nová neznámá témata, děkuji, jsou po poslední aktualisaci Thunderbirdu
Odeslal: 21 Zář 2026 09:57
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-09-2026
Ran by Jana a Ivo (administrator) on DESKTOP-P1SMD4A (LENOVO 90DA00AJCK) (21-09-2026 10:32:24)
Running from C:\Users\Jana a Ivo\Downloads\FRST64.exe
Loaded Profiles: Jana a Ivo
Platform: Microsoft Windows 10 Home Version 22H2 19045.7548 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\CGMSERVER\bin\pgsql\bin\pg_ctl.exe ->) (CompuGROUP Medical Česká republika s.r.o. -> PostgreSQL Global Development Group) [File not signed] C:\CGMSERVER\bin\pgsql\bin\postgres.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eServiceHost.exe <2>
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\BrowserPrivacyAndSecurity.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(CompuGROUP Medical Česká republika s.r.o. -> PostgreSQL Global Development Group) [File not signed] C:\CGMSERVER\bin\pgsql\bin\postgres.exe <24>
(explorer.exe ->) (Hewlett Packard -> HP Inc.) C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\ScanToPCActivationApp.exe
(explorer.exe ->) (Ivaylo Beltchev -> IvoSoft) [File not signed] C:\Program Files\Classic Shell\ClassicStartMenu.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <16>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvle.inf_amd64_c4410ab03e8e99d7\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (CompuGroup Medical Česká republika s.r.o. -> CompuGroup Medical Česká republika s.r.o.) [File not signed] C:\CGMSERVER\bin\etrzby-1\cgm.etrzby-1.exe
(services.exe ->) (CompuGroup Medical Česká republika s.r.o. -> CompuGroup Medical Česká republika s.r.o.) C:\CGMSERVER\bin\ecommunication-1\cgm.ecommunication-1.exe
(services.exe ->) (CompuGroup Medical Česká republika s.r.o. -> CompuGroup Medical Česká republika s.r.o.) C:\CGMSERVER\bin\erepository-1\cgm.erepository-1.exe
(services.exe ->) (CompuGroup Medical Česká republika s.r.o. -> Microsoft) C:\CGMSERVER\bin\core\cgm.servercore.exe
(services.exe ->) (CompuGroup Medical Česká republika s.r.o. -> Microsoft) C:\CGMSERVER\bin\ebooking-1\cgm.ebooking-1.exe
(services.exe ->) (CompuGroup Medical Česká republika s.r.o. -> PostgreSQL Global Development Group) [File not signed] C:\CGMSERVER\bin\pgsql\bin\pg_ctl.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (HCS GmbH) [File not signed] C:\CGMSERVER\bin\medical-net\MedConnect.ServiceManager\HCS.MedConnect.ServiceManager.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvle.inf_amd64_c4410ab03e8e99d7\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (The Apache Software Foundation -> Apache Software Foundation) C:\CGMSERVER\cgm.jetty.exe
(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(svchost.exe ->) (Hewlett Packard -> HP Inc.) C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\HPNetworkCommunicatorCom.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [19572528 2021-09-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1803848 2016-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [282336 2026-08-29] (ESET, spol. s r.o. -> ESET)
HKLM\...\Policies\Explorer: [NoRecentDocsNetHood] 0
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\Software\Policies\...\system: [DisableAcrylicBackgroundOnLogon] 1
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Run: [HP OfficeJet Pro 8710 (NET)] => C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\ScanToPCActivationApp.exe [3770504 2018-04-06] (Hewlett Packard -> HP Inc.)
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Run: [Mozilla-Firefox-308046B0AF4A39CB] => "c:\program files\mozilla firefox\firefox.exe" -os-autostart [1079424 2026-09-17] (Mozilla Corporation -> Mozilla Corporation)
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [45610456 2026-09-07] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [NoPreviewPane] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [HideSCANetwork] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [HideSCAVolume] 0
HKLM\...\Windows x64\Print Processors\hpcpp255: C:\Windows\System32\spool\prtprocs\x64\hpcpp255.dll [848384 2021-03-03] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [109080 2018-12-06] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP Universal Print Monitor: C:\WINDOWS\system32\HPMPW082.DLL [120320 2021-03-03] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
HKLM\...\Print\Monitors\HPMLM225: C:\WINDOWS\system32\hpmlm225.dll [308224 2018-11-14] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
HKLM\...\Print\Monitors\PrinterPlusPlus: C:\WINDOWS\system32\mfilemon.dll [972000 2019-10-17] (Open Source Developer, Lorenzo Monti -> Monti Lorenzo)
HKLM\...\Print\Monitors\Software602 XPS port monitor: C:\WINDOWS\system32\602localmon.dll [47896 2021-09-23] (Software602 a.s. -> Windows (R) Win 7 DDK provider)
Startup: C:\Users\Jana a Ivo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Poslat do aplikace OneNote.lnk [2025-11-18]
ShortcutTarget: Poslat do aplikace OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2017-07-26]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {5F3CDA2D-E174-4868-B295-CE8CF0886453} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1617408 2026-08-03] (Adobe Inc. -> Adobe Inc.)
Task: {EE6F031C-DC01-479F-9A1E-2BF7F57843D4} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [31056 2026-01-06] (Garmin International, Inc. -> )
Task: {3B011604-C654-4191-A9CA-4F706AEE4FDD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136304 2021-03-30] (HP Inc. -> HP Inc.)
Task: {F6982815-A712-4205-B89C-E73C6177F326} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [930960 2022-05-11] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\/f
Task: {9310834E-F375-48F7-B70C-F64AF781C1E3} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-25] (HP Inc. -> HP Inc.)
Task: {C960599F-AB86-4A92-A42C-8BF1C3954461} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-25] (HP Inc. -> HP Inc.)
Task: {9E2BBCB8-F2F7-4582-999B-86C50C57DE33} - System32\Tasks\HPCustPartic.exe_{E0222514-8E27-4CB3-ABB0-BA7D455CDC5A} => C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\HPCustPartic.exe [6439048 2018-04-06] (Hewlett Packard -> HP Inc.)
Task: {F45335DB-063F-4762-B9E0-42A531D1E8C0} - System32\Tasks\HPCustParticipation HP OfficeJet Pro 8710 => C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\HPCustPartic.exe [6439048 2018-04-06] (Hewlett Packard -> HP Inc.)
Task: {7A1466C6-8CE9-48FB-BF7A-C3FC136C94CE} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [11419480 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {E21723DE-496A-4819-A04C-E1C4A918185D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29025120 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {80FAB476-721D-4E8C-8242-A2C14CCB8451} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonx86\Microsoft Shared\OFFICE16\opushutil.exe [61280 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {9525B31E-0999-49AD-9A1F-769ADAF96651} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29025120 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {F8084631-FAE4-40F9-90A5-4341A25DCCA5} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [224520 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {A2AE9896-91FB-46A6-8D5E-84EB505ACBCA} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [224520 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {076D7BA0-B9DB-4559-BE3A-FB60AA498C05} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-17] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {9EEAB08A-E14A-44C9-B269-C4BD62BAE32E} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3178504301-1335594183-2692845351-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-17] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {C64CD68A-1111-4572-B2BF-DDC677992DD5} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3178504301-1335594183-2692845351-1006 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-17] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {D301FA5F-F07F-49E3-8687-ECD959776895} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-09-17] (Mozilla Corporation -> Mozilla Foundation)
Task: {D6ABE6FE-789E-4125-AF0C-B7B4371D1C17} - System32\Tasks\Mozilla\Firefox Default Browser Agent 9DED23DF4360B491 => C:\Program Files\mozilla firefox\default-browser-agent.exe [44160 2026-09-17] (Mozilla Corporation -> Mozilla Foundation)
Task: {3BAC8E77-9340-49A0-B809-2FF65A15C837} - System32\Tasks\Zoner.Updater.S-1-5-21-3178504301-1335594183-2692845351-1001 => C:\ProgramData\Zoner\Zoner.Installer.Core\updater.exe [1591632 2026-04-24] (ZONER a.s. -> ZONER a.s.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{c88b0fbf-08b9-4c32-b1a0-42a591513cc3}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{c88b0fbf-08b9-4c32-b1a0-42a591513cc3}: [DhcpDomain] Home
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: z127unu2.default-release-1 -> 308046B0AF4A39CB
FF DefaultProfile: z127unu2.default-release-1 -> 9DED23DF4360B491
FF DefaultProfile: ptlx1iiy.default-release -> E7CF176E110C211B
FF ProfilePath: C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1 [2026-09-21]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\ace.nmsigner@asseco.cz.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\adblockultimate@adblockultimate.net.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\browserextension@eset.com.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\icapkiservice@ica.cz.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\newtab@mozilla.org.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\translator@zoli.bod.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\{506e023c-7f2b-40a3-8066-bc5deb40aebe}.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\{69F080C9-A1D8-42F8-BD83-3D54D4BC81B3}.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [0] [not signed]
FF ProfilePath: C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default [2025-08-15]
FF Homepage: Mozilla\Firefox\Profiles\rcwkdnwj.default -> hxxp://www.seznam.cz/
FF Extension: (Podepisovací komponenta Signer) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\ace.nmsigner@asseco.cz.xpi [2018-07-18]
FF Extension: (AdBlocker Ultimate) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\adblockultimate@adblockultimate.net.xpi [2021-04-04]
FF Extension: (Komponenta I.CA PKI Service) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\icapkiservice@ica.cz.xpi [2018-06-28] [UpdateUrl:hxxps://s.ica.cz/ica_pkiservice/firefox_extension/ICAPKIServiceExtension_ICA_Firefox_update_manifest.json]
FF Extension: (Google Translator for Firefox) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\translator@zoli.bod.xpi [2018-12-02]
FF Extension: (Gesturefy) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\{506e023c-7f2b-40a3-8066-bc5deb40aebe}.xpi [2021-04-02]
FF Extension: (FormApps Extension) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\{69F080C9-A1D8-42F8-BD83-3D54D4BC81B3}.xpi [2017-10-03]
FF Extension: (Video DownloadHelper) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-12-16]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-05-20]
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.19 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-09-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.371.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.371.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2026-09-21]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-06-04]
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Jana a Ivo\AppData\Local\Microsoft\Edge\User Data\Default [2026-09-17]
Error reading preferences. Please make sure ESET "Secure Browser" option is disabled. <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-09-17] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2026-07-06] [UpdateUrl:0] <==== ATTENTION
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [182776 2026-08-03] (Adobe Inc. -> Adobe Inc.)
R2 cgm.ebooking-1; C:\CGMSERVER\bin\ebooking-1\cgm.ebooking-1.exe [35680 2019-06-21] (CompuGroup Medical Česká republika s.r.o. -> Microsoft)
R2 cgm.ecommunication-1; C:\CGMSERVER\bin\ecommunication-1\cgm.ecommunication-1.exe [95488 2025-01-07] (CompuGroup Medical Česká republika s.r.o. -> CompuGroup Medical Česká republika s.r.o.)
R2 cgm.erepository-1; C:\CGMSERVER\bin\erepository-1\cgm.erepository-1.exe [27904 2025-01-07] (CompuGroup Medical Česká republika s.r.o. -> CompuGroup Medical Česká republika s.r.o.)
R2 cgm.etrzby-1; C:\CGMSERVER\bin\etrzby-1\cgm.etrzby-1.exe [22112 2017-05-19] (CompuGroup Medical Česká republika s.r.o. -> CompuGroup Medical Česká republika s.r.o.) [File not signed]
R2 cgm.jetty; C:\CGMSERVER\cgm.jetty.exe [110080 2020-01-22] (The Apache Software Foundation -> Apache Software Foundation)
R2 cgm.servercore; C:\CGMSERVER\bin\core\cgm.servercore.exe [30344 2026-03-26] (CompuGroup Medical Česká republika s.r.o. -> Microsoft)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13288288 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5745384 2026-08-29] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [5058912 2026-08-29] (ESET, spol. s r.o. -> ESET)
R2 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [5058912 2026-08-29] (ESET, spol. s r.o. -> ESET)
S3 HCS.MedConnect.Service; C:\CGMSERVER\bin\medical-net\MedConnect\HCS.MedConnect.Service.exe [46080 2016-11-03] (HCS GmbH) [File not signed]
R2 HCS.MEDCONNECT.SERVICEMANAGER; C:\CGMSERVER\bin\medical-net\MedConnect.ServiceManager\HCS.MedConnect.ServiceManager.exe [91648 2016-11-03] (HCS GmbH) [File not signed]
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2026-06-25] (HP Inc. -> HP Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.)
S3 I.CA Maintenance Service2; C:\Program Files (x86)\I.CA\I.CA Maintenance2\ICAMaintenance.exe [299336 2021-02-08] (Prvni certifikacni autorita, a.s. -> I.CA, a.s.)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24080.9-0\MpDefenderCoreService.exe [1431160 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2019-02-01] (HP Inc.) [File not signed]
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2019-02-01] (HP Inc.) [File not signed]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24080.9-0\NisSrv.exe [3199656 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24080.9-0\MsMpEng.exe [133704 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 cgm.postgres; C:/CGMSERVER/bin/pgsql/bin/pg_ctl.exe runservice -N "cgm.postgres" -D "C:/CGMSERVER/data/pgsql" (No File)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvle.inf_amd64_c4410ab03e8e99d7\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvle.inf_amd64_c4410ab03e8e99d7\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [File not signed]
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [146856 2015-03-10] (BoiseTest -> Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [21928 2015-03-10] (BoiseTest -> Windows (R) Win 7 DDK provider)
S3 Dot4Scan; C:\WINDOWS\system32\DRIVERS\Dot4Scan.sys [14760 2015-03-10] (BoiseTest -> Microsoft Corporation)
S3 dot4usb; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [43944 2015-03-10] (BoiseTest -> Microsoft Corporation)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [234512 2026-08-29] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [143056 2026-08-29] (Microsoft Windows Hardware Compatibility Publisher -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [17880 2026-08-29] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [374992 2026-08-29] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [57920 2026-08-29] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [83712 2026-08-29] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [127592 2026-08-29] (ESET, spol. s r.o. -> ESET)
S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [24064 2023-11-15] (Microsoft Corporation) [File not signed]
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [22080 2024-10-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [602392 2024-10-23] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2024-10-23] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-9-12 11:53 - 2026-09-12 11:53 - 000002061 _____ C:\ProgramData\Desktop\Adobe Acrobat.lnk
2026-8-23 11:45 - 2026-08-23 11:45 - 000001969 _____ C:\ProgramData\Desktop\Prosba o vzdálenou pomoc.lnk
2026-8-23 11:45 - 2026-08-23 11:45 - 000001944 _____ C:\ProgramData\Desktop\PC DOKTOR.lnk
2026-09-21 10:32 - 2026-09-21 10:33 - 000028939 _____ C:\Users\Jana a Ivo\Downloads\FRST.txt
2026-09-21 10:32 - 2026-09-21 10:32 - 000000000 ____D C:\FRST
2026-09-21 10:24 - 2026-09-21 10:25 - 002455552 _____ (Farbar) C:\Users\Jana a Ivo\Downloads\FRST64.exe
2026-09-21 10:17 - 2026-09-21 10:17 - 002139648 _____ (Farbar) C:\Users\Jana a Ivo\Downloads\FRST.exe
2026-09-17 09:22 - 2026-09-17 10:43 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-09-16 15:11 - 2026-09-17 15:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2026-08-25 10:42 - 2026-08-25 10:42 - 000174835 _____ C:\Users\Jana a Ivo\Downloads\podminky-poskytovani-sluzby-chytre-dobijeni.pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-09-21 10:32 - 2021-12-17 18:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-09-21 10:30 - 2017-07-25 14:41 - 000000000 ____D C:\Users\Jana a Ivo\AppData\Local\ClassicShell
2026-09-21 09:43 - 2022-02-10 11:39 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-09-21 09:40 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-21 09:36 - 2018-06-18 18:45 - 000000000 ____D C:\Users\Jana a Ivo\AppData\Local\D3DSCache
2026-09-20 19:01 - 2017-08-31 17:45 - 000000000 ____D C:\ProgramData\NVIDIA
2026-09-20 09:51 - 2020-06-12 17:03 - 000003638 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-09-20 09:51 - 2020-06-12 17:03 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-09-18 09:33 - 2020-06-12 16:42 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-09-17 15:55 - 2021-06-20 17:21 - 000000000 ____D C:\Users\Jana a Ivo\AppData\Roaming\vlc
2026-09-17 10:43 - 2026-08-20 22:47 - 000002137 _____ C:\Users\Jana a Ivo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-17 10:43 - 2021-06-04 23:59 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-17 10:08 - 2017-11-23 17:14 - 000000000 ____D C:\Users\Jana a Ivo\AppData\Local\Packages
2026-09-17 09:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-09-17 09:39 - 2017-07-31 18:15 - 000001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-09-17 09:22 - 2026-05-27 16:14 - 000402048 _____ (Mozilla Foundation) C:\Users\Jana a Ivo\Desktop\Firefox.exe
2026-09-16 15:11 - 2017-07-25 17:16 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-09-16 09:05 - 2022-05-11 15:49 - 001972838 _____ C:\WINDOWS\system32\perfh005.dat
2026-09-16 09:05 - 2022-05-11 15:49 - 000532890 _____ C:\WINDOWS\system32\perfc005.dat
2026-09-16 09:05 - 2020-06-12 16:55 - 000138034 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-09-16 09:05 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2026-09-16 09:01 - 2020-06-12 17:03 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-09-16 09:01 - 2020-06-12 16:42 - 000008192 ___SH C:\DumpStack.log.tmp
2026-09-16 09:00 - 2020-06-12 16:15 - 000000000 ____D C:\Users\Jana a Ivo
2026-09-16 09:00 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-09-15 15:12 - 2025-02-07 10:17 - 000003586 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3178504301-1335594183-2692845351-1001
2026-09-15 15:12 - 2021-12-13 16:35 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3178504301-1335594183-2692845351-1001
2026-09-15 15:12 - 2020-06-12 17:03 - 000003390 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3178504301-1335594183-2692845351-1001
2026-09-15 15:12 - 2020-06-12 16:15 - 000002443 _____ C:\Users\Jana a Ivo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-09-12 11:53 - 2022-10-14 09:43 - 000002146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-09-12 11:53 - 2022-10-14 09:43 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2026-09-12 11:53 - 2020-06-12 17:03 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2026-09-12 10:53 - 2017-07-25 15:45 - 000000000 ____D C:\Program Files (x86)\Dialog MIS
2026-09-12 09:51 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-09-05 21:41 - 2019-09-04 18:07 - 000000000 ____D C:\ProgramData\Zoner
2026-09-03 13:15 - 2021-06-17 09:42 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-08-29 06:43 - 2024-10-11 15:41 - 000374992 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys
2026-08-29 06:43 - 2024-10-11 15:41 - 000234512 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys
2026-08-29 06:43 - 2024-10-11 15:41 - 000143056 _____ (ESET) C:\WINDOWS\system32\Drivers\edevmon.sys
2026-08-29 06:43 - 2024-10-11 15:41 - 000127592 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys
2026-08-29 06:43 - 2024-10-11 15:41 - 000083712 _____ (ESET) C:\WINDOWS\system32\Drivers\epfw.sys
2026-08-29 06:43 - 2024-10-11 15:41 - 000057920 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys
2026-08-29 06:43 - 2024-10-03 09:21 - 000017880 _____ (ESET) C:\WINDOWS\system32\Drivers\eelam.sys
2026-08-26 11:31 - 2022-05-06 23:22 - 000441648 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-08-23 11:45 - 2021-02-19 16:30 - 000001969 _____ C:\Users\Public\Desktop\Prosba o vzdálenou pomoc.lnk
2026-08-23 11:45 - 2017-07-25 15:46 - 000001944 _____ C:\Users\Public\Desktop\PC DOKTOR.lnk
2026-08-23 11:45 - 2017-07-25 15:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CompuGroup Medical
2026-08-22 15:27 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
==================== Files in the root of some directories ========
2018-03-22 16:23 - 2018-03-22 16:23 - 000000600 _____ () C:\Users\Jana a Ivo\AppData\Roaming\winscp.rnd
2023-09-18 08:51 - 2023-09-18 08:51 - 000000017 _____ () C:\Users\Jana a Ivo\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Ran by Jana a Ivo (administrator) on DESKTOP-P1SMD4A (LENOVO 90DA00AJCK) (21-09-2026 10:32:24)
Running from C:\Users\Jana a Ivo\Downloads\FRST64.exe
Loaded Profiles: Jana a Ivo
Platform: Microsoft Windows 10 Home Version 22H2 19045.7548 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\CGMSERVER\bin\pgsql\bin\pg_ctl.exe ->) (CompuGROUP Medical Česká republika s.r.o. -> PostgreSQL Global Development Group) [File not signed] C:\CGMSERVER\bin\pgsql\bin\postgres.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eServiceHost.exe <2>
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\BrowserPrivacyAndSecurity.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(CompuGROUP Medical Česká republika s.r.o. -> PostgreSQL Global Development Group) [File not signed] C:\CGMSERVER\bin\pgsql\bin\postgres.exe <24>
(explorer.exe ->) (Hewlett Packard -> HP Inc.) C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\ScanToPCActivationApp.exe
(explorer.exe ->) (Ivaylo Beltchev -> IvoSoft) [File not signed] C:\Program Files\Classic Shell\ClassicStartMenu.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <16>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvle.inf_amd64_c4410ab03e8e99d7\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (CompuGroup Medical Česká republika s.r.o. -> CompuGroup Medical Česká republika s.r.o.) [File not signed] C:\CGMSERVER\bin\etrzby-1\cgm.etrzby-1.exe
(services.exe ->) (CompuGroup Medical Česká republika s.r.o. -> CompuGroup Medical Česká republika s.r.o.) C:\CGMSERVER\bin\ecommunication-1\cgm.ecommunication-1.exe
(services.exe ->) (CompuGroup Medical Česká republika s.r.o. -> CompuGroup Medical Česká republika s.r.o.) C:\CGMSERVER\bin\erepository-1\cgm.erepository-1.exe
(services.exe ->) (CompuGroup Medical Česká republika s.r.o. -> Microsoft) C:\CGMSERVER\bin\core\cgm.servercore.exe
(services.exe ->) (CompuGroup Medical Česká republika s.r.o. -> Microsoft) C:\CGMSERVER\bin\ebooking-1\cgm.ebooking-1.exe
(services.exe ->) (CompuGroup Medical Česká republika s.r.o. -> PostgreSQL Global Development Group) [File not signed] C:\CGMSERVER\bin\pgsql\bin\pg_ctl.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (HCS GmbH) [File not signed] C:\CGMSERVER\bin\medical-net\MedConnect.ServiceManager\HCS.MedConnect.ServiceManager.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvle.inf_amd64_c4410ab03e8e99d7\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (The Apache Software Foundation -> Apache Software Foundation) C:\CGMSERVER\cgm.jetty.exe
(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(svchost.exe ->) (Hewlett Packard -> HP Inc.) C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\HPNetworkCommunicatorCom.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [19572528 2021-09-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1803848 2016-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [282336 2026-08-29] (ESET, spol. s r.o. -> ESET)
HKLM\...\Policies\Explorer: [NoRecentDocsNetHood] 0
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\Software\Policies\...\system: [DisableAcrylicBackgroundOnLogon] 1
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Run: [HP OfficeJet Pro 8710 (NET)] => C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\ScanToPCActivationApp.exe [3770504 2018-04-06] (Hewlett Packard -> HP Inc.)
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Run: [Mozilla-Firefox-308046B0AF4A39CB] => "c:\program files\mozilla firefox\firefox.exe" -os-autostart [1079424 2026-09-17] (Mozilla Corporation -> Mozilla Corporation)
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [45610456 2026-09-07] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [NoPreviewPane] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [HideSCANetwork] 0
HKU\S-1-5-21-3178504301-1335594183-2692845351-1001\...\Policies\Explorer: [HideSCAVolume] 0
HKLM\...\Windows x64\Print Processors\hpcpp255: C:\Windows\System32\spool\prtprocs\x64\hpcpp255.dll [848384 2021-03-03] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [109080 2018-12-06] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP Universal Print Monitor: C:\WINDOWS\system32\HPMPW082.DLL [120320 2021-03-03] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
HKLM\...\Print\Monitors\HPMLM225: C:\WINDOWS\system32\hpmlm225.dll [308224 2018-11-14] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
HKLM\...\Print\Monitors\PrinterPlusPlus: C:\WINDOWS\system32\mfilemon.dll [972000 2019-10-17] (Open Source Developer, Lorenzo Monti -> Monti Lorenzo)
HKLM\...\Print\Monitors\Software602 XPS port monitor: C:\WINDOWS\system32\602localmon.dll [47896 2021-09-23] (Software602 a.s. -> Windows (R) Win 7 DDK provider)
Startup: C:\Users\Jana a Ivo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Poslat do aplikace OneNote.lnk [2025-11-18]
ShortcutTarget: Poslat do aplikace OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2017-07-26]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {5F3CDA2D-E174-4868-B295-CE8CF0886453} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1617408 2026-08-03] (Adobe Inc. -> Adobe Inc.)
Task: {EE6F031C-DC01-479F-9A1E-2BF7F57843D4} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [31056 2026-01-06] (Garmin International, Inc. -> )
Task: {3B011604-C654-4191-A9CA-4F706AEE4FDD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136304 2021-03-30] (HP Inc. -> HP Inc.)
Task: {F6982815-A712-4205-B89C-E73C6177F326} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [930960 2022-05-11] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\/f
Task: {9310834E-F375-48F7-B70C-F64AF781C1E3} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-25] (HP Inc. -> HP Inc.)
Task: {C960599F-AB86-4A92-A42C-8BF1C3954461} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [95752 2026-06-25] (HP Inc. -> HP Inc.)
Task: {9E2BBCB8-F2F7-4582-999B-86C50C57DE33} - System32\Tasks\HPCustPartic.exe_{E0222514-8E27-4CB3-ABB0-BA7D455CDC5A} => C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\HPCustPartic.exe [6439048 2018-04-06] (Hewlett Packard -> HP Inc.)
Task: {F45335DB-063F-4762-B9E0-42A531D1E8C0} - System32\Tasks\HPCustParticipation HP OfficeJet Pro 8710 => C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\HPCustPartic.exe [6439048 2018-04-06] (Hewlett Packard -> HP Inc.)
Task: {7A1466C6-8CE9-48FB-BF7A-C3FC136C94CE} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [11419480 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {E21723DE-496A-4819-A04C-E1C4A918185D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29025120 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {80FAB476-721D-4E8C-8242-A2C14CCB8451} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonx86\Microsoft Shared\OFFICE16\opushutil.exe [61280 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {9525B31E-0999-49AD-9A1F-769ADAF96651} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29025120 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {F8084631-FAE4-40F9-90A5-4341A25DCCA5} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [224520 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {A2AE9896-91FB-46A6-8D5E-84EB505ACBCA} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [224520 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {076D7BA0-B9DB-4559-BE3A-FB60AA498C05} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-17] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {9EEAB08A-E14A-44C9-B269-C4BD62BAE32E} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3178504301-1335594183-2692845351-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-17] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {C64CD68A-1111-4572-B2BF-DDC677992DD5} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3178504301-1335594183-2692845351-1006 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-17] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {D301FA5F-F07F-49E3-8687-ECD959776895} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-09-17] (Mozilla Corporation -> Mozilla Foundation)
Task: {D6ABE6FE-789E-4125-AF0C-B7B4371D1C17} - System32\Tasks\Mozilla\Firefox Default Browser Agent 9DED23DF4360B491 => C:\Program Files\mozilla firefox\default-browser-agent.exe [44160 2026-09-17] (Mozilla Corporation -> Mozilla Foundation)
Task: {3BAC8E77-9340-49A0-B809-2FF65A15C837} - System32\Tasks\Zoner.Updater.S-1-5-21-3178504301-1335594183-2692845351-1001 => C:\ProgramData\Zoner\Zoner.Installer.Core\updater.exe [1591632 2026-04-24] (ZONER a.s. -> ZONER a.s.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{c88b0fbf-08b9-4c32-b1a0-42a591513cc3}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{c88b0fbf-08b9-4c32-b1a0-42a591513cc3}: [DhcpDomain] Home
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: z127unu2.default-release-1 -> 308046B0AF4A39CB
FF DefaultProfile: z127unu2.default-release-1 -> 9DED23DF4360B491
FF DefaultProfile: ptlx1iiy.default-release -> E7CF176E110C211B
FF ProfilePath: C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1 [2026-09-21]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\ace.nmsigner@asseco.cz.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\adblockultimate@adblockultimate.net.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\browserextension@eset.com.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\icapkiservice@ica.cz.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\newtab@mozilla.org.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\translator@zoli.bod.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\{506e023c-7f2b-40a3-8066-bc5deb40aebe}.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\{69F080C9-A1D8-42F8-BD83-3D54D4BC81B3}.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [0] [not signed]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\z127unu2.default-release-1\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [0] [not signed]
FF ProfilePath: C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default [2025-08-15]
FF Homepage: Mozilla\Firefox\Profiles\rcwkdnwj.default -> hxxp://www.seznam.cz/
FF Extension: (Podepisovací komponenta Signer) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\ace.nmsigner@asseco.cz.xpi [2018-07-18]
FF Extension: (AdBlocker Ultimate) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\adblockultimate@adblockultimate.net.xpi [2021-04-04]
FF Extension: (Komponenta I.CA PKI Service) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\icapkiservice@ica.cz.xpi [2018-06-28] [UpdateUrl:hxxps://s.ica.cz/ica_pkiservice/firefox_extension/ICAPKIServiceExtension_ICA_Firefox_update_manifest.json]
FF Extension: (Google Translator for Firefox) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\translator@zoli.bod.xpi [2018-12-02]
FF Extension: (Gesturefy) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\{506e023c-7f2b-40a3-8066-bc5deb40aebe}.xpi [2021-04-02]
FF Extension: (FormApps Extension) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\{69F080C9-A1D8-42F8-BD83-3D54D4BC81B3}.xpi [2017-10-03]
FF Extension: (Video DownloadHelper) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-12-16]
FF Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\rcwkdnwj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-05-20]
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.19 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-09-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.371.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.371.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2025-07-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-09-08] (Microsoft Corporation -> Microsoft Corporation)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2026-09-21]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-06-04]
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Jana a Ivo\AppData\Local\Microsoft\Edge\User Data\Default [2026-09-17]
Error reading preferences. Please make sure ESET "Secure Browser" option is disabled. <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-09-17] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Jana a Ivo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2026-07-06] [UpdateUrl:0] <==== ATTENTION
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [182776 2026-08-03] (Adobe Inc. -> Adobe Inc.)
R2 cgm.ebooking-1; C:\CGMSERVER\bin\ebooking-1\cgm.ebooking-1.exe [35680 2019-06-21] (CompuGroup Medical Česká republika s.r.o. -> Microsoft)
R2 cgm.ecommunication-1; C:\CGMSERVER\bin\ecommunication-1\cgm.ecommunication-1.exe [95488 2025-01-07] (CompuGroup Medical Česká republika s.r.o. -> CompuGroup Medical Česká republika s.r.o.)
R2 cgm.erepository-1; C:\CGMSERVER\bin\erepository-1\cgm.erepository-1.exe [27904 2025-01-07] (CompuGroup Medical Česká republika s.r.o. -> CompuGroup Medical Česká republika s.r.o.)
R2 cgm.etrzby-1; C:\CGMSERVER\bin\etrzby-1\cgm.etrzby-1.exe [22112 2017-05-19] (CompuGroup Medical Česká republika s.r.o. -> CompuGroup Medical Česká republika s.r.o.) [File not signed]
R2 cgm.jetty; C:\CGMSERVER\cgm.jetty.exe [110080 2020-01-22] (The Apache Software Foundation -> Apache Software Foundation)
R2 cgm.servercore; C:\CGMSERVER\bin\core\cgm.servercore.exe [30344 2026-03-26] (CompuGroup Medical Česká republika s.r.o. -> Microsoft)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13288288 2025-10-15] (Microsoft Corporation -> Microsoft Corporation)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5745384 2026-08-29] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [5058912 2026-08-29] (ESET, spol. s r.o. -> ESET)
R2 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [5058912 2026-08-29] (ESET, spol. s r.o. -> ESET)
S3 HCS.MedConnect.Service; C:\CGMSERVER\bin\medical-net\MedConnect\HCS.MedConnect.Service.exe [46080 2016-11-03] (HCS GmbH) [File not signed]
R2 HCS.MEDCONNECT.SERVICEMANAGER; C:\CGMSERVER\bin\medical-net\MedConnect.ServiceManager\HCS.MedConnect.ServiceManager.exe [91648 2016-11-03] (HCS GmbH) [File not signed]
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2026-06-25] (HP Inc. -> HP Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.)
S3 I.CA Maintenance Service2; C:\Program Files (x86)\I.CA\I.CA Maintenance2\ICAMaintenance.exe [299336 2021-02-08] (Prvni certifikacni autorita, a.s. -> I.CA, a.s.)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24080.9-0\MpDefenderCoreService.exe [1431160 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2019-02-01] (HP Inc.) [File not signed]
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2019-02-01] (HP Inc.) [File not signed]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24080.9-0\NisSrv.exe [3199656 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24080.9-0\MsMpEng.exe [133704 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 cgm.postgres; C:/CGMSERVER/bin/pgsql/bin/pg_ctl.exe runservice -N "cgm.postgres" -D "C:/CGMSERVER/data/pgsql" (No File)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvle.inf_amd64_c4410ab03e8e99d7\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvle.inf_amd64_c4410ab03e8e99d7\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [File not signed]
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [146856 2015-03-10] (BoiseTest -> Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [21928 2015-03-10] (BoiseTest -> Windows (R) Win 7 DDK provider)
S3 Dot4Scan; C:\WINDOWS\system32\DRIVERS\Dot4Scan.sys [14760 2015-03-10] (BoiseTest -> Microsoft Corporation)
S3 dot4usb; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [43944 2015-03-10] (BoiseTest -> Microsoft Corporation)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [234512 2026-08-29] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [143056 2026-08-29] (Microsoft Windows Hardware Compatibility Publisher -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [17880 2026-08-29] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [374992 2026-08-29] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [57920 2026-08-29] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [83712 2026-08-29] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [127592 2026-08-29] (ESET, spol. s r.o. -> ESET)
S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [24064 2023-11-15] (Microsoft Corporation) [File not signed]
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [22080 2024-10-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [602392 2024-10-23] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2024-10-23] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-9-12 11:53 - 2026-09-12 11:53 - 000002061 _____ C:\ProgramData\Desktop\Adobe Acrobat.lnk
2026-8-23 11:45 - 2026-08-23 11:45 - 000001969 _____ C:\ProgramData\Desktop\Prosba o vzdálenou pomoc.lnk
2026-8-23 11:45 - 2026-08-23 11:45 - 000001944 _____ C:\ProgramData\Desktop\PC DOKTOR.lnk
2026-09-21 10:32 - 2026-09-21 10:33 - 000028939 _____ C:\Users\Jana a Ivo\Downloads\FRST.txt
2026-09-21 10:32 - 2026-09-21 10:32 - 000000000 ____D C:\FRST
2026-09-21 10:24 - 2026-09-21 10:25 - 002455552 _____ (Farbar) C:\Users\Jana a Ivo\Downloads\FRST64.exe
2026-09-21 10:17 - 2026-09-21 10:17 - 002139648 _____ (Farbar) C:\Users\Jana a Ivo\Downloads\FRST.exe
2026-09-17 09:22 - 2026-09-17 10:43 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-09-16 15:11 - 2026-09-17 15:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2026-08-25 10:42 - 2026-08-25 10:42 - 000174835 _____ C:\Users\Jana a Ivo\Downloads\podminky-poskytovani-sluzby-chytre-dobijeni.pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-09-21 10:32 - 2021-12-17 18:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-09-21 10:30 - 2017-07-25 14:41 - 000000000 ____D C:\Users\Jana a Ivo\AppData\Local\ClassicShell
2026-09-21 09:43 - 2022-02-10 11:39 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-09-21 09:40 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-21 09:36 - 2018-06-18 18:45 - 000000000 ____D C:\Users\Jana a Ivo\AppData\Local\D3DSCache
2026-09-20 19:01 - 2017-08-31 17:45 - 000000000 ____D C:\ProgramData\NVIDIA
2026-09-20 09:51 - 2020-06-12 17:03 - 000003638 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-09-20 09:51 - 2020-06-12 17:03 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-09-18 09:33 - 2020-06-12 16:42 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-09-17 15:55 - 2021-06-20 17:21 - 000000000 ____D C:\Users\Jana a Ivo\AppData\Roaming\vlc
2026-09-17 10:43 - 2026-08-20 22:47 - 000002137 _____ C:\Users\Jana a Ivo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-17 10:43 - 2021-06-04 23:59 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-17 10:08 - 2017-11-23 17:14 - 000000000 ____D C:\Users\Jana a Ivo\AppData\Local\Packages
2026-09-17 09:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-09-17 09:39 - 2017-07-31 18:15 - 000001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-09-17 09:22 - 2026-05-27 16:14 - 000402048 _____ (Mozilla Foundation) C:\Users\Jana a Ivo\Desktop\Firefox.exe
2026-09-16 15:11 - 2017-07-25 17:16 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-09-16 09:05 - 2022-05-11 15:49 - 001972838 _____ C:\WINDOWS\system32\perfh005.dat
2026-09-16 09:05 - 2022-05-11 15:49 - 000532890 _____ C:\WINDOWS\system32\perfc005.dat
2026-09-16 09:05 - 2020-06-12 16:55 - 000138034 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-09-16 09:05 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2026-09-16 09:01 - 2020-06-12 17:03 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-09-16 09:01 - 2020-06-12 16:42 - 000008192 ___SH C:\DumpStack.log.tmp
2026-09-16 09:00 - 2020-06-12 16:15 - 000000000 ____D C:\Users\Jana a Ivo
2026-09-16 09:00 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-09-15 15:12 - 2025-02-07 10:17 - 000003586 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3178504301-1335594183-2692845351-1001
2026-09-15 15:12 - 2021-12-13 16:35 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3178504301-1335594183-2692845351-1001
2026-09-15 15:12 - 2020-06-12 17:03 - 000003390 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3178504301-1335594183-2692845351-1001
2026-09-15 15:12 - 2020-06-12 16:15 - 000002443 _____ C:\Users\Jana a Ivo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-09-12 11:53 - 2022-10-14 09:43 - 000002146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-09-12 11:53 - 2022-10-14 09:43 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2026-09-12 11:53 - 2020-06-12 17:03 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2026-09-12 10:53 - 2017-07-25 15:45 - 000000000 ____D C:\Program Files (x86)\Dialog MIS
2026-09-12 09:51 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-09-05 21:41 - 2019-09-04 18:07 - 000000000 ____D C:\ProgramData\Zoner
2026-09-03 13:15 - 2021-06-17 09:42 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-08-29 06:43 - 2024-10-11 15:41 - 000374992 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys
2026-08-29 06:43 - 2024-10-11 15:41 - 000234512 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys
2026-08-29 06:43 - 2024-10-11 15:41 - 000143056 _____ (ESET) C:\WINDOWS\system32\Drivers\edevmon.sys
2026-08-29 06:43 - 2024-10-11 15:41 - 000127592 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys
2026-08-29 06:43 - 2024-10-11 15:41 - 000083712 _____ (ESET) C:\WINDOWS\system32\Drivers\epfw.sys
2026-08-29 06:43 - 2024-10-11 15:41 - 000057920 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys
2026-08-29 06:43 - 2024-10-03 09:21 - 000017880 _____ (ESET) C:\WINDOWS\system32\Drivers\eelam.sys
2026-08-26 11:31 - 2022-05-06 23:22 - 000441648 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-08-23 11:45 - 2021-02-19 16:30 - 000001969 _____ C:\Users\Public\Desktop\Prosba o vzdálenou pomoc.lnk
2026-08-23 11:45 - 2017-07-25 15:46 - 000001944 _____ C:\Users\Public\Desktop\PC DOKTOR.lnk
2026-08-23 11:45 - 2017-07-25 15:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CompuGroup Medical
2026-08-22 15:27 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
==================== Files in the root of some directories ========
2018-03-22 16:23 - 2018-03-22 16:23 - 000000600 _____ () C:\Users\Jana a Ivo\AppData\Roaming\winscp.rnd
2023-09-18 08:51 - 2023-09-18 08:51 - 000000017 _____ () C:\Users\Jana a Ivo\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================