265E88D318}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe => No File

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 31-08-2026
Ran by Karel (02-09-2026 20:18:50) Run:2
Running from C:\Users\Karel\Desktop
Loaded Profiles: Karel
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

ClkoseProcesses:
HKU\S-1-5-21-851827749-1828096854-3146880355-1001\...\Run: [ABBYY Screenshot Reader Retail] => [X]
Error reading preferences. Please make sure ESET "Secure Browser" option is disabled. <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Karel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-26] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Karel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Karel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2026-08-25] [UpdateUrl:0] <==== ATTENTION
C:\DumpStack.log.tmp
FirewallRules: [{DCA9BD71-CF83-42B8-B88A-EF906FA02BFF}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{1CAC4D4A-AED7-4A0E-B19C-4CE69A8DB93D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{7CBFDED6-C584-4E4D-95D9-E2ED3883D156}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe => No File
FirewallRules: [{04A2180A-38E0-4A20-A5C4-61265E88D318}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe => No File

EmptyTemp:
End
*****************

ClkoseProcesses: => Error: No automatic fix found for this entry.
"HKU\S-1-5-21-851827749-1828096854-3146880355-1001\Software\Microsoft\Windows\CurrentVersion\Run\\ABBYY Screenshot Reader Retail" => removed successfully
Error reading preferences. Please make sure ESET "Secure Browser" option is disabled. <==== ATTENTION => Error: No automatic fix found for this entry.
Edge Extension: (No Name) - C:\Users\Karel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-26] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
Edge Extension: (No Name) - C:\Users\Karel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
Edge Extension: (No Name) - C:\Users\Karel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2026-08-25] [UpdateUrl:0] <==== ATTENTION => Error: No automatic fix found for this entry.
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.

"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DCA9BD71-CF83-42B8-B88A-EF906FA02BFF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1CAC4D4A-AED7-4A0E-B19C-4CE69A8DB93D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7CBFDED6-C584-4E4D-95D9-E2ED3883D156}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{04A2180A-38E0-4A20-A5C4-61265E88D318}" => removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 193590296 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 749317190 B
Windows/system/drivers => 83346172 B
Edge => 6363192 B
Firefox => 0 B
Opera => 530808289 B

Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , Caches, history, cookies, recent:
Default => 4 B
ProgramData => 1006921 B
Public => 0 B
systemprofile => 510788 B
systemprofile32 => 2 B
LocalService => 473474 B
NetworkService => 2340 B
Karel => 53713364 B

RecycleBin => 20140736 B
EmptyTemp: => 1.5 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 02-09-2026 20:23:08)

C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 20:23:08 ====

Vše smazáno. Upozornění trvá?

Mezi tím mě zkolabovalo připojení přes optickou síť. Zatím neumím odpovědět, protože jsem jen chvíli na PC. Zkusím se ozvat později.

OK.