Email od UPC - Botnet - malware
Napsal: 13 led 2018 00:29
Zdravím,
chtěl bych požádat o prověření níže uvedeného logu s podezřením na výskyt malwaru.
Předem děkuji za pomoc
LOG:
Logfile of random's system information tool 1.16 (written by random/random)
Run by Alice at 2018-01-13 00:28:25
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 389 GB (85%) free of 457 GB
Total RAM: 3204 MB (45% free)
X86
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:28:27, on 13.1.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18894)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\LPlatSvc.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Dolby Advanced Audio v2\pcee4.exe
C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent.exe
C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\PDF24\pdf24.exe
C:\PROGRA~1\Lenovo\HOTKEY\MKRMSG.EXE
C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\ThinkPad\Utilities\SCHTASK.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\conhost.exe
C:\Users\Alice\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Alice\Downloads\RSIT.exe
C:\Program Files\trend micro\Alice_RSIT.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
O4 - HKLM\..\Run: [PWMTRV] rundll32 "C:\Program Files\ThinkPad\Utilities\PWMTR32V.DLL",PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SACpl.exe /t
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files\Dolby Advanced Audio v2\pcee4.exe" -autostart
O4 - HKLM\..\Run: [cAudioFilterAgent] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe
O4 - HKLM\..\Run: [ForteConfig] C:\Program Files\Conexant\ForteConfig\fmapp.exe
O4 - HKLM\..\Run: [IMSS] "C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [HotKeysCmds] "C:\Windows\system32\hkcmd.exe"
O4 - HKLM\..\Run: [Persistence] "C:\Windows\system32\igfxpers.exe"
O4 - HKLM\..\Run: [PDFPrint] "C:\Program Files\PDF24\pdf24.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\system32\IntelCpHeciSvc.exe
O23 - Service: @C:\Windows\system32\CxAudMsg32.exe,-100 (CxAudMsg) - Conexant Systems Inc. - C:\Windows\system32\CxAudMsg32.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Lenovo PM Service (IBMPMSVC) - Lenovo. - C:\Windows\system32\ibmpmsvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Lenovo Platform Service (LPlatSvc) - Lenovo. - C:\Windows\system32\LPlatSvc.exe
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\system32\NLSSRV32.EXE
O23 - Service: PDF24 - Geek Software GmbH - C:\Program Files\PDF24\pdf24.exe
O23 - Service: Power Manager Service (Power Manager DBC Service) - Lenovo - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\Windows\system32\SAsrv.exe
O23 - Service: TeamViewer 12 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
--
End of file - 8478 bytes
======Scheduled tasks folder======
C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\Adobe Flash Player PPAPI Notifier - C:\Windows\system32\Macromed\Flash\FlashUtil32_28_0_0_137_pepper.exe -check pepperplugin
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\Avast Emergency Update - C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\PMTask - C:\Program Files\ThinkPad\Utilities\PwmIdTsv.exe
C:\Windows\system32\tasks\Synaptics TouchPad Enhancements - \Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\Setup\EOSNotify - %windir%\system32\EOSNotify.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-3223290434-716713168-56790289-1000 - "C:\Users\Alice\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe"
C:\Windows\system32\tasks\Avast Software\Overseer - C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe
=========Google Chrome=========
C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace 0.10
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty 0.10
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 1 Adobe Acrobat 15.1.0.6
Extension eofcbnmajmjmplflapaojjnihcjkigck 2 Avast SafePrice 12.0.330
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabulky 1.2
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension gighmmpiobklfepjocnamgkkbiglidom 1 AdBlock 3.22.1
Extension gomekmidlodglbbmalcneegieacbdmki 0 Avast Online Security 12.0.296
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.5
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.3
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 6317.1002.0.5
Homepage:
default_search_provider.search_url:
C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:
[HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck]
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki]
"Path"=
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-11-16 820672]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2018-01-04 246120]
"PWMTRV"=rundll32 C:\Program Files\ThinkPad\Utilities\PWMTR32V.DLL,PwrMgrBkGndMonitor []
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"Dolby Advanced Audio v2"=C:\Program Files\Dolby Advanced Audio v2\pcee4.exe [2012-08-31 508656]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe [2012-06-14 833184]
"ForteConfig"=C:\Program Files\Conexant\ForteConfig\fmapp.exe [2010-10-26 49568]
"IMSS"=C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2013-05-31 132920]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2013-06-06 181232]
"Persistence"=C:\Windows\system32\igfxpers.exe [2013-06-06 189936]
"PDFPrint"=C:\Program Files\PDF24\pdf24.exe [2017-12-18 433288]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath"="C:\Program Files\Google\Chrome\Application\63.0.3239.132\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2018-01-13 00:25:24 ----D---- C:\rsit
2018-01-13 00:25:24 ----D---- C:\Program Files\trend micro
2018-01-13 00:10:47 ----D---- C:\ProgramData\SWCUTemp
2018-01-09 11:39:36 ----A---- C:\Windows\system32\mshtml.dll
2018-01-09 11:39:35 ----A---- C:\Windows\system32\jscript9.dll
2018-01-09 11:39:35 ----A---- C:\Windows\system32\ieframe.dll
2018-01-09 11:39:33 ----A---- C:\Windows\system32\wininet.dll
2018-01-09 11:39:33 ----A---- C:\Windows\system32\ntkrnlpa.exe
2018-01-09 11:39:33 ----A---- C:\Windows\system32\iertutil.dll
2018-01-09 11:39:32 ----A---- C:\Windows\system32\urlmon.dll
2018-01-09 11:39:32 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-01-09 11:39:31 ----A---- C:\Windows\system32\vbscript.dll
2018-01-09 11:39:31 ----A---- C:\Windows\system32\kerberos.dll
2018-01-09 11:39:31 ----A---- C:\Windows\system32\jscript.dll
2018-01-09 11:39:30 ----A---- C:\Windows\system32\shell32.dll
2018-01-09 11:39:29 ----A---- C:\Windows\system32\ntdll.dll
2018-01-09 11:39:29 ----A---- C:\Windows\system32\lsasrv.dll
2018-01-09 11:39:29 ----A---- C:\Windows\system32\drivers\ntfs.sys
2018-01-09 11:39:28 ----A---- C:\Windows\system32\winload.exe
2018-01-09 11:39:28 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-01-09 11:39:28 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-01-09 11:39:28 ----A---- C:\Windows\system32\kernel32.dll
2018-01-09 11:39:28 ----A---- C:\Windows\system32\ieui.dll
2018-01-09 11:39:28 ----A---- C:\Windows\system32\atmfd.dll
2018-01-09 11:39:27 ----A---- C:\Windows\system32\sysmain.dll
2018-01-09 11:39:27 ----A---- C:\Windows\system32\rpcrt4.dll
2018-01-09 11:39:27 ----A---- C:\Windows\system32\ole32.dll
2018-01-09 11:39:27 ----A---- C:\Windows\system32\drivers\srv2.sys
2018-01-09 11:39:27 ----A---- C:\Windows\system32\drivers\srv.sys
2018-01-09 11:39:27 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-01-09 11:39:27 ----A---- C:\Windows\system32\advapi32.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\win32k.sys
2018-01-09 11:39:26 ----A---- C:\Windows\system32\rpcss.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\PeerDistSvc.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\msxml6.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\msv1_0.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\msfeeds.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\MPSSVC.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\KernelBase.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\inetcomm.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\iedkcs32.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\halmacpi.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\hal.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\FirewallAPI.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\ExplorerFrame.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\drivers\ndis.sys
2018-01-09 11:39:26 ----A---- C:\Windows\system32\drivers\http.sys
2018-01-09 11:39:26 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\winsrv.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\webcheck.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\srcore.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\spoolsv.exe
2018-01-09 11:39:25 ----A---- C:\Windows\system32\smss.exe
2018-01-09 11:39:25 ----A---- C:\Windows\system32\rpchttp.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\pnrpsvc.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\PeerDistWSDDiscoProv.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\p2psvc.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\P2P.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\msrating.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\ieapfltr.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\IcCoinstall.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\halacpi.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\dxtmsft.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\drivers\dfsc.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\consent.exe
2018-01-09 11:39:25 ----A---- C:\Windows\system32\conhost.exe
2018-01-09 11:39:25 ----A---- C:\Windows\system32\authui.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\vmicsvc.exe
2018-01-09 11:39:24 ----A---- C:\Windows\system32\sspicli.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\PeerDist.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\mscms.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\ie4uinit.exe
2018-01-09 11:39:24 ----A---- C:\Windows\system32\icm32.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\icfupgd.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\fontsub.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\drivers\srvnet.sys
2018-01-09 11:39:24 ----A---- C:\Windows\system32\drivers\pacer.sys
2018-01-09 11:39:24 ----A---- C:\Windows\system32\drivers\netbios.sys
2018-01-09 11:39:24 ----A---- C:\Windows\system32\csrsrv.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\appinfo.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\wshqos.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\wshnetbs.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\wfapigp.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\WcsPlugInService.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\vmictimeprovider.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\vmicres.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\traffic.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\PeerDistHttpTrans.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\jscript9diag.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\INETRES.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\dxtrans.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\drivers\mpsdrv.sys
2018-01-09 11:39:23 ----A---- C:\Windows\system32\atmlib.dll
2018-01-09 11:39:22 ----A---- C:\Windows\system32\schannel.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\wdigest.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\TSpkg.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\sspisrv.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\srclient.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\secur32.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\rstrui.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\occache.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\ncrypt.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\mshtmled.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\lsass.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\lpk.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\jsproxy.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\inseng.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\ieUnatt.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\iesetup.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\iernonce.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\drivers\appid.sys
2018-01-09 11:39:21 ----A---- C:\Windows\system32\dciman32.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\cryptbase.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\credssp.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\comcat.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\bcrypt.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\auditpol.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\appidsvc.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\appidapi.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\apisetschema.dll
2018-01-09 11:39:20 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-01-09 11:39:20 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-01-09 11:39:20 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-01-09 11:39:20 ----A---- C:\Windows\system32\oleres.dll
2018-01-09 11:39:20 ----A---- C:\Windows\system32\msxml6r.dll
2018-01-09 11:39:20 ----A---- C:\Windows\system32\msobjs.dll
2018-01-09 11:39:20 ----A---- C:\Windows\system32\msaudite.dll
2018-01-09 11:39:20 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-01-09 11:39:20 ----A---- C:\Windows\system32\adtschema.dll
2018-01-04 22:34:07 ----A---- C:\Windows\system32\drivers\aswHdsKe.sys
2018-01-04 22:34:00 ----A---- C:\Windows\system32\aswBoot.exe
2017-12-27 13:34:34 ----D---- C:\Program Files\PDF24
======List of files/folders modified in the last 1 month======
2018-01-13 00:26:01 ----D---- C:\Windows\Temp
2018-01-13 00:25:48 ----D---- C:\Windows\Prefetch
2018-01-13 00:25:24 ----RD---- C:\Program Files
2018-01-13 00:15:44 ----D---- C:\Windows\System32
2018-01-13 00:15:44 ----D---- C:\Windows\inf
2018-01-13 00:15:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-01-13 00:10:47 ----HD---- C:\ProgramData
2018-01-12 23:58:13 ----D---- C:\Windows\system32\config
2018-01-12 16:05:30 ----D---- C:\Windows\rescache
2018-01-11 23:03:57 ----D---- C:\Windows\Microsoft.NET
2018-01-11 23:01:23 ----RSD---- C:\Windows\assembly
2018-01-10 22:44:31 ----D---- C:\Windows\system32\drivers
2018-01-10 14:13:10 ----D---- C:\Windows\system32\MRT
2018-01-10 14:04:31 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2018-01-10 14:04:22 ----AC---- C:\Windows\system32\MRT.exe
2018-01-10 14:03:23 ----SHD---- C:\Windows\Installer
2018-01-10 13:59:30 ----D---- C:\Windows\winsxs
2018-01-10 13:58:42 ----SHD---- C:\System Volume Information
2018-01-10 10:45:39 ----D---- C:\Program Files\TeamViewer
2018-01-10 10:44:55 ----D---- C:\Windows\system32\cs-CZ
2018-01-10 10:44:55 ----D---- C:\Windows\ehome
2018-01-10 10:44:55 ----D---- C:\Program Files\Internet Explorer
2018-01-10 10:44:53 ----D---- C:\Windows\system32\en-US
2018-01-10 10:44:50 ----D---- C:\Windows\AppPatch
2018-01-10 10:44:49 ----D---- C:\Windows\system32\migration
2018-01-10 10:44:49 ----D---- C:\Windows\system32\Boot
2018-01-10 10:44:47 ----D---- C:\Windows\system32\DriverStore
2018-01-09 11:42:21 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2018-01-09 11:42:20 ----D---- C:\Windows\system32\Macromed
2018-01-09 11:37:35 ----D---- C:\Windows\system32\catroot2
2018-01-04 22:34:14 ----D---- C:\Windows\system32\Tasks
2017-12-27 12:10:04 ----D---- C:\Windows\system32\drivers\UMDF
2017-12-14 18:03:26 ----D---- C:\Windows\system32\Setup
File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswbidsh;aswbidsh; C:\Windows\system32\drivers\aswbidshx.sys [2018-01-04 157376]
R0 aswblog;aswblog; C:\Windows\system32\drivers\aswblogx.sys [2018-01-04 276696]
R0 aswbuniv;aswbuniv; C:\Windows\system32\drivers\aswbunivx.sys [2018-01-04 50344]
R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2018-01-04 70832]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2018-01-04 294680]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 173288]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 aswArPot;aswArPot; C:\Windows\system32\drivers\aswArPot.sys [2018-01-04 158224]
R1 aswbidsdriver;aswbidsdriver; C:\Windows\system32\drivers\aswbidsdriverx.sys [2018-01-04 255584]
R1 aswHdsKe;aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [2018-01-04 118144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2018-01-04 99528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2018-01-04 783104]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2018-01-10 390256]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 TPPWRIF;TPPWRIF; C:\Windows\System32\drivers\Tppwr32v.sys [2017-07-27 37216]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2018-01-10 123880]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2018-01-04 151328]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2017-10-28 4877928]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2012-09-20 1303712]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2017-09-15 74112]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2013-05-21 3764224]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2013-05-24 289792]
R3 MEI;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECI.sys [2013-05-14 56432]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2013-04-24 347888]
R3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 35968]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 aswHwid;aswHwid; C:\Windows\system32\drivers\aswHwid.sys [2018-01-04 42824]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 ivusb;Initio Driver for USB Default Controller; C:\Windows\system32\DRIVERS\ivusb.sys [2010-07-29 25112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 pmxdrv;pmxdrv; \??\C:\Windows\system32\drivers\pmxdrv.sys [2017-12-10 816792]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2015-04-30 20256]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2018-01-04 301168]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\cscsvc.dll
R2 CxAudMsg;@C:\Windows\system32\CxAudMsg32.exe,-100; C:\Windows\system32\CxAudMsg32.exe [2012-06-08 193184]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll"=%SystemRoot%\system32\diagtrack.dll
R2 IBMPMSVC;Lenovo PM Service; C:\Windows\system32\ibmpmsvc.exe [2017-09-15 685136]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-12-10 583680]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-05-31 129848]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-05-31 167736]
R2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2017-06-01 117320]
R2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [2017-04-03 113224]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-05-31 364856]
R2 LPlatSvc;Lenovo Platform Service; C:\Windows\system32\LPlatSvc.exe [2017-09-15 747088]
R2 nlsX86cc;Nalpeiron Licensing Service; C:\Windows\system32\NLSSRV32.EXE [2012-11-08 70152]
R2 PDF24;PDF24; C:\Program Files\PDF24\pdf24.exe [2017-12-18 433288]
R2 SAService;Conexant SmartAudio service; C:\Windows\system32\SAsrv.exe [2011-01-07 446592]
R2 TeamViewer;TeamViewer 12; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2017-08-29 10803440]
R2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2016-12-19 123984]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2016-06-13 132112]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [2018-01-04 5906816]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
R3 Power Manager DBC Service;Power Manager Service; C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE [2017-07-27 1669488]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2017-10-28 153168]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2018-01-09 272384]
S3 AppMgmt;@appmgmts.dll,-3250; %SystemRoot%\system32\svchost.exe -k netsvcs;"ServiceDll"=%SystemRoot%\System32\appmgmts.dll
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\system32\IntelCpHeciSvc.exe [2013-06-06 279024]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2017-10-28 153168]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-12-29 104960]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2012-12-10 627744]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; %SystemRoot%\System32\svchost.exe -k PeerDist;"ServiceDll"=%SystemRoot%\system32\peerdistsvc.dll
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll"=%SystemRoot%\system32\storsvc.dll
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\umrdp.dll
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2017-04-21 47224]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
-----------------EOF-----------------
chtěl bych požádat o prověření níže uvedeného logu s podezřením na výskyt malwaru.
Předem děkuji za pomoc
LOG:
Logfile of random's system information tool 1.16 (written by random/random)
Run by Alice at 2018-01-13 00:28:25
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 389 GB (85%) free of 457 GB
Total RAM: 3204 MB (45% free)
X86
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:28:27, on 13.1.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18894)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\LPlatSvc.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Dolby Advanced Audio v2\pcee4.exe
C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent.exe
C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\PDF24\pdf24.exe
C:\PROGRA~1\Lenovo\HOTKEY\MKRMSG.EXE
C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\ThinkPad\Utilities\SCHTASK.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\conhost.exe
C:\Users\Alice\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Alice\Downloads\RSIT.exe
C:\Program Files\trend micro\Alice_RSIT.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
O4 - HKLM\..\Run: [PWMTRV] rundll32 "C:\Program Files\ThinkPad\Utilities\PWMTR32V.DLL",PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SACpl.exe /t
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files\Dolby Advanced Audio v2\pcee4.exe" -autostart
O4 - HKLM\..\Run: [cAudioFilterAgent] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe
O4 - HKLM\..\Run: [ForteConfig] C:\Program Files\Conexant\ForteConfig\fmapp.exe
O4 - HKLM\..\Run: [IMSS] "C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [HotKeysCmds] "C:\Windows\system32\hkcmd.exe"
O4 - HKLM\..\Run: [Persistence] "C:\Windows\system32\igfxpers.exe"
O4 - HKLM\..\Run: [PDFPrint] "C:\Program Files\PDF24\pdf24.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\system32\IntelCpHeciSvc.exe
O23 - Service: @C:\Windows\system32\CxAudMsg32.exe,-100 (CxAudMsg) - Conexant Systems Inc. - C:\Windows\system32\CxAudMsg32.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Lenovo PM Service (IBMPMSVC) - Lenovo. - C:\Windows\system32\ibmpmsvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Lenovo Platform Service (LPlatSvc) - Lenovo. - C:\Windows\system32\LPlatSvc.exe
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\system32\NLSSRV32.EXE
O23 - Service: PDF24 - Geek Software GmbH - C:\Program Files\PDF24\pdf24.exe
O23 - Service: Power Manager Service (Power Manager DBC Service) - Lenovo - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\Windows\system32\SAsrv.exe
O23 - Service: TeamViewer 12 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
--
End of file - 8478 bytes
======Scheduled tasks folder======
C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\Adobe Flash Player PPAPI Notifier - C:\Windows\system32\Macromed\Flash\FlashUtil32_28_0_0_137_pepper.exe -check pepperplugin
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\Avast Emergency Update - C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\PMTask - C:\Program Files\ThinkPad\Utilities\PwmIdTsv.exe
C:\Windows\system32\tasks\Synaptics TouchPad Enhancements - \Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\Setup\EOSNotify - %windir%\system32\EOSNotify.exe
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-3223290434-716713168-56790289-1000 - "C:\Users\Alice\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe"
C:\Windows\system32\tasks\Avast Software\Overseer - C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe
=========Google Chrome=========
C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace 0.10
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty 0.10
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 1 Adobe Acrobat 15.1.0.6
Extension eofcbnmajmjmplflapaojjnihcjkigck 2 Avast SafePrice 12.0.330
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabulky 1.2
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension gighmmpiobklfepjocnamgkkbiglidom 1 AdBlock 3.22.1
Extension gomekmidlodglbbmalcneegieacbdmki 0 Avast Online Security 12.0.296
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.5
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.3
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 6317.1002.0.5
Homepage:
default_search_provider.search_url:
C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:
[HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck]
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki]
"Path"=
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-11-16 820672]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2018-01-04 246120]
"PWMTRV"=rundll32 C:\Program Files\ThinkPad\Utilities\PWMTR32V.DLL,PwrMgrBkGndMonitor []
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616]
"Dolby Advanced Audio v2"=C:\Program Files\Dolby Advanced Audio v2\pcee4.exe [2012-08-31 508656]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe [2012-06-14 833184]
"ForteConfig"=C:\Program Files\Conexant\ForteConfig\fmapp.exe [2010-10-26 49568]
"IMSS"=C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2013-05-31 132920]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2013-06-06 181232]
"Persistence"=C:\Windows\system32\igfxpers.exe [2013-06-06 189936]
"PDFPrint"=C:\Program Files\PDF24\pdf24.exe [2017-12-18 433288]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath"="C:\Program Files\Google\Chrome\Application\63.0.3239.132\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2018-01-13 00:25:24 ----D---- C:\rsit
2018-01-13 00:25:24 ----D---- C:\Program Files\trend micro
2018-01-13 00:10:47 ----D---- C:\ProgramData\SWCUTemp
2018-01-09 11:39:36 ----A---- C:\Windows\system32\mshtml.dll
2018-01-09 11:39:35 ----A---- C:\Windows\system32\jscript9.dll
2018-01-09 11:39:35 ----A---- C:\Windows\system32\ieframe.dll
2018-01-09 11:39:33 ----A---- C:\Windows\system32\wininet.dll
2018-01-09 11:39:33 ----A---- C:\Windows\system32\ntkrnlpa.exe
2018-01-09 11:39:33 ----A---- C:\Windows\system32\iertutil.dll
2018-01-09 11:39:32 ----A---- C:\Windows\system32\urlmon.dll
2018-01-09 11:39:32 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-01-09 11:39:31 ----A---- C:\Windows\system32\vbscript.dll
2018-01-09 11:39:31 ----A---- C:\Windows\system32\kerberos.dll
2018-01-09 11:39:31 ----A---- C:\Windows\system32\jscript.dll
2018-01-09 11:39:30 ----A---- C:\Windows\system32\shell32.dll
2018-01-09 11:39:29 ----A---- C:\Windows\system32\ntdll.dll
2018-01-09 11:39:29 ----A---- C:\Windows\system32\lsasrv.dll
2018-01-09 11:39:29 ----A---- C:\Windows\system32\drivers\ntfs.sys
2018-01-09 11:39:28 ----A---- C:\Windows\system32\winload.exe
2018-01-09 11:39:28 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-01-09 11:39:28 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-01-09 11:39:28 ----A---- C:\Windows\system32\kernel32.dll
2018-01-09 11:39:28 ----A---- C:\Windows\system32\ieui.dll
2018-01-09 11:39:28 ----A---- C:\Windows\system32\atmfd.dll
2018-01-09 11:39:27 ----A---- C:\Windows\system32\sysmain.dll
2018-01-09 11:39:27 ----A---- C:\Windows\system32\rpcrt4.dll
2018-01-09 11:39:27 ----A---- C:\Windows\system32\ole32.dll
2018-01-09 11:39:27 ----A---- C:\Windows\system32\drivers\srv2.sys
2018-01-09 11:39:27 ----A---- C:\Windows\system32\drivers\srv.sys
2018-01-09 11:39:27 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-01-09 11:39:27 ----A---- C:\Windows\system32\advapi32.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\win32k.sys
2018-01-09 11:39:26 ----A---- C:\Windows\system32\rpcss.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\PeerDistSvc.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\msxml6.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\msv1_0.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\msfeeds.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\MPSSVC.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\KernelBase.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\inetcomm.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\iedkcs32.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\halmacpi.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\hal.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\FirewallAPI.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\ExplorerFrame.dll
2018-01-09 11:39:26 ----A---- C:\Windows\system32\drivers\ndis.sys
2018-01-09 11:39:26 ----A---- C:\Windows\system32\drivers\http.sys
2018-01-09 11:39:26 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\winsrv.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\webcheck.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\srcore.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\spoolsv.exe
2018-01-09 11:39:25 ----A---- C:\Windows\system32\smss.exe
2018-01-09 11:39:25 ----A---- C:\Windows\system32\rpchttp.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\pnrpsvc.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\PeerDistWSDDiscoProv.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\p2psvc.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\P2P.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\msrating.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\ieapfltr.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\IcCoinstall.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\halacpi.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\dxtmsft.dll
2018-01-09 11:39:25 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\drivers\dfsc.sys
2018-01-09 11:39:25 ----A---- C:\Windows\system32\consent.exe
2018-01-09 11:39:25 ----A---- C:\Windows\system32\conhost.exe
2018-01-09 11:39:25 ----A---- C:\Windows\system32\authui.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\vmicsvc.exe
2018-01-09 11:39:24 ----A---- C:\Windows\system32\sspicli.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\PeerDist.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\mscms.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\ie4uinit.exe
2018-01-09 11:39:24 ----A---- C:\Windows\system32\icm32.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\icfupgd.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\fontsub.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\drivers\srvnet.sys
2018-01-09 11:39:24 ----A---- C:\Windows\system32\drivers\pacer.sys
2018-01-09 11:39:24 ----A---- C:\Windows\system32\drivers\netbios.sys
2018-01-09 11:39:24 ----A---- C:\Windows\system32\csrsrv.dll
2018-01-09 11:39:24 ----A---- C:\Windows\system32\appinfo.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\wshqos.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\wshnetbs.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\wfapigp.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\WcsPlugInService.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\vmictimeprovider.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\vmicres.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\traffic.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\PeerDistHttpTrans.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\jscript9diag.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\INETRES.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\dxtrans.dll
2018-01-09 11:39:23 ----A---- C:\Windows\system32\drivers\mpsdrv.sys
2018-01-09 11:39:23 ----A---- C:\Windows\system32\atmlib.dll
2018-01-09 11:39:22 ----A---- C:\Windows\system32\schannel.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-01-09 11:39:21 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\wdigest.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\TSpkg.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\sspisrv.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\srclient.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\secur32.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\rstrui.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\occache.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\ncrypt.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\mshtmled.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\lsass.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\lpk.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\jsproxy.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\inseng.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\ieUnatt.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\iesetup.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\iernonce.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\drivers\appid.sys
2018-01-09 11:39:21 ----A---- C:\Windows\system32\dciman32.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\cryptbase.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\credssp.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\comcat.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\bcrypt.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\auditpol.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\appidsvc.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-01-09 11:39:21 ----A---- C:\Windows\system32\appidapi.dll
2018-01-09 11:39:21 ----A---- C:\Windows\system32\apisetschema.dll
2018-01-09 11:39:20 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-01-09 11:39:20 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-01-09 11:39:20 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-01-09 11:39:20 ----A---- C:\Windows\system32\oleres.dll
2018-01-09 11:39:20 ----A---- C:\Windows\system32\msxml6r.dll
2018-01-09 11:39:20 ----A---- C:\Windows\system32\msobjs.dll
2018-01-09 11:39:20 ----A---- C:\Windows\system32\msaudite.dll
2018-01-09 11:39:20 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-01-09 11:39:20 ----A---- C:\Windows\system32\adtschema.dll
2018-01-04 22:34:07 ----A---- C:\Windows\system32\drivers\aswHdsKe.sys
2018-01-04 22:34:00 ----A---- C:\Windows\system32\aswBoot.exe
2017-12-27 13:34:34 ----D---- C:\Program Files\PDF24
======List of files/folders modified in the last 1 month======
2018-01-13 00:26:01 ----D---- C:\Windows\Temp
2018-01-13 00:25:48 ----D---- C:\Windows\Prefetch
2018-01-13 00:25:24 ----RD---- C:\Program Files
2018-01-13 00:15:44 ----D---- C:\Windows\System32
2018-01-13 00:15:44 ----D---- C:\Windows\inf
2018-01-13 00:15:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-01-13 00:10:47 ----HD---- C:\ProgramData
2018-01-12 23:58:13 ----D---- C:\Windows\system32\config
2018-01-12 16:05:30 ----D---- C:\Windows\rescache
2018-01-11 23:03:57 ----D---- C:\Windows\Microsoft.NET
2018-01-11 23:01:23 ----RSD---- C:\Windows\assembly
2018-01-10 22:44:31 ----D---- C:\Windows\system32\drivers
2018-01-10 14:13:10 ----D---- C:\Windows\system32\MRT
2018-01-10 14:04:31 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2018-01-10 14:04:22 ----AC---- C:\Windows\system32\MRT.exe
2018-01-10 14:03:23 ----SHD---- C:\Windows\Installer
2018-01-10 13:59:30 ----D---- C:\Windows\winsxs
2018-01-10 13:58:42 ----SHD---- C:\System Volume Information
2018-01-10 10:45:39 ----D---- C:\Program Files\TeamViewer
2018-01-10 10:44:55 ----D---- C:\Windows\system32\cs-CZ
2018-01-10 10:44:55 ----D---- C:\Windows\ehome
2018-01-10 10:44:55 ----D---- C:\Program Files\Internet Explorer
2018-01-10 10:44:53 ----D---- C:\Windows\system32\en-US
2018-01-10 10:44:50 ----D---- C:\Windows\AppPatch
2018-01-10 10:44:49 ----D---- C:\Windows\system32\migration
2018-01-10 10:44:49 ----D---- C:\Windows\system32\Boot
2018-01-10 10:44:47 ----D---- C:\Windows\system32\DriverStore
2018-01-09 11:42:21 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2018-01-09 11:42:20 ----D---- C:\Windows\system32\Macromed
2018-01-09 11:37:35 ----D---- C:\Windows\system32\catroot2
2018-01-04 22:34:14 ----D---- C:\Windows\system32\Tasks
2017-12-27 12:10:04 ----D---- C:\Windows\system32\drivers\UMDF
2017-12-14 18:03:26 ----D---- C:\Windows\system32\Setup
File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswbidsh;aswbidsh; C:\Windows\system32\drivers\aswbidshx.sys [2018-01-04 157376]
R0 aswblog;aswblog; C:\Windows\system32\drivers\aswblogx.sys [2018-01-04 276696]
R0 aswbuniv;aswbuniv; C:\Windows\system32\drivers\aswbunivx.sys [2018-01-04 50344]
R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2018-01-04 70832]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2018-01-04 294680]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 173288]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 aswArPot;aswArPot; C:\Windows\system32\drivers\aswArPot.sys [2018-01-04 158224]
R1 aswbidsdriver;aswbidsdriver; C:\Windows\system32\drivers\aswbidsdriverx.sys [2018-01-04 255584]
R1 aswHdsKe;aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [2018-01-04 118144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2018-01-04 99528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2018-01-04 783104]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2018-01-10 390256]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 TPPWRIF;TPPWRIF; C:\Windows\System32\drivers\Tppwr32v.sys [2017-07-27 37216]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2018-01-10 123880]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2018-01-04 151328]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2017-10-28 4877928]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2012-09-20 1303712]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2017-09-15 74112]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2013-05-21 3764224]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2013-05-24 289792]
R3 MEI;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECI.sys [2013-05-14 56432]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2013-04-24 347888]
R3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 35968]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 aswHwid;aswHwid; C:\Windows\system32\drivers\aswHwid.sys [2018-01-04 42824]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 ivusb;Initio Driver for USB Default Controller; C:\Windows\system32\DRIVERS\ivusb.sys [2010-07-29 25112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 pmxdrv;pmxdrv; \??\C:\Windows\system32\drivers\pmxdrv.sys [2017-12-10 816792]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2015-04-30 20256]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2018-01-04 301168]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\cscsvc.dll
R2 CxAudMsg;@C:\Windows\system32\CxAudMsg32.exe,-100; C:\Windows\system32\CxAudMsg32.exe [2012-06-08 193184]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; %SystemRoot%\System32\svchost.exe -k utcsvc;"ServiceDll"=%SystemRoot%\system32\diagtrack.dll
R2 IBMPMSVC;Lenovo PM Service; C:\Windows\system32\ibmpmsvc.exe [2017-09-15 685136]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-12-10 583680]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-05-31 129848]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-05-31 167736]
R2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2017-06-01 117320]
R2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [2017-04-03 113224]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-05-31 364856]
R2 LPlatSvc;Lenovo Platform Service; C:\Windows\system32\LPlatSvc.exe [2017-09-15 747088]
R2 nlsX86cc;Nalpeiron Licensing Service; C:\Windows\system32\NLSSRV32.EXE [2012-11-08 70152]
R2 PDF24;PDF24; C:\Program Files\PDF24\pdf24.exe [2017-12-18 433288]
R2 SAService;Conexant SmartAudio service; C:\Windows\system32\SAsrv.exe [2011-01-07 446592]
R2 TeamViewer;TeamViewer 12; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2017-08-29 10803440]
R2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2016-12-19 123984]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2016-06-13 132112]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [2018-01-04 5906816]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
R3 Power Manager DBC Service;Power Manager Service; C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE [2017-07-27 1669488]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2017-10-28 153168]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2018-01-09 272384]
S3 AppMgmt;@appmgmts.dll,-3250; %SystemRoot%\system32\svchost.exe -k netsvcs;"ServiceDll"=%SystemRoot%\System32\appmgmts.dll
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\system32\IntelCpHeciSvc.exe [2013-06-06 279024]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2017-10-28 153168]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-12-29 104960]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2012-12-10 627744]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; %SystemRoot%\System32\svchost.exe -k PeerDist;"ServiceDll"=%SystemRoot%\system32\peerdistsvc.dll
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll"=%SystemRoot%\system32\storsvc.dll
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll"=%SystemRoot%\System32\umrdp.dll
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2017-04-21 47224]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
-----------------EOF-----------------